last executing test programs: 2.724703858s ago: executing program 0 (id=2000): bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="02000000040000"], 0x48) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000a00)={0xe, &(0x7f0000000740)}) r0 = syz_open_dev$usbfs(&(0x7f0000000480), 0x77, 0x41341) r1 = dup2(0xffffffffffffffff, 0xffffffffffffffff) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000004c0)={r1, 0xe0, &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000180)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, &(0x7f0000000240)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000580), 0x0, 0x9a, &(0x7f0000000540)=[{}], 0x8, 0x10, &(0x7f0000000680), 0x0, 0x0, 0xd7, 0x8, 0x8, &(0x7f0000000400)}}, 0x10) bpf$TOKEN_CREATE(0x24, &(0x7f0000000500)={0x0, r1}, 0x8) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x9, 0xb, &(0x7f0000000640)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x23, r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r3, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={0x0, r4, 0x0, 0x5f}, 0x18) r5 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x20, 0xc, &(0x7f00000006c0)=ANY=[@ANYRESHEX=r5, @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c3000000"], 0x0, 0x0, 0x0, 0x0, 0x40e00, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) creat(&(0x7f00000001c0)='./file1\x00', 0x2) acct(&(0x7f0000000080)='./file1\x00') acct(0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000007000000080000000800000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000100000000000000fe0018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b708000000000e007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000208500000001"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x4000, &(0x7f0000000c00)={[{@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}, {@nombcache}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x4}}, {@mblk_io_submit}, {@resuid}, {@norecovery}]}, 0x8, 0x445, &(0x7f0000001dc0)="$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") r7 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x40, 0x0) r8 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./bus\x00', 0x1c5042, 0x12) write(r8, &(0x7f00000009c0)="3bf58d7d45d32cfe1da7c797b82f16713d1cb80b3fa1bda74e3977b40e7af46b4c60b70d7a79ed5d8c48f52a50185980", 0x30) sendfile(r8, r7, 0x0, 0x3ffff) sendfile(r8, r7, 0x0, 0x7fffeffd) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x24, 0x1, 0x0, 0x0, 0x0, 0x7, 0x0, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x4}, 0x2418, 0x10000, 0x40000000, 0x1, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000000)='./file1\x00', 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="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"], 0x6, 0x2b0, &(0x7f0000000280)="$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") ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000000)=@usbdevfs_connect) 1.871901137s ago: executing program 2 (id=2015): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000800)=ANY=[@ANYBLOB="4c0100001800000400000200000000001d0104001500030000000000000000008ca5be073cff296e020000001e010600750000000071ec6d721744cd5200080000f8cfcad4c4ec6511ec028c5028564abce83afe14c93e15e556c2bad57f897fe841c15549a6a2b2a4b9f3052995cdf66a9c7922ff0300005b6c67281f1519cd7c32c2bf7563b9452575505da99ea128d37616896be8764a2c78edbad5bde7a5e405bdc893770338925f824bd24689c0d11a5568fc3aaa9ad0d7766d8ea8d3bf1006e3df494e2f373148ecb4adafdd39874e9808b118301f1e76054a64c6d243523f5de7b347f3b740e105d0ed18fae7289635301ebd8949268090b3bcd4cbed5f1cfe93cff41a9630802f96defe9e8ea850529827c5e301953a8abaafa1f121e590f74e28233f4129d4587eee87ec5d42c3ef0619022c005c8d586b2a88d81866930fca15c8a95d29e5b2ea6546c68aaf219341188c30323150869209cf"], 0x14c}}, 0x0) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x130) syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000280)='./file0\x00', 0x40000100, &(0x7f0000000b80)=ANY=[], 0x2, 0x5b2, &(0x7f0000002740)="$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") r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000004000000b703000000000000850000007200000095"], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x159d0682f53ea167, 0x2, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f00000014c0)={0x0, 0x0, &(0x7f0000002580)={&(0x7f0000003680)=ANY=[@ANYBLOB="a41000001200010022bd7000ffdbdf25ff020000000000000000000000000001000004d502002b0014000d"], 0x10a4}, 0x1, 0x0, 0x0, 0x800}, 0x200040c0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f00000004c0)='kfree\x00', r1, 0x0, 0x6}, 0x18) r3 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r3, 0x29, 0x35, &(0x7f0000000000)=0x8000, 0x4) setsockopt$inet6_IPV6_HOPOPTS(r3, 0x29, 0x36, &(0x7f0000000140)=ANY=[], 0x8) bind$inet6(r3, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x7, 0x3, &(0x7f0000000740)=@framed, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='kfree\x00', r4}, 0x18) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000008c0)=ANY=[@ANYBLOB="54000000000801010000ffffe00000000a000000050003002f0000000600024000000000240004800800024000000000080001400000fcff07000140800000010800014080000001090001"], 0x54}, 0x1, 0x0, 0x0, 0x4004}, 0x28040000) setsockopt$inet6_IPV6_DSTOPTS(r3, 0x29, 0x3b, &(0x7f0000000080)=ANY=[], 0x8) recvmmsg(r3, &(0x7f0000002280)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000010f40)=""/16, 0x10}, 0x18}], 0x1, 0x2, 0x0) sendto$inet6(r3, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) 1.792995003s ago: executing program 0 (id=2020): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000003000010850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r1}, 0x10) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000058000000160a01000000000000000000010000000900010073797a30000000000900020073797a30000000002c00038008000140000000000800024000000000180003801400010076657468305f746f5f687372000000005c000000160a0101000b000000000000010000000900020073797a30000000000900010073797a3000000000300003802c0003801400010076657468305f746f5f687372"], 0xfc}}, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x275a, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x0, 0x12, r3, 0x0) r4 = socket$inet6(0xa, 0x3, 0x3c) setsockopt$inet6_IPV6_RTHDR(r4, 0x29, 0x39, &(0x7f0000000340)=ANY=[@ANYBLOB="00020201"], 0x18) connect$inet6(r4, &(0x7f0000000380)={0xa, 0x0, 0xf7ffffff, @private2={0xfc, 0x2, '\x00', 0x2}}, 0x1c) writev(r4, &(0x7f00000000c0)=[{&(0x7f0000000100)=',', 0xffdf}], 0x1) 1.735556678s ago: executing program 2 (id=2025): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000ed07449e000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000008b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='kfree\x00', r0}, 0x10) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) r2 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) getsockopt$llc_int(r2, 0x10c, 0x5, &(0x7f0000000140), &(0x7f0000000080)=0x4) close(r1) socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r1, 0x9) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=ANY=[@ANYBLOB="44000000090601020000000000000000000000000900020073797a3100"], 0x44}, 0x1, 0x0, 0x0, 0x10040047}, 0x240008c4) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, 0xffffffffffffffff, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000340), 0xffffffffffffffff) r6 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) ioctl$SNDRV_TIMER_IOCTL_SELECT(r6, 0x40345410, &(0x7f00000083c0)={{0x1, 0x0, 0x2}}) ioctl$SNDRV_TIMER_IOCTL_INFO(r6, 0x80e85411, &(0x7f00000005c0)) sendmsg$NL80211_CMD_SET_MESH_CONFIG(r4, &(0x7f0000000540)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000500)={&(0x7f0000000580)=ANY=[@ANYBLOB='x\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="08002abd7000fedbdf251d0000000c00990009000000180000000c009900070000002500000008000300a4163410ef17e173ebf22df068e7e0ffc3e152af8762820eb4f2f1e9f8bc76034f1e5365ab483e85999bcb89f93adf031e185cb99b3402956a6ac70bdd34ff2985dd81ec5d3334d91819af75387bf27bee515f91724184c0d7b36d4f4ab04657f39d781f415b484fc09a0b101f23a6bd26f2d55f05faf3f5fe702b544e8a8d0773b08f941ed6cc304a5acafe737dcd", @ANYRES32=0x0, @ANYBLOB="3400238008000b00090000000800090008000000060019000700000005001d000100000005001e0000000000060002007800000008000100280000000800010052000000"], 0x78}, 0x1, 0x0, 0x0, 0xc004080}, 0x4000000) connect$inet(r3, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000740), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r7, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000a40)={&(0x7f0000000980)=ANY=[@ANYBLOB="84000000", @ANYRES16=r8, @ANYBLOB="010000000000fbdbdf250100000008000200000000000500050000000000080003000100000048000180050002002000000006000100020000000800060003000000080003"], 0x84}}, 0x20000000) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000004c0)={0x14, r8, 0x1, 0x70bd2c, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x20000800}, 0x800) 1.727791179s ago: executing program 0 (id=2026): socket$igmp6(0xa, 0x3, 0x3a) syz_clone(0x10b8000, &(0x7f0000000080), 0x0, &(0x7f0000000140), &(0x7f0000000180), &(0x7f00000001c0)="e6bda74583641a9fb80acd549aa0da27ccf8b2a3dfa93e7ac3f172c4fab20ece19ad802b16056edbb06b47536f93458aa93b37486e510115216240bfc3fccf9c740219dfb79511bd85600bbbea20d787f0972ee165b5ed00cac1a719e2ac44814c4ff8fb9ae02164b12307c796442c950c0a04fc09dc18bb3c09b61100d18244d12337471749efea44525c30cd2b1df1bd25da59b0a9e4e01c7692be6aab015cdba9") syz_emit_ethernet(0x7c, &(0x7f0000000400)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000000000086dd6100000000462f00fe8000000000000000000000000000bbfe8000000000000000000000000000aa0c2088be00020001bf3f01009900000086dd080088be000000031c0885100100000000007b40080022eb0000000223022340020000000000000500ebb41b08006558000000000fa9673cbae265c6935524ed67"], 0x0) setsockopt$TIPC_GROUP_JOIN(0xffffffffffffffff, 0x10f, 0x87, 0x0, 0x0) setsockopt$TIPC_GROUP_JOIN(0xffffffffffffffff, 0x10f, 0x87, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bf"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000200)='./file2\x00', 0x1000410, &(0x7f0000000100), 0x6, 0x504, &(0x7f0000019940)="$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") unlinkat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x0) rename(&(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)='./bus\x00') r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000400000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kfree\x00', r1}, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x25, 0x1, 0x0, 0x0, 0x0, 0x8000000000000001, 0x518, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={&(0x7f0000000080), 0x6}, 0x0, 0x8, 0x0, 0x1, 0x4, 0x0, 0x3, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) syz_mount_image$iso9660(&(0x7f0000000780), &(0x7f0000000000)='./file0\x00', 0x21488b, &(0x7f0000001f80)=ANY=[@ANYBLOB='map=acorn,sbsector=0x0000000000000000,uid=', @ANYRESDEC=0x0, @ANYBLOB="0000b18eb07a9dbec07d91edf772ce16e8f4545927e1e38533740c5b1da10b839e7f00a468d364205a63adda5262cda8e690d1049c884d79e243210c733da8adfb6db6f3b3464a433ae5d7129bf0e9b1ca805a08f3cacf9bce83fd7888eb1f09a8a7f55959926a7fd5ac27fd519bccdcfda872f50365616970a8fac5ebb07daee8094ad02936ccc35cf6c0f3b43e9263745fc3a07da88b7b0ef9147959831d88ee5592644e7dbf33978d8a822a8323a4039433f66a85be5c2b522cc3af91efef9a6acc76a07f96e988e08e291cac80c01763347ff2447e72872ff1c044651eb34e189378b907d28bba81b06bc579537f9ffc9ac25f988893c3fbb7ec569231d1bc0ae098804f7d08c8edfa2c39d79605ab59a374b4d1f62700"/296, @ANYRES16, @ANYBLOB="48aa122ce7bad1d4005fd66df97f8ec44bbc8f22ca2298ce346671617bb371da3c639abd9ee548b49a9c10009f28579f82efb3cf18d7e4f7d0cda9f6feec4c5df95db277defa1414ccf2075e6fd144cdc78c1f843f1574502ce415c27f3cec8893fe5950104e7d7b43440fd107294cf00fe8000000000000", @ANYRESOCT], 0x1, 0x65b, &(0x7f00000007c0)="$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") r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$fou(&(0x7f00000003c0), 0xffffffffffffffff) sendmsg$FOU_CMD_ADD(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000880)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="0902000000000000000001000000050002000a00000014000700ff00000000000000000000000000000108000b00"], 0x38}}, 0x0) sendmsg$ETHTOOL_MSG_COALESCE_GET(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000300)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000000000000001c000000180001801400020074756e6c30"], 0x2c}, 0x1, 0x0, 0x0, 0x44000}, 0x4000000) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x6, 0xe7fd}, 0x100002, 0x3, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x9, 0xc, &(0x7f0000000580)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES64, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x94) 1.683506103s ago: executing program 0 (id=2027): socket$kcm(0x11, 0xa, 0x300) socket(0x10, 0x3, 0x0) socket$l2tp6(0xa, 0x2, 0x73) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000400000000000"], 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_TSINFO_GET(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)={0x2c, r3, 0x6a98047402e98331, 0x70bd2a, 0x0, {}, [@HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'erspan0\x00'}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x50}, 0x4886) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=@framed={{}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r4}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r6, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff018004000800395032303030"], 0x15) r7 = dup(r6) write$P9_RLERRORu(r7, &(0x7f0000000540)=ANY=[@ANYBLOB="8b"], 0x53) write$RDMA_USER_CM_CMD_SET_OPTION(r7, &(0x7f0000000100)={0xe, 0x18, 0xfa00, @id_afonly={0x0}}, 0x20) write$binfmt_elf64(r7, &(0x7f0000000340)=ANY=[@ANYBLOB="7f454c4600073f034b0b00000000000003003e00ffffffe93501"], 0x7c8) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r5, @ANYBLOB=',wfdno=', @ANYRESHEX=r7]) open(&(0x7f0000000300)='./file0\x00', 0x145142, 0x102) 1.670890684s ago: executing program 2 (id=2029): socket$can_raw(0x1d, 0x3, 0x1) syz_emit_ethernet(0x0, 0x0, 0x0) syz_emit_ethernet(0x3a, &(0x7f00000000c0)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1d}, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x2c, 0x0, 0x2, 0x0, 0x11, 0x0, @empty, @empty}, {0x4e22, 0x7, 0x18, 0x0, @wg=@data={0x4, 0x1, 0x6}}}}}}, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x208, 0xe}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7030000ec000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$EXT4_IOC_PRECACHE_EXTENTS(0xffffffffffffffff, 0x6612) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='kfree\x00', r1}, 0x18) syz_open_procfs(0x0, &(0x7f00000003c0)='net/mcfilter6\x00') bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={0x0, 0xffffffffffffffff, 0x0, 0x8}, 0x18) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x39000, 0x0) memfd_create(&(0x7f0000000780)='L\xc0\xd3V\x13L\xb2\xfcSZ\x7fF\xb6:\x8d\xd2\xee\xac\x1e$v\xcb\xe2w-\xa7W\xd9\xb1\xd0\x83?x\xd4\xbb\x9a\x89|g\xfei\xaf\xa1\x1f\xd1\xf80\x05\x19\x00\x00\x00\x00\xf8\x1c\x8a\\\x982\xb7\xb0\x8d2\xa5\xb3\xf1\xbc\xf5m{\x93\x12\x80n\x84B\x91\xb4\x10wO)\x81\xd8\xf6A\x1bz\xca9\xb2\x10\x97,\xd3k\xa6\xea+\xe0V\xe8E\xbd\xc3:;\x1b,\x87n\xd3`\xae\xf0\x12\xc2Lz\xc0\xfcT\xddA\xe9g\x1fT\xaa\x810S6\xf2h\xa5R6\xac\x11\xe8%Hjk\x1c!\xe8\xa4v\xfd\xb4\x9br?\xfa]z\xfe\x98}\to\xfe\x99kh\xbe9\xfb\x87\xe8\xa7\xd0w\xfeY\xbb\x8d6{\xddW\x90\x04ZH\t\xd3\x0f\x19\x95l_\xe5T\xc5\x02\x12GX9\xf1l\xaa\x8f+sf\xb2\xe8\xc6*\x8e\xef\xc8\x10\xa6!0\'\xf8\xa2\xad=\x19\x12\xb9N$\x05\xdeq\xe0<7-\xbd\xde\xffBDl(rT\xdaU\xabEL\x81\xc7$\xaf\xc9\f\xc2<\xe4\x9a)\b*\x00p\xdc\xdb\x06\xe2\x02*\xb1\x8a\xc1!\x83>\xec\xea\x8djj\xcc8\xfe\xabS\x94?\x1b4\xbc\xdb\xc0\x18jq:\x8a\xf8\x84a\x801\x18\xe1\x02\x90\x95\xf3\xed;\x10\xe3=\x00\x00\x00\x00\x00\x00(\x19\xf2\xcb\xdc\xc5O\n\xa7\xff$\x0f\x04\x94R\x1dW\x99\xae\x04\xb2\xb5\x0ey(\x15\x91<\x01$\xe2\xe3e{\xba\x95\xa2\xe8f\x03\n\xdf\x11\'}\x81\xea\xc0\x80N\x1e\x039\xc8@\xa5\x1a\xbfU\xb2JO%Wh-\xa7M>G\x97\xc8\x92\x93\xd1\xc4P]\b\x8ef\xed7\xd51\x90\xd8\xb4;\xf8\xe8\xday\xd8]\xa4\xea.V\x9a\xd5b_G\x86\x87\xe1S)u;\xae\xe3Y\xd8\x93\x97\x95\x15\x11Y\x8aq\x15\xac\xf4W\xcbk\x8f\x81\xf7_B\xbeK\xfb\xcb-\xe5\xa9)\x9a\r\xbf\x98\\\xb3d\xb3Jf\x9b\x9c\x87x\x18\xa8s\x10\xcb\x14\xb8\x03\x84/~f\xcc\x05\xab\x17\xa6P\x9f\xea1\xadg@\xf6\x1d\xb5\xde\xda\xb7\x9bk\xd2\xf5o`(\"5\xe3\xa5\xb9l\x97\xba\x06\xf8\xe6\xc0%\xef`;\x82]/\xa0\v\x1c;p\x8f\xbb\xcb\xe0=EA]\x9dq\xdc\xb7\xfa\xd4N\x03|\xbdv\x7f\xaf\xb5\xd1\xac\xf6;\xf1?K\xf7\xa8m{\x04\xc6\x87\xd1\xb6\x93W~\x88\x7f\x7fw1\x99\xdfT\x7f\x9d\xcarn/\x1d\xca\x06\x861<\xaa\xf7\tj1C+W.J!E\x97U*\xd9\xdf\xbd:7U\x1e\x1ePd\x01(\xe4\xf8\x91-\x05\xa4\x83\xd4\xf1\x02q\x83\xbe9\xc2\xa4\x1c\xed\xe5\x02\x00\xb3\x8a\x0e\xe1\x99\n3\xf9\x1fa\xff\x0ee\xd7\xd1\xcb\x8d\xd1\xf8\xa1HM\x81\xbaZ\x8d1:\x04TC\x12\x10\xb4\x82[)\x06|M\x8a', 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x11, 0xc, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000380)="2e00000010008188e6b62aa73772cc9f1ba1f848110000005e140602000000000e000a001000000002900000121f", 0x2e}], 0x1}, 0x40) 1.650928285s ago: executing program 0 (id=2031): bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="02000000040000"], 0x48) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000a00)={0xe, &(0x7f0000000740)}) r0 = syz_open_dev$usbfs(&(0x7f0000000480), 0x77, 0x41341) r1 = dup2(0xffffffffffffffff, 0xffffffffffffffff) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000004c0)={r1, 0xe0, &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000180)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, &(0x7f0000000240)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000580), 0x0, 0x9a, &(0x7f0000000540)=[{}], 0x8, 0x10, &(0x7f0000000680), 0x0, 0x0, 0xd7, 0x8, 0x8, &(0x7f0000000400)}}, 0x10) bpf$TOKEN_CREATE(0x24, &(0x7f0000000500)={0x0, r1}, 0x8) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x9, 0xb, &(0x7f0000000640)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x23, r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r3, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={0x0, r4, 0x0, 0x5f}, 0x18) r5 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x20, 0xc, &(0x7f00000006c0)=ANY=[@ANYRESHEX=r5, @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c3000000"], 0x0, 0x0, 0x0, 0x0, 0x40e00, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) creat(&(0x7f00000001c0)='./file1\x00', 0x2) acct(&(0x7f0000000080)='./file1\x00') acct(0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000007000000080000000800000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000100000000000000fe0018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b708000000000e007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000208500000001"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x4000, &(0x7f0000000c00)={[{@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}, {@nombcache}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x4}}, {@mblk_io_submit}, {@resuid}, {@norecovery}]}, 0x8, 0x445, &(0x7f0000001dc0)="$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") r7 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x40, 0x0) r8 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./bus\x00', 0x1c5042, 0x12) write(r8, &(0x7f00000009c0)="3bf58d7d45d32cfe1da7c797b82f16713d1cb80b3fa1bda74e3977b40e7af46b4c60b70d7a79ed5d8c48f52a50185980", 0x30) sendfile(r8, r7, 0x0, 0x3ffff) sendfile(r8, r7, 0x0, 0x7fffeffd) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x24, 0x1, 0x0, 0x0, 0x0, 0x7, 0x0, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x4}, 0x2418, 0x10000, 0x40000000, 0x1, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000000)='./file1\x00', 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="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"], 0x6, 0x2b0, &(0x7f0000000280)="$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") ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000000)=@usbdevfs_connect) 1.603589579s ago: executing program 2 (id=2033): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000800000006"], 0x48) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) symlinkat(&(0x7f0000001040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0xffffffffffffff9c, &(0x7f0000000640)='./file0\x00') acct(&(0x7f0000002040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00') bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'veth1_to_bond\x00'}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8946, &(0x7f0000000080)) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r0, 0xffffffffffffffff}, 0x4) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x11, 0x10, &(0x7f0000000a40)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70500000800000085000000b600000095"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x13, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000000)='kmem_cache_free\x00', r3}, 0x10) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r4, 0x84, 0x72, &(0x7f0000000240)={0x0, 0x0, 0x20}, 0xc) bind$inet6(r4, &(0x7f0000000040)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r4, &(0x7f0000000180)="1a", 0x34000, 0x0, &(0x7f0000000480)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendmmsg$sock(r4, &(0x7f0000000800)=[{{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000100)="89", 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f00000001c0)="69b4", 0x2}], 0x1}}], 0x2, 0x20000881) shutdown(r4, 0x1) 1.560322733s ago: executing program 4 (id=2036): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xb, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1a, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000001600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000082"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000500)='percpu_free_percpu\x00', r1}, 0x10) bpf$MAP_CREATE(0x2000000000000000, &(0x7f0000000140)=@base={0x6, 0x4, 0x1ff, 0x5c, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0xfffffffe}, 0x48) 1.536573555s ago: executing program 4 (id=2037): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = open(&(0x7f00009e1000)='./file0\x00', 0x60840, 0x0) fcntl$setlease(r1, 0x400, 0x0) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r2, @ANYBLOB="0000000004000000b705000008"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000440)={&(0x7f0000000080)='kmem_cache_free\x00', r3, 0x0, 0x100000000}, 0x18) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) openat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x80) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) ioctl$PTP_SYS_OFFSET(0xffffffffffffffff, 0x43403d05, &(0x7f0000000f80)={0x6}) sendto$inet6(r0, &(0x7f0000000180)="1a", 0x34000, 0x0, &(0x7f0000000480)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) 740.39285ms ago: executing program 2 (id=2054): bpf$MAP_CREATE(0x0, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000600000005"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2b}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x64}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000000) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="4800000010000d0428bd7000fcdbff2500008000", @ANYRES32=0x0, @ANYBLOB="1000000000000000280012800b00010062726964"], 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x4000000) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0x1, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0) 726.207681ms ago: executing program 0 (id=2057): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = open(&(0x7f00009e1000)='./file0\x00', 0x60840, 0x0) fcntl$setlease(r1, 0x400, 0x0) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000006c0)=ANY=[], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r2, @ANYBLOB="0000000004000000b705000008000000850000006a00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000440)={&(0x7f0000000080)='kmem_cache_free\x00', r3, 0x0, 0x100000000}, 0x18) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) openat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x80) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) ioctl$PTP_SYS_OFFSET(0xffffffffffffffff, 0x43403d05, &(0x7f0000000f80)={0x6}) sendto$inet6(r0, &(0x7f0000000180)="1a", 0x34000, 0x0, &(0x7f0000000480)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) 685.246684ms ago: executing program 2 (id=2060): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000800000006"], 0x48) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) symlinkat(&(0x7f0000001040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0xffffffffffffff9c, &(0x7f0000000640)='./file0\x00') acct(&(0x7f0000002040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00') bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8946, &(0x7f0000000080)) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r0, 0xffffffffffffffff}, 0x4) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x11, 0x10, &(0x7f0000000a40)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70500000800000085000000b600"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x13, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000000)='kmem_cache_free\x00', r3}, 0x10) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r4, 0x84, 0x72, &(0x7f0000000240)={0x0, 0x0, 0x20}, 0xc) bind$inet6(r4, &(0x7f0000000040)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r4, &(0x7f0000000180)="1a", 0x34000, 0x0, &(0x7f0000000480)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendmmsg$sock(r4, &(0x7f0000000800)=[{{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000100)="89", 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f00000001c0)="69b4", 0x2}], 0x1}}], 0x2, 0x20000881) shutdown(r4, 0x1) 655.301687ms ago: executing program 4 (id=2062): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=@framed={{}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r0}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000340)='kfree\x00', r1}, 0x18) bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x11, 0xd, &(0x7f0000000240)=ANY=[], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) creat(&(0x7f00000000c0)='./file0\x00', 0x48) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r3, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff018004000800395032303030"], 0x15) r4 = dup(r3) write$P9_RLERRORu(r4, &(0x7f0000000540)=ANY=[@ANYBLOB="8b"], 0x53) write$RDMA_USER_CM_CMD_SET_OPTION(r4, &(0x7f0000000100)={0xe, 0x18, 0xfa00, @id_afonly={0x0}}, 0x20) write$binfmt_elf64(r4, &(0x7f0000000340)=ANY=[], 0x7c8) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r2, @ANYBLOB=',wfdno=', @ANYRESHEX=r4]) open(&(0x7f0000000300)='./file0\x00', 0x145142, 0x102) 586.165712ms ago: executing program 4 (id=2064): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="0500000004000000990000000b"], 0x48) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="2000000010000104000000000800000000000000", @ANYRES32, @ANYBLOB="0000000001"], 0x20}}, 0x4000010) r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) sendto$packet(0xffffffffffffffff, &(0x7f00000000c0)="0e030e00c4e8120006001e0089", 0xd, 0x28000000, 0x0, 0x0) ptrace(0x10, r1) ptrace$setregs(0xd, r1, 0x0, &(0x7f00000003c0)="18607651149d7b10b4024fbbdc08899b8f589df2dbb5d7a8d1b36cfab675cb3976ee8100e2878c9cfa178cac130eb046eda93df39ed4b41924dc225ad4028dd63defb87d698be5c749450b350a789dcfc6b2d6a696b5026d1e52f19274566d1da0f353dd65e330ebf71c5e823f2753c5fd76724828ef31b353e71805205c3dceb44cc4c7b3664e29fb") r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_GINFO(r3, 0xc0f85403, &(0x7f0000000040)={{0x2, 0x0, 0x0, 0x3}, 0x0, 0x0, 'id1\x00', 'timer1\x00', 0x0, 0x81, 0x1, 0xffffffffffffd0c8, 0x10000000}) 549.253476ms ago: executing program 4 (id=2066): socket$kcm(0x11, 0xa, 0x300) socket(0x10, 0x3, 0x0) socket$l2tp6(0xa, 0x2, 0x73) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000400000000000"], 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_TSINFO_GET(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)={0x2c, r3, 0x6a98047402e98331, 0x70bd2a, 0x0, {}, [@HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'erspan0\x00'}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x50}, 0x4886) creat(&(0x7f00000000c0)='./file0\x00', 0x48) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r5, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff018004000800395032303030"], 0x15) r6 = dup(r5) write$P9_RLERRORu(r6, &(0x7f0000000540)=ANY=[@ANYBLOB="8b"], 0x53) write$RDMA_USER_CM_CMD_SET_OPTION(r6, &(0x7f0000000100)={0xe, 0x18, 0xfa00, @id_afonly={0x0}}, 0x20) write$binfmt_elf64(r6, &(0x7f0000000340)=ANY=[@ANYBLOB="7f454c4600073f034b0b00000000000003003e00ffffffe93501"], 0x7c8) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r4, @ANYBLOB=',wfdno=', @ANYRESHEX=r6]) open(&(0x7f0000000300)='./file0\x00', 0x145142, 0x102) 518.526468ms ago: executing program 4 (id=2068): bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="02000000040000"], 0x48) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000a00)={0xe, &(0x7f0000000740)}) r0 = syz_open_dev$usbfs(&(0x7f0000000480), 0x77, 0x41341) r1 = dup2(0xffffffffffffffff, 0xffffffffffffffff) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000004c0)={r1, 0xe0, &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000180)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, &(0x7f0000000240)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000580), 0x0, 0x9a, &(0x7f0000000540)=[{}], 0x8, 0x10, &(0x7f0000000680), 0x0, 0x0, 0xd7, 0x8, 0x8, &(0x7f0000000400)}}, 0x10) bpf$TOKEN_CREATE(0x24, &(0x7f0000000500)={0x0, r1}, 0x8) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x9, 0xb, &(0x7f0000000640)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x23, r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r3, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={0x0, r4, 0x0, 0x5f}, 0x18) r5 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x20, 0xc, &(0x7f00000006c0)=ANY=[@ANYRESHEX=r5, @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c3000000"], 0x0, 0x0, 0x0, 0x0, 0x40e00, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) creat(&(0x7f00000001c0)='./file1\x00', 0x2) acct(&(0x7f0000000080)='./file1\x00') acct(0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000007000000080000000800000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000100000000000000fe0018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b708000000000e007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000002085000000010000"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x4000, &(0x7f0000000c00)={[{@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}, {@nombcache}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x4}}, {@mblk_io_submit}, {@resuid}, {@norecovery}]}, 0x8, 0x445, &(0x7f0000001dc0)="$eJzs28tvG0UYAPBv105KX8RU5dEHECiIikfSpKX0wAEQSBxAQoJDOYYkrUrdBjVBolUFBaFyRJW4I45I/AWc4IKAExJX4IwqVSiXFk5Ga+82jmunSbDrEP9+0tYzu+POfJ4de3YnG8DAGs3+SSJ2RMRvETHSyC4vMNp4ubF4cfrvxYvTSdRqb/6V1MtdX7w4XRQt3re9yJQj0k+T2Nem3vnzF05PVauz5/L8+MKZ98bnz1945tSZqZOzJ2fPTh47duTwxHNHJ5/tSpxZXNf3fji3f8+rb195ffr4lXd++iYp4m+Jo0tG2+4tN14er9W6XF1/7WxKJ+U+NoQ1KeWn5FB9/I9EKZY6byRe+aSvjQN6qlar1e7rfPhSDdjEkuh3C4D+KH7os+vfYrtDU48N4dqLjQugLO4b+dY4Uo40LzPUcn3bTaMRcfzSP19mW7Teh9jao0oBgIH2XTb/ebrd/C+N5vtCd+drKJWIuCcidkXE0YjYHRH3RtTL3h8RD6yx/tZFklvnn+nVdQW2Stn87/l8bWv5/K+Y/UWllOd21uMfSk6cqs4eyj+TgzG0JctPrFDH9y//+nmnY83zv2zL6i/mgnk7rpa3LH/PzNTC1H+Judm1jyP2ltvFn9xcCUgiYk9EvLDOOk49+fX+Tsc6xD+8qv+4C+tMta8inmj0/6Voib+QrLw+OX5XVGcPjRdnxa1+/uXyG53qv33/91bW/9vanv9F/H9Ukub12vm113H59886XlOu9/wfTt5atu+DqYWFcxMRw8lr9Xylef9kS7nJpfJZ/AcPtB//u2Lpk9gXEdlJ/GBEPBQRD+dtfyQiHo2IAyvE/+NLj727/vh7K4t/ZsX+j5b+X0oMR+ue9onS6R++XVZpZS3xZ/1/pJ46mO9Zzfffatq1vrMZAAAA/n/SiNgRSTp2M52mY2ONv+HfHdvS6tz8wlMn5t4/O9N4RqASQ2lxp2uk6X7oRH5ZX+QnW/KH8/vGX5S21vNj03PVmX4HDwNue4fxn/mz1O/WAT3neS0YXMY/DC7jHwaX8Q+Dq8349+gZDIh2v/8f9aEdwJ3XMv5XXPYzMYDNxfU/DC7jHwaX8Q8DaX5r3P4h+c2RSCNiAzRjsyQi3RDNkOhRot/fTAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAN3xbwAAAP//ynflmQ==") r7 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x40, 0x0) r8 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./bus\x00', 0x1c5042, 0x12) write(r8, &(0x7f00000009c0)="3bf58d7d45d32cfe1da7c797b82f16713d1cb80b3fa1bda74e3977b40e7af46b4c60b70d7a79ed5d8c48f52a50185980", 0x30) sendfile(r8, r7, 0x0, 0x3ffff) sendfile(r8, r7, 0x0, 0x7fffeffd) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x24, 0x1, 0x0, 0x0, 0x0, 0x7, 0x0, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x4}, 0x2418, 0x10000, 0x40000000, 0x1, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000000)='./file1\x00', 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="6e6f6e756d7461696c3d302c636865636b3d7374726963742c756d61736b3d30303030303030303030303030303030303133363033302c756e695f786c6174653d312c756e695f786c6174653d302c666d61736b3d30303030303030303030303030303030303030303034302c757466383d302c6e6f6e756d7461696c3d302c73686f72746e616d653d77696e39352c73686f72746e616d653d6c6f7765722c73686f72746e616d653d77696e6e742c756e695f786c6174653d312c74696d655f6f66667365743d3078303030303030303030303030303166622c666c7573682c756e695f786c6174653d302c73686f72746e616d653d77696e39352c00208893fdd4787adad4209069"], 0x6, 0x2b0, &(0x7f0000000280)="$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") ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000000)=@usbdevfs_connect) 458.020343ms ago: executing program 3 (id=2072): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000800)=ANY=[@ANYBLOB="4c0100001800000400000200000000001d0104001500030000000000000000008ca5be073cff296e020000001e010600750000000071ec6d721744cd5200080000f8cfcad4c4ec6511ec028c5028564abce83afe14c93e15e556c2bad57f897fe841c15549a6a2b2a4b9f3052995cdf66a9c7922ff0300005b6c67281f1519cd7c32c2bf7563b9452575505da99ea128d37616896be8764a2c78edbad5bde7a5e405bdc893770338925f824bd24689c0d11a5568fc3aaa9ad0d7766d8ea8d3bf1006e3df494e2f373148ecb4adafdd39874e9808b118301f1e76054a64c6d243523f5de7b347f3b740e105d0ed18fae7289635301ebd8949268090b3bcd4cbed5f1cfe93cff41a9630802f96defe9e8ea850529827c5e301953a8abaafa1f121e590f74e28233f4129d4587eee87ec5d42c3ef0619022c005c8d586b2a88d81866930fca15c8a95d29e5b2ea6546c68aaf219341188c30323150869209cf"], 0x14c}}, 0x0) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x130) syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000280)='./file0\x00', 0x40000100, &(0x7f0000000b80)=ANY=[], 0x2, 0x5b2, &(0x7f0000002740)="$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") r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000004000000b703000000000000850000007200000095"], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x159d0682f53ea167, 0x2, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f00000014c0)={0x0, 0x0, &(0x7f0000002580)={&(0x7f0000003680)=ANY=[@ANYBLOB="a41000001200010022bd7000ffdbdf25ff020000000000000000000000000001000004d502002b0014000d"], 0x10a4}, 0x1, 0x0, 0x0, 0x800}, 0x200040c0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f00000004c0)='kfree\x00', r1, 0x0, 0x6}, 0x18) r3 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r3, 0x29, 0x35, &(0x7f0000000000)=0x8000, 0x4) setsockopt$inet6_IPV6_HOPOPTS(r3, 0x29, 0x36, &(0x7f0000000140)=ANY=[], 0x8) bind$inet6(r3, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x7, 0x3, &(0x7f0000000740)=@framed, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='kfree\x00', r4}, 0x18) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000008c0)=ANY=[@ANYBLOB="54000000000801010000ffffe00000000a000000050003002f0000000600024000000000240004800800024000000000080001400000fcff07000140800000010800014080000001090001"], 0x54}, 0x1, 0x0, 0x0, 0x4004}, 0x28040000) recvmmsg(r3, &(0x7f0000002280)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000010f40)=""/16, 0x10}, 0x18}], 0x1, 0x2, 0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) sendto$inet6(r3, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) 283.571847ms ago: executing program 3 (id=2074): socket$can_raw(0x1d, 0x3, 0x1) syz_emit_ethernet(0x0, 0x0, 0x0) syz_emit_ethernet(0x3a, &(0x7f00000000c0)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1d}, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x2c, 0x0, 0x2, 0x0, 0x11, 0x0, @empty, @empty}, {0x4e22, 0x7, 0x18, 0x0, @wg=@data={0x4, 0x1, 0x6}}}}}}, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x208, 0xe}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7030000ec000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$EXT4_IOC_PRECACHE_EXTENTS(0xffffffffffffffff, 0x6612) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='kfree\x00', r1}, 0x18) syz_open_procfs(0x0, &(0x7f00000003c0)='net/mcfilter6\x00') bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={0x0, 0xffffffffffffffff, 0x0, 0x8}, 0x18) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x39000, 0x0) memfd_create(&(0x7f0000000780)='L\xc0\xd3V\x13L\xb2\xfcSZ\x7fF\xb6:\x8d\xd2\xee\xac\x1e$v\xcb\xe2w-\xa7W\xd9\xb1\xd0\x83?x\xd4\xbb\x9a\x89|g\xfei\xaf\xa1\x1f\xd1\xf80\x05\x19\x00\x00\x00\x00\xf8\x1c\x8a\\\x982\xb7\xb0\x8d2\xa5\xb3\xf1\xbc\xf5m{\x93\x12\x80n\x84B\x91\xb4\x10wO)\x81\xd8\xf6A\x1bz\xca9\xb2\x10\x97,\xd3k\xa6\xea+\xe0V\xe8E\xbd\xc3:;\x1b,\x87n\xd3`\xae\xf0\x12\xc2Lz\xc0\xfcT\xddA\xe9g\x1fT\xaa\x810S6\xf2h\xa5R6\xac\x11\xe8%Hjk\x1c!\xe8\xa4v\xfd\xb4\x9br?\xfa]z\xfe\x98}\to\xfe\x99kh\xbe9\xfb\x87\xe8\xa7\xd0w\xfeY\xbb\x8d6{\xddW\x90\x04ZH\t\xd3\x0f\x19\x95l_\xe5T\xc5\x02\x12GX9\xf1l\xaa\x8f+sf\xb2\xe8\xc6*\x8e\xef\xc8\x10\xa6!0\'\xf8\xa2\xad=\x19\x12\xb9N$\x05\xdeq\xe0<7-\xbd\xde\xffBDl(rT\xdaU\xabEL\x81\xc7$\xaf\xc9\f\xc2<\xe4\x9a)\b*\x00p\xdc\xdb\x06\xe2\x02*\xb1\x8a\xc1!\x83>\xec\xea\x8djj\xcc8\xfe\xabS\x94?\x1b4\xbc\xdb\xc0\x18jq:\x8a\xf8\x84a\x801\x18\xe1\x02\x90\x95\xf3\xed;\x10\xe3=\x00\x00\x00\x00\x00\x00(\x19\xf2\xcb\xdc\xc5O\n\xa7\xff$\x0f\x04\x94R\x1dW\x99\xae\x04\xb2\xb5\x0ey(\x15\x91<\x01$\xe2\xe3e{\xba\x95\xa2\xe8f\x03\n\xdf\x11\'}\x81\xea\xc0\x80N\x1e\x039\xc8@\xa5\x1a\xbfU\xb2JO%Wh-\xa7M>G\x97\xc8\x92\x93\xd1\xc4P]\b\x8ef\xed7\xd51\x90\xd8\xb4;\xf8\xe8\xday\xd8]\xa4\xea.V\x9a\xd5b_G\x86\x87\xe1S)u;\xae\xe3Y\xd8\x93\x97\x95\x15\x11Y\x8aq\x15\xac\xf4W\xcbk\x8f\x81\xf7_B\xbeK\xfb\xcb-\xe5\xa9)\x9a\r\xbf\x98\\\xb3d\xb3Jf\x9b\x9c\x87x\x18\xa8s\x10\xcb\x14\xb8\x03\x84/~f\xcc\x05\xab\x17\xa6P\x9f\xea1\xadg@\xf6\x1d\xb5\xde\xda\xb7\x9bk\xd2\xf5o`(\"5\xe3\xa5\xb9l\x97\xba\x06\xf8\xe6\xc0%\xef`;\x82]/\xa0\v\x1c;p\x8f\xbb\xcb\xe0=EA]\x9dq\xdc\xb7\xfa\xd4N\x03|\xbdv\x7f\xaf\xb5\xd1\xac\xf6;\xf1?K\xf7\xa8m{\x04\xc6\x87\xd1\xb6\x93W~\x88\x7f\x7fw1\x99\xdfT\x7f\x9d\xcarn/\x1d\xca\x06\x861<\xaa\xf7\tj1C+W.J!E\x97U*\xd9\xdf\xbd:7U\x1e\x1ePd\x01(\xe4\xf8\x91-\x05\xa4\x83\xd4\xf1\x02q\x83\xbe9\xc2\xa4\x1c\xed\xe5\x02\x00\xb3\x8a\x0e\xe1\x99\n3\xf9\x1fa\xff\x0ee\xd7\xd1\xcb\x8d\xd1\xf8\xa1HM\x81\xbaZ\x8d1:\x04TC\x12\x10\xb4\x82[)\x06|M\x8a', 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x11, 0xc, &(0x7f0000000600)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000380)="2e00000010008188e6b62aa73772cc9f1ba1f848110000005e140602000000000e000a001000000002900000121f", 0x2e}], 0x1}, 0x40) 245.35298ms ago: executing program 3 (id=2076): syz_mount_image$ext4(&(0x7f0000000b80)='ext4\x00', &(0x7f0000000bc0)='./file0\x00', 0x200000, &(0x7f0000000040)={[{@grpquota}]}, 0x1, 0xbaf, &(0x7f0000002f00)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x40000, 0x10) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb7020000080000001823", @ANYRES32=r1, @ANYBLOB="0000000000000000b704000001000000850000007800000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kfree\x00', r2}, 0x10) fchown(r0, 0x0, 0xee01) 243.1475ms ago: executing program 1 (id=2077): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="0500000004000000990000000b"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) symlinkat(&(0x7f0000001040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0xffffffffffffff9c, &(0x7f0000000640)='./file0\x00') creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) 145.232979ms ago: executing program 1 (id=2078): socket$kcm(0x11, 0xa, 0x300) socket(0x10, 0x3, 0x0) socket$l2tp6(0xa, 0x2, 0x73) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000400000000000"], 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_TSINFO_GET(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)={0x2c, r3, 0x6a98047402e98331, 0x70bd2a, 0x0, {}, [@HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'erspan0\x00'}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x50}, 0x4886) creat(&(0x7f00000000c0)='./file0\x00', 0x48) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r5, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff018004000800395032303030"], 0x15) r6 = dup(r5) write$P9_RLERRORu(r6, &(0x7f0000000540)=ANY=[@ANYBLOB="8b"], 0x53) write$RDMA_USER_CM_CMD_SET_OPTION(r6, &(0x7f0000000100)={0xe, 0x18, 0xfa00, @id_afonly={0x0}}, 0x20) write$binfmt_elf64(r6, &(0x7f0000000340)=ANY=[@ANYBLOB="7f454c4600073f034b0b00000000000003003e00ffffffe93501"], 0x7c8) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r4, @ANYBLOB=',wfdno=', @ANYRESHEX=r6]) open(&(0x7f0000000300)='./file0\x00', 0x145142, 0x102) 140.818379ms ago: executing program 3 (id=2079): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=@framed={{}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r0}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000340)='kfree\x00', r1}, 0x18) bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x11, 0xd, &(0x7f0000000240)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) creat(&(0x7f00000000c0)='./file0\x00', 0x48) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r3, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff018004000800395032303030"], 0x15) r4 = dup(r3) write$P9_RLERRORu(r4, &(0x7f0000000540)=ANY=[@ANYBLOB="8b"], 0x53) write$RDMA_USER_CM_CMD_SET_OPTION(r4, &(0x7f0000000100)={0xe, 0x18, 0xfa00, @id_afonly={0x0}}, 0x20) write$binfmt_elf64(r4, &(0x7f0000000340)=ANY=[@ANYBLOB="7f454c4600073f034b0b00000000000003003e00ffffffe93501"], 0x7c8) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r2, @ANYBLOB=',wfdno=', @ANYRESHEX=r4]) open(&(0x7f0000000300)='./file0\x00', 0x145142, 0x102) 111.370501ms ago: executing program 1 (id=2080): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000003000010850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x275a, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x0, 0x12, r1, 0x0) r2 = socket$inet6(0xa, 0x3, 0x3c) setsockopt$inet6_IPV6_RTHDR(r2, 0x29, 0x39, &(0x7f0000000340)=ANY=[@ANYBLOB="00020201"], 0x18) connect$inet6(r2, &(0x7f0000000380)={0xa, 0x0, 0xf7ffffff, @private2={0xfc, 0x2, '\x00', 0x2}}, 0x1c) writev(r2, &(0x7f00000000c0)=[{&(0x7f0000000100)=',', 0xffdf}], 0x1) 97.276362ms ago: executing program 3 (id=2081): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000ed07449e000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000008b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='kfree\x00', r0}, 0x10) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) r2 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) getsockopt$llc_int(r2, 0x10c, 0x5, &(0x7f0000000140), &(0x7f0000000080)=0x4) close(r1) socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r1, 0x9) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=ANY=[@ANYBLOB="44000000090601020000000000000000000000000900020073797a3100"], 0x44}, 0x1, 0x0, 0x0, 0x10040047}, 0x240008c4) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, 0xffffffffffffffff, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000340), 0xffffffffffffffff) r6 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) ioctl$SNDRV_TIMER_IOCTL_SELECT(r6, 0x40345410, &(0x7f00000083c0)={{0x1, 0x0, 0x2}}) ioctl$SNDRV_TIMER_IOCTL_INFO(r6, 0x80e85411, &(0x7f00000005c0)) sendmsg$NL80211_CMD_SET_MESH_CONFIG(r4, &(0x7f0000000540)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000500)={&(0x7f0000000580)=ANY=[@ANYBLOB='x\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="08002abd7000fedbdf251d0000000c00990009000000180000000c009900070000002500000008000300a4163410ef17e173ebf22df068e7e0ffc3e152af8762820eb4f2f1e9f8bc76034f1e5365ab483e85999bcb89f93adf031e185cb99b3402956a6ac70bdd34ff2985dd81ec5d3334d91819af75387bf27bee515f91724184c0d7b36d4f4ab04657f39d781f415b484fc09a0b101f23a6bd26f2d55f05faf3f5fe702b544e8a8d0773b08f941ed6cc304a5acafe737dcd", @ANYRES32=0x0, @ANYBLOB="3400238008000b00090000000800090008000000060019000700000005001d000100000005001e0000000000060002007800000008000100280000000800010052000000"], 0x78}, 0x1, 0x0, 0x0, 0xc004080}, 0x4000000) connect$inet(r3, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000740), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r7, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000a40)={&(0x7f0000000980)=ANY=[@ANYBLOB="84000000", @ANYRES16=r8, @ANYBLOB="010000000000fbdbdf250100000008000200000000000500050000000000080003000100000048000180050002002000000006000100020000000800060003000000080003"], 0x84}}, 0x20000000) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000004c0)={0x14, r8, 0x1, 0x70bd2c, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x20000800}, 0x800) 65.130795ms ago: executing program 1 (id=2082): bpf$MAP_CREATE(0x0, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000600000005"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2b}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x64}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000000) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="4800000010000d0428bd7000fcdbff2500008000", @ANYRES32=0x0, @ANYBLOB="1000000000000000280012800b00010062726964"], 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x4000000) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0x1, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0) 44.864887ms ago: executing program 1 (id=2083): creat(0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000008000000060000000010"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000700000018", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000480)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000080)='kfree\x00', r1, 0x0, 0xfffffffffffff001}, 0x18) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYBLOB="14000000100001000000000000b890c1a000000a80000000160a01030000000000000000020000000900020073797a30000000000900010073797a30000000005400038008000240000000000800014000000000400003801400010076657468315f746f5f6272696467650014000100776732000000000000000000000000001400010076657468305f746f5f7465616d00000014000000110001"], 0xa8}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000160a0500000000000000000002000000300003802c00038004000100776732000000000000000000000000001400010076657468315f746f5f627269646765000900020073797a30000000000900010073797a30"], 0x84}, 0x1, 0x0, 0x0, 0x40000}, 0x20008000) 15.492449ms ago: executing program 3 (id=2084): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) r1 = io_uring_setup(0x177e, &(0x7f0000000140)) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) r3 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f0000000040)={0xa0000004}) poll(&(0x7f00000000c0)=[{r3, 0x1009}], 0x1, 0x8000007) close_range(r1, 0xffffffffffffffff, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000df0f"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000009007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0xbb) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000540)='inet_sock_set_state\x00', r6}, 0x10) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r7, 0x0) r8 = socket$netlink(0x10, 0x3, 0x10) r9 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) setsockopt$bt_BT_DEFER_SETUP(r9, 0x112, 0x7, &(0x7f0000000240)=0x1, 0x4) r10 = socket$kcm(0xa, 0x1, 0x0) setsockopt$sock_attach_bpf(r10, 0x6, 0xd, 0x0, 0x58) r11 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r11, @ANYBLOB="0000000000000000b704000001000000850000007800000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r12 = bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x19, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f00000002c0)='sys_enter\x00', r12}, 0x10) mincore(&(0x7f0000048000/0x3000)=nil, 0x3000, &(0x7f0000000040)=""/26) sendmsg$NFNL_MSG_COMPAT_GET(r8, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="58000000000b010800000000000000000a00000408000240fffffffe0800024000000003080002400000000408000240000000010800034000000001050001000000000003000240000000040a000100215e2c232a0000005f41ee3ae84f779c24ab0e36cda20d047ad68490dd83ab1f9e095b7eb73ee9c2a06299b0fe1ca89f7a94f73194c7b9fbeee8a6b2e20c28adc711b8c098a18424db819b78de8bb5a287d468ab317f1c2822e4eeadf4f5b1e9046a556a0cb8d196cb49e7bb6f952874cc74d8054baf77f8fdae19e321bc292b3221ba5bcd99ef54fab87f2514c65592bbc2d034d180f4c44e75cc22e08595211ca32beb7c5305dc35adee1496ce8fb7a4f525b736b8d2798a52899b117e8290cc16cd561ef712abf01ab622ccda67220987947f7dd8f6285346bf0b8b34ef8e9ef4a08364e117b3"], 0x58}}, 0x4c0c5) sendmsg$nl_route(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@ipv6_newnexthop={0x4c, 0x68, 0x309, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, 0xc}, [@NHA_GATEWAY={0x14, 0x6, @ip4=@multicast2}, @NHA_ID={0x8, 0x1, 0x2}, @NHA_GATEWAY={0x14, 0x6, @ip4=@initdev={0xac, 0x1e, 0x0, 0x0}}, @NHA_BLACKHOLE={0x4}]}, 0x4c}}, 0x0) 0s ago: executing program 1 (id=2085): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000990000000d"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x11, 0x14, &(0x7f0000000340)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000060000001811", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x42, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r1 = openat$uhid(0xffffffffffffff9c, &(0x7f0000002e40), 0x2, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000e000000040000000000000095"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000007c0)={&(0x7f0000000040)='sys_enter\x00', r3}, 0x18) acct(0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2101000}, 0xc, &(0x7f00000001c0)={&(0x7f0000001940)={{0x14}, [@NFT_MSG_DELFLOWTABLE={0x13c, 0x18, 0xa, 0x801, 0x0, 0x0, {0x0, 0x0, 0xa}, [@NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_FLOWTABLE_HOOK={0xc, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x1800}]}, @NFTA_FLOWTABLE_HOOK={0xa0, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_DEVS={0x2c, 0x3, 0x0, 0x1, [{0x14, 0x1, 'vlan1\x00'}, {0x14, 0x1, 'pim6reg0\x00'}]}, @NFTA_FLOWTABLE_HOOK_DEVS={0x68, 0x3, 0x0, 0x1, [{0x14, 0x1, 'gretap0\x00'}, {0x14, 0x1, 'ip6gretap0\x00'}, {0x14, 0x1, 'veth1_to_team\x00'}, {0x14, 0x1, 'pimreg1\x00'}, {0x14, 0x1, 'bond_slave_1\x00'}]}]}, @NFTA_FLOWTABLE_HOOK={0x50, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_DEVS={0x2c, 0x3, 0x0, 0x1, [{0x14, 0x1, 'nr0\x00'}, {0x14, 0x1, 'ip6_vti0\x00'}]}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x7}]}, @NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x1}, @NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x5}, @NFTA_FLOWTABLE_FLAGS={0x8, 0x7, 0x1, 0x0, 0x1}]}, @NFT_MSG_DELTABLE={0x2cc, 0x2, 0xa, 0x603, 0x0, 0x0, {0xb, 0x0, 0x1}, [@NFTA_TABLE_USERDATA={0xf3, 0x6, "4e095fc25d338fd70a6a661648f8392d5eb5287b9462f0d8af5883229cf20898f337f3e1949576535c6a8b6ab25748b4c312f87a833591471b38a84d67b8432c030d2c959742be8bb50f786178ce585195024bee965ff4bf81709253dc3895ddff340a351939a65ecb8e41e246ca366c4417293a9993b3e9e963abdb0d3ec9f5ffac3a322a486559284561d50e70c2b3b4d0a2783882ec8642d213e07d22f729b8784ce8e2135b71304d0c0c758db940a5be775d92fbbf7d496c60f1358bc92f418cf9d031ce58a59bc5876a15846c3007aee3584486c73d2f10669fc896bc4ad65c61198673c5410f3f0c5bbd8e7a"}, @NFTA_TABLE_USERDATA={0xd3, 0x6, "8f8f08f03d3334e607c54a658da2b2d8ebca41a8fab53eb2041006995093418b1aa4c7997bb77895d37ad85a617b129132c54c00a63a74e4040650c32d5450a74e2587beaedd63d2aa847fe7685be893e41b162fc969bdcf156a5050517168802b00dbbe905bf7949de51e2c9f60d36df886569918bf679a29cbadd83c37bc74b37f4cc587a32d3c9c10a5bf697e7f70239906f44771febf6e0846c27e00f870f1c5da6c40191f02318fe4c9ca1273578e7fc601cca0516b26bd4895ae43fce61ffbd2a9de15a41d19e98b2ad3b553"}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x3}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x4}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_TABLE_USERDATA={0xb4, 0x6, "9f9d7259073228a5c912fb1d96079d71e5a105844c70e8badd13698da5c9b18ed0f256d3b6f798de9d448e8d6c6cb4ebca85c8a59801883014bd3adcbf69eababa865c286132d0ac889c6373b013afa5f857366b42d5d95431c2fc9b46a834c3c446a7dfd9bcb4b170321c02a0b9d1cc33c810ead82f39fa75f15f229d3aedb410b83ed2af42af2a41ec711673571643b6fca7d552cdb9e77754c6922fb8617167170fef5855a9d8e74926f152cbc87d"}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x5}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x7}]}, @NFT_MSG_NEWRULE={0x48, 0x6, 0xa, 0x201, 0x0, 0x0, {0x1, 0x0, 0x6}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x1}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_RULE_ID={0x8, 0x9, 0x1, 0x0, 0x1}, @NFTA_RULE_POSITION={0xc, 0x6, 0x1, 0x0, 0x5}]}, @NFT_MSG_DELTABLE={0x180, 0x2, 0xa, 0x401, 0x0, 0x0, {0x2, 0x0, 0x1}, [@NFTA_TABLE_USERDATA={0x89, 0x6, "cba9dd7eeb7b5a8db9e3cb356e37da07a06a621bc2a684c80423177183b098a2fcc443543abf9c1ecfe7fa4e6e27ab9b56fcc1bbc5f58a92a785143199b67683e030f50a791b584fce98b5930ba4fa70478bf82281982cce6e9b19ff7e40ac3dc267e4c0966eb7d86666aec44d855d72f332908cce6aee6ea90817bc4302b3f6fe2e8a873c"}, @NFTA_TABLE_USERDATA={0x13, 0x6, "617beb2e1d6a33e4dd6ca0ccb5a443"}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x3}, @NFTA_TABLE_USERDATA={0xc2, 0x6, "f23b3e7f7b7dadd47f90ae8692df3051ae4e6aefc6c17e74c3d62f65f71361b17c3d84afd00d36945631a4a559380d76ee8db41c574223549814bf7b74a26ab4c5a9969d577d7047f5310cd189757eba86cabe3bddd02256564817991f65954ba5d66a0cb930e2585d715df4197f6e4c1732c78ba1ba5f18decf374bbd3b95acb6390461b43adbc5216b40cfb42b819138411fae508cb74c5d489e1ef3cedd4503ef4ce4e1d5fee4fde8cf21e5a8c8dfd72fb075b3dd08f45530a16bc588"}]}, @NFT_MSG_DELSET={0x2c, 0xb, 0xa, 0x5, 0x0, 0x0, {0x1, 0x0, 0x2}, [@NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0x3}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2a}, @NFTA_SET_DATA_LEN={0x8, 0x7, 0x1, 0x0, 0x3c}]}, @NFT_MSG_DELCHAIN={0xa8, 0x5, 0xa, 0x101, 0x0, 0x0, {0x5, 0x0, 0xa}, [@NFTA_CHAIN_POLICY={0x8, 0x5, 0x1, 0x0, 0xfffffffffffffffe}, @NFTA_CHAIN_HOOK={0x5c, 0x4, 0x0, 0x1, [@NFTA_HOOK_DEV={0x14, 0x3, 'wg2\x00'}, @NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x44c3a54a}, @NFTA_HOOK_DEV={0x14, 0x3, 'bond_slave_0\x00'}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x196b0546}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x2f134e5f}]}, @NFTA_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x2}, @NFTA_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x1}, @NFTA_CHAIN_USERDATA={0x1f, 0xc, "ae56b7284f85ec5dacdc0c56794e2b536b5727006fd3a49eb9e23d"}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0xa}}}, 0x6cc}, 0x1, 0x0, 0x0, 0x20000001}, 0x40010) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000040)={&(0x7f0000003000)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_DELSETELEM={0x20, 0xe, 0xa, 0x5, 0x0, 0x0, {0x5, 0x0, 0xa}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz0\x00'}]}, @NFT_MSG_NEWSETELEM={0x40, 0xc, 0xa, 0x301, 0x0, 0x0, {0x1, 0x0, 0xa}, [@NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_ELEM_LIST_SET_ID={0x8, 0x4, 0x1, 0x0, 0x1}]}, @NFT_MSG_NEWRULE={0x20, 0x6, 0xa, 0x301, 0x0, 0x0, {0x1, 0x0, 0x5}, [@NFTA_RULE_CHAIN={0x9, 0x2, 'syz1\x00'}]}, @NFT_MSG_NEWSETELEM={0x38, 0xc, 0xa, 0x301, 0x0, 0x0, {0x5, 0x0, 0x8}, [@NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz0\x00'}]}, @NFT_MSG_NEWSETELEM={0x3250, 0xc, 0xa, 0x201, 0x0, 0x0, {0x2, 0x0, 0x2}, [@NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_SET_ID={0x8}, @NFTA_SET_ELEM_LIST_SET_ID={0x8, 0x4, 0x1, 0x0, 0x3}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x3208, 0x3, 0x0, 0x1, [{0x19c, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz1\x00'}, @NFTA_SET_ELEM_KEY_END={0x168, 0xa, 0x0, 0x1, [@NFTA_DATA_VERDICT={0xc, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}]}, @NFTA_DATA_VERDICT={0x50, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}]}, @NFTA_DATA_VERDICT={0x48, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}]}, @NFTA_DATA_VERDICT={0x44, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffa}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}]}, @NFTA_DATA_VALUE={0x79, 0x1, "67cd60394c66f6ffdc6f5baab968a127da10fb2f60e1fdd4b3e69e3b9529e1682ac9c7a458a7f300ca80735b0a93859f89c137224bbb89bde34fe9b3c0d43d3452042c246ddf9b50a18091738d8e969480b89c1ca3b9fe006441c275936bb9459a5c352806f179c2ae884b6c8236931ae1a707f51d"}]}, @NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0x5}, @NFTA_SET_ELEM_EXPR={0x10, 0x7, 0x0, 0x1, @payload={{0xc}, @void}}]}, {0x14e4, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_USERDATA={0x7b, 0x6, 0x1, 0x0, "aeb98e2a93f5337488d9b7805ff17c422adcf365e7371dee1bf0bab541c14486bcb6affe9c8e631db767b10c4a4ec3f23692732d203d230804362b9fb3ae421af7cbaad5d5002890599264898125f9bbcbe4823de679ee90639c7d8cbdf7c10521bac52628e85888138428f1d024873e17e3ab810845d8"}, @NFTA_SET_ELEM_EXPRESSIONS={0x38, 0xb, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, @dup={{0x8}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0x3}, @NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0x17}]}}}, {0xc, 0x1, 0x0, 0x1, @dup_ipv4={{0x8}, @void}}]}, @NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_SET_ELEM_EXPRESSIONS={0xb4, 0xb, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, @limit={{0xa}, @val={0x18, 0x2, 0x0, 0x1, [@NFTA_LIMIT_RATE={0xc, 0x1, 0x1, 0x0, 0x3}, @NFTA_LIMIT_BURST={0x8, 0x3, 0x1, 0x0, 0x1}]}}}, {0x14, 0x1, 0x0, 0x1, @notrack={{0xc}, @val={0x4, 0x2, 0x0, 0x1, ["", "", "", "", "", "", "", ""]}}}, {0x4c, 0x1, 0x0, 0x1, @hash={{0x9}, @val={0x3c, 0x2, 0x0, 0x1, [@NFTA_HASH_SEED={0x8, 0x5, 0x1, 0x0, 0x4}, @NFTA_HASH_LEN={0x8, 0x3, 0x1, 0x0, 0x18}, @NFTA_HASH_OFFSET={0x8, 0x6, 0x1, 0x0, 0x1}, @NFTA_HASH_TYPE={0x8}, @NFTA_HASH_SEED={0x8}, @NFTA_HASH_SREG={0x8, 0x1, 0x1, 0x0, 0x16}, @NFTA_HASH_SREG={0x8, 0x1, 0x1, 0x0, 0x1a}]}}}, {0x10, 0x1, 0x0, 0x1, @match={{0xa}, @void}}, {0x18, 0x1, 0x0, 0x1, @nat={{0x8}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_NAT_FLAGS={0x8, 0x7, 0x1, 0x0, 0x48}]}}}]}, @NFTA_SET_ELEM_KEY={0xfc, 0x1, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x24, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}]}, @NFTA_DATA_VERDICT={0x14, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}]}, @NFTA_DATA_VALUE={0xbf, 0x1, "bdd8c9b8cb1abe60ee85964def8cb6f412dda3f9278fee8ccf8337fbe5481d23acad752ca51a2d9b7e730302a8128662ca0450cc5b88aab217a0dcaf1b303e302d1c5915f98355562da5a21c0486bdb4193f431fd81a8644acbea9c270759bb0a748ba7bb2e50b8d15dd10680676b67fca27ab7004e6d6d8e61adba35cc4bd82c21e55a3ee0073c2040b9b0c1233d19b6d11a694d6255007ae5814415bea193863eb144f508fe33751566d3deef9ce8766078ae359ffb09a8668b8"}]}, @NFTA_SET_ELEM_DATA={0x1190, 0x2, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x14, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CODE={0x8}]}, @NFTA_DATA_VALUE={0xfd, 0x1, "03732f20f2e061aa119c137d5637b4de02e5aea4f41f2508b1bfa7adaf16d30d2b59ef7a37d6a2fa93407d17dd4efcc41c005cb0a3a1feca7397709893c5288e79ea7c21ceb36ced5a639dc6fd8c733ed3f967a773d35fd1c2437742cd7d78f7b934e82e1d2a99e2385807e116fa66926c3f7d464df94976ab8c98975a2012f95fc3e8856ae39b21652200aff11512aeee1b3f68351f8c2c5c455cfd650c1a57070fc245ffc8b2d15248b69abb3f0c5f664f498144798d91fcc16711216585899b4a21307b80bd9ce6aa7f4fc72e8346f670a80bdf79379dcb29be076763a3fa20966d9e3eb890651df0db07512c6ee09d55ef0ed1be0f5583"}, @NFTA_DATA_VALUE={0x5b, 0x1, "264f273228680751e5f1a8644526b58af580318b61c2ba28f84b3d17bef067096ae7f13ba587ec53f9651ff695d6a1250c8475af2a3a86030a1dd12fb0444d96e675ff3f570f6303aea87138a561c1e4197fb3636ef115"}, @NFTA_DATA_VALUE={0x18, 0x1, "75bad593c650052e446900f7879fce06d7c2c526"}, @NFTA_DATA_VALUE={0x1004, 0x1, "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"}]}, @NFTA_SET_ELEM_USERDATA={0xd5, 0x6, 0x1, 0x0, "673dbbe5cde40812251507b9295bcae7f44512950b7d9037225d2b86af07d07e54341e6e215f9452a5b6ddc91ad2cf9cbe4ba1adfe02a4b8bfcecca27f06c03e7250a235eed26f48bc0b461e5c2103ada8a5129294219b0a6c1ff2a43f614d3e8a2680ff8e1d8cb9e0ba47cd26c645c6b553b7785fe14d99365112804f06354476cc8f810ca750c12425bc19ef91030e185d9ee65ec3be1d50db5e09b945af75e738a374992e077ca685e9daff892a7f6ca9fdfd04c148fa826c8cd14bc97068674d3c38940a7723ab4bba6771231ca9f6"}, @NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0x3ff}]}, {0x4f8, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_EXPRESSIONS={0xcc, 0xb, 0x0, 0x1, [{0x40, 0x1, 0x0, 0x1, @quota={{0xa}, @val={0x30, 0x2, 0x0, 0x1, [@NFTA_QUOTA_CONSUMED={0xc, 0x4, 0x1, 0x0, 0x7ff}, @NFTA_QUOTA_CONSUMED={0xc, 0x4, 0x1, 0x0, 0x6}, @NFTA_QUOTA_FLAGS={0x8, 0x2, 0x1, 0x0, 0x3}, @NFTA_QUOTA_BYTES={0xc, 0x1, 0x1, 0x0, 0x7}]}}}, {0x10, 0x1, 0x0, 0x1, @socket={{0xb}, @void}}, {0x14, 0x1, 0x0, 0x1, @byteorder={{0xe}, @void}}, {0x48, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x3c, 0x2, 0x0, 0x1, [@NFTA_CT_KEY={0x8, 0x2, 0x1, 0x0, 0xd}, @NFTA_CT_KEY={0x8, 0x2, 0x1, 0x0, 0x5}, @NFTA_CT_DREG={0x8, 0x1, 0x1, 0x0, 0x5}, @NFTA_CT_DIRECTION={0x5}, @NFTA_CT_KEY={0x8, 0x2, 0x1, 0x0, 0x16}, @NFTA_CT_DIRECTION={0x5}, @NFTA_CT_DIRECTION={0x5, 0x3, 0x1}]}}}, {0x1c, 0x1, 0x0, 0x1, @masq={{0x9}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_MASQ_REG_PROTO_MAX={0x8, 0x3, 0x1, 0x0, 0xa}]}}}]}, @NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x7}, @NFTA_SET_ELEM_EXPR={0x14, 0x7, 0x0, 0x1, @immediate={{0xe}, @void}}, @NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz2\x00'}, @NFTA_SET_ELEM_KEY_END={0x338, 0xa, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x28, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}]}, @NFTA_DATA_VALUE={0x77, 0x1, "d427ccc2da6482584a66539f9190028c84c3600d2a5834c816cade251f04dd0b611007fd638fa6ee30c4b210d397400e8840d4d6580ee410e7a2401f7a5d9e9b8097f24afe9684f2ec3a200df0ebaf598b7cac5a934db4ee79b25d50a41166acb58243616571f45aafae81f60be8214116e648"}, @NFTA_DATA_VALUE={0x6d, 0x1, "b159e4214da1e025623ee3f8f18aab0d6b71f048f69e6bff4fd564b050a0c15524926567fe04b3984697b57bb1901897dfdb1415d6a1fcf423f6c5be997e0f5929b8d8da1009fa6bc67cf6f7dbe5b730e5d1ebe13362217d67758ba3205412e4e4ff810330e4a41355"}, @NFTA_DATA_VALUE={0x33, 0x1, "7f7ba2b0a74011ee5651953e5dc0d8dc5235e000ea09f9686351e587ade5be8d1d58cd23de6778802c19d642aa1208"}, @NFTA_DATA_VERDICT={0x4}, @NFTA_DATA_VALUE={0x11, 0x1, "ede079d45632ccd712d9a88c91"}, @NFTA_DATA_VERDICT={0x48, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}]}, @NFTA_DATA_VERDICT={0x54, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}]}, @NFTA_DATA_VALUE={0x4e, 0x1, "92fdd739ac53cb1855fa354b602b26f172010c106e66ca296d0dded398e90b695ec683a92763c4910df6551910f7a647a8eeae586c2c12a031e06df267dcd2aa8401b52e24dd9ede1a37"}, @NFTA_DATA_VALUE={0xe9, 0x1, "c3c6189ee1ad9f1c5ad28181c3fecde2935ca57ea87932d116bd69cf6aba9ce46d1d0308d207cd6e3e30f4f087e44901d71593dc0f511175b9c0f6596ec10020120a93128af841e49d73cd8b787d8a240b81346d394f65650874a377aa3fa5ec280e823072fd9447ea0b3e468685ec9df4af5d36ad3bccf2d18c3657b38373ef381f30eedb30756a2373cc018e7d0a32982ee658b85b3232cb46259d6d77a5e121e18dbd90df0a8bfb3db654e827ca3ce2ba496f6c67c6f316de32f1a6df509233b33eed1ff4f3da789f1c9ffdb90f473e13e23272ac49c21af7b8eb3e0ada5460fd3283f8"}]}, @NFTA_SET_ELEM_KEY={0xc8, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x12, 0x1, "46aca1479e03e28d52c1f804d143"}, @NFTA_DATA_VALUE={0xae, 0x1, "521aa25c7798468459dfba2ef6cdc083645ea396f74089b26794e9af15f67e23e61d05d6f16bd04eb3693ba01551c2165e0d494343535f746c2a94f041e803ea2da4906f36919c498f4ec2ea2a0c73f764707fefc95b01ebe445a1698c8301618710920f78106b95f01810ec02a1eb0e3e60de0d1b413e0b1e995e942a855eb4612eab31a39c6ab891ef582f0e8bc7af9a37ad427919dd43ff276e14f3314069fa44fe247ef88b11a3c8"}]}]}, {0x154, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_EXPRESSIONS={0x68, 0xb, 0x0, 0x1, [{0x64, 0x1, 0x0, 0x1, @flow_offload={{0x11}, @val={0x4c, 0x2, 0x0, 0x1, [@NFTA_FLOW_TABLE_NAME={0x9, 0x1, 'syz2\x00'}, @NFTA_FLOW_TABLE_NAME={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOW_TABLE_NAME={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOW_TABLE_NAME={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOW_TABLE_NAME={0x9, 0x1, 'syz2\x00'}, @NFTA_FLOW_TABLE_NAME={0x9, 0x1, 'syz2\x00'}]}}}]}, @NFTA_SET_ELEM_EXPR={0xc, 0x7, 0x0, 0x1, @rt={{0x7}, @void}}, @NFTA_SET_ELEM_KEY={0x70, 0x1, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x14, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}]}, @NFTA_DATA_VERDICT={0x58, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}]}]}, @NFTA_SET_ELEM_DATA={0x64, 0x2, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x34, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}]}, @NFTA_DATA_VERDICT={0x2c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}]}]}, @NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}]}, {0x114c, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0xcc4931e74d4bb0a7}, @NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_EXPR={0x3c, 0x7, 0x0, 0x1, @tproxy={{0xb}, @val={0x2c, 0x2, 0x0, 0x1, [@NFTA_TPROXY_FAMILY={0x8, 0x1, 0x1, 0x0, 0xa}, @NFTA_TPROXY_FAMILY={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_TPROXY_REG_PORT={0x8, 0x3, 0x1, 0x0, 0x8}, @NFTA_TPROXY_FAMILY={0x8, 0x1, 0x1, 0x0, 0xa}, @NFTA_TPROXY_REG_ADDR={0x8, 0x2, 0x1, 0x0, 0xe}]}}}, @NFTA_SET_ELEM_DATA={0x10f0, 0x2, 0x0, 0x1, [@NFTA_DATA_VALUE={0x30, 0x1, "75c85e45a81c98a34e2090c083f1c383a368f890300b473225fe003d1cb417094126553fefa169436928fb44"}, @NFTA_DATA_VALUE={0x1004, 0x1, "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"}, @NFTA_DATA_VERDICT={0x60, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}]}, @NFTA_DATA_VERDICT={0x4c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CODE={0x8}]}, @NFTA_DATA_VERDICT={0xc, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}]}]}, @NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0xb2c5}]}, {0xe8, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_USERDATA={0xbe, 0x6, 0x1, 0x0, "ef83dacc948d3831a7d80201ec42f106321443e6b1823ba089e519c93e7ea12e9363fc73a910a7bce242d0ed1c242ca41a253c96e9a8251655fbbc03a2a7c56acd936eb0b59fb5c50f156ab1495f8f2f906313949f5c35ccf595a182a68a52cef17082d583e20dad14352d7429d1ea3ac77d205a90a468fe9266aa095bf4369f044bc2b54dd099161769af87ba3516a6f195b2487a150fe1e54f3e0be4c86bd6c08b9f3ba03c3d210b2ce6fa00f46875eae71cff868cdb3a0950"}, @NFTA_SET_ELEM_USERDATA={0x24, 0x6, 0x1, 0x0, "946a9a9cd9c8f1104245878e9ceffeffa16d57063fac28ff8ca9b1e95e397dc3"}]}, {0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0x5}]}, {0x4}, {0x1c8, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8}, @NFTA_SET_ELEM_USERDATA={0x4}, @NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0x401}, @NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0x8}, @NFTA_SET_ELEM_DATA={0x194, 0x2, 0x0, 0x1, [@NFTA_DATA_VERDICT={0xc, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}]}, @NFTA_DATA_VALUE={0x1a, 0x1, "540335da2935f7cf29d4bc58c294b5d3917cba423690"}, @NFTA_DATA_VALUE={0xcb, 0x1, "82dfcb2f46e21c12d33c9553e3bf0f91d907418e1d69248f320f0cae4398559d957d392bb38ba951e7964ff70ee7f6ab14146505ebd6625c2d508fe7b36b69b61ae49599c085a4f171c3327175e36370f38e9da923d588be6069321948da41a62cdda183dc1971804eb0ea91f0071f69eaf174fb7297f17e130d4b777a5850c9f4ac37568bdf01d8f0d1450be942209c66fa7e4aaf27043445519901afe2cc4ec031a820c73b66b2c0e75f53b6fb6914afb00a48539f9986d3c47dc79d3a4e2ec39d178a647680"}, @NFTA_DATA_VALUE={0x74, 0x1, "97bf405a6bc34cf2cd4965f8824976600c142d0d803f6c098693284011785a33fd122e44f73714d1e6d461534a6f3dc9cffc13896fe7e513ada83ebb3ce147ae9506644a5cac60bd7e13c4ead63d8296d5c641a51ceef211590aad744bd84a2ce4c6e80192f0e23c5b488c93b7836c1b"}, @NFTA_DATA_VERDICT={0x28, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0x7}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}]}]}]}, {0x128, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0x6}, @NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x7}, @NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0x1}, @NFTA_SET_ELEM_USERDATA={0x101, 0x6, 0x1, 0x0, "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"}]}]}, @NFTA_SET_ELEM_LIST_SET_ID={0x8, 0x4, 0x1, 0x0, 0x1}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x4}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0x3330}}, 0x804) write$UHID_CREATE(r1, &(0x7f0000002ec0)={0x0, {'syz1\x00', 'syz1\x00', 'syz0\x00', &(0x7f0000002e80)=""/53, 0x35, 0x0, 0x6, 0x7, 0xb, 0x3}}, 0x120) read(r1, &(0x7f00000076c0)=""/252, 0xfc) kernel console output (not intermixed with test programs): 8938][ T6402] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1082'. [ 91.732441][ T6399] vhci_hcd: default hub control req: 020f v0004 i0001 l0 [ 92.263225][ T3393] Process accounting resumed [ 92.271953][ T6408] loop3: detected capacity change from 0 to 512 [ 92.297102][ T29] kauditd_printk_skb: 1205 callbacks suppressed [ 92.297117][ T29] audit: type=1326 audit(1755642282.023:9677): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6409 comm="syz.0.1084" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe236e5ebe9 code=0x7ffc0000 [ 92.344813][ T6408] EXT4-fs: Ignoring removed mblk_io_submit option [ 92.347107][ T6411] can0: slcan on ttyS3. [ 92.351735][ T29] audit: type=1326 audit(1755642282.053:9678): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6410 comm="syz.1.1086" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa63b1febe9 code=0x7ffc0000 [ 92.379194][ T29] audit: type=1326 audit(1755642282.053:9679): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6410 comm="syz.1.1086" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa63b1febe9 code=0x7ffc0000 [ 92.392479][ T6408] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 92.402902][ T29] audit: type=1326 audit(1755642282.053:9680): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6410 comm="syz.1.1086" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa63b1febe9 code=0x7ffc0000 [ 92.436923][ T29] audit: type=1326 audit(1755642282.053:9681): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6410 comm="syz.1.1086" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa63b1febe9 code=0x7ffc0000 [ 92.461236][ T29] audit: type=1326 audit(1755642282.053:9682): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6409 comm="syz.0.1084" exe="/root/syz-executor" sig=0 arch=c000003e syscall=288 compat=0 ip=0x7fe236e5ebe9 code=0x7ffc0000 [ 92.485665][ T29] audit: type=1326 audit(1755642282.053:9683): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6409 comm="syz.0.1084" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe236e5ebe9 code=0x7ffc0000 [ 92.510131][ T29] audit: type=1326 audit(1755642282.053:9684): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6409 comm="syz.0.1084" exe="/root/syz-executor" sig=0 arch=c000003e syscall=119 compat=0 ip=0x7fe236e5ebe9 code=0x7ffc0000 [ 92.529174][ T6420] loop1: detected capacity change from 0 to 2048 [ 92.545392][ T29] audit: type=1326 audit(1755642282.053:9685): auid=4294967295 uid=0 gid=60928 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6409 comm="syz.0.1084" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe236e5ebe9 code=0x7ffc0000 [ 92.576325][ T29] audit: type=1326 audit(1755642282.053:9686): auid=4294967295 uid=0 gid=60928 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6409 comm="syz.0.1084" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fe236e5ebe9 code=0x7ffc0000 [ 92.601898][ T6408] EXT4-fs (loop3): 1 truncate cleaned up [ 92.632096][ T6415] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 92.668293][ T6415] EXT4-fs (loop1): Remounting filesystem read-only [ 92.675063][ T6411] can0 (unregistered): slcan off ttyS3. [ 92.713424][ T6433] loop0: detected capacity change from 0 to 512 [ 92.720514][ T6433] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 92.737199][ T6429] random: crng reseeded on system resumption [ 92.760733][ T6433] EXT4-fs (loop0): failed to initialize system zone (-117) [ 92.793114][ T6433] EXT4-fs (loop0): mount failed [ 92.956324][ T6445] netlink: 'syz.1.1097': attribute type 10 has an invalid length. [ 93.006335][ T6451] netlink: 'syz.1.1097': attribute type 10 has an invalid length. [ 93.127431][ T6456] loop0: detected capacity change from 0 to 4096 [ 93.178189][ T6460] loop1: detected capacity change from 0 to 2048 [ 93.213576][ T6467] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1104'. [ 93.239111][ T6460] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 93.274152][ T6460] EXT4-fs (loop1): Remounting filesystem read-only [ 93.291501][ T6478] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1109'. [ 93.310671][ T6481] loop3: detected capacity change from 0 to 512 [ 93.327048][ T6481] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 93.348003][ T3393] Process accounting resumed [ 93.357111][ T6487] loop4: detected capacity change from 0 to 512 [ 93.363982][ T6487] EXT4-fs: Ignoring removed mblk_io_submit option [ 93.370860][ T6487] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 93.382076][ T6481] EXT4-fs (loop3): failed to initialize system zone (-117) [ 93.386832][ T6486] loop1: detected capacity change from 0 to 1024 [ 93.389999][ T6481] EXT4-fs (loop3): mount failed [ 93.401541][ T6487] EXT4-fs (loop4): 1 truncate cleaned up [ 93.416465][ T6493] loop2: detected capacity change from 0 to 512 [ 93.419278][ T6486] usb usb1: check_ctrlrecip: process 6486 (+}[@) requesting ep 01 but needs 81 [ 93.436346][ T6486] vhci_hcd: default hub control req: 020f v0004 i0001 l0 [ 93.460288][ T6493] EXT4-fs (loop2): mounting ext3 file system using the ext4 subsystem [ 93.470235][ T6493] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a043c11c, mo2=0002] [ 93.478544][ T6493] System zones: 1-12 [ 93.483367][ T6493] EXT4-fs error (device loop2): ext4_iget_extra_inode:5104: inode #15: comm syz.2.1114: corrupted in-inode xattr: e_value size too large [ 93.575867][ T6501] vhci_hcd: default hub control req: 010b v0000 i0000 l0 [ 93.583755][ T6493] EXT4-fs error (device loop2): ext4_orphan_get:1397: comm syz.2.1114: couldn't read orphan inode 15 (err -117) [ 93.637383][ T6504] netlink: 76 bytes leftover after parsing attributes in process `+}[@'. [ 93.657135][ T6508] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1120'. [ 93.673940][ T6508] loop0: detected capacity change from 0 to 1024 [ 93.744160][ T6515] loop0: detected capacity change from 0 to 2048 [ 93.783787][ T6515] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 93.800025][ T6515] EXT4-fs (loop0): Remounting filesystem read-only [ 93.824554][ T6526] loop2: detected capacity change from 0 to 512 [ 93.875647][ T6532] loop2: detected capacity change from 0 to 1024 [ 93.887146][ T6532] usb usb1: check_ctrlrecip: process 6532 (+}[@) requesting ep 01 but needs 81 [ 93.896876][ T6532] vhci_hcd: default hub control req: 020f v0004 i0001 l0 [ 93.911177][ T6535] 9pnet_fd: Insufficient options for proto=fd [ 94.016151][ T6539] Driver unsupported XDP return value 0 on prog (id 537) dev N/A, expect packet loss! [ 94.150514][ T6544] loop2: detected capacity change from 0 to 4096 [ 94.194350][ T6542] IPv6: Can't replace route, no match found [ 94.294660][ T6515] Set syz1 is full, maxelem 65536 reached [ 94.388832][ T6549] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 94.407953][ T6549] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 94.558303][ T6564] can0: slcan on ttyS3. [ 94.586839][ T6567] netlink: 'syz.3.1139': attribute type 10 has an invalid length. [ 94.598322][ T6567] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1139'. [ 94.608599][ T6567] dummy0: entered promiscuous mode [ 94.616072][ T6564] can0 (unregistered): slcan off ttyS3. [ 94.684402][ T6567] team0: Port device dummy0 removed [ 94.696298][ T6567] bridge0: port 3(dummy0) entered blocking state [ 94.703907][ T6567] bridge0: port 3(dummy0) entered disabled state [ 94.712062][ T6567] dummy0: entered allmulticast mode [ 94.778329][ T6575] loop4: detected capacity change from 0 to 4096 [ 95.314486][ T6579] IPVS: stopping master sync thread 3768 ... [ 95.348329][ T6579] capability: warning: `syz.4.1142' uses 32-bit capabilities (legacy support in use) [ 95.359937][ T6584] 9pnet_virtio: no channels available for device 127.0.0.1 [ 95.374978][ T6579] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=6579 comm=syz.4.1142 [ 95.438554][ T6586] loop0: detected capacity change from 0 to 2048 [ 95.512499][ T6586] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 95.532509][ T6595] loop3: detected capacity change from 0 to 512 [ 95.539479][ T6586] EXT4-fs (loop0): Remounting filesystem read-only [ 95.564954][ T6595] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended [ 95.574367][ T6595] EXT4-fs (loop3): mounting ext2 file system using the ext4 subsystem [ 95.640937][ T6595] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a002e01c, mo2=0006] [ 95.676214][ T6595] System zones: 0-2, 18-18, 34-35 [ 95.712361][ T6595] EXT4-fs (loop3): warning: mounting unchecked fs, running e2fsck is recommended [ 95.737604][ T6608] can0: slcan on ttyS3. [ 95.747300][ T6595] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a002e01c, mo2=0006] [ 95.760215][ T6611] loop4: detected capacity change from 0 to 512 [ 95.773625][ T6595] EXT4-fs (loop3): re-mounted 00000000-0000-0000-0000-000000000000 r/w. [ 95.784624][ T6595] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.1146: bg 0: block 353: padding at end of block bitmap is not set [ 95.800987][ T6611] EXT4-fs error (device loop4): ext4_ext_check_inode:523: inode #3: comm syz.4.1153: pblk 24 bad header/extent: invalid extent entries - magic f30a, entries 3, max 4(4), depth 0(0) [ 95.822412][ T6608] can0 (unregistered): slcan off ttyS3. [ 95.831122][ T6609] can0: slcan on ttyS3. [ 95.850488][ T6611] EXT4-fs error (device loop4): ext4_quota_enable:7131: comm syz.4.1153: Bad quota inode: 3, type: 0 [ 95.878140][ T6611] EXT4-fs warning (device loop4): ext4_enable_quotas:7172: Failed to enable quota tracking (type=0, err=-117, ino=3). Please run e2fsck to fix. [ 95.882689][ T6606] can0 (unregistered): slcan off ttyS3. [ 95.893363][ T6611] EXT4-fs (loop4): mount failed [ 95.903873][ T6621] netlink: 'syz.1.1156': attribute type 10 has an invalid length. [ 95.941834][ T6628] FAULT_INJECTION: forcing a failure. [ 95.941834][ T6628] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 95.955078][ T6628] CPU: 0 UID: 0 PID: 6628 Comm: syz.1.1158 Not tainted syzkaller #0 PREEMPT(voluntary) [ 95.955114][ T6628] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 95.955130][ T6628] Call Trace: [ 95.955139][ T6628] [ 95.955149][ T6628] __dump_stack+0x1d/0x30 [ 95.955215][ T6628] dump_stack_lvl+0xe8/0x140 [ 95.955239][ T6628] dump_stack+0x15/0x1b [ 95.955337][ T6628] should_fail_ex+0x265/0x280 [ 95.955363][ T6628] should_fail+0xb/0x20 [ 95.955384][ T6628] should_fail_usercopy+0x1a/0x20 [ 95.955410][ T6628] _copy_from_iter+0xcf/0xe40 [ 95.955505][ T6628] ? __build_skb_around+0x1a0/0x200 [ 95.955616][ T6628] ? __alloc_skb+0x223/0x320 [ 95.955650][ T6628] netlink_sendmsg+0x471/0x6b0 [ 95.955674][ T6628] ? __pfx_netlink_sendmsg+0x10/0x10 [ 95.955712][ T6628] __sock_sendmsg+0x142/0x180 [ 95.955740][ T6628] ____sys_sendmsg+0x31e/0x4e0 [ 95.955765][ T6628] ___sys_sendmsg+0x17b/0x1d0 [ 95.955805][ T6628] __x64_sys_sendmsg+0xd4/0x160 [ 95.955831][ T6628] x64_sys_call+0x191e/0x2ff0 [ 95.955928][ T6628] do_syscall_64+0xd2/0x200 [ 95.955957][ T6628] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 95.955983][ T6628] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 95.956008][ T6628] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 95.956030][ T6628] RIP: 0033:0x7fa63b1febe9 [ 95.956110][ T6628] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 95.956129][ T6628] RSP: 002b:00007fa639c67038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 95.956148][ T6628] RAX: ffffffffffffffda RBX: 00007fa63b425fa0 RCX: 00007fa63b1febe9 [ 95.956161][ T6628] RDX: 0000000000000000 RSI: 0000200000000080 RDI: 0000000000000003 [ 95.956228][ T6628] RBP: 00007fa639c67090 R08: 0000000000000000 R09: 0000000000000000 [ 95.956254][ T6628] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 95.956266][ T6628] R13: 00007fa63b426038 R14: 00007fa63b425fa0 R15: 00007fff9bf21ad8 [ 95.956285][ T6628] [ 96.216653][ T2957] hid_parser_main: 96 callbacks suppressed [ 96.216675][ T2957] hid-generic 0000:0006:0007.0014: unknown main item tag 0x0 [ 96.230377][ T2957] hid-generic 0000:0006:0007.0014: unknown main item tag 0x0 [ 96.237938][ T2957] hid-generic 0000:0006:0007.0014: unknown main item tag 0x0 [ 96.245497][ T2957] hid-generic 0000:0006:0007.0014: unknown main item tag 0x0 [ 96.253276][ T2957] hid-generic 0000:0006:0007.0014: unknown main item tag 0x0 [ 96.261387][ T2957] hid-generic 0000:0006:0007.0014: unknown main item tag 0x0 [ 96.268847][ T2957] hid-generic 0000:0006:0007.0014: unknown main item tag 0x0 [ 96.277022][ T2957] hid-generic 0000:0006:0007.0014: unknown main item tag 0x0 [ 96.278695][ T6631] loop3: detected capacity change from 0 to 2048 [ 96.284695][ T2957] hid-generic 0000:0006:0007.0014: unknown main item tag 0x0 [ 96.298877][ T2957] hid-generic 0000:0006:0007.0014: unknown main item tag 0x0 [ 96.320053][ T6642] can0: slcan on ttyS3. [ 96.331170][ T6631] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 96.346633][ T2957] hid-generic 0000:0006:0007.0014: hidraw0: HID v0.0b Device [syz1] on syz1 [ 96.352691][ T6631] EXT4-fs (loop3): Remounting filesystem read-only [ 96.363396][ T6642] can0 (unregistered): slcan off ttyS3. [ 96.404582][ T6651] FAULT_INJECTION: forcing a failure. [ 96.404582][ T6651] name failslab, interval 1, probability 0, space 0, times 0 [ 96.417660][ T6651] CPU: 0 UID: 0 PID: 6651 Comm: syz.1.1166 Not tainted syzkaller #0 PREEMPT(voluntary) [ 96.417694][ T6651] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 96.417710][ T6651] Call Trace: [ 96.417717][ T6651] [ 96.417725][ T6651] __dump_stack+0x1d/0x30 [ 96.417747][ T6651] dump_stack_lvl+0xe8/0x140 [ 96.417826][ T6651] dump_stack+0x15/0x1b [ 96.417844][ T6651] should_fail_ex+0x265/0x280 [ 96.417881][ T6651] should_failslab+0x8c/0xb0 [ 96.417911][ T6651] kmem_cache_alloc_noprof+0x50/0x310 [ 96.417979][ T6651] ? audit_log_start+0x365/0x6c0 [ 96.418021][ T6651] audit_log_start+0x365/0x6c0 [ 96.418071][ T6651] audit_seccomp+0x48/0x100 [ 96.418101][ T6651] ? __seccomp_filter+0x68c/0x10d0 [ 96.418126][ T6651] __seccomp_filter+0x69d/0x10d0 [ 96.418147][ T6651] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 96.418180][ T6651] ? vfs_write+0x7e8/0x960 [ 96.418200][ T6651] ? __rcu_read_unlock+0x4f/0x70 [ 96.418221][ T6651] ? __fget_files+0x184/0x1c0 [ 96.418295][ T6651] __secure_computing+0x82/0x150 [ 96.418315][ T6651] syscall_trace_enter+0xcf/0x1e0 [ 96.418338][ T6651] do_syscall_64+0xac/0x200 [ 96.418364][ T6651] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 96.418389][ T6651] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 96.418490][ T6651] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 96.418517][ T6651] RIP: 0033:0x7fa63b1febe9 [ 96.418535][ T6651] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 96.418596][ T6651] RSP: 002b:00007fa639c67038 EFLAGS: 00000246 ORIG_RAX: 00000000000000fd [ 96.418619][ T6651] RAX: ffffffffffffffda RBX: 00007fa63b425fa0 RCX: 00007fa63b1febe9 [ 96.418631][ T6651] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 96.418720][ T6651] RBP: 00007fa639c67090 R08: 0000000000000000 R09: 0000000000000000 [ 96.418731][ T6651] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 96.418743][ T6651] R13: 00007fa63b426038 R14: 00007fa63b425fa0 R15: 00007fff9bf21ad8 [ 96.418763][ T6651] [ 96.703645][ T6661] netlink: 'syz.2.1170': attribute type 2 has an invalid length. [ 96.762165][ T6661] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1170'. [ 96.807682][ T6665] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1172'. [ 97.075764][ T2957] hid-generic 0000:0006:0007.0015: hidraw0: HID v0.0b Device [syz1] on syz1 [ 97.121725][ T6631] Set syz1 is full, maxelem 65536 reached [ 97.163771][ T6680] can0: slcan on ttyS3. [ 97.172222][ T6684] netlink: 'syz.2.1181': attribute type 10 has an invalid length. [ 97.192565][ T6683] dummy0: left allmulticast mode [ 97.198214][ T6683] bridge0: port 3(dummy0) entered disabled state [ 97.210322][ T6683] bridge_slave_0: left promiscuous mode [ 97.216215][ T6683] bridge0: port 1(bridge_slave_0) entered disabled state [ 97.225991][ T6683] bridge_slave_1: left allmulticast mode [ 97.231665][ T6683] bridge_slave_1: left promiscuous mode [ 97.237540][ T6683] bridge0: port 2(bridge_slave_1) entered disabled state [ 97.258077][ T6683] bond0: (slave bond_slave_0): Releasing backup interface [ 97.269019][ T6683] bond0: (slave bond_slave_1): Releasing backup interface [ 97.281185][ T6683] team0: Port device team_slave_0 removed [ 97.290182][ T6683] team0: Port device team_slave_1 removed [ 97.318233][ T6684] dummy0: left allmulticast mode [ 97.324273][ T6684] dummy0: left promiscuous mode [ 97.329701][ T6684] bridge0: port 3(dummy0) entered disabled state [ 97.339589][ T6684] team0: Port device dummy0 added [ 97.352815][ T6680] can0 (unregistered): slcan off ttyS3. [ 97.359565][ T29] kauditd_printk_skb: 549 callbacks suppressed [ 97.359583][ T29] audit: type=1326 audit(1755642287.083:10234): auid=4294967295 uid=0 gid=60928 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6679 comm="syz.1.1178" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa63b1febe9 code=0x7ffc0000 [ 97.389906][ T29] audit: type=1326 audit(1755642287.083:10235): auid=4294967295 uid=0 gid=60928 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6679 comm="syz.1.1178" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa63b1febe9 code=0x7ffc0000 [ 97.473208][ T6692] loop4: detected capacity change from 0 to 512 [ 97.481505][ T6692] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 97.516373][ T6692] EXT4-fs (loop4): failed to initialize system zone (-117) [ 97.523956][ T6692] EXT4-fs (loop4): mount failed [ 97.550018][ T6695] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 97.645755][ T6695] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 97.660032][ T6703] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1188'. [ 97.700272][ T6695] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 97.736210][ T6708] loop2: detected capacity change from 0 to 2048 [ 97.756395][ T6708] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 97.772088][ T6708] EXT4-fs (loop2): Remounting filesystem read-only [ 97.779214][ T6715] loop0: detected capacity change from 0 to 4096 [ 97.814347][ T6721] loop4: detected capacity change from 0 to 512 [ 97.821412][ T6721] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 97.837278][ T6695] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 97.858691][ T6721] EXT4-fs (loop4): failed to initialize system zone (-117) [ 97.868294][ T6721] EXT4-fs (loop4): mount failed [ 97.926310][ T6727] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1196'. [ 97.936486][ T6727] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1196'. [ 97.971593][ T6727] loop3: detected capacity change from 0 to 2048 [ 97.987328][ T6731] netlink: 'syz.0.1197': attribute type 21 has an invalid length. [ 97.995810][ T6731] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1197'. [ 98.005221][ T6731] netlink: 'syz.0.1197': attribute type 1 has an invalid length. [ 98.011697][ T29] audit: type=1400 audit(1755642287.733:10236): avc: denied { link } for pid=6725 comm="syz.3.1196" name="file1" dev="loop3" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 98.041294][ T29] audit: type=1400 audit(1755642287.753:10237): avc: denied { lock } for pid=6730 comm="syz.0.1197" path="socket:[15707]" dev="sockfs" ino=15707 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_stream_socket permissive=1 [ 98.065436][ T29] audit: type=1326 audit(1755642287.763:10238): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6725 comm="syz.3.1196" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fba1d09ebe9 code=0x7ffc0000 [ 98.089102][ T29] audit: type=1326 audit(1755642287.763:10239): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6725 comm="syz.3.1196" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fba1d09ebe9 code=0x7ffc0000 [ 98.113150][ T29] audit: type=1326 audit(1755642287.763:10240): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6725 comm="syz.3.1196" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fba1d09ebe9 code=0x7ffc0000 [ 98.136771][ T29] audit: type=1326 audit(1755642287.763:10241): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6725 comm="syz.3.1196" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fba1d09ebe9 code=0x7ffc0000 [ 98.149251][ T175] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.160876][ T29] audit: type=1326 audit(1755642287.763:10242): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6725 comm="syz.3.1196" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fba1d09ebe9 code=0x7ffc0000 [ 98.169688][ T175] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.201166][ T3797] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.209856][ T3797] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.297114][ T6741] ipvlan2: entered promiscuous mode [ 98.317765][ T6741] loop4: detected capacity change from 0 to 256 [ 98.329220][ T6743] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1202'. [ 98.339569][ T6741] vfat: Deprecated parameter 'posix' [ 98.345122][ T6741] FAT-fs: "posix" option is obsolete, not supported now [ 98.366098][ T6741] FAT-fs (loop4): codepage cp775 not found [ 98.435786][ T6750] 9pnet_fd: Insufficient options for proto=fd [ 98.464895][ T3393] hid-generic 0000:0006:0007.0016: hidraw0: HID v0.0b Device [syz1] on syz1 [ 98.465422][ T6708] Set syz1 is full, maxelem 65536 reached [ 98.524300][ T29] audit: type=1326 audit(1755642288.243:10243): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6756 comm="syz.1.1207" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa63b1febe9 code=0x7ffc0000 [ 98.556549][ T6761] loop3: detected capacity change from 0 to 512 [ 98.566422][ T6759] loop2: detected capacity change from 0 to 4096 [ 98.568652][ T6761] EXT4-fs (loop3): mounting ext3 file system using the ext4 subsystem [ 98.589440][ T6763] loop4: detected capacity change from 0 to 512 [ 98.598317][ T6761] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a043c11c, mo2=0002] [ 98.598317][ T6763] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 98.617275][ T6761] System zones: 1-12 [ 98.623844][ T6763] EXT4-fs (loop4): failed to initialize system zone (-117) [ 98.631843][ T6761] EXT4-fs error (device loop3): ext4_iget_extra_inode:5104: inode #15: comm syz.3.1208: corrupted in-inode xattr: e_value size too large [ 98.646233][ T6763] EXT4-fs (loop4): mount failed [ 98.646883][ T6761] EXT4-fs error (device loop3): ext4_orphan_get:1397: comm syz.3.1208: couldn't read orphan inode 15 (err -117) [ 98.694798][ T6774] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1213'. [ 98.729186][ T6779] netlink: 'syz.4.1214': attribute type 10 has an invalid length. [ 98.731741][ T6777] 9pnet_fd: Insufficient options for proto=fd [ 98.751437][ T6780] loop2: detected capacity change from 0 to 512 [ 98.758273][ T6780] EXT4-fs: Ignoring removed nobh option [ 98.775499][ T6780] EXT4-fs error (device loop2): ext4_do_update_inode:5653: inode #3: comm syz.2.1216: corrupted inode contents [ 98.792479][ T6780] EXT4-fs error (device loop2): ext4_dirty_inode:6538: inode #3: comm syz.2.1216: mark_inode_dirty error [ 98.806516][ T6780] EXT4-fs error (device loop2): ext4_do_update_inode:5653: inode #3: comm syz.2.1216: corrupted inode contents [ 98.820645][ T6780] EXT4-fs error (device loop2): __ext4_ext_dirty:206: inode #3: comm syz.2.1216: mark_inode_dirty error [ 98.832573][ T6780] EXT4-fs error (device loop2): ext4_acquire_dquot:6937: comm syz.2.1216: Failed to acquire dquot type 0 [ 98.846213][ T6780] EXT4-fs error (device loop2): ext4_do_update_inode:5653: inode #16: comm syz.2.1216: corrupted inode contents [ 98.862656][ T6780] EXT4-fs error (device loop2): ext4_dirty_inode:6538: inode #16: comm syz.2.1216: mark_inode_dirty error [ 98.874395][ T10] hid-generic 0000:0006:0007.0017: hidraw0: HID v0.0b Device [syz1] on syz1 [ 98.884651][ T6780] EXT4-fs error (device loop2): ext4_do_update_inode:5653: inode #16: comm syz.2.1216: corrupted inode contents [ 98.897611][ T6780] EXT4-fs error (device loop2): __ext4_ext_dirty:206: inode #16: comm syz.2.1216: mark_inode_dirty error [ 98.904552][ T6794] netlink: 'syz.1.1222': attribute type 10 has an invalid length. [ 98.917545][ T6794] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1222'. [ 98.924173][ T6780] EXT4-fs error (device loop2): ext4_do_update_inode:5653: inode #16: comm syz.2.1216: corrupted inode contents [ 98.933258][ T6794] dummy0: entered promiscuous mode [ 98.949932][ T6780] EXT4-fs error (device loop2) in ext4_orphan_del:305: Corrupt filesystem [ 98.959257][ T6780] EXT4-fs error (device loop2): ext4_do_update_inode:5653: inode #16: comm syz.2.1216: corrupted inode contents [ 98.972110][ T6780] EXT4-fs error (device loop2): ext4_truncate:4666: inode #16: comm syz.2.1216: mark_inode_dirty error [ 98.984888][ T6780] EXT4-fs error (device loop2) in ext4_process_orphan:347: Corrupt filesystem [ 98.994656][ T6780] EXT4-fs (loop2): 1 truncate cleaned up [ 99.001072][ T6780] ext4 filesystem being mounted at /271/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 99.066870][ T6794] team0: Port device dummy0 removed [ 99.079308][ T6794] bridge0: port 3(dummy0) entered blocking state [ 99.086838][ T6794] bridge0: port 3(dummy0) entered disabled state [ 99.095755][ T6794] dummy0: entered allmulticast mode [ 99.147535][ T6801] loop4: detected capacity change from 0 to 4096 [ 99.185757][ T6805] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1225'. [ 99.234140][ T6809] netlink: 'syz.2.1227': attribute type 10 has an invalid length. [ 99.242877][ T6809] dummy0: entered promiscuous mode [ 99.336092][ T6809] team0: Port device dummy0 removed [ 99.352039][ T6809] bridge0: port 3(dummy0) entered blocking state [ 99.359901][ T6809] bridge0: port 3(dummy0) entered disabled state [ 99.379492][ T6809] dummy0: entered allmulticast mode [ 99.739333][ T6815] 9pnet_fd: Insufficient options for proto=fd [ 99.880701][ T6820] loop4: detected capacity change from 0 to 1024 [ 99.910414][ T6820] usb usb1: check_ctrlrecip: process 6820 (+}[@) requesting ep 01 but needs 81 [ 99.937170][ T6820] vhci_hcd: default hub control req: 020f v0004 i0001 l0 [ 99.948485][ T3393] Process accounting resumed [ 99.969685][ T6824] loop3: detected capacity change from 0 to 512 [ 99.978524][ T6824] EXT4-fs: Ignoring removed mblk_io_submit option [ 99.986832][ T6824] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 100.000726][ T6824] EXT4-fs (loop3): 1 truncate cleaned up [ 100.160244][ T6830] netlink: 'syz.4.1234': attribute type 10 has an invalid length. [ 100.185825][ T6830] dummy0: entered promiscuous mode [ 100.454089][ T6830] team0: Port device dummy0 removed [ 100.494817][ T6830] bridge0: port 3(dummy0) entered blocking state [ 100.502671][ T6830] bridge0: port 3(dummy0) entered disabled state [ 100.523311][ T3393] Process accounting resumed [ 100.534366][ T6836] loop1: detected capacity change from 0 to 512 [ 100.555079][ T6836] EXT4-fs: Ignoring removed mblk_io_submit option [ 100.566714][ T6830] dummy0: entered allmulticast mode [ 100.578954][ T6836] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 100.707509][ T6836] EXT4-fs (loop1): 1 truncate cleaned up [ 100.891313][ T6848] netlink: 'syz.3.1240': attribute type 10 has an invalid length. [ 100.899670][ T6848] dummy0: left promiscuous mode [ 100.906684][ T6848] team0: Port device dummy0 added [ 101.030190][ T6858] netlink: 'syz.0.1246': attribute type 10 has an invalid length. [ 101.050301][ T6858] dummy0: entered promiscuous mode [ 101.131955][ T6858] team0: Port device dummy0 removed [ 101.146942][ T6858] bridge0: port 3(dummy0) entered blocking state [ 101.154694][ T6858] bridge0: port 3(dummy0) entered disabled state [ 101.167480][ T6858] dummy0: entered allmulticast mode [ 101.364232][ T6876] loop3: detected capacity change from 0 to 2048 [ 101.403983][ T6876] EXT4-fs mount: 155 callbacks suppressed [ 101.404004][ T6876] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 101.454704][ T6871] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 101.538951][ T6871] EXT4-fs (loop3): Remounting filesystem read-only [ 101.554178][ T3310] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 101.576415][ T3313] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 101.723889][ T6898] netlink: 'syz.3.1260': attribute type 21 has an invalid length. [ 101.731903][ T6898] netlink: 'syz.3.1260': attribute type 22 has an invalid length. [ 101.750660][ T6898] loop3: detected capacity change from 0 to 128 [ 101.763108][ T6898] netlink: 'syz.3.1260': attribute type 11 has an invalid length. [ 101.770996][ T6898] __nla_validate_parse: 6 callbacks suppressed [ 101.771013][ T6898] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1260'. [ 101.879862][ T6909] loop4: detected capacity change from 0 to 1024 [ 101.896872][ T6906] loop1: detected capacity change from 0 to 4096 [ 101.908941][ T6909] usb usb1: check_ctrlrecip: process 6909 (+}[@) requesting ep 01 but needs 81 [ 101.918307][ T6909] vhci_hcd: default hub control req: 020f v0004 i0001 l0 [ 101.936974][ T6906] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 101.974278][ T6918] 9pnet_virtio: no channels available for device 127.0.0.1 [ 102.014571][ T3310] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 102.078156][ T6923] loop4: detected capacity change from 0 to 512 [ 102.089191][ T6923] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 102.101421][ T6924] can0: slcan on ttyS3. [ 102.102847][ T6923] EXT4-fs (loop4): failed to initialize system zone (-117) [ 102.113334][ T6923] EXT4-fs (loop4): mount failed [ 102.160647][ T6930] loop3: detected capacity change from 0 to 512 [ 102.167828][ T6924] can0 (unregistered): slcan off ttyS3. [ 102.190100][ T6930] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 102.202987][ T6930] EXT4-fs (loop3): failed to initialize system zone (-117) [ 102.210392][ T6930] EXT4-fs (loop3): mount failed [ 102.219491][ T6938] netlink: 'syz.1.1274': attribute type 10 has an invalid length. [ 102.274404][ T6940] netlink: 'syz.2.1275': attribute type 10 has an invalid length. [ 102.293516][ T6938] dummy0: left allmulticast mode [ 102.301890][ T6938] dummy0: left promiscuous mode [ 102.307328][ T6938] bridge0: port 3(dummy0) entered disabled state [ 102.316195][ T6938] team0: Port device dummy0 added [ 102.322253][ T6940] dummy0: left allmulticast mode [ 102.329778][ T6940] dummy0: left promiscuous mode [ 102.334840][ T6940] bridge0: port 3(dummy0) entered disabled state [ 102.351031][ T6940] team0: Port device dummy0 added [ 102.489620][ T6956] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1277'. [ 102.525858][ T6954] loop1: detected capacity change from 0 to 4096 [ 102.573370][ T6954] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 102.611995][ T6963] loop3: detected capacity change from 0 to 2048 [ 102.634219][ T3310] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 102.647557][ T29] kauditd_printk_skb: 316 callbacks suppressed [ 102.647634][ T29] audit: type=1326 audit(1755642292.373:10558): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6966 comm="syz.2.1283" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa81de5ebe9 code=0x7ffc0000 [ 102.678368][ T29] audit: type=1326 audit(1755642292.373:10559): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6966 comm="syz.2.1283" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fa81de5d550 code=0x7ffc0000 [ 102.702692][ T29] audit: type=1326 audit(1755642292.373:10560): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6966 comm="syz.2.1283" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7fa81de5d69f code=0x7ffc0000 [ 102.726684][ T29] audit: type=1326 audit(1755642292.373:10561): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6966 comm="syz.2.1283" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7fa81de5d69f code=0x7ffc0000 [ 102.750261][ T29] audit: type=1326 audit(1755642292.373:10562): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6966 comm="syz.2.1283" exe="/root/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7fa81de5ebe9 code=0x7ffc0000 [ 102.794535][ T6963] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 102.832926][ T6963] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 102.857482][ T6973] can0: slcan on ttyS3. [ 102.870914][ T6963] EXT4-fs (loop3): Remounting filesystem read-only [ 102.882971][ T29] audit: type=1326 audit(1755642292.573:10563): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6972 comm="syz.1.1284" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa63b1febe9 code=0x7ffc0000 [ 102.906792][ T29] audit: type=1326 audit(1755642292.573:10564): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6972 comm="syz.1.1284" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa63b1febe9 code=0x7ffc0000 [ 102.930397][ T29] audit: type=1326 audit(1755642292.573:10565): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6972 comm="syz.1.1284" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fa63b1fd550 code=0x7ffc0000 [ 102.953918][ T29] audit: type=1326 audit(1755642292.573:10566): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6972 comm="syz.1.1284" exe="/root/syz-executor" sig=0 arch=c000003e syscall=308 compat=0 ip=0x7fa63b200417 code=0x7ffc0000 [ 102.977675][ T29] audit: type=1326 audit(1755642292.573:10567): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6972 comm="syz.1.1284" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fa63b1febe9 code=0x7ffc0000 [ 103.032530][ T6973] can0 (unregistered): slcan off ttyS3. [ 103.251663][ T6984] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 103.256429][ T6987] netlink: 'syz.1.1290': attribute type 10 has an invalid length. [ 103.272153][ T6985] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1289'. [ 103.281259][ T6985] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1289'. [ 103.416316][ T6984] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 103.440306][ T175] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 103.442402][ T6985] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1289'. [ 103.458525][ T6985] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1289'. [ 103.468254][ T175] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 103.503512][ T6984] netdevsim netdevsim2 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 103.509965][ T6963] Set syz1 is full, maxelem 65536 reached [ 103.514181][ T6984] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 103.544012][ T3313] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 103.551067][ T6995] loop1: detected capacity change from 0 to 4096 [ 103.562712][ T6995] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 103.592898][ T6991] rdma_rxe: rxe_newlink: failed to add syz_tun [ 103.602230][ T6984] netdevsim netdevsim2 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 103.612891][ T6984] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 103.625970][ T3310] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 103.653573][ T7004] can0: slcan on ttyS3. [ 103.702843][ T7004] can0 (unregistered): slcan off ttyS3. [ 103.718281][ T3811] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 103.726568][ T3811] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 103.742788][ T3811] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 103.751126][ T3811] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 103.762666][ T3811] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 103.770935][ T3811] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 103.785902][ T7009] loop4: detected capacity change from 0 to 512 [ 103.793176][ T3811] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 103.801399][ T3811] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 103.811358][ T7009] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 103.824259][ T7009] ext4 filesystem being mounted at /252/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 103.837438][ T7009] EXT4-fs error (device loop4): ext4_do_update_inode:5653: inode #4: comm syz.4.1296: corrupted inode contents [ 103.849642][ T7009] EXT4-fs error (device loop4): ext4_dirty_inode:6538: inode #4: comm syz.4.1296: mark_inode_dirty error [ 103.869403][ T7009] EXT4-fs error (device loop4): ext4_do_update_inode:5653: inode #4: comm syz.4.1296: corrupted inode contents [ 103.892078][ T7009] EXT4-fs error (device loop4): __ext4_ext_dirty:206: inode #4: comm syz.4.1296: mark_inode_dirty error [ 103.909973][ T7009] EXT4-fs error (device loop4): ext4_acquire_dquot:6937: comm syz.4.1296: Failed to acquire dquot type 1 [ 103.922302][ T7018] EXT4-fs error (device loop4): ext4_do_update_inode:5653: inode #4: comm syz.4.1296: corrupted inode contents [ 103.934306][ T7018] EXT4-fs error (device loop4): ext4_dirty_inode:6538: inode #4: comm syz.4.1296: mark_inode_dirty error [ 103.948696][ T2957] hid_parser_main: 202 callbacks suppressed [ 103.948714][ T2957] hid-generic 0000:0006:0007.0018: unknown main item tag 0x0 [ 103.949482][ T7018] EXT4-fs error (device loop4): ext4_do_update_inode:5653: inode #4: comm syz.4.1296: corrupted inode contents [ 103.954840][ T2957] hid-generic 0000:0006:0007.0018: unknown main item tag 0x0 [ 103.962325][ T7018] EXT4-fs error (device loop4): __ext4_ext_dirty:206: inode #4: comm syz.4.1296: mark_inode_dirty error [ 103.974306][ T2957] hid-generic 0000:0006:0007.0018: unknown main item tag 0x0 [ 103.982208][ T7018] EXT4-fs error (device loop4): ext4_acquire_dquot:6937: comm syz.4.1296: Failed to acquire dquot type 1 [ 103.993272][ T2957] hid-generic 0000:0006:0007.0018: unknown main item tag 0x0 [ 104.019527][ T2957] hid-generic 0000:0006:0007.0018: unknown main item tag 0x0 [ 104.027085][ T2957] hid-generic 0000:0006:0007.0018: unknown main item tag 0x0 [ 104.034633][ T2957] hid-generic 0000:0006:0007.0018: unknown main item tag 0x0 [ 104.042219][ T2957] hid-generic 0000:0006:0007.0018: unknown main item tag 0x0 [ 104.049858][ T2957] hid-generic 0000:0006:0007.0018: unknown main item tag 0x0 [ 104.057404][ T2957] hid-generic 0000:0006:0007.0018: unknown main item tag 0x0 [ 104.085054][ T2957] hid-generic 0000:0006:0007.0018: hidraw0: HID v0.0b Device [syz1] on syz1 [ 104.191748][ T7033] loop1: detected capacity change from 0 to 2048 [ 104.212629][ T7033] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 104.226425][ T3315] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 104.286540][ T7033] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 104.303902][ T7043] 9pnet_virtio: no channels available for device 127.0.0.1 [ 104.330525][ T7033] EXT4-fs (loop1): Remounting filesystem read-only [ 104.370929][ T7047] can0: slcan on ttyS3. [ 104.397656][ T3310] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 104.422584][ T7047] can0 (unregistered): slcan off ttyS3. [ 104.540272][ T2957] Process accounting resumed [ 104.556780][ T7061] loop4: detected capacity change from 0 to 512 [ 104.573107][ T7061] EXT4-fs: Ignoring removed mblk_io_submit option [ 104.581474][ T7061] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 104.593743][ T7061] EXT4-fs (loop4): 1 truncate cleaned up [ 104.600261][ T7061] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 104.640025][ T7068] loop3: detected capacity change from 0 to 128 [ 104.700351][ T7072] loop0: detected capacity change from 0 to 2048 [ 104.710631][ T7068] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=16, mo=a84ec018, mo2=0002] [ 104.726681][ T7068] System zones: 1-3, 19-19, 35-36 [ 104.752708][ T7068] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 104.783815][ T7068] ext4 filesystem being mounted at /243/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 104.818726][ T7072] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 104.832385][ T7072] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 104.853009][ T7081] rdma_rxe: rxe_newlink: failed to add syz_tun [ 104.863378][ T7072] EXT4-fs (loop0): Remounting filesystem read-only [ 105.015987][ T3305] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 105.027844][ T7068] netlink: 44 bytes leftover after parsing attributes in process `syz.3.1319'. [ 105.038834][ T7068] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1319'. [ 105.047827][ T7068] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1319'. [ 105.086857][ T7084] loop0: detected capacity change from 0 to 1024 [ 105.105767][ T7084] usb usb1: check_ctrlrecip: process 7084 (+}[@) requesting ep 01 but needs 81 [ 105.118347][ T3313] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 105.133388][ T7084] vhci_hcd: default hub control req: 020f v0004 i0001 l0 [ 105.151836][ T7086] can0: slcan on ttyS3. [ 105.212715][ T7086] can0 (unregistered): slcan off ttyS3. [ 105.274224][ T7097] netlink: 'syz.0.1328': attribute type 10 has an invalid length. [ 105.282864][ T7097] dummy0: left allmulticast mode [ 105.287946][ T7097] dummy0: left promiscuous mode [ 105.293095][ T7097] bridge0: port 3(dummy0) entered disabled state [ 105.303778][ T7097] team0: Port device dummy0 added [ 105.328951][ T7095] loop3: detected capacity change from 0 to 4096 [ 105.341990][ T7095] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 105.407983][ T3315] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 105.424606][ T3313] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 105.448590][ T7105] loop0: detected capacity change from 0 to 2048 [ 105.493813][ T7105] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 105.511023][ T7105] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 105.621315][ T7105] EXT4-fs (loop0): Remounting filesystem read-only [ 105.637317][ T7141] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1339'. [ 105.711853][ T3305] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 105.756728][ T3393] Process accounting resumed [ 105.771927][ T7148] loop3: detected capacity change from 0 to 512 [ 105.785387][ T7150] netlink: 'syz.0.1343': attribute type 10 has an invalid length. [ 105.802683][ T7148] EXT4-fs: Ignoring removed mblk_io_submit option [ 105.810556][ T7148] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 105.837731][ T7148] EXT4-fs (loop3): 1 truncate cleaned up [ 105.850203][ T7148] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 105.920601][ T7159] can0: slcan on ttyS3. [ 105.962502][ T7159] can0 (unregistered): slcan off ttyS3. [ 106.299400][ T7183] loop1: detected capacity change from 0 to 2048 [ 106.425028][ T7183] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 106.474009][ T7177] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 106.491537][ T7177] EXT4-fs (loop1): Remounting filesystem read-only [ 106.543224][ T3310] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 106.601641][ T3313] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 106.658994][ T7214] 9pnet_virtio: no channels available for device 127.0.0.1 [ 106.680021][ T7213] loop3: detected capacity change from 0 to 4096 [ 106.707700][ T7213] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 106.724824][ T3393] Process accounting resumed [ 106.733246][ T7222] loop4: detected capacity change from 0 to 512 [ 106.740339][ T7222] EXT4-fs: Ignoring removed mblk_io_submit option [ 106.748471][ T7222] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 106.770550][ T7222] EXT4-fs (loop4): 1 truncate cleaned up [ 106.780100][ T3313] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 106.793157][ T7222] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 107.107552][ T10] Process accounting resumed [ 107.127878][ T7240] loop3: detected capacity change from 0 to 512 [ 107.138654][ T7224] Set syz1 is full, maxelem 65536 reached [ 107.145050][ T7240] EXT4-fs: Ignoring removed mblk_io_submit option [ 107.160877][ T7240] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 107.180656][ T7240] EXT4-fs (loop3): 1 truncate cleaned up [ 107.241717][ T7240] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 107.352910][ T7254] 9pnet_virtio: no channels available for device 127.0.0.1 [ 107.620046][ T3315] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 107.670254][ T3393] hid-generic 0000:0006:0007.0019: hidraw0: HID v0.0b Device [syz1] on syz1 [ 107.704201][ T3393] IPVS: starting estimator thread 0... [ 107.710663][ T29] kauditd_printk_skb: 680 callbacks suppressed [ 107.710680][ T29] audit: type=1400 audit(1755642297.433:11243): avc: denied { listen } for pid=7258 comm="syz.2.1386" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 107.738620][ T7259] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 107.757337][ T7259] bond1: entered promiscuous mode [ 107.762654][ T7259] bond1: entered allmulticast mode [ 107.768344][ T7259] 8021q: adding VLAN 0 to HW filter on device bond1 [ 107.780168][ T7259] bond1 (unregistering): Released all slaves [ 107.792445][ T7267] IPVS: using max 1872 ests per chain, 93600 per kthread [ 107.863403][ T29] audit: type=1326 audit(1755642297.583:11244): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7275 comm="syz.0.1390" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe236e5ebe9 code=0x7ffc0000 [ 107.887152][ T29] audit: type=1326 audit(1755642297.583:11245): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7275 comm="syz.0.1390" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe236e5ebe9 code=0x7ffc0000 [ 107.911209][ T29] audit: type=1326 audit(1755642297.583:11246): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7275 comm="syz.0.1390" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fe236e5ebe9 code=0x7ffc0000 [ 107.934908][ T29] audit: type=1326 audit(1755642297.583:11247): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7275 comm="syz.0.1390" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe236e5ebe9 code=0x7ffc0000 [ 107.958590][ T29] audit: type=1326 audit(1755642297.583:11248): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7275 comm="syz.0.1390" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe236e5ebe9 code=0x7ffc0000 [ 107.983056][ T29] audit: type=1326 audit(1755642297.583:11249): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7275 comm="syz.0.1390" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fe236e5ebe9 code=0x7ffc0000 [ 108.007088][ T29] audit: type=1326 audit(1755642297.583:11250): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7275 comm="syz.0.1390" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe236e5ebe9 code=0x7ffc0000 [ 108.031104][ T29] audit: type=1326 audit(1755642297.583:11251): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7275 comm="syz.0.1390" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe236e5ebe9 code=0x7ffc0000 [ 108.054909][ T29] audit: type=1326 audit(1755642297.583:11252): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7275 comm="syz.0.1390" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fe236e5ebe9 code=0x7ffc0000 [ 108.108682][ T3313] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 108.121786][ T7283] 9pnet_virtio: no channels available for device 127.0.0.1 [ 108.155041][ T3393] Process accounting resumed [ 108.196780][ T7292] loop4: detected capacity change from 0 to 512 [ 108.261991][ T7292] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 108.275351][ T7292] EXT4-fs (loop4): failed to initialize system zone (-117) [ 108.282871][ T7292] EXT4-fs (loop4): mount failed [ 108.325586][ T7307] FAULT_INJECTION: forcing a failure. [ 108.325586][ T7307] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 108.338885][ T7307] CPU: 0 UID: 0 PID: 7307 Comm: syz.3.1401 Not tainted syzkaller #0 PREEMPT(voluntary) [ 108.338920][ T7307] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 108.338962][ T7307] Call Trace: [ 108.338969][ T7307] [ 108.338979][ T7307] __dump_stack+0x1d/0x30 [ 108.339011][ T7307] dump_stack_lvl+0xe8/0x140 [ 108.339091][ T7307] dump_stack+0x15/0x1b [ 108.339111][ T7307] should_fail_ex+0x265/0x280 [ 108.339135][ T7307] should_fail+0xb/0x20 [ 108.339151][ T7307] should_fail_usercopy+0x1a/0x20 [ 108.339173][ T7307] _copy_from_user+0x1c/0xb0 [ 108.339238][ T7307] kstrtouint_from_user+0x69/0xf0 [ 108.339266][ T7307] ? 0xffffffff81000000 [ 108.339279][ T7307] ? selinux_file_permission+0x1e4/0x320 [ 108.339301][ T7307] proc_fail_nth_write+0x50/0x160 [ 108.339379][ T7307] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 108.339411][ T7307] vfs_write+0x269/0x960 [ 108.339432][ T7307] ? __rcu_read_unlock+0x4f/0x70 [ 108.339462][ T7307] ? __fget_files+0x184/0x1c0 [ 108.339491][ T7307] ksys_write+0xda/0x1a0 [ 108.339600][ T7307] __x64_sys_write+0x40/0x50 [ 108.339623][ T7307] x64_sys_call+0x27fe/0x2ff0 [ 108.339647][ T7307] do_syscall_64+0xd2/0x200 [ 108.339681][ T7307] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 108.339765][ T7307] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 108.339855][ T7307] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 108.339879][ T7307] RIP: 0033:0x7fba1d09d69f [ 108.339896][ T7307] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48 [ 108.339925][ T7307] RSP: 002b:00007fba1bb07030 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 108.339947][ T7307] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007fba1d09d69f [ 108.339962][ T7307] RDX: 0000000000000001 RSI: 00007fba1bb070a0 RDI: 0000000000000006 [ 108.339975][ T7307] RBP: 00007fba1bb07090 R08: 0000000000000000 R09: 0000000000000000 [ 108.340054][ T7307] R10: 0000000000001300 R11: 0000000000000293 R12: 0000000000000001 [ 108.340071][ T7307] R13: 00007fba1d2c6038 R14: 00007fba1d2c5fa0 R15: 00007ffd406f6618 [ 108.340096][ T7307] [ 108.609573][ T7315] netlink: 'syz.3.1404': attribute type 10 has an invalid length. [ 108.682224][ T3413] Process accounting resumed [ 108.705148][ T7320] loop3: detected capacity change from 0 to 512 [ 108.715281][ T7320] EXT4-fs: Ignoring removed mblk_io_submit option [ 108.722485][ T7320] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 108.747804][ T7320] EXT4-fs (loop3): 1 truncate cleaned up [ 108.753994][ T7320] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 108.991456][ T7335] netlink: 'syz.1.1410': attribute type 10 has an invalid length. [ 109.039253][ T7339] loop1: detected capacity change from 0 to 736 [ 109.057968][ T7339] __nla_validate_parse: 1 callbacks suppressed [ 109.057985][ T7339] netlink: 4200 bytes leftover after parsing attributes in process `syz.1.1412'. [ 109.133181][ T7351] smc: net device bond0 applied user defined pnetid SYZ0 [ 109.141087][ T7351] smc: ib device syz1 ibport 1 applied user defined pnetid SYZ0 [ 109.180846][ T7351] FAULT_INJECTION: forcing a failure. [ 109.180846][ T7351] name failslab, interval 1, probability 0, space 0, times 0 [ 109.194016][ T7351] CPU: 0 UID: 0 PID: 7351 Comm: syz.0.1416 Not tainted syzkaller #0 PREEMPT(voluntary) [ 109.194046][ T7351] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 109.194060][ T7351] Call Trace: [ 109.194067][ T7351] [ 109.194076][ T7351] __dump_stack+0x1d/0x30 [ 109.194107][ T7351] dump_stack_lvl+0xe8/0x140 [ 109.194132][ T7351] dump_stack+0x15/0x1b [ 109.194156][ T7351] should_fail_ex+0x265/0x280 [ 109.194182][ T7351] should_failslab+0x8c/0xb0 [ 109.194263][ T7351] kmem_cache_alloc_node_noprof+0x57/0x320 [ 109.194317][ T7351] ? __alloc_skb+0x101/0x320 [ 109.194353][ T7351] __alloc_skb+0x101/0x320 [ 109.194396][ T7351] ? audit_log_start+0x365/0x6c0 [ 109.194477][ T7351] audit_log_start+0x380/0x6c0 [ 109.194512][ T7351] audit_seccomp+0x48/0x100 [ 109.194538][ T7351] ? __seccomp_filter+0x68c/0x10d0 [ 109.194567][ T7351] __seccomp_filter+0x69d/0x10d0 [ 109.194672][ T7351] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 109.194704][ T7351] ? vfs_write+0x7e8/0x960 [ 109.194731][ T7351] ? __rcu_read_unlock+0x4f/0x70 [ 109.194767][ T7351] ? __fget_files+0x184/0x1c0 [ 109.194804][ T7351] __secure_computing+0x82/0x150 [ 109.194826][ T7351] syscall_trace_enter+0xcf/0x1e0 [ 109.194850][ T7351] do_syscall_64+0xac/0x200 [ 109.194932][ T7351] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 109.194962][ T7351] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 109.195006][ T7351] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 109.195034][ T7351] RIP: 0033:0x7fe236e5ebe9 [ 109.195054][ T7351] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 109.195098][ T7351] RSP: 002b:00007fe2358bf038 EFLAGS: 00000246 ORIG_RAX: 00000000000000f6 [ 109.195122][ T7351] RAX: ffffffffffffffda RBX: 00007fe237085fa0 RCX: 00007fe236e5ebe9 [ 109.195138][ T7351] RDX: 00002000000002c0 RSI: 0000000000000000 RDI: 0000000000003e00 [ 109.195154][ T7351] RBP: 00007fe2358bf090 R08: 0000000000000000 R09: 0000000000000000 [ 109.195169][ T7351] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 109.195185][ T7351] R13: 00007fe237086038 R14: 00007fe237085fa0 R15: 00007ffde4667158 [ 109.195259][ T7351] [ 109.479724][ T7356] netlink: 'syz.2.1418': attribute type 10 has an invalid length. [ 109.489873][ T7356] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1418'. [ 109.500956][ T7356] dummy0: entered promiscuous mode [ 109.520723][ T1035] Process accounting resumed [ 109.529137][ T7364] loop1: detected capacity change from 0 to 512 [ 109.537941][ T7364] EXT4-fs: Ignoring removed mblk_io_submit option [ 109.545129][ T7364] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 109.571013][ T3313] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 109.592834][ T7364] EXT4-fs (loop1): 1 truncate cleaned up [ 109.599639][ T7364] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 109.731985][ T7372] rdma_rxe: rxe_newlink: failed to add syz_tun [ 109.841555][ T7356] team0: Port device dummy0 removed [ 109.866936][ T7374] loop3: detected capacity change from 0 to 1024 [ 109.879101][ T7374] usb usb1: check_ctrlrecip: process 7374 (syz.3.1423) requesting ep 01 but needs 81 [ 109.900322][ T7374] vhci_hcd: default hub control req: 020f v0004 i0001 l0 [ 109.918811][ T7356] bridge0: port 3(dummy0) entered blocking state [ 109.926053][ T7356] bridge0: port 3(dummy0) entered disabled state [ 109.983174][ T7356] dummy0: entered allmulticast mode [ 110.336532][ T7383] netlink: 'syz.4.1426': attribute type 10 has an invalid length. [ 110.345832][ T7383] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1426'. [ 110.367204][ T7383] bridge0: port 3(dummy0) entered blocking state [ 110.374675][ T7383] bridge0: port 3(dummy0) entered forwarding state [ 110.424706][ T3310] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 111.037336][ T7400] netlink: 'syz.0.1431': attribute type 10 has an invalid length. [ 111.197586][ T7405] loop0: detected capacity change from 0 to 1024 [ 111.216149][ T7406] netlink: 'syz.3.1433': attribute type 1 has an invalid length. [ 111.273244][ T7405] usb usb1: check_ctrlrecip: process 7405 (+}[@) requesting ep 01 but needs 81 [ 111.304015][ T7406] 8021q: adding VLAN 0 to HW filter on device bond1 [ 111.312875][ T7405] vhci_hcd: default hub control req: 020f v0004 i0001 l0 [ 111.336574][ T7406] team0: Port device dummy0 removed [ 111.361424][ T7406] bond1: (slave dummy0): making interface the new active one [ 111.370450][ T7406] bond1: (slave dummy0): Enslaving as an active interface with an up link [ 111.418548][ T3413] hid_parser_main: 96 callbacks suppressed [ 111.418571][ T3413] hid-generic 0003:0004:0000.001A: unknown main item tag 0x0 [ 111.432037][ T3413] hid-generic 0003:0004:0000.001A: unknown main item tag 0x0 [ 111.439499][ T3413] hid-generic 0003:0004:0000.001A: unknown main item tag 0x0 [ 111.453834][ T7406] netlink: 'syz.3.1433': attribute type 10 has an invalid length. [ 111.461796][ T7406] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1433'. [ 111.488022][ T3413] hid-generic 0003:0004:0000.001A: hidraw0: USB HID v0.00 Device [syz0] on syz1 [ 111.493294][ T7406] dummy0: entered promiscuous mode [ 111.514447][ T7406] bond1: (slave dummy0): Releasing active interface [ 111.522750][ T10] hid-generic 0000:0000:0000.001B: unknown main item tag 0x1 [ 111.530268][ T10] hid-generic 0000:0000:0000.001B: unknown main item tag 0x0 [ 111.537899][ T10] hid-generic 0000:0000:0000.001B: unknown main item tag 0x0 [ 111.545494][ T10] hid-generic 0000:0000:0000.001B: unknown main item tag 0x0 [ 111.553010][ T10] hid-generic 0000:0000:0000.001B: unknown main item tag 0x0 [ 111.560421][ T10] hid-generic 0000:0000:0000.001B: unknown main item tag 0x0 [ 111.568118][ T10] hid-generic 0000:0000:0000.001B: unknown main item tag 0x4 [ 111.617633][ T10] hid-generic 0000:0000:0000.001B: hidraw0: HID v0.00 Device [syz0] on syz1 [ 111.663273][ T3413] hid-generic 0000:0006:0007.001C: hidraw0: HID v0.0b Device [syz1] on syz1 [ 111.701817][ T10] Process accounting resumed [ 111.719342][ T7415] loop3: detected capacity change from 0 to 512 [ 111.743191][ T7415] EXT4-fs: Ignoring removed mblk_io_submit option [ 111.752533][ T7415] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 111.766480][ T7415] EXT4-fs (loop3): 1 truncate cleaned up [ 111.772970][ T7415] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 112.277320][ T7437] loop0: detected capacity change from 0 to 512 [ 112.284812][ T7437] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 112.297643][ T7437] EXT4-fs (loop0): failed to initialize system zone (-117) [ 112.305098][ T7437] EXT4-fs (loop0): mount failed [ 112.481864][ T7444] netlink: 14 bytes leftover after parsing attributes in process `syz.0.1447'. [ 112.511485][ T7446] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1448'. [ 112.520566][ T7446] netlink: 'syz.0.1448': attribute type 30 has an invalid length. [ 112.529881][ T3313] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 112.564474][ T7450] loop0: detected capacity change from 0 to 1024 [ 112.574331][ T7450] usb usb1: check_ctrlrecip: process 7450 (+}[@) requesting ep 01 but needs 81 [ 112.583752][ T7450] vhci_hcd: default hub control req: 020f v0004 i0001 l0 [ 112.659222][ T10] Process accounting resumed [ 112.692031][ T7457] loop0: detected capacity change from 0 to 512 [ 112.693872][ T7460] can0: slcan on ttyS3. [ 112.700487][ T7457] EXT4-fs: Ignoring removed mblk_io_submit option [ 112.710154][ T7457] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 112.721704][ T7457] EXT4-fs (loop0): 1 truncate cleaned up [ 112.727843][ T7457] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 112.752485][ T7460] can0 (unregistered): slcan off ttyS3. [ 112.794740][ T29] kauditd_printk_skb: 150 callbacks suppressed [ 112.794758][ T29] audit: type=1326 audit(1755642302.523:11401): auid=4294967295 uid=0 gid=60928 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7459 comm="syz.4.1454" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff97b2eebe9 code=0x7ffc0000 [ 112.825657][ T29] audit: type=1326 audit(1755642302.553:11402): auid=4294967295 uid=0 gid=60928 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7459 comm="syz.4.1454" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff97b2eebe9 code=0x7ffc0000 [ 112.853919][ T29] audit: type=1326 audit(1755642302.583:11403): auid=4294967295 uid=0 gid=60928 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7459 comm="syz.4.1454" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff97b2eebe9 code=0x7ffc0000 [ 112.878199][ T29] audit: type=1326 audit(1755642302.583:11404): auid=4294967295 uid=0 gid=60928 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7459 comm="syz.4.1454" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff97b2eebe9 code=0x7ffc0000 [ 112.921727][ T29] audit: type=1326 audit(1755642302.633:11405): auid=4294967295 uid=0 gid=60928 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7459 comm="syz.4.1454" exe="/root/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7ff97b2eebe9 code=0x7ffc0000 [ 112.945813][ T29] audit: type=1326 audit(1755642302.633:11406): auid=4294967295 uid=0 gid=60928 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7459 comm="syz.4.1454" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff97b2eebe9 code=0x7ffc0000 [ 112.969759][ T29] audit: type=1326 audit(1755642302.633:11407): auid=4294967295 uid=0 gid=60928 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7459 comm="syz.4.1454" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff97b2eebe9 code=0x7ffc0000 [ 112.993777][ T29] audit: type=1326 audit(1755642302.633:11408): auid=4294967295 uid=0 gid=60928 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7459 comm="syz.4.1454" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff97b2eebe9 code=0x7ffc0000 [ 113.017985][ T29] audit: type=1326 audit(1755642302.633:11409): auid=4294967295 uid=0 gid=60928 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7459 comm="syz.4.1454" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff97b2eebe9 code=0x7ffc0000 [ 113.042329][ T29] audit: type=1326 audit(1755642302.633:11410): auid=4294967295 uid=0 gid=60928 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7459 comm="syz.4.1454" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff97b2eebe9 code=0x7ffc0000 [ 113.113494][ T3393] Process accounting resumed [ 113.388383][ T3393] Process accounting resumed [ 113.396404][ T7475] loop4: detected capacity change from 0 to 512 [ 113.412756][ T7475] EXT4-fs: Ignoring removed mblk_io_submit option [ 113.429976][ T7475] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 113.461968][ T7475] EXT4-fs (loop4): 1 truncate cleaned up [ 113.468269][ T7475] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 113.548038][ T3305] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 113.595385][ T1035] Process accounting resumed [ 113.612771][ T7480] loop1: detected capacity change from 0 to 512 [ 113.627172][ T7480] EXT4-fs: Ignoring removed mblk_io_submit option [ 113.640609][ T7480] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 113.659807][ T7482] loop0: detected capacity change from 0 to 1024 [ 113.674430][ T7482] usb usb1: check_ctrlrecip: process 7482 (+}[@) requesting ep 01 but needs 81 [ 113.683842][ T7482] vhci_hcd: default hub control req: 020f v0004 i0001 l0 [ 113.711559][ T7480] EXT4-fs (loop1): 1 truncate cleaned up [ 113.727916][ T7480] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 113.776026][ T7486] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1462'. [ 113.785193][ T7486] netlink: 'syz.0.1462': attribute type 30 has an invalid length. [ 114.010847][ T7492] loop3: detected capacity change from 0 to 1024 [ 114.028604][ T7495] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1474'. [ 114.051363][ T7492] usb usb1: check_ctrlrecip: process 7492 (+}[@) requesting ep 01 but needs 81 [ 114.060435][ T7492] usb usb1: usbfs: process 7492 (+}[@) did not claim interface 0 before use [ 114.083552][ T7492] vhci_hcd: default hub control req: 020f v0004 i0001 l0 [ 114.131510][ T7498] loop0: detected capacity change from 0 to 4096 [ 114.163935][ T7498] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 114.270064][ T3305] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 114.362607][ T7511] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1469'. [ 114.397641][ T3315] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 114.448448][ T3310] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 114.475146][ T7514] loop4: detected capacity change from 0 to 2048 [ 114.484400][ T7520] 9pnet_fd: Insufficient options for proto=fd [ 114.523920][ T7514] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 114.537687][ T7514] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 114.547662][ T7507] syz1: rxe_newlink: already configured on syz_tun [ 114.562521][ T7514] EXT4-fs (loop4): Remounting filesystem read-only [ 114.665601][ T7533] loop0: detected capacity change from 0 to 736 [ 114.684680][ T7533] netlink: 4200 bytes leftover after parsing attributes in process `syz.0.1478'. [ 114.840404][ T7536] netlink: 'syz.0.1479': attribute type 10 has an invalid length. [ 114.848612][ T7536] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1479'. [ 114.893815][ T7536] dummy0: entered promiscuous mode [ 115.049840][ T7540] netlink: 'syz.2.1481': attribute type 10 has an invalid length. [ 115.066291][ T7536] team0: Port device dummy0 removed [ 115.089760][ T7536] bridge0: port 3(dummy0) entered blocking state [ 115.097066][ T7536] bridge0: port 3(dummy0) entered disabled state [ 115.106651][ T7536] dummy0: entered allmulticast mode [ 115.124197][ T7540] dummy0: left allmulticast mode [ 115.129267][ T7540] dummy0: left promiscuous mode [ 115.134353][ T7540] bridge0: port 3(dummy0) entered disabled state [ 115.151433][ T7514] Set syz1 is full, maxelem 65536 reached [ 115.375351][ T7540] team0: Port device dummy0 added [ 115.467568][ T3315] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 115.726530][ T7557] loop0: detected capacity change from 0 to 512 [ 115.733627][ T7557] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 115.748634][ T7559] 9pnet_virtio: no channels available for device 127.0.0.1 [ 115.752345][ T7557] EXT4-fs (loop0): failed to initialize system zone (-117) [ 115.772380][ T7557] EXT4-fs (loop0): mount failed [ 115.814579][ T7564] netlink: 14 bytes leftover after parsing attributes in process `syz.2.1493'. [ 115.846962][ T7570] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1495'. [ 115.856207][ T7570] netlink: 'syz.2.1495': attribute type 30 has an invalid length. [ 115.871416][ T7562] loop3: detected capacity change from 0 to 512 [ 115.890215][ T7566] loop0: detected capacity change from 0 to 2048 [ 115.897300][ T7562] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 115.925193][ T7566] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 115.925364][ T7562] EXT4-fs (loop3): failed to initialize system zone (-117) [ 115.945901][ T7566] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 115.946518][ T7562] EXT4-fs (loop3): mount failed [ 115.966808][ T7566] EXT4-fs (loop0): Remounting filesystem read-only [ 116.049740][ T7588] netlink: 'syz.2.1502': attribute type 10 has an invalid length. [ 116.058259][ T7588] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1502'. [ 116.072568][ T7588] dummy0: entered promiscuous mode [ 116.209357][ T7588] team0: Port device dummy0 removed [ 116.220986][ T7588] bridge0: port 3(dummy0) entered blocking state [ 116.230707][ T7588] bridge0: port 3(dummy0) entered disabled state [ 116.255466][ T7588] dummy0: entered allmulticast mode [ 116.269791][ T7571] rdma_rxe: rxe_newlink: failed to add syz_tun [ 116.317674][ T7598] netlink: 14 bytes leftover after parsing attributes in process `syz.1.1505'. [ 116.431404][ T7602] 9pnet_virtio: no channels available for device 127.0.0.1 [ 116.566816][ T7566] Set syz1 is full, maxelem 65536 reached [ 116.566847][ T7608] loop3: detected capacity change from 0 to 1024 [ 116.603293][ T7608] usb usb1: check_ctrlrecip: process 7608 (+}[@) requesting ep 01 but needs 81 [ 116.623463][ T7608] vhci_hcd: default hub control req: 020f v0004 i0001 l0 [ 116.643123][ T3305] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 116.832593][ T10] Process accounting resumed [ 116.848004][ T7621] loop4: detected capacity change from 0 to 512 [ 116.875561][ T7621] EXT4-fs: Ignoring removed mblk_io_submit option [ 116.896726][ T7625] netlink: 14 bytes leftover after parsing attributes in process `syz.3.1516'. [ 116.906302][ T7621] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 116.931822][ T7621] EXT4-fs (loop4): 1 truncate cleaned up [ 116.944838][ T7621] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 117.000374][ T7630] 9pnet_virtio: no channels available for device 127.0.0.1 [ 117.142756][ T7634] netlink: 'syz.3.1519': attribute type 10 has an invalid length. [ 117.188873][ T7634] dummy0: left promiscuous mode [ 117.202877][ T7634] team0: Port device dummy0 added [ 117.247214][ T10] Process accounting resumed [ 117.255699][ T7636] loop3: detected capacity change from 0 to 512 [ 117.263200][ T7636] EXT4-fs: Ignoring removed mblk_io_submit option [ 117.271801][ T7636] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 117.293093][ T7636] EXT4-fs (loop3): 1 truncate cleaned up [ 117.299137][ T7636] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 117.672720][ T3315] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 117.830667][ T7656] loop0: detected capacity change from 0 to 1024 [ 117.898659][ T7662] loop1: detected capacity change from 0 to 512 [ 117.907621][ T7662] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 117.922780][ T7662] EXT4-fs (loop1): failed to initialize system zone (-117) [ 117.933465][ T7662] EXT4-fs (loop1): mount failed [ 117.939575][ T7647] rdma_rxe: rxe_newlink: failed to add syz_tun [ 117.955315][ T7668] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1533'. [ 117.964559][ T7668] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1533'. [ 117.973919][ T29] kauditd_printk_skb: 187 callbacks suppressed [ 117.973937][ T29] audit: type=1400 audit(1755642307.673:11598): avc: denied { getopt } for pid=7667 comm="syz.0.1533" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 118.030451][ T7666] netlink: 'syz.2.1532': attribute type 1 has an invalid length. [ 118.059133][ T29] audit: type=1326 audit(1755642307.783:11599): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7665 comm="syz.2.1532" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa81de5ebe9 code=0x7ffc0000 [ 118.083152][ T29] audit: type=1326 audit(1755642307.783:11600): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7665 comm="syz.2.1532" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa81de5ebe9 code=0x7ffc0000 [ 118.107203][ T29] audit: type=1326 audit(1755642307.783:11601): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7665 comm="syz.2.1532" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fa81de5ebe9 code=0x7ffc0000 [ 118.131951][ T29] audit: type=1326 audit(1755642307.783:11602): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7665 comm="syz.2.1532" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa81de5ebe9 code=0x7ffc0000 [ 118.156231][ T29] audit: type=1326 audit(1755642307.783:11603): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7665 comm="syz.2.1532" exe="/root/syz-executor" sig=0 arch=c000003e syscall=213 compat=0 ip=0x7fa81de5ebe9 code=0x7ffc0000 [ 118.180877][ T29] audit: type=1326 audit(1755642307.783:11604): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7665 comm="syz.2.1532" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa81de5ebe9 code=0x7ffc0000 [ 118.205354][ T29] audit: type=1326 audit(1755642307.783:11605): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7665 comm="syz.2.1532" exe="/root/syz-executor" sig=0 arch=c000003e syscall=246 compat=0 ip=0x7fa81de5ebe9 code=0x7ffc0000 [ 118.229700][ T29] audit: type=1326 audit(1755642307.783:11606): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7665 comm="syz.2.1532" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa81de5ebe9 code=0x7ffc0000 [ 118.254553][ T29] audit: type=1326 audit(1755642307.783:11607): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7665 comm="syz.2.1532" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa81de5ebe9 code=0x7ffc0000 [ 118.280632][ T3313] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 118.321844][ T7680] netlink: 'syz.2.1538': attribute type 10 has an invalid length. [ 118.330652][ T7680] dummy0: left allmulticast mode [ 118.336066][ T7680] dummy0: left promiscuous mode [ 118.341539][ T7680] bridge0: port 3(dummy0) entered disabled state [ 118.353071][ T7680] team0: Port device dummy0 added [ 118.377492][ T2957] hid_parser_main: 83 callbacks suppressed [ 118.377513][ T2957] hid-generic 0000:0006:0007.001D: unknown main item tag 0x0 [ 118.391177][ T2957] hid-generic 0000:0006:0007.001D: unknown main item tag 0x0 [ 118.398998][ T2957] hid-generic 0000:0006:0007.001D: unknown main item tag 0x0 [ 118.406561][ T2957] hid-generic 0000:0006:0007.001D: unknown main item tag 0x0 [ 118.414063][ T2957] hid-generic 0000:0006:0007.001D: unknown main item tag 0x0 [ 118.421619][ T2957] hid-generic 0000:0006:0007.001D: unknown main item tag 0x0 [ 118.429474][ T2957] hid-generic 0000:0006:0007.001D: unknown main item tag 0x0 [ 118.437070][ T2957] hid-generic 0000:0006:0007.001D: unknown main item tag 0x0 [ 118.444869][ T2957] hid-generic 0000:0006:0007.001D: unknown main item tag 0x0 [ 118.452507][ T2957] hid-generic 0000:0006:0007.001D: unknown main item tag 0x0 [ 118.463695][ T2957] hid-generic 0000:0006:0007.001D: hidraw0: HID v0.0b Device [syz1] on syz1 [ 118.481482][ T7686] netlink: 'syz.1.1541': attribute type 30 has an invalid length. [ 118.495748][ T3783] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 118.504603][ T3783] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 118.513409][ T3783] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 118.534240][ T3783] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 118.620525][ T7697] netlink: 'syz.4.1546': attribute type 10 has an invalid length. [ 118.642665][ T7697] bridge0: port 3(dummy0) entered disabled state [ 118.649780][ T7697] dummy0: left allmulticast mode [ 118.670574][ T7697] dummy0: left promiscuous mode [ 118.675809][ T7697] bridge0: port 3(dummy0) entered disabled state [ 118.695223][ T7697] team0: Port device dummy0 added [ 118.730020][ T7705] loop0: detected capacity change from 0 to 1024 [ 118.761606][ T7705] usb usb1: check_ctrlrecip: process 7705 (+}[@) requesting ep 01 but needs 81 [ 118.791744][ T7705] vhci_hcd: default hub control req: 020f v0004 i0001 l0 [ 118.800402][ T7717] usb usb1: check_ctrlrecip: process 7717 (+}[@) requesting ep 01 but needs 81 [ 118.838097][ T7717] vhci_hcd: default hub control req: 020f v0004 i0001 l0 [ 118.866869][ T7724] loop0: detected capacity change from 0 to 512 [ 118.876338][ T7724] EXT4-fs: Ignoring removed nobh option [ 118.896204][ T7724] EXT4-fs error (device loop0): ext4_do_update_inode:5653: inode #3: comm syz.0.1558: corrupted inode contents [ 118.959927][ T7724] EXT4-fs error (device loop0): ext4_dirty_inode:6538: inode #3: comm syz.0.1558: mark_inode_dirty error [ 118.972449][ T7724] EXT4-fs error (device loop0): ext4_do_update_inode:5653: inode #3: comm syz.0.1558: corrupted inode contents [ 118.989234][ T7724] EXT4-fs error (device loop0): __ext4_ext_dirty:206: inode #3: comm syz.0.1558: mark_inode_dirty error [ 119.001508][ T7724] EXT4-fs error (device loop0): ext4_acquire_dquot:6937: comm syz.0.1558: Failed to acquire dquot type 0 [ 119.021089][ T7724] EXT4-fs error (device loop0): ext4_do_update_inode:5653: inode #16: comm syz.0.1558: corrupted inode contents [ 119.033721][ T7724] EXT4-fs error (device loop0): ext4_dirty_inode:6538: inode #16: comm syz.0.1558: mark_inode_dirty error [ 119.046332][ T7724] EXT4-fs error (device loop0): ext4_do_update_inode:5653: inode #16: comm syz.0.1558: corrupted inode contents [ 119.059457][ T7724] EXT4-fs error (device loop0): __ext4_ext_dirty:206: inode #16: comm syz.0.1558: mark_inode_dirty error [ 119.071457][ T7724] EXT4-fs error (device loop0): ext4_do_update_inode:5653: inode #16: comm syz.0.1558: corrupted inode contents [ 119.084615][ T7724] EXT4-fs error (device loop0) in ext4_orphan_del:305: Corrupt filesystem [ 119.094810][ T7724] EXT4-fs error (device loop0): ext4_do_update_inode:5653: inode #16: comm syz.0.1558: corrupted inode contents [ 119.110868][ T7724] EXT4-fs error (device loop0): ext4_truncate:4666: inode #16: comm syz.0.1558: mark_inode_dirty error [ 119.122734][ T7724] EXT4-fs error (device loop0) in ext4_process_orphan:347: Corrupt filesystem [ 119.132687][ T7724] EXT4-fs (loop0): 1 truncate cleaned up [ 119.139663][ T7724] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 119.170662][ T7734] rdma_rxe: rxe_newlink: failed to add syz_tun [ 119.188100][ T7724] ext4 filesystem being mounted at /295/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 119.226722][ T7739] netlink: 'syz.4.1563': attribute type 10 has an invalid length. [ 119.297628][ T7750] loop4: detected capacity change from 0 to 1024 [ 119.306820][ T7750] usb usb1: check_ctrlrecip: process 7750 (+}[@) requesting ep 01 but needs 81 [ 119.324081][ T7750] vhci_hcd: default hub control req: 020f v0004 i0001 l0 [ 119.337726][ T7724] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 119.348690][ T7752] loop3: detected capacity change from 0 to 2048 [ 119.354132][ T7757] netlink: 'syz.2.1571': attribute type 10 has an invalid length. [ 119.365148][ T7757] dummy0: entered promiscuous mode [ 119.385401][ T7752] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 119.428616][ T7752] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 119.451762][ T7766] netlink: 'syz.0.1574': attribute type 10 has an invalid length. [ 119.480422][ T7757] team0: Port device dummy0 removed [ 119.492348][ T7757] bridge0: port 3(dummy0) entered blocking state [ 119.500169][ T7757] bridge0: port 3(dummy0) entered disabled state [ 119.508356][ T7757] dummy0: entered allmulticast mode [ 119.526610][ T7766] dummy0: left allmulticast mode [ 119.531752][ T7766] dummy0: left promiscuous mode [ 119.536749][ T7766] bridge0: port 3(dummy0) entered disabled state [ 119.562347][ T7766] team0: Port device dummy0 added [ 119.579907][ T7752] EXT4-fs (loop3): Remounting filesystem read-only [ 119.621192][ T7772] 9pnet_virtio: no channels available for device 127.0.0.1 [ 119.793117][ T7778] __nla_validate_parse: 6 callbacks suppressed [ 119.793135][ T7778] netlink: 14 bytes leftover after parsing attributes in process `syz.4.1579'. [ 119.862019][ T7784] netlink: 'syz.1.1582': attribute type 1 has an invalid length. [ 119.938829][ T7787] loop4: detected capacity change from 0 to 2048 [ 120.004691][ T7793] loop1: detected capacity change from 0 to 1024 [ 120.021436][ T7787] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 120.037848][ T7793] usb usb1: check_ctrlrecip: process 7793 (+}[@) requesting ep 01 but needs 81 [ 120.049557][ T7787] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 120.065316][ T7793] vhci_hcd: default hub control req: 020f v0004 i0001 l0 [ 120.152418][ T7787] EXT4-fs (loop4): Remounting filesystem read-only [ 120.310174][ T7803] 9pnet_fd: Insufficient options for proto=fd [ 120.337230][ T7805] loop1: detected capacity change from 0 to 736 [ 120.353069][ T7805] netlink: 4200 bytes leftover after parsing attributes in process `syz.1.1587'. [ 120.530337][ T7813] netlink: 'syz.0.1590': attribute type 10 has an invalid length. [ 120.541460][ T7813] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1590'. [ 120.551553][ T7813] dummy0: entered promiscuous mode [ 120.646759][ T7813] team0: Port device dummy0 removed [ 120.658219][ T7813] bridge0: port 3(dummy0) entered blocking state [ 120.665919][ T7813] bridge0: port 3(dummy0) entered disabled state [ 120.674865][ T7813] dummy0: entered allmulticast mode [ 120.702590][ T7752] Set syz1 is full, maxelem 65536 reached [ 120.783356][ T3313] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 121.031343][ T7799] Set syz1 is full, maxelem 65536 reached [ 121.073271][ T3315] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 121.129923][ T7826] netlink: 'syz.2.1598': attribute type 10 has an invalid length. [ 121.140840][ T7826] dummy0: left allmulticast mode [ 121.146319][ T7826] dummy0: left promiscuous mode [ 121.151380][ T7826] bridge0: port 3(dummy0) entered disabled state [ 121.163756][ T7826] team0: Port device dummy0 added [ 121.402429][ T7841] 9pnet_fd: Insufficient options for proto=fd [ 121.440061][ T7843] netlink: 14 bytes leftover after parsing attributes in process `syz.3.1592'. [ 121.473317][ T7848] loop3: detected capacity change from 0 to 1024 [ 121.484732][ T7848] usb usb1: check_ctrlrecip: process 7848 (+}[@) requesting ep 01 but needs 81 [ 121.497873][ T7848] vhci_hcd: default hub control req: 020f v0004 i0001 l0 [ 121.542002][ T7850] loop1: detected capacity change from 0 to 1024 [ 121.552022][ T7850] usb usb1: check_ctrlrecip: process 7850 (+}[@) requesting ep 01 but needs 81 [ 121.561484][ T7850] vhci_hcd: default hub control req: 020f v0004 i0001 l0 [ 121.619990][ T7854] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in; [ 121.619990][ T7854] program syz.3.1608 not setting count and/or reply_len properly [ 121.699382][ T7864] can0: slcan on ttyS3. [ 121.812916][ T7864] can0 (unregistered): slcan off ttyS3. [ 121.863762][ T7872] netlink: 14 bytes leftover after parsing attributes in process `syz.4.1615'. [ 121.886871][ T7834] Set syz1 is full, maxelem 65536 reached [ 121.927531][ T10] Process accounting resumed [ 121.935638][ T7879] loop1: detected capacity change from 0 to 512 [ 121.942583][ T7879] EXT4-fs: Ignoring removed mblk_io_submit option [ 121.951122][ T7879] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 121.968894][ T7879] EXT4-fs (loop1): 1 truncate cleaned up [ 121.986753][ T7879] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 122.047181][ T7869] rdma_rxe: rxe_newlink: failed to add syz_tun [ 122.055050][ T7893] 9pnet_virtio: no channels available for device 127.0.0.1 [ 122.219986][ T7906] netlink: 14 bytes leftover after parsing attributes in process `syz.2.1630'. [ 122.232973][ T7911] netlink: 'syz.3.1629': attribute type 10 has an invalid length. [ 122.241588][ T7911] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1629'. [ 122.258275][ T7907] loop4: detected capacity change from 0 to 2048 [ 122.268681][ T7911] dummy0: entered promiscuous mode [ 122.388392][ T7911] team0: Port device dummy0 removed [ 122.406289][ T7911] bridge0: port 1(dummy0) entered blocking state [ 122.413924][ T7911] bridge0: port 1(dummy0) entered disabled state [ 122.422385][ T7907] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 122.440105][ T7907] EXT4-fs (loop4): Remounting filesystem read-only [ 122.440313][ T7911] dummy0: entered allmulticast mode [ 122.511025][ T7928] 9pnet_virtio: no channels available for device 127.0.0.1 [ 122.752971][ T7936] netlink: 14 bytes leftover after parsing attributes in process `syz.1.1643'. [ 122.788953][ T7940] netlink: 'syz.2.1641': attribute type 10 has an invalid length. [ 122.938272][ T7907] Set syz1 is full, maxelem 65536 reached [ 122.948121][ T36] Process accounting resumed [ 123.292749][ T7955] rdma_rxe: rxe_newlink: failed to add syz_tun [ 124.072707][ T7996] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1665'. [ 124.151776][ T8004] netlink: 'syz.4.1667': attribute type 10 has an invalid length. [ 124.162326][ T8004] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1667'. [ 124.181688][ T8004] dummy0: entered promiscuous mode [ 124.229187][ T8010] loop1: detected capacity change from 0 to 4096 [ 124.268888][ T8004] team0: Port device dummy0 removed [ 124.280978][ T8004] bridge0: port 3(dummy0) entered blocking state [ 124.288625][ T8004] bridge0: port 3(dummy0) entered disabled state [ 124.332131][ T7992] rdma_rxe: rxe_newlink: failed to add syz_tun [ 124.347336][ T8004] dummy0: entered allmulticast mode [ 124.996312][ T29] kauditd_printk_skb: 536 callbacks suppressed [ 124.996328][ T29] audit: type=1326 audit(1755642314.723:12142): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8035 comm="syz.0.1681" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe236e5ebe9 code=0x7ffc0000 [ 125.027016][ T29] audit: type=1326 audit(1755642314.723:12143): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8035 comm="syz.0.1681" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe236e5ebe9 code=0x7ffc0000 [ 125.050835][ T29] audit: type=1326 audit(1755642314.723:12144): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8035 comm="syz.0.1681" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fe236e5ebe9 code=0x7ffc0000 [ 125.075231][ T29] audit: type=1326 audit(1755642314.723:12145): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8035 comm="syz.0.1681" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe236e5ebe9 code=0x7ffc0000 [ 125.099101][ T29] audit: type=1326 audit(1755642314.723:12146): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8035 comm="syz.0.1681" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe236e5ebe9 code=0x7ffc0000 [ 125.122982][ T29] audit: type=1326 audit(1755642314.723:12147): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8035 comm="syz.0.1681" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fe236e5ebe9 code=0x7ffc0000 [ 125.146526][ T29] audit: type=1326 audit(1755642314.723:12148): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8035 comm="syz.0.1681" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe236e5ebe9 code=0x7ffc0000 [ 125.170211][ T29] audit: type=1326 audit(1755642314.723:12149): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8035 comm="syz.0.1681" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe236e5ebe9 code=0x7ffc0000 [ 125.193900][ T29] audit: type=1326 audit(1755642314.733:12150): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8035 comm="syz.0.1681" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fe236e5ebe9 code=0x7ffc0000 [ 125.217776][ T29] audit: type=1326 audit(1755642314.733:12151): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8035 comm="syz.0.1681" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe236e5ebe9 code=0x7ffc0000 [ 125.376551][ T8063] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1693'. [ 125.385727][ T8063] netlink: 'syz.3.1693': attribute type 30 has an invalid length. [ 125.402986][ T1696] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 125.425687][ T1696] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 125.434752][ T1696] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 125.443767][ T1696] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 125.469052][ T8069] loop3: detected capacity change from 0 to 512 [ 125.493099][ T8069] ext4 filesystem being mounted at /307/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 125.505168][ T8069] EXT4-fs error (device loop3): ext4_do_update_inode:5653: inode #4: comm syz.3.1696: corrupted inode contents [ 125.517400][ T8069] EXT4-fs error (device loop3): ext4_dirty_inode:6538: inode #4: comm syz.3.1696: mark_inode_dirty error [ 125.529675][ T8069] EXT4-fs error (device loop3): ext4_do_update_inode:5653: inode #4: comm syz.3.1696: corrupted inode contents [ 125.543340][ T8069] EXT4-fs error (device loop3): __ext4_ext_dirty:206: inode #4: comm syz.3.1696: mark_inode_dirty error [ 125.555565][ T8069] EXT4-fs error (device loop3): ext4_acquire_dquot:6937: comm syz.3.1696: Failed to acquire dquot type 1 [ 125.559376][ T8076] netlink: 'syz.4.1698': attribute type 10 has an invalid length. [ 125.575969][ T8076] dummy0: left allmulticast mode [ 125.576020][ T8077] EXT4-fs error (device loop3): ext4_do_update_inode:5653: inode #4: comm syz.3.1696: corrupted inode contents [ 125.576134][ T8077] EXT4-fs error (device loop3): ext4_dirty_inode:6538: inode #4: comm syz.3.1696: mark_inode_dirty error [ 125.581441][ T8076] dummy0: left promiscuous mode [ 125.594212][ T8077] EXT4-fs error (device loop3): ext4_do_update_inode:5653: inode #4: comm syz.3.1696: corrupted inode contents [ 125.606238][ T8076] bridge0: port 3(dummy0) entered disabled state [ 125.611396][ T8077] EXT4-fs error (device loop3): __ext4_ext_dirty:206: inode #4: comm syz.3.1696: mark_inode_dirty error [ 125.642725][ T8076] team0: Port device dummy0 added [ 125.648712][ T8077] EXT4-fs error (device loop3): ext4_acquire_dquot:6937: comm syz.3.1696: Failed to acquire dquot type 1 [ 125.674131][ T8061] rdma_rxe: rxe_newlink: failed to add syz_tun [ 125.687280][ T8080] netlink: 'syz.4.1699': attribute type 21 has an invalid length. [ 125.695475][ T8080] netlink: 132 bytes leftover after parsing attributes in process `syz.4.1699'. [ 125.704604][ T8080] netlink: 'syz.4.1699': attribute type 1 has an invalid length. [ 125.749650][ T8088] netlink: 14 bytes leftover after parsing attributes in process `syz.0.1702'. [ 126.001609][ T8096] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1704'. [ 126.010657][ T8096] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1704'. [ 126.019649][ T8096] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1704'. [ 126.035682][ T8096] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1704'. [ 126.124237][ T8105] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1707'. [ 126.133424][ T8105] netlink: 'syz.2.1707': attribute type 30 has an invalid length. [ 126.245319][ T8110] netlink: 'syz.1.1710': attribute type 10 has an invalid length. [ 126.350749][ T8122] 9pnet_virtio: no channels available for device 127.0.0.1 [ 126.458935][ T8130] netlink: 14 bytes leftover after parsing attributes in process `syz.2.1721'. [ 126.552801][ T8135] netlink: 'syz.2.1723': attribute type 10 has an invalid length. [ 126.893700][ T8158] netlink: 14 bytes leftover after parsing attributes in process `syz.0.1732'. [ 127.472921][ T8191] loop1: detected capacity change from 0 to 1024 [ 127.484375][ T8191] usb usb1: check_ctrlrecip: process 8191 (+}[@) requesting ep 01 but needs 81 [ 127.494047][ T8191] vhci_hcd: default hub control req: 020f v0004 i0001 l0 [ 127.653398][ T8197] loop1: detected capacity change from 0 to 4096 [ 127.784673][ T8205] loop3: detected capacity change from 0 to 1024 [ 127.804882][ T8205] usb usb1: check_ctrlrecip: process 8205 (+}[@) requesting ep 01 but needs 81 [ 127.814229][ T8205] vhci_hcd: default hub control req: 020f v0004 i0001 l0 [ 127.864123][ T8213] netlink: 'syz.2.1754': attribute type 10 has an invalid length. [ 127.897897][ T2957] hid_parser_main: 43 callbacks suppressed [ 127.897918][ T2957] hid-generic 0000:0006:0007.001E: unknown main item tag 0x0 [ 127.911503][ T2957] hid-generic 0000:0006:0007.001E: unknown main item tag 0x0 [ 127.919296][ T2957] hid-generic 0000:0006:0007.001E: unknown main item tag 0x0 [ 127.927044][ T2957] hid-generic 0000:0006:0007.001E: unknown main item tag 0x0 [ 127.934502][ T2957] hid-generic 0000:0006:0007.001E: unknown main item tag 0x0 [ 127.942406][ T2957] hid-generic 0000:0006:0007.001E: unknown main item tag 0x0 [ 127.949913][ T2957] hid-generic 0000:0006:0007.001E: unknown main item tag 0x0 [ 127.957403][ T2957] hid-generic 0000:0006:0007.001E: unknown main item tag 0x0 [ 127.965061][ T2957] hid-generic 0000:0006:0007.001E: unknown main item tag 0x0 [ 127.972592][ T2957] hid-generic 0000:0006:0007.001E: unknown main item tag 0x0 [ 127.981255][ T8224] loop1: detected capacity change from 0 to 2048 [ 127.992153][ T2957] hid-generic 0000:0006:0007.001E: hidraw0: HID v0.0b Device [syz1] on syz1 [ 128.032981][ T8217] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 128.051356][ T2957] Process accounting resumed [ 128.056237][ T8217] EXT4-fs (loop1): Remounting filesystem read-only [ 128.609372][ T8217] Set syz1 is full, maxelem 65536 reached [ 128.727614][ T8247] netlink: 'syz.4.1765': attribute type 30 has an invalid length. [ 128.761786][ T3783] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 128.778364][ T3783] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 128.817342][ T3783] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 128.845019][ T8251] netlink: 'syz.1.1767': attribute type 10 has an invalid length. [ 128.858139][ T3783] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 128.947836][ T1035] hid-generic 0000:0006:0007.001F: hidraw0: HID v0.0b Device [syz1] on syz1 [ 129.007229][ T8267] loop1: detected capacity change from 0 to 736 [ 129.149703][ T36] Process accounting resumed [ 129.161966][ T8287] loop1: detected capacity change from 0 to 512 [ 129.171283][ T10] hid-generic 0000:0006:0007.0020: hidraw0: HID v0.0b Device [syz1] on syz1 [ 129.181236][ T8287] EXT4-fs: Ignoring removed mblk_io_submit option [ 129.202135][ T8287] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 129.233331][ T8287] EXT4-fs (loop1): 1 truncate cleaned up [ 129.439299][ T8317] loop4: detected capacity change from 0 to 736 [ 130.148702][ T1035] hid-generic 0000:0006:0007.0021: hidraw0: HID v0.0b Device [syz1] on syz1 [ 130.215724][ T8374] loop1: detected capacity change from 0 to 512 [ 130.236083][ T8376] loop3: detected capacity change from 0 to 736 [ 130.272134][ T8374] ext4 filesystem being mounted at /374/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 130.278445][ T2957] Process accounting resumed [ 130.305891][ T8374] EXT4-fs error (device loop1): ext4_do_update_inode:5653: inode #4: comm syz.1.1819: corrupted inode contents [ 130.322934][ T8374] EXT4-fs error (device loop1): ext4_dirty_inode:6538: inode #4: comm syz.1.1819: mark_inode_dirty error [ 130.406591][ T8374] EXT4-fs error (device loop1): ext4_do_update_inode:5653: inode #4: comm syz.1.1819: corrupted inode contents [ 130.463675][ T8398] __nla_validate_parse: 10 callbacks suppressed [ 130.463691][ T8398] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1829'. [ 130.479073][ T8398] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1829'. [ 130.481825][ T8374] EXT4-fs error (device loop1): __ext4_ext_dirty:206: inode #4: comm syz.1.1819: mark_inode_dirty error [ 130.488246][ T8398] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1829'. [ 130.519843][ T8374] __quota_error: 107 callbacks suppressed [ 130.519860][ T8374] Quota error (device loop1): write_blk: dquota write failed [ 130.533189][ T8374] Quota error (device loop1): find_free_dqentry: Can't write quota data block 5 [ 130.542257][ T8374] Quota error (device loop1): qtree_write_dquot: Error -117 occurred while creating quota [ 130.544008][ T8397] validate_nla: 4 callbacks suppressed [ 130.544027][ T8397] netlink: 'syz.3.1828': attribute type 10 has an invalid length. [ 130.552387][ T8374] EXT4-fs error (device loop1): ext4_acquire_dquot:6937: comm syz.1.1819: Failed to acquire dquot type 1 [ 130.558503][ T8397] dummy0: left allmulticast mode [ 130.592763][ T8398] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1829'. [ 130.612773][ T8390] EXT4-fs error (device loop1): ext4_do_update_inode:5653: inode #4: comm syz.1.1819: corrupted inode contents [ 130.613010][ T8397] dummy0: left promiscuous mode [ 130.630062][ T8397] bridge0: port 1(dummy0) entered disabled state [ 130.656832][ T8397] team0: Port device dummy0 added [ 130.675811][ T8390] EXT4-fs error (device loop1): ext4_dirty_inode:6538: inode #4: comm syz.1.1819: mark_inode_dirty error [ 130.687416][ T8390] EXT4-fs error (device loop1): ext4_do_update_inode:5653: inode #4: comm syz.1.1819: corrupted inode contents [ 130.777285][ T8390] EXT4-fs error (device loop1): __ext4_ext_dirty:206: inode #4: comm syz.1.1819: mark_inode_dirty error [ 130.788678][ T29] audit: type=1326 audit(1755642320.493:12254): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8402 comm="syz.2.1831" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa81de5ebe9 code=0x7ffc0000 [ 130.812309][ T29] audit: type=1326 audit(1755642320.493:12255): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8402 comm="syz.2.1831" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa81de5ebe9 code=0x7ffc0000 [ 130.836111][ T29] audit: type=1326 audit(1755642320.493:12256): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8402 comm="syz.2.1831" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa81de5ebe9 code=0x7ffc0000 [ 130.860247][ T29] audit: type=1326 audit(1755642320.493:12257): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8402 comm="syz.2.1831" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa81de5ebe9 code=0x7ffc0000 [ 130.883999][ T29] audit: type=1326 audit(1755642320.493:12258): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8402 comm="syz.2.1831" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa81de5ebe9 code=0x7ffc0000 [ 130.907783][ T29] audit: type=1326 audit(1755642320.493:12259): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8402 comm="syz.2.1831" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa81de5ebe9 code=0x7ffc0000 [ 130.931755][ T29] audit: type=1326 audit(1755642320.503:12260): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8402 comm="syz.2.1831" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa81de5ebe9 code=0x7ffc0000 [ 130.956602][ T8390] EXT4-fs error (device loop1): ext4_acquire_dquot:6937: comm syz.1.1819: Failed to acquire dquot type 1 [ 131.095904][ T8417] loop1: detected capacity change from 0 to 736 [ 131.123605][ T8417] netlink: 4200 bytes leftover after parsing attributes in process `syz.1.1838'. [ 131.230453][ T8433] loop3: detected capacity change from 0 to 1024 [ 131.255231][ T8436] netlink: 'syz.1.1846': attribute type 10 has an invalid length. [ 131.273168][ T8433] usb usb1: check_ctrlrecip: process 8433 (syz.3.1844) requesting ep 01 but needs 81 [ 131.283250][ T8433] vhci_hcd: default hub control req: 020f v0004 i0001 l0 [ 131.379433][ T2957] hid-generic 0000:0006:0007.0022: hidraw0: HID v0.0b Device [syz1] on syz1 [ 131.394488][ T8457] netlink: 4200 bytes leftover after parsing attributes in process `syz.2.1854'. [ 131.449722][ T8469] loop3: detected capacity change from 0 to 1024 [ 131.458854][ T8469] usb usb1: check_ctrlrecip: process 8469 (+}[@) requesting ep 01 but needs 81 [ 131.468278][ T8469] vhci_hcd: default hub control req: 020f v0004 i0001 l0 [ 131.481124][ T8472] netlink: 'syz.1.1862': attribute type 10 has an invalid length. [ 131.614690][ T10] hid-generic 0000:0006:0007.0023: hidraw0: HID v0.0b Device [syz1] on syz1 [ 131.788746][ T8507] loop3: detected capacity change from 0 to 512 [ 131.797541][ T8509] loop1: detected capacity change from 0 to 736 [ 131.815898][ T8511] netlink: 'syz.2.1877': attribute type 10 has an invalid length. [ 131.825618][ T8505] loop4: detected capacity change from 0 to 4096 [ 131.841966][ T8505] EXT4-fs mount: 15 callbacks suppressed [ 131.841988][ T8505] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 131.843645][ T8509] netlink: 4200 bytes leftover after parsing attributes in process `syz.1.1876'. [ 131.888656][ T8507] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 131.902508][ T8507] ext4 filesystem being mounted at /337/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 131.951006][ T3315] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 131.967472][ T8507] EXT4-fs error (device loop3): ext4_do_update_inode:5653: inode #4: comm syz.3.1875: corrupted inode contents [ 132.028731][ T8507] EXT4-fs error (device loop3): ext4_dirty_inode:6538: inode #4: comm syz.3.1875: mark_inode_dirty error [ 132.047217][ T8507] EXT4-fs error (device loop3): ext4_do_update_inode:5653: inode #4: comm syz.3.1875: corrupted inode contents [ 132.059767][ T8507] EXT4-fs error (device loop3): __ext4_ext_dirty:206: inode #4: comm syz.3.1875: mark_inode_dirty error [ 132.120406][ T8507] EXT4-fs error (device loop3): ext4_acquire_dquot:6937: comm syz.3.1875: Failed to acquire dquot type 1 [ 132.171380][ T8522] EXT4-fs error (device loop3): ext4_do_update_inode:5653: inode #4: comm syz.3.1875: corrupted inode contents [ 132.202452][ T8522] EXT4-fs error (device loop3): ext4_dirty_inode:6538: inode #4: comm syz.3.1875: mark_inode_dirty error [ 132.214909][ T8522] EXT4-fs error (device loop3): ext4_do_update_inode:5653: inode #4: comm syz.3.1875: corrupted inode contents [ 132.227088][ T8522] EXT4-fs error (device loop3): __ext4_ext_dirty:206: inode #4: comm syz.3.1875: mark_inode_dirty error [ 132.305977][ T8522] EXT4-fs error (device loop3): ext4_acquire_dquot:6937: comm syz.3.1875: Failed to acquire dquot type 1 [ 132.357120][ T8551] loop4: detected capacity change from 0 to 736 [ 132.380418][ T3313] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 132.408175][ T8551] netlink: 4200 bytes leftover after parsing attributes in process `syz.4.1892'. [ 132.465653][ T8561] 9pnet_fd: Insufficient options for proto=fd [ 132.573682][ T8578] loop3: detected capacity change from 0 to 1024 [ 132.642763][ T8578] usb usb1: check_ctrlrecip: process 8578 (+}[@) requesting ep 01 but needs 81 [ 132.677964][ T8578] vhci_hcd: default hub control req: 020f v0004 i0001 l0 [ 132.690591][ T8593] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1912'. [ 132.744259][ T8605] netlink: 4200 bytes leftover after parsing attributes in process `syz.0.1916'. [ 132.844663][ T8625] loop1: detected capacity change from 0 to 1024 [ 132.853925][ T8625] usb usb1: check_ctrlrecip: process 8625 (+}[@) requesting ep 01 but needs 81 [ 132.877820][ T8625] vhci_hcd: default hub control req: 020f v0004 i0001 l0 [ 133.025273][ T8648] loop1: detected capacity change from 0 to 736 [ 133.060537][ T3386] hid_parser_main: 308 callbacks suppressed [ 133.060613][ T3386] hid-generic 0000:0006:0007.0024: unknown main item tag 0x0 [ 133.074136][ T3386] hid-generic 0000:0006:0007.0024: unknown main item tag 0x0 [ 133.081783][ T3386] hid-generic 0000:0006:0007.0024: unknown main item tag 0x0 [ 133.089295][ T3386] hid-generic 0000:0006:0007.0024: unknown main item tag 0x0 [ 133.096839][ T3386] hid-generic 0000:0006:0007.0024: unknown main item tag 0x0 [ 133.104405][ T3386] hid-generic 0000:0006:0007.0024: unknown main item tag 0x0 [ 133.111816][ T3386] hid-generic 0000:0006:0007.0024: unknown main item tag 0x0 [ 133.119241][ T3386] hid-generic 0000:0006:0007.0024: unknown main item tag 0x0 [ 133.126780][ T3386] hid-generic 0000:0006:0007.0024: unknown main item tag 0x0 [ 133.134300][ T3386] hid-generic 0000:0006:0007.0024: unknown main item tag 0x0 [ 133.144581][ T3386] hid-generic 0000:0006:0007.0024: hidraw0: HID v0.0b Device [syz1] on syz1 [ 133.260165][ T8665] loop3: detected capacity change from 0 to 1024 [ 133.277784][ T8665] usb usb1: check_ctrlrecip: process 8665 (+}[@) requesting ep 01 but needs 81 [ 133.287629][ T8665] vhci_hcd: default hub control req: 020f v0004 i0001 l0 [ 133.395086][ T10] Process accounting resumed [ 133.565273][ T8692] loop3: detected capacity change from 0 to 512 [ 133.600176][ T8692] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 133.647884][ T8692] ext4 filesystem being mounted at /355/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 133.673318][ T8692] EXT4-fs error (device loop3): ext4_do_update_inode:5653: inode #4: comm syz.3.1953: corrupted inode contents [ 133.687196][ T8700] loop4: detected capacity change from 0 to 2048 [ 133.712887][ T8692] EXT4-fs error (device loop3): ext4_dirty_inode:6538: inode #4: comm syz.3.1953: mark_inode_dirty error [ 133.725907][ T8700] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 133.748731][ T8692] EXT4-fs error (device loop3): ext4_do_update_inode:5653: inode #4: comm syz.3.1953: corrupted inode contents [ 133.763116][ T8697] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 133.778442][ T8697] EXT4-fs (loop4): Remounting filesystem read-only [ 133.778428][ T8692] EXT4-fs error (device loop3): __ext4_ext_dirty:206: inode #4: comm syz.3.1953: mark_inode_dirty error [ 133.926849][ T8692] EXT4-fs error (device loop3): ext4_acquire_dquot:6937: comm syz.3.1953: Failed to acquire dquot type 1 [ 133.953042][ T8702] EXT4-fs error (device loop3): ext4_do_update_inode:5653: inode #4: comm syz.3.1953: corrupted inode contents [ 133.975504][ T8702] EXT4-fs error (device loop3): ext4_dirty_inode:6538: inode #4: comm syz.3.1953: mark_inode_dirty error [ 134.003985][ T8702] EXT4-fs error (device loop3): ext4_do_update_inode:5653: inode #4: comm syz.3.1953: corrupted inode contents [ 134.016782][ T3315] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 134.022725][ T8702] EXT4-fs error (device loop3): __ext4_ext_dirty:206: inode #4: comm syz.3.1953: mark_inode_dirty error [ 134.069594][ T8702] EXT4-fs error (device loop3): ext4_acquire_dquot:6937: comm syz.3.1953: Failed to acquire dquot type 1 [ 134.103175][ T3313] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 134.148031][ T8712] loop4: detected capacity change from 0 to 512 [ 134.169815][ T8712] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 134.194356][ T8712] EXT4-fs (loop4): failed to initialize system zone (-117) [ 134.209435][ T8712] EXT4-fs (loop4): mount failed [ 134.303620][ T8738] loop4: detected capacity change from 0 to 736 [ 134.307398][ T8740] loop1: detected capacity change from 0 to 512 [ 134.345375][ T8740] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 134.358437][ T8740] ext4 filesystem being mounted at /409/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 134.379589][ T8740] EXT4-fs error (device loop1): ext4_do_update_inode:5653: inode #4: comm syz.1.1970: corrupted inode contents [ 134.406521][ T8740] EXT4-fs error (device loop1): ext4_dirty_inode:6538: inode #4: comm syz.1.1970: mark_inode_dirty error [ 134.409610][ T8751] loop3: detected capacity change from 0 to 1024 [ 134.427566][ T8751] usb usb1: check_ctrlrecip: process 8751 (+}[@) requesting ep 01 but needs 81 [ 134.436729][ T8751] vhci_hcd: default hub control req: 020f v0004 i0001 l0 [ 134.448734][ T8740] EXT4-fs error (device loop1): ext4_do_update_inode:5653: inode #4: comm syz.1.1970: corrupted inode contents [ 134.461025][ T8740] EXT4-fs error (device loop1): __ext4_ext_dirty:206: inode #4: comm syz.1.1970: mark_inode_dirty error [ 134.472741][ T8740] EXT4-fs error (device loop1): ext4_acquire_dquot:6937: comm syz.1.1970: Failed to acquire dquot type 1 [ 134.485333][ T8740] EXT4-fs error (device loop1): ext4_do_update_inode:5653: inode #4: comm syz.1.1970: corrupted inode contents [ 134.497452][ T8740] EXT4-fs error (device loop1): ext4_dirty_inode:6538: inode #4: comm syz.1.1970: mark_inode_dirty error [ 134.510466][ T8740] EXT4-fs error (device loop1): ext4_do_update_inode:5653: inode #4: comm syz.1.1970: corrupted inode contents [ 134.522489][ T8740] EXT4-fs error (device loop1): __ext4_ext_dirty:206: inode #4: comm syz.1.1970: mark_inode_dirty error [ 134.534372][ T8740] EXT4-fs error (device loop1): ext4_acquire_dquot:6937: comm syz.1.1970: Failed to acquire dquot type 1 [ 134.617149][ T3310] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 134.713826][ T10] Process accounting resumed [ 134.724726][ T8770] loop3: detected capacity change from 0 to 512 [ 134.856111][ T10] Process accounting resumed [ 134.867890][ T8771] loop1: detected capacity change from 0 to 512 [ 134.884086][ T8771] EXT4-fs: Ignoring removed mblk_io_submit option [ 134.884645][ T8770] EXT4-fs: Ignoring removed mblk_io_submit option [ 134.898811][ T8771] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 134.920092][ T8771] EXT4-fs (loop1): 1 truncate cleaned up [ 134.945890][ T8771] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 134.982373][ T8770] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 134.994143][ T8770] EXT4-fs (loop3): 1 truncate cleaned up [ 135.001443][ T8770] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 135.199099][ T8760] Set syz1 is full, maxelem 65536 reached [ 135.619055][ T3310] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 135.656511][ T8808] __nla_validate_parse: 13 callbacks suppressed [ 135.656533][ T8808] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1993'. [ 135.672320][ T8808] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1993'. [ 135.681506][ T8808] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1993'. [ 135.692599][ T8808] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1993'. [ 135.716945][ T3313] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 135.723071][ T8814] netlink: 'syz.1.1997': attribute type 10 has an invalid length. [ 135.729721][ T8812] loop4: detected capacity change from 0 to 1024 [ 135.735432][ T8814] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1997'. [ 135.746834][ T8812] usb usb1: check_ctrlrecip: process 8812 (+}[@) requesting ep 01 but needs 81 [ 135.756497][ T8814] dummy0: entered promiscuous mode [ 135.760201][ T8812] usb usb1: usbfs: process 8812 (+}[@) did not claim interface 0 before use [ 135.777195][ T8812] vhci_hcd: default hub control req: 020f v0004 i0001 l0 [ 135.851685][ T2957] Process accounting resumed [ 135.946533][ T2957] hid-generic 0000:0006:0007.0025: hidraw0: HID v0.0b Device [syz1] on syz1 [ 136.000292][ T8814] team0: Port device dummy0 removed [ 136.019724][ T8814] bridge0: port 3(dummy0) entered blocking state [ 136.027624][ T8814] bridge0: port 3(dummy0) entered disabled state [ 136.057395][ T8832] netlink: 4220 bytes leftover after parsing attributes in process `syz.4.2002'. [ 136.091068][ T8814] dummy0: entered allmulticast mode [ 136.515465][ T8850] netlink: 'syz.3.2009': attribute type 10 has an invalid length. [ 136.561475][ T8854] loop3: detected capacity change from 0 to 1024 [ 136.570669][ T8854] usb usb1: check_ctrlrecip: process 8854 (syz.3.2012) requesting ep 01 but needs 81 [ 136.622416][ T8854] vhci_hcd: default hub control req: 020f v0004 i0001 l0 [ 136.679282][ T8860] netlink: 4220 bytes leftover after parsing attributes in process `syz.1.2014'. [ 136.702697][ T8858] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2011'. [ 136.723690][ T8862] netlink: 4200 bytes leftover after parsing attributes in process `syz.2.2015'. [ 136.788781][ T3393] hid-generic 0000:0006:0007.0026: hidraw0: HID v0.0b Device [syz1] on syz1 [ 136.863469][ T8882] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2025'. [ 136.921795][ T36] Process accounting resumed [ 136.927477][ T8892] netlink: 'syz.2.2029': attribute type 10 has an invalid length. [ 137.009294][ T3386] hid-generic 0000:0006:0007.0027: hidraw0: HID v0.0b Device [syz1] on syz1 [ 137.057401][ T8916] loop1: detected capacity change from 0 to 512 [ 137.068472][ T29] kauditd_printk_skb: 93 callbacks suppressed [ 137.068486][ T29] audit: type=1326 audit(1755642326.793:12337): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8918 comm="syz.3.2039" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fba1d09ebe9 code=0x7ffc0000 [ 137.115039][ T8916] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 137.116542][ T29] audit: type=1326 audit(1755642326.823:12338): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8918 comm="syz.3.2039" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fba1d09ebe9 code=0x7ffc0000 [ 137.151787][ T29] audit: type=1326 audit(1755642326.823:12339): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8918 comm="syz.3.2039" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fba1d09ebe9 code=0x7ffc0000 [ 137.154240][ T8916] ext4 filesystem being mounted at /420/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 137.175657][ T29] audit: type=1326 audit(1755642326.823:12340): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8918 comm="syz.3.2039" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fba1d09ebe9 code=0x7ffc0000 [ 137.210065][ T29] audit: type=1326 audit(1755642326.823:12341): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8918 comm="syz.3.2039" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fba1d09ebe9 code=0x7ffc0000 [ 137.234064][ T29] audit: type=1326 audit(1755642326.823:12342): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8918 comm="syz.3.2039" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fba1d09ebe9 code=0x7ffc0000 [ 137.257690][ T29] audit: type=1326 audit(1755642326.823:12343): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8918 comm="syz.3.2039" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fba1d09ebe9 code=0x7ffc0000 [ 137.282075][ T29] audit: type=1326 audit(1755642326.823:12344): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8918 comm="syz.3.2039" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fba1d09ebe9 code=0x7ffc0000 [ 137.305947][ T29] audit: type=1326 audit(1755642326.823:12345): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8918 comm="syz.3.2039" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fba1d09ebe9 code=0x7ffc0000 [ 137.321672][ T8916] EXT4-fs error (device loop1): ext4_do_update_inode:5653: inode #4: comm syz.1.2038: corrupted inode contents [ 137.329680][ T29] audit: type=1326 audit(1755642326.823:12346): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8918 comm="syz.3.2039" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fba1d09ebe9 code=0x7ffc0000 [ 137.348703][ T8916] EXT4-fs error (device loop1): ext4_dirty_inode:6538: inode #4: comm syz.1.2038: mark_inode_dirty error [ 137.378738][ T8916] EXT4-fs error (device loop1): ext4_do_update_inode:5653: inode #4: comm syz.1.2038: corrupted inode contents [ 137.390865][ T8916] EXT4-fs error (device loop1): __ext4_ext_dirty:206: inode #4: comm syz.1.2038: mark_inode_dirty error [ 137.402785][ T8916] EXT4-fs error (device loop1): ext4_acquire_dquot:6937: comm syz.1.2038: Failed to acquire dquot type 1 [ 137.440780][ T8926] EXT4-fs error (device loop1): ext4_do_update_inode:5653: inode #4: comm syz.1.2038: corrupted inode contents [ 137.453002][ T8926] EXT4-fs error (device loop1): ext4_dirty_inode:6538: inode #4: comm syz.1.2038: mark_inode_dirty error [ 137.475004][ T8926] EXT4-fs error (device loop1): ext4_do_update_inode:5653: inode #4: comm syz.1.2038: corrupted inode contents [ 137.490277][ T8926] EXT4-fs error (device loop1): __ext4_ext_dirty:206: inode #4: comm syz.1.2038: mark_inode_dirty error [ 137.502834][ T8926] EXT4-fs error (device loop1): ext4_acquire_dquot:6937: comm syz.1.2038: Failed to acquire dquot type 1 [ 137.535593][ T3310] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 137.549475][ T8933] netlink: 'syz.3.2044': attribute type 10 has an invalid length. [ 137.815933][ T8959] 9pnet_fd: Insufficient options for proto=fd [ 137.893558][ T2957] hid-generic 0000:0006:0007.0028: hidraw0: HID v0.0b Device [syz1] on syz1 [ 137.930141][ T8980] loop1: detected capacity change from 0 to 1024 [ 137.931425][ T8975] loop3: detected capacity change from 0 to 512 [ 137.947217][ T8980] usb usb1: check_ctrlrecip: process 8980 (+}[@) requesting ep 01 but needs 81 [ 137.956825][ T8980] vhci_hcd: default hub control req: 020f v0004 i0001 l0 [ 137.968378][ T8975] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 137.991583][ T8975] ext4 filesystem being mounted at /387/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 138.058231][ T3313] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 138.082040][ T8995] 9pnet_fd: Insufficient options for proto=fd [ 138.116684][ T3393] Process accounting resumed [ 138.124531][ T9001] loop4: detected capacity change from 0 to 512 [ 138.130449][ T9003] loop3: detected capacity change from 0 to 736 [ 138.131528][ T9001] EXT4-fs: Ignoring removed mblk_io_submit option [ 138.147081][ T9001] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 138.158754][ T9001] EXT4-fs (loop4): 1 truncate cleaned up [ 138.165525][ T9001] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 138.179612][ T3386] hid_parser_main: 255 callbacks suppressed [ 138.179628][ T3386] hid-generic 0000:0006:0007.0029: unknown main item tag 0x0 [ 138.193746][ T3386] hid-generic 0000:0006:0007.0029: unknown main item tag 0x0 [ 138.201180][ T3386] hid-generic 0000:0006:0007.0029: unknown main item tag 0x0 [ 138.208630][ T3386] hid-generic 0000:0006:0007.0029: unknown main item tag 0x0 [ 138.216109][ T3386] hid-generic 0000:0006:0007.0029: unknown main item tag 0x0 [ 138.223647][ T3386] hid-generic 0000:0006:0007.0029: unknown main item tag 0x0 [ 138.231077][ T3386] hid-generic 0000:0006:0007.0029: unknown main item tag 0x0 [ 138.238527][ T3386] hid-generic 0000:0006:0007.0029: unknown main item tag 0x0 [ 138.246035][ T3386] hid-generic 0000:0006:0007.0029: unknown main item tag 0x0 [ 138.253471][ T3386] hid-generic 0000:0006:0007.0029: unknown main item tag 0x0 [ 138.262662][ T3386] hid-generic 0000:0006:0007.0029: hidraw0: HID v0.0b Device [syz1] on syz1 [ 138.294803][ T9011] netlink: 'syz.3.2074': attribute type 10 has an invalid length. [ 138.350315][ T9015] loop3: detected capacity change from 0 to 4096 [ 138.359140][ T9015] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 138.428827][ T3313] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 138.588166][ T3386] hid-generic 0000:0006:0007.002A: hidraw0: HID v0.0b Device [syz1] on syz1 [ 138.622641][ T9007] ================================================================== [ 138.631106][ T9007] BUG: KCSAN: data-race in filemap_write_and_wait_range / xas_set_mark [ 138.639580][ T9007] [ 138.642014][ T9007] write to 0xffff888119844b3c of 4 bytes by task 9001 on cpu 1: [ 138.650047][ T9007] xas_set_mark+0x12b/0x140 [ 138.654765][ T9007] __folio_start_writeback+0x1dd/0x440 [ 138.660369][ T9007] ext4_bio_write_folio+0x5ad/0x9f0 [ 138.665593][ T9007] mpage_process_page_bufs+0x4a1/0x620 [ 138.671070][ T9007] mpage_prepare_extent_to_map+0x786/0xc00 [ 138.676892][ T9007] ext4_do_writepages+0xa05/0x2750 [ 138.682123][ T9007] ext4_writepages+0x176/0x300 [ 138.686988][ T9007] do_writepages+0x1c3/0x310 [ 138.691730][ T9007] file_write_and_wait_range+0x156/0x2c0 [ 138.697490][ T9007] generic_buffers_fsync_noflush+0x45/0x120 [ 138.703499][ T9007] ext4_sync_file+0x1ab/0x690 [ 138.708395][ T9007] vfs_fsync_range+0x10d/0x130 [ 138.713289][ T9007] ext4_buffered_write_iter+0x34f/0x3c0 [ 138.719151][ T9007] ext4_file_write_iter+0xdbf/0xf00 [ 138.724461][ T9007] iter_file_splice_write+0x663/0xa60 [ 138.729947][ T9007] direct_splice_actor+0x153/0x2a0 [ 138.735247][ T9007] splice_direct_to_actor+0x30f/0x680 [ 138.740633][ T9007] do_splice_direct+0xda/0x150 [ 138.745503][ T9007] do_sendfile+0x380/0x650 [ 138.749963][ T9007] __x64_sys_sendfile64+0x105/0x150 [ 138.755270][ T9007] x64_sys_call+0x2bb0/0x2ff0 [ 138.760054][ T9007] do_syscall_64+0xd2/0x200 [ 138.764670][ T9007] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 138.770578][ T9007] [ 138.772993][ T9007] read to 0xffff888119844b3c of 4 bytes by task 9007 on cpu 0: [ 138.780649][ T9007] filemap_write_and_wait_range+0xfc/0x340 [ 138.786486][ T9007] filemap_invalidate_pages+0xa4/0x1a0 [ 138.791967][ T9007] kiocb_invalidate_pages+0x6e/0x80 [ 138.797345][ T9007] __iomap_dio_rw+0x5d4/0x1250 [ 138.802208][ T9007] iomap_dio_rw+0x40/0x90 [ 138.806563][ T9007] ext4_file_write_iter+0xad9/0xf00 [ 138.811867][ T9007] iter_file_splice_write+0x663/0xa60 [ 138.817354][ T9007] direct_splice_actor+0x153/0x2a0 [ 138.822566][ T9007] splice_direct_to_actor+0x30f/0x680 [ 138.828049][ T9007] do_splice_direct+0xda/0x150 [ 138.832832][ T9007] do_sendfile+0x380/0x650 [ 138.837271][ T9007] __x64_sys_sendfile64+0x105/0x150 [ 138.842499][ T9007] x64_sys_call+0x2bb0/0x2ff0 [ 138.847285][ T9007] do_syscall_64+0xd2/0x200 [ 138.852128][ T9007] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 138.858045][ T9007] [ 138.860384][ T9007] value changed: 0x0a000021 -> 0x04000021 [ 138.866104][ T9007] [ 138.868531][ T9007] Reported by Kernel Concurrency Sanitizer on: [ 138.875397][ T9007] CPU: 0 UID: 0 PID: 9007 Comm: syz.4.2068 Not tainted syzkaller #0 PREEMPT(voluntary) [ 138.885763][ T9007] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 138.896031][ T9007] ================================================================== [ 138.993358][ T3315] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.