last executing test programs: 4m28.415399059s ago: executing program 0 (id=2186): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000001cc0)={0x11, 0xc, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b703000000000000850000007200000095"], &(0x7f0000001480)='GPL\x00', 0x5, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000380)='kfree\x00', r0, 0x0, 0x4804}, 0x18) unshare(0x2c020400) socket$nl_route(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r1) ptrace(0x10, r1) ptrace$peeksig(0x4209, r1, &(0x7f0000000140)={0x0, 0x0, 0x4e}, &(0x7f0000000fc0)) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000019340)={0x0, r3, 0x0, 0x2000000}, 0x18) r4 = syz_io_uring_setup(0x49a, &(0x7f00000000c0)={0x0, 0x79af, 0x3180, 0x8000, 0x400251}, &(0x7f0000000180)=0x0, &(0x7f0000000300)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4) syz_io_uring_submit(r5, r6, &(0x7f0000000500)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x33, 0x4000, @fd_index=0x1, 0x5, 0x0, 0x0, 0x2, 0x1, {0x2}}) io_uring_enter(r4, 0x627, 0x4c1, 0x43, 0x0, 0x0) 4m27.285626842s ago: executing program 0 (id=2207): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec850000006d000000850000000700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000100)='kfree\x00', r0}, 0x10) openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000080), 0x2) openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000040), 0x8002) socket$nl_netfilter(0x10, 0x3, 0xc) socket$kcm(0x22, 0x2, 0x21) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0xa007ca, &(0x7f00000002c0)={[{@nojournal_checksum}, {@journal_dev={'journal_dev', 0x3d, 0xff}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x5c}}, {@nouid32}, {@resgid}, {@acl}, {@init_itable_val={'init_itable', 0x3d, 0x8d55}}]}, 0x0, 0x483, &(0x7f0000001040)="$eJzs28tvVNUfAPDvvX0APx7tD/EBolaJSaOxpQWVhRuNJsZgNNEFLms7kIaBGlqNIJFiDG5MDImujUujf4E7Y2LUlYlb3bgyJETZALqpuXfuLdNpp1A6ZWrn80lue869Z+ac79zXuefMBNCxBrI/ScS2iPg1Ivpq2YUFBmr/rl05O379ytnxJObmXvszyctdvXJ2vCxavm5rkRlMI9IPk6KShaZPnzk+Vq1WThX54ZkTbw1Pnz7zxDsnxo5VjlVOjh46dPDAyNNPjT7ZkjizuK7ueX9q7+4X37j48viRi2/++HXW3m3F9vo4WmUgC/yvuVzd6vxjerTVlbXZ9rp00t3GhrAiXRGR7a6e/Pzvi664sfP64oUP2to4YE1l96ZNzTfPzgEbWBLtbgHQHuWNPnv+LZc71PVYFy4/W3sAyuK+Viy1Ld2RFmV6Gp5vW2kgIo7M/v15tsQajUMAANT7ePyzw70R8d71r17K+h5981vSuCf//3v+d0cxh9IfEf+PiJ0RcVdE7IqIuyPysvdGxH2rbM/i/k96aZVvuays//dMMbe1sP9X9v6iv6vIbc/j70mOTlYr+4vPZDB6NmX5kWXq+Pb5Xz5ptq2+/5ctWf1lX7Box6XuhgG6ibGZsbxT2gKXz0fs6V4q/mR+JiCJiN0RsWdlb72jTEw+9uXeZoVuHv8yWjDPNPdFFt5sFv9sNMRfSurnJycXzU8Ob45qZf9weVQs9tPPF15tVv9AzN1+/C1wuRL/xMLjv7FIf1I/Xzu98jou/PZR02ea2zz+097k9XyeubdY9+7YzMypkYje5HCeX7B+9MZry3xZPjv+B/ctff7vLF6TxX9/RGQH8QMR8WBEPFS0/eGIeCQi9i0T/w/PNd9Wxh9pm/b/+YiJJa9/88d/w/5feaLr+PffNKv/1vb/wTw1WKzJr383sVRzsstFYwNX89kBAADAf0Wafwc+SYfm02k6NFT7Dv+u+F9anZqeefzo1NsnJ2rfle+PnrQc6eorxkOrk9XKSDJbvGNtfHS0GCsux0sPFOPGn3ZtyfND41PViTbHDp1ua5PzP/NHV7tbB6yxLUuuHe294w0B2qBxHj1dmD33SrgYwEbl99rQuZqf/5tjcXcA2Ejc/6FzLXX+n2vImwuAjcn9HzqX8x86VPpdu1sAtJH7P3Sk1fyufw0Tm9dHM9qTWK87JU9ElIl0XbRHYqWJLbdWuN1XJgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgNb4NwAA///Xm+pu") pselect6(0x40, &(0x7f00000001c0)={0x2, 0x0, 0x3, 0xfffffffffffffffd, 0x3, 0x0, 0x0, 0xe}, 0x0, &(0x7f0000000300)={0x3ff, 0x7e7, 0x0, 0x9, 0x4, 0x0, 0x7fffffff, 0x3f8}, 0x0, 0x0) 4m27.20306373s ago: executing program 0 (id=2210): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002010000850000004300000095"], 0x0, 0x100000, 0x0, 0x0, 0x1e00, 0x0, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) r2 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000b80)=ANY=[@ANYBLOB="1b00000000000000000000000020"], 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r3}, 0x10) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000300)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a44000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40000000010800034000000014480000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a31000000001c0003801800008008000340000000020c0004400000000000000c7f1400"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=@newlink={0x38, 0x10, 0x439, 0x1, 0x0, {0x0, 0x0, 0x0, 0x0, 0x4f851}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @sit={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_ENCAP_TYPE={0x6, 0xf, 0x1}]}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x800}, 0x40080) sendmsg$NFT_MSG_GETSETELEM(r5, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000805}, 0x8000) perf_event_open$cgroup(&(0x7f00000002c0)={0x5, 0x80, 0x0, 0x6, 0x82, 0xf7, 0x0, 0x9, 0x1300, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x3e14, 0x3, @perf_config_ext={0xffff888237c0a080, 0x18000000}, 0xa0, 0x8, 0x7, 0x2, 0xfffffffffffffffd, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x8}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x3) pipe2(&(0x7f0000000280), 0x84800) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000071120d000000000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) r7 = add_key$keyring(&(0x7f0000000080), &(0x7f0000000540)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r7, &(0x7f0000000240)='asymmetric\x00', &(0x7f00000000c0)=@chain) r8 = socket$netlink(0x10, 0x3, 0x0) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r9, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x1c, 0x7, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x1c}}, 0x0) close_range(r8, 0xffffffffffffffff, 0x0) 4m27.156890105s ago: executing program 0 (id=2214): bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f0000000140)={0xffffffffffffffff, 0x0, 0x0}, 0x20) 4m27.079172413s ago: executing program 0 (id=2215): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x11, 0x4, &(0x7f0000000980)=ANY=[@ANYBLOB="1801000000000000000000006dfeff00850000007b00000095"], &(0x7f00000010c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000040)='kfree\x00', r0, 0x0, 0x401}, 0x11) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000005c00)={&(0x7f0000001240)=@newtaction={0xbc, 0x30, 0x9, 0x0, 0x0, {}, [{0xa8, 0x1, [@m_simple={0xa4, 0x15, 0x0, 0x0, {{0xb}, {0x1c, 0x2, 0x0, 0x1, [@TCA_DEF_PARMS={0x18, 0x2, {0x3, 0x57, 0x5, 0x4, 0x8}}]}, {0x5d, 0x6, "3f993ac7f6c49fb05db6748e69e57c4cda0cc38c0ebbcb7088a97f57414aff2aea44315f5c300ed02dbb4fc9599e27296f7e673ea419f58cf67ffe552b0fdd2f5bdaddbc833b3c62f15333575723a3664dfbd1ec61f17d07ed"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}]}]}, 0xbc}}, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x68, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000300)='kfree\x00', r3, 0x0, 0xb}, 0x18) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000480)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) r5 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="38000000031401002cbd7000fcdbdf250900020073797a32000000000800410073697700140033006c6f"], 0x38}, 0x1, 0x0, 0x0, 0x44}, 0x810) sendmsg$RDMA_NLDEV_CMD_DELLINK(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000440)=ANY=[@ANYBLOB="18000000041401002dbd7000fedbdf250800010000000000ba30b28e994c"], 0x18}, 0x1, 0x0, 0x0, 0x671ec167a4b72164}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000400)='mm_collapse_huge_page_swapin\x00', r4, 0x0, 0x7}, 0x18) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000005000000020000000410"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b70800000b0010007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001000000fa"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000340)={@fallback=r5, 0x0, 0x1, 0x6, &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x6, 0x0, &(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0], &(0x7f00000001c0), &(0x7f0000000300)=[0x0, 0x0, 0x0], 0x0}, 0x40) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000001040)=ANY=[], 0x20) r8 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000440)={r3, 0xffffffffffffffff, 0x1b, 0x0, @void}, 0x10) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000001100)=ANY=[@ANYRES32=r8, @ANYRES32, @ANYBLOB="120000000800000000000000", @ANYRES32=r8, @ANYBLOB="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", @ANYRES64=r7], 0x20) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f00000002c0)={'erspan0\x00', &(0x7f00000004c0)={'syztnl2\x00', 0x0, 0x8, 0x40, 0x673, 0x100, {{0x3b, 0x4, 0x3, 0x0, 0xec, 0x65, 0x0, 0x1, 0x29, 0x0, @empty, @multicast1, {[@ssrr={0x89, 0x17, 0x46, [@initdev={0xac, 0x1e, 0x1, 0x0}, @local, @rand_addr=0x64010102, @initdev={0xac, 0x1e, 0x1, 0x0}, @remote]}, @cipso={0x86, 0x4a, 0x0, [{0x5, 0x11, "bf84e962deab1c49d0dcb2a1b48c0e"}, {0x2, 0x10, "76b30e80e32fc1d82e123cdf3c8d"}, {0x1, 0x3, "ea"}, {0x6, 0x5, "269389"}, {0x0, 0x4, "b23a"}, {0x6, 0x9, "e035bb1114006e"}, {0x0, 0xe, "17a3ac0ca368d2d0dd175d89"}]}, @cipso={0x86, 0x2f, 0x2, [{0x7, 0xf, "f8a6d3d4c233b9bc926d720000"}, {0x7, 0x3, "ec"}, {0x1, 0xb, "db01eb88b8543c8092"}, {0x6, 0x3, '1'}, {0x0, 0x9, "ed36375c16cd40"}]}, @ra={0x94, 0x4}, @cipso={0x86, 0x6, 0x3}, @cipso={0x86, 0x39, 0x2, [{0x1, 0x3, "97"}, {0x1, 0x10, "b8b48f1ac445afbef7d70b24e685"}, {0x1, 0x4, "d8b4"}, {0x2, 0x10, "23da8cd70cecf3df563897a015d1"}, {0x0, 0x8, "50e84b688992"}, {0x2, 0x4, "971c"}]}, @noop, @end, @end]}}}}}) r10 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/pm_debug_messages', 0x20001, 0xae) io_submit(0x0, 0x1, &(0x7f0000000040)=[&(0x7f0000001500)={0x0, 0x0, 0x0, 0x1, 0x0, r10, &(0x7f0000000140)="392f6ce4", 0x4, 0x0, 0x0, 0x0, r10}]) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000001040)=ANY=[@ANYRES32=r9, @ANYRES32=r0, @ANYBLOB="030000af7ac8c44de75240ecfb0004200000ea912678d284fed4ec8e036b43fcf6b323981e216644ed79dba36a000000", @ANYRES32=r0, @ANYRES32=r10, @ANYBLOB, @ANYRES64=r7], 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x94) r11 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r11}, 0x18) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x800700, &(0x7f0000000740), 0x0, 0x46c, &(0x7f0000000bc0)="$eJzs281rHGUYAPBnJh9t7UdirR+tVaNFCIpJk1btwYuiIKIo6KEeY7ItodtGmii2FpuKeBKkoGfxKPoXeBNB1JPg1ZMnKRTtpa2nyMzOpJttNrFmk4nd3w82+74z7+48T+br3ffdDaBrDWV/kogdEfFbRAw0qksbDDWerl05N3n9yrnJJBYWXv8zydtdvXJusmxavm57URlOI9KPkmIjS82eOXtiol6vnS7qo3Mn3x6dPXP2iXdPThyvHa+dGj9y5PChsaefGn+yI3lmeV3d98HM/r0vvnnxlcmjF9/66Zss3h3F+uY8OmUoS/yvhVzrukc7vbGK7WwqJ70VBsIt6YmIbHf15ef/QPTEjZ03EC98WGlwwLrK7k1b2q+eXwBuY0lUHQFQjfJGn33+LR8b1PXYFC4/2/gAlOV9rXg01vRGWrTpa/l820lDEXF0/u8vskes0zgEAECzTyY/fzl7fv/61y9lfY+BxTVp3JM//57/3VXMoQxGxJ0RsTsi7oqIPRFxd0Te9t6IuG+N8dzc/0kvrfEtV5T1/54p5raW9v/K3l8M9hS1nXn+fcmx6XrtYPE/GY6+LVl9bIVtfPf8r5+2W9fc/8se2fbLvmARx6XelgG6qYm5ibxT2gGXL0Ts610u/2RxJiCJiL0Rse/W3npXWZh+7Kv97Rqtnv8KOjDPtPBllt58lv98tORfSprnJ6dvmp8c3Rr12sHR8qi42c+/fPxau+2vKf8OuFxrPDft/9Ymg0nzfO1sZ7f/H4//tD95I59n7i+WvTcxN3d6LKI/yS9nS5eP33htWS/bZ8f/8IHlz//dxWuy/O+PiOwgfiAiHoyIh4rYH46IRyLiwAo5/vjc6vlHWtH+vxAxtez1b/H4b9n/t17oOfHDt+22/+/2/+G8NFwsya9/q1gunOxy0RrgWv53AAAA8H+R5t+BT9KRxXKajow0vsO/J+5I6zOzc48fm3nn1FTju/KD0ZeWI10DxXhofbpeG0vmi3dsjI+OF2PF5XjpoWLc+LOebXl9ZHKmPlVx7tDttrc5/zN/9FQdHbDOti27dLx/wwMBKtA6j54urZ5/NVwM4Hbl99rQvVY5/9ONigPYeO7/0L2WO//Pt9TNBcDtyf0fupfzH7pU+n3VEQAVcv+HrrSW3/WvY2Hr5gijmsJm3Sl5IaIspJsiHoV1KlR9ZQIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOiMfwIAAP//2wzmew==") statfs(&(0x7f0000000840)='./file0/file0\x00', &(0x7f0000000880)=""/131) 4m27.035599437s ago: executing program 0 (id=2216): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) syz_mount_image$msdos(&(0x7f0000000200), &(0x7f0000000000)='./file2\x00', 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='nodots,dmask=00000000000000000000003,usefree,nodots,flush,dots,dots,gid=', @ANYRESHEX=0x0, @ANYBLOB], 0x1, 0x214, &(0x7f0000000840)="$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") prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = bpf$MAP_CREATE(0x0, 0x0, 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000900)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00', r3}, 0x10) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r4, &(0x7f00000004c0), 0x208e24b) 4m26.716751999s ago: executing program 2 (id=2221): bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, 0xf, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/timer_list\x00', 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r2, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r2, 0x11a, 0x1, &(0x7f0000000540)=@gcm_128={{0x303}, "ffffffffffffffe2", "8e083700daf38a6d69e9b5e9c2f133d7", "6a3a05b9", "12772541f8eb02bb"}, 0x28) sendfile(r2, r1, 0x0, 0xffffffff004) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000540)={{0x14}, [@NFT_MSG_DELOBJ={0x38, 0x14, 0xa, 0x101, 0x0, 0x0, {0x3, 0x0, 0x7}, [@NFTA_OBJ_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x5}, @NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x2}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x5}}}, 0x60}, 0x1, 0x0, 0x0, 0x10}, 0x4000894) socket$nl_route(0x10, 0x3, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x20000004, &(0x7f0000000040)={0xffffffffffffffff}, 0x13f}}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) close(0xffffffffffffffff) write$RDMA_USER_CM_CMD_SET_OPTION(0xffffffffffffffff, &(0x7f00000002c0)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f0000000280)=0x1, r3, 0x0, 0x1, 0x4}}, 0x20) 4m26.571400054s ago: executing program 2 (id=2224): r0 = memfd_secret(0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000000740)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000280)={r1, r0, 0x2e, 0x4608, @void}, 0x10) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(r0, &(0x7f0000000380)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x34, r2, 0x508, 0x70bd25, 0x25dfdbfd, {}, [@BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x3}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x1ff}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}]}, 0x34}, 0x1, 0x0, 0x0, 0x48011}, 0x4090) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000100)={0x2, 0x3, 0x0, 0x3, 0xd, 0x0, 0x70bd2c, 0x25dfdbfb, [@sadb_key={0x3, 0x9, 0x80, 0x0, "1cdc0dca1d9f68846960e56de42944af"}, @sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x4e22, @remote}}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x7, 0xc, 0x1}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x4e21, @initdev={0xac, 0x1e, 0x1, 0x0}}}]}, 0x68}, 0x1, 0x7}, 0x0) accept4$llc(0xffffffffffffffff, 0x0, 0x0, 0x800) io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x6, 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0xb, 0x0, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0xd07, 0x40}, 0x100b28, 0x6, 0x200d, 0x5, 0x8, 0x80000000, 0xb, 0x0, 0x0, 0x0, 0x80}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0xf, &(0x7f0000000180)=0x80000004, 0x4) bind$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @empty, 0xffffffff}, 0x1c) socket$inet6(0xa, 0x80002, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) fsetxattr$trusted_overlay_opaque(0xffffffffffffffff, 0x0, &(0x7f0000000080), 0x2, 0x2) socket$nl_netfilter(0x10, 0x3, 0xc) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000780)=ANY=[@ANYBLOB="74000000090601020000000000000000030000000900020073797a310000000005000100070000004c0007801800018014000240fe8000000000000000000000000000aa1800148014000240fc000000000000000000000000000000060004404e1f0000050007008400000006000540"], 0x74}, 0x1, 0x0, 0x0, 0x10040003}, 0x0) 4m26.366159274s ago: executing program 2 (id=2228): r0 = memfd_secret(0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000000740)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000280)={r1, r0, 0x2e, 0x4608, @void}, 0x10) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(r0, &(0x7f0000000380)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x34, r2, 0x508, 0x70bd25, 0x25dfdbfd, {}, [@BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x3}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x1ff}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}]}, 0x34}, 0x1, 0x0, 0x0, 0x48011}, 0x4090) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000100)={0x2, 0x3, 0x0, 0x3, 0xd, 0x0, 0x70bd2c, 0x25dfdbfb, [@sadb_key={0x3, 0x9, 0x80, 0x0, "1cdc0dca1d9f68846960e56de42944af"}, @sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x4e22, @remote}}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x7, 0xc, 0x1}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x4e21, @initdev={0xac, 0x1e, 0x1, 0x0}}}]}, 0x68}, 0x1, 0x7}, 0x0) accept4$llc(0xffffffffffffffff, 0x0, 0x0, 0x800) io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x6, 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0xb, 0x0, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0xd07, 0x40}, 0x100b28, 0x6, 0x200d, 0x5, 0x8, 0x80000000, 0xb, 0x0, 0x0, 0x0, 0x80}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r4 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$sock_int(r4, 0x1, 0xf, &(0x7f0000000180)=0x80000004, 0x4) bind$inet6(r4, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @empty, 0xffffffff}, 0x1c) r5 = socket$inet6(0xa, 0x80002, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) fsetxattr$trusted_overlay_opaque(0xffffffffffffffff, 0x0, &(0x7f0000000080), 0x2, 0x2) socket$nl_netfilter(0x10, 0x3, 0xc) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000100)={0x50, 0x2, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x15, 0x3, 'hash:ip,port,net\x00'}]}, 0x50}}, 0x0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) read(r8, &(0x7f0000000380)=""/171, 0xab) sendmsg$IPSET_CMD_ADD(r8, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000780)=ANY=[@ANYBLOB="74000000090601020000000000000000030000000900020073797a310000000005000100070000004c0007801800018014000240fe8000000000000000000000000000aa1800148014000240fc000000000000000000000000000000060004404e1f0000050007008400000006000540"], 0x74}, 0x1, 0x0, 0x0, 0x10040003}, 0x0) sendmsg$IPSET_CMD_LIST(r8, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, 0x7, 0x6, 0x801, 0x0, 0x0, {0x1, 0x0, 0x7}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x94) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000780)=ANY=[@ANYBLOB='t\x00\x00\x00\n'], 0x74}, 0x1, 0x0, 0x0, 0x10040003}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x11, 0x7, &(0x7f0000000040)=ANY=[@ANYRESHEX=r6, @ANYRES32=r6], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sched_getparam(0x0, &(0x7f00000002c0)) setsockopt$sock_int(r5, 0x1, 0x5, &(0x7f0000000180)=0x80000004, 0x4) syz_emit_ethernet(0xbe, &(0x7f0000000000)={@local, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "7b4b143b7461fd777b1c012bd14efb9f49fcdb8f080c26a04883ad5c8c82b8af", "584cbf2649a50f2dbc43efa8698dfa871c51852e4451b57d037ad3c045942824251d7d17b5191584cdd4fbe40a27424d", "bcfd56f1373669caaa2f19935e6996c7096ffe4f3a4745a8f762b964", {"9a3bfbc1f39cb307b3472eb9cdb042d2", "643fcbb2c5a57df67d544af6e8dafe09"}}}}}}}, 0x0) 4m25.51066954s ago: executing program 2 (id=2236): r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_TX_RING(r0, 0x11b, 0x3, &(0x7f0000000380)=0x20000, 0x4) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f0000000100)={&(0x7f0000000000)=""/5, 0x204000, 0x1000}, 0x20) r1 = socket$phonet(0x23, 0x2, 0x1) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) setsockopt$XDP_UMEM_COMPLETION_RING(r0, 0x11b, 0x6, &(0x7f0000000180)=0x20, 0x4) setsockopt$XDP_UMEM_FILL_RING(r0, 0x11b, 0x5, &(0x7f0000000040)=0x4000, 0x4) bind$xdp(r0, &(0x7f00000002c0)={0x2c, 0x4, r2, 0x30, r0}, 0x10) r3 = syz_open_dev$vcsu(&(0x7f0000000080), 0x41, 0x20000) sendmsg$nl_route_sched(r3, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000140)={&(0x7f00000003c0)=@newtaction={0x29a0, 0x30, 0x400, 0x70bd2a, 0x25dfdbfc, {}, [{0x284, 0x1, [@m_ctinfo={0x190, 0x1b, 0x0, 0x0, {{0xb}, {0x7c, 0x2, 0x0, 0x1, [@TCA_CTINFO_PARMS_DSCP_STATEMASK={0x8, 0x6, 0x5}, @TCA_CTINFO_ACT={0x18, 0x3, {0x1000, 0x7f, 0x6, 0x3, 0x2}}, @TCA_CTINFO_PARMS_DSCP_STATEMASK={0x8, 0x6, 0xcc}, @TCA_CTINFO_ACT={0x18, 0x3, {0x5, 0xd, 0x20000005, 0xe1, 0x2}}, @TCA_CTINFO_ACT={0x18, 0x3, {0x8fe2, 0x3, 0x20000000, 0x3, 0x1ff}}, @TCA_CTINFO_ZONE={0x6, 0x4, 0x5}, @TCA_CTINFO_ACT={0x18, 0x3, {0x8, 0xb3d, 0xfffffffffffffffe, 0x3, 0xcf}}]}, {0xeb, 0x6, "c89586f398370e8eefe78eac60284831eb368cf7188dbc73b3e0eb1926860bcb6d4ae6a9594a8aa0fbddb950c8ab9a0054965c9cebcece17dae241de2265f3ce419e9fba40c388f3c52b1c717fed68a0df8fa4b55a1d871128982082012431a7ee1c8362074de241756f389ab31228bc20305fa582f179a7ecf33522d24dff1dcb7aa181e7bbf819a4df4b48151bbc7f75dbb6ba4c7e0737f7bcf66adb0811ce2fe4ab54031f2e9bdcc9e200650077c64b14121f44faa87d5b254ff29a081050ab07e88b41d06f67accb75bbcb7d1b1728f50f0da2cf74e6de68377f8f24cf6ad3aec8838c9892"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x0, 0x2}}}}, @m_sample={0xf0, 0x4, 0x0, 0x0, {{0xb}, {0x14, 0x2, 0x0, 0x1, [@TCA_SAMPLE_PSAMPLE_GROUP={0x8, 0x5, 0x5}, @TCA_SAMPLE_RATE={0x8, 0x3, 0x2}]}, {0xb1, 0x6, "05c4f7ca3e80ad3dbbb61d3d7b8be562eb8f3c639417d4fdc0dbe33af8b43521c98463aaf4a955891073c94562ba2f575ba2052bdde0625976b60695932d974954b83a49461b8c8fc7d9e801d5e699ac4c2f245b601df031e318d1996edbb689e5c4aff9ed2ffaa858d102cdc81981a84aaaaacd4c161275e27389523a1a0f5cc99ad05775cdd9e2f837dfda5c72e2e58d986a4bb57287894d4b2e96026253dd35c0d5934fefa331778df52916"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x4}}}}]}, {0x1374, 0x1, [@m_tunnel_key={0xb0, 0x1e, 0x0, 0x0, {{0xf}, {0x40, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_ENC_IPV6_SRC={0x14, 0x5, @empty}, @TCA_TUNNEL_KEY_ENC_IPV6_DST={0x14, 0x6, @dev={0xfe, 0x80, '\x00', 0x29}}, @TCA_TUNNEL_KEY_ENC_IPV6_SRC={0x14, 0x5, @mcast1}]}, {0x43, 0x6, "7e9a3269dd688eaee6124d71421bf88bf06209c0327f36d7916b44fa8b0cad888d65adcec92de91a3845e9cd52788658dec83022b00df74022f092b0941bc5"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0xa74f96ad9417ea51, 0x1}}}}, @m_mirred={0x164, 0x18, 0x0, 0x0, {{0xb}, {0x64, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x7, 0x3, 0x0, 0x401, 0x6dfb}, 0x2, r2}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0xe, 0x7, 0x8, 0x5, 0x3}, 0x4, r2}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0xfffffff9, 0x2, 0xffffffffffffffff, 0x9, 0x4}, 0x4, r2}}]}, {0xd5, 0x6, "b9f009aac95da54a4de21a644fadb8b85e0cfdcccdfcc9baf6d76ba6663897bdcc2de65f7fb339bf0dbf01d4b116563172aadf053eab995a1a37bf305585de13d51b6601d359156f83dc0fee8a877d7644b0ea4640ce55b79b768f262b361ad7963210731ae344d4a420a0e7362c76bf535aacb22eaa63c15cd48b61405482b7d242fa4edb2b3c981cddcaaa86242601d7d95e886f2a59804c9403288a3fbe14deee39107ef5d1aa3bfa656f57c913137df13068fd0c9db536cc1d3e6c632641731135dcc9b1568e3a0ef9e1c66dbda6bd"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x1}}}}, @m_ctinfo={0x1050, 0x19, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_CTINFO_PARMS_DSCP_MASK={0x8, 0x5, 0xfffffffc}, @TCA_CTINFO_ACT={0x18, 0x3, {0x5, 0x1, 0x7, 0x1, 0x3000000}}]}, {0x1004, 0x6, "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"}, {0xc}, {0xc, 0x8, {0x3, 0x1}}}}, @m_skbmod={0x10c, 0x1f, 0x0, 0x0, {{0xb}, {0x10, 0x2, 0x0, 0x1, [@TCA_SKBMOD_SMAC={0xa, 0x4, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}]}, {0xd2, 0x6, "a5d06451da721c071bf15e6378781b30da67e44ff6638d4f410bd227a351f39a2da612f6c004c7972bf8d6854938e884299a2160ae7619b16f9af1e7ffa586d3ada1f30d633e00eeccb29361cd2cdbf662de6ac9ccb63044d198d79b53fa4ebaab96ca006013e1950948cc9cafee2c21185418a38d0c5acffdeac0bd12279b10176ecd585e42d6ad6537a6f77db6e878c883be027416b4555a14abd71213509be58a87a9051ba1c565b5ebfea9ae8f1daa442ace062b900c73a719f4327a67f9a631a77e6c5499fc1edd10bfc8ec"}, {0xc}, {0xc, 0x8, {0xc8b37c0309c82fd6, 0x1}}}}]}, {0x1394, 0x1, [@m_skbedit={0x90, 0x3, 0x0, 0x0, {{0xc}, {0x1c, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_PARMS={0x18, 0x2, {0x1, 0x7587524a, 0x6, 0x8000000, 0xfa0}}]}, {0x4b, 0x6, "2f54a92fc0073d4731b30e88ab51e8157867d0fff1e47bf26cbfa8151de8585b1df9a493a0ca9af006008311c113a5036750bd9d72caf85977e2425d16ab8fe7129cc700f6cb54"}, {0xc}, {0xc, 0x8, {0x4, 0x3}}}}, @m_vlan={0x118, 0x20, 0x0, 0x0, {{0x9}, {0x3c, 0x2, 0x0, 0x1, [@TCA_VLAN_PARMS={0x1c, 0x2, {{0x81, 0x8000, 0x10000000, 0x7, 0x5}, 0x1}}, @TCA_VLAN_PARMS={0x1c, 0x2, {{0x9, 0xfffff801, 0x5, 0x3}, 0x3}}]}, {0xb1, 0x6, "fb61b83e7c08eb1be9b42b9efbab245a4e05b8df2e94227e66258c3f4e83dc836a54229de8796886c3d09c429c0991d9663e6d2feea59b3ef0f1ddf67aa364a4f2ef2782e7a8483a93bc2a8dfa5bd925be2605277009f694c85cbf06e209128921813488c7a36132d20d2122ef4d3c146192d4a0c08f23ab18ed03ac4fec2fe2df88f00684720a76292754298097ac29ef7e6dbbb2e57ae696051b4d04a36bac83cb0f5f94a40e8d5ccdd0c94d"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x3, 0x2}}}}, @m_skbedit={0xb0, 0x15, 0x0, 0x0, {{0xc}, {0x54, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_QUEUE_MAPPING={0x6, 0x4, 0x4}, @TCA_SKBEDIT_PRIORITY={0x8, 0x3, {0xfff2, 0x2}}, @TCA_SKBEDIT_PARMS={0x18, 0x2, {0x3, 0x4, 0x10000000, 0x8, 0x4}}, @TCA_SKBEDIT_QUEUE_MAPPING={0x6, 0x4, 0x32e1}, @TCA_SKBEDIT_PTYPE={0x6}, @TCA_SKBEDIT_PRIORITY={0x8, 0x3, {0xffff, 0xfff2}}, @TCA_SKBEDIT_PRIORITY={0x8, 0x3, {0x4, 0xe}}, @TCA_SKBEDIT_QUEUE_MAPPING={0x6, 0x4, 0x6}]}, {0x32, 0x6, "2c30ec26c2142779a95d3cc8cab8215502a8f14743e9a5cfd05f4bcb033b4c1bc4d232a1917fb1e8eac19698a83b"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_csum={0x244, 0x16, 0x0, 0x0, {{0x9}, {0x11c, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0xf, 0xdc, 0x3, 0x7, 0x7fffffff}, 0x3c}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0xa317a20, 0xd9, 0x5, 0xa, 0x6}, 0x26}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x1df, 0xff800000, 0x3, 0xfffffff9, 0x3f}, 0x69}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x7, 0x0, 0x4, 0x2, 0x4}, 0x5a}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x0, 0x7, 0x8, 0x6, 0x3}, 0x25}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x40, 0x6, 0x8, 0x1, 0x1}, 0x6b}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x3, 0xfffffffe, 0x8, 0x0, 0x6}, 0x1a}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x7, 0x5, 0x1, 0x4, 0x1}, 0x58}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x9, 0x8, 0x0, 0x6, 0x3}, 0x3a}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x5, 0x0, 0x6, 0x0, 0x10}, 0x31}}]}, {0xff, 0x6, "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"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x1}}}}, @m_police={0xd5c, 0x9, 0x0, 0x0, {{0xb}, {0xc94, 0x2, 0x0, 0x1, [[@TCA_POLICE_RATE={0x404, 0x2, [0x401, 0x8, 0x9, 0x671, 0xfffffff9, 0x8, 0x3, 0xfff, 0x2, 0xffffff00, 0xfbcd, 0x9, 0x0, 0x5, 0xfffffff9, 0x10, 0x2, 0x3, 0x4, 0x8, 0x4, 0x7f, 0xffffffff, 0x11, 0x1, 0x8, 0xffffff4e, 0x6, 0x9, 0x6, 0x0, 0x7, 0x4a8d, 0x9, 0x5, 0xc, 0x8, 0x3, 0x3, 0xca25, 0x1, 0x8, 0x80000001, 0x3, 0x8, 0x2, 0x4d, 0x0, 0x1, 0x800, 0x4, 0x40, 0x0, 0x4, 0xc0f, 0x1000, 0x8001, 0x4, 0x8d13, 0x0, 0x3c, 0x4, 0x8, 0x2, 0x9, 0x8, 0x9bd, 0x40, 0x10000, 0x4, 0x2, 0x8001, 0x7, 0x4, 0x80000000, 0x0, 0x4, 0x5, 0x4, 0x303, 0xffff, 0x8, 0x4, 0x7fffffff, 0xd0, 0x0, 0x7, 0x6, 0x5, 0x9, 0x3, 0x5, 0x5, 0x0, 0x2e, 0x7, 0x4, 0x4, 0x81, 0xfffffff9, 0x1000, 0x1800000, 0x2be, 0x0, 0x1, 0x81, 0x6, 0xa5fc, 0x6, 0x6, 0x7, 0x8, 0x6, 0x6, 0xe2, 0x5, 0xc, 0x0, 0x10000, 0x7, 0x13, 0x9, 0x40, 0x7, 0x7, 0xfffffff7, 0x0, 0x7f, 0x5, 0x0, 0x100, 0x3, 0x8000, 0x7ff, 0x8, 0x80000000, 0x1000, 0x10000, 0x7, 0x1000, 0x6, 0xffc00000, 0xc3f5, 0x1, 0x7, 0x8, 0x101, 0x5, 0x9, 0x9, 0xffffffff, 0x81, 0xc, 0x4, 0x8001, 0x3, 0xfffffff9, 0xfff, 0xea, 0x4, 0x1ff, 0x4, 0x9, 0x4, 0x8, 0x100, 0x4, 0x1, 0x1, 0xe, 0x8409, 0x2, 0x8, 0x4, 0x7, 0x5, 0x0, 0x2, 0x8, 0x2, 0x4, 0x8001, 0x8, 0x4, 0x0, 0x5, 0x8f800000, 0xc, 0xe, 0x1, 0x1ff, 0x3ff, 0xfffffffa, 0x8001, 0x7, 0x2, 0x4, 0x7, 0x9, 0x505a233d, 0x6, 0x1, 0x6, 0x6, 0x0, 0x1, 0xb1, 0x5, 0xe7f0, 0xf0d9, 0x9, 0x2, 0x6, 0x4, 0x7, 0xffff1f07, 0x1c, 0x9, 0x10001, 0x8, 0x9, 0x1, 0x58c2, 0x81, 0xf, 0x6, 0x0, 0xff, 0x2, 0x0, 0x0, 0x6, 0x7, 0x8, 0x101, 0x9, 0x5, 0x5, 0x5, 0x592b, 0xfff, 0xfffffffe, 0xe, 0x3, 0x3ff, 0x5, 0x8472, 0x9, 0x101, 0xe7, 0x8001, 0x10, 0x4, 0x7fff, 0x9, 0xb]}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x3}], [@TCA_POLICE_AVRATE={0x8, 0x4, 0x8}, @TCA_POLICE_TBF={0x3c, 0x1, {0x6, 0x3, 0xb62, 0xbac85bb, 0xffff, {0x0, 0x2, 0x9, 0x0, 0x9, 0x101}, {0x3, 0x0, 0x6, 0x1, 0x8, 0x98f9}, 0x3, 0x200000, 0x4}}], [@TCA_POLICE_RESULT={0x8, 0x5, 0x800}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x3ff, 0x100, 0x6, 0x7d, 0x9ea, 0x200, 0x0, 0x1, 0x3, 0x62, 0x0, 0x0, 0x5, 0x1, 0xfffffff7, 0x800, 0x0, 0x6, 0x687, 0x1, 0x4, 0x7fff, 0x51, 0x3, 0x8, 0x9, 0x4, 0x775, 0x172, 0x8, 0x9, 0x6, 0x6, 0x6, 0xff, 0xf67, 0x3, 0x5, 0xfffff001, 0x0, 0x7fffffff, 0x2, 0x1, 0xea00000, 0x54, 0x4, 0x7, 0xfff, 0x0, 0xfffffffe, 0x2, 0x9, 0x0, 0x67d2, 0x8, 0x6, 0x5, 0x6, 0xfffffffc, 0x8, 0xfff, 0x80, 0x5, 0x97c, 0x9, 0x6, 0x4, 0x6, 0x2, 0x1, 0x7fffffff, 0xd, 0xfffffff9, 0x2, 0x9, 0x967d, 0x79a920de, 0xe9f4, 0x7, 0x0, 0x7, 0xc, 0x80000001, 0xfffffffa, 0xc, 0x7ff, 0x0, 0xd, 0x9d, 0x80, 0x2, 0x4b85, 0x938a, 0x684, 0x0, 0x9, 0x200, 0x9, 0x5, 0x8000, 0x3, 0x5, 0x4, 0x1ff, 0x80000000, 0x4, 0x0, 0x7fffffff, 0x0, 0x1ff, 0x7, 0x5c, 0x5, 0x5, 0x0, 0x4, 0x0, 0x4, 0x5, 0x9, 0x8, 0x1, 0xab, 0xfffffffe, 0x6, 0x8001, 0x7ff, 0x3, 0x8, 0x7ff, 0x2, 0x80000, 0x1, 0x8, 0x3, 0x101, 0x8, 0x8, 0xfffffffa, 0x1, 0x9, 0x9, 0x456d, 0x0, 0x5, 0x10001, 0xc, 0xe, 0x9, 0x6, 0xffffffff, 0xd43, 0x3, 0x3, 0x0, 0xfffffffd, 0x0, 0x0, 0xd10e, 0x1, 0x9, 0x6, 0x0, 0x4, 0x77a7, 0xfffffffb, 0xb8f, 0x4, 0x8, 0x7ff, 0x0, 0x6, 0x5, 0x9ec, 0x7, 0xaf, 0xdf2, 0xfffffff8, 0xe1c, 0x1ff, 0x2, 0x63f6, 0x1, 0x1000, 0x4, 0xb, 0x806, 0x4, 0x8, 0x2, 0x8, 0x2, 0x2, 0x5, 0x7fff, 0x2, 0x2, 0x1, 0xe9, 0x800, 0x8000, 0x774c, 0xb98, 0xffffffff, 0xc, 0x3, 0x81, 0x53e, 0x0, 0xfffffff8, 0x0, 0x5, 0x95, 0xff, 0x4, 0x7ff, 0x4, 0x8, 0x2, 0x0, 0x0, 0x7fff, 0x8, 0xbe, 0x5, 0x0, 0x800, 0xc, 0x5b46, 0x0, 0x9, 0x43c4, 0x1, 0xd, 0x8, 0x3, 0x4, 0x400, 0x3, 0x8, 0x7, 0x1, 0x80000000, 0x3500000, 0x7, 0x0, 0xfffff800, 0x2, 0x6, 0x1, 0x60f1, 0x4a, 0x81, 0xa34, 0x5, 0xffff]}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x3}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x6}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0xf02}, @TCA_POLICE_RATE={0x404, 0x2, [0xf55a, 0x7fff, 0x4, 0x4, 0xb, 0x1, 0x1, 0x3, 0x7, 0x2, 0x5, 0x0, 0x57, 0x10, 0x8, 0x7fff, 0x2, 0xdfa, 0x7fff, 0x0, 0xff, 0x6, 0x0, 0x3, 0x7, 0x0, 0x4112, 0xf, 0x4, 0xd, 0x1000, 0x4, 0x0, 0x4, 0x3, 0x200, 0x8, 0xca77, 0x4, 0xef9a, 0x7, 0xfffffffb, 0xa, 0x10001, 0x6, 0x5c, 0xa5a6a000, 0xfffffffa, 0x2, 0x8, 0x4, 0x0, 0x10001, 0x4, 0x3, 0x7, 0xffffffff, 0x3, 0x8, 0x8001, 0x9, 0x9, 0x7, 0x4ce, 0x4, 0x4, 0xffff, 0x9, 0xfffffffa, 0x1, 0xe9, 0x5, 0x3, 0x800, 0x80000001, 0x5, 0x6, 0x5, 0xf8c0, 0x7ff, 0x8e, 0x6, 0x8021, 0x1, 0x6, 0x2, 0xffffff4d, 0x2, 0x9, 0xd, 0x9, 0x4, 0x5, 0x9, 0x200, 0x7, 0x1, 0xffffffff, 0x8, 0x5739, 0x4, 0xb2, 0x9, 0xc35, 0x0, 0xd60, 0x4, 0xe20, 0xb, 0x0, 0x1000, 0x40, 0x6, 0xc72, 0x3, 0x6, 0x8000, 0x8, 0x5, 0xfffffc00, 0x100, 0x5, 0x81, 0xe9, 0xdc93, 0x8001, 0x7f, 0x4800, 0xa41, 0x1, 0x19e9, 0x2, 0x72a3, 0x2, 0x0, 0x4, 0x32b9, 0xc431, 0x9, 0x7, 0x1, 0x5, 0x2, 0x7, 0x9, 0x8, 0x3, 0xfffffff4, 0xf43f, 0x5, 0x10, 0x5, 0x51, 0x5, 0x2, 0x8d, 0x2, 0x1, 0x9, 0x80000000, 0x9, 0xffffffff, 0x3, 0x1, 0xc2, 0x0, 0x7740, 0xc, 0x2, 0x92b, 0x7f, 0xe1c0, 0x2, 0x3, 0x9b2c, 0x0, 0x6, 0x5, 0x697b, 0x5, 0x1, 0x6, 0x0, 0x100, 0x0, 0xd0, 0xffffffff, 0x2, 0x5, 0x80, 0x8, 0x5, 0xfffffffd, 0x0, 0xed0, 0xcc19, 0x5, 0x9, 0x5, 0x4, 0x1, 0x48, 0x4, 0x5, 0x9e63, 0x100, 0x3, 0x1, 0x2783, 0x6, 0x6, 0xd267, 0x7, 0x1, 0x7f, 0x101, 0xcfb3, 0xfffffff7, 0x0, 0x0, 0x3, 0x471, 0x5, 0x3, 0x7, 0x4, 0x5, 0xe36, 0x200, 0x7, 0xfffffffa, 0x2, 0x7, 0xffff, 0x0, 0x4, 0x9, 0x478e, 0x8001, 0x1, 0x10001, 0x7, 0x7, 0x2, 0x3, 0x5, 0x4, 0x0, 0x9, 0x3, 0x9, 0x400, 0xfffff6a2, 0xffff, 0xffffffff, 0x5]}, @TCA_POLICE_RATE64={0xc, 0x8, 0x800}, @TCA_POLICE_RESULT={0x8, 0x5, 0x2}]]}, {0x9f, 0x6, "f1032515582375fb2e34fc0f0a293b512fa4db813518fd47c6e68ca786e3667a2e5a8006f0218ace8d77ea141d68870939def651f073caee65f5b6d194b17e730063bea4507c67c000fd7fe3535856f0c143d3f6055ea9fe01365c98ebcddcdde831d89153bbca4b56d85b785d4edea98158e219b6901a955845c7e26330b26888a605fd2567ad0d04a24a5d6eb3f83b3fa73cee9389506a33ad96"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x2}}}}, @m_nat={0x198, 0x6, 0x0, 0x0, {{0x8}, {0x11c, 0x2, 0x0, 0x1, [@TCA_NAT_PARMS={0x28, 0x1, {{0x7fff, 0x2, 0x0, 0xa8e, 0x7fff}, @initdev={0xac, 0x1e, 0x0, 0x0}, @initdev={0xac, 0x1e, 0x1, 0x0}}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x3, 0x7f, 0x2, 0x10, 0x100}, @rand_addr=0x64010100, @multicast1}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x1, 0x4, 0x20000000, 0x8, 0x2}, @private=0xa010100, @broadcast, 0xff000000}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x3, 0xdb, 0x6, 0x6, 0x36}, @broadcast, @multicast2, 0xff000000, 0x8}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x7, 0x3, 0x1, 0x6, 0x401}, @local, @rand_addr=0x64010101, 0xffffffff}}, @TCA_NAT_PARMS={0x28, 0x1, {{0xb, 0xfffffffe, 0x0, 0x40}, @loopback, @rand_addr=0x64010101, 0xffff00, 0x1}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x200, 0x3, 0x3, 0x4, 0x4}, @multicast2, @private=0xa010100, 0xff, 0x1}}]}, {0x57, 0x6, "26d8d208c63738865d85ba7c07699cacb131eed77e01b59a9dc1b59544e7275f04b29ef6a3af7dcd4b794b1e5c2fb91a4563396f7735601b7fe12e2bce91c0e3e516aca0994b4f3d627db778db559b32bc2464"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x2, 0x2}}}}]}]}, 0x29a0}, 0x1, 0x0, 0x0, 0x44000}, 0x10) 4m25.365350935s ago: executing program 2 (id=2237): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000000)={'batadv_slave_1\x00', 0x0}) sendmsg$ETHTOOL_MSG_LINKMODES_GET(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000180)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYBLOB="010328bd7000fedbdf251c0000000c00018008000100", @ANYRES32=r1], 0x20}}, 0x10) 4m25.266023614s ago: executing program 2 (id=2239): socket$packet(0x11, 0x2, 0x300) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x68, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), 0xffffffffffffffff) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16, @ANYBLOB="0100000000000000000005000000180001801400020073797a5f74756e000000080000000000180003801400038010"], 0x44}}, 0x20008000) bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="2100000003000000040000000700000003620100", @ANYRES32, @ANYBLOB='#\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="04000000000000000200"/24, @ANYRES32, @ANYBLOB="e8552537a2106c91c9118e452b589f8d6fc910ea"], 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) syz_genetlink_get_family_id$nfc(0x0, 0xffffffffffffffff) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e23}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r4 = bpf$PROG_LOAD(0x5, 0x0, 0x0) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000540)=ANY=[], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) request_key(&(0x7f0000000040)='asymmetric\x00', &(0x7f0000001ffb)={'syz', 0x2}, &(0x7f0000001fee)='R\x10rust\xe3cusg\x91\xdeeH\xe5+\xf0', 0xffffffffffffffff) perf_event_open(&(0x7f0000000100)={0x0, 0x80, 0x4, 0xfd, 0x2, 0x0, 0x0, 0x100, 0xce42a, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101, 0x2, @perf_bp={0x0}, 0x100002, 0x0, 0x4, 0x2, 0x3f62, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r5 = socket$netlink(0x10, 0x3, 0x14) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000a40)={0x11, 0xc, &(0x7f0000000380)=ANY=[@ANYRESOCT], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r4, 0x0, 0x0, 0x0, 0x0, 0x100007}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r6}, 0x10) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000000000)=ANY=[@ANYBLOB="380000000314010000000000000000000900020073797a2f000000000800410072786500140033007465616d5f736c6176655f30"], 0x38}, 0x1, 0x0, 0x0, 0x1}, 0x8844) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r7 = creat(&(0x7f0000000180)='./file0\x00', 0x84) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f00000002c0)={'wlan1\x00'}) 4m11.977805655s ago: executing program 32 (id=2216): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) syz_mount_image$msdos(&(0x7f0000000200), &(0x7f0000000000)='./file2\x00', 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='nodots,dmask=00000000000000000000003,usefree,nodots,flush,dots,dots,gid=', @ANYRESHEX=0x0, @ANYBLOB], 0x1, 0x214, &(0x7f0000000840)="$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") prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = bpf$MAP_CREATE(0x0, 0x0, 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000900)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00', r3}, 0x10) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r4, &(0x7f00000004c0), 0x208e24b) 4m10.215262912s ago: executing program 33 (id=2239): socket$packet(0x11, 0x2, 0x300) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x68, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), 0xffffffffffffffff) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16, @ANYBLOB="0100000000000000000005000000180001801400020073797a5f74756e000000080000000000180003801400038010"], 0x44}}, 0x20008000) bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="2100000003000000040000000700000003620100", @ANYRES32, @ANYBLOB='#\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="04000000000000000200"/24, @ANYRES32, @ANYBLOB="e8552537a2106c91c9118e452b589f8d6fc910ea"], 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) syz_genetlink_get_family_id$nfc(0x0, 0xffffffffffffffff) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e23}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r4 = bpf$PROG_LOAD(0x5, 0x0, 0x0) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000540)=ANY=[], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) request_key(&(0x7f0000000040)='asymmetric\x00', &(0x7f0000001ffb)={'syz', 0x2}, &(0x7f0000001fee)='R\x10rust\xe3cusg\x91\xdeeH\xe5+\xf0', 0xffffffffffffffff) perf_event_open(&(0x7f0000000100)={0x0, 0x80, 0x4, 0xfd, 0x2, 0x0, 0x0, 0x100, 0xce42a, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101, 0x2, @perf_bp={0x0}, 0x100002, 0x0, 0x4, 0x2, 0x3f62, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r5 = socket$netlink(0x10, 0x3, 0x14) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000a40)={0x11, 0xc, &(0x7f0000000380)=ANY=[@ANYRESOCT], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r4, 0x0, 0x0, 0x0, 0x0, 0x100007}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r6}, 0x10) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000000000)=ANY=[@ANYBLOB="380000000314010000000000000000000900020073797a2f000000000800410072786500140033007465616d5f736c6176655f30"], 0x38}, 0x1, 0x0, 0x0, 0x1}, 0x8844) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r7 = creat(&(0x7f0000000180)='./file0\x00', 0x84) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f00000002c0)={'wlan1\x00'}) 3m0.651647711s ago: executing program 3 (id=3708): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000c80)=@base={0x7, 0x4, 0x8, 0xd9}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=@framed={{0x18, 0x0, 0x0, 0x0, 0x4}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r0}, {}, {0x85, 0x0, 0x0, 0x1b}}]}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) r2 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./file1\x00', 0x143142, 0x40) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000500)='kfree\x00', r4, 0x0, 0x898}, 0x18) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000580)={{r3}, &(0x7f0000000000), &(0x7f00000003c0)=r4}, 0x20) fsetxattr$security_capability(r2, &(0x7f0000000000), 0x0, 0x0, 0x2) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='kfree\x00', r1}, 0x18) r5 = socket$inet(0x2, 0x2, 0x1) sendmsg$SEG6_CMD_SETHMAC(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0xfffffffffffffe54, 0x0, 0x1, 0x0, 0x0, 0x14}, 0x4010) sendmsg$inet(r5, &(0x7f0000000600)={&(0x7f0000000040)={0x2, 0xffff, @remote}, 0x10, &(0x7f00000000c0)=[{&(0x7f0000000180)="08007715e050e9ce", 0x8}], 0x1, &(0x7f0000000100)=ANY=[@ANYBLOB="1c000000000000000000000007000000890b040a0101027f00000100000000001c000000000000000000000008"], 0x40}, 0x20000000) 3m0.576749508s ago: executing program 3 (id=3714): r0 = open(&(0x7f0000000000)='./bus\x00', 0x40, 0x170) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1803000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000800b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b7000000000000"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kfree\x00', r2, 0x0, 0x2}, 0x18) fgetxattr(r0, &(0x7f00000003c0)=@known='security.selinux\x00', 0x0, 0x0) 3m0.512835624s ago: executing program 3 (id=3717): syz_open_dev$tty1(0xc, 0x4, 0x4) symlink(&(0x7f0000000000)='.\x00', 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r0}, 0x10) r1 = syz_open_dev$sg(&(0x7f00000002c0), 0x0, 0x2082) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$SG_IO(r2, 0x2285, &(0x7f0000000040)={0x53, 0xfffffffe, 0x6, 0x0, @buffer={0x2, 0x41001, &(0x7f00000000c0)=""/81}, &(0x7f0000000380)="259374c96ee3", 0x0, 0x300, 0x0, 0x0, 0x0}) 3m0.511900214s ago: executing program 3 (id=3719): bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, 0x0, 0x0}, 0x94) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000001240)='./file2\x00', 0x14552, &(0x7f0000000b40)=ANY=[], 0xfb, 0x11ff, &(0x7f0000002480)="$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") r0 = open(&(0x7f00000001c0)='./file2\x00', 0x64842, 0x389b0d52417bb205) r1 = syz_io_uring_setup(0x497, &(0x7f0000000400)={0x0, 0x717e, 0x100, 0x14, 0x193}, &(0x7f0000000140)=0x0, &(0x7f0000000180)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r4 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180500000000c800000000004b64ffec850000007d000000850000002a00000095"], &(0x7f0000000480)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r6, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="14000000", @ANYRES16=r7, @ANYBLOB='ya\x00\x00\x00\x00\x00\x00 \x00~\x00\x00\x00'], 0x14}}, 0x4000054) syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}) io_uring_enter(r1, 0x3516, 0x0, 0x0, 0x0, 0x0) prctl$PR_SET_NAME(0xf, &(0x7f0000000140)='+}[@\x00') socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000001080)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020207025000000002dba513d7b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000008fd8850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r9}, 0x10) perf_event_open(&(0x7f0000000800)={0x5, 0x80, 0x0, 0x4, 0x0, 0xfe, 0x0, 0x800, 0x20000, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x2, @perf_bp={0x0, 0x8}, 0x800, 0x0, 0x0, 0x3, 0x0, 0x0, 0x4000, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_clone(0x21000000, 0x0, 0x0, 0x0, 0x0, 0x0) setsockopt$SO_ATTACH_FILTER(r8, 0x1, 0x1a, &(0x7f0000000ac0)={0x3, &(0x7f0000000a80)=[{0x48, 0x40}, {0x20, 0x1, 0x0, 0xfffff010}, {0x16, 0x7, 0x6, 0x6}]}, 0x10) unshare(0x20000400) r10 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/asound/seq/clients\x00', 0x0, 0x0) getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r10, 0x84, 0x76, &(0x7f0000000240)={0x0, 0x1}, &(0x7f0000000300)=0x8) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(r0, 0x84, 0xf, &(0x7f0000000480)={r11, @in6={{0xa, 0x4e23, 0x3, @mcast1, 0x6}}, 0x8, 0x3, 0x3, 0xc7, 0x33}, &(0x7f0000000340)=0x98) 3m0.010946745s ago: executing program 3 (id=3735): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x44004000) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000003c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWRULE={0x7c, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x801}, [@NFTA_RULE_EXPRESSIONS={0x4c, 0x4, 0x0, 0x1, [{0x48, 0x1, 0x0, 0x1, @target={{0xb}, @val={0x38, 0x2, 0x0, 0x1, [@NFTA_TARGET_REV={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_TARGET_INFO={0x2c, 0x3, "7339f2f10455afb9fdd672bad09dfb78c7699c74e891a0c700"/40}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_COMPAT={0x4}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0xa4}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840) 2m59.647855631s ago: executing program 3 (id=3743): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="17000000000000"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x41100}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DESTROY(r2, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000007c0)=ANY=[@ANYBLOB="1c000000030601040000000000"], 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x10) 2m59.583677278s ago: executing program 34 (id=3743): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="17000000000000"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x41100}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DESTROY(r2, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000007c0)=ANY=[@ANYBLOB="1c000000030601040000000000"], 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x10) 21.686065158s ago: executing program 7 (id=7528): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) syz_usbip_server_init(0x1) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kmem_cache_free\x00'}, 0x10) socket$phonet_pipe(0x23, 0x5, 0x2) syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000540)='./file0\x00', 0x80000a, &(0x7f0000000300)=ANY=[@ANYBLOB="2631d812916811022a5acb696f636861727365742569736f5e9a5ce93801b9beaddf047a4aa54bb60f257c3dbef7ed0c7ce0000000", @ANYRESHEX=0x0, @ANYBLOB=',hide,utf8,showassoc,cruft,map=off,cruft,\x00'], 0x2, 0x54e, &(0x7f0000000840)="$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") bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000400000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x32, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x37, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000000000fc850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000500)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r0 = shmget(0x1, 0x4000, 0x200, &(0x7f0000ffb000/0x4000)=nil) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB], 0x50) shmat(r0, &(0x7f0000ff9000/0x1000)=nil, 0x4000) 20.691414657s ago: executing program 7 (id=7535): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000001740)={r0, 0x0, &(0x7f0000001700)=""/53}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000009c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x109}, 0x94) r1 = openat$selinux_member(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) write$selinux_access(r1, &(0x7f00000004c0)=ANY=[@ANYBLOB], 0x56) 20.657608431s ago: executing program 7 (id=7537): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x20, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) socket$key(0xf, 0x3, 0x2) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r2, &(0x7f00000047c0)={0x0, 0xfffffffffffffffc, &(0x7f0000000300)=[{&(0x7f0000000080)={0x18, 0x7a, 0x601, 0x4000000, 0x25dfdbfd, "", [@typed={0x7, 0x0, 0x0, 0x0, @u64=0x1}]}, 0x18}], 0x1, 0x0, 0x0, 0x40000}, 0x4) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}, 0x100002, 0x0, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800"/15, @ANYRES32=r3, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}, 0x94) r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c0000b1b47ceb0008000000060000000000000b0500000000610030"], &(0x7f0000000340), 0x2c, 0x0, 0x0, 0x4}, 0x28) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, r4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x94) fadvise64(0xffffffffffffffff, 0x1, 0x6, 0x2) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$BTRFS_IOC_SUBVOL_GETFLAGS(0xffffffffffffffff, 0x80089419, &(0x7f0000000400)) syz_open_procfs(0x0, &(0x7f00000003c0)='net/vlan/vlan0\x00') r5 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$SIOCSIFMTU(r5, 0x8923, &(0x7f0000000140)={'vlan0\x00', 0x8}) 20.611598805s ago: executing program 7 (id=7541): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) syz_mount_image$ext4(&(0x7f0000000580)='ext4\x00', &(0x7f0000000040)='./bus\x00', 0x1208002, &(0x7f0000000840)={[{@nodiscard}, {@journal_ioprio={'journal_ioprio', 0x3d, 0x6}}, {@resuid}, {@debug}, {@minixdf}, {}, {@nomblk_io_submit}, {@noauto_da_alloc}], [{@seclabel}]}, 0x1, 0x5e7, &(0x7f0000001400)="$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") r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000008c0)=@newtaction={0x64, 0x30, 0x1, 0x0, 0x0, {}, [{0x50, 0x1, [@m_mpls={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_MPLS_PARMS={0x1c}]}, {0x4, 0x4}, {0xc}, {0xfffffde0}}}]}]}, 0x64}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kmem_cache_free\x00', 0xffffffffffffffff, 0x0, 0x20000000f}, 0x18) syz_clone(0x0, &(0x7f00000000c0)="7c07344cdb6d13ca464d57fa380fef166fb2cb9cc8323d214ee2650525b9c0db7ddd2ef53366be4e5f209d6145881673e839fa4ec400783f8546006f8eccc9093702cda7ba10c86ec5f1a8ba21b904383d764efe2b89696c1b6c160429c7edf0131c9159f1a8d6e2cf7589d6f291941ec7d1e9f0ce506b2a9d265a4aa13416e16e808c6146ae9605ed8c59", 0x8b, &(0x7f0000000000), &(0x7f00000001c0), &(0x7f0000000200)="74676f6ba3786316a1b4e1387919d512b890f24be2288338fa47304d680683eaaa6452056b91f93812ab38d172a8505ecaff3581a8968dd4387b25f7b8bd07744e4dc7f8237675cab9c09ba3d1838d5e9362e5707a84d1cec3e0e80f1f037b21d15e275dc3fb94faf368f1a102d7aa739318d565e986c9e9304c9bac9dc1bbe3abd38172ad679e006d5797f38e4e113b4fd56d20a2b0ddb6a8712196327c58d48e7a1b0fc44b81dfa8bf226f5cb155c88b6433bf3fccf669bb48d536667c09c85cab4e34c7") lchown(&(0x7f00000006c0)='./file0\x00', 0x0, 0xee01) 20.135584653s ago: executing program 7 (id=7550): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000001740)={r0, 0x0, &(0x7f0000001700)=""/53}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000009c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x109}, 0x94) r1 = openat$selinux_member(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) write$selinux_access(r1, &(0x7f00000004c0)=ANY=[@ANYBLOB], 0x56) 19.949222682s ago: executing program 7 (id=7552): socket$pppl2tp(0x18, 0x1, 0x1) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="1b000000219b3a3dd42b6cf25253203b13285100000000120000000080000000000000113abfdd8cdf9b3418b0e4caf380518bc79e7e59701550e6315e51e59cd3d6134dadcda1b8c5659eb6e21e9a46c38cb32cd541f1a84534afbc21f77f4f55ac6e7168a53728bc8e6629925726584ddd66d6f0811766a180bd04871ce9d4", @ANYRES32, @ANYBLOB="0000ed611399976185f19c19da50ce", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB, @ANYRES32=r0, @ANYBLOB="0000000000000000b702000001000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r1}, 0x10) socket$inet6_udp(0xa, 0x2, 0x0) r2 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000040), 0x8002) write$binfmt_aout(r2, &(0x7f0000000380)=ANY=[@ANYBLOB="03070000b5"], 0xc8) r3 = memfd_create(&(0x7f0000000bc0)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf#2\x99\x1e\xa1`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\f<\x8f\xc1\x99\x89r\xe1?\xbdu\x98\xc3\xf8\xd2Q#\xc6g\xa0\x85\xd6G\x85\x11X\x8d,\x02\xd45\xb8\xca\x97\x9d\xcb\x1e\x80\xd6\xd5>N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xec\x8aog\x87BR\x9d\xad\xd4FcB\xda\x95\xc3\xdd\x9d\x8f\x1a\xce\x18\x80\"j\xe1\xba\x1e\x97uX\xccv\xd6\vcz\x92A^\xbc\xceF\xf7\xe5:\xaf\xc5~\xbcJ e\r\x88c\x9d\xb92\xb6i4zq\xb3c\x0f\xb2t\x93\xf2E6b\xfa\xcdJ5\xe3W]`4\xd8D\x05\v\xfc)\xca\xedQ\xd0]Ot\'\xc2tDF\xf9\xa7\xb5(\x83\xa5\x0f\x1d\x1d\x06Dg\x13>\x19\xe85#\aaT\x89=\x104\xd5\x85Q\x96\x91\xea\x172P\xb3:\xadZ\xbc\xbe\x00\xf0\x14\x96\xd9M\xd7\x88QZs\xb2\xe1+$jfQodH\x05/y`~Mx\x02\x00(v\xe6`\x026\xfcgC\xb5\xf0\x13.zb\xc5bj+@\x00\x00\x00\x00\x00\x00\x00.\xd4`=z\xd1n\x8d\x8f\xa5hS\x8e[\xb3\xa3\x87\xb9\xe2_Z\x11\xef\xc2]V\xf3\x03\x94\xb9\xe1\xa68\x8d\\\xe5\xef\xacpM\xf0\xa6\x04\x10\xb7\xc0t\x83\\\xf7\x12k\x9f\x10\xd5Z\x19\xc1\xc1\x80\\o\x97\xce=U\xdd\xaa\x1b\x05\x14\x13\xa6\xbd#\xde\x04\xe6$\xec$3\xf6\x97\xc6\xeaSL\xb7A72M\x88k@\xe5\xa3\n&\x1e\xc84\xa9\xe2\xccM\x906\x95xQ-2p\xd62\'\xec\x0f\x13;I\x95fE_\r\xe7\t!A\x05\xe4\x8f\x9e0\xf8/T\x18\xf7\xa1\x9f\xde1\xd5\x80<\xf5\b\xa9\xec\x85\xaeW\xb3\xd8#)bn \xfb\xf2\x88\xfaR\xff\xdd\x80\x96_\xec5\xf0\x1c\a\x8a\x80\x00@=\r8u+%f:\x1e\x82\xfap\xf6\x89\xea\xba\xe3\xbbM%F\xdb\\\xd1eJJ*\xc67\xca\x03\xa3\xf7(\xbb\xecN\xd4\xe7\xf2:u\x8a\b\xd5\v\xca\xfd\\\xd6\xe3\x05\xb3\x03\xd5\xe0\xd2\xf2{\'\x8b\xdf\xa1\xbe}\xb2\xe4y\xbb\xe6\x1f\x10c\xf5WQ\x82\x04\x01C\x83,\x90\x1a\xfa\x8e\x17\x89\xe2\xedX\x8d\rmq\t\xb5$\xb4\x9b\x92z\xd6/-\x13,\xb5%\x8eM/\x04\xa7\x7f\x1b\x85\xf1\xa4X\x17\xbb\x1cR14\xfb!\b\x10\xe8\xb2\xd41gK\xe4\xea\xe39d\bL\xe5\x1b\xbd[\x9bWD:\r&\xe9\vn^\xcc\x86\xe3\xce1>3{\xaa{\xbd0P\x9f\xa68\xf5\x82\xb8\x9aD\x9c{\xe6\xf8\xcbD\xb5aJ\xb0\x92\x89\xbc\x80\x1ch\x89\xe7\xdd]q,\xec\xc4\xa5\x93\xe5,\x0e,>/\xaf|\xf0\x01V\x7f\xc9?\xba\x16\xe4$+}5dy\xb1\xef\xf1m\xa5\x94d9\xaf\xcfq\x8b=\x026\xef\r\x91\x18\xc5\xb6\xb9fM\x8ayZ\xbcd\xa5\x8a\x88\x98\xc3\xfc`\xa6\xba\x1f\x17\v$\x88g\xb4\xad\b\xc1\xddW\xa6\xc1\xb7\xb0\xa3\x84Q\x13GoU\xe2\xb7\x03\x9c\xd5\x0f\xa8\x0ef\"\x15\x82\xe7\xbd\xf8\xca\x10f\xfe6h\xe9\xc3\xc2\xa0O:\xac~\x1a\xf7\xbeF\xbe\xe5\xf0\x81\xd6&\xc00x0, &(0x7f00000003c0)=""/46, 0x2e}}, 0x10) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x4, 0x4, &(0x7f0000000680)=ANY=[@ANYRES64=r3], &(0x7f0000000380)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r6}, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000600)=ANY=[@ANYBLOB="90000000", @ANYRES16=r8, @ANYBLOB="0100000000000002000005000000180001801400020073797a5f74756e000000000000000000080005000a0f00005c0003800400010054000380"], 0x90}}, 0x0) write(0xffffffffffffffff, &(0x7f0000000000)="240000001a005f0214f9f407000904000a000000fe0000000000000008000f00fd000000", 0x85) fcntl$setlease(0xffffffffffffffff, 0x400, 0x1) open(&(0x7f0000000000)='./bus\x00', 0x22103, 0x6) fcntl$setlease(0xffffffffffffffff, 0x400, 0x1) 19.948670872s ago: executing program 35 (id=7552): socket$pppl2tp(0x18, 0x1, 0x1) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="1b000000219b3a3dd42b6cf25253203b13285100000000120000000080000000000000113abfdd8cdf9b3418b0e4caf380518bc79e7e59701550e6315e51e59cd3d6134dadcda1b8c5659eb6e21e9a46c38cb32cd541f1a84534afbc21f77f4f55ac6e7168a53728bc8e6629925726584ddd66d6f0811766a180bd04871ce9d4", @ANYRES32, @ANYBLOB="0000ed611399976185f19c19da50ce", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB, @ANYRES32=r0, @ANYBLOB="0000000000000000b702000001000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r1}, 0x10) socket$inet6_udp(0xa, 0x2, 0x0) r2 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000040), 0x8002) write$binfmt_aout(r2, &(0x7f0000000380)=ANY=[@ANYBLOB="03070000b5"], 0xc8) r3 = memfd_create(&(0x7f0000000bc0)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf#2\x99\x1e\xa1`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\f<\x8f\xc1\x99\x89r\xe1?\xbdu\x98\xc3\xf8\xd2Q#\xc6g\xa0\x85\xd6G\x85\x11X\x8d,\x02\xd45\xb8\xca\x97\x9d\xcb\x1e\x80\xd6\xd5>N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xec\x8aog\x87BR\x9d\xad\xd4FcB\xda\x95\xc3\xdd\x9d\x8f\x1a\xce\x18\x80\"j\xe1\xba\x1e\x97uX\xccv\xd6\vcz\x92A^\xbc\xceF\xf7\xe5:\xaf\xc5~\xbcJ e\r\x88c\x9d\xb92\xb6i4zq\xb3c\x0f\xb2t\x93\xf2E6b\xfa\xcdJ5\xe3W]`4\xd8D\x05\v\xfc)\xca\xedQ\xd0]Ot\'\xc2tDF\xf9\xa7\xb5(\x83\xa5\x0f\x1d\x1d\x06Dg\x13>\x19\xe85#\aaT\x89=\x104\xd5\x85Q\x96\x91\xea\x172P\xb3:\xadZ\xbc\xbe\x00\xf0\x14\x96\xd9M\xd7\x88QZs\xb2\xe1+$jfQodH\x05/y`~Mx\x02\x00(v\xe6`\x026\xfcgC\xb5\xf0\x13.zb\xc5bj+@\x00\x00\x00\x00\x00\x00\x00.\xd4`=z\xd1n\x8d\x8f\xa5hS\x8e[\xb3\xa3\x87\xb9\xe2_Z\x11\xef\xc2]V\xf3\x03\x94\xb9\xe1\xa68\x8d\\\xe5\xef\xacpM\xf0\xa6\x04\x10\xb7\xc0t\x83\\\xf7\x12k\x9f\x10\xd5Z\x19\xc1\xc1\x80\\o\x97\xce=U\xdd\xaa\x1b\x05\x14\x13\xa6\xbd#\xde\x04\xe6$\xec$3\xf6\x97\xc6\xeaSL\xb7A72M\x88k@\xe5\xa3\n&\x1e\xc84\xa9\xe2\xccM\x906\x95xQ-2p\xd62\'\xec\x0f\x13;I\x95fE_\r\xe7\t!A\x05\xe4\x8f\x9e0\xf8/T\x18\xf7\xa1\x9f\xde1\xd5\x80<\xf5\b\xa9\xec\x85\xaeW\xb3\xd8#)bn \xfb\xf2\x88\xfaR\xff\xdd\x80\x96_\xec5\xf0\x1c\a\x8a\x80\x00@=\r8u+%f:\x1e\x82\xfap\xf6\x89\xea\xba\xe3\xbbM%F\xdb\\\xd1eJJ*\xc67\xca\x03\xa3\xf7(\xbb\xecN\xd4\xe7\xf2:u\x8a\b\xd5\v\xca\xfd\\\xd6\xe3\x05\xb3\x03\xd5\xe0\xd2\xf2{\'\x8b\xdf\xa1\xbe}\xb2\xe4y\xbb\xe6\x1f\x10c\xf5WQ\x82\x04\x01C\x83,\x90\x1a\xfa\x8e\x17\x89\xe2\xedX\x8d\rmq\t\xb5$\xb4\x9b\x92z\xd6/-\x13,\xb5%\x8eM/\x04\xa7\x7f\x1b\x85\xf1\xa4X\x17\xbb\x1cR14\xfb!\b\x10\xe8\xb2\xd41gK\xe4\xea\xe39d\bL\xe5\x1b\xbd[\x9bWD:\r&\xe9\vn^\xcc\x86\xe3\xce1>3{\xaa{\xbd0P\x9f\xa68\xf5\x82\xb8\x9aD\x9c{\xe6\xf8\xcbD\xb5aJ\xb0\x92\x89\xbc\x80\x1ch\x89\xe7\xdd]q,\xec\xc4\xa5\x93\xe5,\x0e,>/\xaf|\xf0\x01V\x7f\xc9?\xba\x16\xe4$+}5dy\xb1\xef\xf1m\xa5\x94d9\xaf\xcfq\x8b=\x026\xef\r\x91\x18\xc5\xb6\xb9fM\x8ayZ\xbcd\xa5\x8a\x88\x98\xc3\xfc`\xa6\xba\x1f\x17\v$\x88g\xb4\xad\b\xc1\xddW\xa6\xc1\xb7\xb0\xa3\x84Q\x13GoU\xe2\xb7\x03\x9c\xd5\x0f\xa8\x0ef\"\x15\x82\xe7\xbd\xf8\xca\x10f\xfe6h\xe9\xc3\xc2\xa0O:\xac~\x1a\xf7\xbeF\xbe\xe5\xf0\x81\xd6&\xc00x0, &(0x7f00000003c0)=""/46, 0x2e}}, 0x10) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x4, 0x4, &(0x7f0000000680)=ANY=[@ANYRES64=r3], &(0x7f0000000380)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r6}, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000600)=ANY=[@ANYBLOB="90000000", @ANYRES16=r8, @ANYBLOB="0100000000000002000005000000180001801400020073797a5f74756e000000000000000000080005000a0f00005c0003800400010054000380"], 0x90}}, 0x0) write(0xffffffffffffffff, &(0x7f0000000000)="240000001a005f0214f9f407000904000a000000fe0000000000000008000f00fd000000", 0x85) fcntl$setlease(0xffffffffffffffff, 0x400, 0x1) open(&(0x7f0000000000)='./bus\x00', 0x22103, 0x6) fcntl$setlease(0xffffffffffffffff, 0x400, 0x1) 2.79498335s ago: executing program 5 (id=7876): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a58000000160a0302000200000000000002"], 0x80}}, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, 0x0, &(0x7f0000000100)='GPL\x00'}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) prctl$PR_SET_NAME(0xf, &(0x7f0000000140)='+}[@\x00') r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001d40)=[{&(0x7f0000000100)=ANY=[@ANYBLOB="2c00000010008100000000000080000000000000", @ANYRES32=0x0, @ANYBLOB="0a043cbf", @ANYRES32, @ANYBLOB="0a001b"], 0x2c}], 0x1}, 0x0) 2.764061843s ago: executing program 5 (id=7879): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002010000850000004300000095"], 0x0, 0x100000, 0x0, 0x0, 0x1e00, 0x0, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) r2 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000b80)=ANY=[@ANYBLOB="1b00000000000000000000000020"], 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc}, 0x94) r4 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r3}, 0x10) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000300)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a44000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40000000010800034000000014480000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a31000000001c0003801800008008000340000000020c0004400000000000000c7f1400"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=@newlink={0x38, 0x10, 0x439, 0x1, 0x0, {0x0, 0x0, 0x0, 0x0, 0x4f851}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @sit={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_ENCAP_TYPE={0x6, 0xf, 0x1}]}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x800}, 0x40080) sendmsg$NFT_MSG_GETSETELEM(r6, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000805}, 0x8000) perf_event_open$cgroup(&(0x7f00000002c0)={0x5, 0x80, 0x0, 0x6, 0x82, 0xf7, 0x0, 0x9, 0x1300, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x3e14, 0x3, @perf_config_ext={0xffff888237c0a080, 0x18000000}, 0xa0, 0x8, 0x7, 0x2, 0xfffffffffffffffd, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x8}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x3) pipe2(&(0x7f0000000280), 0x84800) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000071120d000000000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000100)=@o_path={&(0x7f0000000040)='./file0\x00', r2, 0x4000, r4}, 0x18) r8 = add_key$keyring(&(0x7f0000000080), &(0x7f0000000540)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r8, 0x0, &(0x7f00000000c0)=@chain) r9 = socket$netlink(0x10, 0x3, 0x0) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r10, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x1c, 0x7, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x1c}}, 0x0) close_range(r9, 0xffffffffffffffff, 0x0) 2.29176041s ago: executing program 5 (id=7883): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0x7, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800"/15, @ANYRES32=r0, @ANYBLOB="0000000000000000b702000000ddff00850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000007c0)={&(0x7f0000000080)='sys_enter\x00', r1}, 0x10) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='map_files\x00') getdents64(r2, &(0x7f0000002580)=""/78, 0x98e88740632bc26c) 2.254005564s ago: executing program 5 (id=7887): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000080)={0x0, &(0x7f0000000040)}) syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000540)='./file0\x00', 0x80000a, &(0x7f0000000300)=ANY=[@ANYBLOB="2631d812916811022a5acb696f636861727365742569736f5e9a5ce93801b9beaddf047a4aa54bb60f257c3dbef7ed0c7ce0000000", @ANYRESHEX=0x0, @ANYBLOB=',hide,utf8,showassoc,cruft,map=off,cruft,\x00'], 0x2, 0x54e, &(0x7f0000000840)="$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") connect$phonet_pipe(0xffffffffffffffff, &(0x7f0000001000)={0x23, 0x0, 0x0, 0x1}, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000500)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x13, 0xc, &(0x7f0000000300)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) r0 = shmget(0x1, 0x4000, 0x200, &(0x7f0000ffb000/0x4000)=nil) socket$igmp6(0xa, 0x3, 0x2) prlimit64(0x0, 0xe, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) shmat(r0, &(0x7f0000ff9000/0x1000)=nil, 0x4000) 2.176617822s ago: executing program 1 (id=7892): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a58000000160a0302000200000000000002"], 0x80}}, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000a80)=ANY=[], &(0x7f0000000100)='GPL\x00'}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) prctl$PR_SET_NAME(0xf, &(0x7f0000000140)='+}[@\x00') r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001d40)=[{&(0x7f0000000100)=ANY=[@ANYBLOB="2c00000010008100000000000080000000000000", @ANYRES32=0x0, @ANYBLOB="0a043cbf", @ANYRES32, @ANYBLOB="0a001b"], 0x2c}], 0x1}, 0x0) 2.117209688s ago: executing program 1 (id=7894): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[], 0x1c}}, 0x0) 2.054413874s ago: executing program 1 (id=7897): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0x7, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800"/15, @ANYRES32=r0, @ANYBLOB="0000000000000000b702000000ddff00850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000007c0)={&(0x7f0000000080)='sys_enter\x00', r1}, 0x10) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='map_files\x00') getdents64(r2, &(0x7f0000002580)=""/78, 0x98e88740632bc26c) 2.043298405s ago: executing program 6 (id=7898): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000000800000008"], 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0x22, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000059"], 0x0, 0x0, 0x0, 0x0, 0x41000}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{r0}, 0x0, &(0x7f0000000180)}, 0x20) 1.986113331s ago: executing program 1 (id=7900): openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0xd40, 0xd2) socket$phonet_pipe(0x23, 0x5, 0x2) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000880)}, 0x240448c1) recvmsg$unix(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000180)=""/22, 0x16}], 0x1}, 0x0) r2 = syz_io_uring_setup(0x66e, &(0x7f0000000240)={0x0, 0x965f, 0x10100, 0xffffffff, 0x62}, &(0x7f00000000c0)=0x0, &(0x7f0000000200)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000040)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x18, 0x4004, @fd_index, 0xe871, 0x0, 0x0, 0xa, 0x1, {0x1}}) io_uring_enter(r2, 0x567, 0x2583, 0x0, 0x0, 0x0) ioctl$sock_FIOGETOWN(r1, 0x8903, &(0x7f0000000100)=0x0) r6 = perf_event_open(&(0x7f0000000540)={0x1, 0x80, 0xa, 0x0, 0x0, 0xa, 0x0, 0x5, 0x44, 0x9, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, @perf_bp={&(0x7f0000000380), 0x3}, 0x80, 0xa7, 0x2, 0x5, 0xbe, 0x9b9b, 0x6fff, 0x0, 0x5, 0x0, 0x3}, r5, 0x5, 0xffffffffffffffff, 0xf) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r6, 0x4008240b, &(0x7f00000002c0)={0x5, 0x80, 0x5f, 0x9, 0x75, 0x7, 0x0, 0xe1f3, 0x10201, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x2, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x4, @perf_bp={0x0, 0xb}, 0x100, 0x0, 0xde6, 0x7, 0x2, 0x4, 0x2, 0x0, 0x4, 0x20, 0xc789}) socket$nl_route(0x10, 0x3, 0x0) getrusage(0xffffffffffffffff, 0x0) io_uring_register$IORING_REGISTER_FILES_UPDATE2(r2, 0xe, &(0x7f0000000500)={0x4, 0x0, &(0x7f00000004c0), &(0x7f0000000000)=[0x400, 0x8, 0x6, 0x5, 0x9, 0xfffffffffffff3f1, 0x6]}, 0x20) open(&(0x7f0000000180)='.\x00', 0x0, 0x0) r7 = open(&(0x7f0000000180)='.\x00', 0x0, 0x0) flock(r7, 0x2) socket$nl_route(0x10, 0x3, 0x0) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r9 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r10, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0x3}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000480)=@newtfilter={0x84, 0x2c, 0xd27, 0x70bd26, 0x25dfdc00, {0x0, 0x0, 0x0, r10, {0x2, 0x4}, {}, {0x8, 0xf}}, [@filter_kind_options=@f_matchall={{0xd}, {0x50, 0x2, [@TCA_MATCHALL_ACT={0x4c, 0x2, [@m_gact={0x48, 0x1, 0x0, 0x0, {{0x9}, {0x1c, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0x6, 0x1000, 0x20000000, 0xfffffffc, 0x7ff}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3, 0x3}}}}]}]}}]}, 0x84}, 0x1, 0x0, 0x0, 0x20000010}, 0x20000000) 1.914186548s ago: executing program 6 (id=7903): openat$sndtimer(0xffffffffffffff9c, 0x0, 0x2000) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x4, &(0x7f0000000240), 0x22, 0x4d5, &(0x7f0000000580)="$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") r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0xd, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffd82, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{r0}, &(0x7f0000000200), &(0x7f0000000240)=r1}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) fallocate(r2, 0x0, 0x9e59, 0x10000) 1.843477775s ago: executing program 6 (id=7906): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="1801000000000000000000004b84ffec850000006d000000850000002a00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x4e21, @broadcast}, 0x10) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x9075c2, 0x56) r1 = bpf$MAP_CREATE(0x0, 0x0, 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000", @ANYRES32=r1, @ANYBLOB], &(0x7f0000000580)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x10) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000400)={0x3, 0x4, 0x4, 0xa, 0x0, r1, 0x2, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x5}, 0x50) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) bind$bt_l2cap(r3, &(0x7f0000000000)={0x1f, 0x0, @any, 0x0, 0x1}, 0xe) listen(r3, 0x372) socket$kcm(0x10, 0x2, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r4, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x200000}, 0x1c) r5 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r5, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000740), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000004c0)={0x14, r7, 0x1, 0x70bd2c, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x20000800}, 0x800) 1.79851018s ago: executing program 5 (id=7909): openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0xd40, 0xd2) socket$phonet_pipe(0x23, 0x5, 0x2) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000880)}, 0x240448c1) recvmsg$unix(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000180)=""/22, 0x16}], 0x1}, 0x0) r2 = syz_io_uring_setup(0x66e, &(0x7f0000000240)={0x0, 0x965f, 0x10100, 0xffffffff, 0x62}, &(0x7f00000000c0)=0x0, &(0x7f0000000200)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000040)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x18, 0x4004, @fd_index, 0xe871, 0x0, 0x0, 0xa, 0x1, {0x1}}) io_uring_enter(r2, 0x567, 0x2583, 0x0, 0x0, 0x0) ioctl$sock_FIOGETOWN(r1, 0x8903, &(0x7f0000000100)=0x0) r6 = perf_event_open(&(0x7f0000000540)={0x1, 0x80, 0xa, 0x0, 0x0, 0xa, 0x0, 0x5, 0x44, 0x9, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, @perf_bp={&(0x7f0000000380), 0x3}, 0x80, 0xa7, 0x2, 0x5, 0xbe, 0x9b9b, 0x6fff, 0x0, 0x5, 0x0, 0x3}, r5, 0x5, 0xffffffffffffffff, 0xf) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r6, 0x4008240b, &(0x7f00000002c0)={0x5, 0x80, 0x5f, 0x9, 0x75, 0x7, 0x0, 0xe1f3, 0x10201, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x2, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x4, @perf_bp={0x0, 0xb}, 0x100, 0x0, 0xde6, 0x7, 0x2, 0x4, 0x2, 0x0, 0x4, 0x20, 0xc789}) socket$nl_route(0x10, 0x3, 0x0) getrusage(0xffffffffffffffff, &(0x7f0000000400)) io_uring_register$IORING_REGISTER_FILES_UPDATE2(r2, 0xe, &(0x7f0000000500)={0x4, 0x0, &(0x7f00000004c0), &(0x7f0000000000)=[0x400, 0x8, 0x6, 0x5, 0x9, 0xfffffffffffff3f1]}, 0x20) r7 = open(&(0x7f0000000180)='.\x00', 0x0, 0x0) r8 = open(&(0x7f0000000180)='.\x00', 0x0, 0x0) flock(r8, 0x2) r9 = socket$nl_route(0x10, 0x3, 0x0) r10 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r10, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r11 = socket(0x400000000010, 0x3, 0x0) r12 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r12, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r11, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r13, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0x3}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r11, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000480)=@newtfilter={0x84, 0x2c, 0xd27, 0x70bd26, 0x25dfdc00, {0x0, 0x0, 0x0, r13, {0x2, 0x4}, {}, {0x8, 0xf}}, [@filter_kind_options=@f_matchall={{0xd}, {0x50, 0x2, [@TCA_MATCHALL_ACT={0x4c, 0x2, [@m_gact={0x48, 0x1, 0x0, 0x0, {{0x9}, {0x1c, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0x6, 0x1000, 0x20000000, 0xfffffffc, 0x7ff}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3, 0x3}}}}]}]}}]}, 0x84}, 0x1, 0x0, 0x0, 0x20000010}, 0x20000000) sendmsg$nl_route_sched(r9, &(0x7f0000000700)={0x0, 0x1e5, &(0x7f00000006c0)={&(0x7f0000000440)=@deltaction={0x28, 0x31, 0x101, 0x0, 0x0, {}, [@TCA_ACT_TAB={0x14, 0x1, [{0x10, 0x1, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'gact\x00'}}]}]}, 0x28}}, 0x0) flock(r7, 0x5) syz_genetlink_get_family_id$mptcp(0x0, 0xffffffffffffffff) ioctl$SG_GET_SG_TABLESIZE(r7, 0x227f, &(0x7f0000000080)) socket(0xa, 0x3, 0x3a) 1.619466818s ago: executing program 4 (id=7919): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000080)={0x0, &(0x7f0000000040)}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kmem_cache_free\x00'}, 0x10) syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000540)='./file0\x00', 0x80000a, &(0x7f0000000300)=ANY=[@ANYBLOB="2631d812916811022a5acb696f636861727365742569736f5e9a5ce93801b9beaddf047a4aa54bb60f257c3dbef7ed0c7ce0000000", @ANYRESHEX=0x0, @ANYBLOB=',hide,utf8,showassoc,cruft,map=off,cruft,\x00'], 0x2, 0x54e, &(0x7f0000000840)="$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") bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffff"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x32, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x37, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000000000fc850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000500)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x13, 0xc, &(0x7f0000000300)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) r0 = shmget(0x1, 0x4000, 0x200, &(0x7f0000ffb000/0x4000)=nil) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB], 0x50) shmat(r0, &(0x7f0000ff9000/0x1000)=nil, 0x4000) shmctl$SHM_STAT(r0, 0xd, 0x0) r1 = syz_open_procfs$pagemap(0x0, &(0x7f0000001080)) ioctl$PAGEMAP_SCAN(r1, 0xc0606610, &(0x7f0000000140)={0x60, 0x0, &(0x7f0000001000/0x3000)=nil, &(0x7f0000ffb000/0x4000)=nil, 0x0, &(0x7f00000000c0)=[{0x800000000}], 0x1, 0x100000c01, 0x0, 0x0, 0x0, 0x6e}) open(0x0, 0x163361, 0x501c998c4dfcafcd) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x95255000) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000700)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x2000000, &(0x7f0000000380)={[{@grpjquota}, {@init_itable_val={'init_itable', 0x3d, 0x7}}, {@dioread_nolock}, {@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0x7fffffff}}]}, 0x53, 0x4f3, &(0x7f00000012c0)="$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") munmap(&(0x7f0000001000/0x3000)=nil, 0x3000) lchown(&(0x7f0000000200)='./file0/file0\x00', 0xee01, 0x0) 1.321037528s ago: executing program 8 (id=7924): setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(0xffffffffffffffff, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x11a, 0x1, &(0x7f0000000080)=@gcm_128={{0x304}, "bb28ced7b820ec2d", "ca08bd91171e6405c84cdc6e52f57229", "f5ce6f37", "fe017c9f4e95f742"}, 0x28) setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x11a, 0x1, &(0x7f0000000000)=@gcm_128={{0x304}, "8d37426fc319b3e9", "1d1e29c4afbc743d873ce51a718396bd", "b780b555", "c876f566ad6b9336"}, 0x28) 1.311276099s ago: executing program 4 (id=7925): syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f00000007c0)='./file0\x00', 0x0, &(0x7f0000000100)={[{@init_itable_val={'init_itable', 0x3d, 0x1}}, {@errors_remount}, {@dioread_lock}, {@barrier}, {@bsdgroups}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x2000}}]}, 0x1, 0x783, &(0x7f0000001340)="$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") write$P9_RREADLINK(0xffffffffffffffff, &(0x7f0000000000)={0xffffffffffffff23, 0x17, 0x2, {0x7, './file0'}}, 0xfffffdab) 1.267806593s ago: executing program 8 (id=7926): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x20, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) socket$key(0xf, 0x3, 0x2) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r2, 0x0, 0x4) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}, 0x100002, 0x0, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32=r3, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bf"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}, 0x94) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={0x0, &(0x7f0000000340), 0x2c, 0x0, 0x0, 0x4}, 0x28) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00'}, 0x10) fadvise64(0xffffffffffffffff, 0x1, 0x6, 0x2) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000340)='net/sockstat6\x00') ioctl$BTRFS_IOC_SUBVOL_GETFLAGS(r5, 0x80089419, &(0x7f0000000400)) r6 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$SIOCSIFMTU(r6, 0x8923, &(0x7f0000000140)={'vlan0\x00', 0x8}) 1.267451383s ago: executing program 4 (id=7927): r0 = open(&(0x7f0000000280)='.\x00', 0x40080, 0x1d2) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x4, 0x510, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x9}, 0x0, 0x10000, 0x0, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = socket(0x10, 0x3, 0x0) connect$netlink(r1, &(0x7f00000014c0)=@proc={0x10, 0x0, 0x1}, 0xc) sendmsg$nl_route_sched(r1, &(0x7f0000000080)={&(0x7f0000000000), 0xc, &(0x7f0000000040)={&(0x7f0000001540)=@newtaction={0x18, 0x30, 0x829, 0x0, 0x0, {}, [{0x4}]}, 0x18}}, 0x0) fcntl$notify(r0, 0x402, 0x8000003d) connect$rxrpc(r0, &(0x7f0000000040)=@in4={0x21, 0x2, 0x2, 0x10, {0x2, 0x4e24, @initdev={0xac, 0x1e, 0x1, 0x0}}}, 0x24) r2 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000640)=ANY=[@ANYBLOB="1b00000000000000000000000020"], 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000002040)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001000000000000000640000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70800000e0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000095"], &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x41100, 0x8, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='kfree\x00', r3}, 0x18) connect$can_bcm(0xffffffffffffffff, &(0x7f0000000000), 0x10) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000003000010850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x60, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffff9ce}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000a80)='kfree\x00', r5}, 0x18) bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="07000000040000000001000001"], 0x50) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000bb00551a000000000000000018120000", @ANYBLOB="0000000000000000b703000000000000850000001b000000b700000000000000"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x21, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='kfree\x00', r6, 0x0, 0x5}, 0x18) r7 = syz_io_uring_setup(0x2439, &(0x7f0000001480)={0x0, 0x1064, 0x1000, 0x7, 0x40222}, &(0x7f00000006c0)=0x0, &(0x7f00000000c0)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r8, 0x4, &(0x7f0000000040)=0xfffffffd, 0x0, 0x4) io_uring_enter(r7, 0x47f8, 0x1e43, 0x2000000000000000, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020207025000000002dba513d7b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000008fd8850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x4, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 1.266927893s ago: executing program 8 (id=7928): bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014fa0000b7030000000008008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000020000095"], &(0x7f0000000080)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000080)='kfree\x00', r1, 0x0, 0xd192}, 0x18) ioctl$TIOCNXCL(r1, 0x540d) socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x1, 0x803, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000009c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x41) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={0x0, r3, 0x0, 0x200000000005}, 0x18) bpf$PROG_LOAD(0x5, 0x0, 0x0) r4 = socket$phonet_pipe(0x23, 0x5, 0x2) setsockopt$SO_BINDTODEVICE(r4, 0x1, 0x19, &(0x7f0000000040)='team_slave_1\x00', 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x8, 0xf9, 0x7ffc1ffb}]}) r5 = syz_clone(0x0, 0x0, 0x9, 0x0, 0x0, 0x0) ptrace(0x10, r5) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) fcntl$lock(0xffffffffffffffff, 0x5, &(0x7f0000000180)={0x0, 0x1, 0x86, 0x80000000}) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r6 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSETMODE(r6, 0x4b45, 0x1) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) unshare(0x22020600) getsockopt$inet6_buf(r7, 0x29, 0x6, 0x0, &(0x7f00000005c0)) syslog(0x2, &(0x7f0000000040)=""/5, 0x5) setxattr$trusted_overlay_origin(0x0, &(0x7f0000000140), &(0x7f00000001c0), 0x2, 0x2) 1.224402317s ago: executing program 8 (id=7929): openat$sndtimer(0xffffffffffffff9c, 0x0, 0x2000) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x4, &(0x7f0000000240), 0x22, 0x4d5, &(0x7f0000000580)="$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") r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0xd, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffd82, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{r0}, &(0x7f0000000200), &(0x7f0000000240)=r1}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) fallocate(r2, 0x0, 0x9e59, 0x10000) 1.140656106s ago: executing program 8 (id=7930): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) getsockopt$inet6_int(r1, 0x29, 0xca, 0x0, &(0x7f0000000280)) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000002c0), 0x4) waitid(0x0, 0x0, 0x0, 0x4, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000200), 0x4) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x10, &(0x7f0000000800)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32, @ANYBLOB="0000000000000000b70500000800000085000000b600000095"], &(0x7f00000007c0)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000000)='kfree\x00', r2}, 0x10) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000080)=@gcm_128={{0x304}, "bb28ced7b820ec2d", "ca08bd91171e6405c84cdc6e52f57229", "f5ce6f37", "fe017c9f4e95f742"}, 0x28) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000000)=@gcm_128={{0x304}, "8d37426fc319b3e9", "1d1e29c4afbc743d873ce51a718396bd", "b780b555", "c876f566ad6b9336"}, 0x28) 1.092842311s ago: executing program 8 (id=7931): syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f00000001c0)='./file1\x00', 0x3000046, &(0x7f0000000bc0)={[{@dioread_nolock}, {@data_err_abort}, {@inlinecrypt}, {@noauto_da_alloc}, {@data_err_ignore}, {@nojournal_checksum}, {@errors_remount}, {@grpquota}, {@noblock_validity}, {@user_xattr}, {@nombcache}, {@errors_remount}]}, 0x11, 0x553, &(0x7f0000001080)="$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") r0 = shmget$private(0x0, 0x8000, 0x10, &(0x7f0000ff5000/0x8000)=nil) r1 = socket$rds(0x15, 0x5, 0x0) bind$rds(r1, &(0x7f0000000040)={0x2, 0x4e22, @loopback}, 0x10) sendmsg$rds(r1, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000780)=[@rdma_args={0x48, 0x114, 0x1, {{}, {0x0}, &(0x7f00000006c0)=[{0x0}], 0x1}}], 0x48}, 0x0) shmat(r0, &(0x7f0000ffb000/0x2000)=nil, 0x4000) mremap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1000, 0x3, &(0x7f0000fff000/0x1000)=nil) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$sock_SIOCDELRT(r1, 0x890c, &(0x7f0000000340)={0x0, @rc={0x1f, @none, 0x5}, @xdp={0x2c, 0x10, 0x0, 0x14}, @l2tp={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x31}, 0x4}, 0x8000, 0x0, 0x0, 0x0, 0x6, &(0x7f0000000180)='bond0\x00', 0x4, 0x800, 0x4}) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="58000000020605000000000000000000000000000900020073797a3100000000050005000a000000050001000600000013000300686173683a6e65742c696661636500000c0007800800124005000000050004"], 0x58}, 0x1, 0x0, 0x0, 0x1}, 0x800) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f0000000c00)=@filter={'filter\x00', 0x42, 0x4, 0x348, 0xffffffff, 0xf8, 0x0, 0x1c8, 0xffffffff, 0xffffffff, 0x2b0, 0x2b0, 0x2b0, 0xffffffff, 0x5, 0x0, {[{{@ip={@empty, @dev, 0x0, 0x0, 'bridge_slave_1\x00', 'nr0\x00'}, 0x3127, 0xd0, 0xf8, 0x1ba, {0x46010000}, [@common=@addrtype={{0x30}}, @common=@addrtype={{0x30}}]}, @REJECT={0x28}}, {{@ip={@dev={0xac, 0x14, 0x14, 0x11}, @broadcast, 0xffffffff, 0xff000000, 'vlan1\x00', 'macvlan1\x00', {}, {0xff}, 0x16, 0x0, 0x8}, 0x287, 0x70, 0xd0, 0x0, {0x0, 0x4}}, @common=@SET={0x60, 'SET\x00', 0x0, {{0xffffffffffffffff, [0x2, 0x1], 0x4, 0x1}, {0x0, [0x4, 0x11, 0x5, 0x1, 0x5], 0x4, 0x3}}}}, {{@ip={@multicast1, @broadcast, 0x0, 0x0, 'lo\x00', 'veth0_virt_wifi\x00'}, 0x0, 0xc0, 0xe8, 0x0, {}, [@common=@osf={{0x50}, {'syz1\x00', 0x0, 0x1, 0x1, 0x1}}]}, @REJECT={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x3a8) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a5df850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r4 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='rss_stat\x00', r4}, 0x10) r5 = socket(0x27, 0x2, 0x0) setsockopt$inet6_group_source_req(r5, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}, 0x20000}}, {{0xa, 0x0, 0x40000, @dev={0xfe, 0x80, '\x00', 0x26}}}}, 0x108) socket(0x2, 0x4, 0x0) syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x9, &(0x7f00000002c0), 0x4, 0x50e, &(0x7f0000000e40)="$eJzs3c1vVF8ZAOD33nZoKYUBZaFGBRFFQ5h+AA1hI2w0hpCYEOPCBdR2aJrOME2nRFpJbJfuSSRxpX+COxcmrFy4c6c7N7gwQSUSauJizL0zbQf6Kf2YXzvPk9zee84Z5j1nhnPO3APTE0DXuhgRSxFxIiIeRUSxlZ+0jrjTPLLHvX/7fGLl7fOJJBqNB/9M8vIsL9r+TOZU6zn7fx4R34v4SbIxbn1hcWa8UinPtdJD89XZofrC4rXptJUzOjYyNnzr+s3RfWvrhepv33x3+t4Pf/+7r7z+09K3f5ZVa/AXp/Oy9nbsp2bTCzHYltcbEfcOIliH9Lb+/nD0ZL3tcxFxKe//xejJ300A4DhrNIrRKLanAYDjLrv/H4wkLbXWAgYjTUul5hre+RhIK7X6/NVi7emTycjXsM5GIX08XSkPt9YKz0YhydIj+fV6evSD9Ivy9Yg4FxEv+k7m5aWJWmWykx98AKCLnfpo/n/X15z/t/fucCoHAByc/k5XAAA4dOZ/AOg+5n8A6D7/x/zv24EAcEy4/weA7mP+B4Dus+P8v3w49QAADsUP7t/PjsZK8/dfr/6m7muT5fpMqfp0ojRRm5stTdVqU5VyaaLR2On5KrXa7MiNtWR9YfFhtfb0yfzD6er4VPlhuXCQjQEAduXchVd/ySb9pdsn8yPa9nIwV8Pxlna6AkDH9HS6AkDH+D4PdK9d3ONbBoBjbpMtej+w5X8RemnzVziqrnzR+j90q72s/1s7gKPt09b/v7Pv9QAOnzkculejkdjzHwC6jDV+YE///g8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABdajA/krSU7wW+lP1MS6WI0xFxNgrJ4+lKeTgizkTEn/sKfVl6pNOVBgD2KP170tr/60rx8mB7STEiTiT/6cuuT0TET3/14JfPxufn50ay/H+t5c+/bOUnjU41AgBYdWdjVj5Pj7bObTfy798+n1g9DrOKb+42NxfN4q60jmZJb/Tm5/4oRMTAv5NWuin7vNKzD/GXliPiC+vtf9YWYTBfA2nufPpx/Cz26QOIv/76fxw//SB+mpdl50L+Wnx+H+oC3ebV3eY42ep7WRdr9b80Lubnzft/fz5C7V02/mVjycqG8S9dG/96NsRP8j5/cS29fU3e3PjD9zdkNorNsuWIL/VuFj9Zi59sPv4WLu8ufPz1y1+9tFVZ49cRVzZt/+qO1NV8mB2ar84O1RcWr01Xx6fKU+Uno6NjI2PDt67fHB3K16ibP/+4WYx/3L56ZsvXZjliYIv4/du3P76xfbPX/Oa/j378tW3if+vrm7//57eJn82J39xl/PGBO1tu353Fn1xtf6G9ZMf3P67uFDhtnl7/bXFyl1UFAA5BfWFxZrxSKc/tcJF91tzpMS6O5kUsRezXE+aLEhHxWWhXl1ykse1jfvSJPbfTIxNw0NY7fadrAgAAAAAAAAAAAAAAbKW+sDjTd8Df1up0GwEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADi+/hcAAP//G4rEcQ==") r6 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./file1\x00', 0x143142, 0x40) pwritev2(r6, &(0x7f0000000100)=[{&(0x7f0000000080)="ff", 0x1}], 0x1, 0x5405, 0x0, 0x0) ioctl$EXT4_IOC_GET_ES_CACHE(r6, 0xc020662a, &(0x7f0000000640)={0x7, 0x105, 0x5, 0x7f}) 1.092500491s ago: executing program 4 (id=7932): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0x7, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000000000000000000000000000001811", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000000ddff00850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000007c0)={&(0x7f0000000080)='sys_enter\x00', r1}, 0x10) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='map_files\x00') getdents64(r2, &(0x7f0000002580)=""/78, 0x98e88740632bc26c) 1.054634344s ago: executing program 1 (id=7933): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$bt_BT_VOICE(r0, 0x112, 0xb, 0x0, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0xfe, 0x0, 0x800000100, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x9ee6, 0x200000002}, 0x1192a0, 0x0, 0xfffffffd, 0x0, 0x40000000000000, 0x4, 0xfffe, 0x0, 0x0, 0x0, 0x2000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) syz_io_uring_setup(0x5c6, &(0x7f0000000140)={0x0, 0x1, 0x0, 0x4}, &(0x7f0000000300)=0x0, &(0x7f0000000580)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffff8, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f00000004c0)=@IORING_OP_TIMEOUT={0xb, 0x18, 0x0, 0x0, 0x4, &(0x7f0000000280)={0x0, 0x989680}, 0x1, 0x40, 0x1}) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x26e1, 0x0) pipe(&(0x7f0000000400)={0xffffffffffffffff}) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) splice(r3, 0x0, r4, 0x0, 0x88000cc, 0x0) 1.054224804s ago: executing program 4 (id=7934): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$bt_BT_VOICE(r0, 0x112, 0xb, 0x0, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0xfe, 0x0, 0x800000100, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x9ee6, 0x200000002}, 0x1192a0, 0x0, 0xfffffffd, 0x0, 0x40000000000000, 0x4, 0xfffe, 0x0, 0x0, 0x0, 0x2000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) socket$nl_generic(0x10, 0x3, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r1 = syz_io_uring_setup(0x5c6, &(0x7f0000000140)={0x0, 0x1, 0x0, 0x4}, &(0x7f0000000300)=0x0, &(0x7f0000000580)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffff8, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f00000004c0)=@IORING_OP_TIMEOUT={0xb, 0x18, 0x0, 0x0, 0x4, &(0x7f0000000280)={0x0, 0x989680}, 0x1, 0x40, 0x1}) io_uring_enter(r1, 0x6e2, 0x3900, 0x1, 0x0, 0xe00) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x26e1, 0x0) pipe(&(0x7f0000000400)={0xffffffffffffffff}) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) splice(r4, 0x0, r5, 0x0, 0x88000cc, 0x0) 963.425414ms ago: executing program 6 (id=7935): bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0x0) io_setup(0x2044, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000016000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00', r1}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r2 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r2, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @remote}, 0xc) 941.011246ms ago: executing program 6 (id=7936): syz_open_dev$sg(&(0x7f00000003c0), 0x0, 0x5) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000001a00"/28], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000000)={r0, 0xffffffffffffffff}, 0x4) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0x11, &(0x7f0000000140)=ANY=[@ANYBLOB="180200000100000000000000000000008500000087000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000800000085000000b600000095"], &(0x7f0000000080)='GPL\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r2, 0x0, 0xe, 0x0, &(0x7f0000000940)="e0b9547e9f17dbe9abc89b6e0704", 0x0, 0x40000003, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.time\x00', 0x26e1, 0x0) perf_event_open(0x0, 0x0, 0xfffffffffffff7ff, 0xffffffffffffffff, 0x2) openat$selinux_validatetrans(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000002040)=ANY=[@ANYBLOB="1e0000000000000005000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f00000000c0)=ANY=[@ANYRES64=r1, @ANYRES32], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x100}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000400)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x20, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r3}, 0x10) socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000e4ffffff0000000000850000950000000008"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x80000, 0x28, '\x00', 0x0, 0x2}, 0x94) r4 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r4}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r5 = mq_open(&(0x7f0000000080)='$@\x00', 0x40, 0xb4, 0x0) fcntl$setlease(r5, 0x400, 0x0) mq_open(&(0x7f0000000140)='$@\x00', 0x1, 0x0, 0x0) 894.81538ms ago: executing program 5 (id=7937): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000a80)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x22, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000000)='module_request\x00', r1}, 0x10) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="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"], 0x104}, 0x1, 0x0, 0x0, 0x40010}, 0x0) socketpair(0x0, 0x0, 0x0, &(0x7f0000000140)) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfa, 0x0, 0xe4}]}, 0x10) r3 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x204, 0x2) ioctl$USBDEVFS_SUBMITURB(r3, 0x8038550a, &(0x7f0000000140)=@urb_type_control={0x2, {}, 0x2000000b, 0x80, &(0x7f0000000240)={0x3, 0x0, 0xfffa, 0x4360}, 0x8, 0x6, 0x7d, 0x0, 0x1, 0x101, 0x0}) prctl$PR_SET_NAME(0xf, &(0x7f0000000840)='+}[@\x00\xdf\v8\x00\x8d)\xde\xdfcN5w\x92\xe7x\xd4\xb0-yA4\xa4\xa8e\x8e)\xd6\xbf\'\x8eC\x13\x00\x00\xf5\x83\xed\xd9\vQ\x19Z\xaa\xcf\xb9e\x10\x17h\xd8R\x02\x9fsH\xe7\xa2\xe9\xac\xe9\x83\xe6zgq\x8e\x0e\x86\xcd\xbd\t\x18)|\x19\x05D\xbaZ\x13\xb56\xa7\xde\xec\xbc\xab\x19\xb5\x8d\xae\b\xd3>\xb7\xcc\x8e\xd91R\x83\xbc\xbca\x11\x1b\n\xef&<\x8eLF\xa7F\xc7\xb8\\\n\x1b7\xb6\x81\xf5\v\x12J\xef@{\xa7\x06\x00\x00\x00\x00\xa4\xeb\xa9BJ&y\xbf$\x10\x1dS\xbc9\x96\x98bNi\xbd~\x16\xda\xdeD\x11\x83\xb3\xf4}\x9c\x98\xdfeG\x94[=e\x84\xaa]\x92l\xe4\x85\x87B\x10B\xb1 @\xf7\xc8\xe7\xff\xb1\xb7\xae\"XZ#\xa3\xd2\vBG\xd2\x85\'\x8e$\x8c\x0f\xc4\xf4\xd6\xe1\xb9Y\t\x8c\xcc_\xec\xedP\x1e\'\xdc\x85#\x021&\xa1B\x8a\x8c[\xc3\x8c\x8d\xf4\xa9p7$\x0f\x1f\xd9+\x9cWL\xeb\xe6+\x88j\x1c\xd8\xe75\xc54\xa4\x87l\xd6\xa3\xb20\x9c\x95E\x1aj:A\x9a\x9bK\x10\x80\x8d\xc3H4\xaa\xcd\x00\xec\xb6\xbb\xd4F.\xa9q\xa7t\xc2\xd6\xa1\xcdw\xa80L_c\xea\x01[\xa5y\x06L\xfcCz[r') r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000009c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x41) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000200)='kfree\x00', r4, 0x0, 0x8ce}, 0x18) ioctl$USBDEVFS_REAPURBNDELAY(r3, 0x4008550d, 0x0) r5 = accept4(r2, &(0x7f00000003c0)=@tipc=@id, &(0x7f0000000040)=0x80, 0x800) ioctl$BTRFS_IOC_SYNC(r5, 0x9408, 0x0) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) r6 = openat$binfmt(0xffffffffffffff9c, 0x0, 0x41, 0x1ff) write$binfmt_misc(r6, &(0x7f0000000500)="626ae1aeb35f96c6aebfdcd8294f455cf6d5844026819f0854eb2e20cf777d4cb5aacf94e0e2895bf222e0b3334d4cd0712d7ff7f6c2347d956fa498bd6d1172ac88734bd87c145a2f52aa8cd945ae2504e2717de6b8a9e588445e7af5e17003ddb506a6f298195af11b87b5dfc6f2c723e6a9f7120c62337bc99e301b330c612efb5ee07d19be9e55435d7330a15d9aa10cb37477b047d259e4c8f986a74bb02141b3f78f3a524cce0add652788e52648b80aab36a9acc0c8c065a0ca0309f279dfec0b7f6face9db10633a7e9508f153ad1a0d32b880fa6733ab1a9d3c7eef1ea9d4c2fe786e", 0xe7) sendmsg$inet(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000002c0)="549f7ba8d6e402580cce0319f136956ad7762ad86df99201fa344e22486fac6120745b1a1bf5fb0819d9b67197a874ff4b0a83f34bc0afd7ed94b1ec7d34486748c9c6298b5c422b9a78e33bc57b7cf3818db9b8872b25fb1b5176ac02bc51e7612eff8d91d7aa55922c2c0bdd2be0ffc64effecb17f99a3654dd21d63bb103337866ac5df34b44c4fa59d8d62aed89a1b23d53f57d248f0448d0d46f6edc1686a09818dcc5794199d6b2f9ada3667ee2f1e986a8545e8e9f91154b3ba2b03f013d13fb68f", 0xc5}], 0x1}, 0x0) r7 = socket(0x2b, 0x80801, 0x1) connect$inet6(r7, &(0x7f00000001c0)={0xa, 0x4e23, 0xab, @loopback, 0x1}, 0x1c) setsockopt$IPT_SO_SET_ADD_COUNTERS(r7, 0x29, 0x41, 0x0, 0x58) sendmmsg$inet(r0, &(0x7f0000002e00)=[{{0x0, 0x0, 0x0}}, {{&(0x7f00000006c0)={0x2, 0x4e20, @multicast2}, 0x10, &(0x7f0000000880)=[{&(0x7f00000007c0)="791e32581be0b3a8fa4278be0bd847c821b16e831b424c4ae8073425cc65daf2fe84638c7f2c0146157e28a54597ec1416f32d1fcd8d1df70249b66b92210c740a6a43958280ec6ad481afeabbe09fb27e2b9ea5d963ee0769955bbef28841077f20406c09f8feffc84f09ef088e259f940d7832f1fc89cd1504ae525184854de2fdc9e32fe1d411bdce4da30ec71ffbc1839eebe5d7553b9294410af5da9ac8eafe23875f9957", 0xa7}, {&(0x7f0000003140)="fccb1233da57e2fac165d9adb6d6fff639cd6decebd323971ca6ddec5a9f3e81a02ed8b5d7f9ee7235d697b491dcccdaefa1c3eb84d0db24c683640770c1e178c8386b8d7976a5e5fb064eec9affe92f896f0c7ba0a454f6a5f0d95304295050bd332d98b6c3a2a50404b48adf451b9e47a45802e59dbeb24947a998a5f9449d684af5cc06047c9b9de419480c5e42aa18fb9d514776b246e756d7f51d901734989b61b0cdb0dbe69b87509bdbcdfcad09c85e2adda19e86a01f8defb3230fe442665c9d58a2cc9c6d6c9581116b0b18c5fbedd3d37dbed75228f2e71a513f656c30166a2eb7236509b7c90d136db19fa8fb7ff83bb70c26e9a334dfb23c842e0a2b7c60179f5fb9d4fe1501c96e4cbbac9f060bc3bbdc31b9e9b8922edd634393477566b6f7c7120ff2bc83ec2b7251732687802ef62c478d158a3fafd4548ae5c7e98c0d363f5e3f08cfaff077f506452d135e8bfeda32652708950118278e74205b219293d173c4330dd0564ddfbce2de40a1a32107382884f01e5f61f4065927440b81113c648bad36b0013b55038ff18cfd4c2645e9a595e219115c6831b2a6213ce655efe438e4e0a40b213f6a851c21af93ca7abf157c5b6158aa1a9fbbd1e859ec6140896b7875c881486519da1c01258856c654fb07c3d499d4e9856271609bc42a29475814fa3528a31dc9a643f0ce89760f29e301ac52c309173546248d41292abbcf2754bdddd69fe811fb633522a9f1e2223bde777b8e5d8d488ebd67ea92df34c4b6af74fe2ceb2ae4dc68a5dae77b98d29df6dd3fc336077fd121090a7e02a980b65957c9a815df1737ebf268490bcc7a452ad848a56b83f1d15760eeb56ef99b973ed5be6b010e615be20d47f5b62bee19a21f677095ce80eabb93179b91933c0ebf3982fa2c3ce3a81d13c8dc5c3502e7f0b4a671e2b31d3bfb7e0573f10c40f0f4817c18fb8bf2a1be22c1e13a4b95d41138e4ce5b72fc9eb3b5d87336707ec3ca073ba77449614313d3cef7aa1489d114101bc2c6e5cd63cfe9072a04f263381550d033db7e018000c3a8117670119d300917c53fd7b66507f4bd7e645daab0349c881fbfb620fea44e6be2c7b05cefb5437101e5842a7858008dc5768d508fd16089e7997652437c913b6750b786eda9978e4f6b519715f3d3d3920ae0a28a6604f0ac74d5af7a501945c18b299324eb3809062c44e942b34c0a07a9c5a1785b2ba1b7f2262f90d86224a9919fb28550d1049cce44a1a9d148c33fbcc83be0d6250b92e2e641a6723cc20dc7d8205198ffe9574eb622ab91aa20ff1bbb740bb7a0a41e66e9f84b4f5a09044e237168f889839540890013fcdfb555b3ad0fc8e2e28e31ae1854dbde5458f97a6e99", 0x3d8}], 0x2, &(0x7f0000001a00)}}, {{&(0x7f0000001ac0)={0x2, 0x4e23, @loopback}, 0x10, &(0x7f0000002c80), 0x0, &(0x7f0000002c00)=[@ip_tos_int={{0x14, 0x0, 0x1, 0x91d1}}, @ip_ttl={{0x14, 0x0, 0x2, 0x6c}}], 0x30}}, {{&(0x7f0000002c40)={0x2, 0x4e24, @multicast1}, 0x10, &(0x7f0000002c80), 0x0, &(0x7f0000002f80)=ANY=[@ANYBLOB], 0x128}}], 0x4, 0x480e0) 198.31978ms ago: executing program 1 (id=7938): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x20, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) socket$key(0xf, 0x3, 0x2) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r2, 0x0, 0x4) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}, 0x100002, 0x0, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32=r3, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bf"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}, 0x94) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={0x0, &(0x7f0000000340), 0x2c, 0x0, 0x0, 0x4}, 0x28) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00'}, 0x10) fadvise64(0xffffffffffffffff, 0x1, 0x6, 0x2) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000340)='net/sockstat6\x00') ioctl$BTRFS_IOC_SUBVOL_GETFLAGS(r5, 0x80089419, &(0x7f0000000400)) r6 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$SIOCSIFMTU(r6, 0x8923, &(0x7f0000000140)={'vlan0\x00', 0x8}) 150.815445ms ago: executing program 4 (id=7939): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$bt_BT_VOICE(r0, 0x112, 0xb, 0x0, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0xfe, 0x0, 0x800000100, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x9ee6, 0x200000002}, 0x1192a0, 0x0, 0xfffffffd, 0x0, 0x40000000000000, 0x4, 0xfffe, 0x0, 0x0, 0x0, 0x2000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r1 = syz_io_uring_setup(0x5c6, &(0x7f0000000140)={0x0, 0x1, 0x0, 0x4}, &(0x7f0000000300)=0x0, &(0x7f0000000580)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffff8, 0x0, 0x4) io_uring_enter(r1, 0x6e2, 0x3900, 0x1, 0x0, 0xe00) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x26e1, 0x0) pipe(&(0x7f0000000400)={0xffffffffffffffff}) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) splice(r3, 0x0, r4, 0x0, 0x88000cc, 0x0) 0s ago: executing program 6 (id=7940): r0 = socket$netlink(0x10, 0x3, 0xf) r1 = socket$netlink(0x10, 0x3, 0xf) bind$netlink(r1, &(0x7f0000000a40)={0x10, 0x0, 0x25dfdbfb, 0x2ffffffff}, 0xc) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000000), 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r1, 0x10e, 0x4, &(0x7f00000003c0)=0x6, 0xdc) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x5, 0x7, &(0x7f0000000300)=ANY=[@ANYBLOB="180000000000e0ff7f0000000000001811", @ANYRES32=r3], &(0x7f0000000200)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x20, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000005c0)='kmem_cache_free\x00', r4}, 0x18) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x4040004) sendmsg$IPCTNL_MSG_TIMEOUT_GET(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000400)={0x14, 0x1, 0x8, 0x101}, 0x14}}, 0x40) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r5 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDSETLED(r5, 0x4b32, 0x91) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000600)=@base={0x2, 0x4, 0x208, 0xd9, 0x1, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x2000000}, 0x50) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=@framed={{}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r6}, {}, {0x85, 0x0, 0x0, 0x1b}}]}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='kfree\x00', r7}, 0x18) r8 = syz_open_dev$tty1(0xc, 0x4, 0x3) symlinkat(0x0, 0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00') r9 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000080000000c"], 0x48) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002300000018110000", @ANYRES32=r9, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000180)='kfree\x00', r10, 0x0, 0x5}, 0x18) ioctl$KDFONTOP_GET(r8, 0x4b72, 0x0) socket$netlink(0x10, 0x3, 0x0) sendmsg$RDMA_NLDEV_CMD_STAT_GET(0xffffffffffffffff, &(0x7f0000001b80)={0x0, 0x0, &(0x7f0000001b40)={0x0, 0x20}, 0x1, 0x0, 0x0, 0x408c}, 0x40040) r11 = socket$netlink(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r11, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000000000)=ANY=[@ANYBLOB="38000000031401000000000000000000090002002f797a2f000000000800410072786500140033007465616d5f736c6176655f30"], 0x38}, 0x1, 0x0, 0x0, 0x1}, 0x8844) memfd_create(&(0x7f0000000480)='\xff\x00l\x1e\xa0 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 363.896447][T22910] RSP: 002b:00007f8db952f038 EFLAGS: 00000246 ORIG_RAX: 00000000000000be [ 363.896512][T22910] RAX: ffffffffffffffda RBX: 00007f8dbad25fa0 RCX: 00007f8dbaacf6c9 [ 363.896529][T22910] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000005 [ 363.896545][T22910] RBP: 00007f8db952f090 R08: 0000000000000002 R09: 0000000000000000 [ 363.896561][T22910] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 363.896578][T22910] R13: 00007f8dbad26038 R14: 00007f8dbad25fa0 R15: 00007ffc7667cad8 [ 363.896603][T22910] [ 364.116637][T22917] loop6: detected capacity change from 0 to 512 [ 364.150200][T22917] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 364.163909][T22239] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 364.219189][T22917] EXT4-fs error (device loop6): ext4_do_update_inode:5632: inode #2: comm syz.6.6945: corrupted inode contents [ 364.245655][T22917] EXT4-fs error (device loop6): ext4_dirty_inode:6517: inode #2: comm syz.6.6945: mark_inode_dirty error [ 364.299770][T22942] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 364.313344][T22944] netlink: 'syz.1.6956': attribute type 13 has an invalid length. [ 364.329517][T22917] EXT4-fs error (device loop6): ext4_do_update_inode:5632: inode #2: comm syz.6.6945: corrupted inode contents [ 364.332972][T22942] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 364.359429][ T1034] usb 3-1: enqueue for inactive port 0 [ 364.365028][ T1034] usb 3-1: enqueue for inactive port 0 [ 364.391299][T18985] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 364.426517][T22953] __nla_validate_parse: 4 callbacks suppressed [ 364.426534][T22953] netlink: 8 bytes leftover after parsing attributes in process `syz.7.6957'. [ 364.450074][ T1034] vhci_hcd: vhci_device speed not set [ 364.487544][T22963] siw: device registration error -23 [ 364.595462][T22981] loop6: detected capacity change from 0 to 1024 [ 364.603467][T22980] loop7: detected capacity change from 0 to 512 [ 364.616699][T22981] EXT4-fs: Ignoring removed oldalloc option [ 364.623167][T22981] EXT4-fs: Ignoring removed nomblk_io_submit option [ 364.632188][T22977] lo speed is unknown, defaulting to 1000 [ 364.638247][T22981] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e041c01c, mo2=0002] [ 364.638292][T22977] lo speed is unknown, defaulting to 1000 [ 364.646450][T22981] System zones: 0-1, 3-36 [ 364.657902][T22981] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 364.672602][T22980] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 364.695978][T18985] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 364.737074][T22980] EXT4-fs error (device loop7): ext4_do_update_inode:5632: inode #2: comm syz.7.6970: corrupted inode contents [ 364.753483][T22980] EXT4-fs error (device loop7): ext4_dirty_inode:6517: inode #2: comm syz.7.6970: mark_inode_dirty error [ 364.764763][T22991] loop6: detected capacity change from 0 to 164 [ 364.772132][T22980] EXT4-fs error (device loop7): ext4_do_update_inode:5632: inode #2: comm syz.7.6970: corrupted inode contents [ 364.789429][T22991] iso9660: Unknown parameter '&1Ø‘h*ZËiocharset%iso^š\é8¹¾­ßzJ¥K¶%|' [ 364.847854][T22998] siw: device registration error -23 [ 364.864833][T22239] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 365.206103][T23019] FAULT_INJECTION: forcing a failure. [ 365.206103][T23019] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 365.219281][T23019] CPU: 1 UID: 0 PID: 23019 Comm: syz.6.6984 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 365.219395][T23019] Tainted: [W]=WARN [ 365.219444][T23019] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 365.219462][T23019] Call Trace: [ 365.219525][T23019] [ 365.219535][T23019] __dump_stack+0x1d/0x30 [ 365.219562][T23019] dump_stack_lvl+0xe8/0x140 [ 365.219589][T23019] dump_stack+0x15/0x1b [ 365.219611][T23019] should_fail_ex+0x265/0x280 [ 365.219654][T23019] should_fail+0xb/0x20 [ 365.219710][T23019] should_fail_usercopy+0x1a/0x20 [ 365.219735][T23019] _copy_from_user+0x1c/0xb0 [ 365.219782][T23019] proc_ioctl_default+0x43/0xa0 [ 365.219856][T23019] usbdev_ioctl+0xe8b/0x1700 [ 365.219909][T23019] ? __pfx_usbdev_ioctl+0x10/0x10 [ 365.219939][T23019] __se_sys_ioctl+0xce/0x140 [ 365.219997][T23019] __x64_sys_ioctl+0x43/0x50 [ 365.220020][T23019] x64_sys_call+0x1816/0x3000 [ 365.220045][T23019] do_syscall_64+0xd2/0x200 [ 365.220071][T23019] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 365.220106][T23019] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 365.220177][T23019] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 365.220203][T23019] RIP: 0033:0x7f8dbaacf6c9 [ 365.220220][T23019] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 365.220254][T23019] RSP: 002b:00007f8db952f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 365.220277][T23019] RAX: ffffffffffffffda RBX: 00007f8dbad25fa0 RCX: 00007f8dbaacf6c9 [ 365.220366][T23019] RDX: 0000200000000000 RSI: 00000000c0105512 RDI: 0000000000000003 [ 365.220381][T23019] RBP: 00007f8db952f090 R08: 0000000000000000 R09: 0000000000000000 [ 365.220394][T23019] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 365.220408][T23019] R13: 00007f8dbad26038 R14: 00007f8dbad25fa0 R15: 00007ffc7667cad8 [ 365.220430][T23019] [ 365.492507][T23044] siw: device registration error -23 [ 365.552501][T23044] loop7: detected capacity change from 0 to 512 [ 365.582137][T23055] netlink: 'syz.5.6993': attribute type 13 has an invalid length. [ 365.604337][T23044] EXT4-fs (loop7): 1 orphan inode deleted [ 365.620265][T23044] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 365.649721][T22239] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 365.689633][T23075] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 365.707263][T23077] : renamed from vlan0 (while UP) [ 365.715352][T23075] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 365.809685][T23090] loop6: detected capacity change from 0 to 512 [ 365.833677][T23090] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 365.858677][T23090] EXT4-fs error (device loop6): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 96 vs 65376 free clusters [ 365.891882][T18985] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 365.969139][T23103] siw: device registration error -23 [ 365.984507][T23103] loop6: detected capacity change from 0 to 512 [ 365.994999][T23103] EXT4-fs (loop6): 1 orphan inode deleted [ 366.002561][T23103] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 366.028387][T18985] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 366.092930][T23114] netlink: 'syz.4.7011': attribute type 27 has an invalid length. [ 366.185731][T23123] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(3) [ 366.192291][T23123] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 366.201717][T23123] vhci_hcd vhci_hcd.0: Device attached [ 366.481995][T23152] netlink: 3 bytes leftover after parsing attributes in process `syz.7.7027'. [ 366.500942][T23152] 0ªX¹¦À: renamed from caif0 [ 366.502807][T23152] 0ªX¹¦À: entered allmulticast mode [ 366.502827][T23152] A link change request failed with some changes committed already. Interface 60ªX¹¦À may have been left with an inconsistent configuration, please check. [ 366.508392][T23152] macvtap0: refused to change device tx_queue_len [ 366.508812][T23152] netlink: 12 bytes leftover after parsing attributes in process `syz.7.7027'. [ 366.566975][T23152] loop7: detected capacity change from 0 to 512 [ 366.574527][T23154] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 366.609517][T23152] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 366.631478][T23152] EXT4-fs (loop7): 1 truncate cleaned up [ 366.637998][T23152] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 366.671899][T22239] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 366.735783][T23170] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(3) [ 366.742343][T23170] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 366.747872][T23174] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(3) [ 366.751841][T23170] vhci_hcd vhci_hcd.0: Device attached [ 366.756388][T23174] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 366.769411][T23174] vhci_hcd vhci_hcd.0: Device attached [ 366.846751][T23124] vhci_hcd: connection closed [ 366.847069][T11831] vhci_hcd: stop threads [ 366.857816][T11831] vhci_hcd: release socket [ 366.863403][T11831] vhci_hcd: disconnect device [ 367.000901][ T3416] usb 3-1: new low-speed USB device number 11 using vhci_hcd [ 367.001805][T23175] vhci_hcd: connection closed [ 367.011529][T11824] vhci_hcd: stop threads [ 367.020542][T11824] vhci_hcd: release socket [ 367.025076][T11824] vhci_hcd: disconnect device [ 367.039744][T23171] vhci_hcd: connection reset by peer [ 367.039862][ T3415] usb 11-1: new low-speed USB device number 9 using vhci_hcd [ 367.039890][ T3415] usb 11-1: enqueue for inactive port 0 [ 367.039907][ T3415] usb 11-1: enqueue for inactive port 0 [ 367.039925][ T3415] usb 11-1: enqueue for inactive port 0 [ 367.040615][T11824] vhci_hcd: stop threads [ 367.040625][T11824] vhci_hcd: release socket [ 367.040673][T11824] vhci_hcd: disconnect device [ 367.087625][T23190] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 367.109843][ T3415] vhci_hcd: vhci_device speed not set [ 367.113167][T23194] netlink: 3 bytes leftover after parsing attributes in process `syz.7.7042'. [ 367.125291][T23194] 1ªX¹¦À: renamed from 60ªX¹¦À [ 367.133201][T23194] A link change request failed with some changes committed already. Interface 61ªX¹¦À may have been left with an inconsistent configuration, please check. [ 367.152635][T23194] macvtap0: refused to change device tx_queue_len [ 367.159460][T23194] netlink: 12 bytes leftover after parsing attributes in process `syz.7.7042'. [ 367.183068][T23194] loop7: detected capacity change from 0 to 512 [ 367.191631][T23194] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 367.203712][T23194] EXT4-fs (loop7): 1 truncate cleaned up [ 367.210725][T23194] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 367.234212][T22239] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 367.443347][T23203] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(3) [ 367.449984][T23203] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 367.459008][T23203] vhci_hcd vhci_hcd.0: Device attached [ 367.551540][ T10] usb 15-1: enqueue for inactive port 0 [ 367.557291][ T10] usb 15-1: enqueue for inactive port 0 [ 367.641001][ T10] vhci_hcd: vhci_device speed not set [ 367.714465][T23218] netlink: 'syz.5.7050': attribute type 13 has an invalid length. [ 367.745043][T23220] netlink: 'syz.5.7051': attribute type 27 has an invalid length. [ 367.788861][T23204] vhci_hcd: connection closed [ 367.788931][T11831] vhci_hcd: stop threads [ 367.798094][T11831] vhci_hcd: release socket [ 367.802624][T11831] vhci_hcd: disconnect device [ 367.917994][T23241] netlink: 'syz.5.7061': attribute type 13 has an invalid length. [ 367.917994][T23242] netlink: 4 bytes leftover after parsing attributes in process `syz.6.7055'. [ 368.054731][ T29] kauditd_printk_skb: 2081 callbacks suppressed [ 368.054750][ T29] audit: type=1326 audit(368.020:55087): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23227 comm="syz.6.7055" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f8dbaac6567 code=0x7ffc0000 [ 368.083997][ T29] audit: type=1326 audit(368.020:55088): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23227 comm="syz.6.7055" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f8dbaa6b789 code=0x7ffc0000 [ 368.106977][ T29] audit: type=1326 audit(368.020:55089): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23227 comm="syz.6.7055" exe="/root/syz-executor" sig=0 arch=c000003e syscall=275 compat=0 ip=0x7f8dbaacf6c9 code=0x7ffc0000 [ 368.130067][ T29] audit: type=1326 audit(368.020:55090): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23227 comm="syz.6.7055" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f8dbaac6567 code=0x7ffc0000 [ 368.152957][ T29] audit: type=1326 audit(368.020:55091): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23227 comm="syz.6.7055" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f8dbaa6b789 code=0x7ffc0000 [ 368.175837][ T29] audit: type=1326 audit(368.020:55092): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23227 comm="syz.6.7055" exe="/root/syz-executor" sig=0 arch=c000003e syscall=275 compat=0 ip=0x7f8dbaacf6c9 code=0x7ffc0000 [ 368.198859][ T29] audit: type=1326 audit(368.020:55093): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23227 comm="syz.6.7055" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f8dbaac6567 code=0x7ffc0000 [ 368.221727][ T29] audit: type=1326 audit(368.020:55094): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23227 comm="syz.6.7055" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f8dbaa6b789 code=0x7ffc0000 [ 368.244635][ T29] audit: type=1326 audit(368.020:55095): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23227 comm="syz.6.7055" exe="/root/syz-executor" sig=0 arch=c000003e syscall=275 compat=0 ip=0x7f8dbaacf6c9 code=0x7ffc0000 [ 368.267623][ T29] audit: type=1326 audit(368.020:55096): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23227 comm="syz.6.7055" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f8dbaac6567 code=0x7ffc0000 [ 368.528372][T23250] loop7: detected capacity change from 0 to 164 [ 368.552023][T22131] printk: udevd: 3 output lines suppressed due to ratelimiting [ 368.585782][T23250] iso9660: Unknown parameter '&1Ø‘h*ZËiocharset%iso^š\é8¹¾­ßzJ¥K¶%|' [ 368.825099][T23272] netlink: 'syz.4.7074': attribute type 13 has an invalid length. [ 368.879970][T23275] siw: device registration error -23 [ 369.063748][T23268] IPv6: NLM_F_CREATE should be specified when creating new route [ 369.250897][T23288] usb usb1: usbfs: interface 0 claimed by hub while 'syz.6.7081' sets config #0 [ 369.311428][T23295] vhci_hcd vhci_hcd.0: pdev(7) rhport(0) sockfd(3) [ 369.317983][T23295] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 369.325558][T23295] vhci_hcd vhci_hcd.0: Device attached [ 369.331362][T23299] netlink: '+}[@': attribute type 27 has an invalid length. [ 369.339102][T23295] loop7: detected capacity change from 0 to 164 [ 369.342444][T23299] 1ªX¹¦À: left allmulticast mode [ 369.345963][T23295] iso9660: Unknown parameter '&1Ø‘h*ZËiocharset%iso^š\é8¹¾­ßzJ¥K¶%|' [ 369.356052][T23299] veth2: left promiscuous mode [ 369.365486][T23299] veth2: left allmulticast mode [ 369.371528][T23299] veth4: left promiscuous mode [ 369.376398][T23299] veth4: left allmulticast mode [ 369.383180][T23299] veth6: left promiscuous mode [ 369.387961][T23299] veth6: left allmulticast mode [ 369.428064][T23300] lo speed is unknown, defaulting to 1000 [ 369.434737][T23300] lo speed is unknown, defaulting to 1000 [ 369.752850][ T36] usb 15-1: new low-speed USB device number 6 using vhci_hcd [ 370.122374][T23302] loop7: detected capacity change from 0 to 512 [ 370.141288][T23302] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 370.205832][T23302] EXT4-fs error (device loop7): ext4_get_branch:178: inode #11: block 4294967295: comm syz.7.7084: invalid block [ 370.248483][T23302] EXT4-fs error (device loop7): ext4_free_branches:1023: inode #11: comm syz.7.7084: invalid indirect mapped block 4294967295 (level 1) [ 370.291210][T23302] EXT4-fs error (device loop7): ext4_free_branches:1023: inode #11: comm syz.7.7084: invalid indirect mapped block 4294967295 (level 1) [ 370.405334][T23302] EXT4-fs (loop7): 2 truncates cleaned up [ 370.411578][T23302] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 370.437574][T23334] netlink: '+}[@': attribute type 27 has an invalid length. [ 370.445129][T23296] vhci_hcd: connection reset by peer [ 370.451051][T11824] vhci_hcd: stop threads [ 370.455410][T11824] vhci_hcd: release socket [ 370.459840][T11824] vhci_hcd: disconnect device [ 370.733694][T23334] erspan0: left allmulticast mode [ 370.739907][T23334] 0ªX¹¦À: left allmulticast mode [ 370.747458][T23334] veth2: left promiscuous mode [ 370.752415][T23334] veth2: left allmulticast mode [ 370.757469][T23334] veth4: left promiscuous mode [ 370.762264][T23334] veth4: left allmulticast mode [ 370.965224][T23358] xt_CT: You must specify a L4 protocol and not use inversions on it [ 371.003009][T22239] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 371.134391][T23371] loop7: detected capacity change from 0 to 512 [ 371.163410][T23371] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 371.251698][T22239] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 371.782244][T23401] netlink: 'syz.5.7125': attribute type 27 has an invalid length. [ 371.922043][T23409] netlink: 3 bytes leftover after parsing attributes in process `syz.5.7129'. [ 371.982539][T23411] macvtap0: refused to change device tx_queue_len [ 372.027109][T23409] 1ªX¹¦À: renamed from 60ªX¹¦À [ 372.060103][T23419] netlink: 116 bytes leftover after parsing attributes in process `syz.5.7129'. [ 372.080859][T23417] loop6: detected capacity change from 0 to 512 [ 372.101532][T23409] 1ªX¹¦À: entered allmulticast mode [ 372.106775][T23409] A link change request failed with some changes committed already. Interface 61ªX¹¦À may have been left with an inconsistent configuration, please check. [ 372.144779][ T3416] usb 3-1: enqueue for inactive port 0 [ 372.151318][ T3416] usb 3-1: enqueue for inactive port 0 [ 372.189990][T23417] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 372.218559][T23417] EXT4-fs error (device loop6): ext4_do_update_inode:5632: inode #2: comm syz.6.7132: corrupted inode contents [ 372.230588][T23417] EXT4-fs error (device loop6): ext4_dirty_inode:6517: inode #2: comm syz.6.7132: mark_inode_dirty error [ 372.242249][T23417] EXT4-fs error (device loop6): ext4_do_update_inode:5632: inode #2: comm syz.6.7132: corrupted inode contents [ 372.276837][T23427] vhci_hcd vhci_hcd.0: pdev(7) rhport(0) sockfd(3) [ 372.283407][T23427] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 372.291032][T23427] vhci_hcd vhci_hcd.0: Device attached [ 372.582915][T23430] loop7: detected capacity change from 0 to 512 [ 372.598877][T23430] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 372.620008][T23430] EXT4-fs error (device loop7): ext4_get_branch:178: inode #11: block 4294967295: comm syz.7.7134: invalid block [ 372.632425][T23430] EXT4-fs error (device loop7): ext4_free_branches:1023: inode #11: comm syz.7.7134: invalid indirect mapped block 4294967295 (level 1) [ 372.637455][ T3416] vhci_hcd: vhci_device speed not set [ 372.648108][T23430] EXT4-fs error (device loop7): ext4_free_branches:1023: inode #11: comm syz.7.7134: invalid indirect mapped block 4294967295 (level 1) [ 372.667482][T23430] EXT4-fs (loop7): 2 truncates cleaned up [ 372.694983][T23430] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 372.723473][T23436] netlink: 'syz.1.7136': attribute type 13 has an invalid length. [ 372.761922][T23428] vhci_hcd: connection closed [ 372.762291][ T31] vhci_hcd: stop threads [ 372.771405][ T31] vhci_hcd: release socket [ 372.775832][ T31] vhci_hcd: disconnect device [ 372.790353][T23440] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 372.792573][T18985] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 372.822938][T23442] loop6: detected capacity change from 0 to 512 [ 372.860417][T23442] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 372.879748][T23442] EXT4-fs error (device loop6): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 96 vs 65376 free clusters [ 372.927932][T18985] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 372.933838][T23458] lo speed is unknown, defaulting to 1000 [ 372.943387][T23458] lo speed is unknown, defaulting to 1000 [ 373.070781][T23464] netlink: 3 bytes leftover after parsing attributes in process `syz.6.7146'. [ 373.083030][T23464] 1ªX¹¦À: renamed from 60ªX¹¦À [ 373.116576][ T29] kauditd_printk_skb: 3193 callbacks suppressed [ 373.116594][ T29] audit: type=1326 audit(373.090:58289): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23456 comm="syz.1.7145" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6eba05f6c9 code=0x7ffc0000 [ 373.180777][ T29] audit: type=1326 audit(373.120:58290): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23456 comm="syz.1.7145" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6eba05f6c9 code=0x7ffc0000 [ 373.208711][T23468] netlink: 116 bytes leftover after parsing attributes in process `syz.6.7146'. [ 373.405361][T22239] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 373.416801][T23464] A link change request failed with some changes committed already. Interface 61ªX¹¦À may have been left with an inconsistent configuration, please check. [ 373.434330][T23467] macvtap0: refused to change device tx_queue_len [ 373.441057][T23469] loop6: detected capacity change from 0 to 512 [ 373.447789][T23469] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 373.467280][ T29] audit: type=1326 audit(373.440:58291): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23473 comm="syz.7.7148" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd4a383f6c9 code=0x7ffc0000 [ 373.492087][ T29] audit: type=1326 audit(373.440:58292): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23473 comm="syz.7.7148" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fd4a383f6c9 code=0x7ffc0000 [ 373.492981][T23477] netlink: 3 bytes leftover after parsing attributes in process `syz.5.7149'. [ 373.516955][ T29] audit: type=1326 audit(373.440:58293): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23473 comm="syz.7.7148" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd4a383f6c9 code=0x7ffc0000 [ 373.524724][T23477] 0ªX¹¦À: renamed from 61ªX¹¦À [ 373.548065][ T29] audit: type=1326 audit(373.440:58294): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23473 comm="syz.7.7148" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fd4a383f6c9 code=0x7ffc0000 [ 373.576360][ T29] audit: type=1326 audit(373.440:58295): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23473 comm="syz.7.7148" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd4a383f6c9 code=0x7ffc0000 [ 373.601137][ T29] audit: type=1326 audit(373.440:58296): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23473 comm="syz.7.7148" exe="/root/syz-executor" sig=0 arch=c000003e syscall=292 compat=0 ip=0x7fd4a383f6c9 code=0x7ffc0000 [ 373.603198][T23479] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 373.633616][T23469] EXT4-fs (loop6): 1 truncate cleaned up [ 373.635476][ T29] audit: type=1326 audit(373.610:58297): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23473 comm="syz.7.7148" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd4a383f6c9 code=0x7ffc0000 [ 373.640390][T23469] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 373.664352][ T29] audit: type=1326 audit(373.610:58298): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23473 comm="syz.7.7148" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd4a383f6c9 code=0x7ffc0000 [ 373.674588][T23479] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 373.711251][T23481] netlink: 116 bytes leftover after parsing attributes in process `syz.5.7149'. [ 373.737315][T23477] A link change request failed with some changes committed already. Interface 60ªX¹¦À may have been left with an inconsistent configuration, please check. [ 373.797440][T23480] macvtap0: refused to change device tx_queue_len [ 373.872173][T23492] usb usb1: usbfs: interface 0 claimed by hub while 'syz.1.7154' sets config #0 [ 373.899298][T18985] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 373.937025][T23496] loop6: detected capacity change from 0 to 512 [ 373.953733][T23496] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 373.985701][T23496] EXT4-fs error (device loop6): ext4_do_update_inode:5632: inode #2: comm syz.6.7156: corrupted inode contents [ 373.998591][T23496] EXT4-fs error (device loop6): ext4_dirty_inode:6517: inode #2: comm syz.6.7156: mark_inode_dirty error [ 374.011618][T23496] EXT4-fs error (device loop6): ext4_do_update_inode:5632: inode #2: comm syz.6.7156: corrupted inode contents [ 374.072987][T18985] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 374.125904][T23504] netlink: '+}[@': attribute type 27 has an invalid length. [ 374.134863][T23504] 1ªX¹¦À: left allmulticast mode [ 374.142749][T23504] veth2: left promiscuous mode [ 374.147533][T23504] veth2: left allmulticast mode [ 374.152622][T23504] veth4: left promiscuous mode [ 374.157383][T23504] veth4: left allmulticast mode [ 374.162452][T23504] veth6: left promiscuous mode [ 374.167210][T23504] veth6: left allmulticast mode [ 374.172381][T23504] veth8: left promiscuous mode [ 374.177168][T23504] veth8: left allmulticast mode [ 374.207684][T23508] siw: device registration error -23 [ 374.278709][T23518] loop6: detected capacity change from 0 to 512 [ 374.293243][T23518] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 374.312090][T23518] EXT4-fs error (device loop6): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 96 vs 65376 free clusters [ 374.349688][T18985] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 374.383149][T23526] loop6: detected capacity change from 0 to 512 [ 374.395276][T23530] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 374.405078][T23530] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 374.416240][T23526] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 374.446662][T23526] EXT4-fs error (device loop6): ext4_do_update_inode:5632: inode #2: comm syz.6.7166: corrupted inode contents [ 374.461363][T23526] EXT4-fs error (device loop6): ext4_dirty_inode:6517: inode #2: comm syz.6.7166: mark_inode_dirty error [ 374.473995][T23526] EXT4-fs error (device loop6): ext4_do_update_inode:5632: inode #2: comm syz.6.7166: corrupted inode contents [ 374.506957][T23537] netlink: '+}[@': attribute type 27 has an invalid length. [ 374.516735][T23537] 1ªX¹¦À: left allmulticast mode [ 374.525952][T23537] veth2: left promiscuous mode [ 374.531581][T23537] veth2: left allmulticast mode [ 374.565869][T18985] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 374.842212][ T36] usb 15-1: enqueue for inactive port 0 [ 374.847879][ T36] usb 15-1: enqueue for inactive port 0 [ 374.919885][ T36] vhci_hcd: vhci_device speed not set [ 374.946123][T23548] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 374.971064][T23550] netlink: 3 bytes leftover after parsing attributes in process `syz.5.7177'. [ 374.980424][T23550] 1ªX¹¦À: renamed from 60ªX¹¦À [ 374.993343][T23550] A link change request failed with some changes committed already. Interface 61ªX¹¦À may have been left with an inconsistent configuration, please check. [ 375.068969][T23550] macvtap0: refused to change device tx_queue_len [ 375.092180][T23550] netlink: 116 bytes leftover after parsing attributes in process `syz.5.7177'. [ 375.121348][T23560] siw: device registration error -23 [ 375.136930][T23560] loop7: detected capacity change from 0 to 512 [ 375.146532][T23560] EXT4-fs (loop7): 1 orphan inode deleted [ 375.152885][T23560] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 375.248764][T23568] lo speed is unknown, defaulting to 1000 [ 375.255504][T23568] lo speed is unknown, defaulting to 1000 [ 375.404287][T22239] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 375.564925][T23577] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7185'. [ 375.642018][T23584] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7186'. [ 375.667666][T23577] 8021q: adding VLAN 0 to HW filter on device bond0 [ 375.688276][T23577] 8021q: adding VLAN 0 to HW filter on device team0 [ 375.729491][T23577] A link change request failed with some changes committed already. Interface 61ªX¹¦À may have been left with an inconsistent configuration, please check. [ 375.766237][T23584] 8021q: adding VLAN 0 to HW filter on device bond0 [ 375.775520][T23584] 8021q: adding VLAN 0 to HW filter on device team0 [ 375.801874][T23584] A link change request failed with some changes committed already. Interface 61ªX¹¦À may have been left with an inconsistent configuration, please check. [ 375.928643][T23590] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 376.005064][T23594] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(3) [ 376.011760][T23594] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 376.019277][T23594] vhci_hcd vhci_hcd.0: Device attached [ 376.071082][T23604] loop6: detected capacity change from 0 to 512 [ 376.207380][T23604] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 376.221265][T23598] vhci_hcd: connection closed [ 376.221481][T11844] vhci_hcd: stop threads [ 376.230462][T11844] vhci_hcd: release socket [ 376.234887][T11844] vhci_hcd: disconnect device [ 376.239267][T23604] EXT4-fs error (device loop6): ext4_do_update_inode:5632: inode #2: comm syz.6.7192: corrupted inode contents [ 376.260091][ T36] vhci_hcd: vhci_device speed not set [ 376.265847][T23604] EXT4-fs error (device loop6): ext4_dirty_inode:6517: inode #2: comm syz.6.7192: mark_inode_dirty error [ 376.321008][T23604] EXT4-fs error (device loop6): ext4_do_update_inode:5632: inode #2: comm syz.6.7192: corrupted inode contents [ 376.416973][T23625] A link change request failed with some changes committed already. Interface 61ªX¹¦À may have been left with an inconsistent configuration, please check. [ 376.465968][T18985] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 376.844007][T23639] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 376.852698][T23639] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 377.093702][T23648] lo speed is unknown, defaulting to 1000 [ 377.100104][T23648] lo speed is unknown, defaulting to 1000 [ 377.615136][T23663] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(3) [ 377.621711][T23663] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 377.629270][T23663] vhci_hcd vhci_hcd.0: Device attached [ 377.671515][T23664] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 377.871757][T23678] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 377.883700][T23678] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 377.919838][ T36] usb 11-1: new low-speed USB device number 11 using vhci_hcd [ 377.973282][T23665] vhci_hcd: connection reset by peer [ 377.978824][ T31] vhci_hcd: stop threads [ 377.983097][ T31] vhci_hcd: release socket [ 377.987528][ T31] vhci_hcd: disconnect device [ 378.501461][ T29] kauditd_printk_skb: 1040 callbacks suppressed [ 378.501475][ T29] audit: type=1326 audit(378.460:59339): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23699 comm="syz.4.7226" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f35137ef6c9 code=0x7ffc0000 [ 378.532672][ T29] audit: type=1326 audit(378.460:59340): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23699 comm="syz.4.7226" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f35137ef6c9 code=0x7ffc0000 [ 378.557507][ T29] audit: type=1326 audit(378.460:59341): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23699 comm="syz.4.7226" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f35137ef6c9 code=0x7ffc0000 [ 378.582184][ T29] audit: type=1326 audit(378.460:59342): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23699 comm="syz.4.7226" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f35137ef6c9 code=0x7ffc0000 [ 378.607041][ T29] audit: type=1326 audit(378.460:59343): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23699 comm="syz.4.7226" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f35137ef6c9 code=0x7ffc0000 [ 378.631805][ T29] audit: type=1326 audit(378.460:59344): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23699 comm="syz.4.7226" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7f35137ef6c9 code=0x7ffc0000 [ 378.656310][ T29] audit: type=1326 audit(378.460:59345): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23699 comm="syz.4.7226" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f35137ef6c9 code=0x7ffc0000 [ 378.680999][ T29] audit: type=1326 audit(378.460:59346): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23699 comm="syz.4.7226" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f35137ef6c9 code=0x7ffc0000 [ 378.817729][T23710] netlink: '+}[@': attribute type 27 has an invalid length. [ 378.825887][T23710] 1ªX¹¦À: left allmulticast mode [ 378.870942][ T29] audit: type=1326 audit(378.850:59347): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23713 comm="syz.4.7234" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f35137ef6c9 code=0x7ffc0000 [ 378.892705][T23712] __nla_validate_parse: 2 callbacks suppressed [ 378.892798][T23712] netlink: 3 bytes leftover after parsing attributes in process `syz.5.7233'. [ 378.901379][ T29] audit: type=1326 audit(378.880:59348): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23713 comm="syz.4.7234" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f35137ef6c9 code=0x7ffc0000 [ 378.952034][T23712] 0ªX¹¦À: renamed from 61ªX¹¦À [ 378.959630][T23723] netlink: 116 bytes leftover after parsing attributes in process `syz.5.7233'. [ 378.988363][T23726] loop7: detected capacity change from 0 to 512 [ 378.991943][T23727] loop6: detected capacity change from 0 to 512 [ 379.002139][T23712] 0ªX¹¦À: entered allmulticast mode [ 379.007362][T23712] A link change request failed with some changes committed already. Interface 60ªX¹¦À may have been left with an inconsistent configuration, please check. [ 379.011415][T23729] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(3) [ 379.030125][T23729] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 379.038770][T23729] vhci_hcd vhci_hcd.0: Device attached [ 379.056981][T23727] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 379.073701][T23726] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 379.131627][T23727] EXT4-fs error (device loop6): ext4_do_update_inode:5632: inode #2: comm syz.6.7237: corrupted inode contents [ 379.154085][T23727] EXT4-fs error (device loop6): ext4_dirty_inode:6517: inode #2: comm syz.6.7237: mark_inode_dirty error [ 379.198154][T22239] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 379.229275][T23746] !yz!: rxe_newlink: already configured on team_slave_0 [ 379.230903][T23727] EXT4-fs error (device loop6): ext4_do_update_inode:5632: inode #2: comm syz.6.7237: corrupted inode contents [ 379.249488][T23730] vhci_hcd: connection closed [ 379.271116][T11844] vhci_hcd: stop threads [ 379.280131][T11844] vhci_hcd: release socket [ 379.284566][T11844] vhci_hcd: disconnect device [ 379.289297][ T3612] usb 3-1: new low-speed USB device number 12 using vhci_hcd [ 379.300562][T23750] loop7: detected capacity change from 0 to 512 [ 379.307699][ T3612] usb 3-1: enqueue for inactive port 0 [ 379.313507][ T3612] usb 3-1: enqueue for inactive port 0 [ 379.320288][ T3612] usb 3-1: enqueue for inactive port 0 [ 379.344407][T23752] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7246'. [ 379.354839][T23750] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 379.375468][T18985] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 379.386332][T23752] A link change request failed with some changes committed already. Interface 61ªX¹¦À may have been left with an inconsistent configuration, please check. [ 379.396154][T23750] EXT4-fs error (device loop7): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 96 vs 65376 free clusters [ 379.419942][ T3612] vhci_hcd: vhci_device speed not set [ 379.432331][T23752] netlink: 4 bytes leftover after parsing attributes in process `syz.4.7246'. [ 379.468847][T23761] loop6: detected capacity change from 0 to 164 [ 379.475601][T23761] iso9660: Unknown parameter '&1Ø‘h*ZËiocharset%iso^š\é8¹¾­ßzJ¥K¶%|' [ 379.532596][T23770] netlink: 'syz.4.7252': attribute type 13 has an invalid length. [ 379.543693][T22239] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 379.601555][T23776] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 379.629023][T23783] netlink: 'syz.4.7257': attribute type 27 has an invalid length. [ 379.645596][T23781] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 379.722388][T23795] loop7: detected capacity change from 0 to 512 [ 379.743608][T23795] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 379.793271][T23795] EXT4-fs error (device loop7): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 96 vs 65376 free clusters [ 379.849432][T23810] netlink: 'syz.1.7268': attribute type 13 has an invalid length. [ 379.881808][T23814] netlink: 'syz.4.7270': attribute type 27 has an invalid length. [ 380.005150][T22239] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 380.064251][T23827] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 380.098180][T23831] loop7: detected capacity change from 0 to 164 [ 380.107769][T23831] iso9660: Unknown parameter '&1Ø‘h*ZËiocharset%iso^š\é8¹¾­ßzJ¥K¶%|' [ 380.297716][T23842] netlink: 'syz.4.7281': attribute type 27 has an invalid length. [ 380.533773][T23846] netlink: 12 bytes leftover after parsing attributes in process `syz.4.7283'. [ 380.542937][T23846] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7283'. [ 380.584577][T23848] netlink: 3 bytes leftover after parsing attributes in process `syz.1.7284'. [ 380.594993][T23848] 0ªX¹¦À: renamed from 61ªX¹¦À [ 380.608993][T23848] 0ªX¹¦À: entered allmulticast mode [ 380.615374][T23848] A link change request failed with some changes committed already. Interface 60ªX¹¦À may have been left with an inconsistent configuration, please check. [ 380.672384][T23848] netlink: 116 bytes leftover after parsing attributes in process `syz.1.7284'. [ 380.752220][T23853] loop7: detected capacity change from 0 to 512 [ 380.776897][T23853] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 380.877100][T23862] netlink: 'syz.4.7289': attribute type 13 has an invalid length. [ 380.941595][T23853] EXT4-fs error (device loop7): ext4_do_update_inode:5632: inode #2: comm syz.7.7286: corrupted inode contents [ 380.960959][T23853] EXT4-fs error (device loop7): ext4_dirty_inode:6517: inode #2: comm syz.7.7286: mark_inode_dirty error [ 380.975656][T23853] EXT4-fs error (device loop7): ext4_do_update_inode:5632: inode #2: comm syz.7.7286: corrupted inode contents [ 381.395334][T23880] pim6reg: entered allmulticast mode [ 381.411324][T23885] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 381.419918][T23885] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 381.442398][T22239] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 381.466401][T23889] loop7: detected capacity change from 0 to 512 [ 381.483639][T23889] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 381.508229][T23891] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7301'. [ 381.515354][T23889] EXT4-fs error (device loop7): ext4_do_update_inode:5632: inode #2: comm syz.7.7300: corrupted inode contents [ 381.531811][T23891] 8021q: adding VLAN 0 to HW filter on device bond0 [ 381.533375][T23889] EXT4-fs error (device loop7): ext4_dirty_inode:6517: inode #2: comm syz.7.7300: mark_inode_dirty error [ 381.540197][T23891] 8021q: adding VLAN 0 to HW filter on device team0 [ 381.552588][T23889] EXT4-fs error (device loop7): ext4_do_update_inode:5632: inode #2: comm syz.7.7300: corrupted inode contents [ 381.568508][T23896] netlink: 4 bytes leftover after parsing attributes in process `syz.4.7301'. [ 381.577741][T23891] A link change request failed with some changes committed already. Interface 61ªX¹¦À may have been left with an inconsistent configuration, please check. [ 381.646661][T23900] netlink: 'syz.4.7302': attribute type 13 has an invalid length. [ 381.661886][T22239] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 381.685878][T23902] siw: device registration error -23 [ 381.700485][T23902] loop7: detected capacity change from 0 to 512 [ 381.708682][T23902] EXT4-fs (loop7): 1 orphan inode deleted [ 381.717580][T23902] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 381.744224][T22239] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 381.895007][T23927] loop7: detected capacity change from 0 to 512 [ 381.914587][T23929] netlink: 'syz.6.7315': attribute type 7 has an invalid length. [ 381.924281][T23927] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 381.962841][T23934] netlink: '+}[@': attribute type 27 has an invalid length. [ 381.980929][T23934] 0ªX¹¦À: left allmulticast mode [ 381.989097][T23927] EXT4-fs error (device loop7): ext4_do_update_inode:5632: inode #2: comm syz.7.7314: corrupted inode contents [ 382.006184][T23936] loop6: detected capacity change from 0 to 512 [ 382.053369][T23936] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 382.067834][T23927] EXT4-fs error (device loop7): ext4_dirty_inode:6517: inode #2: comm syz.7.7314: mark_inode_dirty error [ 382.093239][T23927] EXT4-fs error (device loop7): ext4_do_update_inode:5632: inode #2: comm syz.7.7314: corrupted inode contents [ 382.118573][T23936] EXT4-fs error (device loop6): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 96 vs 65376 free clusters [ 382.166640][T18985] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 382.205514][T22239] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 382.348415][T23962] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 382.390107][T23962] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 382.422408][T23961] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 382.741103][T23996] vhci_hcd: invalid port number 96 [ 382.746385][T23996] vhci_hcd: default hub control req: 0300 vfffa i0060 l0 [ 382.960195][T24015] loop7: detected capacity change from 0 to 164 [ 382.966848][T24015] iso9660: Unknown parameter '&1Ø‘h*ZËiocharset%iso^š\é8¹¾­ßzJ¥K¶%|' [ 382.992444][ T36] usb 11-1: enqueue for inactive port 0 [ 383.003395][ T36] usb 11-1: enqueue for inactive port 0 [ 383.080670][ T36] vhci_hcd: vhci_device speed not set [ 383.191894][T24019] loop7: detected capacity change from 0 to 164 [ 383.198464][T24019] iso9660: Unknown parameter '&1Ø‘h*ZËiocharset%iso^š\é8¹¾­ßzJ¥K¶%|' [ 383.493134][T24022] loop7: detected capacity change from 0 to 512 [ 383.501345][T24022] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 383.513080][T24022] EXT4-fs error (device loop7): ext4_get_branch:178: inode #11: block 4294967295: comm syz.7.7349: invalid block [ 383.522941][ T29] kauditd_printk_skb: 1218 callbacks suppressed [ 383.522960][ T29] audit: type=1326 audit(383.490:60567): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24018 comm="syz.7.7349" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd4a383f6c9 code=0x7ffc0000 [ 383.526781][T24022] EXT4-fs error (device loop7): ext4_free_branches:1023: inode #11: comm syz.7.7349: invalid indirect mapped block 4294967295 (level 1) [ 383.531364][ T29] audit: type=1326 audit(383.490:60568): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24018 comm="syz.7.7349" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd4a383f6c9 code=0x7ffc0000 [ 383.601848][T24022] EXT4-fs error (device loop7): ext4_free_branches:1023: inode #11: comm syz.7.7349: invalid indirect mapped block 4294967295 (level 1) [ 383.674717][ T29] audit: type=1326 audit(383.640:60569): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24035 comm="syz.1.7356" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6eba05f6c9 code=0x7ffc0000 [ 383.697918][ T29] audit: type=1326 audit(383.640:60570): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24035 comm="syz.1.7356" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6eba05f6c9 code=0x7ffc0000 [ 383.721080][ T29] audit: type=1326 audit(383.640:60571): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24035 comm="syz.1.7356" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f6eba05f6c9 code=0x7ffc0000 [ 383.744153][ T29] audit: type=1326 audit(383.640:60572): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24035 comm="syz.1.7356" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6eba05f6c9 code=0x7ffc0000 [ 383.767179][ T29] audit: type=1326 audit(383.640:60573): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24035 comm="syz.1.7356" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6eba05f6c9 code=0x7ffc0000 [ 383.790154][ T29] audit: type=1326 audit(383.640:60574): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24035 comm="syz.1.7356" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f6eba05f6c9 code=0x7ffc0000 [ 383.813193][ T29] audit: type=1326 audit(383.640:60575): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24035 comm="syz.1.7356" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6eba05f6c9 code=0x7ffc0000 [ 383.836177][ T29] audit: type=1326 audit(383.640:60576): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24035 comm="syz.1.7356" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6eba05f6c9 code=0x7ffc0000 [ 383.922360][T24037] netlink: 36 bytes leftover after parsing attributes in process `syz.1.7356'. [ 383.977450][T24022] EXT4-fs (loop7): 2 truncates cleaned up [ 383.984032][T24022] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 384.014948][T24045] loop6: detected capacity change from 0 to 164 [ 384.025249][T24045] iso9660: Unknown parameter '&1Ø‘h*ZËiocharset%iso^š\é8¹¾­ßzJ¥K¶%|' [ 384.402457][T22239] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 384.425140][T24056] vhci_hcd vhci_hcd.0: pdev(7) rhport(0) sockfd(3) [ 384.431754][T24056] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 384.439359][T24056] vhci_hcd vhci_hcd.0: Device attached [ 384.447286][T24058] xt_ecn: cannot match TCP bits for non-tcp packets [ 384.458905][T24056] loop7: detected capacity change from 0 to 164 [ 384.467215][T24056] iso9660: Unknown parameter '&1Ø‘h*ZËiocharset%iso^š\é8¹¾­ßzJ¥K¶%|' [ 384.512325][T24047] loop6: detected capacity change from 0 to 512 [ 384.527516][T24059] vhci_hcd: connection closed [ 384.527885][T11822] vhci_hcd: stop threads [ 384.531892][T24047] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 384.532718][T11822] vhci_hcd: release socket [ 384.549848][T11822] vhci_hcd: disconnect device [ 384.571899][T24047] EXT4-fs error (device loop6): ext4_get_branch:178: inode #11: block 4294967295: comm syz.6.7360: invalid block [ 384.584387][T24047] EXT4-fs error (device loop6): ext4_free_branches:1023: inode #11: comm syz.6.7360: invalid indirect mapped block 4294967295 (level 1) [ 384.599693][T24047] EXT4-fs error (device loop6): ext4_free_branches:1023: inode #11: comm syz.6.7360: invalid indirect mapped block 4294967295 (level 1) [ 384.614631][T24047] EXT4-fs (loop6): 2 truncates cleaned up [ 384.621799][T24047] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 384.691904][T18985] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 384.719639][T24065] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 384.745439][T24067] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 384.766032][T24067] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 384.972117][T24077] netlink: 3 bytes leftover after parsing attributes in process `syz.1.7371'. [ 384.982044][T24077] 1ªX¹¦À: renamed from 60ªX¹¦À [ 384.992167][T24077] 1ªX¹¦À: entered allmulticast mode [ 384.997393][T24077] A link change request failed with some changes committed already. Interface 61ªX¹¦À may have been left with an inconsistent configuration, please check. [ 385.016898][T24077] netlink: 116 bytes leftover after parsing attributes in process `syz.1.7371'. [ 385.050539][T24079] netlink: 'syz.1.7372': attribute type 13 has an invalid length. [ 385.105137][T24081] siw: device registration error -23 [ 385.118007][T24083] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7374'. [ 385.158665][T24081] loop7: detected capacity change from 0 to 512 [ 385.164476][T24083] 8021q: adding VLAN 0 to HW filter on device bond0 [ 385.173101][T24086] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7374'. [ 385.186698][T24083] 8021q: adding VLAN 0 to HW filter on device team0 [ 385.196009][T24081] EXT4-fs (loop7): 1 orphan inode deleted [ 385.203445][T24081] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 385.273783][T24083] A link change request failed with some changes committed already. Interface 61ªX¹¦À may have been left with an inconsistent configuration, please check. [ 385.481460][T24099] FAULT_INJECTION: forcing a failure. [ 385.481460][T24099] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 385.496344][T24099] CPU: 0 UID: 0 PID: 24099 Comm: ÿ Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 385.496381][T24099] Tainted: [W]=WARN [ 385.496390][T24099] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 385.496405][T24099] Call Trace: [ 385.496413][T24099] [ 385.496423][T24099] __dump_stack+0x1d/0x30 [ 385.496495][T24099] dump_stack_lvl+0xe8/0x140 [ 385.496526][T24099] dump_stack+0x15/0x1b [ 385.496632][T24099] should_fail_ex+0x265/0x280 [ 385.496674][T24099] should_fail+0xb/0x20 [ 385.496758][T24099] should_fail_usercopy+0x1a/0x20 [ 385.496793][T24099] _copy_from_iter+0xd2/0xe80 [ 385.496822][T24099] ? __build_skb_around+0x1ab/0x200 [ 385.496910][T24099] ? __alloc_skb+0x223/0x320 [ 385.496945][T24099] netlink_sendmsg+0x471/0x6b0 [ 385.496974][T24099] ? __pfx_netlink_sendmsg+0x10/0x10 [ 385.496999][T24099] __sock_sendmsg+0x145/0x180 [ 385.497030][T24099] ____sys_sendmsg+0x31e/0x4e0 [ 385.497065][T24099] ___sys_sendmsg+0x17b/0x1d0 [ 385.497096][T24099] __x64_sys_sendmsg+0xd4/0x160 [ 385.497118][T24099] x64_sys_call+0x191e/0x3000 [ 385.497221][T24099] do_syscall_64+0xd2/0x200 [ 385.497280][T24099] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 385.497306][T24099] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 385.497338][T24099] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 385.497364][T24099] RIP: 0033:0x7f6eba05f6c9 [ 385.497423][T24099] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 385.497442][T24099] RSP: 002b:00007f6eb8abf038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 385.497466][T24099] RAX: ffffffffffffffda RBX: 00007f6eba2b5fa0 RCX: 00007f6eba05f6c9 [ 385.497481][T24099] RDX: 0000000000000000 RSI: 0000200000000100 RDI: 0000000000000003 [ 385.497497][T24099] RBP: 00007f6eb8abf090 R08: 0000000000000000 R09: 0000000000000000 [ 385.497512][T24099] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 385.497542][T24099] R13: 00007f6eba2b6038 R14: 00007f6eba2b5fa0 R15: 00007ffd9b29d3a8 [ 385.497560][T24099] [ 385.774790][T24105] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 385.805836][T22239] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 385.818057][T24109] vhci_hcd vhci_hcd.0: pdev(6) rhport(0) sockfd(3) [ 385.819413][T24112] FAULT_INJECTION: forcing a failure. [ 385.819413][T24112] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 385.824594][T24109] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 385.826757][T24109] vhci_hcd vhci_hcd.0: Device attached [ 385.837789][T24112] CPU: 1 UID: 0 PID: 24112 Comm: syz.4.7379 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 385.837825][T24112] Tainted: [W]=WARN [ 385.837833][T24112] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 385.837848][T24112] Call Trace: [ 385.837854][T24112] [ 385.837861][T24112] __dump_stack+0x1d/0x30 [ 385.837884][T24112] dump_stack_lvl+0xe8/0x140 [ 385.837964][T24112] dump_stack+0x15/0x1b [ 385.837983][T24112] should_fail_ex+0x265/0x280 [ 385.838100][T24112] should_fail+0xb/0x20 [ 385.838170][T24112] should_fail_usercopy+0x1a/0x20 [ 385.838194][T24112] _copy_from_user+0x1c/0xb0 [ 385.838248][T24112] kstrtouint_from_user+0x69/0xf0 [ 385.838273][T24112] ? 0xffffffff81000000 [ 385.838289][T24112] ? selinux_file_permission+0x1e4/0x320 [ 385.838340][T24112] proc_fail_nth_write+0x50/0x160 [ 385.838392][T24112] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 385.838467][T24112] vfs_write+0x269/0x960 [ 385.838498][T24112] ? vfs_read+0x4e6/0x770 [ 385.838527][T24112] ? __rcu_read_unlock+0x4f/0x70 [ 385.838570][T24112] ? __fget_files+0x184/0x1c0 [ 385.838603][T24112] ksys_write+0xda/0x1a0 [ 385.838669][T24112] __x64_sys_write+0x40/0x50 [ 385.838701][T24112] x64_sys_call+0x2802/0x3000 [ 385.838765][T24112] do_syscall_64+0xd2/0x200 [ 385.838790][T24112] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 385.838817][T24112] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 385.838865][T24112] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 385.838946][T24112] RIP: 0033:0x7f35137ee17f [ 385.838968][T24112] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48 [ 385.838994][T24112] RSP: 002b:00007f3512236030 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 385.839020][T24112] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f35137ee17f [ 385.839038][T24112] RDX: 0000000000000001 RSI: 00007f35122360a0 RDI: 0000000000000004 [ 385.839081][T24112] RBP: 00007f3512236090 R08: 0000000000000000 R09: 0000000000000000 [ 385.839113][T24112] R10: 00000000000480e0 R11: 0000000000000293 R12: 0000000000000001 [ 385.839130][T24112] R13: 00007f3513a46128 R14: 00007f3513a46090 R15: 00007fffb33ae0b8 [ 385.839155][T24112] [ 385.954698][T24113] loop6: detected capacity change from 0 to 164 [ 386.102878][T24113] iso9660: Unknown parameter '&1Ø‘h*ZËiocharset%iso^š\é8¹¾­ßzJ¥K¶%|' [ 386.186947][T24125] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 386.201869][ T10] usb 13-1: new low-speed USB device number 5 using vhci_hcd [ 386.211256][T24125] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 386.247287][T24127] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7388'. [ 386.266727][T24127] A link change request failed with some changes committed already. Interface 61ªX¹¦À may have been left with an inconsistent configuration, please check. [ 386.286920][T24127] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7388'. [ 386.334939][T24110] vhci_hcd: connection reset by peer [ 386.340734][ T31] vhci_hcd: stop threads [ 386.345056][ T31] vhci_hcd: release socket [ 386.349611][ T31] vhci_hcd: disconnect device [ 386.395089][T24143] siw: device registration error -23 [ 386.793481][T24162] netlink: 8 bytes leftover after parsing attributes in process `syz.7.7401'. [ 386.815152][T24162] A link change request failed with some changes committed already. Interface 61ªX¹¦À may have been left with an inconsistent configuration, please check. [ 386.835886][T24162] netlink: 4 bytes leftover after parsing attributes in process `syz.7.7401'. [ 386.914960][T24167] netlink: 3 bytes leftover after parsing attributes in process `syz.7.7402'. [ 386.952254][T24167] 0ªX¹¦À: renamed from 61ªX¹¦À [ 386.973644][T24167] A link change request failed with some changes committed already. Interface 60ªX¹¦À may have been left with an inconsistent configuration, please check. [ 387.026067][T24170] macvtap0: refused to change device tx_queue_len [ 387.077236][T24167] loop7: detected capacity change from 0 to 512 [ 387.087031][T24167] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 387.112626][T24167] EXT4-fs (loop7): 1 truncate cleaned up [ 387.118969][T24167] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 387.165092][T22239] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 387.196935][T24195] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 387.206976][T24195] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 387.264462][T11822] Bluetooth: hci0: Frame reassembly failed (-84) [ 387.699267][T24203] siw: device registration error -23 [ 387.742745][T24207] 1ªX¹¦À: renamed from 60ªX¹¦À [ 387.749203][T24207] A link change request failed with some changes committed already. Interface 61ªX¹¦À may have been left with an inconsistent configuration, please check. [ 387.814861][T24211] loop7: detected capacity change from 0 to 512 [ 387.834115][T24211] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 387.922646][T24218] 0ªX¹¦À: renamed from 61ªX¹¦À [ 387.929398][T24218] 0ªX¹¦À: entered allmulticast mode [ 387.935700][T24218] A link change request failed with some changes committed already. Interface 60ªX¹¦À may have been left with an inconsistent configuration, please check. [ 387.955892][T24218] macvtap0: refused to change device tx_queue_len [ 387.974499][T22239] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 388.066709][T24229] loop7: detected capacity change from 0 to 164 [ 388.073461][T24229] iso9660: Unknown parameter '&1Ø‘h*ZËiocharset%iso^š\é8¹¾­ßzJ¥K¶%|' [ 388.091986][T24230] loop6: detected capacity change from 0 to 512 [ 388.098981][T24230] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 388.114226][T24230] EXT4-fs (loop6): 1 truncate cleaned up [ 388.125765][T24230] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 388.210047][T24235] siw: device registration error -23 [ 388.372295][T24241] netlink: 'syz.4.7429': attribute type 13 has an invalid length. [ 388.381471][T24236] loop7: detected capacity change from 0 to 512 [ 388.388370][T24236] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 388.404954][T24236] EXT4-fs error (device loop7): ext4_get_branch:178: inode #11: block 4294967295: comm syz.7.7425: invalid block [ 388.421182][T24236] EXT4-fs error (device loop7): ext4_free_branches:1023: inode #11: comm syz.7.7425: invalid indirect mapped block 4294967295 (level 1) [ 388.439305][T24244] FAULT_INJECTION: forcing a failure. [ 388.439305][T24244] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 388.452498][T24244] CPU: 1 UID: 0 PID: 24244 Comm: syz.4.7430 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 388.452577][T24244] Tainted: [W]=WARN [ 388.452586][T24244] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 388.452665][T24244] Call Trace: [ 388.452674][T24244] [ 388.452683][T24244] __dump_stack+0x1d/0x30 [ 388.452708][T24244] dump_stack_lvl+0xe8/0x140 [ 388.452728][T24244] dump_stack+0x15/0x1b [ 388.452745][T24244] should_fail_ex+0x265/0x280 [ 388.452786][T24244] should_fail+0xb/0x20 [ 388.452893][T24244] should_fail_usercopy+0x1a/0x20 [ 388.452914][T24244] _copy_from_user+0x1c/0xb0 [ 388.453019][T24244] kstrtouint_from_user+0x69/0xf0 [ 388.453038][T24244] ? 0xffffffff81000000 [ 388.453051][T24244] ? selinux_file_permission+0x1e4/0x320 [ 388.453088][T24244] proc_fail_nth_write+0x50/0x160 [ 388.453176][T24244] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 388.453256][T24244] vfs_write+0x269/0x960 [ 388.453287][T24244] ? __rcu_read_unlock+0x4f/0x70 [ 388.453397][T24244] ? __fget_files+0x184/0x1c0 [ 388.453423][T24244] ? finish_task_switch+0xad/0x2b0 [ 388.453522][T24244] ksys_write+0xda/0x1a0 [ 388.453556][T24244] __x64_sys_write+0x40/0x50 [ 388.453585][T24244] x64_sys_call+0x2802/0x3000 [ 388.453606][T24244] do_syscall_64+0xd2/0x200 [ 388.453670][T24244] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 388.453768][T24244] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 388.453842][T24244] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 388.453937][T24244] RIP: 0033:0x7f35137ee17f [ 388.453951][T24244] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48 [ 388.453985][T24244] RSP: 002b:00007f3512257030 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 388.454016][T24244] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f35137ee17f [ 388.454032][T24244] RDX: 0000000000000001 RSI: 00007f35122570a0 RDI: 0000000000000007 [ 388.454047][T24244] RBP: 00007f3512257090 R08: 0000000000000000 R09: 0000000000000000 [ 388.454062][T24244] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000001 [ 388.454076][T24244] R13: 00007f3513a46038 R14: 00007f3513a45fa0 R15: 00007fffb33ae0b8 [ 388.454097][T24244] [ 388.697301][T24245] lo speed is unknown, defaulting to 1000 [ 388.704125][T24245] lo speed is unknown, defaulting to 1000 [ 388.886659][ T29] kauditd_printk_skb: 6980 callbacks suppressed [ 388.886680][ T29] audit: type=1326 audit(388.400:67557): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24228 comm="syz.7.7425" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd4a383f6c9 code=0x7ffc0000 [ 388.916029][ T29] audit: type=1326 audit(388.400:67558): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24228 comm="syz.7.7425" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd4a383f6c9 code=0x7ffc0000 [ 388.943696][T24236] EXT4-fs error (device loop7): ext4_free_branches:1023: inode #11: comm syz.7.7425: invalid indirect mapped block 4294967295 (level 1) [ 388.958330][T24236] EXT4-fs (loop7): 2 truncates cleaned up [ 388.964632][T24236] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 388.980403][T18985] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 388.989435][ T29] audit: type=1326 audit(388.960:67559): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24228 comm="syz.7.7425" exe="/root/syz-executor" sig=0 arch=c000003e syscall=11 compat=0 ip=0x7fd4a383f6c9 code=0x7ffc0000 [ 389.012421][ T29] audit: type=1326 audit(388.960:67560): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24228 comm="syz.7.7425" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd4a383f6c9 code=0x7ffc0000 [ 389.035426][ T29] audit: type=1326 audit(388.960:67561): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24228 comm="syz.7.7425" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd4a383f6c9 code=0x7ffc0000 [ 389.058468][ T29] audit: type=1326 audit(388.960:67562): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24228 comm="syz.7.7425" exe="/root/syz-executor" sig=0 arch=c000003e syscall=94 compat=0 ip=0x7fd4a383f6c9 code=0x7ffc0000 [ 389.081438][ T29] audit: type=1326 audit(388.960:67563): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24228 comm="syz.7.7425" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd4a383f6c9 code=0x7ffc0000 [ 389.162561][ T29] audit: type=1326 audit(388.960:67564): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24228 comm="syz.7.7425" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd4a383f6c9 code=0x7ffc0000 [ 389.191473][ T29] audit: type=1326 audit(389.170:67565): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24253 comm="syz.5.7433" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f991f0af6c9 code=0x7ffc0000 [ 389.216095][ T29] audit: type=1326 audit(389.170:67566): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24253 comm="syz.5.7433" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f991f0af6c9 code=0x7ffc0000 [ 389.259739][T22239] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 389.314375][T12430] Bluetooth: hci0: command 0x1003 tx timeout [ 389.322905][ T5400] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 389.334913][T24257] loop9: detected capacity change from 0 to 7 [ 389.341248][T24257] Buffer I/O error on dev loop9, logical block 0, async page read [ 389.349199][T24257] Buffer I/O error on dev loop9, logical block 0, async page read [ 389.357061][T24257] loop9: unable to read partition table [ 389.362870][T24257] loop_reread_partitions: partition scan of loop9 (þ被xüŸÑø éÚ¬§½dG¤´à–ƒÝ¡¯ â·û [ 389.362870][T24257] ) failed (rc=-5) [ 389.382776][T24257] loop6: detected capacity change from 0 to 1024 [ 389.394321][T24257] EXT4-fs: Ignoring removed orlov option [ 389.417753][T24257] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 389.444580][T24268] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 389.554763][T24278] __nla_validate_parse: 9 callbacks suppressed [ 389.554782][T24278] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7442'. [ 389.624880][T24284] xt_CT: You must specify a L4 protocol and not use inversions on it [ 389.633358][T24285] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7442'. [ 389.672008][T24278] A link change request failed with some changes committed already. Interface 61ªX¹¦À may have been left with an inconsistent configuration, please check. [ 389.767973][T24290] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 389.781076][T24290] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 389.789757][T18985] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 389.843281][T24295] !yz!: rxe_newlink: already configured on team_slave_0 [ 389.921489][ T31] Bluetooth: hci0: Frame reassembly failed (-84) [ 389.944591][T24307] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 389.977648][T24313] netlink: 'syz.5.7453': attribute type 13 has an invalid length. [ 389.998149][T24317] netlink: 3 bytes leftover after parsing attributes in process `syz.4.7455'. [ 390.008879][T24317] 0ªX¹¦À: renamed from 61ªX¹¦À [ 390.017493][T24317] 0ªX¹¦À: entered allmulticast mode [ 390.023933][T24317] A link change request failed with some changes committed already. Interface 60ªX¹¦À may have been left with an inconsistent configuration, please check. [ 390.042646][T24317] netlink: 116 bytes leftover after parsing attributes in process `syz.4.7455'. [ 390.334415][T24336] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 390.476020][T24354] loop7: detected capacity change from 0 to 164 [ 390.484093][T24354] iso9660: Unknown parameter '&1Ø‘h*ZËiocharset%iso^š\é8¹¾­ßzJ¥K¶%|' [ 390.645914][T24362] netlink: 3 bytes leftover after parsing attributes in process `syz.7.7473'. [ 390.655149][T24362] 0ªX¹¦À: renamed from 61ªX¹¦À [ 390.662153][T24362] A link change request failed with some changes committed already. Interface 60ªX¹¦À may have been left with an inconsistent configuration, please check. [ 390.681345][T24362] macvtap0: refused to change device tx_queue_len [ 390.688340][T24362] netlink: 8 bytes leftover after parsing attributes in process `syz.7.7473'. [ 390.698187][T24362] netlink: 12 bytes leftover after parsing attributes in process `syz.7.7473'. [ 390.721458][T24362] loop7: detected capacity change from 0 to 512 [ 390.728295][T24362] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 390.740506][T24362] EXT4-fs (loop7): 1 truncate cleaned up [ 390.746591][T24362] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 390.772168][T22239] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 390.936817][T24372] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 391.055101][T24380] netlink: 3 bytes leftover after parsing attributes in process `syz.5.7481'. [ 391.064218][T24380] 1ªX¹¦À: renamed from 60ªX¹¦À [ 391.071027][T24380] A link change request failed with some changes committed already. Interface 61ªX¹¦À may have been left with an inconsistent configuration, please check. [ 391.230048][ T10] usb 13-1: enqueue for inactive port 0 [ 391.235792][ T10] usb 13-1: enqueue for inactive port 0 [ 391.321545][ T10] vhci_hcd: vhci_device speed not set [ 391.419758][T24387] !yz!: rxe_newlink: already configured on team_slave_0 [ 391.939974][T24417] netlink: 3 bytes leftover after parsing attributes in process `syz.1.7496'. [ 391.948974][T24417] 0ªX¹¦À: renamed from 61ªX¹¦À [ 391.953929][ T5400] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 391.961800][T12430] Bluetooth: hci0: command 0x1003 tx timeout [ 391.971423][T24417] A link change request failed with some changes committed already. Interface 60ªX¹¦À may have been left with an inconsistent configuration, please check. [ 392.016412][T24423] siw: device registration error -23 [ 392.278549][T11831] Bluetooth: hci0: Frame reassembly failed (-84) [ 392.474011][T24443] netlink: 'syz.4.7507': attribute type 13 has an invalid length. [ 392.516078][T24450] netlink: 3 bytes leftover after parsing attributes in process `syz.4.7510'. [ 392.525339][T24450] 1ªX¹¦À: renamed from 60ªX¹¦À [ 392.533251][T24450] A link change request failed with some changes committed already. Interface 61ªX¹¦À may have been left with an inconsistent configuration, please check. [ 392.558662][T24452] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 392.613798][T24461] SELinux: Context system_u:object_r:var_lib_t:s0 is not valid (left unmapped). [ 392.635434][T24462] loop6: detected capacity change from 0 to 2048 [ 392.685989][T24462] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 392.762709][T24454] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 392.787495][T24454] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 392.812205][T24485] 0ªX¹¦À: renamed from 61ªX¹¦À [ 392.825256][T24485] A link change request failed with some changes committed already. Interface 60ªX¹¦À may have been left with an inconsistent configuration, please check. [ 392.893862][T24454] EXT4-fs error (device loop6): ext4_validate_block_bitmap:441: comm syz.6.7512: bg 0: block 345: padding at end of block bitmap is not set [ 392.917652][T24454] EXT4-fs (loop6): Remounting filesystem read-only [ 392.917942][T24497] vhci_hcd vhci_hcd.0: pdev(7) rhport(0) sockfd(3) [ 392.930701][T24497] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 392.938402][T24497] vhci_hcd vhci_hcd.0: Device attached [ 392.967683][T24502] loop7: detected capacity change from 0 to 164 [ 392.986608][T24502] iso9660: Unknown parameter '&1Ø‘h*ZËiocharset%iso^š\é8¹¾­ßzJ¥K¶%|' [ 393.333482][T24498] vhci_hcd: connection closed [ 393.333639][T11844] vhci_hcd: stop threads [ 393.343837][T11844] vhci_hcd: release socket [ 393.348272][T11844] vhci_hcd: disconnect device [ 393.400016][ T36] vhci_hcd: vhci_device speed not set [ 393.905565][T18985] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 393.948949][T24528] 0ªX¹¦À: renamed from 61ªX¹¦À [ 393.960943][T24528] A link change request failed with some changes committed already. Interface 60ªX¹¦À may have been left with an inconsistent configuration, please check. [ 393.993989][ T29] kauditd_printk_skb: 1115 callbacks suppressed [ 393.994006][ T29] audit: type=1326 audit(393.970:68682): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24530 comm="syz.7.7541" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd4a383f6c9 code=0x7ffc0000 [ 394.023354][ T29] audit: type=1326 audit(393.970:68683): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24530 comm="syz.7.7541" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd4a383f6c9 code=0x7ffc0000 [ 394.052244][T24532] loop7: detected capacity change from 0 to 1024 [ 394.059373][T24532] EXT4-fs: Ignoring removed nomblk_io_submit option [ 394.066484][ T29] audit: type=1326 audit(394.020:68684): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24530 comm="syz.7.7541" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7fd4a383f6c9 code=0x7ffc0000 [ 394.086225][T24533] 8021q: adding VLAN 0 to HW filter on device bond0 [ 394.089483][ T29] audit: type=1326 audit(394.020:68685): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24530 comm="syz.7.7541" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7fd4a383f703 code=0x7ffc0000 [ 394.101388][T24533] 8021q: adding VLAN 0 to HW filter on device team0 [ 394.118927][ T29] audit: type=1326 audit(394.020:68686): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24530 comm="syz.7.7541" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7fd4a383e17f code=0x7ffc0000 [ 394.118966][ T29] audit: type=1326 audit(394.030:68687): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24530 comm="syz.7.7541" exe="/root/syz-executor" sig=0 arch=c000003e syscall=11 compat=0 ip=0x7fd4a383f757 code=0x7ffc0000 [ 394.118997][ T29] audit: type=1326 audit(394.030:68688): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24530 comm="syz.7.7541" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fd4a383df10 code=0x7ffc0000 [ 394.119055][ T29] audit: type=1326 audit(394.030:68689): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24530 comm="syz.7.7541" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fd4a383f2cb code=0x7ffc0000 [ 394.119127][ T29] audit: type=1326 audit(394.030:68690): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24530 comm="syz.7.7541" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7fd4a383e32a code=0x7ffc0000 [ 394.119160][ T29] audit: type=1326 audit(394.030:68691): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24530 comm="syz.7.7541" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7fd4a383e32a code=0x7ffc0000 [ 394.131508][T24532] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a041c01c, mo2=0002] [ 394.153775][T24540] !yz!: rxe_newlink: already configured on team_slave_0 [ 394.173449][T24532] System zones: 0-1, 3-36 [ 394.216563][T24532] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 394.306055][T24533] A link change request failed with some changes committed already. Interface 60ªX¹¦À may have been left with an inconsistent configuration, please check. [ 394.361048][T12430] Bluetooth: hci0: command 0x1003 tx timeout [ 394.367181][ T5400] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 394.414091][T24556] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(3) [ 394.420663][T24556] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 394.428345][T24556] vhci_hcd vhci_hcd.0: Device attached [ 394.439065][T22239] EXT4-fs error (device loop7): ext4_iget_extra_inode:5075: inode #15: comm syz-executor: corrupted in-inode xattr: ea_inode specified without ea_inode feature enabled [ 394.442094][T24560] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 394.457582][T24552] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(3) [ 394.467559][T24560] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 394.472412][T24552] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 394.487622][T24552] vhci_hcd vhci_hcd.0: Device attached [ 394.501605][T22239] EXT4-fs error (device loop7): ext4_iget_extra_inode:5075: inode #15: comm syz-executor: corrupted in-inode xattr: ea_inode specified without ea_inode feature enabled [ 394.554509][T22239] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 394.571804][T11844] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 394.635683][T24569] netlink: 'syz.6.7554': attribute type 27 has an invalid length. [ 394.648919][T11844] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 394.669878][ T36] usb 3-1: new low-speed USB device number 13 using vhci_hcd [ 394.703963][T24557] vhci_hcd: connection reset by peer [ 394.709654][T11820] vhci_hcd: stop threads [ 394.714847][T11820] vhci_hcd: release socket [ 394.719267][T11820] vhci_hcd: disconnect device [ 394.734904][T11844] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 394.751125][ T3612] usb 11-1: new low-speed USB device number 12 using vhci_hcd [ 394.763533][T24572] vhci_hcd vhci_hcd.0: pdev(6) rhport(0) sockfd(3) [ 394.770254][T24572] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 394.778939][T24572] vhci_hcd vhci_hcd.0: Device attached [ 394.790553][T24572] loop6: detected capacity change from 0 to 164 [ 394.797415][T24572] iso9660: Unknown parameter '&1Ø‘h*ZËiocharset%iso^š\é8¹¾­ßzJ¥K¶%|' [ 394.812847][T11844] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 394.825431][T24554] vhci_hcd: connection reset by peer [ 394.831003][T11831] vhci_hcd: stop threads [ 394.835251][T11831] vhci_hcd: release socket [ 394.839675][T11831] vhci_hcd: disconnect device [ 394.878408][T11844] bridge_slave_1: left allmulticast mode [ 394.885853][T11844] bridge_slave_1: left promiscuous mode [ 394.892624][T11844] bridge0: port 2(bridge_slave_1) entered disabled state [ 394.908689][T11844] bridge_slave_0: left allmulticast mode [ 394.914433][T11844] bridge_slave_0: left promiscuous mode [ 394.920223][T11844] bridge0: port 1(bridge_slave_0) entered disabled state [ 394.967409][T24574] vhci_hcd: connection closed [ 394.967591][T11831] vhci_hcd: stop threads [ 394.976596][T11831] vhci_hcd: release socket [ 394.981080][T11831] vhci_hcd: disconnect device [ 395.013836][T11844] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 395.025719][T11844] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 395.035172][T14232] usb 13-1: new low-speed USB device number 6 using vhci_hcd [ 395.036299][T11844] bond0 (unregistering): Released all slaves [ 395.044668][T14232] usb 13-1: enqueue for inactive port 0 [ 395.055121][T14232] usb 13-1: enqueue for inactive port 0 [ 395.066694][T14232] usb 13-1: enqueue for inactive port 0 [ 395.101133][T11844] hsr_slave_0: left promiscuous mode [ 395.106717][T11844] hsr_slave_1: left promiscuous mode [ 395.112631][T11844] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 395.120218][T11844] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 395.127728][T11844] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 395.135210][T11844] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 395.141865][T14232] vhci_hcd: vhci_device speed not set [ 395.151381][T11844] veth1_macvtap: left promiscuous mode [ 395.156995][T11844] veth0_macvtap: left promiscuous mode [ 395.162550][T11844] veth1_vlan: left promiscuous mode [ 395.167833][T11844] veth0_vlan: left promiscuous mode [ 395.237937][T11844] team0 (unregistering): Port device team_slave_1 removed [ 395.247710][T11844] team0 (unregistering): Port device team_slave_0 removed [ 395.294597][T24573] lo speed is unknown, defaulting to 1000 [ 395.301711][T24573] lo speed is unknown, defaulting to 1000 [ 395.397605][T24573] chnl_net:caif_netlink_parms(): no params data found [ 395.406943][T24594] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 395.437106][T24573] bridge0: port 1(bridge_slave_0) entered blocking state [ 395.445711][T24573] bridge0: port 1(bridge_slave_0) entered disabled state [ 395.453980][T24573] bridge_slave_0: entered allmulticast mode [ 395.462363][T24573] bridge_slave_0: entered promiscuous mode [ 395.469357][T24573] bridge0: port 2(bridge_slave_1) entered blocking state [ 395.477433][T24573] bridge0: port 2(bridge_slave_1) entered disabled state [ 395.486283][T24573] bridge_slave_1: entered allmulticast mode [ 395.493694][T24573] bridge_slave_1: entered promiscuous mode [ 395.524233][T24573] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 395.542337][T24573] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 395.544754][T24603] __nla_validate_parse: 9 callbacks suppressed [ 395.544771][T24603] netlink: 3 bytes leftover after parsing attributes in process `syz.6.7561'. [ 395.567039][T24603] 1ªX¹¦À: renamed from 60ªX¹¦À [ 395.574700][T24603] A link change request failed with some changes committed already. Interface 61ªX¹¦À may have been left with an inconsistent configuration, please check. [ 395.597628][T24603] macvtap0: refused to change device tx_queue_len [ 395.605294][T24603] netlink: 12 bytes leftover after parsing attributes in process `syz.6.7561'. [ 395.605966][T24573] team0: Port device team_slave_0 added [ 395.621194][T24573] team0: Port device team_slave_1 added [ 395.638672][T24573] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 395.645726][T24573] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 395.646073][T24603] loop6: detected capacity change from 0 to 512 [ 395.671673][T24573] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 395.673924][T24573] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 395.685481][T24603] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 395.690468][T24573] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 395.690518][T24573] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 395.750772][T24603] EXT4-fs (loop6): 1 truncate cleaned up [ 395.757063][T24603] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 395.761822][T24573] hsr_slave_0: entered promiscuous mode [ 395.777071][T24573] hsr_slave_1: entered promiscuous mode [ 395.784291][T24573] debugfs: 'hsr0' already exists in 'hsr' [ 395.791532][T24573] Cannot create hsr debugfs directory [ 395.797906][T18985] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 395.818219][T24609] netlink: 'syz.6.7562': attribute type 13 has an invalid length. [ 395.897039][T24573] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 395.899639][T24615] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 395.912500][T24615] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 395.914778][T24573] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 395.930151][T24573] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 395.939014][T24573] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 395.972162][T24573] 8021q: adding VLAN 0 to HW filter on device bond0 [ 395.987692][T24573] 8021q: adding VLAN 0 to HW filter on device team0 [ 395.997350][T11844] bridge0: port 1(bridge_slave_0) entered blocking state [ 396.004610][T11844] bridge0: port 1(bridge_slave_0) entered forwarding state [ 396.017145][T11824] bridge0: port 2(bridge_slave_1) entered blocking state [ 396.024200][T11824] bridge0: port 2(bridge_slave_1) entered forwarding state [ 396.088962][T24573] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 396.215335][T24573] veth0_vlan: entered promiscuous mode [ 396.224478][T24573] veth1_vlan: entered promiscuous mode [ 396.245253][T24573] veth0_macvtap: entered promiscuous mode [ 396.255321][T24573] veth1_macvtap: entered promiscuous mode [ 396.268450][T24573] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 396.282769][T24573] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 396.297801][T11831] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 396.315303][T11831] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 396.331135][T11820] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 396.346513][T24645] netlink: 'syz.5.7568': attribute type 13 has an invalid length. [ 396.349555][T11820] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 396.382024][T24647] netlink: 116 bytes leftover after parsing attributes in process `syz.8.7553'. [ 396.395827][T24650] netlink: 'syz.5.7569': attribute type 27 has an invalid length. [ 396.445445][T24656] netlink: 'syz.8.7572': attribute type 27 has an invalid length. [ 396.456776][T24653] netlink: 12 bytes leftover after parsing attributes in process `syz.5.7571'. [ 396.497900][T24659] bridge0: entered promiscuous mode [ 396.503229][T24659] macsec1: entered promiscuous mode [ 396.509339][T24659] bridge0: port 3(macsec1) entered blocking state [ 396.515976][T24659] bridge0: port 3(macsec1) entered disabled state [ 396.522646][T24659] macsec1: entered allmulticast mode [ 396.527987][T24659] bridge0: entered allmulticast mode [ 396.535303][T24659] macsec1: left allmulticast mode [ 396.541376][T24659] bridge0: left allmulticast mode [ 396.547712][T24659] bridge0: left promiscuous mode [ 396.557920][T24663] loop8: detected capacity change from 0 to 512 [ 396.566735][T24663] EXT4-fs: Ignoring removed i_version option [ 396.574998][T24663] EXT4-fs: inline encryption not supported [ 396.583800][T24663] EXT4-fs error (device loop8): ext4_validate_block_bitmap:441: comm syz.8.7573: bg 0: block 131: padding at end of block bitmap is not set [ 396.601567][T24663] EXT4-fs (loop8): Remounting filesystem read-only [ 396.608196][T24663] EXT4-fs (loop8): 1 truncate cleaned up [ 396.615737][T24663] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 396.630120][T24663] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 396.930151][T24663] loop8: detected capacity change from 0 to 128 [ 396.938359][T24663] EXT4-fs (loop8): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 396.953469][T24663] EXT4-fs (loop8): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 397.159863][ T5400] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 397.412364][T24680] netlink: 116 bytes leftover after parsing attributes in process `syz.5.7581'. [ 397.427975][T24678] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 397.445424][T24682] : renamed from vlan0 (while UP) [ 397.507500][T24690] loop8: detected capacity change from 0 to 1024 [ 397.524507][T24690] EXT4-fs: Ignoring removed i_version option [ 397.532948][T24690] EXT4-fs (loop8): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 397.545704][T24690] EXT4-fs error (device loop8): ext4_read_block_bitmap_nowait:483: comm syz.8.7585: Invalid block bitmap block 0 in block_group 0 [ 397.560520][T24690] EXT4-fs error (device loop8): ext4_acquire_dquot:6945: comm syz.8.7585: Failed to acquire dquot type 0 [ 397.572529][T24690] EXT4-fs error (device loop8): ext4_free_blocks:6706: comm syz.8.7585: Freeing blocks not in datazone - block = 0, count = 4096 [ 397.587934][T24690] EXT4-fs error (device loop8): ext4_read_inode_bitmap:139: comm syz.8.7585: Invalid inode bitmap blk 0 in block_group 0 [ 397.603160][T11839] EXT4-fs error (device loop8): ext4_release_dquot:6981: comm kworker/u8:20: Failed to release dquot type 0 [ 397.617600][T24690] EXT4-fs error (device loop8) in ext4_free_inode:361: Corrupt filesystem [ 397.628192][T24690] EXT4-fs (loop8): 1 orphan inode deleted [ 397.634975][T24690] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 397.649584][T11839] Bluetooth: hci0: Frame reassembly failed (-84) [ 397.669411][T24690] lo speed is unknown, defaulting to 1000 [ 397.676332][T24690] lo speed is unknown, defaulting to 1000 [ 397.713541][T24698] EXT4-fs error (device loop8): ext4_search_dir:1474: inode #2: block 16: comm syz.8.7585: bad entry in directory: inode out of bounds - offset=44, inode=40, rec_len=16, size=1024 fake=0 [ 397.752372][T24693] EXT4-fs error (device loop8): ext4_search_dir:1474: inode #2: block 16: comm syz.8.7585: bad entry in directory: inode out of bounds - offset=44, inode=40, rec_len=16, size=1024 fake=0 [ 398.193860][T24704] lo speed is unknown, defaulting to 1000 [ 398.201786][T24704] lo speed is unknown, defaulting to 1000 [ 398.461567][T12430] Bluetooth: hci1: Opcode 0x1003 failed: -110 [ 398.496760][T24713] netlink: 116 bytes leftover after parsing attributes in process `syz.1.7593'. [ 398.558986][T24718] netlink: 12 bytes leftover after parsing attributes in process `syz.6.7594'. [ 398.847587][T24743] loop6: detected capacity change from 0 to 512 [ 398.855581][T24741] netlink: 116 bytes leftover after parsing attributes in process `syz.1.7606'. [ 398.921652][T24751] netlink: 84 bytes leftover after parsing attributes in process `syz.1.7610'. [ 398.957916][T24743] EXT4-fs error (device loop6): ext4_do_update_inode:5632: inode #2: comm syz.6.7607: corrupted inode contents [ 398.985796][T24743] EXT4-fs error (device loop6): ext4_dirty_inode:6517: inode #2: comm syz.6.7607: mark_inode_dirty error [ 399.036876][T24752] lo speed is unknown, defaulting to 1000 [ 399.043095][T24752] lo speed is unknown, defaulting to 1000 [ 399.106052][T24743] EXT4-fs error (device loop6): ext4_do_update_inode:5632: inode #2: comm syz.6.7607: corrupted inode contents [ 399.118759][ T29] kauditd_printk_skb: 732 callbacks suppressed [ 399.118774][ T29] audit: type=1326 audit(399.090:69421): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24742 comm="syz.6.7607" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8dbaacf6c9 code=0x7ffc0000 [ 399.148288][ T29] audit: type=1326 audit(399.120:69422): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24742 comm="syz.6.7607" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8dbaacf6c9 code=0x7ffc0000 [ 399.232263][ T29] audit: type=1326 audit(399.150:69423): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24742 comm="syz.6.7607" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f8dbaacf6c9 code=0x7ffc0000 [ 399.255264][ T29] audit: type=1326 audit(399.150:69424): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24742 comm="syz.6.7607" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8dbaacf6c9 code=0x7ffc0000 [ 399.278237][ T29] audit: type=1326 audit(399.150:69425): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24742 comm="syz.6.7607" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8dbaacf6c9 code=0x7ffc0000 [ 399.301370][ T29] audit: type=1326 audit(399.150:69426): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24742 comm="syz.6.7607" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7f8dbaacf6c9 code=0x7ffc0000 [ 399.324248][ T29] audit: type=1326 audit(399.150:69427): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24742 comm="syz.6.7607" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8dbaacf6c9 code=0x7ffc0000 [ 399.347244][ T29] audit: type=1326 audit(399.150:69428): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24742 comm="syz.6.7607" exe="/root/syz-executor" sig=0 arch=c000003e syscall=42 compat=0 ip=0x7f8dbaacf6c9 code=0x7ffc0000 [ 399.370135][ T29] audit: type=1326 audit(399.150:69429): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24742 comm="syz.6.7607" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8dbaacf6c9 code=0x7ffc0000 [ 399.393139][ T29] audit: type=1326 audit(399.150:69430): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24742 comm="syz.6.7607" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f8dbaacf6c9 code=0x7ffc0000 [ 399.486005][T24767] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 399.569339][T24782] netlink: 8 bytes leftover after parsing attributes in process `syz.6.7618'. [ 399.612516][T24782] 8021q: adding VLAN 0 to HW filter on device bond0 [ 399.622348][T24782] 8021q: adding VLAN 0 to HW filter on device team0 [ 399.632378][T24782] A link change request failed with some changes committed already. Interface 61ªX¹¦À may have been left with an inconsistent configuration, please check. [ 399.701815][T24793] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 399.710471][T12430] Bluetooth: hci0: command 0x1003 tx timeout [ 399.717794][ T3591] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 399.719980][T24793] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 399.820095][ T36] usb 3-1: enqueue for inactive port 0 [ 399.825828][ T3612] usb 11-1: enqueue for inactive port 0 [ 399.831501][ T36] usb 3-1: enqueue for inactive port 0 [ 399.837993][ T3612] usb 11-1: enqueue for inactive port 0 [ 399.903616][T24798] lo speed is unknown, defaulting to 1000 [ 399.909690][T24798] lo speed is unknown, defaulting to 1000 [ 400.259848][ T36] vhci_hcd: vhci_device speed not set [ 400.265339][ T3612] vhci_hcd: vhci_device speed not set [ 400.492057][T24820] A link change request failed with some changes committed already. Interface 61ªX¹¦À may have been left with an inconsistent configuration, please check. [ 400.617606][T24833] __nla_validate_parse: 8 callbacks suppressed [ 400.617623][T24833] netlink: 12 bytes leftover after parsing attributes in process `syz.6.7642'. [ 400.636090][T24835] io-wq is not configured for unbound workers [ 400.668125][T24838] netlink: 84 bytes leftover after parsing attributes in process `syz.6.7644'. [ 400.670703][T24840] netlink: 12 bytes leftover after parsing attributes in process `syz.1.7645'. [ 400.699305][T24840] FAULT_INJECTION: forcing a failure. [ 400.699305][T24840] name failslab, interval 1, probability 0, space 0, times 0 [ 400.712017][T24840] CPU: 1 UID: 0 PID: 24840 Comm: syz.1.7645 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 400.712156][T24840] Tainted: [W]=WARN [ 400.712165][T24840] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 400.712183][T24840] Call Trace: [ 400.712191][T24840] [ 400.712228][T24840] __dump_stack+0x1d/0x30 [ 400.712283][T24840] dump_stack_lvl+0xe8/0x140 [ 400.712309][T24840] dump_stack+0x15/0x1b [ 400.712356][T24840] should_fail_ex+0x265/0x280 [ 400.712399][T24840] should_failslab+0x8c/0xb0 [ 400.712434][T24840] kmem_cache_alloc_node_noprof+0x57/0x4a0 [ 400.712520][T24840] ? __alloc_skb+0x101/0x320 [ 400.712554][T24840] __alloc_skb+0x101/0x320 [ 400.712596][T24840] alloc_skb_with_frags+0x7d/0x470 [ 400.712637][T24840] ? should_fail_ex+0xdb/0x280 [ 400.712791][T24840] sock_alloc_send_pskb+0x430/0x4e0 [ 400.712825][T24840] packet_sendmsg+0x222b/0x31f0 [ 400.712907][T24840] ? avc_has_perm+0xf7/0x180 [ 400.712934][T24840] ? selinux_socket_sendmsg+0x175/0x1b0 [ 400.712996][T24840] ? __pfx_packet_sendmsg+0x10/0x10 [ 400.713095][T24840] __sock_sendmsg+0x145/0x180 [ 400.713135][T24840] __sys_sendto+0x268/0x330 [ 400.713186][T24840] __x64_sys_sendto+0x76/0x90 [ 400.713276][T24840] x64_sys_call+0x2d14/0x3000 [ 400.713303][T24840] do_syscall_64+0xd2/0x200 [ 400.713328][T24840] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 400.713401][T24840] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 400.713492][T24840] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 400.713516][T24840] RIP: 0033:0x7f6eba05f6c9 [ 400.713533][T24840] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 400.713553][T24840] RSP: 002b:00007f6eb8abf038 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 400.713593][T24840] RAX: ffffffffffffffda RBX: 00007f6eba2b5fa0 RCX: 00007f6eba05f6c9 [ 400.713625][T24840] RDX: 000000000000fc13 RSI: 0000200000000800 RDI: 0000000000000003 [ 400.713638][T24840] RBP: 00007f6eb8abf090 R08: 0000000000000000 R09: fffffffffffffef0 [ 400.713652][T24840] R10: 0000000000000880 R11: 0000000000000246 R12: 0000000000000001 [ 400.713666][T24840] R13: 00007f6eba2b6038 R14: 00007f6eba2b5fa0 R15: 00007ffd9b29d3a8 [ 400.713687][T24840] [ 400.943441][T24842] netlink: 'syz.6.7646': attribute type 13 has an invalid length. [ 400.970279][T24844] netlink: 12 bytes leftover after parsing attributes in process `syz.1.7647'. [ 401.003538][T24846] netlink: 4 bytes leftover after parsing attributes in process `syz.6.7648'. [ 401.013398][T24846] netlink: 8 bytes leftover after parsing attributes in process `syz.6.7648'. [ 401.039655][T24848] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7649'. [ 401.055787][T24848] A link change request failed with some changes committed already. Interface 60ªX¹¦À may have been left with an inconsistent configuration, please check. [ 401.084242][T24848] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7649'. [ 401.098386][T24854] netlink: 'syz.6.7651': attribute type 27 has an invalid length. [ 401.315232][T24863] netlink: 12 bytes leftover after parsing attributes in process `syz.5.7656'. [ 401.343310][T24863] bond2: (slave geneve2): Enslaving as an active interface with an up link [ 401.353315][T24863] netlink: 4 bytes leftover after parsing attributes in process `syz.5.7656'. [ 401.362356][T11824] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 20000 - 0 [ 401.373322][T24863] bond2 (unregistering): (slave geneve2): Releasing backup interface [ 401.384866][T24863] bond2 (unregistering): Released all slaves [ 401.400963][T11824] netdevsim netdevsim5 netdevsim0: unset [1, 0] type 2 family 0 port 20000 - 0 [ 401.413448][T24873] !yz!: rxe_newlink: already configured on team_slave_0 [ 401.552891][T24886] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 401.604430][T24889] netlink: 'syz.5.7664': attribute type 27 has an invalid length. [ 401.944282][T24907] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 401.953897][T24907] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 402.021594][T24909] netlink: 'syz.4.7672': attribute type 13 has an invalid length. [ 402.644390][T24935] loop8: detected capacity change from 0 to 512 [ 402.721530][T24944] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 402.755133][T24573] EXT4-fs unmount: 4 callbacks suppressed [ 402.755147][T24573] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 402.881127][T24952] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 403.204881][T24979] lo speed is unknown, defaulting to 1000 [ 403.211066][T24979] lo speed is unknown, defaulting to 1000 [ 403.344083][T24984] !yz!: rxe_newlink: already configured on team_slave_0 [ 403.373526][T24989] netlink: 'syz.8.7699': attribute type 27 has an invalid length. [ 403.434754][T24994] loop8: detected capacity change from 0 to 512 [ 403.452308][T24994] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 403.469017][T24994] EXT4-fs error (device loop8): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 96 vs 65376 free clusters [ 403.496806][T24573] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 403.523653][T25007] netlink: 'syz.8.7704': attribute type 27 has an invalid length. [ 404.027757][T25025] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 404.038110][T25025] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 404.127936][ T29] kauditd_printk_skb: 1161 callbacks suppressed [ 404.127959][ T29] audit: type=1326 audit(404.100:70592): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25010 comm="syz.8.7706" exe="/root/syz-executor" sig=0 arch=c000003e syscall=275 compat=0 ip=0x7f497321f6c9 code=0x7ffc0000 [ 404.158512][ T29] audit: type=1326 audit(404.130:70593): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25010 comm="syz.8.7706" exe="/root/syz-executor" sig=0 arch=c000003e syscall=275 compat=0 ip=0x7f497321f6c9 code=0x7ffc0000 [ 404.184310][ T29] audit: type=1326 audit(404.170:70594): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25010 comm="syz.8.7706" exe="/root/syz-executor" sig=0 arch=c000003e syscall=275 compat=0 ip=0x7f497321f6c9 code=0x7ffc0000 [ 404.213830][ T29] audit: type=1326 audit(404.190:70595): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25010 comm="syz.8.7706" exe="/root/syz-executor" sig=0 arch=c000003e syscall=275 compat=0 ip=0x7f497321f6c9 code=0x7ffc0000 [ 404.239149][ T29] audit: type=1326 audit(404.220:70596): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25010 comm="syz.8.7706" exe="/root/syz-executor" sig=0 arch=c000003e syscall=275 compat=0 ip=0x7f497321f6c9 code=0x7ffc0000 [ 404.273465][ T29] audit: type=1326 audit(404.250:70597): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25010 comm="syz.8.7706" exe="/root/syz-executor" sig=0 arch=c000003e syscall=275 compat=0 ip=0x7f497321f6c9 code=0x7ffc0000 [ 404.297520][T25037] netlink: 'syz.4.7716': attribute type 27 has an invalid length. [ 404.307422][ T29] audit: type=1326 audit(404.280:70598): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25010 comm="syz.8.7706" exe="/root/syz-executor" sig=0 arch=c000003e syscall=275 compat=0 ip=0x7f497321f6c9 code=0x7ffc0000 [ 404.330580][ T29] audit: type=1326 audit(404.290:70599): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25010 comm="syz.8.7706" exe="/root/syz-executor" sig=0 arch=c000003e syscall=275 compat=0 ip=0x7f497321f6c9 code=0x7ffc0000 [ 404.353855][ T29] audit: type=1326 audit(404.310:70600): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25010 comm="syz.8.7706" exe="/root/syz-executor" sig=0 arch=c000003e syscall=275 compat=0 ip=0x7f497321f6c9 code=0x7ffc0000 [ 404.376850][ T29] audit: type=1326 audit(404.320:70601): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25010 comm="syz.8.7706" exe="/root/syz-executor" sig=0 arch=c000003e syscall=275 compat=0 ip=0x7f497321f6c9 code=0x7ffc0000 [ 404.491556][T25048] lo speed is unknown, defaulting to 1000 [ 404.497700][T25048] lo speed is unknown, defaulting to 1000 [ 405.295760][T25075] netlink: 'syz.4.7731': attribute type 13 has an invalid length. [ 405.354489][T25083] loop8: detected capacity change from 0 to 164 [ 405.370845][T25083] iso9660: Unknown parameter '&1Ø‘h*ZËiocharset%iso^š\é8¹¾­ßzJ¥K¶%|' [ 405.708636][T25097] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 405.734629][T25097] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 405.898652][T25102] loop8: detected capacity change from 0 to 512 [ 405.962374][T25102] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 406.144976][T25114] __nla_validate_parse: 9 callbacks suppressed [ 406.144992][T25114] netlink: 3 bytes leftover after parsing attributes in process `syz.5.7744'. [ 406.197216][T25114] 1ªX¹¦À: renamed from 60ªX¹¦À [ 406.217161][T25118] netlink: 'syz.1.7746': attribute type 13 has an invalid length. [ 406.227504][T25114] A link change request failed with some changes committed already. Interface 61ªX¹¦À may have been left with an inconsistent configuration, please check. [ 406.233853][T24573] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 406.269768][T25114] macvtap0: refused to change device tx_queue_len [ 406.343602][T25122] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7748'. [ 406.387711][T25122] 8021q: adding VLAN 0 to HW filter on device bond0 [ 406.395907][T25132] loop8: detected capacity change from 0 to 512 [ 406.400033][T25134] netlink: 4 bytes leftover after parsing attributes in process `syz.4.7748'. [ 406.414096][T25122] 8021q: adding VLAN 0 to HW filter on device team0 [ 406.429093][T25122] A link change request failed with some changes committed already. Interface 60ªX¹¦À may have been left with an inconsistent configuration, please check. [ 406.467044][T25132] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 406.511479][T25149] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 406.520202][T25149] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 406.623400][T24573] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 406.832766][T25164] lo speed is unknown, defaulting to 1000 [ 406.839292][T25164] lo speed is unknown, defaulting to 1000 [ 407.115888][T25167] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 407.176959][T25167] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 407.349267][T25176] netlink: '+}[@': attribute type 27 has an invalid length. [ 407.362950][T25176] 1ªX¹¦À: left allmulticast mode [ 407.563524][T25189] netlink: 116 bytes leftover after parsing attributes in process `syz.5.7772'. [ 407.597111][T25190] lo speed is unknown, defaulting to 1000 [ 407.603548][T25190] lo speed is unknown, defaulting to 1000 [ 407.705918][T25193] netlink: 3 bytes leftover after parsing attributes in process `syz.1.7773'. [ 407.718115][T25193] 1ªX¹¦À: renamed from 60ªX¹¦À [ 407.726021][T25193] A link change request failed with some changes committed already. Interface 61ªX¹¦À may have been left with an inconsistent configuration, please check. [ 407.787595][T25196] macvtap0: refused to change device tx_queue_len [ 408.407600][T25234] netlink: 3 bytes leftover after parsing attributes in process `syz.6.7788'. [ 408.508855][T25241] macvtap0: refused to change device tx_queue_len [ 408.551307][T25234] 0ªX¹¦À: renamed from 61ªX¹¦À [ 408.583157][T25243] netlink: 116 bytes leftover after parsing attributes in process `syz.6.7788'. [ 408.664493][T25234] A link change request failed with some changes committed already. Interface 60ªX¹¦À may have been left with an inconsistent configuration, please check. [ 408.929588][T25243] loop6: detected capacity change from 0 to 512 [ 408.944843][T25243] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 408.974483][T25243] EXT4-fs (loop6): 1 truncate cleaned up [ 408.982127][T25259] netlink: 12 bytes leftover after parsing attributes in process `syz.5.7798'. [ 408.983341][T25243] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 408.991136][T25259] netlink: 12 bytes leftover after parsing attributes in process `syz.5.7798'. [ 409.083556][T25271] netlink: 116 bytes leftover after parsing attributes in process `syz.1.7800'. [ 409.119351][T25277] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 409.146096][T25277] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 409.204502][T18985] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 409.396227][T25299] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 409.402955][T25294] A link change request failed with some changes committed already. Interface 60ªX¹¦À may have been left with an inconsistent configuration, please check. [ 409.405761][ T29] kauditd_printk_skb: 748 callbacks suppressed [ 409.405779][ T29] audit: type=1326 audit(409.360:71350): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25297 comm="syz.6.7813" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8dbaacf6c9 code=0x7ffc0000 [ 409.449716][ T29] audit: type=1326 audit(409.360:71351): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25297 comm="syz.6.7813" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8dbaacf6c9 code=0x7ffc0000 [ 409.472876][ T29] audit: type=1326 audit(409.360:71352): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25297 comm="syz.6.7813" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f8dbaacdf10 code=0x7ffc0000 [ 409.496036][ T29] audit: type=1326 audit(409.360:71353): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25297 comm="syz.6.7813" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8dbaacf6c9 code=0x7ffc0000 [ 409.519060][ T29] audit: type=1326 audit(409.360:71354): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25297 comm="syz.6.7813" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f8dbaacf6c9 code=0x7ffc0000 [ 409.542015][ T29] audit: type=1326 audit(409.360:71355): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25297 comm="syz.6.7813" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8dbaacf6c9 code=0x7ffc0000 [ 409.565116][ T29] audit: type=1326 audit(409.360:71356): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25297 comm="syz.6.7813" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f8dbaacf6c9 code=0x7ffc0000 [ 409.588127][ T29] audit: type=1326 audit(409.360:71357): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25297 comm="syz.6.7813" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8dbaacf6c9 code=0x7ffc0000 [ 409.611598][ T29] audit: type=1326 audit(409.360:71358): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25297 comm="syz.6.7813" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f8dbaacf6c9 code=0x7ffc0000 [ 409.634631][ T29] audit: type=1326 audit(409.360:71359): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25297 comm="syz.6.7813" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8dbaacf6c9 code=0x7ffc0000 [ 409.736962][T25317] netlink: 'syz.6.7816': attribute type 27 has an invalid length. [ 409.765761][T25319] netlink: 'syz.1.7819': attribute type 27 has an invalid length. [ 409.888944][T25335] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 410.072738][T25344] loop6: detected capacity change from 0 to 2048 [ 410.179209][T25344] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 410.551685][T11831] EXT4-fs error (device loop6): ext4_validate_block_bitmap:441: comm kworker/u8:16: bg 0: block 345: padding at end of block bitmap is not set [ 410.566755][T11831] EXT4-fs (loop6): Remounting filesystem read-only [ 410.636670][T18985] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 410.773326][T25375] netlink: 'syz.1.7839': attribute type 13 has an invalid length. [ 410.913204][T25390] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 410.978036][T25398] loop8: detected capacity change from 0 to 164 [ 410.987035][T25398] iso9660: Unknown parameter '&1Ø‘h*ZËiocharset%iso^š\é8¹¾­ßzJ¥K¶%|' [ 411.024313][T25402] netlink: 'syz.1.7851': attribute type 13 has an invalid length. [ 411.195173][T25408] __nla_validate_parse: 4 callbacks suppressed [ 411.195188][T25408] netlink: 116 bytes leftover after parsing attributes in process `syz.8.7853'. [ 411.244858][T25412] loop8: detected capacity change from 0 to 512 [ 411.270865][T25416] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 411.279018][T25412] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 411.326201][T25412] EXT4-fs error (device loop8): ext4_do_update_inode:5632: inode #2: comm syz.8.7855: corrupted inode contents [ 411.357371][T25427] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7861'. [ 411.371926][T25412] EXT4-fs error (device loop8): ext4_dirty_inode:6517: inode #2: comm syz.8.7855: mark_inode_dirty error [ 411.385552][T25427] 8021q: adding VLAN 0 to HW filter on device bond0 [ 411.386356][T25431] netlink: 'syz.4.7862': attribute type 13 has an invalid length. [ 411.395946][T25427] 8021q: adding VLAN 0 to HW filter on device team0 [ 411.408326][T25432] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7861'. [ 411.417406][T25427] A link change request failed with some changes committed already. Interface 61ªX¹¦À may have been left with an inconsistent configuration, please check. [ 411.437498][T25412] EXT4-fs error (device loop8): ext4_do_update_inode:5632: inode #2: comm syz.8.7855: corrupted inode contents [ 411.525342][T24573] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 411.578425][T25447] loop8: detected capacity change from 0 to 512 [ 411.613864][T25447] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 411.646735][T25455] !yz!: rxe_newlink: already configured on team_slave_0 [ 411.715745][T25464] siw: device registration error -23 [ 411.763695][T25473] netlink: '+}[@': attribute type 27 has an invalid length. [ 411.773138][T25470] netlink: 'syz.4.7875': attribute type 13 has an invalid length. [ 411.862201][T25482] netlink: 3 bytes leftover after parsing attributes in process `syz.1.7882'. [ 411.876210][T25482] 0ªX¹¦À: renamed from 61ªX¹¦À [ 411.892404][T25477] loop6: detected capacity change from 0 to 512 [ 411.914693][T25477] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 412.188011][T25497] EXT4-fs error (device loop6): ext4_do_update_inode:5632: inode #2: comm syz.6.7877: corrupted inode contents [ 412.202222][T24573] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 412.204368][T25497] EXT4-fs error (device loop6): ext4_dirty_inode:6517: inode #2: comm syz.6.7877: mark_inode_dirty error [ 412.224929][T25497] EXT4-fs error (device loop6): ext4_do_update_inode:5632: inode #2: comm syz.6.7877: corrupted inode contents [ 412.236956][T25482] A link change request failed with some changes committed already. Interface 60ªX¹¦À may have been left with an inconsistent configuration, please check. [ 412.333075][T25514] netlink: 'syz.1.7889': attribute type 13 has an invalid length. [ 412.355250][T18985] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 412.411685][T25519] netlink: '+}[@': attribute type 27 has an invalid length. [ 412.418280][T25522] siw: device registration error -23 [ 412.456917][T25522] loop6: detected capacity change from 0 to 512 [ 412.480783][T25522] EXT4-fs (loop6): 1 orphan inode deleted [ 412.490361][T25522] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 412.527896][T18985] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 412.632396][T25545] loop6: detected capacity change from 0 to 512 [ 412.658183][T25545] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 412.686524][T25545] EXT4-fs error (device loop6): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 96 vs 65376 free clusters [ 412.690282][T25555] netlink: '+}[@': attribute type 27 has an invalid length. [ 412.716494][T18985] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 412.931075][T25588] netlink: '+}[@': attribute type 27 has an invalid length. [ 412.978831][T25594] loop8: detected capacity change from 0 to 164 [ 412.988608][T25594] iso9660: Unknown parameter '&1Ø‘h*ZËiocharset%iso^š\é8¹¾­ßzJ¥K¶%|' [ 413.356270][T25618] loop8: detected capacity change from 0 to 512 [ 413.383921][T25618] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 413.405474][T25618] EXT4-fs error (device loop8): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 96 vs 65376 free clusters [ 413.430414][T24573] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 413.491089][T25627] loop8: detected capacity change from 0 to 1024 [ 413.497994][T25627] EXT4-fs: inline encryption not supported [ 413.521308][T25627] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 413.720702][T25642] vhci_hcd: invalid port number 96 [ 413.725895][T25642] vhci_hcd: default hub control req: 0300 vfffa i0060 l0 [ 414.159465][T25627] syz.8.7931 invoked oom-killer: gfp_mask=0x402dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_ZERO|__GFP_NOWARN), order=0, oom_score_adj=1000 [ 414.173715][T25627] CPU: 1 UID: 0 PID: 25627 Comm: syz.8.7931 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 414.173837][T25627] Tainted: [W]=WARN [ 414.173847][T25627] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 414.173861][T25627] Call Trace: [ 414.173869][T25627] [ 414.173876][T25627] __dump_stack+0x1d/0x30 [ 414.173901][T25627] dump_stack_lvl+0xe8/0x140 [ 414.173999][T25627] dump_stack+0x15/0x1b [ 414.174019][T25627] dump_header+0x81/0x220 [ 414.174037][T25627] oom_kill_process+0x342/0x400 [ 414.174123][T25627] out_of_memory+0x979/0xb80 [ 414.174159][T25627] try_charge_memcg+0x610/0xa10 [ 414.174212][T25627] obj_cgroup_charge_pages+0xa6/0x150 [ 414.174241][T25627] __memcg_kmem_charge_page+0x9f/0x170 [ 414.174266][T25627] __alloc_frozen_pages_noprof+0x188/0x360 [ 414.174322][T25627] alloc_pages_mpol+0xb3/0x260 [ 414.174346][T25627] ? alloc_pages_noprof+0xf4/0x130 [ 414.174389][T25627] alloc_pages_noprof+0x90/0x130 [ 414.174413][T25627] __vmalloc_node_range_noprof+0x7a5/0xed0 [ 414.174459][T25627] __kvmalloc_node_noprof+0x483/0x670 [ 414.174537][T25627] ? ip_set_alloc+0x24/0x30 [ 414.174571][T25627] ? ip_set_alloc+0x24/0x30 [ 414.174682][T25627] ? __kmalloc_cache_noprof+0x249/0x4a0 [ 414.174719][T25627] ip_set_alloc+0x24/0x30 [ 414.174762][T25627] hash_netiface_create+0x282/0x740 [ 414.174798][T25627] ? __pfx_hash_netiface_create+0x10/0x10 [ 414.175009][T25627] ip_set_create+0x3cc/0x970 [ 414.175045][T25627] ? __nla_parse+0x40/0x60 [ 414.175072][T25627] nfnetlink_rcv_msg+0x4c6/0x590 [ 414.175183][T25627] netlink_rcv_skb+0x123/0x220 [ 414.175282][T25627] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 414.175341][T25627] nfnetlink_rcv+0x167/0x16c0 [ 414.175372][T25627] ? kmem_cache_free+0xe4/0x3d0 [ 414.175411][T25627] ? __kfree_skb+0x109/0x150 [ 414.175487][T25627] ? nlmon_xmit+0x4f/0x60 [ 414.175561][T25627] ? consume_skb+0x49/0x150 [ 414.175596][T25627] ? nlmon_xmit+0x4f/0x60 [ 414.175621][T25627] ? dev_hard_start_xmit+0x3b0/0x3e0 [ 414.175715][T25627] ? __dev_queue_xmit+0x1200/0x2000 [ 414.175740][T25627] ? __dev_queue_xmit+0x182/0x2000 [ 414.175761][T25627] ? skb_put+0xa9/0xf0 [ 414.175870][T25627] ? ref_tracker_free+0x37d/0x3e0 [ 414.175932][T25627] ? __netlink_deliver_tap+0x4dc/0x500 [ 414.175970][T25627] netlink_unicast+0x5c0/0x690 [ 414.176031][T25627] netlink_sendmsg+0x58b/0x6b0 [ 414.176057][T25627] ? __pfx_netlink_sendmsg+0x10/0x10 [ 414.176156][T25627] __sock_sendmsg+0x145/0x180 [ 414.176291][T25627] ____sys_sendmsg+0x31e/0x4e0 [ 414.176317][T25627] ___sys_sendmsg+0x17b/0x1d0 [ 414.176365][T25627] __x64_sys_sendmsg+0xd4/0x160 [ 414.176389][T25627] x64_sys_call+0x191e/0x3000 [ 414.176413][T25627] do_syscall_64+0xd2/0x200 [ 414.176437][T25627] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 414.176503][T25627] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 414.176614][T25627] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 414.176638][T25627] RIP: 0033:0x7f497321f6c9 [ 414.176656][T25627] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 414.176676][T25627] RSP: 002b:00007f4971c7f038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 414.176697][T25627] RAX: ffffffffffffffda RBX: 00007f4973475fa0 RCX: 00007f497321f6c9 [ 414.176711][T25627] RDX: 0000000000000800 RSI: 0000200000000040 RDI: 0000000000000005 [ 414.176731][T25627] RBP: 00007f49732a1f91 R08: 0000000000000000 R09: 0000000000000000 [ 414.176822][T25627] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 414.176833][T25627] R13: 00007f4973476038 R14: 00007f4973475fa0 R15: 00007ffcd1128c48 [ 414.176856][T25627] [ 414.177002][T25627] memory: usage 307200kB, limit 307200kB, failcnt 206 [ 414.529718][ T29] kauditd_printk_skb: 1182 callbacks suppressed [ 414.529737][ T29] audit: type=1326 audit(414.490:72542): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25649 comm="syz.4.7939" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f35137ef6c9 code=0x7ffc0000 [ 414.531667][T25627] memory+swap: usage 308256kB, limit 9007199254740988kB, failcnt 0 [ 414.531682][T25627] kmem: usage 307172kB, limit 9007199254740988kB, failcnt 0 [ 414.583209][T25627] Memory cgroup stats for /syz8 [ 414.583205][ T29] audit: type=1326 audit(414.510:72543): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25649 comm="syz.4.7939" exe="/root/syz-executor" sig=0 arch=c000003e syscall=425 compat=0 ip=0x7f35137ef6c9 code=0x7ffc0000 [ 414.583240][T25627] : [ 414.583278][ T29] audit: type=1326 audit(414.510:72544): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25649 comm="syz.4.7939" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f35137ef703 code=0x7ffc0000 [ 414.583457][T25627] ================================================================== [ 414.588200][ T29] audit: type=1326 audit(414.510:72545): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25649 comm="syz.4.7939" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f35137ef703 code=0x7ffc0000 [ 414.611113][T25627] BUG: KCSAN: data-race in data_push_tail / vsnprintf [ 414.611151][T25627] [ 414.611158][T25627] write to 0xffffffff88e72d28 of 14 bytes by task 29 on cpu 0: [ 414.611179][T25627] vsnprintf+0x2ce/0x890 [ 414.611210][T25627] vscnprintf+0x41/0x90 [ 414.611240][T25627] printk_sprint+0x30/0x2d0 [ 414.611266][T25627] vprintk_store+0x599/0x860 [ 414.611292][T25627] vprintk_emit+0x10d/0x580 [ 414.611317][T25627] vprintk_default+0x26/0x30 [ 414.611344][T25627] vprintk+0x1d/0x30 [ 414.611376][T25627] _printk+0x79/0xa0 [ 414.611418][T25627] kauditd_hold_skb+0x1b1/0x1c0 [ 414.611447][T25627] kauditd_send_queue+0x273/0x2c0 [ 414.611478][T25627] kauditd_thread+0x421/0x630 [ 414.611505][T25627] kthread+0x489/0x510 [ 414.611534][T25627] ret_from_fork+0x122/0x1b0 [ 414.611557][T25627] ret_from_fork_asm+0x1a/0x30 [ 414.611586][T25627] [ 414.611593][T25627] read to 0xffffffff88e72d28 of 8 bytes by task 25627 on cpu 1: [ 414.611612][T25627] data_push_tail+0xfd/0x420 [ 414.611635][T25627] data_alloc+0xfb/0x2e0 [ 414.611655][T25627] prb_reserve+0x807/0xaf0 [ 414.611676][T25627] vprintk_store+0x56d/0x860 [ 414.611702][T25627] vprintk_emit+0x10d/0x580 [ 414.611729][T25627] vprintk_default+0x26/0x30 [ 414.611751][T25627] vprintk+0x1d/0x30 [ 414.611786][T25627] _printk+0x79/0xa0 [ 414.611822][T25627] mem_cgroup_print_oom_meminfo+0x117/0x250 [ 414.611850][T25627] dump_header+0xa0/0x220 [ 414.611866][T25627] oom_kill_process+0x342/0x400 [ 414.611904][T25627] out_of_memory+0x979/0xb80 [ 414.611940][T25627] try_charge_memcg+0x610/0xa10 [ 414.611970][T25627] obj_cgroup_charge_pages+0xa6/0x150 [ 414.611993][T25627] __memcg_kmem_charge_page+0x9f/0x170 [ 414.612018][T25627] __alloc_frozen_pages_noprof+0x188/0x360 [ 414.612061][T25627] alloc_pages_mpol+0xb3/0x260 [ 414.612103][T25627] alloc_pages_noprof+0x90/0x130 [ 414.612125][T25627] __vmalloc_node_range_noprof+0x7a5/0xed0 [ 414.612168][T25627] __kvmalloc_node_noprof+0x483/0x670 [ 414.612204][T25627] ip_set_alloc+0x24/0x30 [ 414.612244][T25627] hash_netiface_create+0x282/0x740 [ 414.612282][T25627] ip_set_create+0x3cc/0x970 [ 414.612302][T25627] nfnetlink_rcv_msg+0x4c6/0x590 [ 414.612337][T25627] netlink_rcv_skb+0x123/0x220 [ 414.612386][T25627] nfnetlink_rcv+0x167/0x16c0 [ 414.612420][T25627] netlink_unicast+0x5c0/0x690 [ 414.612451][T25627] netlink_sendmsg+0x58b/0x6b0 [ 414.612474][T25627] __sock_sendmsg+0x145/0x180 [ 414.612503][T25627] ____sys_sendmsg+0x31e/0x4e0 [ 414.612520][T25627] ___sys_sendmsg+0x17b/0x1d0 [ 414.612537][T25627] __x64_sys_sendmsg+0xd4/0x160 [ 414.612559][T25627] x64_sys_call+0x191e/0x3000 [ 414.612586][T25627] do_syscall_64+0xd2/0x200 [ 414.612606][T25627] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 414.612632][T25627] [ 414.612637][T25627] value changed: 0x0000000100000c80 -> 0x74203a7469647561 [ 414.612650][T25627] [ 414.612654][T25627] Reported by Kernel Concurrency Sanitizer on: [ 414.612671][T25627] CPU: 1 UID: 0 PID: 25627 Comm: syz.8.7931 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 414.612710][T25627] Tainted: [W]=WARN [ 414.612719][T25627] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 414.612736][T25627] ================================================================== [ 414.625944][T25627] cache 24576 [ 414.641695][ T29] audit: type=1326 audit(414.520:72546): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25649 comm="syz.4.7939" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f35137ef6c9 code=0x7ffc0000 [ 414.646476][T25627] rss 0 [ 414.671182][ T29] audit: type=1326 audit(414.520:72547): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25649 comm="syz.4.7939" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f35137ef6c9 code=0x7ffc0000 [ 414.675957][T25627] shmem 0 [ 414.678304][ T29] audit: type=1326 audit(414.520:72548): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25649 comm="syz.4.7939" exe="/root/syz-executor" sig=0 arch=c000003e syscall=426 compat=0 ip=0x7f35137ef6c9 code=0x7ffc0000 [ 414.685834][T25627] mapped_file 0 [ 414.685844][T25627] dirty 0 [ 414.685852][T25627] writeback 0 [ 414.685940][T25627] workingset_refault_anon 96 [ 414.685948][T25627] workingset_refault_file 0 [ 414.685957][T25627] swap 1081344 [ 414.685965][T25627] swapcached 4096 [ 414.685973][T25627] pgpgin 16925 [ 414.685981][T25627] pgpgout 16918 [ 414.685989][T25627] pgfault 21433 [ 414.685997][T25627] pgmajfault 47 [ 414.686005][T25627] inactive_anon 0 [ 414.686013][T25627] active_anon 4096 [ 414.686021][T25627] inactive_file 0 [ 414.686028][T25627] active_file 24576 [ 414.686098][T25627] unevictable 0 [ 414.686104][T25627] hierarchical_memory_limit 314572800 [ 414.686114][T25627] hierarchical_memsw_limit 9223372036854771712 [ 414.686125][T25627] total_cache 24576 [ 414.686133][T25627] total_rss 0 [ 414.686217][T25627] total_shmem 0 [ 414.686267][T25627] total_mapped_file 0 [ 414.686275][T25627] total_dirty 0 [ 414.686282][T25627] total_writeback 0 [ 414.686289][T25627] total_workingset_refault_anon 96 [ 414.686298][T25627] total_workingset_refault_file 0 [ 414.686308][T25627] total_swap 1081344 [ 414.686316][T25627] total_swapcached 4096 [ 414.686325][T25627] total_pgpgin 16925 [ 414.686331][T25627] total_pgpgout 16918 [ 414.686395][T25627] total_pgfault 21433 [ 414.686403][T25627] total_pgmajfault 47 [ 414.686412][T25627] total_inactive_anon 0 [ 414.686420][T25627] total_active_anon 4096 [ 414.686427][T25627] total_inactive_file 0 [ 414.686439][T25627] total_active_file 24576 [ 414.686448][T25627] total_unevictable 0 [ 414.686457][T25627] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz8,task_memcg=/syz8,task=syz.8.7931,pid=25625,uid=0 [ 414.686590][T25627] Memory cgroup out of memory: Killed process 25625 (syz.8.7931) total-vm:96140kB, anon-rss:1116kB, file-rss:22440kB, shmem-rss:0kB, UID:0 pgtables:128kB oom_score_adj:1000 [ 414.908369][T25635] Cannot find del_set index 0 as target [ 414.911643][ T29] audit: type=1326 audit(414.840:72549): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25652 comm="syz.6.7940" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8dbaacf6c9 code=0x7ffc0000 [ 414.920597][T25627] syz.8.7931 (25627) used greatest stack depth: 6184 bytes left [ 414.924758][ T29] audit: type=1326 audit(414.840:72550): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25652 comm="syz.6.7940" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8dbaacf6c9 code=0x7ffc0000 [ 415.008765][T25658] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 415.014786][ T29] audit: type=1326 audit(414.840:72551): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25652 comm="syz.6.7940" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f8dbaacdf10 code=0x7ffc0000 [ 415.402057][T24573] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000.