last executing test programs: 5.158286081s ago: executing program 0 (id=969): syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r0, 0x0, 0x40006) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f00000000c0)={'syztnl0\x00', &(0x7f0000000180)={'sit0\x00', 0x0, 0x700, 0x7800, 0x7, 0x5, {{0x1a, 0x4, 0x1, 0x9, 0x68, 0x64, 0x0, 0xd, 0x4, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @private=0xa010102, {[@lsrr={0x83, 0x13, 0xec, [@remote, @multicast1, @loopback, @local]}, @rr={0x7, 0x7, 0x97, [@remote]}, @end, @lsrr={0x83, 0x7, 0xf, [@rand_addr=0x64010101]}, @ra={0x94, 0x4}, @cipso={0x86, 0x2d, 0xffffffffffffffff, [{0x6, 0xe, "b981e1144a3406e8bb4d3a96"}, {0x0, 0x9, "a99164d005aeb1"}, {0x5, 0xd, "7057d1f49221cb1ade7950"}, {0x1, 0x3, "d6"}]}]}}}}}) r3 = socket(0x10, 0x803, 0x0) getsockname$packet(r3, &(0x7f00000004c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x58) sendmsg$nl_route(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="4800000010000507000000000000000000000002", @ANYRES32=r4, @ANYBLOB="0000400000000002280012000c00010076657468"], 0x48}}, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000500)={0xffffffffffffffff, 0x0, 0x0}, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000540)={'batadv_slave_1\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000600)={'syztnl0\x00', &(0x7f0000000580)={'syztnl1\x00', 0x0, 0x4, 0x4, 0x81, 0x1, 0x5, @ipv4={'\x00', '\xff\xff', @private=0xa010101}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x7800, 0x7800, 0x101, 0x55b5c3b6}}) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) r9 = socket$inet_sctp(0x2, 0x1, 0x84) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$ETHTOOL_MSG_WOL_GET(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000400)={0x20, r8, 0x1, 0x70bd29, 0x0, {0x1b}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}]}]}, 0x20}}, 0x0) r11 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r11, &(0x7f0000000000), 0x10) ioctl$ifreq_SIOCGIFINDEX_vcan(r11, 0x8933, &(0x7f0000000100)={'vxcan0\x00', 0x0}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r0, &(0x7f0000000380)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000300)={&(0x7f0000000880)={0x4c, 0x0, 0x800, 0x70bd26, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_CRIT_PROT_ID={0x6, 0xb3, 0x2}, @NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0xabe}, @NL80211_ATTR_CRIT_PROT_ID={0x6, 0xb3, 0x1}, @NL80211_ATTR_CRIT_PROT_ID={0x6, 0xb3, 0x3}, @NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0x722}, @NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0x792}, @NL80211_ATTR_CRIT_PROT_ID={0x6, 0xb3, 0x3}]}, 0x4c}, 0x1, 0x0, 0x0, 0xc040}, 0x8000) r13 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000200)=ANY=[@ANYBLOB="9feb010018000000000000003c0000003c00000006000000040000000000000e0400000000000000000000000100000d0400000004000000040000000000000000000010040000000000000000000002030000000000000061"], 0x0, 0x5a, 0x0, 0x4, 0x80000}, 0x28) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f00000000c0)={r13, 0x20, &(0x7f0000000080)={&(0x7f0000001680)=""/4098, 0x1002, 0x0, &(0x7f0000000000)=""/65, 0x41}}, 0x10) sendmsg$can_bcm(r11, &(0x7f0000000480)={&(0x7f0000000340)={0x1d, r12}, 0x10, &(0x7f00000000c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="01000000d7fe68ca0000000000000000", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYBLOB="0000000004"], 0x20000600}}, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f00000006c0)={'syztnl0\x00', &(0x7f0000000640)={'ip6_vti0\x00', 0x0, 0x4, 0x2, 0x47, 0x1, 0x40, @mcast1, @private0={0xfc, 0x0, '\x00', 0x1}, 0x20, 0x7860, 0x7f, 0x80000001}}) sendmsg$ETHTOOL_MSG_COALESCE_GET(0xffffffffffffffff, &(0x7f0000000840)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000800)={&(0x7f0000000700)={0xd0, r1, 0x10, 0x70bd2a, 0x25dfdbfe, {}, [@HEADER={0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_virt_wifi\x00'}]}, @HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_bridge\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}]}, @HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r12}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r14}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netpci0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}]}, 0xd0}, 0x1, 0x0, 0x0, 0x24000000}, 0x24000000) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x1000000000021, 0x0, 0x0) 5.157262232s ago: executing program 1 (id=970): perf_event_open(&(0x7f0000000300)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0xff, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000, 0x0, @perf_config_ext={0x1, 0x7}, 0x402, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000880)={&(0x7f0000000700)=ANY=[@ANYBLOB="380000001200050104000000ffdbdf2528001a00ac1414aa000000000000000000000000fe880000000000000000000000000101020006108a25fd9e5f053556f9c1b140a79a14086a29dcbef1b1d5ea8a6deab68207cacc38a7069d132942f13ad88c69c5a9585ccaaa84ad4f911a4506076a3af042ba82eb8b93ec94140fc69a7f99c5f286f6d7304e59dc63f4e1349a5d9e9cade823008ace0e8af8ced8555627804a"], 0x38}, 0x13, 0x0, 0x0, 0x880}, 0x20040840) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8d}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000a00)={0x11, 0x2, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0xb, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x10, 0xfffffff9}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2, 0x0, 0x1}, 0x18) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) poll(&(0x7f00000002c0)=[{r4, 0x2}], 0x1, 0xfa) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="1805000000000000000000004b64ffec8500000075000000040000000700000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x10) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x101d81, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) syz_clone3(&(0x7f00000004c0)={0xa690b000, &(0x7f0000000040), 0x0, 0x0, {}, &(0x7f0000000100)=""/161, 0xa1, 0x0, 0x0}, 0x58) r7 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000300)={'rose0\x00', 0x0}) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="2000000011000100"/20, @ANYRES32=r8], 0x20}}, 0x0) r10 = dup2(r3, r4) syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), r10) poll(&(0x7f0000000080)=[{r10, 0x4000}, {r4, 0x3}], 0x2, 0xffff8001) r11 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0xc, &(0x7f0000000400)=ANY=[@ANYBLOB="18020000020000f500000000000000008500000041000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000008000000850000000600000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$MRT6_ADD_MFC_PROXY(r10, 0x29, 0xd2, &(0x7f00000007c0)={{0xa, 0x4e23, 0x2, @mcast1, 0x6}, {0xa, 0x4e22, 0x1, @local, 0x1ff}, 0xffffffffffffffff, {[0x8, 0x2, 0x7, 0xffff7fff, 0x0, 0x40, 0x0, 0x5]}}, 0x5c) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r11, 0x0, 0x2100, 0x0, &(0x7f0000000100), 0x0, 0x1008, 0x0, 0x0, 0xffffffffffffff55, 0x0, 0x0, 0x0, 0x9}, 0x50) sendmsg$DEVLINK_CMD_SB_POOL_SET(r10, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000040)={&(0x7f00000004c0)=ANY=[@ANYBLOB="08020000", @ANYRES16=0x0, @ANYBLOB="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"], 0x208}, 0x1, 0x0, 0x0, 0x4080}, 0x4) 4.826124243s ago: executing program 0 (id=973): perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xc}, 0x110200, 0x318, 0x0, 0x3, 0x76, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_clone(0x26801000, 0x0, 0x0, 0x0, 0x0, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000001200)={&(0x7f00000004c0)=ANY=[@ANYBLOB="38000000031401002dbd7000000000000900020073797a30000000000800410073697700140033006c6f"], 0xffaf}, 0x1, 0x0, 0x0, 0x854}, 0x804) r1 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r1, &(0x7f0000000140), 0x10) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYRES8=r1], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000005c0)={0x3, 0xc, &(0x7f0000000980)=ANY=[@ANYBLOB="18000000000000000000000000000074d89ffe30b956a03db0ffbc1ad5fda6f384caf2ba2cbc944f9170e5c8b29d08e808bddf2fc68aa8792f888715e7e93430460b858caebbe60636a7a003441dec12954df906eaa6afd6f77b14f4cbbbb86c8ebe3293ed9a067e56a9c1921e22906209c405dc063ee53b4d0c22951e0d91ae6a51d33e3c56cdea9e7685e59a7c2f153da9ca6846d8d59af60c169e9fef7a4863a316f2793491ce9f612953e7b4579f483d04e38ffc15d2088fe62f05d98f6a38bf2e4a97f30c675de50d9170d0", @ANYBLOB="c60a9b822d1fccc877ec3affd829704726410a2c2927261339c870bd8286b83b23088f39ff49d53792b69f1d4939f73ee323d550adf9c0a731f7920da09fafe452ecd77f803bb4f00f444b9d699ae5a4511a63df8fd988d7b1996f479f95a56409e39d58852d392f7ec88689e82c08cd6a8b05c1611970c5ad6128dedb2b4e0e1be75f975c7874acfdb610a96a76e256ffa66965a95645c2ac37c10c876c", @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x25, r2, 0x8, 0x0, 0x0, 0x10, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0xd, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sock_ops=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x94) r3 = epoll_create1(0x80000) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) sendmmsg$unix(r4, &(0x7f0000000040), 0x0, 0x211) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r3, &(0x7f0000000200)={0xe0000003}) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) setxattr$security_evm(&(0x7f0000000000)='./file0\x00', &(0x7f00000003c0), 0x0, 0x0, 0x1) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'veth0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r8, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xffe0}}, [@qdisc_kind_options=@q_mq={0x7}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000000}, 0x24040884) sendmsg$nl_route_sched(r6, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)=@newqdisc={0x24, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xffffddfc, {0x0, 0x0, 0x0, r8, {0x3, 0x9}, {}, {0x2, 0x1}}}, 0x24}, 0x1, 0x0, 0x0, 0x40098}, 0x4000000) listxattr(&(0x7f00000001c0)='./file0\x00', &(0x7f0000002380)=""/4090, 0xffa) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB="1c00000019000100000000000000000002000000000400008e160000"], 0x1c}}, 0x0) r9 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) close_range(r9, 0xffffffffffffffff, 0x0) writev(0xffffffffffffffff, &(0x7f0000000800)=[{&(0x7f0000001880)="64e7", 0x2}, {0x0}, {&(0x7f0000000040)="ac1440faab99bfc5a3cfef4ed7d662176dbc7ebf9e57949cd0c145a799cb9d1f32b7", 0x22}, {&(0x7f0000000680)="b0002c67e2bd45c03817be3720e7974e4401b44d5f4750c3d88bc27332cbef82a01e31b28af47652441ac22f51fa15cc591a5051495cbd7368f64dcdec47e28d9cb19266d31654c9b7e791c385ccb881f6aeabc9117b5a260c26a8b62f6444df17c3e6311065f451e88025ed22c4afb14fba4cfa067eb8e8f947ec7c58aaf9e814adfc6a8e1d5135423ef179ba8d4069e3675cffd86497990c0b3192921ef4a68e9ec897a76d7575ecaa79ccd7ba527f40cc27a64c556190cb83e5ff64bc6fb97619a1b127e9ccb07a17ac957aa23c7833ab72db650b610815172da4c92a5650b5cc485dbb3699c2bafb49e4c7f06b38e910", 0xf2}, {&(0x7f0000000780)="fedc065d7cb860f7b609d6d350cfdf1b5946875e6bb5835e8763520cb7e68b413d3d37b356a5b5fb9c81c65ca89e341bf1e9b38cb897c61013d219d84f06cd0f64526965e65a13ab514ff262961397f9f5af", 0x52}], 0x5) 4.778282578s ago: executing program 2 (id=974): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getpid() r0 = fsopen(&(0x7f0000000100)='ramfs\x00', 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x2400, 0x9) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) fsmount(r0, 0x0, 0x77) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000181100"/20, @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000005700000095"], 0x0, 0x75, 0x0, 0x0, 0x0, 0x2}, 0x94) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="17000000000000000400000003"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb70300000800"], 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) syz_clone(0x41aa1000, 0x0, 0x0, 0x0, 0x0, 0x0) request_key(&(0x7f0000000340)='user\x00', &(0x7f0000000380)={'syz', 0x3}, &(0x7f00000003c0)=')\x00', 0x0) r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000000c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r5}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000000)='GPL\x00', 0xa, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$kcm(0x2, 0x1000000000000002, 0x0) 4.087381723s ago: executing program 1 (id=980): r0 = socket$rds(0x15, 0x5, 0x0) bind$rds(r0, &(0x7f0000000040)={0x2, 0x4e22, @loopback}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x1a, 0x8, 0x0, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, &(0x7f0000000180)={0xffffffff}, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) modify_ldt$write2(0x11, &(0x7f0000000400)={0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x10) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r3}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000040)={{}, &(0x7f0000000000), &(0x7f00000005c0)=r3}, 0x20) syz_clone(0x26801000, 0x0, 0x0, 0x0, 0x0, 0x0) r4 = syz_open_dev$sg(&(0x7f0000000000), 0xfffffffffffffffa, 0x2a200) ioctl$SCSI_IOCTL_GET_BUS_NUMBER(r4, 0x5386, &(0x7f0000000100)) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'batadv0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000000c0)=@newtfilter={0x24, 0x11, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x74, r5, {}, {}, {0x6}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x40d5}, 0x0) r6 = syz_open_procfs(0x0, &(0x7f0000000180)='smaps_rollup\x00') lseek(r6, 0x10000000005, 0x0) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="03000000040000000400", @ANYRES32, @ANYBLOB="7f05000000000000000000000c00000000000000", @ANYRES32=r5, @ANYBLOB], 0x50) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0xd, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{r7}, &(0x7f0000000200), &(0x7f0000000240)=r8}, 0x20) r9 = bpf$PROG_LOAD(0x5, 0x0, 0x0) r10 = socket(0x10, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(r10, 0x8946, &(0x7f0000004780)={'syz_tun\x00', &(0x7f0000000400)=@ethtool_link_settings={0x4d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x80000, 0xf2a]}}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r9}, 0x10) 3.941467717s ago: executing program 0 (id=981): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000021007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x11, 0x8, &(0x7f00000037c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x49) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000380)='sys_enter\x00', r2}, 0x18) lsm_set_self_attr(0x69, 0x0, 0x20, 0x0) syz_io_uring_setup(0x62bd, &(0x7f0000000080)={0x0, 0x2be8, 0x2000, 0x1, 0x2d}, &(0x7f0000000140)=0x0, &(0x7f00000001c0)) syz_io_uring_setup(0x49a, &(0x7f0000000200)={0x0, 0xbec9, 0x0, 0x7ffc, 0x258}, &(0x7f0000000140)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4) io_setup(0xa, &(0x7f0000000e40)=0x0) r7 = syz_io_uring_setup(0x2af8, &(0x7f00000000c0)={0x0, 0x0, 0x13090}, &(0x7f0000000340), &(0x7f0000000080)) io_submit(r6, 0x1, &(0x7f00000008c0)=[&(0x7f0000000280)={0x0, 0x0, 0x0, 0x5, 0x0, r7, 0x0}]) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000040)='./file1\x00', 0x21081e, &(0x7f00000001c0)={[{@grpquota}, {@nogrpid}, {@quota}]}, 0x1, 0x4fa, &(0x7f00000005c0)="$eJzs3c9vG1kdAPCvnThx0uwmu+wBEOyW3YWCqjqJuxut9gDLCSFUCdEjSG1I3CiKHUexU5rQQ3rmikQlTnDkD+DcE3cuCG5cygGJHxGoQeLg1YwnqZvaTdQkdhR/PtJo3ps39fe9pvNe/U3iF8DQuhoRuxExFhF3I2I6u57LjvisfST3Pdt7uLS/93ApF63W7X/l0vbkWnT8mcSV7DWLEfGj70X8NPdy3Mb2ztpitVrZzOqzzdrGbGN758ZqbXGlslJZL5cX5hfmPrn5cfnMxvpebSwrffXpH3e/9fOkW1PZlc5xnKX20AuHcRKjEfGD8wg2ACPZeMYG3RFeSz4i3o6I99PnfzpG0q8mAHCZtVrT0ZrurAMAl10+zYHl8qUsFzAV+Xyp1M7hvROT+Wq90bx+r761vtzOlc1EIX9vtVqZy3KFM1HIJfX5tPy8Xj5SvxkRb0XEL8cn0nppqV5dHuR/fABgiF05sv7/d7y9/gMAl1xx0B0AAPrO+g8Aw8f6DwDDx/oPAMOnvf5PDLobAEAfef8PAMPH+g8AQ+WHt24lR2s/+/zr5fvbW2v1+zeWK421Um1rqbRU39wordTrK+ln9tSOe71qvb4x/1FsPZj59kajOdvY3rlTq2+tN++kn+t9p1JI79rtw8gAgF7eeu/JX3LJivzpRHpEx14OhYH2DDhv+UF3ABiYkUF3ABgYu33B8DrFe3zpAbgkumzR+4Jit18QarVarfPrEnDOrn1J/h+GVUf+308Bw5CR/4fhJf8Pw6vVyp10z/846Y0AwMUmxw/0+P7/29n5d9k3B36yfPSOx+fZKwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALjYDvb/LWV7gU9FPl8qRbwRETNRyN1brVbmIuLNiPjzeGE8qc8PuM8AwGnl/57L9v+6Nv3h1AtN7145LI5FxM9+fftXDxabzc0/RYzl/j1+cL35OLte7n/vAYDjHazT6bnjjfyzvYdLB0c/+/OP70ZEsR1/f28s9g/jj8Zoei5GISIm/5PL6m25jtzFaew+iogvdht/LqbSHEh759Oj8ZPYb/Q1fv6F+Pm0rX1O/i6+cAZ9gWHzJJl/Puv2/OXjanru/vwX0xnq9LL5L3mppf10Dnwe/2D+G+kx/109aYyP/vD9dmni5bZHEV8ejTiIvd8x/xzEz/WI/+EJ4//1K+++36ut9ZuIa9E9fmes2WZtY7axvXNjtba4UlmprJfLC/MLc5/c/Lg8m+aoZ3uvBv/89PqbvdqS8U/2iF88ZvxfP+H4f/v/uz/+2ivif/ODbvHz8c4r4idr4jdOGH9x8vfFXm1J/OUe4z/u63/9hPGf/m3npW3DAYDBaWzvrC1Wq5VNBYWLX0j+yV6AbnQtfKdfscaie9MvPmg/00eaWq3XitVrxjiLrBtwERw+9BHxv0F3BgAAAAAAAAAAAAAA6Kofv7E06DECAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABweX0eAAD//19xzyM=") quotactl$Q_SETQUOTA(0xffffffff80000800, &(0x7f0000000100)=@loop={'/dev/loop', 0x0}, 0x0, &(0x7f0000000280)={0x7, 0x6, 0x800077, 0x20800000000415, 0x6, 0x7, 0x1000, 0xf67, 0xfffffffc}) lchown(&(0x7f0000000080)='./file1\x00', 0xee01, 0xffffffffffffffff) chown(&(0x7f0000000000)='./file1\x00', 0x0, 0x0) syz_io_uring_submit(r4, r5, &(0x7f00000002c0)=@IORING_OP_TIMEOUT={0xb, 0x11, 0x0, 0x0, 0x0, &(0x7f0000000100), 0x1, 0x40, 0x1}) syz_io_uring_submit(r3, r5, &(0x7f0000000200)=@IORING_OP_NOP={0x0, 0x1}) fcntl$F_SET_RW_HINT(r0, 0x40c, &(0x7f0000000480)=0x1) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f00000004c0)='kfree\x00', r1}, 0x18) unshare(0x2c020400) r8 = syz_io_uring_setup(0x5ec4, &(0x7f0000000340)={0x0, 0x6a59, 0x1, 0x3, 0x119}, &(0x7f0000000440), &(0x7f0000000bc0)=0x0) io_uring_setup(0x75a2, &(0x7f00000002c0)={0x0, 0x400b7b, 0x20, 0x3, 0x273, 0x0, r8}) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x11, 0x8, &(0x7f0000000200)=ANY=[@ANYRES8=r9], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000)={0x0, 0x9, 0x0, 0x4}, 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0xfffffffe}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='kfree\x00', r10}, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a58000000160a0302000200000000000002000000090002"], 0x80}}, 0x0) r11 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r11, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a30000000006c000000160a01000000000000000000010000000900010073797a30000000000900020073797a3000000000400003800800014000000000080002400000fbff2b0003801400010067656e6576653000000000000000000014000100776732000000000000000000c6e49c0f5c000000180a0101000b000000000000010000000900020073797a30000000000900010073797a3000000000300003802c000380140001"], 0x110}}, 0x0) r12 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000600), 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r12, 0xc08c5332, &(0x7f00000003c0)={0x9cd, 0x80000000, 0x0, 'queue1\x00', 0x95}) 3.736283946s ago: executing program 0 (id=982): prlimit64(0x0, 0xe, &(0x7f0000000780)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000240)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000100)='mountinfo\x00') pread64(r3, &(0x7f0000000200)=""/4098, 0x1002, 0xd37) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000080)=ANY=[], &(0x7f0000000000)='syzkaller\x00'}, 0x94) syz_mount_image$ext4(&(0x7f0000000200)='ext4\x00', &(0x7f00000001c0)='./bus\x00', 0x800714, &(0x7f0000000180)={[{@dioread_nolock}, {@jqfmt_vfsv0}]}, 0xff, 0x4a9, &(0x7f0000000580)="$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") r4 = msgget(0x2, 0x100) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) r6 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r6, 0x29, 0x22, &(0x7f0000000b00)={{{@in=@private, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@private1}, 0x0, @in6}}, &(0x7f0000000500)=0xe8) quotactl$Q_QUOTAON(0xffffffff80000201, &(0x7f00000004c0)=@nullb, r7, &(0x7f00000005c0)='./file1/file0\x00') sendmsg$nl_xfrm(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@updpolicy={0xb8, 0x13, 0xcb23c9c9931e99e9, 0x0, 0x0, {{@in6=@private1={0xfc, 0x1, '\x00', 0x1}, @in=@remote, 0x0, 0x400, 0x1000, 0x0, 0x2, 0x20, 0x20, 0x84, 0x0, r7}, {}, {0x0, 0x4000000000000}}}, 0xb8}}, 0x0) r8 = getegid() r9 = getuid() getresgid(&(0x7f0000000340), &(0x7f0000000380), &(0x7f0000000440)=0x0) msgctl$IPC_SET(r4, 0x1, &(0x7f0000000480)={{0x1, r7, r8, r9, r10, 0x82, 0x401}, 0x0, 0x0, 0x40, 0x3, 0x10000, 0x40, 0xffffffffffff34c7, 0xfffa, 0xd7b, 0x7ff, r0, r0}) socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000000)={'lo\x00'}) 3.525802546s ago: executing program 4 (id=983): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000680)=@newsa={0x160, 0x10, 0x713, 0x70bd2c, 0x25dfdbfc, {{@in6=@private2, @in=@remote, 0x0, 0x20, 0x4e21, 0x2, 0x2, 0x0, 0x0, 0x3b, 0x0, 0xee00}, {@in6=@private1, 0xfe, 0x32}, @in=@empty, {0x0, 0x0, 0x0, 0x8, 0x3, 0x0, 0x5, 0x543}, {0x5, 0x7fffffffffffffff}, {}, 0x70bd28, 0x3500, 0xa, 0x4}, [@algo_aead={0x60, 0x12, {{'rfc4106(gcm(aes))\x00'}, 0xa0, 0x60, "217d66d38547aa140db8a200000000c538c7cb7a"}}, @replay_val={0x10, 0xa, {0x70bd2c, 0x70bd26, 0xf}}]}, 0x160}, 0x1, 0x0, 0x0, 0x880}, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000340)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) perf_event_open$cgroup(&(0x7f0000000180)={0x5, 0x80, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x4, @perf_bp={0x0, 0x8}, 0x4010, 0x0, 0x0, 0x0, 0x3, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, @perf_config_ext, 0x0, 0x6, 0x7}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x20, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800"/15, @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000040)={{}, 0x0, &(0x7f0000000240)=r2}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) write$qrtrtun(0xffffffffffffffff, &(0x7f0000000900), 0x0) bpf$BPF_LINK_CREATE_XDP(0x1c, 0x0, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a38000000030a01010000000000000000020000080c00024000000000000000020900010073797a30000000000900010073797a3100000000bc0000001a0a030300000000000000000a000003080002400000000008000240000000030c000440"], 0x56c}}, 0x10) bpf$OBJ_GET_PROG(0x7, &(0x7f0000001480)=@generic={0x0, 0x0, 0x18}, 0x18) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x1ffffffc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r4}, &(0x7f0000bbdffc)) futex(&(0x7f000000cffc)=0x4, 0x80000000000b, 0x4, 0x0, &(0x7f0000048000), 0x0) timer_settime(0x0, 0x1, &(0x7f00000002c0)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) fsetxattr$security_capability(r1, &(0x7f0000000280), 0x0, 0x0, 0x0) r5 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x0) ioctl$EVIOCGMASK(r5, 0x80104592, &(0x7f0000000300)={0x0, 0xffffffffffffff36, &(0x7f0000000200)="952bb3e006ae9a4c3a"}) syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(0x0, r6) sendmsg$ETHTOOL_MSG_TSINFO_GET(r6, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000003c0)=ANY=[@ANYBLOB, @ANYRES16=r6, @ANYBLOB="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"], 0x2c}, 0x1, 0x0, 0x0, 0x20048881}, 0x2000c800) 2.702804094s ago: executing program 1 (id=984): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="05000000040000009900000001"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x18) r2 = fspick(0xffffffffffffff9c, &(0x7f0000000380)='./file0\x00', 0x1) fsmount(r2, 0x1, 0x8f) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000180)=[{0x200000000006, 0x0, 0x0, 0x7ffc0001}]}) fcntl$setlease(0xffffffffffffffff, 0x400, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000080000007b8af8ff00000000bfa200000000000007020000f8ffffffb70300fc07000000b70400000000000085000000030000009500000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000007000000010005000900000001"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x11, 0xc, &(0x7f0000000340)=ANY=[@ANYRESHEX], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x71864369b3666c7c, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000200)='qdisc_reset\x00', r4}, 0x10) r5 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000200)='qdisc_reset\x00', r3}, 0x10) socket$packet(0x11, 0x2, 0x300) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)={0x28, r7, 0x1, 0x70bd27, 0x0, {}, [@NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc}]}, 0x28}}, 0x0) r8 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r8}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r9 = mq_open(&(0x7f0000000000)='bat\x03<\x02eslave_K\x00', 0x8c2, 0x30, &(0x7f0000000080)={0x8000000000000000, 0x8, 0x1, 0xc05}) mq_getsetattr(r9, &(0x7f0000000040)={0x0, 0x40, 0x4, 0x7ff}, 0x0) signalfd4(r5, &(0x7f00000004c0)={[0x7]}, 0x8, 0x0) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000580)={0x2}, 0x8) bpf$PROG_LOAD(0x5, 0x0, 0x0) mq_timedreceive(r9, &(0x7f0000000100)=""/90, 0x5a, 0x0, &(0x7f00000001c0)={0x77359400}) 2.629052411s ago: executing program 2 (id=985): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB, @ANYRES32, @ANYBLOB="9b5800"/20, @ANYRES32=0x0, @ANYRES32], 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f0000000240)='./file2\x00', 0x2000410, &(0x7f0000000000)={[{@bsdgroups}, {@jqfmt_vfsv1}]}, 0xc1, 0x7e9, &(0x7f00000017c0)="$eJzs3c1rHG8dAPDvbF42SauJIGh7CggaKN2YGlsFDxEPIlgo6Nk2bLahZpMt2U1pQqDpQfAiqHgQ9NKzL/UgePXlqv+EeJAW0TRYT7oys7t53d0kbXa3/fXzgck8M/PMPPPN88yzz+4MuwF8sKbTP7mIKxHxwyRisrk+iYiRLDUcsdDI93p3u5hOSdTr3/pnkuX57aWDYyXN+aXmwqcj4o/fi7iWO17qeHNeLq03U7O11Yez1c2t6w9WF5dLy6W1m3Pz8zduffHWzZN7val//2Xr8ssfff1zv14Yjk89/8GfkliIy81te7vbxbc8/AnTMd38n4yk/8IjvnbRhQ1YMugT4I2kl+ZQ4yqPKzEZQ1mqg7e9AAGAd8KTiKgDAB+Y5LTX/yFDBAD4aGl9DrC3u11sTYP9RKK//vHViBhrxN+6v9nYMty8ZzeW3Qed2EuO3BlJImLqAsqfjoif/+47v0yn6NF9SIB2dp425nu7+WP9f5L2f6OnHyHfccvnu+1Wb+w3fWy1/g/65/fp+OdLJ8d/V/cf6BnL/h4b/4zl21y7b+L06z/3osOuZ+ibTpeO/75y6Nm2g/Hf/kNrU0PNpY9lY76R5P6Dcint2z4eETMxkk+X57Ks7Z+Cmnn131edyj88/vvXj7/7i7T8dH6QI/diOB/1xnN5/8vG60uLtcWLiD2L/2nE1eF28Sf749/kSP0v7Ed6p+NRj1bNN778/Z91ypnGn8bbmk7G31v1ZxGfbVv/B3WZdH0+cTZrDrOtRtHGb/7204lO5R/Ufz6bp+W33gv0Q1r/E93jn0pT1c2tlcVyubRePX8Zf342+YdO2w63//bxZ+3/iLT9jybfztKtlvZ4sVZbn4sYTb55cv2Ng31by638afwzn2l//bdv/42+IH1PeG9/qbvhl6O/ah6qbfyZnU7x91Ya/9K56r9Lot7c59im569XhjqVf7b6n89SM801Z+n/TjnTt2jNAAAAAAAAAAAAAAAAAAAAAAAAAHB+uYi4HEmusJ/O5QqFxm94fzImcuVKtXbtfmVjbSmy38qeipFc66suJw99H+pc8/vwW8s3ji1/ISI+ERE/yY9ny4Vipbw06OABAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAoOnS0d//f5LOCoXGtr/nB312AEDPjA36BACAvvP6DwAfnvO9/o/37DwAgP459/v/etKbEwEA+ubMr//3enseAED/uP8PAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABAj925fTud6v/Z3S6my0uPNjdWKo+uL5WqK4XVjWKhWFl/WFiuVJbLpUKxstrxQDuNWblSeTgfaxuPZ2ulam22url1d7WysVa7+2B1cbl0tzTSt8gAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA4Oyqm1sri+VyaV2iS2K8NN45TxIRAz/D0xJpXV/kAYff0ZB3/jqSteuumWPqvWn8o13yJBdZ1vjxNYd7ifFBdE0AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA74X/BwAA///YTBJy") prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r1 = gettid() timer_create(0x0, &(0x7f0000000180)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) r2 = getpid() r3 = gettid() rt_tgsigqueueinfo(r2, r3, 0x15, &(0x7f0000000000)={0x17, 0x3, 0x80}) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r4) sendmsg$NL80211_CMD_GET_SCAN(r4, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000000ec0)={&(0x7f0000000e80)={0x1c, r5, 0xb29, 0x0, 0x0, {{}, {@val={0x5}, @void}}}, 0x1c}}, 0x2404c044) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="b1921d91d43a", @ANYRES16=r5, @ANYBLOB="200029bd7000fedbdf2544000000040070000a0018000303030303030000"], 0x24}, 0x1, 0x0, 0x0, 0x4004084}, 0x4008080) futex(&(0x7f000000cffc)=0x1, 0x86, 0x2, 0x0, 0x0, 0xfffffffc) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r6, &(0x7f0000000000), 0x208e24b) ptrace$getregs(0xc, 0x0, 0x3, &(0x7f00000002c0)=""/126) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x28011, r6, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x9) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) mbind(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x0, 0x2) write(0xffffffffffffffff, &(0x7f0000000040), 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000001000), 0xffff) bpf$TOKEN_CREATE(0x24, 0x0, 0x0) 2.475324346s ago: executing program 1 (id=986): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000080)=@setlink={0x3c, 0x13, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x80c2, 0x41012}, [@IFLA_TARGET_NETNSID={0x8}, @IFLA_ALT_IFNAME={0x0, 0x35, 'dummy0\x00'}]}, 0x3c}}, 0x40000) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="0700000004000000080200000e"], 0x50) r2 = socket(0x10, 0x3, 0x0) r3 = socket(0xa, 0x3, 0x3a) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000003c0)={'bridge0\x00', 0x0}) setsockopt$MRT6_ADD_MIF(r3, 0x29, 0xca, &(0x7f0000000240)={0x0, 0x0, 0xff, r5, 0x5}, 0xc) socket$nl_route(0x10, 0x3, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) socket$kcm(0x2, 0xa, 0x2) syz_mount_image$ext4(&(0x7f0000000700)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x2000000, &(0x7f0000000380)={[{@grpjquota}, {@init_itable_val={'init_itable', 0x3d, 0x7}}, {@dioread_nolock}, {@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0x7fffffff}}]}, 0x53, 0x4f3, &(0x7f00000012c0)="$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") openat(0xffffffffffffff9c, 0x0, 0x0, 0x20) write(r2, &(0x7f0000000000)="2400000011005f0414f9f40700090400810000000d0000000000000008000f0001000000", 0x24) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7030000ec000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='kfree\x00', r6, 0x0, 0x200000}, 0x18) r7 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x8800, 0x0) r8 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r8, &(0x7f0000000200)={0x2, 0x4e20, @multicast2}, 0x10) setsockopt$inet_tcp_TCP_MD5SIG(r8, 0x6, 0xe, &(0x7f0000000280)={@in={{0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x33}}}, 0x0, 0x0, 0x4, 0x0, "e83ae75240c2d658ec87bb53679fd0450078548ceb6c4414fab0919616e19aecedec1b76aea5922406b64cddaeb9d339ba3c01c2c7d0df8e61740b9af2d4e499d58654a4cf0fa0ce1f830c3279cffcfd"}, 0xd8) setsockopt$inet_tcp_int(r8, 0x6, 0x2, &(0x7f0000000040)=0xce, 0x4) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000140)={r1, &(0x7f0000000100)="e6a0d6907dc2f6", &(0x7f0000000440)=""/183}, 0x20) connect$inet(r8, &(0x7f0000000080)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x1d}}, 0x10) sendmsg$inet(r8, &(0x7f00000015c0)={0x0, 0x0, &(0x7f0000001600)=[{&(0x7f0000000240)}], 0x1}, 0x0) recvmsg(r8, &(0x7f0000000580)={0x0, 0x2, &(0x7f0000000500)=[{&(0x7f0000000740)=""/4096, 0xa15b0}], 0x1, 0x0, 0x2000000000000}, 0x700) ioctl$TCSETSW2(r7, 0x5453, 0x0) 2.337503829s ago: executing program 4 (id=987): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000020850000000400000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000001240)=ANY=[], 0x50) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="06"], 0x48) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0xb, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0xd07, 0x40}, 0x100b28, 0x6, 0x0, 0x1, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) syz_clone(0xa5144411, 0x0, 0x0, 0x0, 0x0, 0x0) syz_usb_disconnect(0xffffffffffffffff) ioprio_set$pid(0x2, 0x0, 0x4007) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1d, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @lsm=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x3fb}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000003c0)=@newtaction={0xe68, 0x30, 0x871a15abc695fa3d, 0x70bd2d, 0x0, {}, [{0xe54, 0x1, [@m_pedit={0xe50, 0x1, 0x0, 0x0, {{0xa}, {0xe24, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS={0xe20, 0x2, {{{0x0, 0x300}, 0x93}, [{0x0, 0x0, 0x0, 0x0, 0xfffffffd}, {0x0, 0x0, 0x0, 0x0, 0x3000000, 0x40000000}, {0x1, 0x0, 0x0, 0x4000000, 0x7, 0x80000}, {0x8000, 0x5, 0x0, 0xfffffffc, 0x5}, {0x0, 0x0, 0x0, 0x2}, {0x0, 0x0, 0x800000, 0x0, 0x6}, {0x0, 0xc3}, {0x0, 0x5}, {0x5}, {}, {0x0, 0x10}, {0x0, 0x470a, 0x0, 0x8000000}, {}, {0x2, 0x0, 0x0, 0x0, 0x6, 0x6}, {}, {}, {0x0, 0x0, 0x0, 0x1, 0x0, 0xfff}, {0x0, 0x0, 0x0, 0x8000000}, {}, {0x0, 0x0, 0x0, 0x0, 0x20}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, {}, {0x0, 0x0, 0x0, 0xfffffffc}, {0x20000}, {}, {0x0, 0x7, 0x0, 0x0, 0xffffffff}, {0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x3}, {0x0, 0x8000, 0x0, 0x0, 0x5}, {0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x60569add}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x2b25}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, {0xffffffff, 0x9}, {0x0, 0x0, 0x0, 0x0, 0xfffff800}, {0x3}, {}, {0xffffffff, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, {0xfffffffd}, {}, {0x0, 0x9, 0x0, 0xffffffff, 0x0, 0x2}, {}, {0x80}, {0x80}, {0x0, 0x0, 0x0, 0x5, 0x5}, {}, {0x0, 0x0, 0x8}, {0x0, 0x2, 0x0, 0x0, 0x9}, {0x0, 0x0, 0x8, 0x0, 0x3}, {}, {0x0, 0x5}, {0x0, 0x0, 0x0, 0x8510}, {0xffff}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, {0x0, 0xfffefffd}, {0x0, 0x0, 0x0, 0x1}, {}, {0x5}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000}, {0x0, 0x7}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xb}, {0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x9}, {0x0, 0xfffffffc, 0x200}, {0x0, 0x0, 0x0, 0x200}, {}, {0x4}, {}, {0x0, 0x0, 0x800}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, {0x0, 0x101, 0x0, 0x0, 0x0, 0xffffffff}, {}, {0x3, 0xfffffffe}, {0x0, 0x0, 0x0, 0x4, 0x9}, {}, {0x0, 0x0, 0x0, 0x0, 0x1, 0x7}, {0x0, 0xb}, {0x0, 0x0, 0x0, 0xffffffff}, {}, {0x0, 0x5, 0x0, 0x0, 0x0, 0xfffffffc}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x56}, {0x0, 0x0, 0x0, 0xec33, 0x0, 0x4}, {}, {0xb, 0x0, 0x0, 0x0, 0x0, 0xfe1}, {0x0, 0x0, 0x0, 0x0, 0x4}, {0x0, 0x0, 0xfffffffc}, {}, {0x0, 0xfffffffd}, {0x6}, {0x7f}, {}, {0x0, 0x8, 0x0, 0x0, 0xfffffffe}, {0x4, 0x2, 0x2000000, 0x2, 0x0, 0xfffffffe}, {0x0, 0x0, 0x0, 0x0, 0xe9d, 0x58a}, {0x2}, {0x2, 0x9, 0x20000000}, {0xfffffffc}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x80}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x292}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, {0x0, 0x0, 0xe600, 0x0, 0x0, 0x2}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x101}, {0x0, 0x5, 0x0, 0x7, 0x1}, {0x0, 0x5, 0x0, 0x0, 0x0, 0x3}, {0x0, 0x0, 0x0, 0x0, 0x80}, {0x10000000, 0x0, 0x0, 0x0, 0x1, 0xfffffffd}, {}, {0x0, 0x0, 0x0, 0x0, 0xfffffffc}, {0x3}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff}, {}, {0x0, 0x0, 0x0, 0x8}, {}, {}, {}, {0xfffffffb, 0x0, 0x0, 0x0, 0x8000}, {0x6, 0xffffffff, 0x0, 0x0, 0x0, 0xfffffffe}, {0x2d, 0x0, 0x10000}, {0x0, 0x0, 0x8000}, {0x0, 0x8000, 0x0, 0xe}, {0x3, 0x0, 0x10000}, {0x0, 0x80000000, 0x0, 0x7fff800, 0x4}, {0x0, 0x3}, {0xffffffff, 0x0, 0x0, 0x0, 0xd}], [{}, {}, {0x0, 0x1}, {0x1}, {}, {0x3}, {}, {0x0, 0x1}, {}, {}, {0x2}, {}, {}, {}, {0x0, 0x1}, {}, {0x3, 0x1}, {0x0, 0x1}, {}, {0x5, 0x1}, {0x0, 0x1}, {0x4}, {0x3}, {}, {}, {}, {}, {}, {}, {}, {0x5}, {}, {0x4}, {}, {}, {}, {}, {0x0, 0x1}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {0x4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {0x1}, {}, {}, {}, {0x0, 0x1}, {}, {}, {0x0, 0x1}, {}, {}, {}, {0x0, 0x1}, {0x2}, {0x5}, {}, {0x4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x2}, {}, {0x0, 0x1}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {0x1}, {}, {0x5}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {0x2, 0x1}, {}, {}, {}, {}, {0x5, 0x1}, {}, {0x1}, {}, {0x2}, {}, {}, {0x4}, {0x3}, {}, {}, {}, {}, {0x0, 0x1}]}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xe68}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0xa, 0x1fffffffffffffcd, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020702500000000002020207b0af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000072"], 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) r4 = dup(r3) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x23, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r5}, 0x10) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000540)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a88000000060a010400000000000000000a0000010900010073797a31000000005c000480580001800b0001007461726765740000480002802c0003009ac420002e2eafb9fdd672bad09dfb78c7699c74e82fa0c70000000000000000000000000000000008000240000000000e00010049444c4554494d45520000000900020073797a32"], 0xb0}, 0x1, 0x0, 0x0, 0x4000850}, 0x20040040) r7 = syz_open_procfs$namespace(0x0, &(0x7f0000001040)='ns/net\x00') sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000002340)=@newlink={0x3c, 0x10, 0xffffffffffffffff, 0x70bd28, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x54a31, 0x823}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @vxcan={{0xa}, {0x4, 0x2, 0x0, 0x1, @void}}}, @IFLA_NET_NS_FD={0x8, 0x1c, r7}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4004080}, 0x8ae257a062cc3564) write$UHID_INPUT(r4, &(0x7f0000001980)={0x9, {"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", 0x1000}}, 0x1006) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000007"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000300)='fib_table_lookup\x00', r8}, 0x10) r9 = socket$netlink(0x10, 0x3, 0x0) sendmsg(r9, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000140)="5500000018007f5f00fe01b2a4a2809302060000ff41fd01020400000a00120002002800000019002d007fffffff0022de1330d54400009b84136ef75afb83de066a5900e1baac968300000000f2ff000001000000", 0x55}], 0x1, 0x0, 0x0, 0x7a000000}, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) 1.710159298s ago: executing program 2 (id=988): bind$netlink(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)=ANY=[@ANYBLOB="58000000020603f7ff000000000000000700000705000100070000000900020073797a31000000000c00078008001240000000050500050002000000050004000100000011000300686173683a69702c706f7274"], 0x58}, 0x1, 0x0, 0x0, 0x4000}, 0x20004000) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000030000000000000000000400b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b705000008000000850000006900000095"], &(0x7f0000000500)='syzkaller\x00', 0x1, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000040)='kmem_cache_free\x00', r2, 0x0, 0x800000000006}, 0x18) r3 = openat$nci(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) write$nci(r3, 0x0, 0xfffffeea) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=ANY=[@ANYBLOB="50000000090601020000000000000000020000840900020073797a31000000000500010007000000280007800c00018008000140fffffff70500070088000000060004404e22000006000540"], 0x50}, 0x1, 0x0, 0x0, 0x10000082}, 0x90) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000240)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0xe, 0x7fff0000}]}) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000009c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18060000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000003000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000dfff75390000000000000000850000007d00000095"], &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000340)='io_uring_register\x00', r7}, 0x10) r8 = io_uring_setup(0x7fc0, &(0x7f0000000000)={0x0, 0x3, 0x40}) io_uring_register$IORING_REGISTER_RESTRICTIONS(r8, 0xb, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kfree\x00', r6}, 0x18) r9 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r9, 0x10f, 0x87, &(0x7f0000000100)={0x43, 0x4, 0x3, 0x3}, 0x10) close_range(r5, 0xffffffffffffffff, 0x0) socket$inet_udp(0x2, 0x2, 0x0) r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0700000004000000080200000e"], 0x50) r11 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r10, @ANYBLOB="0000000000000000b7030000ec000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$IPSET_CMD_GET_BYNAME(r4, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x64, 0xe, 0x6, 0x801, 0x0, 0x0, {0x3}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}]}, 0x64}, 0x1, 0x0, 0x0, 0xc004}, 0x20000000) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='kfree\x00', r11}, 0x18) r12 = openat$selinux_validatetrans(0xffffffffffffff9c, &(0x7f0000000480), 0x1, 0x0) ioperm(0x9f, 0x0, 0xffff) write$selinux_validatetrans(r12, &(0x7f00000004c0)=ANY=[@ANYBLOB='system_u:object_r:usb_device_t:s0 system_u:t_t:s0 00000000000000000005 /usr/lib/telepathy/mission-control-5\x00'/120], 0x78) syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) 1.672235292s ago: executing program 3 (id=989): request_key(&(0x7f0000000340)='user\x00', &(0x7f0000000380)={'syz', 0x3}, &(0x7f00000003c0)=')\x00', 0x0) 1.608095488s ago: executing program 3 (id=990): r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x10) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0xc2481, 0x0) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0xc0802, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0a00000002000000ff0f0000"], 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000400)='locks_get_lock_context\x00', r3}, 0x10) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x4, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x1, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000400)='locks_get_lock_context\x00', r4}, 0x10) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000600)='blkio.bfq.avg_queue_size\x00', 0x275a, 0x0) ioctl$PPPIOCNEWUNIT(r2, 0xc004743e, &(0x7f00000000c0)) pwritev(r2, &(0x7f0000000140)=[{&(0x7f0000000440)='\x00!', 0xfffffe37}], 0x1, 0x1, 0x3d) r5 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$USBDEVFS_SUBMITURB(r5, 0x8038550a, &(0x7f0000000140)=@urb_type_control={0x2, {}, 0x0, 0xc5, &(0x7f0000000240)={0x20, 0x31, 0x5, 0x8, 0x9}, 0x8, 0x0, 0xfffffffa, 0x0, 0x8001, 0x10, &(0x7f00000005c0)="f650b6ad27c6d255dc471b1991229e348994586111b7bed0e55328d5b758259e2c418cbcedb14d6c322a589e8272be4ce4fbb1299e7257b0e71a66b8c9f91253929abc8af33be4bb082d268c4bb82d929ccff7765bc5c96ffe8f5725de76c80042b6e8c81b275fee0c672adc0fa278dd046780194ece2a482101123128648d7d0986cf1b7797bcb4a9a2a8d07a4b5b4a0331948671b579d1"}) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x1000, 0x1) r6 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r6}, &(0x7f0000bbdffc)=0x0) timer_settime(r7, 0x0, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) name_to_handle_at(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)=ANY=[], &(0x7f0000000180), 0x0) open_by_handle_at(0xffffffffffffff9c, &(0x7f00000000c0)=ANY=[], 0x200000002003f00) setsockopt$sock_int(r0, 0x1, 0x3c, 0x0, 0x0) keyctl$instantiate_iov(0x14, 0x0, &(0x7f0000003580)=[{0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0xffffffffffffffff}], 0x9, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) 1.592341639s ago: executing program 2 (id=991): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18010000010000000000000000030000850000007b00000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffd}, 0x94) mkdirat(0xffffffffffffff9c, 0x0, 0x1c0) r1 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0) write$UHID_CREATE2(r1, &(0x7f00000007c0)=ANY=[@ANYBLOB="0b00000073797a31000000dfff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a30000037b35f0a000089b4c45a10000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a3100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001"], 0x119) syz_usb_connect$cdc_ecm(0x5, 0x4d, &(0x7f00000011c0)=ANY=[@ANYBLOB="12010000020000402505a1a44000000001010902"], 0x0) r2 = syz_open_dev$hidraw(&(0x7f0000000000), 0x0, 0x81) ioctl$HIDIOCSFEATURE(r2, 0xc0404806, &(0x7f0000000040)) ioctl$INCFS_IOC_READ_FILE_SIGNATURE(r2, 0x8010671f, 0x0) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) close_range(r3, 0xffffffffffffffff, 0x0) r4 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000000)={{0x1, 0x1, 0x18, r0, {0x1}}, './file0\x00'}) writev(r4, &(0x7f00000008c0)=[{&(0x7f0000000380)="5d0277cb363972f05de0be7167ea18fdf4b155b2230c1df949dcfa647301d8ba", 0x20}, {&(0x7f0000000400)="8d272e34e12836a260735c70b2dfa4c460b5913217f9fc2bf1a8770731a6090a73e15398bc98f32bf0b0bab688216b173311a5d6a19ee0d26d81844e015633be5e3cfdd5eb66cba80b86fa9e46f408d7c7f10913c874baf527b2ebf54dcb9edc3dd43b62ee8c2a0f3263e638e8d4caf2a81d2e6f0c1230313973744cd9b2931ed233950e11f4ed933f583082e90fc9ce97eeccfc312d8b24642e0e721c98cf6d3c98644381c7e0eabc91989e773ffad81cc83286fd4b7a95e545c4034605ad0ba0e1d7cffdc0613082eb226429888aea", 0xd0}, {&(0x7f0000000500)="e3fa0aa13a18e8593fc1f3bf2a46f11d1766c174344d0caa4bc7caa47957709f39f922195b1b6b4e37c6605f394bbc237215381204e4b86705fca3f5cc9a5ab296929419977513417d873817171c63bc6fe6ecef34df587d95d9231d54771e8dcecfe57184fb569a6849d74e2be51b5c88c53c0f1f49a810d4d267fc55b0de4d", 0x80}, {&(0x7f0000000580)="53bc1461db08466166d76d4799b1509ed78ce4e2b33418b255f7cb9dcca93ff3d6f4dcad6717e641ca9b941796d0c7172f182f1026b3859fac4ea05f71cac4aca37295d391779c64733e246037f81404937935fa920fb3fb6ca926925a9ae4542c56075e1e00ab959ef0df63bcacda580b24d54318476aaad992f2c49fb4648bc3c5d2172547a2d3201063f43ea3834eaa2910b00cb661ba7754cdc1c97a0d8d6ee4453dc72b65d45cbb903859be87d03f59183da8c801030c", 0xb9}, {&(0x7f00000006c0)="76266a8b9907d35dd4c8dfa30a2987de313a253115675b5e39078e53c8466619c4c1f46b097d61d59b9df3dc9ae88bb1917d2bafa4e3ebe56f975dfb2c004ff13956d1a13773934b81cb1dca37897cde122ecd8e5cb42f70d18de7ea26c68cff79b0ab4dcac9345ceae4db22bdc9", 0x6e}, {&(0x7f0000000740)="8942331ec7a59664ef385259fdac39ee376fa7ea9c99b35e2709b85d0b8b9e355d318f54aff88f71d86ca53b3a2f2e74006dcef9ba", 0x35}, {&(0x7f0000000780)="e0db52d8a97e61f449270e635ebaee9606d47588460e0ed3c8be0b8a44984990f1fafec9acc588d3b0a8511e021e03990e566ba2b7fe2ff06fd10f720e581f23294e3027b3ec31044a41ee772b75dedc3e6b60ac7984c2be57090266249edc40eecdaf0fadc7583d74e6cbbc1bf3f5c2fd50698e1b2b07c22b44c66b2d4fb49efbfa4e7d0f3784312a82699f578a0b2162679755f2592aea8ba0440bc04e3a1d35f8bc3578bc73644f8fe4a61c2bfa507e6e1297d2e42f74a5c3e726d2c771ed59c5ff014329486e5f9c9a81a922b2f2c408f87634e765ed056fb3b71a1d3fffaec6877e3f1909c2b3737ec73345aa88", 0xf0}, {&(0x7f0000000880)="0d0de9d8448d", 0x6}], 0x8) r6 = socket$nl_generic(0x10, 0x3, 0x10) fstat(0xffffffffffffffff, &(0x7f0000000e00)={0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$inet_IP_XFRM_POLICY(r5, 0x0, 0x11, &(0x7f0000000e80)={{{@in=@multicast1, @in6=@private2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@initdev}, 0x0, @in=@local}}, &(0x7f0000000f80)=0xe8) mount$tmpfs(0x0, &(0x7f0000000d80)='./file0\x00', &(0x7f0000000dc0), 0x2000, &(0x7f0000000fc0)={[{@quota}, {@grpquota}, {@huge_within_size}, {@usrquota_block_hardlimit={'usrquota_block_hardlimit', 0x3d, [0x2a, 0x65, 0x6b, 0x31, 0x41147faa572934de, 0x6d]}}, {@grpquota_block_hardlimit={'grpquota_block_hardlimit', 0x3d, [0x33, 0x36, 0x33, 0x65]}}, {@nr_blocks={'nr_blocks', 0x3d, [0x30]}}], [{@fowner_lt={'fowner<', r7}}, {@mask={'mask', 0x3d, 'MAY_READ'}}, {@context={'context', 0x3d, 'staff_u'}}, {@euid_gt={'euid>', r8}}]}) ioctl$KDFONTOP_GET(r5, 0x4b72, &(0x7f0000000d40)={0x1, 0x0, 0x18, 0x20, 0x1dd, &(0x7f0000000940)}) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x17, 0xb, &(0x7f0000001080)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b70300000000a999850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000980)='kfree\x00', r9, 0x0, 0x2144}, 0x18) r10 = socket(0x10, 0x80003, 0x0) write(r10, &(0x7f0000000740)="240000001a005f0214f9f4e6ff0804000a000f00fd00"/36, 0x24) close_range(r10, 0xffffffffffffffff, 0x0) r11 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_FEATURES_SET(r6, &(0x7f0000002540)={0x0, 0x0, &(0x7f0000002500)={&(0x7f0000001580)={0x30, r11, 0x1, 0x70bd28, 0x0, {}, [@ETHTOOL_A_FEATURES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_bond\x00'}]}, @ETHTOOL_A_FEATURES_WANTED={0x4}]}, 0x30}}, 0x0) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000080)={'syztnl0\x00', &(0x7f00000002c0)={'syztnl2\x00', 0x0, 0x4, 0x4, 0xf9, 0x550, 0x1c, @remote, @ipv4={'\x00', '\xff\xff', @multicast2}, 0x1, 0x8000, 0xfffffff9, 0x4221}}) sendmsg$ETHTOOL_MSG_TSINFO_GET(r5, &(0x7f0000000340)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000001c0)={&(0x7f0000000100)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r11, @ANYBLOB="00082cbd7000ffdbdf251900000024000180080003000200000008000100", @ANYRES32=r12, @ANYBLOB="08000300608177ca17b910ac42000000"], 0x38}, 0x1, 0x0, 0x0, 0x4804}, 0x4004800) syz_clone3(&(0x7f0000000640)={0x2000, 0x0, 0x0, 0x0, {0x2a}, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[0x0], 0x1}, 0x58) 1.464665611s ago: executing program 3 (id=992): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = socket$inet6(0xa, 0x3, 0x5) r1 = dup3(0xffffffffffffffff, r0, 0x0) mknod$loop(&(0x7f0000000180)='./file0\x00', 0x40, 0x1) r2 = creat(&(0x7f00000000c0)='./bus\x00', 0x13b) r3 = dup2(r2, r2) ioctl$BLKTRACESETUP(r3, 0xc0481273, &(0x7f0000000800)={'\x00', 0x40, 0xa, 0x0, 0x5b, 0x10}) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f00000000c0)={@dev={0xfe, 0x80, '\x00', 0x80}, 0x100800, 0x2, 0x2, 0x9}, 0x20) sendmmsg$inet6(r1, &(0x7f0000000600)=[{{&(0x7f0000000180)={0xa, 0x4e22, 0xfff, @local, 0x5}, 0x1c, 0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1400000000000000290000000b0000000009"], 0x18}}], 0x1, 0x810) bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x50) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0xfc, 0x0, 0x7ffc0002}]}) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000e00)={0x12, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r4, 0x0, 0x4}, 0x18) shmdt(0x0) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f00000001c0)='./bus\x00', 0x41, &(0x7f0000000080), 0x67, 0x52e, &(0x7f0000000480)="$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") fspick(r3, &(0x7f0000000000)='.\x00', 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000a00)='blkio.throttle.io_service_bytes\x00', 0x275a, 0x0) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x8, 0x12, r5, 0x1f8bd000) mount(&(0x7f0000000200)=@rnullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000000)='iso9660\x00', 0x11, 0x0) openat$binfmt_register(0xffffffffffffff9c, &(0x7f0000000100), 0x1, 0x0) write$binfmt_register(r5, 0x0, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000280)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) r6 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$inet_udp_int(r6, 0x11, 0x1, &(0x7f0000000000)=0x7, 0x4) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) io_uring_setup(0x30a7, &(0x7f0000000040)={0x0, 0x36d, 0xc000, 0xc, 0xa0002f5}) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x12, 0x3, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x80000000, 0xfffffffffffffda2, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 1.318595976s ago: executing program 0 (id=993): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000880)={&(0x7f0000000700)=ANY=[@ANYBLOB="380000001200050104000000ffdbdf2528001a00ac1414aa000000000000000000000000fe880000000000000000000000000101020006108a25fd9e5f053556f9c1b140a79a14086a29dcbef1b1d5ea8a6deab68207cacc38a7069d132942f13ad88c69c5a9585ccaaa84ad4f911a4506076a3af042ba82eb8b93ec94140fc69a7f99c5f286f6d7304e59dc63f4e1349a5d9e9cade823008ace0e8af8ced8555627804a"], 0x38}, 0x13, 0x0, 0x0, 0x880}, 0x20040840) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800"/15, @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8d}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000a00)={0x11, 0x2, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0xb, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x10, 0xfffffff9}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2, 0x0, 0x1}, 0x18) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) poll(&(0x7f00000002c0)=[{r4, 0x2}], 0x1, 0xfa) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="1805000000000000000000004b64ffec8500000075000000040000000700000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x10) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x101d81, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) syz_clone3(&(0x7f00000004c0)={0xa690b000, &(0x7f0000000040), 0x0, 0x0, {}, &(0x7f0000000100)=""/161, 0xa1, 0x0, 0x0}, 0x58) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000300)={'rose0\x00', 0x0}) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="2000000011000100"/20, @ANYRES32=r7], 0x20}}, 0x0) r9 = dup2(r3, r4) syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), r9) poll(&(0x7f0000000080)=[{r9, 0x4000}, {r4, 0x3}], 0x2, 0xffff8001) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0xc, &(0x7f0000000400)=ANY=[@ANYBLOB="18020000020000f500000000000000008500000041000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000008000000850000000600000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$MRT6_ADD_MFC_PROXY(r9, 0x29, 0xd2, &(0x7f00000007c0)={{0xa, 0x4e23, 0x2, @mcast1, 0x6}, {0xa, 0x4e22, 0x1, @local, 0x1ff}, 0xffffffffffffffff, {[0x8, 0x2, 0x7, 0xffff7fff, 0x0, 0x40, 0x0, 0x5]}}, 0x5c) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r10, 0x0, 0x2100, 0x0, &(0x7f0000000100), 0x0, 0x1008, 0x0, 0x0, 0xffffffffffffff55, 0x0, 0x0, 0x0, 0x9}, 0x50) sendmsg$DEVLINK_CMD_SB_POOL_SET(r9, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000040)={&(0x7f00000004c0)=ANY=[@ANYBLOB="08020000", @ANYRES16=0x0, @ANYBLOB="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"], 0x208}, 0x1, 0x0, 0x0, 0x4080}, 0x4) 1.311288706s ago: executing program 1 (id=994): r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x3, 0x40) syz_usb_disconnect(r0) r1 = bpf$MAP_CREATE(0x0, 0x0, 0x50) waitid$P_PIDFD(0x3, 0xffffffffffffffff, 0x0, 0x1, &(0x7f00000004c0)) r2 = syz_usb_connect$hid(0x3, 0x3f, &(0x7f0000000180)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0x10, 0x5ac, 0x273, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0xa, 0x10, 0x8, [{{0x9, 0x4, 0x0, 0x8, 0x2, 0x3, 0x1, 0x3, 0x7, {0x9, 0x21, 0x6, 0x2, 0x1, {0x22, 0xcf5}}, {{{0x9, 0x5, 0x81, 0x3, 0x400, 0x3, 0x2, 0x40}}, [{{0x9, 0x5, 0x2, 0x3, 0x3ef, 0x3, 0x0, 0x7f}}]}}}]}}]}}, &(0x7f0000000900)={0xa, &(0x7f0000000200)={0xa, 0x6, 0x200, 0x8, 0x8d, 0x8, 0x10, 0x9}, 0x54, &(0x7f0000000340)={0x5, 0xf, 0x54, 0x6, [@wireless={0xb, 0x10, 0x1, 0x8, 0x20, 0x5, 0x0, 0x2b55}, @ss_container_id={0x14, 0x10, 0x4, 0x6, "cbb4badea8191f5dda87e3020436c005"}, @ptm_cap={0x3}, @wireless={0xb, 0x10, 0x1, 0x4, 0x63, 0xfc, 0x6, 0x5, 0xf}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0xe, 0x7f, 0x3, 0x7ff}, @ssp_cap={0x18, 0x10, 0xa, 0xfe, 0x3, 0x2, 0x871e, 0x12a, [0xf, 0xff00c0, 0xf]}]}, 0x4, [{0x4, &(0x7f0000000280)=@string={0x4, 0x3, "23ba"}}, {0xf1, &(0x7f00000005c0)=@string={0xf1, 0x3, "68a0251e58b236956ed396006f81d0adbb244c2ef3dd095647562e331583dd2459fabad9be463a85cc7291ac07a254604c2e29d23ee220ee3023574616245036e7594f157ba44304beaa9d078de72e5677036086f23b8df2942395888e6e5794ffe46b17255e98de1c413b2f2b0375a1518d3fd46fb164f51acd8644a7c52bf29fb2c3d792ed05dd6d486ccbab7c5c46771585d700ffa2ca56cd4ebb1525df46d9fc4c83b379d1d7065cf4f724bcd9eae1cd76d1455a291e604550eb395a34b1430902d876c6c19d59863a1683ddb9dac0cd83671e6ca63cd4ac7b39dbcb6774ff09436b2e3dd535925f2026872aed"}}, {0xd4, &(0x7f0000000ac0)=@string={0xd4, 0x3, "6b5197c618c5372123da25687de4c1c4ac3e191817a0252c7fb58d9190dcdf6aba1966d8a1b4fd3b0e187f01409a47c6a72db7772910f26526ab404bdc137bfdfb55ea8bee9d92225feb98e8d9a3b3feeed0b404bd60f2bc0db05f1577ecc7be20ced860bd7a0e1937f8a4bd2be38b4bfd12ea61471039d45be9525e9ac5f783092b63e241de0c32f28240dd72a7620f0a88298f0d0f392b61cc8bc830295fb7b5cbc23b89cd61e68be27b2f135d941f534cfce99ef0d574572690127286452ce36c289e5e7158a13bac94693bdc148fc534"}}, {0x55, &(0x7f00000006c0)=@string={0x55, 0x3, "0ae092b0c609087f1309040845f154a4e18d68ab7dc01bed8385a27a9bc99163b2be7c7b58e8a7b24e18876519ab25561feea16f8bbd7846fe3cca43d060ec2f545574f57796cb73d6402d3d76a8f117d5f5c0"}}]}) syz_usb_control_io(r2, &(0x7f0000000d80)={0x2c, &(0x7f0000000c00)={0x40, 0xc, 0x98, {0x98, 0xb, "fa282b855ab959187d1712e617d3046ece91110f88b9c851794f30ba3edb1b40a89d3f6ce9dfc776b89480d0424f65e9aeb370b83a94d6a02aa0d0354deda917bf31667f42851cc2af89787533590fc6f9336a68737210d1a716be1a118edaef7dc1855d02c57e241257f15c51420406bba0ac87cc3e2136bbc81be8fe7799b3783cfbb2846f1e7359979ff00a6e1fa84db65003032c"}}, &(0x7f0000000cc0)={0x0, 0x3, 0x37, @string={0x37, 0x3, "d6a54fe27b5f8db88217c85b01d5848d6856aafcbbfa57e7d4c4e7f1a802aab6d68c9aeabb50f1fd2bda487edc5a05254d44983913"}}, &(0x7f0000000980)={0x0, 0xf, 0x5, {0x5, 0xf, 0x5}}, &(0x7f0000000a00)={0x20, 0x29, 0xf, {0xf, 0x29, 0x3, 0x8, 0x5, 0x5, "9622985c", "a2852055"}}, &(0x7f0000000d40)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0xd, 0x10, 0x6, 0x2, 0x1d, 0xd759, 0x6}}}, &(0x7f0000001240)={0x84, &(0x7f0000000dc0)={0x40, 0xd, 0x93, "7cb044dd9fbf0601f16678b2ee7330a29b93ae774899430cb9cc41074da26018303bb53261bb2dfcf021ffb696e047552418ea09dbfb87b52445e5c7d39e0a0d1c94dd1ed725712807a6c2b1675c7e0f384e9db94f55bccdaaa976af9cdbe57e5bf0284f223abeafe5e811f32bb1c237e918d627a743fae020763ab3a2113121d29286114bc08ba532325c5f85ac9d37917176"}, 0x0, &(0x7f0000000ec0)={0x0, 0x8, 0x1, 0x6}, &(0x7f0000000f00)={0x20, 0x0, 0x4, {0x1, 0x3}}, &(0x7f0000000f40)={0x20, 0x0, 0x8, {0x100, 0x40, [0xf000]}}, &(0x7f0000000f80)={0x40, 0x7, 0x2, 0xfff7}, &(0x7f0000000fc0)={0x40, 0x9, 0x1, 0xea}, &(0x7f0000001000)={0x40, 0xb, 0x2, "6091"}, &(0x7f0000001040)={0x40, 0xf, 0x2, 0x9}, &(0x7f0000001080)={0x40, 0x13, 0x6, @local}, &(0x7f00000010c0)={0x40, 0x17, 0x6}, &(0x7f0000001100)={0x40, 0x19, 0x2, "2ddf"}, &(0x7f0000001140)={0x40, 0x1a, 0x2, 0x9}, &(0x7f0000001180)={0x40, 0x1c, 0x1, 0x5}, &(0x7f00000011c0)={0x40, 0x1e, 0x1, 0xa}, &(0x7f0000001200)={0x40, 0x21, 0x1, 0x5}}) bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x5, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00'}, 0x10) r3 = socket$qrtr(0x2a, 0x2, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xb, &(0x7f0000000a40)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000ddffffff850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x27, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000300)='sched_switch\x00', r4}, 0x10) connect$qrtr(r3, &(0x7f0000000040)={0x2a, 0x1, 0x41cfaa655c5b4876}, 0xc) futimesat(0xffffffffffffffff, 0x0, 0x0) bind$qrtr(r3, &(0x7f00000000c0)={0x2a, 0x1, 0x7fff}, 0xc) socket(0x21, 0x5, 0x6) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) r5 = socket$nl_route(0x10, 0x3, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$tmpfs(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f00000001c0), 0x0, 0x0) r6 = syz_open_procfs(0x0, &(0x7f0000000040)='mountinfo\x00') lseek(r6, 0x10001, 0x0) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000400)=ANY=[@ANYBLOB="240000001800090000000000010000001c140000fe000001"], 0x24}}, 0x0) syz_mount_image$ext4(&(0x7f0000000bc0)='ext4\x00', &(0x7f0000000240)='./file1\x00', 0x4000, &(0x7f00000000c0), 0x2, 0xbb8, &(0x7f00000017c0)="$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") openat(0xffffffffffffff9c, &(0x7f0000000300)='./file1\x00', 0xc4042, 0x1ff) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x11, 0x8, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32, @ANYBLOB="0000000000000000b703000000e00000850000001b000000b700000000fa000095"], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x94) pivot_root(&(0x7f00000001c0)='.\x00', &(0x7f0000002080)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00') 1.27105835s ago: executing program 3 (id=995): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0xb, 0x2014, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0xd07, 0x40}, 0x100b28, 0x6, 0x0, 0x1, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x18, 0x7ffc1fff}]}) rt_tgsigqueueinfo(0x0, 0x0, 0x7, 0x0) r0 = memfd_create(&(0x7f0000000ec0)='\x103q}2[\xe0\x9a\xee\xaf\x03\x97\x9et\v\"|Ma\x86\xe7\xc0\x14\x9f\xb9h\xb1\x96\xe7=I\x860S6\xb5\xa8\xc2\x95Je%\xfeG\'e\xe5\x8f\xf8\xd2\x1c\xc0\xfb\x1c\xa6\xab\bi\xe4^\xd5\xfd\xa9\r\xac7A\x94k\xcd\t\x00\x90k\xd6\x05\xb6\x03\x00\x00\x00A\xc5\x9c_\xd4\x18,\f\xd4s\xb2\x99/\xc0\x9a\xf2Oc\xc0c\x03gB!\xb0\xb8n\x01\x9bT\x95\x10\x86\xe8$\x7f\r[\xf9\x0e1v\xb1\n\x88\v\x95uy\xb5:`\x8b\nC\x18A;\xaa%\xaf\xc7\xa3\xac\xa2D\xb5\xe2\xe1\xdc(\xfd\x05\x9fB\x84O\xfe@\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x1a\xa0\x17\xe3\xac\xe9\xc9\xa7\x8a\x1b\x03\"&\xac\xcap>\xccZ\x01\xbc\x18\xc1\xb9\xe9\v\x8b\x9c\xb4Q\xd4\x96EV<>\x99\xca\xb3\xe0\xc4tL\xed\xf5W\xbd#\xcf\x8a\x84\xed\x9f/\xd4\xbb\xea;-Dp\xf8\xd0F\x90\xf8\x92Ip6\xf4\x16\xe8\x14\xe0\x92!\x92-F\xe2\x14D\x91\xa8b\x04\xdd\x1d\a\xdc\xe0\x18\x85{\x80Q\xf6k\x96\xfaQ\x9fW\vO\xf0\xe4O\\\xceS\xf2\xde\x049d\x06#\x88\xc3\xdf\x85O\x1c\xc3\xad?r\xd7\x0e\x00\xd7\x83\xb0\x88\x9c\xf6Y-F\x98\xdd\x9c~\xfd\x95\xc3\xb6lC\xaa\"Y\xa2K\xecz\x84:*\xf5Y\xd1\x9b1\x91\x9b\x15\xd4\xec\x02o\x01&\xaa\x90w\xc4\xc7yn\xb5\x1ag\xab&?\xbe\xcb\xe8v\xa8\xe0\xa4\x81sW\xacf\x149\xd2}\xefCGa\x9a$4\x8c\xa5!p\x83\x05\x96%\x02%\xabj\n\b\xc8NC\x91}&y\xd3\xe1\xeep\'\xc5\xab\x19GsX5\x8c\n\x9fh\xee;4\xb1%V\xe0\xa9\x8e\xf30:\xd8\x18N~G\x139\xcas\xf4D\xd4\xd0s\r3\xcb\x9a&\xdf+(\xc9S\x9eL5\x84\xb1\x90pN\xe7/\r\b\x9a\xf13Q\xf9\xdf\x7fX\xa0\xafK\xefh\xbfOv\x9bh\xb3\xc0\xf5\x80\xba\"@\'\x02\xafi\xeaE\xa6a6F\xde\xd4\xfa\x84\xe4+A\xb7\xa2\x8f\xc9\xee|xxn\xefw\x93]%\xd0\x19\x132\x86\xabn\xfe\x91\xb6Cl\xcf\x04\x1cq\xc1\x1d~\x8d\x01\x83\x93_\x83\x8a`v\xb0K,|S\xe4\xba\xb1\f\xc8`\xa6s\xad\x11\xd4wG\x80u\x87u\xff\x87\xee', 0x2) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000040)={0x0, 0x0, 0x940a, 0x1000007}) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x7, 0x8604, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0xd}, 0x1c161, 0x10000, 0x0, 0x6, 0x8, 0x0, 0x9, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) r1 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="240000006800019f000000000000000002000000000000000800010001000000040004"], 0x24}, 0x1, 0x0, 0x0, 0x4005}, 0x0) sendmmsg(r1, &(0x7f0000000000), 0x4000000000001f2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000ac0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) signalfd4(0xffffffffffffffff, &(0x7f0000000000)={[0x2]}, 0x8, 0x80000) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000016000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r3}, 0x10) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000f40)=ANY=[@ANYBLOB="4000000010001fff00"/20, @ANYRES32=0x0, @ANYBLOB="81ffffff00000000180012800e0001007769726567756172640000000400028008000a00bc"], 0x40}}, 0x0) r5 = fcntl$getown(r4, 0x9) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r6, 0x8933, &(0x7f0000000180)={'wpan1\x00', 0x0}) r9 = getpid() sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000680)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="010027bd7000000000001400000008000300", @ANYRES32=r8, @ANYBLOB="08001c00", @ANYRES32=r9, @ANYBLOB="3cc75bdc07b49a8c85a31b9a8e379d7ea9bbd5fb0133cfca6c99023a5b73f68ec83e77febbb09ab68f94802c1e1f6749c3c2ae1e2f2194197f9d21319c47b6801504c0bca906a81191af22d51dfab12b06c1e39986e8184a816a4058d40fe47b5bb31750f527df413ba08c685fff376fb0edab7303290e610c23e69e2156d0bd8747790ea4bc2afa2e296e822438e02f65a4ef0370fc4cc53e23cfd7971d063fe60565ba1ecbfd069c5a65e4"], 0x24}}, 0x0) tgkill(r5, r9, 0x8) 1.147770181s ago: executing program 4 (id=996): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="05000000040000009900000001"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x18) r2 = fspick(0xffffffffffffff9c, &(0x7f0000000380)='./file0\x00', 0x1) fsmount(r2, 0x1, 0x8f) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000180)=[{0x200000000006, 0x0, 0x0, 0x7ffc0001}]}) fcntl$setlease(0xffffffffffffffff, 0x400, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000080000007b8af8ff00000000bfa200000000000007020000f8ffffffb70300fc07000000b70400000000000085000000030000009500000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000007000000010005000900000001"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x11, 0xc, &(0x7f0000000340)=ANY=[@ANYRESHEX], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x71864369b3666c7c, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000200)='qdisc_reset\x00', r4}, 0x10) r5 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000200)='qdisc_reset\x00', r3}, 0x10) socket$packet(0x11, 0x2, 0x300) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)={0x28, r7, 0x1, 0x70bd27, 0x0, {}, [@NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc}]}, 0x28}}, 0x0) r8 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r8}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r9 = mq_open(&(0x7f0000000000)='bat\x03<\x02eslave_K\x00', 0x8c2, 0x30, &(0x7f0000000080)={0x8000000000000000, 0x8, 0x1, 0xc05}) mq_getsetattr(r9, &(0x7f0000000040)={0x0, 0x40, 0x4, 0x7ff}, 0x0) signalfd4(r5, &(0x7f00000004c0)={[0x7]}, 0x8, 0x0) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000580)={0x2}, 0x8) bpf$PROG_LOAD(0x5, 0x0, 0x0) mq_timedreceive(r9, &(0x7f0000000100)=""/90, 0x5a, 0x0, &(0x7f00000001c0)={0x77359400}) 1.106585056s ago: executing program 4 (id=997): r0 = socket$inet6(0xa, 0x80003, 0xff) r1 = socket$inet6(0xa, 0x80003, 0xff) setsockopt$inet6_int(r1, 0x29, 0x16, &(0x7f0000fcb000), 0x4) setsockopt$inet6_int(r0, 0x29, 0x16, &(0x7f0000fcb000), 0x4) setsockopt$inet6_int(r0, 0x29, 0x16, &(0x7f0000000040), 0x4) bpf$MAP_CREATE(0x0, &(0x7f0000001440)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x16, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x4, 0x0, 0x0, 0x40f00, 0x4, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5a}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = socket(0x2, 0x80805, 0x0) sendmmsg$inet_sctp(r3, &(0x7f00000032c0), 0x0, 0x0) sendmmsg$inet_sctp(r3, &(0x7f00000032c0)=[{&(0x7f00000000c0)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f00000004c0)=[{&(0x7f0000000100)='a', 0x1}], 0x1, 0x0, 0x30}], 0x1, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000001000000b703000000000000850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r4}, 0x10) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r6}, 0x10) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={0xffffffffffffffff, 0x0, 0x0, 0x8, 0x0, &(0x7f0000000300)=""/8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000b80)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5}, 0x94) r7 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000400)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='GPL\x00'}, 0x94) syz_emit_ethernet(0x3e, &(0x7f0000000500)=ANY=[], 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r7, 0x5, 0xb68, 0x4000, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB], 0x48) write(r2, &(0x7f0000002000)="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", 0x1000) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r9}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000340)={0x5, &(0x7f0000000300)=[{0xc, 0x9, 0x0, 0x6}, {0x5, 0xf8, 0xf3, 0xfffffff8}, {0x1, 0x81, 0x0, 0x49455258}, {0x3, 0xb, 0x2, 0x6}, {0x2, 0x3, 0x1, 0x8}]}) kexec_load(0x4, 0xa, 0x0, 0x0) 949.4756ms ago: executing program 2 (id=998): perf_event_open(&(0x7f0000000140)={0x0, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x7, 0x8604, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0x8, 0x6}, 0x200, 0x10000, 0x0, 0x5, 0x8, 0x0, 0x9, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) socket$packet(0x11, 0xa, 0x300) r0 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000240)={'syz_tun\x00', 0x0}) bind$packet(r0, &(0x7f0000000300)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @remote}, 0x14) r2 = socket$packet(0x11, 0x2, 0x300) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x41100}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000400)='mm_migrate_pages\x00', r4, 0x0, 0x5}, 0x18) r5 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r5) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x0, &(0x7f0000000040)}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) prctl$PR_SET_NAME(0xf, &(0x7f0000000500)='w\xde\xa3\x05\xa3\x91\x00\x00\x00\x00\x00\x00\x8f\xc0\x9b\x86\xef\\\xc0\x89\av\x9f\xaek\xbd\x87W\x1d\x1b(\x8e\xf8\\2\x98\xf7P\x1b8\xcf\xf5\xdc0x0}) bind$packet(r2, &(0x7f0000000300)={0x11, 0x0, r7, 0x1, 0x0, 0x6, @broadcast}, 0x14) syz_emit_ethernet(0x3e, &(0x7f0000000000)={@empty, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x21}, @void, {@ipv4={0x800, @udp={{0xa, 0x4, 0x0, 0x3e, 0x30, 0x0, 0xe000, 0x2, 0x11, 0x0, @empty, @empty, {[@rr={0x7, 0x13, 0x26, [@private=0xa010102, @empty, @dev={0xac, 0x14, 0x14, 0x36}, @multicast1]}]}}, {0x0, 0x4e21, 0x8}}}}}, 0x0) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000180), r8) sendmsg$IEEE802154_ADD_IFACE(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000000c0)=ANY=[@ANYBLOB="e05d8afee9ab64e2be5ecc383b0100", @ANYRES16=r9, @ANYRESOCT=r2], 0x34}}, 0xf013a7e0158acf87) ioctl$PPPIOCSPASS(0xffffffffffffffff, 0x40107447, &(0x7f00000001c0)={0x3, &(0x7f0000000100)=[{0x4, 0x4, 0x0, 0xc}, {0xfff7, 0x6, 0x0, 0x3}, {0x3, 0x4, 0x5a, 0x7}]}) 916.833663ms ago: executing program 4 (id=999): r0 = syz_open_dev$tty1(0xc, 0x4, 0x4) ioctl$VT_GETSTATE(0xffffffffffffffff, 0x5603, &(0x7f0000000140)={0x4, 0x6}) r1 = dup(r0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r1, 0x7, &(0x7f00000000c0)=r1, 0x1) close(r3) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r3, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x1}, 0x1c) listen(r4, 0x0) r5 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r5, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000005c0)=@newqdisc={0x24, 0x24, 0x0, 0x0, 0x3, {0x0, 0x0, 0x0, 0x0, {0x0, 0x6}}}, 0x24}}, 0x0) r6 = socket(0x2a, 0x2, 0x0) getsockname$packet(r6, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=@newqdisc={0x34, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x4}}]}, 0x34}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000480)=@newtfilter={0x48, 0x2c, 0x52f, 0x70bd2a, 0x25dfdbfc, {0x0, 0x0, 0x0, r7, {0x4}, {}, {0xd, 0xfff3}}, [@filter_kind_options=@f_flower={{0xb}, {0x18}}]}, 0x48}}, 0x0) r8 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r8, &(0x7f00000002c0), 0x40000000000009f, 0x0) r9 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='fdinfo/3\x00') preadv(r9, 0x0, 0x0, 0x8, 0xffffffff) r10 = gettid() timer_create(0x4, &(0x7f0000533fa0)={0x0, 0x4000b, 0x800000000004, @tid=r10}, &(0x7f0000bbdffc)=0x0) timer_settime(r11, 0x1, &(0x7f0000000340)={{}, {0x0, 0x989680}}, 0x0) sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=ANY=[], 0xfffffdef}}, 0x1) recvfrom(r5, &(0x7f0000000180)=""/60, 0xfffffffffffffecb, 0x4100, 0x0, 0x0) close_range(r2, 0xffffffffffffffff, 0x0) ioctl$TIOCL_SETSEL(r1, 0x541c, &(0x7f0000000100)={0x2, {0x2, 0x103, 0x100, 0x551}}) 874.947607ms ago: executing program 3 (id=1000): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0xb, 0x2014, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0xd07, 0x40}, 0x100b28, 0x6, 0x0, 0x1, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x18, 0x7ffc1fff}]}) rt_tgsigqueueinfo(0x0, 0x0, 0x7, 0x0) r0 = memfd_create(&(0x7f0000000ec0)='\x103q}2[\xe0\x9a\xee\xaf\x03\x97\x9et\v\"|Ma\x86\xe7\xc0\x14\x9f\xb9h\xb1\x96\xe7=I\x860S6\xb5\xa8\xc2\x95Je%\xfeG\'e\xe5\x8f\xf8\xd2\x1c\xc0\xfb\x1c\xa6\xab\bi\xe4^\xd5\xfd\xa9\r\xac7A\x94k\xcd\t\x00\x90k\xd6\x05\xb6\x03\x00\x00\x00A\xc5\x9c_\xd4\x18,\f\xd4s\xb2\x99/\xc0\x9a\xf2Oc\xc0c\x03gB!\xb0\xb8n\x01\x9bT\x95\x10\x86\xe8$\x7f\r[\xf9\x0e1v\xb1\n\x88\v\x95uy\xb5:`\x8b\nC\x18A;\xaa%\xaf\xc7\xa3\xac\xa2D\xb5\xe2\xe1\xdc(\xfd\x05\x9fB\x84O\xfe@\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x1a\xa0\x17\xe3\xac\xe9\xc9\xa7\x8a\x1b\x03\"&\xac\xcap>\xccZ\x01\xbc\x18\xc1\xb9\xe9\v\x8b\x9c\xb4Q\xd4\x96EV<>\x99\xca\xb3\xe0\xc4tL\xed\xf5W\xbd#\xcf\x8a\x84\xed\x9f/\xd4\xbb\xea;-Dp\xf8\xd0F\x90\xf8\x92Ip6\xf4\x16\xe8\x14\xe0\x92!\x92-F\xe2\x14D\x91\xa8b\x04\xdd\x1d\a\xdc\xe0\x18\x85{\x80Q\xf6k\x96\xfaQ\x9fW\vO\xf0\xe4O\\\xceS\xf2\xde\x049d\x06#\x88\xc3\xdf\x85O\x1c\xc3\xad?r\xd7\x0e\x00\xd7\x83\xb0\x88\x9c\xf6Y-F\x98\xdd\x9c~\xfd\x95\xc3\xb6lC\xaa\"Y\xa2K\xecz\x84:*\xf5Y\xd1\x9b1\x91\x9b\x15\xd4\xec\x02o\x01&\xaa\x90w\xc4\xc7yn\xb5\x1ag\xab&?\xbe\xcb\xe8v\xa8\xe0\xa4\x81sW\xacf\x149\xd2}\xefCGa\x9a$4\x8c\xa5!p\x83\x05\x96%\x02%\xabj\n\b\xc8NC\x91}&y\xd3\xe1\xeep\'\xc5\xab\x19GsX5\x8c\n\x9fh\xee;4\xb1%V\xe0\xa9\x8e\xf30:\xd8\x18N~G\x139\xcas\xf4D\xd4\xd0s\r3\xcb\x9a&\xdf+(\xc9S\x9eL5\x84\xb1\x90pN\xe7/\r\b\x9a\xf13Q\xf9\xdf\x7fX\xa0\xafK\xefh\xbfOv\x9bh\xb3\xc0\xf5\x80\xba\"@\'\x02\xafi\xeaE\xa6a6F\xde\xd4\xfa\x84\xe4+A\xb7\xa2\x8f\xc9\xee|xxn\xefw\x93]%\xd0\x19\x132\x86\xabn\xfe\x91\xb6Cl\xcf\x04\x1cq\xc1\x1d~\x8d\x01\x83\x93_\x83\x8a`v\xb0K,|S\xe4\xba\xb1\f\xc8`\xa6s\xad\x11\xd4wG\x80u\x87u\xff\x87\xee', 0x2) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000040)={0x0, 0x0, 0x940a, 0x1000007}) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x7, 0x8604, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0xd}, 0x1c161, 0x10000, 0x0, 0x6, 0x8, 0x0, 0x9, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) r1 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="240000006800019f000000000000000002000000000000000800010001000000040004"], 0x24}, 0x1, 0x0, 0x0, 0x4005}, 0x0) sendmmsg(r1, &(0x7f0000000000), 0x4000000000001f2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000ac0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) signalfd4(0xffffffffffffffff, &(0x7f0000000000)={[0x2]}, 0x8, 0x80000) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES32=r2, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000016000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r3}, 0x10) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000f40)=ANY=[@ANYBLOB="4000000010001fff00"/20, @ANYRES32=0x0, @ANYBLOB="81ffffff00000000180012800e0001007769726567756172640000000400028008000a00bc"], 0x40}}, 0x0) r5 = fcntl$getown(r4, 0x9) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r6, 0x8933, &(0x7f0000000180)={'wpan1\x00', 0x0}) r9 = getpid() sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000680)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="010027bd7000000000001400000008000300", @ANYRES32=r8, @ANYBLOB="08001c00", @ANYRES32=r9, @ANYBLOB="3cc75bdc07b49a8c85a31b9a8e379d7ea9bbd5fb0133cfca6c99023a5b73f68ec83e77febbb09ab68f94802c1e1f6749c3c2ae1e2f2194197f9d21319c47b6801504c0bca906a81191af22d51dfab12b06c1e39986e8184a816a4058d40fe47b5bb31750f527df413ba08c685fff376fb0edab7303290e610c23e69e2156d0bd8747790ea4bc2afa2e296e822438e02f65a4ef0370fc4cc53e23cfd7971d063fe60565ba1ecbfd069c5a65e4"], 0x24}}, 0x0) tgkill(r5, r9, 0x8) 813.038613ms ago: executing program 2 (id=1001): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getpid() r0 = fsopen(&(0x7f0000000100)='ramfs\x00', 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x2400, 0x9) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) fsmount(r0, 0x0, 0x77) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000181100"/20, @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000005700000095"], 0x0, 0x75, 0x0, 0x0, 0x0, 0x2}, 0x94) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="17000000000000000400000003"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb70300000800"], 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) syz_clone(0x41aa1000, 0x0, 0x0, 0x0, 0x0, 0x0) request_key(&(0x7f0000000340)='user\x00', &(0x7f0000000380)={'syz', 0x3}, &(0x7f00000003c0)=')\x00', 0x0) r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000000c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x50) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r5}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000000)='GPL\x00', 0xa, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r6}, 0x18) r7 = socket$kcm(0x2, 0x1000000000000002, 0x0) sendmsg$inet(r7, &(0x7f0000000b40)={&(0x7f0000000080)={0x2, 0x4e20, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000180)=[@ip_pktinfo={{0x1c, 0x0, 0x7, {0x0, @dev, @loopback}}}], 0x20}, 0x0) 439.448939ms ago: executing program 0 (id=1002): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000a40)={0x0, 0x5, &(0x7f0000000000)=ANY=[], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, 0x2}, 0x94) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000040)='netlink_extack\x00', r0}, 0x18) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000000300)=[@in6={0xa, 0x0, 0x4, @loopback={0xffffff7f00000000}, 0x40007fc}], 0x1c) bind$rds(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x4e22, @loopback}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2500000000040000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000040000008500000006000000850000005000000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000980)='mm_page_free\x00', r1}, 0x10) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="58000000020605000000000000000000000000000900020073797a3100000000050005000a000000050001000600000013000300686173683a6e65742c696661636500000c0007800800124005000000050004"], 0x58}, 0x1, 0x0, 0x0, 0x1}, 0x800) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@newqdisc={0x54, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x1}, {}, {0xe}}, [@TCA_INGRESS_BLOCK={0x8}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1a, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}}, 0x0) sendmsg$L2TP_CMD_SESSION_GET(r6, &(0x7f0000000880)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000840)={&(0x7f00000007c0)={0x4c, 0x0, 0x1, 0x70bd28, 0x25dfdbfc, {}, [@L2TP_ATTR_L2SPEC_LEN={0x5, 0x6, 0x64}, @L2TP_ATTR_IFNAME={0x14, 0x8, 'ip_vti0\x00'}, @L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x1}, @L2TP_ATTR_SESSION_ID={0x8}, @L2TP_ATTR_RECV_TIMEOUT={0xc, 0x16, 0x9}]}, 0x4c}, 0x1, 0x0, 0x0, 0x18}, 0x84) setsockopt$inet6_tcp_int(r5, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r5, &(0x7f0000000080)={0xa, 0x0, 0xfffffffe, @empty, 0x5}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r5, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r5, 0x11a, 0x2, &(0x7f0000000140)=@ccm_128={{0x303, 0x39}, "4506000000927650", "0bf70000000000000000061000000001", '\x00', "ba0200"}, 0x28) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b70400000000000085"], &(0x7f0000000000)='syzkaller\x00', 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r7}, 0x10) write$selinux_access(0xffffffffffffffff, &(0x7f0000000100)=ANY=[@ANYBLOB='system_u:object_r:apt_var_lib_t:s0 uncon'], 0x43) socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000bc0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x7, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r8}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x5}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x20, r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) ioctl$TIOCSCTTY(0xffffffffffffffff, 0x540e, 0xffffffff80000000) 1.44818ms ago: executing program 1 (id=1003): r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x10) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0xc2481, 0x0) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0xc0802, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0a00000002000000ff0f0000"], 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000400)='locks_get_lock_context\x00', r3}, 0x10) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x4, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x1, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000400)='locks_get_lock_context\x00', r4}, 0x10) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000600)='blkio.bfq.avg_queue_size\x00', 0x275a, 0x0) ioctl$PPPIOCNEWUNIT(r2, 0xc004743e, &(0x7f00000000c0)) pwritev(r2, &(0x7f0000000140)=[{&(0x7f0000000440)='\x00!', 0xfffffe37}], 0x1, 0x1, 0x3d) r5 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$USBDEVFS_SUBMITURB(r5, 0x8038550a, &(0x7f0000000140)=@urb_type_control={0x2, {}, 0x0, 0xc5, &(0x7f0000000240)={0x20, 0x31, 0x5, 0x8, 0x9}, 0x8, 0x0, 0xfffffffa, 0x0, 0x8001, 0x10, &(0x7f00000005c0)="f650b6ad27c6d255dc471b1991229e348994586111b7bed0e55328d5b758259e2c418cbcedb14d6c322a589e8272be4ce4fbb1299e7257b0e71a66b8c9f91253929abc8af33be4bb082d268c4bb82d929ccff7765bc5c96ffe8f5725de76c80042b6e8c81b275fee0c672adc0fa278dd046780194ece2a482101123128648d7d0986cf1b7797bcb4a9a2a8d07a4b5b4a0331948671b579d1"}) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x1000, 0x1) r6 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r6}, &(0x7f0000bbdffc)=0x0) timer_settime(r7, 0x0, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) name_to_handle_at(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)=ANY=[], &(0x7f0000000180), 0x0) open_by_handle_at(0xffffffffffffff9c, &(0x7f00000000c0)=ANY=[], 0x200000002003f00) setsockopt$sock_int(r0, 0x1, 0x3c, 0x0, 0x0) keyctl$instantiate_iov(0x14, 0x0, &(0x7f0000003580)=[{0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0xffffffffffffffff}], 0x9, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) 938.54µs ago: executing program 3 (id=1004): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000080)=@setlink={0x3c, 0x13, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x80c2, 0x41012}, [@IFLA_TARGET_NETNSID={0x8}, @IFLA_ALT_IFNAME={0x0, 0x35, 'dummy0\x00'}]}, 0x3c}}, 0x40000) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="0700000004000000080200000e"], 0x50) r2 = socket(0x10, 0x3, 0x0) r3 = socket(0xa, 0x3, 0x3a) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000003c0)={'bridge0\x00', 0x0}) setsockopt$MRT6_ADD_MIF(r3, 0x29, 0xca, &(0x7f0000000240)={0x0, 0x0, 0xff, r5, 0x5}, 0xc) socket$nl_route(0x10, 0x3, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) socket$kcm(0x2, 0xa, 0x2) syz_mount_image$ext4(&(0x7f0000000700)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x2000000, &(0x7f0000000380)={[{@grpjquota}, {@init_itable_val={'init_itable', 0x3d, 0x7}}, {@dioread_nolock}, {@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0x7fffffff}}]}, 0x53, 0x4f3, &(0x7f00000012c0)="$eJzs3F1oXFUeAPD/nXz2a5vd7Xa33e5uut1lwxaTNq02D4JUFHxQECuojyFJS23aSJOCLVWmIPVRCr6Lj7764Kv6UsQnwdf6KEihSF/aCuLInbl3vjKTNJNkxpjfD27mnHtn7jnnnnvunHtO5gawbY2mf5JK+E5E7I2IQvMbRisvD+9fn3l0//pMFEulMz8m5Y89SOOZbDexK4uMFSIK7yW1DXUWr167MD0/P3c5i08sXXxrYvHqtSfOD2drpqaS/g4L1SK9tFwPDr67cOjAC2/cemmmuuc8tfpybJTRGG2VlbL/bnRiPbanLtxxvdF16fmfVtdAuf3vjb5YqfKKXcwZsNlKpVJpqP3mYqnZjWVrgC0rhnudA6A38i/69P43X1p1BAY3p/vRc/dOV26A0nI/zJaIf5VX5uMgA033txtpNCJeL/70UbrEJo1DAADU++J03hNs6v+NVGZGfr5y+5n09Q/ZHMpIRPwxIv4UEX+OiH0R8ZeI2B8Rf42IvzXtvy8iSiukP9oUr6ZfnYQq3N2goraU9v+ezua20qU291UNjfRlsT0ReYd57lh2TMZiYOjs+fm54yuk8eVz337Qblt9/y9d0jzkfcEsH3f7mwboZqeXpjsr7XL3bkQc7K+Vv9L/TfojkupMQBIRByLi4Br2O1IXPv//Tw5VIwON71u9/GWllvNoGzDPVPo44n+V+i9GtfzRMImYNMxPXpw+N3du7tLk1NTJE8dPPTX55MRwzM8dm0jPgmMt0/j6m5svt0t/1fJ/9n3zR54/9fmZrGWtX1r/O+vO/8jnb2vlH0kikup87eLa07j53ftt72k6Pf8Hk1fL4fy+9O3ppaXLxyMGkxeXr5+sfTaPp69RrJR/7Ejz+V9Ot3yNy4/E3yMiPYn/ERH/jModYpr3wxHx74g4skL5v3r2P292Xv7NlZZ/NhrLX6n5hvqvzde3CyTZ3GDDpsFIA30XDt951Obi8Xj1f7IcGsvWtL7+JQ2XiHY5zb/t0jW/rPvoAQAAwNZQiIjddWNJu6NQGB+vjAHti52F+YXFpaNnF65cmk23RYzEQCEf6aqMBw8k+fjnSF18sil+Ihs3/rBvRzk+PrMwP9vTkgO7ym0+KYxHvNZX1/5TP2zMEDPwW+b3WrB9rdT+0078/ltdzAzQVY///X/7nU3NCNB1de2/3S/8ix383xewBbj/B2pWf9CPawZsfSVtGba1NbX/ox4CCL8n/fFKNVzoaU6AbtP/h21p1d/1rytQGmq9aTiWvzmGV95hX3SWjR0t0upJIO1Z9ST1HZ18Kn+aQtv3RGFtOxyKxjWDHdbp2XUejeLlxXP7ayd//myRdR7nUva/8htdg592pZ22CnT9UgQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALApfg0AAP//XhrXwA==") openat(0xffffffffffffff9c, 0x0, 0x0, 0x20) write(r2, &(0x7f0000000000)="2400000011005f0414f9f40700090400810000000d0000000000000008000f0001000000", 0x24) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7030000ec000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='kfree\x00', r6, 0x0, 0x200000}, 0x18) r7 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x8800, 0x0) r8 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r8, &(0x7f0000000200)={0x2, 0x4e20, @multicast2}, 0x10) setsockopt$inet_tcp_TCP_MD5SIG(r8, 0x6, 0xe, &(0x7f0000000280)={@in={{0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x33}}}, 0x0, 0x0, 0x4, 0x0, "e83ae75240c2d658ec87bb53679fd0450078548ceb6c4414fab0919616e19aecedec1b76aea5922406b64cddaeb9d339ba3c01c2c7d0df8e61740b9af2d4e499d58654a4cf0fa0ce1f830c3279cffcfd"}, 0xd8) setsockopt$inet_tcp_int(r8, 0x6, 0x2, &(0x7f0000000040)=0xce, 0x4) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000140)={r1, &(0x7f0000000100)="e6a0d6907dc2f6", &(0x7f0000000440)=""/183}, 0x20) connect$inet(r8, &(0x7f0000000080)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x1d}}, 0x10) sendmsg$inet(r8, &(0x7f00000015c0)={0x0, 0x14, &(0x7f0000001600)=[{&(0x7f0000000240)=' ', 0xa2732}], 0x1}, 0x0) recvmsg(r8, 0x0, 0x700) ioctl$TCSETSW2(r7, 0x5453, 0x0) 0s ago: executing program 4 (id=1005): r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x3, 0x40) syz_usb_disconnect(r0) r1 = bpf$MAP_CREATE(0x0, 0x0, 0x50) waitid$P_PIDFD(0x3, 0xffffffffffffffff, 0x0, 0x1, &(0x7f00000004c0)) r2 = syz_usb_connect$hid(0x3, 0x3f, &(0x7f0000000180)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0x10, 0x5ac, 0x273, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0xa, 0x10, 0x8, [{{0x9, 0x4, 0x0, 0x8, 0x2, 0x3, 0x1, 0x3, 0x7, {0x9, 0x21, 0x6, 0x2, 0x1, {0x22, 0xcf5}}, {{{0x9, 0x5, 0x81, 0x3, 0x400, 0x3, 0x2, 0x40}}, [{{0x9, 0x5, 0x2, 0x3, 0x3ef, 0x3, 0x0, 0x7f}}]}}}]}}]}}, &(0x7f0000000900)={0xa, &(0x7f0000000200)={0xa, 0x6, 0x200, 0x8, 0x8d, 0x8, 0x10, 0x9}, 0x54, &(0x7f0000000340)={0x5, 0xf, 0x54, 0x6, [@wireless={0xb, 0x10, 0x1, 0x8, 0x20, 0x5, 0x0, 0x2b55}, @ss_container_id={0x14, 0x10, 0x4, 0x6, "cbb4badea8191f5dda87e3020436c005"}, @ptm_cap={0x3}, @wireless={0xb, 0x10, 0x1, 0x4, 0x63, 0xfc, 0x6, 0x5, 0xf}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0xe, 0x7f, 0x3, 0x7ff}, @ssp_cap={0x18, 0x10, 0xa, 0xfe, 0x3, 0x2, 0x871e, 0x12a, [0xf, 0xff00c0, 0xf]}]}, 0x4, [{0x4, &(0x7f0000000280)=@string={0x4, 0x3, "23ba"}}, {0xf1, &(0x7f00000005c0)=@string={0xf1, 0x3, "68a0251e58b236956ed396006f81d0adbb244c2ef3dd095647562e331583dd2459fabad9be463a85cc7291ac07a254604c2e29d23ee220ee3023574616245036e7594f157ba44304beaa9d078de72e5677036086f23b8df2942395888e6e5794ffe46b17255e98de1c413b2f2b0375a1518d3fd46fb164f51acd8644a7c52bf29fb2c3d792ed05dd6d486ccbab7c5c46771585d700ffa2ca56cd4ebb1525df46d9fc4c83b379d1d7065cf4f724bcd9eae1cd76d1455a291e604550eb395a34b1430902d876c6c19d59863a1683ddb9dac0cd83671e6ca63cd4ac7b39dbcb6774ff09436b2e3dd535925f2026872aed"}}, {0xd4, &(0x7f0000000ac0)=@string={0xd4, 0x3, "6b5197c618c5372123da25687de4c1c4ac3e191817a0252c7fb58d9190dcdf6aba1966d8a1b4fd3b0e187f01409a47c6a72db7772910f26526ab404bdc137bfdfb55ea8bee9d92225feb98e8d9a3b3feeed0b404bd60f2bc0db05f1577ecc7be20ced860bd7a0e1937f8a4bd2be38b4bfd12ea61471039d45be9525e9ac5f783092b63e241de0c32f28240dd72a7620f0a88298f0d0f392b61cc8bc830295fb7b5cbc23b89cd61e68be27b2f135d941f534cfce99ef0d574572690127286452ce36c289e5e7158a13bac94693bdc148fc534"}}, {0x55, &(0x7f00000006c0)=@string={0x55, 0x3, "0ae092b0c609087f1309040845f154a4e18d68ab7dc01bed8385a27a9bc99163b2be7c7b58e8a7b24e18876519ab25561feea16f8bbd7846fe3cca43d060ec2f545574f57796cb73d6402d3d76a8f117d5f5c0"}}]}) syz_usb_control_io(r2, &(0x7f0000000d80)={0x2c, &(0x7f0000000c00)={0x40, 0xc, 0x98, {0x98, 0xb, "fa282b855ab959187d1712e617d3046ece91110f88b9c851794f30ba3edb1b40a89d3f6ce9dfc776b89480d0424f65e9aeb370b83a94d6a02aa0d0354deda917bf31667f42851cc2af89787533590fc6f9336a68737210d1a716be1a118edaef7dc1855d02c57e241257f15c51420406bba0ac87cc3e2136bbc81be8fe7799b3783cfbb2846f1e7359979ff00a6e1fa84db65003032c"}}, &(0x7f0000000cc0)={0x0, 0x3, 0x37, @string={0x37, 0x3, "d6a54fe27b5f8db88217c85b01d5848d6856aafcbbfa57e7d4c4e7f1a802aab6d68c9aeabb50f1fd2bda487edc5a05254d44983913"}}, &(0x7f0000000980)={0x0, 0xf, 0x5, {0x5, 0xf, 0x5}}, &(0x7f0000000a00)={0x20, 0x29, 0xf, {0xf, 0x29, 0x3, 0x8, 0x5, 0x5, "9622985c", "a2852055"}}, &(0x7f0000000d40)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0xd, 0x10, 0x6, 0x2, 0x1d, 0xd759, 0x6}}}, &(0x7f0000001240)={0x84, &(0x7f0000000dc0)={0x40, 0xd, 0x93, "7cb044dd9fbf0601f16678b2ee7330a29b93ae774899430cb9cc41074da26018303bb53261bb2dfcf021ffb696e047552418ea09dbfb87b52445e5c7d39e0a0d1c94dd1ed725712807a6c2b1675c7e0f384e9db94f55bccdaaa976af9cdbe57e5bf0284f223abeafe5e811f32bb1c237e918d627a743fae020763ab3a2113121d29286114bc08ba532325c5f85ac9d37917176"}, 0x0, &(0x7f0000000ec0)={0x0, 0x8, 0x1, 0x6}, &(0x7f0000000f00)={0x20, 0x0, 0x4, {0x1, 0x3}}, &(0x7f0000000f40)={0x20, 0x0, 0x8, {0x100, 0x40, [0xf000]}}, &(0x7f0000000f80)={0x40, 0x7, 0x2, 0xfff7}, &(0x7f0000000fc0)={0x40, 0x9, 0x1, 0xea}, &(0x7f0000001000)={0x40, 0xb, 0x2, "6091"}, &(0x7f0000001040)={0x40, 0xf, 0x2, 0x9}, &(0x7f0000001080)={0x40, 0x13, 0x6, @local}, &(0x7f00000010c0)={0x40, 0x17, 0x6}, &(0x7f0000001100)={0x40, 0x19, 0x2, "2ddf"}, &(0x7f0000001140)={0x40, 0x1a, 0x2, 0x9}, &(0x7f0000001180)={0x40, 0x1c, 0x1, 0x5}, &(0x7f00000011c0)={0x40, 0x1e, 0x1, 0xa}, &(0x7f0000001200)={0x40, 0x21, 0x1, 0x5}}) bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x5, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00'}, 0x10) r3 = socket$qrtr(0x2a, 0x2, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xb, &(0x7f0000000a40)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000ddffffff850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x27, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000300)='sched_switch\x00', r4}, 0x10) connect$qrtr(r3, &(0x7f0000000040)={0x2a, 0x1, 0x41cfaa655c5b4876}, 0xc) futimesat(0xffffffffffffffff, 0x0, 0x0) bind$qrtr(r3, &(0x7f00000000c0)={0x2a, 0x1, 0x7fff}, 0xc) socket(0x21, 0x5, 0x6) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) r5 = socket$nl_route(0x10, 0x3, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$tmpfs(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f00000001c0), 0x0, 0x0) r6 = syz_open_procfs(0x0, &(0x7f0000000040)='mountinfo\x00') lseek(r6, 0x10001, 0x0) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000400)=ANY=[@ANYBLOB="240000001800090000000000010000001c140000fe000001"], 0x24}}, 0x0) syz_mount_image$ext4(&(0x7f0000000bc0)='ext4\x00', &(0x7f0000000240)='./file1\x00', 0x4000, &(0x7f00000000c0), 0x2, 0xbb8, &(0x7f00000017c0)="$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") openat(0xffffffffffffff9c, &(0x7f0000000300)='./file1\x00', 0xc4042, 0x1ff) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x11, 0x8, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32, @ANYBLOB="0000000000000000b703000000e00000850000001b000000b700000000fa000095"], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x94) pivot_root(&(0x7f00000001c0)='.\x00', &(0x7f0000002080)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00') kernel console output (not intermixed with test programs): 8 comm="syz.4.509" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f52a2d2f749 code=0x7ffc0000 [ 96.978782][ T29] audit: type=1326 audit(1766413125.580:18808): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5688 comm="syz.4.509" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f52a2d2f749 code=0x7ffc0000 [ 97.002233][ T29] audit: type=1326 audit(1766413125.580:18810): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5688 comm="syz.4.509" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f52a2d2f749 code=0x7ffc0000 [ 97.024463][ T3507] udevd[3507]: inotify_add_watch(7, /dev/loop3p2, 10) failed: No such file or directory [ 97.025708][ T29] audit: type=1326 audit(1766413125.580:18811): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5688 comm="syz.4.509" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f52a2d2f749 code=0x7ffc0000 [ 97.058869][ T29] audit: type=1326 audit(1766413125.580:18812): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5688 comm="syz.4.509" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f52a2d2f749 code=0x7ffc0000 [ 97.082314][ T29] audit: type=1326 audit(1766413125.580:18813): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5688 comm="syz.4.509" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f52a2d2f749 code=0x7ffc0000 [ 97.098756][ T3309] udevd[3309]: inotify_add_watch(7, /dev/loop3p4, 10) failed: No such file or directory [ 97.105848][ T29] audit: type=1326 audit(1766413125.580:18814): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5688 comm="syz.4.509" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f52a2d2f749 code=0x7ffc0000 [ 97.121248][ T3779] udevd[3779]: inotify_add_watch(7, /dev/loop3p6, 10) failed: No such file or directory [ 97.152559][ T3311] udevd[3311]: inotify_add_watch(7, /dev/loop3p3, 10) failed: No such file or directory [ 97.164265][ T5687] loop3: detected capacity change from 0 to 512 [ 97.203458][ T5687] EXT4-fs error (device loop3): ext4_acquire_dquot:6986: comm syz.3.508: Failed to acquire dquot type 1 [ 97.236437][ T5687] EXT4-fs error (device loop3): ext4_acquire_dquot:6986: comm syz.3.508: Failed to acquire dquot type 1 [ 97.249569][ T5698] netlink: 4 bytes leftover after parsing attributes in process `syz.2.510'. [ 97.269568][ T5687] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.508: bg 0: block 248: padding at end of block bitmap is not set [ 97.286521][ T5687] EXT4-fs error (device loop3) in ext4_mb_clear_bb:6689: Corrupt filesystem [ 97.296419][ T5687] EXT4-fs error (device loop3): ext4_acquire_dquot:6986: comm syz.3.508: Failed to acquire dquot type 1 [ 97.307945][ T5687] EXT4-fs (loop3): 1 orphan inode deleted [ 97.314371][ T5687] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 97.327182][ T5687] ext4 filesystem being mounted at /107/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 97.388421][ T3317] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 97.420123][ T5706] netlink: 20 bytes leftover after parsing attributes in process `syz.3.514'. [ 97.472433][ T5706] loop3: detected capacity change from 0 to 512 [ 97.494833][ T5706] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 97.533088][ T5706] EXT4-fs error (device loop3): ext4_free_branches:1023: inode #11: comm syz.3.514: invalid indirect mapped block 4294967295 (level 1) [ 97.549956][ T5706] EXT4-fs error (device loop3): ext4_free_branches:1023: inode #11: comm syz.3.514: invalid indirect mapped block 4294967295 (level 1) [ 97.565198][ T5706] EXT4-fs (loop3): 2 truncates cleaned up [ 97.571404][ T5706] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 97.586355][ T5706] netlink: 4 bytes leftover after parsing attributes in process `syz.3.514'. [ 97.670159][ T5715] netlink: 16 bytes leftover after parsing attributes in process `syz.1.512'. [ 97.838236][ T5720] netlink: 4 bytes leftover after parsing attributes in process `syz.2.518'. [ 98.421994][ T3317] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 98.518717][ T5744] netlink: 20 bytes leftover after parsing attributes in process `syz.1.520'. [ 98.569578][ T5744] netlink: 4 bytes leftover after parsing attributes in process `syz.1.520'. [ 98.650847][ T5755] netlink: 4 bytes leftover after parsing attributes in process `syz.4.522'. [ 98.873973][ T5764] netlink: '+}[@': attribute type 10 has an invalid length. [ 98.926167][ T5761] netlink: 'syz.4.524': attribute type 10 has an invalid length. [ 98.926310][ T5764] team0: Failed to send options change via netlink (err -105) [ 98.926385][ T5764] team0: Port device dummy0 added [ 98.927493][ T5761] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 98.937831][ T5761] team0: Failed to send options change via netlink (err -105) [ 98.937899][ T5761] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 98.939024][ T5761] team0: Port device dummy0 removed [ 99.528051][ T5746] Set syz1 is full, maxelem 65536 reached [ 99.580989][ T5787] loop3: detected capacity change from 0 to 1024 [ 99.585673][ T5787] EXT4-fs: Ignoring removed orlov option [ 99.774898][ T5787] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 100.132674][ T5808] FAT-fs (loop5): unable to read boot sector [ 100.640605][ T5812] loop4: detected capacity change from 0 to 2048 [ 100.684717][ T5812] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000900 r/w without journal. Quota mode: none. [ 100.944881][ T5812] netlink: 'syz.4.531': attribute type 3 has an invalid length. [ 101.071102][ T5815] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1306: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 101.100368][ T5815] EXT4-fs (loop4): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 124 with error 28 [ 101.112813][ T5815] EXT4-fs (loop4): This should not happen!! Data will be lost [ 101.112813][ T5815] [ 101.122596][ T5815] EXT4-fs (loop4): Total free blocks count 0 [ 101.128735][ T5815] EXT4-fs (loop4): Free/Dirty block details [ 101.134724][ T5815] EXT4-fs (loop4): free_blocks=2415919104 [ 101.140563][ T5815] EXT4-fs (loop4): dirty_blocks=688 [ 101.145830][ T5815] EXT4-fs (loop4): Block reservation details [ 101.151897][ T5815] EXT4-fs (loop4): i_reserved_data_blocks=43 [ 101.175374][ T3317] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 101.295569][ T5829] veth0: entered promiscuous mode [ 101.302598][ T5827] veth0: left promiscuous mode [ 101.337935][ T4672] EXT4-fs (loop4): Delayed block allocation failed for inode 18 at logical offset 2 with max blocks 2 with error 28 [ 102.393776][ T5861] xt_addrtype: ipv6 PROHIBIT (THROW, NAT ..) matching not supported [ 102.445036][ T5866] loop4: detected capacity change from 0 to 128 [ 102.474110][ T5866] __nla_validate_parse: 7 callbacks suppressed [ 102.474129][ T5866] netlink: 12 bytes leftover after parsing attributes in process `syz.4.543'. [ 102.489266][ T5866] netlink: 12 bytes leftover after parsing attributes in process `syz.4.543'. [ 102.579887][ T5872] loop4: detected capacity change from 0 to 1024 [ 102.606873][ T5872] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 102.745967][ T5870] netlink: 8 bytes leftover after parsing attributes in process `syz.2.545'. [ 102.777467][ T5882] netlink: 4 bytes leftover after parsing attributes in process `syz.1.547'. [ 103.303751][ T5886] 9p: Bad value for 'rfdno' [ 103.316884][ T5886] loop3: detected capacity change from 0 to 512 [ 103.372368][ T5886] EXT4-fs: Ignoring removed i_version option [ 103.378535][ T5886] EXT4-fs: Ignoring removed bh option [ 103.412297][ T3326] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 103.572651][ T5886] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 103.585387][ T5889] netlink: 12 bytes leftover after parsing attributes in process `syz.1.559'. [ 103.594625][ T5886] ext4 filesystem being mounted at /114/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 103.683770][ T5900] lo speed is unknown, defaulting to 1000 [ 103.690081][ T5900] lo speed is unknown, defaulting to 1000 [ 103.756362][ T5900] lo speed is unknown, defaulting to 1000 [ 103.912640][ T5901] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 103.924294][ T5901] xt_SECMARK: invalid security context 'system_u:object_r:dbusd_etc_t:s0' [ 104.086422][ T5889] openvswitch: netlink: Key 0 has unexpected len 2 expected 0 [ 104.224915][ T5906] netlink: 'syz.4.551': attribute type 13 has an invalid length. [ 104.240064][ T29] kauditd_printk_skb: 522 callbacks suppressed [ 104.240079][ T29] audit: type=1326 audit(1766413132.940:19331): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5885 comm="syz.3.548" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fda2ba1f749 code=0x7ffc0000 [ 104.300230][ T29] audit: type=1326 audit(1766413132.940:19332): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5885 comm="syz.3.548" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fda2ba1f749 code=0x7ffc0000 [ 104.323735][ T29] audit: type=1326 audit(1766413132.940:19333): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5885 comm="syz.3.548" exe="/root/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7fda2ba1f749 code=0x7ffc0000 [ 104.347279][ T29] audit: type=1326 audit(1766413132.940:19334): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5885 comm="syz.3.548" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fda2ba1f749 code=0x0 [ 104.381364][ T5907] netlink: 20 bytes leftover after parsing attributes in process `syz.3.548'. [ 104.661429][ T5916] FAT-fs (loop5): unable to read boot sector [ 105.021803][ T5918] lo speed is unknown, defaulting to 1000 [ 105.028438][ T5918] lo speed is unknown, defaulting to 1000 [ 105.091053][ T5918] lo speed is unknown, defaulting to 1000 [ 105.568759][ T5917] usb usb8: selecting invalid altsetting 2047 [ 105.577735][ T3317] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 105.663126][ T29] audit: type=1326 audit(1766413134.370:19335): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5924 comm="syz.3.556" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fda2ba1f749 code=0x7ffc0000 [ 105.711348][ T5925] random: crng reseeded on system resumption [ 105.736790][ T5925] Restarting kernel threads ... [ 105.778427][ T29] audit: type=1326 audit(1766413134.370:19336): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5924 comm="syz.3.556" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fda2ba1f749 code=0x7ffc0000 [ 105.782240][ T5927] xt_addrtype: ipv6 PROHIBIT (THROW, NAT ..) matching not supported [ 105.802319][ T29] audit: type=1326 audit(1766413134.370:19337): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5924 comm="syz.3.556" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fda2ba1f749 code=0x7ffc0000 [ 105.823773][ T5925] Done restarting kernel threads. [ 105.833971][ T29] audit: type=1326 audit(1766413134.370:19338): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5924 comm="syz.3.556" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fda2ba1f749 code=0x7ffc0000 [ 105.862185][ T29] audit: type=1326 audit(1766413134.370:19339): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5924 comm="syz.3.556" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fda2ba1df90 code=0x7ffc0000 [ 105.887656][ T29] audit: type=1326 audit(1766413134.370:19340): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5924 comm="syz.3.556" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fda2ba1f749 code=0x7ffc0000 [ 105.913827][ T5931] netlink: 20 bytes leftover after parsing attributes in process `syz.1.558'. [ 106.023582][ T5931] netlink: 4 bytes leftover after parsing attributes in process `syz.1.558'. [ 106.106548][ T5938] loop4: detected capacity change from 0 to 1024 [ 106.445981][ T5938] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 106.508714][ T5949] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 106.521364][ T5938] EXT4-fs error (device loop4): ext4_mb_mark_diskspace_used:4215: comm syz.4.560: Allocating blocks 385-513 which overlap fs metadata [ 106.582814][ T5949] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 106.635146][ T5949] netlink: 8 bytes leftover after parsing attributes in process `syz.3.562'. [ 106.653849][ T5950] EXT4-fs (loop4): pa ffff888107e4f690: logic 16, phys. 129, len 24 [ 106.662080][ T5950] EXT4-fs error (device loop4): ext4_mb_release_inode_pa:5466: group 0, free 0, pa_free 8 [ 106.771438][ T5950] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 16 with max blocks 52 with error 28 [ 106.783967][ T5950] EXT4-fs (loop4): This should not happen!! Data will be lost [ 106.783967][ T5950] [ 106.793768][ T5950] EXT4-fs (loop4): Total free blocks count 0 [ 106.799799][ T5950] EXT4-fs (loop4): Free/Dirty block details [ 106.805744][ T5950] EXT4-fs (loop4): free_blocks=128 [ 106.810882][ T5950] EXT4-fs (loop4): dirty_blocks=0 [ 106.815973][ T5950] EXT4-fs (loop4): Block reservation details [ 106.822012][ T5950] EXT4-fs (loop4): i_reserved_data_blocks=0 [ 107.022294][ T5943] loop3: detected capacity change from 0 to 4096 [ 107.054239][ T5943] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 107.264339][ T5959] netlink: 72 bytes leftover after parsing attributes in process `syz.2.564'. [ 107.393211][ T5960] loop4: detected capacity change from 0 to 1024 [ 107.587328][ T5960] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 107.602982][ T5968] semctl(GETNCNT/GETZCNT) is since 3.16 Single Unix Specification compliant. [ 107.602982][ T5968] The task syz.1.567 (5968) triggered the difference, watch for misbehavior. [ 107.621251][ T5968] netlink: 12 bytes leftover after parsing attributes in process `syz.1.567'. [ 107.799387][ T3317] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 107.985281][ T3326] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 108.346489][ T5987] xt_addrtype: ipv6 PROHIBIT (THROW, NAT ..) matching not supported [ 108.356925][ T5982] wireguard0: entered promiscuous mode [ 108.362451][ T5982] wireguard0: entered allmulticast mode [ 108.488835][ T5959] Set syz1 is full, maxelem 65536 reached [ 108.534136][ T5997] netlink: 20 bytes leftover after parsing attributes in process `syz.4.576'. [ 108.556363][ T5991] infiniband syz0: set active [ 108.561135][ T5991] infiniband syz0: added bond_slave_0 [ 108.577821][ T5991] RDS/IB: syz0: added [ 108.584906][ T5991] smc: adding ib device syz0 with port count 1 [ 108.591501][ T5991] smc: ib device syz0 port 1 has no pnetid [ 108.613520][ T5997] loop4: detected capacity change from 0 to 512 [ 108.648657][ T5997] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 108.676553][ T5997] EXT4-fs error (device loop4): ext4_get_branch:178: inode #11: block 4294967295: comm syz.4.576: invalid block [ 108.742980][ T5997] EXT4-fs error (device loop4): ext4_free_branches:1023: inode #11: comm syz.4.576: invalid indirect mapped block 4294967295 (level 1) [ 108.757205][ T5997] EXT4-fs error (device loop4): ext4_free_branches:1023: inode #11: comm syz.4.576: invalid indirect mapped block 4294967295 (level 1) [ 108.772640][ T5997] EXT4-fs (loop4): 2 truncates cleaned up [ 108.779087][ T5997] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 108.834590][ T5997] netlink: 4 bytes leftover after parsing attributes in process `syz.4.576'. [ 108.899522][ T6010] netlink: 20 bytes leftover after parsing attributes in process `syz.2.579'. [ 108.975495][ T6014] random: crng reseeded on system resumption [ 109.241933][ T29] kauditd_printk_skb: 511 callbacks suppressed [ 109.241946][ T29] audit: type=1326 audit(1766413137.940:19852): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6021 comm="syz.3.582" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fda2ba1f749 code=0x7ffc0000 [ 109.273162][ T29] audit: type=1326 audit(1766413137.950:19853): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6021 comm="syz.3.582" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fda2ba1f749 code=0x7ffc0000 [ 109.296923][ T29] audit: type=1326 audit(1766413137.950:19854): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6021 comm="syz.3.582" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fda2ba1f749 code=0x7ffc0000 [ 109.320384][ T29] audit: type=1326 audit(1766413137.950:19855): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6021 comm="syz.3.582" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fda2ba1f749 code=0x7ffc0000 [ 109.343921][ T29] audit: type=1326 audit(1766413137.950:19856): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6021 comm="syz.3.582" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fda2ba1f749 code=0x7ffc0000 [ 109.367412][ T29] audit: type=1326 audit(1766413137.950:19857): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6021 comm="syz.3.582" exe="/root/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7fda2ba1f749 code=0x7ffc0000 [ 109.390961][ T29] audit: type=1326 audit(1766413137.950:19858): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6021 comm="syz.3.582" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fda2ba1f749 code=0x7ffc0000 [ 109.414530][ T29] audit: type=1326 audit(1766413137.950:19859): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6021 comm="syz.3.582" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fda2ba1f749 code=0x7ffc0000 [ 109.438058][ T29] audit: type=1326 audit(1766413137.950:19860): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6021 comm="syz.3.582" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fda2ba1f749 code=0x7ffc0000 [ 109.461495][ T29] audit: type=1326 audit(1766413137.950:19861): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6021 comm="syz.3.582" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fda2ba1f749 code=0x7ffc0000 [ 109.533388][ T3326] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 109.604560][ T6031] netlink: '+}[@': attribute type 10 has an invalid length. [ 109.615386][ T6031] team0: Failed to send options change via netlink (err -105) [ 109.623037][ T6031] team0: Port device dummy0 added [ 109.629888][ T6030] loop4: detected capacity change from 0 to 764 [ 109.639322][ T6031] netlink: '+}[@': attribute type 10 has an invalid length. [ 109.654391][ T6030] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 109.673993][ T6031] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 109.689011][ T6030] Symlink component flag not implemented [ 109.702742][ T6031] team0: Failed to send options change via netlink (err -105) [ 109.711407][ T6030] Symlink component flag not implemented (7) [ 109.725344][ T6031] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 109.768398][ T6031] team0: Port device dummy0 removed [ 109.777741][ T6031] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 110.010642][ T6036] netlink: 72 bytes leftover after parsing attributes in process `syz.4.586'. [ 110.032936][ T6034] netlink: 4 bytes leftover after parsing attributes in process `syz.0.584'. [ 110.042706][ T6034] 9p: Bad value for 'rfdno' [ 110.050896][ T6034] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 110.071033][ T6034] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 110.080919][ T6034] netlink: 24 bytes leftover after parsing attributes in process `syz.0.584'. [ 110.475533][ T6052] wireguard0: entered promiscuous mode [ 110.481085][ T6052] wireguard0: entered allmulticast mode [ 110.536881][ T6051] 9p: Bad value for 'rfdno' [ 110.646772][ T6061] loop3: detected capacity change from 0 to 128 [ 110.789550][ T6061] syz.3.590: attempt to access beyond end of device [ 110.789550][ T6061] loop3: rw=2049, sector=145, nr_sectors = 216 limit=128 [ 110.812692][ T6061] syz.3.590: attempt to access beyond end of device [ 110.812692][ T6061] loop3: rw=2049, sector=369, nr_sectors = 8 limit=128 [ 110.832929][ T6061] syz.3.590: attempt to access beyond end of device [ 110.832929][ T6061] loop3: rw=2049, sector=385, nr_sectors = 8 limit=128 [ 110.848629][ T6064] loop4: detected capacity change from 0 to 512 [ 110.857883][ T6064] EXT4-fs: Ignoring removed oldalloc option [ 110.858430][ T6066] netlink: 20 bytes leftover after parsing attributes in process `syz.2.593'. [ 110.876797][ T6062] syz.3.590: attempt to access beyond end of device [ 110.876797][ T6062] loop3: rw=524288, sector=145, nr_sectors = 216 limit=128 [ 110.891450][ T6061] syz.3.590: attempt to access beyond end of device [ 110.891450][ T6061] loop3: rw=2049, sector=401, nr_sectors = 8 limit=128 [ 110.909961][ T6061] syz.3.590: attempt to access beyond end of device [ 110.909961][ T6061] loop3: rw=2049, sector=417, nr_sectors = 8 limit=128 [ 110.923696][ T6064] EXT4-fs (loop4): 1 truncate cleaned up [ 110.929776][ T6064] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 110.944240][ T6061] syz.3.590: attempt to access beyond end of device [ 110.944240][ T6061] loop3: rw=2049, sector=433, nr_sectors = 8 limit=128 [ 110.957885][ T6061] syz.3.590: attempt to access beyond end of device [ 110.957885][ T6061] loop3: rw=2049, sector=449, nr_sectors = 8 limit=128 [ 110.971716][ T6061] syz.3.590: attempt to access beyond end of device [ 110.971716][ T6061] loop3: rw=2049, sector=465, nr_sectors = 8 limit=128 [ 110.985623][ T6061] syz.3.590: attempt to access beyond end of device [ 110.985623][ T6061] loop3: rw=2049, sector=481, nr_sectors = 8 limit=128 [ 111.012037][ T6070] netlink: 4 bytes leftover after parsing attributes in process `syz.2.593'. [ 111.142983][ T3326] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 111.273561][ T6079] netlink: 'syz.4.596': attribute type 4 has an invalid length. [ 111.284819][ T6079] serio: Serial port ttyS3 [ 111.331736][ T6080] netlink: 'syz.1.597': attribute type 3 has an invalid length. [ 111.543027][ T6085] lo speed is unknown, defaulting to 1000 [ 111.565514][ T6085] lo speed is unknown, defaulting to 1000 [ 111.609571][ T6087] loop4: detected capacity change from 0 to 764 [ 111.659408][ T6087] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 111.812824][ T6085] lo speed is unknown, defaulting to 1000 [ 112.040405][ T6091] netlink: 4 bytes leftover after parsing attributes in process `syz.3.600'. [ 112.551537][ T6109] loop4: detected capacity change from 0 to 512 [ 112.558494][ T6109] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 112.567624][ T6113] loop3: detected capacity change from 0 to 764 [ 112.579983][ T6109] EXT4-fs error (device loop4): ext4_free_branches:1023: inode #11: comm syz.4.603: invalid indirect mapped block 4294967295 (level 1) [ 112.612708][ T6113] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 112.624910][ T6117] __nla_validate_parse: 2 callbacks suppressed [ 112.624929][ T6117] netlink: 20 bytes leftover after parsing attributes in process `syz.1.604'. [ 112.643763][ T6109] EXT4-fs error (device loop4): ext4_free_branches:1023: inode #11: comm syz.4.603: invalid indirect mapped block 4294967295 (level 1) [ 112.658101][ T6109] EXT4-fs (loop4): 2 truncates cleaned up [ 112.664301][ T6109] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 112.681936][ T6109] netlink: 4 bytes leftover after parsing attributes in process `syz.4.603'. [ 112.705858][ T6117] netlink: 4 bytes leftover after parsing attributes in process `syz.1.604'. [ 112.719152][ T6113] Symlink component flag not implemented [ 112.734054][ T6113] Symlink component flag not implemented (7) [ 112.864197][ T6128] random: crng reseeded on system resumption [ 112.905123][ T6128] loop3: detected capacity change from 0 to 2048 [ 112.943225][ T6128] loop3: p1 < > p4 [ 112.962182][ T6132] netlink: 4 bytes leftover after parsing attributes in process `syz.0.608'. [ 112.962213][ T6128] loop3: p4 size 8388608 extends beyond EOD, truncated [ 113.051180][ T6142] syz.0.610 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 113.195940][ T6149] infiniband syz: RDMA CMA: cma_listen_on_dev, error -98 [ 113.242499][ T6151] loop3: detected capacity change from 0 to 2048 [ 113.264031][ T6151] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000900 r/w without journal. Quota mode: none. [ 113.350928][ T3326] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 113.398894][ T6154] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1306: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 113.431600][ T6154] EXT4-fs (loop3): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 602 with error 28 [ 113.444153][ T6154] EXT4-fs (loop3): This should not happen!! Data will be lost [ 113.444153][ T6154] [ 113.453897][ T6154] EXT4-fs (loop3): Total free blocks count 0 [ 113.459903][ T6154] EXT4-fs (loop3): Free/Dirty block details [ 113.465873][ T6154] EXT4-fs (loop3): free_blocks=2415919104 [ 113.471661][ T6154] EXT4-fs (loop3): dirty_blocks=608 [ 113.476948][ T6154] EXT4-fs (loop3): Block reservation details [ 113.482996][ T6154] EXT4-fs (loop3): i_reserved_data_blocks=38 [ 113.659413][ T6157] loop4: detected capacity change from 0 to 512 [ 113.683596][ T6157] EXT4-fs error (device loop4): ext4_orphan_get:1417: comm syz.4.614: bad orphan inode 11862016 [ 113.695555][ T6157] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 113.708261][ T6157] ext4 filesystem being mounted at /107/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 113.847688][ T6165] netlink: 4 bytes leftover after parsing attributes in process `syz.2.616'. [ 113.858723][ T6157] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 113.914899][ T3326] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 113.977019][ T6173] netlink: 'syz.1.619': attribute type 4 has an invalid length. [ 114.011355][ T6178] loop9: detected capacity change from 0 to 7 [ 114.030182][ T3507] buffer_io_error: 26 callbacks suppressed [ 114.030195][ T3507] Buffer I/O error on dev loop9, logical block 0, async page read [ 114.049095][ T3507] Buffer I/O error on dev loop9, logical block 0, async page read [ 114.057049][ T3507] loop9: unable to read partition table [ 114.063944][ T6177] wireguard0: entered promiscuous mode [ 114.069510][ T6177] wireguard0: entered allmulticast mode [ 114.144791][ T6178] Buffer I/O error on dev loop9, logical block 0, async page read [ 114.153157][ T6178] Buffer I/O error on dev loop9, logical block 0, async page read [ 114.161203][ T6178] loop9: unable to read partition table [ 114.167493][ T6178] loop_reread_partitions: partition scan of loop9 (þ被xüŸÑø éÚ¬§½dG¤´à–ƒÝ¡¯ â·û [ 114.167493][ T6178] ) failed (rc=-5) [ 114.181196][ T3507] Buffer I/O error on dev loop9, logical block 0, async page read [ 114.189519][ T3507] Buffer I/O error on dev loop9, logical block 0, async page read [ 114.195667][ T3317] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000900. [ 114.203513][ T3507] Buffer I/O error on dev loop9, logical block 0, async page read [ 114.222051][ T3507] Buffer I/O error on dev loop9, logical block 0, async page read [ 114.230081][ T3507] Buffer I/O error on dev loop9, logical block 0, async page read [ 114.363971][ T6187] lo speed is unknown, defaulting to 1000 [ 114.370082][ T6187] lo speed is unknown, defaulting to 1000 [ 114.404643][ T6187] lo speed is unknown, defaulting to 1000 [ 114.549409][ T6187] xt_SECMARK: invalid security context 'system_u:object_r:dbusd_etc_t:s0' [ 114.724781][ T6194] loop3: detected capacity change from 0 to 164 [ 114.746345][ T29] kauditd_printk_skb: 1143 callbacks suppressed [ 114.746360][ T29] audit: type=1326 audit(1766413143.450:21005): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6197 comm="syz.2.623" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe82345f749 code=0x7ffc0000 [ 114.776317][ T29] audit: type=1326 audit(1766413143.450:21006): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6197 comm="syz.2.623" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe82345f749 code=0x7ffc0000 [ 114.799768][ T29] audit: type=1326 audit(1766413143.450:21007): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6197 comm="syz.2.623" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe82345f749 code=0x7ffc0000 [ 114.823358][ T29] audit: type=1326 audit(1766413143.450:21008): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6197 comm="syz.2.623" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe82345f749 code=0x7ffc0000 [ 114.846804][ T29] audit: type=1326 audit(1766413143.450:21009): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6197 comm="syz.2.623" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fe82345f749 code=0x7ffc0000 [ 114.849287][ T6202] netlink: 8 bytes leftover after parsing attributes in process `syz.3.624'. [ 114.870421][ T29] audit: type=1326 audit(1766413143.450:21010): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6197 comm="syz.2.623" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe82345f749 code=0x7ffc0000 [ 114.902684][ T29] audit: type=1326 audit(1766413143.450:21011): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6197 comm="syz.2.623" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe82345f749 code=0x7ffc0000 [ 114.904264][ T6202] loop4: detected capacity change from 0 to 7 [ 114.926131][ T29] audit: type=1326 audit(1766413143.450:21012): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6197 comm="syz.2.623" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe82345f749 code=0x7ffc0000 [ 114.955725][ T29] audit: type=1326 audit(1766413143.450:21013): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6197 comm="syz.2.623" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe82345f749 code=0x7ffc0000 [ 114.969355][ T3507] Buffer I/O error on dev loop4, logical block 0, async page read [ 114.979242][ T29] audit: type=1326 audit(1766413143.450:21014): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6197 comm="syz.2.623" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fe82345f749 code=0x7ffc0000 [ 114.988748][ T3507] loop4: unable to read partition table [ 115.028171][ T6200] pim6reg: left allmulticast mode [ 115.112848][ T6202] loop4: unable to read partition table [ 115.122045][ T6202] loop_reread_partitions: partition scan of loop4 (úùƒå¡™‰ü¾SêjÌ–ã¢P=ý?ã}X‹ºÐ œëÜ%õ«`ÉæÖ€ù…ˆŠ5) failed (rc=-5) [ 115.230654][ T6219] netlink: 'syz.1.627': attribute type 21 has an invalid length. [ 115.272111][ T6219] netlink: 132 bytes leftover after parsing attributes in process `syz.1.627'. [ 115.299170][ T6221] IPVS: sh: SCTP 172.20.20.187:0 - no destination available [ 115.398561][ T6225] netlink: 4 bytes leftover after parsing attributes in process `syz.0.629'. [ 115.487200][ T6243] netlink: 20 bytes leftover after parsing attributes in process `syz.1.630'. [ 115.488921][ T6241] lo speed is unknown, defaulting to 1000 [ 115.506955][ T6241] lo speed is unknown, defaulting to 1000 [ 115.550518][ T3006] loop4: unable to read partition table [ 115.663294][ T6243] netlink: 4 bytes leftover after parsing attributes in process `syz.1.630'. [ 115.755939][ T6253] loop4: detected capacity change from 0 to 1024 [ 115.807784][ T6253] EXT4-fs: Ignoring removed bh option [ 115.813567][ T6253] EXT4-fs: inline encryption not supported [ 115.819901][ T6253] EXT4-fs (loop4): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 115.897697][ T6253] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c84ce018, mo2=0000] [ 115.959480][ T6241] lo speed is unknown, defaulting to 1000 [ 116.034453][ T6253] EXT4-fs error (device loop4): ext4_map_blocks:783: inode #3: block 2: comm syz.4.626: lblock 2 mapped to illegal pblock 2 (length 1) [ 116.048578][ T6303] wireguard0: entered promiscuous mode [ 116.048773][ T6253] EXT4-fs error (device loop4): ext4_map_blocks:783: inode #3: block 48: comm syz.4.626: lblock 0 mapped to illegal pblock 48 (length 1) [ 116.054139][ T6303] wireguard0: entered allmulticast mode [ 116.095040][ T6253] EXT4-fs error (device loop4): ext4_acquire_dquot:6986: comm syz.4.626: Failed to acquire dquot type 0 [ 116.205240][ T6253] EXT4-fs error (device loop4) in ext4_reserve_inode_write:6298: Corrupt filesystem [ 116.235732][ T6253] EXT4-fs error (device loop4): ext4_evict_inode:253: inode #11: comm syz.4.626: mark_inode_dirty error [ 116.287585][ T6245] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 116.347101][ T6253] EXT4-fs warning (device loop4): ext4_evict_inode:256: couldn't mark inode dirty (err -117) [ 116.383369][ T6310] xt_TPROXY: Can be used only with -p tcp or -p udp [ 116.444135][ T6253] EXT4-fs (loop4): 1 orphan inode deleted [ 116.476581][ T4671] EXT4-fs error (device loop4): ext4_map_blocks:783: inode #3: block 1: comm kworker/u8:36: lblock 1 mapped to illegal pblock 1 (length 1) [ 116.492111][ T6253] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 116.528466][ T4671] EXT4-fs error (device loop4): ext4_release_dquot:7022: comm kworker/u8:36: Failed to release dquot type 0 [ 117.231587][ T6324] lo speed is unknown, defaulting to 1000 [ 117.237801][ T6324] lo speed is unknown, defaulting to 1000 [ 117.276214][ T6324] lo speed is unknown, defaulting to 1000 [ 117.842910][ T6325] xt_SECMARK: invalid security context 'system_u:object_r:dbusd_etc_t:s0' [ 118.698980][ T6332] __nla_validate_parse: 2 callbacks suppressed [ 118.698996][ T6332] netlink: 8 bytes leftover after parsing attributes in process `syz.1.642'. [ 118.899004][ T6336] netlink: 24 bytes leftover after parsing attributes in process `syz.3.643'. [ 119.278013][ T3326] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 119.287686][ T3326] EXT4-fs error (device loop4): __ext4_get_inode_loc:4830: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 119.300913][ T3326] EXT4-fs error (device loop4) in ext4_reserve_inode_write:6298: Corrupt filesystem [ 119.310552][ T3326] EXT4-fs error (device loop4): ext4_quota_off:7270: inode #3: comm syz-executor: mark_inode_dirty error [ 119.337885][ T6349] IPVS: sh: SCTP 172.20.20.187:0 - no destination available [ 119.359775][ T6351] netlink: 'syz.1.648': attribute type 30 has an invalid length. [ 119.397621][ T6353] netlink: 4 bytes leftover after parsing attributes in process `syz.4.649'. [ 119.411576][ T6353] siw: device registration error -23 [ 119.434014][ T6347] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 119.443459][ T6347] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 119.457650][ T6347] netlink: 8 bytes leftover after parsing attributes in process `syz.0.646'. [ 119.760266][ T29] kauditd_printk_skb: 551 callbacks suppressed [ 119.760284][ T29] audit: type=1400 audit(1766413148.462:21563): avc: denied { read write } for pid=6357 comm="syz.3.650" name="rdma_cm" dev="devtmpfs" ino=252 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 119.790843][ T29] audit: type=1400 audit(1766413148.462:21564): avc: denied { open } for pid=6357 comm="syz.3.650" path="/dev/infiniband/rdma_cm" dev="devtmpfs" ino=252 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 119.863554][ T6361] netlink: 20 bytes leftover after parsing attributes in process `syz.2.651'. [ 119.876867][ T29] audit: type=1400 audit(1766413148.472:21565): avc: denied { read } for pid=6357 comm="syz.3.650" dev="nsfs" ino=4026532764 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 119.898182][ T29] audit: type=1400 audit(1766413148.472:21566): avc: denied { open } for pid=6357 comm="syz.3.650" path="net:[4026532764]" dev="nsfs" ino=4026532764 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 119.921446][ T29] audit: type=1400 audit(1766413148.472:21567): avc: denied { create } for pid=6357 comm="syz.3.650" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 119.951978][ T6361] x_tables: (null)_tables: SNAT target: only valid in nat table, not syz0 [ 119.975077][ T29] audit: type=1400 audit(1766413148.612:21568): avc: denied { create } for pid=6362 comm="syz.3.652" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=netlink_route_socket permissive=1 [ 119.996105][ T29] audit: type=1400 audit(1766413148.612:21569): avc: denied { write } for pid=6362 comm="syz.3.652" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=netlink_route_socket permissive=1 [ 120.017104][ T29] audit: type=1400 audit(1766413148.612:21570): avc: denied { nlmsg_read } for pid=6362 comm="syz.3.652" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=netlink_route_socket permissive=1 [ 120.038641][ T29] audit: type=1326 audit(1766413148.652:21571): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6362 comm="syz.3.652" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fda2ba165e7 code=0x7ffc0000 [ 120.062130][ T29] audit: type=1326 audit(1766413148.652:21572): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6362 comm="syz.3.652" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fda2b9bb829 code=0x7ffc0000 [ 120.181543][ T6372] wireguard0: entered promiscuous mode [ 120.187165][ T6372] wireguard0: entered allmulticast mode [ 120.385929][ T6384] lo speed is unknown, defaulting to 1000 [ 120.392315][ T6384] lo speed is unknown, defaulting to 1000 [ 120.488662][ T6379] loop4: detected capacity change from 0 to 8192 [ 120.537268][ T6381] tipc: New replicast peer: 255.255.255.255 [ 120.543546][ T6381] tipc: Enabled bearer , priority 10 [ 120.550510][ T6381] netlink: 12 bytes leftover after parsing attributes in process `syz.1.657'. [ 120.559448][ T6381] tipc: Disabling bearer [ 120.566812][ T6384] lo speed is unknown, defaulting to 1000 [ 120.688536][ T6396] random: crng reseeded on system resumption [ 120.768145][ T6399] netlink: 60 bytes leftover after parsing attributes in process `syz.1.661'. [ 120.777416][ T6398] netlink: 60 bytes leftover after parsing attributes in process `syz.1.661'. [ 120.846096][ T6405] loop3: detected capacity change from 0 to 1024 [ 120.868653][ T6405] EXT4-fs: Ignoring removed orlov option [ 120.905610][ T6405] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 120.927445][ T6413] netlink: 4 bytes leftover after parsing attributes in process `syz.1.662'. [ 120.942419][ T6415] netlink: 20 bytes leftover after parsing attributes in process `syz.4.665'. [ 121.014725][ T6415] loop4: detected capacity change from 0 to 512 [ 121.054663][ T6415] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 121.090729][ T6428] netlink: 'syz.2.668': attribute type 30 has an invalid length. [ 121.115129][ T6415] EXT4-fs error (device loop4): ext4_free_branches:1023: inode #11: comm syz.4.665: invalid indirect mapped block 4294967295 (level 1) [ 121.162061][ T6415] EXT4-fs error (device loop4): ext4_free_branches:1023: inode #11: comm syz.4.665: invalid indirect mapped block 4294967295 (level 1) [ 121.206426][ T6415] EXT4-fs (loop4): 2 truncates cleaned up [ 121.222297][ T6415] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 121.255631][ T6434] wireguard0: entered promiscuous mode [ 121.261175][ T6434] wireguard0: entered allmulticast mode [ 121.549375][ T3317] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 121.595846][ T6444] loop3: detected capacity change from 0 to 2048 [ 121.616624][ T6444] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000900 r/w without journal. Quota mode: none. [ 121.637910][ T6448] tipc: Started in network mode [ 121.642889][ T6448] tipc: Node identity 4, cluster identity 4711 [ 121.649072][ T6448] tipc: Node number set to 4 [ 121.792071][ T3326] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 121.807711][ T6451] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1306: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 121.824585][ T6451] EXT4-fs (loop3): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1658 with error 28 [ 121.837119][ T6451] EXT4-fs (loop3): This should not happen!! Data will be lost [ 121.837119][ T6451] [ 121.846813][ T6451] EXT4-fs (loop3): Total free blocks count 0 [ 121.852893][ T6451] EXT4-fs (loop3): Free/Dirty block details [ 121.858826][ T6451] EXT4-fs (loop3): free_blocks=2415919104 [ 121.864602][ T6451] EXT4-fs (loop3): dirty_blocks=1664 [ 121.869909][ T6451] EXT4-fs (loop3): Block reservation details [ 121.876005][ T6451] EXT4-fs (loop3): i_reserved_data_blocks=104 [ 121.945302][ T6459] netlink: 'syz.0.675': attribute type 4 has an invalid length. [ 121.958047][ T6457] xt_policy: input policy not valid in POSTROUTING and OUTPUT [ 122.141748][ T6476] wireguard0: entered promiscuous mode [ 122.147356][ T6476] wireguard0: entered allmulticast mode [ 122.180791][ T6480] lo speed is unknown, defaulting to 1000 [ 122.187032][ T6480] lo speed is unknown, defaulting to 1000 [ 122.248437][ T6480] lo speed is unknown, defaulting to 1000 [ 122.439222][ T6484] netlink: 'syz.1.682': attribute type 2 has an invalid length. [ 122.447902][ T3317] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000900. [ 122.546248][ T6492] ref_ctr increment failed for inode: 0x292 offset: 0x5 ref_ctr_offset: 0x1000 of mm: 0xffff88814b73e540 [ 122.615750][ T6493] wireguard0: entered promiscuous mode [ 122.621297][ T6493] wireguard0: entered allmulticast mode [ 122.755517][ T6502] netlink: 'syz.4.687': attribute type 1 has an invalid length. [ 122.770300][ T6502] 8021q: adding VLAN 0 to HW filter on device bond0 [ 122.789217][ T6502] bond0 (unregistering): Released all slaves [ 122.964152][ T6510] netlink: 'syz.3.691': attribute type 30 has an invalid length. [ 123.051156][ T6518] netlink: '+}[@': attribute type 4 has an invalid length. [ 123.644376][ T6538] sg_write: data in/out 49276/1 bytes for SCSI command 0x6-- guessing data in; [ 123.644376][ T6538] program syz.4.697 not setting count and/or reply_len properly [ 123.774965][ T6542] __nla_validate_parse: 15 callbacks suppressed [ 123.775031][ T6542] netlink: 4 bytes leftover after parsing attributes in process `syz.4.698'. [ 123.885146][ T6549] netlink: 'syz.0.701': attribute type 13 has an invalid length. [ 123.904206][ T6550] netlink: 24 bytes leftover after parsing attributes in process `syz.3.700'. [ 123.927232][ T6549] gretap0: refused to change device tx_queue_len [ 123.942165][ T6549] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 124.008532][ T6553] netlink: 'syz.1.702': attribute type 3 has an invalid length. [ 124.079256][ T6558] netlink: 20 bytes leftover after parsing attributes in process `syz.2.704'. [ 124.111504][ T6558] netlink: 4 bytes leftover after parsing attributes in process `syz.2.704'. [ 124.187386][ T6566] netlink: 20 bytes leftover after parsing attributes in process `syz.0.706'. [ 124.242323][ T6566] netlink: 4 bytes leftover after parsing attributes in process `syz.0.706'. [ 124.292921][ T6564] netlink: 14 bytes leftover after parsing attributes in process `syz.2.705'. [ 124.771417][ T29] kauditd_printk_skb: 1023 callbacks suppressed [ 124.771432][ T29] audit: type=1400 audit(1766413153.472:22596): avc: denied { setopt } for pid=6577 comm="syz.0.709" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 124.797564][ T29] audit: type=1400 audit(1766413153.472:22597): avc: denied { read write } for pid=6577 comm="syz.0.709" name="snapshot" dev="devtmpfs" ino=90 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 124.821124][ T29] audit: type=1400 audit(1766413153.472:22598): avc: denied { open } for pid=6577 comm="syz.0.709" path="/dev/snapshot" dev="devtmpfs" ino=90 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 125.265833][ T6588] netlink: 8 bytes leftover after parsing attributes in process `syz.1.712'. [ 125.550451][ T6586] loop3: detected capacity change from 0 to 8192 [ 125.659852][ T29] audit: type=1326 audit(1766413154.192:22599): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6587 comm="syz.1.712" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc491d8f749 code=0x7ffc0000 [ 125.683532][ T29] audit: type=1326 audit(1766413154.192:22600): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6587 comm="syz.1.712" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc491d8f749 code=0x7ffc0000 [ 125.707051][ T29] audit: type=1326 audit(1766413154.202:22601): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6587 comm="syz.1.712" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc491d8f749 code=0x7ffc0000 [ 125.730563][ T29] audit: type=1326 audit(1766413154.202:22602): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6587 comm="syz.1.712" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc491d8f749 code=0x7ffc0000 [ 125.754249][ T29] audit: type=1326 audit(1766413154.282:22603): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6587 comm="syz.1.712" exe="/root/syz-executor" sig=0 arch=c000003e syscall=434 compat=0 ip=0x7fc491d8f749 code=0x7ffc0000 [ 125.777911][ T29] audit: type=1326 audit(1766413154.282:22604): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6587 comm="syz.1.712" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc491d8f749 code=0x7ffc0000 [ 125.801495][ T29] audit: type=1326 audit(1766413154.282:22605): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6587 comm="syz.1.712" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc491d8f749 code=0x7ffc0000 [ 126.015873][ T6596] netlink: 20 bytes leftover after parsing attributes in process `syz.2.723'. [ 126.069200][ T6599] netlink: 20 bytes leftover after parsing attributes in process `syz.3.713'. [ 126.111919][ T6599] x_tables: (null)_tables: SNAT target: only valid in nat table, not syz0 [ 126.409249][ T6606] lo speed is unknown, defaulting to 1000 [ 126.416202][ T6606] lo speed is unknown, defaulting to 1000 [ 126.492236][ T6606] lo speed is unknown, defaulting to 1000 [ 128.393303][ T6628] pim6reg: entered allmulticast mode [ 128.451139][ T6628] pim6reg: left allmulticast mode [ 129.452058][ T6724] netlink: 'syz.2.722': attribute type 13 has an invalid length. [ 129.515561][ T6724] gretap0: refused to change device tx_queue_len [ 129.535638][ T6724] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 129.583486][ T6736] __nla_validate_parse: 2 callbacks suppressed [ 129.583503][ T6736] netlink: 20 bytes leftover after parsing attributes in process `syz.3.725'. [ 129.585450][ T6738] xt_policy: input policy not valid in POSTROUTING and OUTPUT [ 129.644831][ T6736] loop3: detected capacity change from 0 to 512 [ 129.651724][ T6736] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 129.675230][ T6736] EXT4-fs error (device loop3): ext4_free_branches:1023: inode #11: comm syz.3.725: invalid indirect mapped block 4294967295 (level 1) [ 129.689780][ T6736] EXT4-fs error (device loop3): ext4_free_branches:1023: inode #11: comm syz.3.725: invalid indirect mapped block 4294967295 (level 1) [ 129.704311][ T6736] EXT4-fs (loop3): 2 truncates cleaned up [ 129.710455][ T6736] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 129.724878][ T6736] netlink: 4 bytes leftover after parsing attributes in process `syz.3.725'. [ 130.102474][ T3317] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 130.249538][ T29] kauditd_printk_skb: 92 callbacks suppressed [ 130.249555][ T29] audit: type=1326 audit(1766413158.922:22698): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6751 comm="syz.1.731" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc491d8f749 code=0x7ffc0000 [ 130.279304][ T29] audit: type=1326 audit(1766413158.922:22699): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6751 comm="syz.1.731" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fc491d8f749 code=0x7ffc0000 [ 130.302756][ T29] audit: type=1326 audit(1766413158.922:22700): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6751 comm="syz.1.731" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc491d8f749 code=0x7ffc0000 [ 130.326325][ T29] audit: type=1326 audit(1766413158.922:22701): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6751 comm="syz.1.731" exe="/root/syz-executor" sig=0 arch=c000003e syscall=193 compat=0 ip=0x7fc491d8f749 code=0x7ffc0000 [ 130.349835][ T29] audit: type=1326 audit(1766413158.922:22702): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6751 comm="syz.1.731" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc491d8f749 code=0x7ffc0000 [ 130.373346][ T29] audit: type=1326 audit(1766413158.922:22703): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6751 comm="syz.1.731" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc491d8f749 code=0x7ffc0000 [ 130.396823][ T29] audit: type=1326 audit(1766413158.952:22704): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6751 comm="syz.1.731" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc491d8f749 code=0x7ffc0000 [ 130.420256][ T29] audit: type=1326 audit(1766413158.952:22705): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6751 comm="syz.1.731" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc491d8f749 code=0x7ffc0000 [ 130.443776][ T29] audit: type=1326 audit(1766413158.952:22706): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6751 comm="syz.1.731" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc491d8f749 code=0x7ffc0000 [ 130.467235][ T29] audit: type=1326 audit(1766413158.952:22707): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6751 comm="syz.1.731" exe="/root/syz-executor" sig=0 arch=c000003e syscall=56 compat=0 ip=0x7fc491d8f749 code=0x7ffc0000 [ 131.049788][ T6767] netlink: 20 bytes leftover after parsing attributes in process `syz.2.733'. [ 131.135691][ T6772] netlink: 4 bytes leftover after parsing attributes in process `syz.2.733'. [ 131.169936][ T6774] netlink: 4 bytes leftover after parsing attributes in process `syz.0.735'. [ 131.208176][ T6776] futex_wake_op: syz.2.736 tries to shift op by 32; fix this program [ 131.527403][ T6784] tipc: New replicast peer: 255.255.255.255 [ 131.533636][ T6784] tipc: Enabled bearer , priority 10 [ 131.540472][ T6784] netlink: 12 bytes leftover after parsing attributes in process `syz.1.739'. [ 131.549401][ T6784] tipc: Disabling bearer [ 131.574300][ T6793] netlink: 20 bytes leftover after parsing attributes in process `syz.4.741'. [ 131.626176][ T6793] loop4: detected capacity change from 0 to 512 [ 131.626179][ T6798] syz0: rxe_newlink: already configured on bond_slave_0 [ 131.642219][ T6793] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 131.713430][ T6793] EXT4-fs error (device loop4): ext4_free_branches:1023: inode #11: comm syz.4.741: invalid indirect mapped block 4294967295 (level 1) [ 131.727868][ T6793] EXT4-fs error (device loop4): ext4_free_branches:1023: inode #11: comm syz.4.741: invalid indirect mapped block 4294967295 (level 1) [ 131.742562][ T6793] EXT4-fs (loop4): 2 truncates cleaned up [ 131.748734][ T6793] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 131.763197][ T6793] netlink: 4 bytes leftover after parsing attributes in process `syz.4.741'. [ 131.956880][ T6806] lo speed is unknown, defaulting to 1000 [ 131.963481][ T6806] lo speed is unknown, defaulting to 1000 [ 132.020227][ T6806] lo speed is unknown, defaulting to 1000 [ 132.684548][ T3326] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 132.700686][ T6814] netlink: 20 bytes leftover after parsing attributes in process `syz.0.746'. [ 132.798875][ T6814] netlink: 4 bytes leftover after parsing attributes in process `syz.0.746'. [ 132.805041][ T6820] loop4: detected capacity change from 0 to 1024 [ 132.832204][ T6821] netlink: 'syz.3.745': attribute type 1 has an invalid length. [ 132.850862][ T6820] EXT4-fs (loop4): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 132.863646][ T6820] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 132.889886][ T6820] JBD2: no valid journal superblock found [ 132.895682][ T6820] EXT4-fs (loop4): Could not load journal inode [ 132.933289][ T6821] 8021q: adding VLAN 0 to HW filter on device bond1 [ 132.975190][ T6820] SELinux: security_context_str_to_sid (Ð-šXܘ7.H\¹ÿ %ºu@) failed with errno=-22 [ 133.024769][ T6826] netlink: 'syz.0.750': attribute type 3 has an invalid length. [ 133.837499][ T6847] loop9: detected capacity change from 0 to 7 [ 133.851427][ T6847] buffer_io_error: 15 callbacks suppressed [ 133.851439][ T6847] Buffer I/O error on dev loop9, logical block 0, async page read [ 133.881910][ T6847] Buffer I/O error on dev loop9, logical block 0, async page read [ 133.889816][ T6847] loop9: unable to read partition table [ 134.027302][ T6847] loop_reread_partitions: partition scan of loop9 (þ被xüŸÑø éÚ¬§½dG¤´à–ƒÝ¡¯ â·û [ 134.027302][ T6847] ) failed (rc=-5) [ 134.089713][ T3507] Buffer I/O error on dev loop9, logical block 0, async page read [ 134.117854][ T3507] Buffer I/O error on dev loop9, logical block 0, async page read [ 134.155734][ T6858] lo speed is unknown, defaulting to 1000 [ 134.162662][ T6858] lo speed is unknown, defaulting to 1000 [ 134.224520][ T6858] lo speed is unknown, defaulting to 1000 [ 134.443392][ T6859] xt_SECMARK: invalid security context 'system_u:object_r:dbusd_etc_t:s0' [ 134.577977][ T3507] Buffer I/O error on dev loop9, logical block 0, async page read [ 134.606944][ T3507] Buffer I/O error on dev loop9, logical block 0, async page read [ 134.627243][ T3507] Buffer I/O error on dev loop9, logical block 0, async page read [ 135.384204][ T6868] netlink: 20 bytes leftover after parsing attributes in process `syz.2.757'. [ 135.514039][ T6875] netlink: 4 bytes leftover after parsing attributes in process `syz.2.757'. [ 135.532792][ T29] kauditd_printk_skb: 231 callbacks suppressed [ 135.532806][ T29] audit: type=1400 audit(1766413164.242:22939): avc: denied { read write } for pid=6869 comm="syz.0.758" name="snapshot" dev="devtmpfs" ino=90 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 135.562528][ T29] audit: type=1400 audit(1766413164.242:22940): avc: denied { ioctl open } for pid=6869 comm="syz.0.758" path="/dev/snapshot" dev="devtmpfs" ino=90 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 135.586593][ T6876] random: crng reseeded on system resumption [ 135.603516][ T29] audit: type=1400 audit(1766413164.302:22941): avc: denied { create } for pid=6873 comm="syz.4.759" anonclass=[io_uring] scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 135.624852][ T29] audit: type=1400 audit(1766413164.302:22942): avc: denied { map } for pid=6873 comm="syz.4.759" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=14558 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 135.649167][ T29] audit: type=1400 audit(1766413164.302:22943): avc: denied { read write } for pid=6873 comm="syz.4.759" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=14558 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 135.714456][ T6881] netlink: 'syz.2.761': attribute type 13 has an invalid length. [ 135.722429][ T6881] netlink: 28 bytes leftover after parsing attributes in process `syz.2.761'. [ 135.774883][ T6870] syzkaller0: entered allmulticast mode [ 135.780657][ T6870] syzkaller0: entered promiscuous mode [ 135.790456][ T6870] syzkaller0 (unregistering): left allmulticast mode [ 135.797274][ T6870] syzkaller0 (unregistering): left promiscuous mode [ 135.822972][ T29] audit: type=1400 audit(1766413164.392:22944): avc: denied { override_creds } for pid=6873 comm="syz.4.759" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 135.843037][ T29] audit: type=1400 audit(1766413164.392:22945): avc: denied { setopt } for pid=6869 comm="syz.0.758" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 135.862771][ T29] audit: type=1326 audit(1766413164.422:22946): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6880 comm="syz.2.761" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe82345f749 code=0x7ffc0000 [ 135.886183][ T29] audit: type=1326 audit(1766413164.422:22947): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6880 comm="syz.2.761" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe82345f749 code=0x7ffc0000 [ 135.909738][ T29] audit: type=1326 audit(1766413164.422:22948): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6880 comm="syz.2.761" exe="/root/syz-executor" sig=0 arch=c000003e syscall=227 compat=0 ip=0x7fe82345f749 code=0x7ffc0000 [ 135.936027][ T6878] netlink: 8 bytes leftover after parsing attributes in process `syz.1.760'. [ 136.026084][ T6886] siw: device registration error -23 [ 136.068300][ T6897] netlink: 20 bytes leftover after parsing attributes in process `syz.2.763'. [ 136.143590][ T6897] netlink: 4 bytes leftover after parsing attributes in process `syz.2.763'. [ 136.224944][ T6904] netlink: 'syz.2.765': attribute type 3 has an invalid length. [ 137.246914][ T6925] netlink: 20 bytes leftover after parsing attributes in process `syz.0.771'. [ 137.342672][ T6925] netlink: 4 bytes leftover after parsing attributes in process `syz.0.771'. [ 137.591725][ T6937] netlink: 12 bytes leftover after parsing attributes in process `syz.4.768'. [ 137.935478][ T6944] netlink: 8 bytes leftover after parsing attributes in process `syz.0.772'. [ 138.234717][ T6946] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 138.314845][ T6946] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 138.336932][ T6951] netlink: 'syz.0.775': attribute type 39 has an invalid length. [ 138.393903][ T6946] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 138.483079][ T6946] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 138.582523][ T4670] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 138.611572][ T4670] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 138.651452][ T4670] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 138.680366][ T4670] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 138.723451][ T6954] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 138.741261][ T6954] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 138.994337][ T6970] loop3: detected capacity change from 0 to 2048 [ 139.063195][ T6970] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000900 r/w without journal. Quota mode: none. [ 139.079191][ T6970] netlink: 'syz.3.780': attribute type 3 has an invalid length. [ 139.197512][ T6976] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1306: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 139.213581][ T6976] EXT4-fs (loop3): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1412 with error 28 [ 139.226212][ T6976] EXT4-fs (loop3): This should not happen!! Data will be lost [ 139.226212][ T6976] [ 139.235934][ T6976] EXT4-fs (loop3): Total free blocks count 0 [ 139.242005][ T6976] EXT4-fs (loop3): Free/Dirty block details [ 139.247926][ T6976] EXT4-fs (loop3): free_blocks=2415919104 [ 139.253726][ T6976] EXT4-fs (loop3): dirty_blocks=1424 [ 139.259043][ T6976] EXT4-fs (loop3): Block reservation details [ 139.265069][ T6976] EXT4-fs (loop3): i_reserved_data_blocks=89 [ 139.275657][ T6978] lo speed is unknown, defaulting to 1000 [ 139.287882][ T6978] lo speed is unknown, defaulting to 1000 [ 139.308599][ T6980] xt_hashlimit: max too large, truncated to 1048576 [ 139.328517][ T6978] lo speed is unknown, defaulting to 1000 [ 139.737843][ T6994] loop4: detected capacity change from 0 to 512 [ 139.776937][ T6994] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 139.810101][ T6994] EXT4-fs warning (device loop4): ext4_expand_extra_isize_ea:2857: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 139.845936][ T6996] xt_CT: You must specify a L4 protocol and not use inversions on it [ 139.867520][ T6994] EXT4-fs (loop4): 1 truncate cleaned up [ 139.885949][ T6994] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 139.960745][ T4675] EXT4-fs (loop3): Delayed block allocation failed for inode 18 at logical offset 2 with max blocks 2 with error 28 [ 140.152347][ T7006] loop3: detected capacity change from 0 to 2048 [ 140.283625][ T7006] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000900 r/w without journal. Quota mode: none. [ 140.308620][ T7006] netlink: 'syz.3.788': attribute type 3 has an invalid length. [ 140.539500][ T7011] __nla_validate_parse: 6 callbacks suppressed [ 140.539519][ T7011] netlink: 8 bytes leftover after parsing attributes in process `syz.1.791'. [ 140.580346][ T29] kauditd_printk_skb: 749 callbacks suppressed [ 140.580374][ T29] audit: type=1400 audit(1766413169.282:23698): avc: denied { setopt } for pid=7017 comm="syz.0.793" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 140.622533][ T29] audit: type=1326 audit(1766413169.332:23699): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7017 comm="syz.0.793" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f34d8ebf749 code=0x7ffc0000 [ 140.647010][ T29] audit: type=1326 audit(1766413169.352:23700): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7017 comm="syz.0.793" exe="/root/syz-executor" sig=0 arch=c000003e syscall=297 compat=0 ip=0x7f34d8ebf749 code=0x7ffc0000 [ 140.670597][ T29] audit: type=1326 audit(1766413169.352:23701): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7017 comm="syz.0.793" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f34d8ebf749 code=0x7ffc0000 [ 140.694125][ T29] audit: type=1326 audit(1766413169.352:23702): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7017 comm="syz.0.793" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f34d8ebf749 code=0x7ffc0000 [ 140.717612][ T29] audit: type=1326 audit(1766413169.352:23703): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7017 comm="syz.0.793" exe="/root/syz-executor" sig=0 arch=c000003e syscall=238 compat=0 ip=0x7f34d8ebf749 code=0x7ffc0000 [ 140.741141][ T29] audit: type=1326 audit(1766413169.352:23704): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7017 comm="syz.0.793" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f34d8ebf749 code=0x7ffc0000 [ 140.764655][ T29] audit: type=1326 audit(1766413169.352:23705): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7017 comm="syz.0.793" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f34d8ebf749 code=0x7ffc0000 [ 140.788767][ T29] audit: type=1326 audit(1766413169.352:23706): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7017 comm="syz.0.793" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7f34d8ebf749 code=0x7ffc0000 [ 140.812284][ T29] audit: type=1326 audit(1766413169.352:23707): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7017 comm="syz.0.793" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f34d8ebf749 code=0x7ffc0000 [ 140.970837][ T3317] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000900. [ 141.116133][ T3326] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 141.173730][ T7026] tipc: New replicast peer: 255.255.255.255 [ 141.179970][ T7026] tipc: Enabled bearer , priority 10 [ 141.188076][ T7026] netlink: 12 bytes leftover after parsing attributes in process `syz.0.795'. [ 141.197032][ T7026] tipc: Disabling bearer [ 141.245636][ T7034] lo speed is unknown, defaulting to 1000 [ 141.252317][ T7034] lo speed is unknown, defaulting to 1000 [ 141.311594][ T7034] lo speed is unknown, defaulting to 1000 [ 141.704018][ T7038] netlink: 4 bytes leftover after parsing attributes in process `syz.4.797'. [ 141.968439][ T7040] netlink: 'syz.1.798': attribute type 3 has an invalid length. [ 142.753897][ T7061] netlink: 20 bytes leftover after parsing attributes in process `syz.0.803'. [ 143.110013][ T7061] netlink: 4 bytes leftover after parsing attributes in process `syz.0.803'. [ 143.536385][ T7081] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 143.582471][ T7081] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 143.821457][ T7081] netlink: 8 bytes leftover after parsing attributes in process `syz.0.808'. [ 144.331902][ T7088] netlink: 8 bytes leftover after parsing attributes in process `syz.2.809'. [ 144.395606][ T7091] loop4: detected capacity change from 0 to 256 [ 144.588216][ T7099] netlink: 32 bytes leftover after parsing attributes in process `syz.4.810'. [ 144.598574][ T7099] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 144.773143][ T7102] loop3: detected capacity change from 0 to 164 [ 145.201188][ T7104] netlink: 4 bytes leftover after parsing attributes in process `syz.2.811'. [ 145.411359][ T7119] netlink: 20 bytes leftover after parsing attributes in process `syz.0.818'. [ 145.548287][ T7129] siw: device registration error -23 [ 145.583348][ T29] kauditd_printk_skb: 349 callbacks suppressed [ 145.583363][ T29] audit: type=1326 audit(1766413174.282:24057): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7133 comm="syz.0.819" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f34d8ebf749 code=0x7ffc0000 [ 145.613052][ T29] audit: type=1326 audit(1766413174.282:24058): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7133 comm="syz.0.819" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f34d8ebf749 code=0x7ffc0000 [ 145.636481][ T29] audit: type=1326 audit(1766413174.282:24059): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7133 comm="syz.0.819" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f34d8ebf749 code=0x7ffc0000 [ 145.660032][ T29] audit: type=1326 audit(1766413174.282:24060): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7133 comm="syz.0.819" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f34d8ebf749 code=0x7ffc0000 [ 145.683545][ T29] audit: type=1326 audit(1766413174.282:24061): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7133 comm="syz.0.819" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f34d8ebf749 code=0x7ffc0000 [ 145.707108][ T29] audit: type=1326 audit(1766413174.282:24062): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7133 comm="syz.0.819" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f34d8ebf749 code=0x7ffc0000 [ 145.730623][ T29] audit: type=1326 audit(1766413174.282:24063): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7133 comm="syz.0.819" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f34d8ebf749 code=0x7ffc0000 [ 145.752190][ T7135] lo speed is unknown, defaulting to 1000 [ 145.754166][ T29] audit: type=1326 audit(1766413174.282:24064): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7133 comm="syz.0.819" exe="/root/syz-executor" sig=0 arch=c000003e syscall=272 compat=0 ip=0x7f34d8ebf749 code=0x7ffc0000 [ 145.767807][ T7135] lo speed is unknown, defaulting to 1000 [ 145.806022][ T29] audit: type=1326 audit(1766413174.342:24065): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7133 comm="syz.0.819" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f34d8ebf749 code=0x7ffc0000 [ 145.829723][ T29] audit: type=1326 audit(1766413174.342:24066): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7133 comm="syz.0.819" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f34d8ebf783 code=0x7ffc0000 [ 145.910899][ T7137] __nla_validate_parse: 1 callbacks suppressed [ 145.910916][ T7137] netlink: 8 bytes leftover after parsing attributes in process `syz.3.820'. [ 145.948726][ T7135] lo speed is unknown, defaulting to 1000 [ 145.964341][ T7137] loop3: detected capacity change from 0 to 512 [ 145.992212][ T7137] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 146.004948][ T7137] EXT4-fs (loop3): too many log groups per flexible block group [ 146.022481][ T7137] EXT4-fs (loop3): failed to initialize mballoc (-12) [ 146.045885][ T7137] EXT4-fs (loop3): mount failed [ 146.298349][ T7157] netlink: 4 bytes leftover after parsing attributes in process `syz.0.825'. [ 146.495281][ T7169] netlink: 4 bytes leftover after parsing attributes in process `syz.0.826'. [ 146.592120][ T7153] lo speed is unknown, defaulting to 1000 [ 146.617100][ T7153] lo speed is unknown, defaulting to 1000 [ 146.738237][ T7175] netlink: 'syz.0.828': attribute type 3 has an invalid length. [ 146.776128][ T7177] netlink: 20 bytes leftover after parsing attributes in process `syz.3.829'. [ 146.783199][ T7153] lo speed is unknown, defaulting to 1000 [ 146.812399][ T7177] loop3: detected capacity change from 0 to 512 [ 146.836475][ T7177] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 146.856496][ T7177] EXT4-fs error (device loop3): ext4_free_branches:1023: inode #11: comm syz.3.829: invalid indirect mapped block 4294967295 (level 1) [ 146.892231][ T7177] EXT4-fs error (device loop3): ext4_free_branches:1023: inode #11: comm syz.3.829: invalid indirect mapped block 4294967295 (level 1) [ 146.934864][ T7177] EXT4-fs (loop3): 2 truncates cleaned up [ 146.946898][ T7177] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 146.983654][ T7177] netlink: 4 bytes leftover after parsing attributes in process `syz.3.829'. [ 147.274930][ T7192] netlink: 'syz.1.831': attribute type 3 has an invalid length. [ 148.030644][ T7182] EXT4-fs error (device loop3): ext4_validate_block_bitmap:432: comm ext4lazyinit: bg 0: block 5: invalid block bitmap [ 148.963372][ T3317] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 149.141714][ T7211] random: crng reseeded on system resumption [ 149.148970][ T7209] SELinux: Context system_u:object is not valid (left unmapped). [ 149.185986][ T7209] netlink: 28 bytes leftover after parsing attributes in process `syz.3.835'. [ 149.212311][ T7211] loop4: detected capacity change from 0 to 512 [ 149.220329][ T7209] netlink: 28 bytes leftover after parsing attributes in process `syz.3.835'. [ 149.248240][ T7211] FAT-fs (loop4): error, clusters badly computed (1 != 0) [ 149.255453][ T7211] FAT-fs (loop4): Filesystem has been set read-only [ 149.302594][ T7216] syzkaller0: entered allmulticast mode [ 149.314572][ T7213] netlink: 8 bytes leftover after parsing attributes in process `syz.1.834'. [ 149.328669][ T7211] syzkaller0: entered promiscuous mode [ 149.350350][ T7211] syzkaller0 (unregistering): left allmulticast mode [ 149.357125][ T7211] syzkaller0 (unregistering): left promiscuous mode [ 149.796802][ T7230] netlink: 'syz.2.841': attribute type 14 has an invalid length. [ 149.804593][ T7230] netlink: 4 bytes leftover after parsing attributes in process `syz.2.841'. [ 149.890248][ T4669] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 149.925403][ T7232] lo speed is unknown, defaulting to 1000 [ 149.940084][ T7237] Invalid argument reading file caps for ./file0 [ 149.958123][ T4669] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 149.981152][ T7236] loop3: detected capacity change from 0 to 1024 [ 149.997436][ T7232] lo speed is unknown, defaulting to 1000 [ 150.020834][ T4669] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 150.066623][ T7236] EXT4-fs: Ignoring removed bh option [ 150.095936][ T4669] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 150.134789][ T7236] EXT4-fs: inline encryption not supported [ 150.187761][ T7236] EXT4-fs (loop3): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 150.230677][ T7236] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c84ce018, mo2=0000] [ 150.245470][ T7236] EXT4-fs error (device loop3): ext4_map_blocks:783: inode #3: block 2: comm syz.3.838: lblock 2 mapped to illegal pblock 2 (length 1) [ 150.266218][ T7232] lo speed is unknown, defaulting to 1000 [ 150.287872][ T7236] EXT4-fs error (device loop3): ext4_map_blocks:783: inode #3: block 48: comm syz.3.838: lblock 0 mapped to illegal pblock 48 (length 1) [ 150.342051][ T7236] EXT4-fs error (device loop3): ext4_acquire_dquot:6986: comm syz.3.838: Failed to acquire dquot type 0 [ 150.381203][ T7236] EXT4-fs error (device loop3) in ext4_reserve_inode_write:6298: Corrupt filesystem [ 150.400834][ T7250] wireguard0: entered promiscuous mode [ 150.406482][ T7250] wireguard0: entered allmulticast mode [ 150.421538][ T7236] EXT4-fs error (device loop3): ext4_evict_inode:253: inode #11: comm syz.3.838: mark_inode_dirty error [ 150.446475][ T7236] EXT4-fs warning (device loop3): ext4_evict_inode:256: couldn't mark inode dirty (err -117) [ 150.456912][ T7236] EXT4-fs (loop3): 1 orphan inode deleted [ 150.464118][ T7236] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 150.464213][ T7244] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 150.491864][ T2860] EXT4-fs error (device loop3): ext4_map_blocks:783: inode #3: block 1: comm kworker/u8:12: lblock 1 mapped to illegal pblock 1 (length 1) [ 150.532332][ T2860] EXT4-fs error (device loop3): ext4_release_dquot:7022: comm kworker/u8:12: Failed to release dquot type 0 [ 150.545762][ T7252] xt_recent: hitcount (687865856) is larger than allowed maximum (65535) [ 150.555585][ T7244] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 150.586048][ T7244] netlink: 8 bytes leftover after parsing attributes in process `syz.0.844'. [ 150.743726][ T29] kauditd_printk_skb: 1114 callbacks suppressed [ 150.743743][ T29] audit: type=1326 audit(1766413179.452:25178): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7227 comm="syz.4.840" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f52a2d2f749 code=0x7ffc0000 [ 150.821934][ T29] audit: type=1326 audit(1766413179.452:25179): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7227 comm="syz.4.840" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f52a2d2f749 code=0x7ffc0000 [ 150.845471][ T29] audit: type=1326 audit(1766413179.452:25180): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7227 comm="syz.4.840" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f52a2d2f749 code=0x7ffc0000 [ 150.869042][ T29] audit: type=1326 audit(1766413179.452:25181): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7227 comm="syz.4.840" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f52a2d2f749 code=0x7ffc0000 [ 150.892561][ T29] audit: type=1326 audit(1766413179.452:25182): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7227 comm="syz.4.840" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f52a2d2f749 code=0x7ffc0000 [ 150.916096][ T29] audit: type=1326 audit(1766413179.452:25183): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7227 comm="syz.4.840" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f52a2d2f749 code=0x7ffc0000 [ 150.939522][ T29] audit: type=1326 audit(1766413179.452:25184): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7227 comm="syz.4.840" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f52a2d2f749 code=0x7ffc0000 [ 150.963017][ T29] audit: type=1326 audit(1766413179.452:25185): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7227 comm="syz.4.840" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f52a2d2f749 code=0x7ffc0000 [ 150.986505][ T29] audit: type=1326 audit(1766413179.452:25186): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7227 comm="syz.4.840" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f52a2d2f749 code=0x7ffc0000 [ 151.010050][ T29] audit: type=1326 audit(1766413179.452:25187): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7227 comm="syz.4.840" exe="/root/syz-executor" sig=0 arch=c000003e syscall=151 compat=0 ip=0x7f52a2d2f749 code=0x7ffc0000 [ 151.048492][ T7258] netlink: 'syz.2.846': attribute type 39 has an invalid length. [ 151.204309][ T7265] netdevsim netdevsim2 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 151.224621][ T7269] __nla_validate_parse: 1 callbacks suppressed [ 151.224635][ T7269] netlink: 20 bytes leftover after parsing attributes in process `syz.0.849'. [ 151.271151][ T7267] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 151.281176][ T7265] netdevsim netdevsim2 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 151.302454][ T7269] netlink: 4 bytes leftover after parsing attributes in process `syz.0.849'. [ 151.333434][ T7265] netdevsim netdevsim2 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 151.387439][ T7274] syzkaller0: entered promiscuous mode [ 151.393068][ T7274] syzkaller0: entered allmulticast mode [ 151.402367][ T7265] netdevsim netdevsim2 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 151.413771][ T7274] xt_SECMARK: invalid mode: 2 [ 151.468915][ T4674] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 151.480768][ T4674] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 151.512408][ T4674] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 151.521327][ T4674] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 151.522155][ T3317] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 151.542286][ T3317] EXT4-fs error (device loop3): __ext4_get_inode_loc:4830: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 151.555393][ T3317] EXT4-fs error (device loop3) in ext4_reserve_inode_write:6298: Corrupt filesystem [ 151.564988][ T3317] EXT4-fs error (device loop3): ext4_quota_off:7270: inode #3: comm syz-executor: mark_inode_dirty error [ 151.577018][ T7276] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 151.592709][ T7276] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 151.608323][ T7281] netlink: 380 bytes leftover after parsing attributes in process `syz.0.852'. [ 151.622115][ T7276] netlink: 8 bytes leftover after parsing attributes in process `syz.4.851'. [ 151.658894][ T7283] tmpfs: Bad value for 'mpol' [ 151.666181][ T7288] rdma_rxe: rxe_newlink: failed to add bond_slave_0 [ 151.681036][ T7276] loop4: detected capacity change from 0 to 4096 [ 151.717916][ T7276] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 152.888423][ T7316] netlink: 4 bytes leftover after parsing attributes in process `syz.1.861'. [ 152.898480][ T7316] netlink: 4 bytes leftover after parsing attributes in process `syz.1.861'. [ 152.988271][ T7321] SELinux: ebitmap: truncated map [ 153.003954][ T7321] SELinux: failed to load policy [ 153.027145][ T3326] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 153.088858][ T7325] netlink: 4 bytes leftover after parsing attributes in process `syz.0.864'. [ 153.126914][ T7319] lo speed is unknown, defaulting to 1000 [ 153.182599][ T7323] netlink: 24 bytes leftover after parsing attributes in process `syz.1.862'. [ 153.328698][ T7319] lo speed is unknown, defaulting to 1000 [ 153.334704][ T7323] netlink: 24 bytes leftover after parsing attributes in process `syz.1.862'. [ 153.603342][ T7319] lo speed is unknown, defaulting to 1000 [ 154.336920][ T7321] infiniband syz!: set down [ 154.341506][ T7321] infiniband syz!: added team_slave_0 [ 154.403185][ T7350] netlink: 'syz.2.867': attribute type 1 has an invalid length. [ 154.446734][ T7350] bond1: (slave vxcan3): The slave device specified does not support setting the MAC address [ 154.457533][ T7350] bond1: (slave vxcan3): Error -95 calling set_mac_address [ 154.677642][ T7321] RDS/IB: syz!: added [ 154.682599][ T7321] smc: adding ib device syz! with port count 1 [ 154.688900][ T7321] smc: ib device syz! port 1 has no pnetid [ 154.805736][ T7354] macvlan0: entered promiscuous mode [ 154.811067][ T7354] macvlan0: entered allmulticast mode [ 154.816909][ T7354] bond1: entered promiscuous mode [ 154.822199][ T7354] 8021q: adding VLAN 0 to HW filter on device macvlan0 [ 154.830699][ T7354] bond1: left promiscuous mode [ 155.164062][ T7342] wg1 speed is unknown, defaulting to 1000 [ 155.170556][ T7343] lo speed is unknown, defaulting to 1000 [ 155.180185][ T7342] wg1 speed is unknown, defaulting to 1000 [ 155.193353][ T7343] lo speed is unknown, defaulting to 1000 [ 155.202205][ T7342] wg1 speed is unknown, defaulting to 1000 [ 155.300663][ T7343] lo speed is unknown, defaulting to 1000 [ 155.347008][ T7365] loop3: detected capacity change from 0 to 128 [ 155.438065][ T7368] netlink: 12 bytes leftover after parsing attributes in process `syz.2.871'. [ 155.482999][ T7342] infiniband syz: RDMA CMA: cma_listen_on_dev, error -98 [ 155.510984][ T7365] bio_check_eod: 65 callbacks suppressed [ 155.511003][ T7365] syz.3.872: attempt to access beyond end of device [ 155.511003][ T7365] loop3: rw=2049, sector=169, nr_sectors = 8 limit=128 [ 155.536223][ T7342] wg1 speed is unknown, defaulting to 1000 [ 155.571201][ T7342] wg1 speed is unknown, defaulting to 1000 [ 155.571681][ T7367] lo speed is unknown, defaulting to 1000 [ 155.597713][ T7365] syz.3.872: attempt to access beyond end of device [ 155.597713][ T7365] loop3: rw=2049, sector=185, nr_sectors = 16 limit=128 [ 155.603608][ T7342] wg1 speed is unknown, defaulting to 1000 [ 155.632291][ T7367] lo speed is unknown, defaulting to 1000 [ 155.648289][ T7365] syz.3.872: attempt to access beyond end of device [ 155.648289][ T7365] loop3: rw=2049, sector=209, nr_sectors = 8 limit=128 [ 155.659302][ T7342] wg1 speed is unknown, defaulting to 1000 [ 155.698502][ T7342] wg1 speed is unknown, defaulting to 1000 [ 155.704501][ T7365] syz.3.872: attempt to access beyond end of device [ 155.704501][ T7365] loop3: rw=2049, sector=225, nr_sectors = 8 limit=128 [ 155.726161][ T7342] wg1 speed is unknown, defaulting to 1000 [ 155.753874][ T7342] wg1 speed is unknown, defaulting to 1000 [ 155.761969][ T7365] syz.3.872: attempt to access beyond end of device [ 155.761969][ T7365] loop3: rw=2049, sector=241, nr_sectors = 8 limit=128 [ 155.809952][ T7365] syz.3.872: attempt to access beyond end of device [ 155.809952][ T7365] loop3: rw=2049, sector=257, nr_sectors = 8 limit=128 [ 155.838787][ T7365] syz.3.872: attempt to access beyond end of device [ 155.838787][ T7365] loop3: rw=2049, sector=273, nr_sectors = 8 limit=128 [ 155.859528][ T7367] lo speed is unknown, defaulting to 1000 [ 155.891650][ T7374] hub 9-0:1.0: USB hub found [ 155.897773][ T7365] syz.3.872: attempt to access beyond end of device [ 155.897773][ T7365] loop3: rw=2049, sector=289, nr_sectors = 8 limit=128 [ 155.911942][ T7374] hub 9-0:1.0: 8 ports detected [ 155.935800][ T7374] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=7374 comm=syz.0.873 [ 155.948106][ T29] kauditd_printk_skb: 410 callbacks suppressed [ 155.948119][ T29] audit: type=1400 audit(1766413182.646:25598): avc: denied { nlmsg_write } for pid=7372 comm="syz.0.873" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_audit_socket permissive=1 [ 155.951924][ T7365] syz.3.872: attempt to access beyond end of device [ 155.951924][ T7365] loop3: rw=2049, sector=305, nr_sectors = 8 limit=128 [ 156.030180][ T29] audit: type=1326 audit(1766413182.736:25599): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7372 comm="syz.0.873" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f34d8ebf749 code=0x7ffc0000 [ 156.054673][ T7374] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=36 sclass=netlink_audit_socket pid=7374 comm=syz.0.873 [ 156.068999][ T7365] syz.3.872: attempt to access beyond end of device [ 156.068999][ T7365] loop3: rw=2049, sector=321, nr_sectors = 8 limit=128 [ 156.108238][ T29] audit: type=1326 audit(1766413182.766:25600): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7372 comm="syz.0.873" exe="/root/syz-executor" sig=0 arch=c000003e syscall=121 compat=0 ip=0x7f34d8ebf749 code=0x7ffc0000 [ 156.131822][ T29] audit: type=1326 audit(1766413182.766:25601): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7372 comm="syz.0.873" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f34d8ebf749 code=0x7ffc0000 [ 156.155331][ T29] audit: type=1326 audit(1766413182.766:25602): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7372 comm="syz.0.873" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f34d8ebf749 code=0x7ffc0000 [ 156.178965][ T29] audit: type=1326 audit(1766413182.766:25603): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7372 comm="syz.0.873" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f34d8ebf749 code=0x7ffc0000 [ 156.202376][ T29] audit: type=1326 audit(1766413182.796:25604): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7372 comm="syz.0.873" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f34d8ebf749 code=0x7ffc0000 [ 156.225786][ T29] audit: type=1326 audit(1766413182.796:25605): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7372 comm="syz.0.873" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f34d8ebf749 code=0x7ffc0000 [ 156.249203][ T29] audit: type=1326 audit(1766413182.796:25606): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7372 comm="syz.0.873" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f34d8ebf749 code=0x7ffc0000 [ 156.272632][ T29] audit: type=1326 audit(1766413182.796:25607): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7372 comm="syz.0.873" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f34d8ebf749 code=0x7ffc0000 [ 156.434658][ T7381] netlink: 4 bytes leftover after parsing attributes in process `syz.0.875'. [ 156.601204][ T4675] Bluetooth: hci0: Frame reassembly failed (-84) [ 156.622411][ T7395] loop4: detected capacity change from 0 to 512 [ 156.629470][ T7395] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 156.639364][ T7395] EXT4-fs (loop4): couldn't mount as ext2 due to feature incompatibilities [ 156.679640][ T7395] netlink: 176 bytes leftover after parsing attributes in process `syz.4.878'. [ 156.756477][ T7392] netlink: 8 bytes leftover after parsing attributes in process `syz.2.876'. [ 156.808081][ T7397] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 156.857859][ T7397] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 156.910603][ T7397] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 156.960362][ T7397] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 156.980738][ T7395] loop4: detected capacity change from 0 to 512 [ 156.990887][ T7395] EXT4-fs (loop4): failed to initialize system zone (-117) [ 156.999987][ T7395] EXT4-fs (loop4): mount failed [ 157.047756][ T4675] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 157.060829][ T4675] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 157.084807][ T4675] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 157.098577][ T4675] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 157.183997][ T7404] loop4: detected capacity change from 0 to 164 [ 157.186164][ T7406] gretap1: entered promiscuous mode [ 157.200836][ T7404] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 157.389887][ T7408] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 157.398291][ T7408] rock: directory entry would overflow storage [ 157.404578][ T7408] rock: sig=0x4f50, size=4, remaining=3 [ 157.410142][ T7408] iso9660: Corrupted directory entry in block 4 of inode 1792 [ 157.708697][ T7418] rdma_rxe: rxe_newlink: failed to add bond_slave_0 [ 157.737842][ T7423] netlink: 380 bytes leftover after parsing attributes in process `syz.4.887'. [ 158.254800][ T7431] netlink: 68 bytes leftover after parsing attributes in process `syz.4.888'. [ 158.302602][ T7433] IPv6: NLM_F_CREATE should be specified when creating new route [ 158.325529][ T7433] loop4: detected capacity change from 0 to 1024 [ 158.342431][ T7433] EXT4-fs: Ignoring removed orlov option [ 158.356700][ T7433] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 158.501875][ T7437] netlink: 8 bytes leftover after parsing attributes in process `syz.4.889'. [ 158.584199][ T7440] wireguard0: entered promiscuous mode [ 158.589750][ T7440] wireguard0: entered allmulticast mode [ 158.635548][ T7444] loop3: detected capacity change from 0 to 512 [ 158.641991][ T3522] Bluetooth: hci0: command 0x1003 tx timeout [ 158.643543][ T44] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 158.692278][ T7444] EXT4-fs: dax option not supported [ 158.745622][ T7447] netlink: 176 bytes leftover after parsing attributes in process `syz.0.892'. [ 158.799020][ T7444] lo speed is unknown, defaulting to 1000 [ 158.825455][ T7444] lo speed is unknown, defaulting to 1000 [ 158.913700][ T7444] lo speed is unknown, defaulting to 1000 [ 158.997747][ T3326] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 159.109303][ T7458] xt_SECMARK: invalid mode: 2 [ 159.299879][ T7444] wg1 speed is unknown, defaulting to 1000 [ 159.395406][ T7466] netlink: 9 bytes leftover after parsing attributes in process `syz.0.896'. [ 159.433861][ T7466] netlink: 9 bytes leftover after parsing attributes in process `syz.0.896'. [ 159.662486][ T7478] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 159.671127][ T7478] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 160.463023][ T7486] loop3: detected capacity change from 0 to 512 [ 160.473881][ T7486] EXT4-fs error (device loop3): ext4_orphan_get:1391: inode #15: comm syz.3.901: inode has both inline data and extents flags [ 160.473988][ T7486] EXT4-fs error (device loop3): ext4_orphan_get:1396: comm syz.3.901: couldn't read orphan inode 15 (err -117) [ 160.480775][ T7486] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 160.481443][ T7486] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 160.599447][ T7492] netlink: 4 bytes leftover after parsing attributes in process `syz.3.901'. [ 160.906478][ T7502] loop4: detected capacity change from 0 to 512 [ 160.912325][ T7502] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 160.912341][ T7502] EXT4-fs (loop4): couldn't mount as ext2 due to feature incompatibilities [ 161.034098][ T29] kauditd_printk_skb: 671 callbacks suppressed [ 161.034113][ T29] audit: type=1326 audit(1766413187.746:26279): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7501 comm="syz.4.903" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f52a2d2f749 code=0x7ffc0000 [ 161.034147][ T29] audit: type=1326 audit(1766413187.746:26280): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7501 comm="syz.4.903" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f52a2d2f749 code=0x7ffc0000 [ 161.350078][ T29] audit: type=1326 audit(1766413188.056:26281): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7505 comm="syz.3.904" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fda2ba1f749 code=0x7ffc0000 [ 161.442145][ T29] audit: type=1326 audit(1766413188.066:26282): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7505 comm="syz.3.904" exe="/root/syz-executor" sig=0 arch=c000003e syscall=297 compat=0 ip=0x7fda2ba1f749 code=0x7ffc0000 [ 161.452090][ T7507] wireguard0: entered promiscuous mode [ 161.465788][ T29] audit: type=1326 audit(1766413188.066:26283): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7505 comm="syz.3.904" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fda2ba1f749 code=0x7ffc0000 [ 161.465900][ T29] audit: type=1326 audit(1766413188.066:26284): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7505 comm="syz.3.904" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7fda2ba1f749 code=0x7ffc0000 [ 161.465933][ T29] audit: type=1326 audit(1766413188.066:26285): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7505 comm="syz.3.904" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fda2ba1f749 code=0x7ffc0000 [ 161.466035][ T29] audit: type=1326 audit(1766413188.066:26286): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7505 comm="syz.3.904" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fda2ba1f749 code=0x7ffc0000 [ 161.552853][ T7503] loop4: detected capacity change from 0 to 512 [ 161.566732][ T7507] wireguard0: entered allmulticast mode [ 161.591890][ T29] audit: type=1326 audit(1766413188.276:26287): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7501 comm="syz.4.903" exe="/root/syz-executor" sig=0 arch=c000003e syscall=65 compat=0 ip=0x7f52a2d2f749 code=0x7ffc0000 [ 161.615299][ T29] audit: type=1326 audit(1766413188.276:26288): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7501 comm="syz.4.903" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f52a2d2f749 code=0x7ffc0000 [ 161.655750][ T7517] __nla_validate_parse: 2 callbacks suppressed [ 161.655807][ T7517] netlink: 4 bytes leftover after parsing attributes in process `syz.0.905'. [ 161.681459][ T7503] EXT4-fs (loop4): failed to initialize system zone (-117) [ 161.726346][ T7523] netlink: 24 bytes leftover after parsing attributes in process `syz.2.906'. [ 161.736685][ T7503] EXT4-fs (loop4): mount failed [ 161.809039][ T7514] lo speed is unknown, defaulting to 1000 [ 161.844112][ T7514] lo speed is unknown, defaulting to 1000 [ 161.866699][ T7527] lo speed is unknown, defaulting to 1000 [ 161.963161][ T7527] lo speed is unknown, defaulting to 1000 [ 161.972451][ T7514] lo speed is unknown, defaulting to 1000 [ 161.983257][ T7528] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(14) [ 161.989960][ T7528] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 161.997509][ T7528] vhci_hcd vhci_hcd.0: Device attached [ 162.123845][ T7527] lo speed is unknown, defaulting to 1000 [ 162.251970][ T36] usb 1-1: new low-speed USB device number 2 using vhci_hcd [ 162.435956][ T7514] wg1 speed is unknown, defaulting to 1000 [ 162.543415][ T7545] netlink: 4 bytes leftover after parsing attributes in process `syz.3.911'. [ 162.564090][ T7545] netlink: 4 bytes leftover after parsing attributes in process `syz.3.911'. [ 162.648645][ T7527] wg1 speed is unknown, defaulting to 1000 [ 162.688786][ T7533] vhci_hcd: connection reset by peer [ 162.704243][ T4669] vhci_hcd vhci_hcd.0: stop threads [ 162.709586][ T4669] vhci_hcd vhci_hcd.0: release socket [ 162.715675][ T4669] vhci_hcd vhci_hcd.0: disconnect device [ 162.800044][ T7553] netlink: 12 bytes leftover after parsing attributes in process `syz.3.913'. [ 163.053330][ T7557] xt_connbytes: Forcing CT accounting to be enabled [ 163.070219][ T7557] set match dimension is over the limit! [ 163.320913][ T7571] loop4: detected capacity change from 0 to 1024 [ 163.327882][ T7571] EXT4-fs: Ignoring removed nobh option [ 163.334747][ T7571] EXT4-fs (loop4): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 163.382089][ T7571] EXT4-fs error (device loop4): ext4_ext_check_inode:523: inode #11: comm syz.4.917: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 32512(32512) [ 163.400858][ T7571] EXT4-fs error (device loop4): ext4_orphan_get:1396: comm syz.4.917: couldn't read orphan inode 11 (err -117) [ 163.414056][ T7571] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 163.444427][ T7578] netlink: 20 bytes leftover after parsing attributes in process `syz.0.919'. [ 163.481655][ T7571] EXT4-fs error (device loop4): ext4_read_block_bitmap_nowait:483: comm syz.4.917: Invalid block bitmap block 0 in block_group 0 [ 163.495448][ T7571] EXT4-fs error (device loop4): ext4_acquire_dquot:6986: comm syz.4.917: Failed to acquire dquot type 0 [ 163.555824][ T7578] netlink: 4 bytes leftover after parsing attributes in process `syz.0.919'. [ 163.707786][ T7586] netlink: 24 bytes leftover after parsing attributes in process `syz.2.921'. [ 163.971759][ T3326] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 164.039138][ T7591] lo speed is unknown, defaulting to 1000 [ 164.047273][ T7591] lo speed is unknown, defaulting to 1000 [ 164.078690][ T7594] loop3: detected capacity change from 0 to 512 [ 164.092563][ T7594] journal_path: Non-blockdev passed as './bus' [ 164.098772][ T7594] EXT4-fs: error: could not find journal device path [ 164.191027][ T7597] netlink: 24 bytes leftover after parsing attributes in process `syz.3.923'. [ 164.413485][ T7596] debugfs: 'netdev@ffff88811abfc558' already exists in 'ref_tracker' [ 164.542153][ T7591] lo speed is unknown, defaulting to 1000 [ 164.988906][ T7591] wg1 speed is unknown, defaulting to 1000 [ 165.105893][ T4669] Bluetooth: hci0: Frame reassembly failed (-84) [ 165.473847][ T7620] loop3: detected capacity change from 0 to 1024 [ 165.542206][ T7619] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=7619 comm=syz.1.928 [ 165.571920][ T7620] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 165.680597][ T7625] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=36 sclass=netlink_audit_socket pid=7625 comm=syz.1.928 [ 165.859293][ T7627] 9p: Bad value for 'wfdno' [ 166.240411][ T7635] lo speed is unknown, defaulting to 1000 [ 166.264010][ T7635] lo speed is unknown, defaulting to 1000 [ 166.425212][ T7635] lo speed is unknown, defaulting to 1000 [ 166.447238][ T7639] netlink: 20 bytes leftover after parsing attributes in process `syz.1.931'. [ 166.926282][ T7635] wg1 speed is unknown, defaulting to 1000 [ 167.131923][ T3522] Bluetooth: hci0: command 0x1003 tx timeout [ 167.141822][ T44] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 167.295334][ T36] usb 1-1: enqueue for inactive port 0 [ 167.327159][ T36] usb 1-1: enqueue for inactive port 0 [ 167.401893][ T36] vhci_hcd vhci_hcd.0: vhci_device speed not set [ 167.426043][ T3317] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 167.467696][ T29] kauditd_printk_skb: 580 callbacks suppressed [ 167.467714][ T29] audit: type=1400 audit(1766413194.176:26867): avc: denied { read } for pid=7648 comm="syz.4.934" name="rtc0" dev="devtmpfs" ino=244 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 167.496935][ T29] audit: type=1400 audit(1766413194.176:26868): avc: denied { open } for pid=7648 comm="syz.4.934" path="/dev/rtc0" dev="devtmpfs" ino=244 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 167.524982][ T29] audit: type=1326 audit(1766413194.226:26869): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7648 comm="syz.4.934" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f52a2d2f749 code=0x7ffc0000 [ 167.548560][ T29] audit: type=1326 audit(1766413194.226:26870): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7648 comm="syz.4.934" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f52a2d2f749 code=0x7ffc0000 [ 167.572155][ T29] audit: type=1326 audit(1766413194.236:26871): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7648 comm="syz.4.934" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f52a2d2f749 code=0x7ffc0000 [ 167.595650][ T29] audit: type=1326 audit(1766413194.236:26872): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7648 comm="syz.4.934" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f52a2d2f749 code=0x7ffc0000 [ 167.619095][ T29] audit: type=1326 audit(1766413194.236:26873): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7648 comm="syz.4.934" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f52a2d2f749 code=0x7ffc0000 [ 167.642506][ T29] audit: type=1326 audit(1766413194.236:26874): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7648 comm="syz.4.934" exe="/root/syz-executor" sig=0 arch=c000003e syscall=282 compat=0 ip=0x7f52a2d2f749 code=0x7ffc0000 [ 167.665920][ T29] audit: type=1326 audit(1766413194.236:26875): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7648 comm="syz.4.934" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f52a2d2f749 code=0x7ffc0000 [ 167.689376][ T29] audit: type=1326 audit(1766413194.236:26876): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7648 comm="syz.4.934" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f52a2d2f749 code=0x7ffc0000 [ 167.721035][ T7649] loop4: detected capacity change from 0 to 512 [ 167.728010][ T7649] ext4: Unknown parameter 'subj_role' [ 167.979018][ T7656] loop3: detected capacity change from 0 to 1024 [ 167.986283][ T7656] EXT4-fs: Ignoring removed nobh option [ 168.062415][ T7656] EXT4-fs (loop3): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 168.133162][ T7649] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 168.145309][ T7649] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 168.173197][ T7656] EXT4-fs error (device loop3): ext4_ext_check_inode:523: inode #11: comm syz.3.933: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 32512(32512) [ 168.194611][ T7656] EXT4-fs error (device loop3): ext4_orphan_get:1396: comm syz.3.933: couldn't read orphan inode 11 (err -117) [ 168.207567][ T7656] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 168.284597][ T7663] EXT4-fs error (device loop3): ext4_read_block_bitmap_nowait:483: comm syz.3.933: Invalid block bitmap block 0 in block_group 0 [ 168.299157][ T7663] EXT4-fs error (device loop3): ext4_acquire_dquot:6986: comm syz.3.933: Failed to acquire dquot type 0 [ 168.765044][ T7668] __nla_validate_parse: 1 callbacks suppressed [ 168.765062][ T7668] netlink: 176 bytes leftover after parsing attributes in process `syz.1.938'. [ 169.063363][ T7672] netlink: 4 bytes leftover after parsing attributes in process `syz.2.939'. [ 169.075043][ T7672] netlink: 4 bytes leftover after parsing attributes in process `syz.2.939'. [ 169.434720][ T7680] lo speed is unknown, defaulting to 1000 [ 169.440975][ T7680] lo speed is unknown, defaulting to 1000 [ 169.485940][ T7680] lo speed is unknown, defaulting to 1000 [ 169.788279][ T7680] wg1 speed is unknown, defaulting to 1000 [ 170.526952][ T7688] xt_TPROXY: Can be used only with -p tcp or -p udp [ 170.535472][ T7682] netlink: 8 bytes leftover after parsing attributes in process `syz.1.942'. [ 171.792702][ T7685] netlink: 'syz.0.941': attribute type 1 has an invalid length. [ 172.183755][ T7694] bond2: (slave vxcan3): The slave device specified does not support setting the MAC address [ 172.199222][ T7694] bond2: (slave vxcan3): Error -95 calling set_mac_address [ 172.230447][ T7699] netlink: 20 bytes leftover after parsing attributes in process `syz.2.945'. [ 172.261213][ T7695] macvlan3: entered promiscuous mode [ 172.266577][ T7695] macvlan3: entered allmulticast mode [ 172.272411][ T7695] bond2: entered promiscuous mode [ 172.277811][ T7695] 8021q: adding VLAN 0 to HW filter on device macvlan3 [ 172.289562][ T7695] bond2: left promiscuous mode [ 172.305885][ T7692] netlink: 4 bytes leftover after parsing attributes in process `syz.4.944'. [ 172.321415][ T7703] netlink: 4 bytes leftover after parsing attributes in process `syz.2.945'. [ 172.500661][ T3317] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 172.581398][ T36] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 172.589979][ T7710] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 172.608261][ T7714] loop3: detected capacity change from 0 to 512 [ 172.615748][ T7710] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 172.618295][ T7713] netlink: 83992 bytes leftover after parsing attributes in process `syz.2.946'. [ 172.633571][ T36] hid-generic 0000:0000:0000.0001: hidraw0: HID v0.00 Device [syz1] on syz0 [ 172.662647][ T7713] netlink: zone id is out of range [ 172.667833][ T7713] netlink: zone id is out of range [ 172.697436][ T7713] netlink: zone id is out of range [ 172.703054][ T29] kauditd_printk_skb: 458 callbacks suppressed [ 172.703071][ T29] audit: type=1400 audit(1766413199.416:27333): avc: denied { create } for pid=7707 comm="syz.3.947" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 172.734328][ T7713] netlink: zone id is out of range [ 172.762554][ T7713] netlink: zone id is out of range [ 172.767721][ T7713] netlink: zone id is out of range [ 172.773072][ T7713] netlink: zone id is out of range [ 172.799501][ T29] audit: type=1326 audit(1766413199.436:27334): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7711 comm="syz.0.950" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f34d8ebf749 code=0x7ffc0000 [ 172.799523][ T7713] netlink: zone id is out of range [ 172.823100][ T29] audit: type=1326 audit(1766413199.436:27335): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7711 comm="syz.0.950" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f34d8ebf749 code=0x7ffc0000 [ 172.823207][ T29] audit: type=1326 audit(1766413199.436:27336): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7711 comm="syz.0.950" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f34d8ebf749 code=0x7ffc0000 [ 172.823238][ T29] audit: type=1326 audit(1766413199.436:27337): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7711 comm="syz.0.950" exe="/root/syz-executor" sig=0 arch=c000003e syscall=299 compat=0 ip=0x7f34d8ebf749 code=0x7ffc0000 [ 172.823270][ T29] audit: type=1400 audit(1766413199.436:27338): avc: denied { read } for pid=7711 comm="syz.0.950" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 172.823311][ T29] audit: type=1326 audit(1766413199.436:27339): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7711 comm="syz.0.950" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f34d8ebf749 code=0x7ffc0000 [ 172.823344][ T29] audit: type=1326 audit(1766413199.436:27340): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7711 comm="syz.0.950" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f34d8ebf749 code=0x7ffc0000 [ 172.823427][ T29] audit: type=1326 audit(1766413199.436:27341): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7711 comm="syz.0.950" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f34d8ebf749 code=0x7ffc0000 [ 172.823455][ T29] audit: type=1326 audit(1766413199.436:27342): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7711 comm="syz.0.950" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f34d8ebf749 code=0x7ffc0000 [ 173.127390][ T7713] netlink: zone id is out of range [ 173.167125][ T7713] netlink: set zone limit has 8 unknown bytes [ 173.309562][ T7712] team_slave_0: left promiscuous mode [ 173.315792][ T7712] team_slave_1: left promiscuous mode [ 173.397341][ T7731] netlink: 8 bytes leftover after parsing attributes in process `syz.1.952'. [ 173.408832][ T7712] bridge_slave_0: left promiscuous mode [ 173.561428][ T7723] pim6reg1: entered promiscuous mode [ 173.566899][ T7723] pim6reg1: entered allmulticast mode [ 173.574569][ T7733] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=12 sclass=netlink_route_socket pid=7733 comm=syz.2.953 [ 173.589794][ T7737] wireguard0: entered promiscuous mode [ 173.595355][ T7737] wireguard0: entered allmulticast mode [ 173.615863][ T4669] netdevsim netdevsim0 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 173.637374][ T4669] netdevsim netdevsim0 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 173.646054][ T4669] netdevsim netdevsim0 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 173.659661][ T4669] netdevsim netdevsim0 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 173.959652][ T7753] netlink: 4 bytes leftover after parsing attributes in process `syz.2.955'. [ 173.978713][ T7758] netlink: 20 bytes leftover after parsing attributes in process `syz.1.957'. [ 174.006535][ T7758] netlink: 4 bytes leftover after parsing attributes in process `syz.1.957'. [ 174.102888][ T7762] lo speed is unknown, defaulting to 1000 [ 174.109304][ T7762] lo speed is unknown, defaulting to 1000 [ 174.170343][ T7762] lo speed is unknown, defaulting to 1000 [ 174.179696][ T7763] loop3: detected capacity change from 0 to 1024 [ 174.192980][ T7767] loop4: detected capacity change from 0 to 512 [ 174.200320][ T7763] EXT4-fs: Ignoring removed bh option [ 174.207057][ T7763] EXT4-fs: inline encryption not supported [ 174.214122][ T7763] EXT4-fs (loop3): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 174.232273][ T7767] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 174.265610][ T7767] EXT4-fs (loop4): orphan cleanup on readonly fs [ 174.287432][ T7763] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c84ce018, mo2=0000] [ 174.336551][ T7767] EXT4-fs error (device loop4): ext4_do_update_inode:5617: inode #16: comm syz.4.959: corrupted inode contents [ 174.362331][ T7763] EXT4-fs error (device loop3): ext4_map_blocks:783: inode #3: block 2: comm syz.3.956: lblock 2 mapped to illegal pblock 2 (length 1) [ 174.392722][ T7767] EXT4-fs error (device loop4): ext4_dirty_inode:6502: inode #16: comm syz.4.959: mark_inode_dirty error [ 174.420445][ T7763] EXT4-fs error (device loop3): ext4_map_blocks:783: inode #3: block 48: comm syz.3.956: lblock 0 mapped to illegal pblock 48 (length 1) [ 174.445124][ T7767] EXT4-fs error (device loop4): ext4_do_update_inode:5617: inode #16: comm syz.4.959: corrupted inode contents [ 174.482868][ T7763] EXT4-fs error (device loop3): ext4_acquire_dquot:6986: comm syz.3.956: Failed to acquire dquot type 0 [ 174.486885][ T7767] EXT4-fs error (device loop4): __ext4_ext_dirty:206: inode #16: comm syz.4.959: mark_inode_dirty error [ 174.522801][ T7763] EXT4-fs error (device loop3) in ext4_reserve_inode_write:6298: Corrupt filesystem [ 174.536197][ T7767] EXT4-fs error (device loop4): ext4_do_update_inode:5617: inode #16: comm syz.4.959: corrupted inode contents [ 174.548448][ T7763] EXT4-fs error (device loop3): ext4_evict_inode:253: inode #11: comm syz.3.956: mark_inode_dirty error [ 174.548777][ T7767] EXT4-fs error (device loop4) in ext4_orphan_del:303: Corrupt filesystem [ 174.568498][ T7763] EXT4-fs warning (device loop3): ext4_evict_inode:256: couldn't mark inode dirty (err -117) [ 174.573141][ T7768] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 174.589762][ T7768] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 174.598904][ T7763] EXT4-fs (loop3): 1 orphan inode deleted [ 174.605602][ T7767] EXT4-fs error (device loop4): ext4_do_update_inode:5617: inode #16: comm syz.4.959: corrupted inode contents [ 174.614624][ T4675] EXT4-fs error (device loop3): ext4_map_blocks:783: inode #3: block 1: comm kworker/u8:40: lblock 1 mapped to illegal pblock 1 (length 1) [ 174.631740][ T7767] EXT4-fs error (device loop4): ext4_truncate:4635: inode #16: comm syz.4.959: mark_inode_dirty error [ 174.640080][ T7763] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 174.644724][ T7767] EXT4-fs error (device loop4) in ext4_process_orphan:345: Corrupt filesystem [ 174.665570][ T7767] EXT4-fs (loop4): 1 truncate cleaned up [ 174.681958][ T4675] EXT4-fs error (device loop3): ext4_release_dquot:7022: comm kworker/u8:40: Failed to release dquot type 0 [ 174.694341][ T4675] EXT4-fs error (device loop4): ext4_release_dquot:7022: comm kworker/u8:40: Failed to release dquot type 1 [ 174.710875][ T7767] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 174.728817][ T7762] wg1 speed is unknown, defaulting to 1000 [ 174.742399][ T3326] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 174.837413][ T7778] loop4: detected capacity change from 0 to 128 [ 175.048864][ T7778] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 175.059114][ T7778] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 175.070727][ T7780] netlink: 8 bytes leftover after parsing attributes in process `syz.2.962'. [ 175.331651][ T3317] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 175.341570][ T3317] EXT4-fs error (device loop3): __ext4_get_inode_loc:4830: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 175.355664][ T3317] EXT4-fs error (device loop3) in ext4_reserve_inode_write:6298: Corrupt filesystem [ 175.383874][ T3317] EXT4-fs error (device loop3): ext4_quota_off:7270: inode #3: comm syz-executor: mark_inode_dirty error [ 175.785933][ T7793] netlink: 20 bytes leftover after parsing attributes in process `syz.3.964'. [ 175.827532][ T7793] loop3: detected capacity change from 0 to 512 [ 175.848259][ T7793] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 175.867283][ T7793] EXT4-fs error (device loop3): ext4_free_branches:1023: inode #11: comm syz.3.964: invalid indirect mapped block 4294967295 (level 1) [ 175.881450][ T7799] wireguard0: entered promiscuous mode [ 175.882864][ T7793] EXT4-fs error (device loop3): ext4_free_branches:1023: inode #11: comm syz.3.964: invalid indirect mapped block 4294967295 (level 1) [ 175.887063][ T7799] wireguard0: entered allmulticast mode [ 175.903366][ T7793] EXT4-fs (loop3): 2 truncates cleaned up [ 175.912700][ T7793] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 175.927796][ T7793] netlink: 4 bytes leftover after parsing attributes in process `syz.3.964'. [ 175.980146][ T7804] netlink: 4 bytes leftover after parsing attributes in process `syz.1.968'. [ 176.024359][ T7798] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 176.033808][ T7798] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 176.053285][ T7798] netlink: 8 bytes leftover after parsing attributes in process `syz.4.967'. [ 176.055329][ T7811] netlink: 24 bytes leftover after parsing attributes in process `syz.0.969'. [ 176.087669][ T7798] loop4: detected capacity change from 0 to 4096 [ 176.106226][ T7798] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 176.551502][ T7832] siw: device registration error -23 [ 176.654224][ T3326] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 176.667570][ T3317] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 176.700680][ T7837] netlink: 20 bytes leftover after parsing attributes in process `syz.3.976'. [ 176.746654][ T7835] lo speed is unknown, defaulting to 1000 [ 176.766907][ T7843] loop3: detected capacity change from 0 to 512 [ 176.771655][ T7835] lo speed is unknown, defaulting to 1000 [ 176.782446][ T7843] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 176.795366][ T7843] EXT4-fs error (device loop3): ext4_free_branches:1023: inode #11: comm syz.3.976: invalid indirect mapped block 4294967295 (level 1) [ 176.813772][ T7843] EXT4-fs error (device loop3): ext4_free_branches:1023: inode #11: comm syz.3.976: invalid indirect mapped block 4294967295 (level 1) [ 176.830350][ T7843] EXT4-fs (loop3): 2 truncates cleaned up [ 176.838467][ T7843] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 176.891466][ T3317] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 176.941057][ T7835] lo speed is unknown, defaulting to 1000 [ 177.010544][ T7853] 9p: Bad value for 'rfdno' [ 177.197079][ T7856] tipc: Enabled bearer , priority 0 [ 177.345674][ T7835] wg1 speed is unknown, defaulting to 1000 [ 177.741927][ T29] kauditd_printk_skb: 388 callbacks suppressed [ 177.741949][ T29] audit: type=1326 audit(1766413204.436:27727): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7870 comm="syz.4.983" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f52a2d2f749 code=0x7ffc0000 [ 177.771687][ T29] audit: type=1326 audit(1766413204.436:27728): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7870 comm="syz.4.983" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f52a2d2f749 code=0x7ffc0000 [ 177.795160][ T29] audit: type=1326 audit(1766413204.436:27729): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7870 comm="syz.4.983" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7f52a2d2f749 code=0x7ffc0000 [ 177.818892][ T29] audit: type=1326 audit(1766413204.436:27730): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7870 comm="syz.4.983" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f52a2d2f749 code=0x7ffc0000 [ 177.842517][ T29] audit: type=1326 audit(1766413204.436:27731): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7870 comm="syz.4.983" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f52a2d2f749 code=0x7ffc0000 [ 177.865964][ T29] audit: type=1326 audit(1766413204.446:27732): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7870 comm="syz.4.983" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7f52a2d2f749 code=0x7ffc0000 [ 177.889396][ T29] audit: type=1326 audit(1766413204.446:27733): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7870 comm="syz.4.983" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f52a2d2f749 code=0x7ffc0000 [ 177.912874][ T29] audit: type=1326 audit(1766413204.446:27734): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7870 comm="syz.4.983" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f52a2d2f749 code=0x7ffc0000 [ 177.936445][ T29] audit: type=1326 audit(1766413204.446:27735): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7870 comm="syz.4.983" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f52a2d2f749 code=0x7ffc0000 [ 177.959959][ T29] audit: type=1326 audit(1766413204.446:27736): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7870 comm="syz.4.983" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f52a2d2f749 code=0x7ffc0000 [ 178.223479][ T7854] tipc: Resetting bearer [ 178.582621][ T7854] tipc: Disabling bearer [ 178.652819][ T7876] netlink: 'syz.2.985': attribute type 3 has an invalid length. [ 179.457045][ T3487] tipc: Node number set to 1479322158 [ 179.765727][ T7901] loop3: detected capacity change from 0 to 512 [ 179.774325][ T7901] EXT4-fs (loop3): orphan cleanup on readonly fs [ 179.781376][ T7901] EXT4-fs error (device loop3): ext4_orphan_get:1417: comm syz.3.992: bad orphan inode 13 [ 179.813995][ T7901] ext4_test_bit(bit=12, block=18) = 1 [ 179.819495][ T7901] is_bad_inode(inode)=0 [ 179.823770][ T7901] NEXT_ORPHAN(inode)=2130706432 [ 179.828783][ T7901] max_ino=32 [ 179.832093][ T7901] i_nlink=1 [ 179.860776][ T7901] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 179.888576][ T7901] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 179.910124][ T7901] /dev/rnullb0: Can't lookup blockdev [ 180.019462][ T7911] wireguard0: entered promiscuous mode [ 180.025079][ T7911] wireguard0: entered allmulticast mode [ 180.154131][ T7906] __nla_validate_parse: 4 callbacks suppressed [ 180.154146][ T7906] netlink: 8 bytes leftover after parsing attributes in process `syz.1.994'. [ 180.365571][ T7934] netlink: 20 bytes leftover after parsing attributes in process `syz.4.999'. [ 180.513673][ T7935] wireguard0: entered promiscuous mode [ 180.519275][ T7935] wireguard0: entered allmulticast mode [ 180.655451][ T7944] lo speed is unknown, defaulting to 1000 [ 180.661709][ T7944] lo speed is unknown, defaulting to 1000 [ 180.744273][ T7944] lo speed is unknown, defaulting to 1000 [ 180.912456][ T7949] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=7949 comm=syz.0.1002 [ 180.934115][ T7948] 8021q: adding VLAN 0 to HW filter on device bond0 [ 180.971212][ T7948] 8021q: adding VLAN 0 to HW filter on device team0 [ 181.001514][ T7948] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 181.212825][ T7960] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1004'. [ 181.234187][ T7944] wg1 speed is unknown, defaulting to 1000 [ 181.285390][ T7960] loop3: detected capacity change from 0 to 512 [ 181.308046][ T7960] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 181.354835][ T7960] EXT4-fs error (device loop3): ext4_free_branches:1023: inode #11: comm syz.3.1004: invalid indirect mapped block 4294967295 (level 1) [ 181.401728][ T7960] EXT4-fs error (device loop3): ext4_free_branches:1023: inode #11: comm syz.3.1004: invalid indirect mapped block 4294967295 (level 1) [ 181.416895][ T7947] ================================================================== [ 181.424988][ T7947] BUG: KCSAN: data-race in __filemap_remove_folio / folio_mapping [ 181.432809][ T7947] [ 181.435127][ T7947] write to 0xffffea0004c4c158 of 8 bytes by task 7910 on cpu 1: [ 181.442753][ T7947] __filemap_remove_folio+0x1a5/0x2a0 [ 181.448139][ T7947] filemap_remove_folio+0x6d/0x1d0 [ 181.453261][ T7947] truncate_inode_folio+0x42/0x50 [ 181.458288][ T7947] shmem_undo_range+0x244/0xa80 [ 181.463136][ T7947] shmem_evict_inode+0x12e/0x510 [ 181.468074][ T7947] evict+0x2af/0x510 [ 181.471973][ T7947] iput+0x4bd/0x650 [ 181.475811][ T7947] dentry_unlink_inode+0x24f/0x260 [ 181.480922][ T7947] __dentry_kill+0x18d/0x4b0 [ 181.485515][ T7947] finish_dput+0x2b/0x200 [ 181.489850][ T7947] dput+0x52/0x60 [ 181.493490][ T7947] __fput+0x444/0x650 [ 181.497471][ T7947] ____fput+0x1c/0x30 [ 181.501450][ T7947] task_work_run+0x131/0x1a0 [ 181.506030][ T7947] do_exit+0x467/0x1590 [ 181.510184][ T7947] do_group_exit+0xff/0x140 [ 181.514688][ T7947] get_signal+0xe58/0xf70 [ 181.519016][ T7947] arch_do_signal_or_restart+0x96/0x450 [ 181.524556][ T7947] irqentry_exit+0xfb/0x560 [ 181.529057][ T7947] asm_exc_page_fault+0x26/0x30 [ 181.533899][ T7947] [ 181.536212][ T7947] read to 0xffffea0004c4c158 of 8 bytes by task 7947 on cpu 0: [ 181.543756][ T7947] folio_mapping+0xa1/0xe0 [ 181.548170][ T7947] move_folios_to_lru+0x128/0x6c0 [ 181.553197][ T7947] evict_folios+0x31d9/0x35a0 [ 181.557864][ T7947] try_to_shrink_lruvec+0x5b5/0x950 [ 181.563051][ T7947] shrink_lruvec+0x22e/0x1b50 [ 181.567722][ T7947] shrink_node+0x66c/0x2010 [ 181.572219][ T7947] do_try_to_free_pages+0x3f6/0xcd0 [ 181.577411][ T7947] try_to_free_mem_cgroup_pages+0x1ab/0x410 [ 181.583308][ T7947] try_charge_memcg+0x383/0xa10 [ 181.588155][ T7947] obj_cgroup_charge_pages+0xa6/0x150 [ 181.593542][ T7947] __memcg_kmem_charge_page+0x9f/0x170 [ 181.599001][ T7947] __alloc_frozen_pages_noprof+0x18f/0x360 [ 181.604812][ T7947] alloc_pages_mpol+0xb3/0x260 [ 181.609576][ T7947] alloc_pages_noprof+0x90/0x130 [ 181.614510][ T7947] __vmalloc_node_range_noprof+0xa7b/0x1310 [ 181.620395][ T7947] __kvmalloc_node_noprof+0x492/0x6b0 [ 181.625787][ T7947] ip_set_alloc+0x24/0x30 [ 181.630114][ T7947] hash_netiface_create+0x282/0x740 [ 181.635313][ T7947] ip_set_create+0x3cc/0x970 [ 181.639891][ T7947] nfnetlink_rcv_msg+0x4c6/0x590 [ 181.644832][ T7947] netlink_rcv_skb+0x123/0x220 [ 181.649599][ T7947] nfnetlink_rcv+0x167/0x16c0 [ 181.654298][ T7947] netlink_unicast+0x5c0/0x690 [ 181.659065][ T7947] netlink_sendmsg+0x58b/0x6b0 [ 181.663834][ T7947] __sock_sendmsg+0x145/0x180 [ 181.668502][ T7947] ____sys_sendmsg+0x31e/0x4a0 [ 181.673280][ T7947] ___sys_sendmsg+0x17b/0x1d0 [ 181.677993][ T7947] __x64_sys_sendmsg+0xd4/0x160 [ 181.682854][ T7947] x64_sys_call+0x17ba/0x3000 [ 181.687534][ T7947] do_syscall_64+0xca/0x2b0 [ 181.692044][ T7947] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 181.697939][ T7947] [ 181.700257][ T7947] value changed: 0xffff888128c8e7b8 -> 0x0000000000000000 [ 181.707361][ T7947] [ 181.709679][ T7947] Reported by Kernel Concurrency Sanitizer on: [ 181.715828][ T7947] CPU: 0 UID: 0 PID: 7947 Comm: syz.0.1002 Not tainted syzkaller #0 PREEMPT(voluntary) [ 181.725541][ T7947] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 181.735626][ T7947] ================================================================== [ 181.746063][ T7960] EXT4-fs (loop3): 2 truncates cleaned up [ 181.761563][ T7960] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 181.786306][ T7970] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 181.797473][ T7960] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1004'. [ 181.833253][ T7970] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 181.867568][ T7962] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1005'. [ 181.984754][ T7962] loop4: detected capacity change from 0 to 4096 [ 182.014049][ T7962] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 182.079954][ T3317] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 182.124273][ T7947] syz.0.1002 (7947) used greatest stack depth: 5896 bytes left [ 182.580593][ T3326] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.