last executing test programs: 3.972928977s ago: executing program 1 (id=650): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000040)={r0}, 0x4) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0x18, &(0x7f00000001c0)=ANY=[@ANYRES32=r0, @ANYBLOB="0000000000000000b70500000800000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000000)='kmem_cache_free\x00', r1}, 0x10) r2 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r2, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r3 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r3, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) getpid() socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(&(0x7f0000000140), 0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0x8, &(0x7f0000000080)=ANY=[@ANYRES32, @ANYRES8], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000840)=ANY=[], 0x50) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r4, &(0x7f0000000040)={0x2, 0x4e21, @empty}, 0x10) connect$inet(r4, &(0x7f0000000140)={0x2, 0x4e21, @empty}, 0x10) pipe2(&(0x7f0000000080), 0x0) sendto$inet(0xffffffffffffffff, &(0x7f0000000b00)="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", 0x1b9, 0x0, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x8, 0x94, 0x7fff0000}]}) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) 3.829106473s ago: executing program 4 (id=640): syz_emit_ethernet(0xfe, &(0x7f0000000800)=ANY=[], 0x0) socket$inet6(0x10, 0x3, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) sendmsg$tipc(r0, &(0x7f00000001c0)={&(0x7f0000000040)=@id={0x1e, 0x3, 0x3, {0x4e23, 0x1}}, 0x10, 0x0, 0x0, &(0x7f0000000200)="6a4049f89aa3ce4d3c806b9de9f944dc35085a45f098e15d6c12a0c4b0486efbb972bc234a9ded434287dba03f00ec7570c80d25e90684", 0x37}, 0x44048850) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x5, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x51, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000640)={&(0x7f00000004c0)='kmem_cache_free\x00', r2, 0x0, 0x400000}, 0x18) syz_clone3(&(0x7f0000000740)={0x8180080, 0x0, 0x0, 0x0, {0x39}, 0x0, 0x0, 0x0, &(0x7f00000005c0)=[0xffffffffffffffff], 0x1}, 0x58) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000000001000000000000000000851000000600000018000000", @ANYRES32, @ANYBLOB="00000000000100006608000000000000180000000000000000000000000000009500000000000000360a020000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b50a000000000000850000000600000095"], &(0x7f0000000000)='GPL\x00', 0xa, 0x0, 0x0, 0x0, 0x8}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000a80)='kfree\x00', r3, 0x0, 0xfffffffffffffffe}, 0x18) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xb, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020782500000000002020207b1af8fe00000000bfa100000000000007010000f8ffffffb702000008000000b703000007000000850000001100000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r4, 0x0, 0x4}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000580)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0xff, 0x7ffc5ffb}]}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) openat$null(0xffffffffffffff9c, 0x0, 0x101401, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000140)='cpuset.memory_spread_page\x00', 0x2, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r5 = bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r5}, 0x4) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r5, @ANYBLOB="0000000000000000b70500000000000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a5000000"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = epoll_create1(0x0) prctl$PR_SET_NAME(0xf, &(0x7f0000000980)='\xff\x00\x00\x00\x00\x00\x000`\x14\x99\x06\xc0\x7fs\x00\t\x14\x17\xc3\xf5\xc9\v\x85\xe7\x00\x00\x18\x88\x06\x94\x98\xa9\xe7\x1c\x8a\x89\xdc\xcc\xf7L\xbd%\xc3!\x0e\x91S\xb2~8\"\xe2\xed\xbf\x12\x1a\\6p\'p\xef\x1a\n\x99\x12\xe8\'\x1c\x97M\xa5N\xd9\xbeV&\x1c2K?\x95\xd9\"\xbe\x050+\xca\xea\'\xe9)\xfe\xeb\x9c\xb5\xa0F`\xe4D\x10F\x831\xec\\v\xf0\xab_M\b\x03\xc3\n\x89\x01E`\xd35Q2\xecZz\xdc\x065p\x1c\x8f\x9b\x99IGXO\x00\x00\v\xed\xb0\xc5\xd4\xc7,\x1a\xb3}CMOO\x8a\xa8kh\x7f\x05c\xfc\xebb\xc8\xa2\xa9\xbf\xb3\x9b\xafE\xbd\xc5\xdc\xde\xbe_') bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000180)='kfree\x00', 0xffffffffffffffff, 0x0, 0x2}, 0x18) syz_usb_connect(0x0, 0x2a9, &(0x7f00000006c0)=ANY=[], 0x0) close_range(r6, 0xffffffffffffffff, 0x0) mq_unlink(&(0x7f0000000000)='eth0\x00') 3.421478991s ago: executing program 0 (id=643): syz_emit_ethernet(0xfe, &(0x7f0000000800)=ANY=[@ANYBLOB="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"], 0x0) socket$inet6(0x10, 0x3, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) sendmsg$tipc(r0, &(0x7f00000001c0)={&(0x7f0000000040)=@id={0x1e, 0x3, 0x3, {0x4e23, 0x1}}, 0x10, 0x0, 0x0, &(0x7f0000000200)="6a4049f89aa3ce4d3c806b9de9f944dc35085a45f098e15d6c12a0c4b0486efbb972bc234a9ded434287dba03f00ec7570c80d25e90684", 0x37}, 0x44048850) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x5, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x51, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000640)={&(0x7f00000004c0)='kmem_cache_free\x00', r2, 0x0, 0x400000}, 0x18) syz_clone3(&(0x7f0000000740)={0x8180080, 0x0, 0x0, 0x0, {0x39}, 0x0, 0x0, 0x0, &(0x7f00000005c0)=[0xffffffffffffffff], 0x1}, 0x58) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000000001000000000000000000851000000600000018000000", @ANYRES32, @ANYBLOB="00000000000100006608000000000000180000000000000000000000000000009500000000000000360a020000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b50a000000000000850000000600000095"], &(0x7f0000000000)='GPL\x00', 0xa, 0x0, 0x0, 0x0, 0x8}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000a80)='kfree\x00', r3, 0x0, 0xfffffffffffffffe}, 0x18) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xb, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020782500000000002020207b1af8fe00000000bfa100000000000007010000f8ffffffb702000008000000b703000007000000850000001100000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r4, 0x0, 0x4}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000580)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0xff, 0x7ffc5ffb}]}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) openat$null(0xffffffffffffff9c, 0x0, 0x101401, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000140)='cpuset.memory_spread_page\x00', 0x2, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r5 = bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r5}, 0x4) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r5, @ANYBLOB="0000000000000000b70500000000000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a5000000"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = epoll_create1(0x0) prctl$PR_SET_NAME(0xf, &(0x7f0000000980)='\xff\x00\x00\x00\x00\x00\x000`\x14\x99\x06\xc0\x7fs\x00\t\x14\x17\xc3\xf5\xc9\v\x85\xe7\x00\x00\x18\x88\x06\x94\x98\xa9\xe7\x1c\x8a\x89\xdc\xcc\xf7L\xbd%\xc3!\x0e\x91S\xb2~8\"\xe2\xed\xbf\x12\x1a\\6p\'p\xef\x1a\n\x99\x12\xe8\'\x1c\x97M\xa5N\xd9\xbeV&\x1c2K?\x95\xd9\"\xbe\x050+\xca\xea\'\xe9)\xfe\xeb\x9c\xb5\xa0F`\xe4D\x10F\x831\xec\\v\xf0\xab_M\b\x03\xc3\n\x89\x01E`\xd35Q2\xecZz\xdc\x065p\x1c\x8f\x9b\x99IGXO\x00\x00\v\xed\xb0\xc5\xd4\xc7,\x1a\xb3}CMOO\x8a\xa8kh\x7f\x05c\xfc\xebb\xc8\xa2\xa9\xbf\xb3\x9b\xafE\xbd\xc5\xdc\xde\xbe_') bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000180)='kfree\x00', 0xffffffffffffffff, 0x0, 0x2}, 0x18) syz_usb_connect(0x0, 0x2a9, &(0x7f00000006c0)=ANY=[], 0x0) close_range(r6, 0xffffffffffffffff, 0x0) mq_unlink(&(0x7f0000000000)='eth0\x00') 3.052920987s ago: executing program 1 (id=644): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$MAP_CREATE(0x0, 0x0, 0x48) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) futex_waitv(&(0x7f0000004240)=[{0xa968, 0x0, 0x2}], 0x1, 0x0, &(0x7f0000004dc0)={0x77359400}, 0x8123f3f502f2614e) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ENABLE(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)={0x54, r4, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_BEARER={0x40, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x0, @loopback}}, {0x14, 0x2, @in={0x2, 0x0, @multicast2}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}]}]}, 0x54}}, 0x0) sendmsg$TIPC_NL_KEY_SET(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)={0x58, r4, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_NODE={0x44, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x3c, 0x4, {'gcm(aes)\x00', 0x14, "e3de3d7b4cd07ec3ee777de774fc7987cca41989"}}, @TIPC_NLA_NODE_KEY_MASTER={0x4}]}]}, 0x58}, 0x1, 0x0, 0x0, 0x4}, 0x4000004) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_GET_PROTOCOL_FEATURES(r3, 0x0, 0x1) r6 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="8c000000", @ANYRES16=r6], 0x8c}, 0x1, 0x0, 0x0, 0x4}, 0x4000004) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000e40), 0xffffffffffffffff) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmsg$TIPC_NL_BEARER_ENABLE(r7, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000001080)={&(0x7f0000000440)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="010000b6b347338920e07c000000180001801119010065e91bd78f7f09a8e0b5a36b0974683a6970365f746930000000006561fe91263a3e8f25fac9361f8ea99d12c30f4ba87167ff1877a3d492d1c4df9d405a8a7030002e6253bbd9ca"], 0x2c}}, 0x8000) recvmsg(r0, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{0x0}], 0x1, 0x0, 0x0, 0x200000}, 0x1f00) sendmsg$tipc(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0) syz_emit_ethernet(0x86, &(0x7f00000010c0)={@broadcast, @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x78, 0x0, 0x0, 0x0, 0x1, 0x0, @private=0xa010102, @local}, @redirect={0x3, 0x4, 0x0, @broadcast=0x1000000, {0x17, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty, {[@timestamp_addr={0x44, 0xc, 0x0, 0x1, 0x0, [{@remote, 0x6e210000}]}, @timestamp_addr={0x44, 0x3c, 0x0, 0x1, 0x2, [{@multicast1}, {@broadcast}, {@dev}, {@private}, {@empty}, {@initdev={0xac, 0x1e, 0x0, 0x0}}, {@dev}]}]}}}}}}}, 0x0) setresuid(0x0, 0xee01, 0x0) r9 = shmget$private(0x0, 0x1000, 0x40, &(0x7f0000ffc000/0x1000)=nil) shmctl$IPC_SET(r9, 0x1, &(0x7f00000003c0)={{0x1, 0x0, 0x0, 0x0, 0x0, 0x65, 0xf}, 0xb, 0x1ff, 0xb0f0, 0x2, 0x0, 0x0, 0x4}) r10 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000004850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r10}, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) setrlimit(0x40000000000008, 0x0) sendmmsg(r1, 0x0, 0x0, 0x4044080) 3.046597267s ago: executing program 4 (id=645): r0 = fsopen(&(0x7f0000000100)='mqueue\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000001d40)='\xd0\x9e^\xa0\xee\xc8\x17T\xb1GI\x90\xe2Q1\xb0\x8f\xe1\xa8\x95\xa0\xcd\fL\xaei\xb6\xb7\xc1Y\xd5YG\xf9\xc2\xf1\xa4\xdb$\xf6]\xab\x1a\xdaY\xfb\x03dhS\x97nZ\xf8\xc6\x1f\x03\x00\x00\x00\x00\x00\x00\x00\x9bg-D#g\x16\xf4\xd9\x00\x00\x00\x00\x00eA\x9f\xc3\x11\x18\xe6\xc5\x95\x9e!^W\xf6\xacE\xa3\xc8\xe7\xec\xd6\xbd\x1c+\n\xc7Q( \xba\xff\x17N\x1fB\x91\x15\x83\xec(B\xc5\x05\x9d\xd6\x02|6\xdc\xee$\xb5\x1deC\xfb\xa2\xaa\xe0#\xcb\xde;sA\xad\xa6\xb6P\xa3\xf7\xc3q\xd4\xb6\x95\x02\xd8*\xa8\xd2\x94\xa3\x89\xa9\xa0\xc5\xc9=\xa5^\x00\x00\x00\x00\x00\x00\x00\x00\x00\xef\xcd\xd3\t\x01A\xd5\x81\xc1;9\xeez\xba\x00\x00\x00\xdc\x94\xff)\xa4\xe6\xfb]\x90bG\x11\b\x98#\xaa99ez|\x8b5\x92\xa5\xba\x96\xb3\xb26I\xbb\xdeb\x95?\xc0\x81', &(0x7f0000000200)='sockfs\x00', 0x0) openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000040), 0x8002) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000000000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000480)='kfree\x00', r2}, 0x10) syz_open_dev$MSR(0x0, 0x0, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000540)={0x11, 0x5, &(0x7f00000000c0)=ANY=[@ANYBLOB="180000000000000000000000ff010000850000000e000000850000005000000095"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='kmem_cache_free\x00', r3}, 0x9) syz_open_procfs(0x0, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000000dd0000000000003b810000850000006d000000a50000005000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x84, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x9}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000340)='kfree\x00', r4}, 0x10) r5 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r5, 0x10f, 0x87, &(0x7f0000000440)=@req={0x401, 0xfffffffe, 0x0, 0xffffffff}, 0x10) close(r5) creat(&(0x7f0000000100)='./file0\x00', 0xd931d3864d39dcca) syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x0, &(0x7f0000000080)={[{@usrquota}, {@noblock_validity}, {@bh}, {@max_batch_time={'max_batch_time', 0x3d, 0x8c9}}, {@debug}, {@inlinecrypt}]}, 0x6, 0x5fc, &(0x7f0000000c00)="$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") r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)=ANY=[@ANYBLOB="740000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="2b030040000000004c0012800b00010067656e65766500003c0002800800"], 0x74}}, 0x0) r7 = socket$inet(0x2, 0x4000000000000001, 0x0) r8 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r8, &(0x7f0000001c00)={0x0, 0x0, &(0x7f0000001bc0)={&(0x7f00000007c0)=@allocspi={0x120, 0x16, 0x207, 0x70bd29, 0x25dfdbfd, {{{@in6=@dev={0xfe, 0x80, '\x00', 0x3d}, @in=@multicast2, 0x4e23, 0x400, 0x4e21, 0x3, 0xa, 0xb0, 0xa0, 0x87}, {@in6=@empty, 0x4d6, 0x6c}, @in6=@loopback, {0x6, 0x5, 0x2, 0x7fffffff, 0x3c, 0x5, 0x2, 0x5}, {0x5, 0x2, 0x1352, 0xffffffffffffff52}, {0x3, 0xd06, 0x7}, 0x70bd2d, 0x3507, 0x2, 0x2, 0x5, 0x2a}, 0x1, 0x1ff}, [@address_filter={0x28, 0x1a, {@in6=@dev={0xfe, 0x80, '\x00', 0x43}, @in6=@empty, 0xa, 0x7, 0x4}}]}, 0x120}, 0x1, 0x0, 0x0, 0x2}, 0x880) setsockopt$inet_tcp_int(r7, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x7a, 0x4) getsockopt$inet_tcp_int(r7, 0x6, 0x2, 0x0, &(0x7f0000000140)) r9 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='comm\x00') exit(0x1f52b4ba) pread64(r9, &(0x7f0000000000)=""/88, 0x58, 0x8) munmap(&(0x7f0000001000/0x3000)=nil, 0x3000) r10 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSKBENT(r10, 0x4b47, &(0x7f0000000380)={0x0, 0x7f, 0x708}) 2.857442316s ago: executing program 2 (id=647): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000f40), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_DEBUG_GET(r0, &(0x7f0000000e40)={0x0, 0x0, &(0x7f0000000dc0)={&(0x7f0000000cc0)={0x30, r1, 0x1, 0x70bd27, 0x25dfdbfc, {}, [@HEADER={0x4}, @HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6_vti0\x00'}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x10}, 0x0) r2 = memfd_secret(0x0) r3 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000f00)='kfree\x00', r3}, 0x18) r4 = socket$inet6(0xa, 0x80002, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB], 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000500000000000000000018110000", @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r6}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000900)={{r5}, &(0x7f00000008c0), &(0x7f0000000880)=r6}, 0x20) setsockopt$sock_linger(r4, 0x1, 0x3c, &(0x7f0000000040)={0x200000000000001}, 0x8) connect$inet6(r4, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @dev, 0x5}, 0x1c) setsockopt$inet6_IPV6_HOPOPTS(r4, 0x29, 0x36, &(0x7f0000000200)=ANY=[], 0xc0) sendmmsg$inet6(r4, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4000000) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000002000000b7030000e8ffff05850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x1, '\x00', 0x0, @fallback=0x2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000003c0)='./file1\x00', 0x1c, &(0x7f0000000080)={[{@nombcache}, {@usrquota}, {@nodiscard}, {@nomblk_io_submit}, {@noblock_validity}, {@jqfmt_vfsv1}]}, 0x3, 0x44f, &(0x7f00000010c0)="$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") r7 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x18, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000400000018110000", @ANYRESOCT=r6, @ANYRES32=r2], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='kmem_cache_free\x00', r7}, 0x10) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x85, 0x7, 0x7ffc0001}]}) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), r5) sendmsg$NL80211_CMD_VENDOR(r2, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000400)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="02002cbd7000ffdbdf256700000008000100750000000c009900e40500007f0000000800c40008000000"], 0x30}}, 0x24000880) sysinfo(&(0x7f0000000f80)=""/154) rename(&(0x7f0000000000)='./file1\x00', &(0x7f0000000080)='./file2\x00') getdents(0xffffffffffffffff, &(0x7f0000001fc0)=""/184, 0xb8) syz_open_procfs$pagemap(0x0, 0x0) pread64(0xffffffffffffffff, &(0x7f0000001440)=""/126, 0x7e, 0x41) 2.711673172s ago: executing program 3 (id=648): r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={0x3c, 0x4a, 0x1, 0x0, 0x0, {0xa, 0x0, 0x6e80}, [@nested={0x28, 0x1, 0x0, 0x1, [@nested={0x21, 0x8c, 0x0, 0x1, [@generic="1a04268ff9f83d024ce7787f973b78e4b833420b5e7c4fc460e6d27382"]}]}]}, 0x3c}}, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000080)=0x454a, 0x4) bind$inet(r0, &(0x7f0000000200)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x21}}, 0x10) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000006"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000019007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000d40)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r3}, 0x18) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000440)={{r2}, &(0x7f00000003c0), &(0x7f0000000400)=r3}, 0x20) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000600)={0x0, 0x0}) syz_mount_image$iso9660(&(0x7f0000000cc0), &(0x7f0000000180)='./file0\x00', 0x100c085, &(0x7f00000006c0)=ANY=[@ANYRES8=0x0, @ANYBLOB="c0da5b74006e9c47add458a1bd748b7ffa5628dc52f84873cbe6a43cfd29e4198255a0610d383b0e46b2b6457282a9f3caef22979e54c145e6a0ce2850a890af7c4e1fa3628453c70aae32270b0042f1532cf08030eccdca96e2c97aae42cf5d9ec5f0afa4fcc53c8f9289677038d09ae2b1bd2271e0a76e6324df3a2b01a9ed0277d7e8d6f7d463ae62692faa55bdb43dc2bea18eea4a635951fd0a220a835fa24d0700c8f8c245d1d7638b2cae5ed3bec0d2f0415ddff7884bb34ab0cb1598e9c7b92a29005e4090ede480b3412f5c33da5e7c8672bda19fd3d989f8336d69d9e70de142973e7e1f53987b2d", @ANYRESDEC], 0x10, 0x7f4, &(0x7f0000000e40)="$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") prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) unshare(0x62040200) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000a80)='kfree\x00', 0xffffffffffffffff, 0x0, 0xfffffffffffffffd}, 0x18) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000f40)={0x11, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) sendmsg$IPSET_CMD_TEST(r4, 0x0, 0x4804) bpf$MAP_CREATE(0x1900000000000000, 0x0, 0x50) ioctl$PPPIOCNEWUNIT(0xffffffffffffffff, 0xc004743e, &(0x7f00000000c0)) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) socket$inet_udp(0x2, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) 2.682565053s ago: executing program 0 (id=649): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="5c000000020603000000000000000000ffea000005000100070000000900020073797a300000000014000780080012401b0000000800084000000000050005000000001005000400000000000d000300686173683a6d6163"], 0x5c}}, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000600000027"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={0x0, r2}, 0x18) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000880)={0x18, 0x5, &(0x7f0000000400)=ANY=[], &(0x7f0000000280)='GPL\x00', 0xfffffff3, 0x0, 0x0, 0x40f00, 0x12, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000000)='kmem_cache_free\x00', r3}, 0x18) quotactl$Q_QUOTAON(0xffffffff80000200, &(0x7f0000000440)=@sr0, 0x0, &(0x7f0000000480)='./file0\x00') r4 = socket$rds(0x15, 0x5, 0x0) bind$rds(r4, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10) r5 = request_key(&(0x7f00000000c0)='logon\x00', &(0x7f0000000140)={'syz', 0x0}, &(0x7f0000000280)='\x00', 0xfffffffffffffffc) add_key$fscrypt_provisioning(&(0x7f0000000300), &(0x7f0000000340)={'syz', 0x3}, &(0x7f0000000600)=ANY=[@ANYBLOB], 0x18, 0xfffffffffffffff9) r6 = socket$netlink(0x10, 0x3, 0x0) syz_io_uring_setup(0x3ac6, 0x0, &(0x7f0000000080), &(0x7f0000000100)=0x0) r8 = add_key$user(&(0x7f0000000200), &(0x7f00000003c0)={'syz', 0x3}, &(0x7f0000000780)="f95e9af246a541e6d1309b2d282fbffd23a8498b507d2cb2fc47fe3d001f2d35e4933a7ef3326fd115558a2ead5c80566f7ac1074dfc32775524f6892fa0b8d9ff5d2096e6bbefccddb8656d0ee57d144eb6419ec3c8ded413c09329a090e9ad39edac3901feea55cb358b5ec7ddf2abfa980f50fced799ed070995f1d89c29019f590123d75099358ed843d15d3b18ae9870f9eb7d2bf4977e6a91e603c2d1f839b66e2bf31ba699dcd9e7e52cb", 0xae, r5) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0xb, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1070}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r9}, 0x10) keyctl$set_timeout(0xf, r8, 0x100000000) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={&(0x7f0000000640)=@l2tp6={0xa, 0x0, 0x8, @mcast1, 0x3, 0xffffffff}, 0x80, &(0x7f0000001880)=[{&(0x7f0000000600)="f4000900062b2c25fe80000000000000dc8b850f238466cc00007a000000ad6f911b51430437121d", 0x28}], 0x1}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x19, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2b3}, 0x94) r10 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r10, &(0x7f0000000240)=@pppol2tpv3={0x18, 0x1, {0x0, r6, {0x2, 0x4e22, @multicast1}, 0x2, 0x0, 0x3}}, 0x2e) r11 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000a80)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYRES32=r7], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x51, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r12 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) ioctl$sock_SIOCOUTQ(r12, 0x5411, &(0x7f0000002080)) r13 = inotify_init1(0x80800) close(r13) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r11, @ANYBLOB="0000000004000000b705000008000000850000"], &(0x7f0000000000)='GPL\x00', 0x4, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$nl_route_sched(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=@newqdisc={0x54, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0xffe0}, {0xf}, {0xe, 0xd}}, [@TCA_RATE={0x6, 0x5, {0x9, 0x1}}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1a, {0x0, 0x0, 0x491, 0x0, 0x0, 0xfffffffe, 0x8, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x80}, 0x0) 2.642327565s ago: executing program 2 (id=651): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x7, 0x8604, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0}, 0x0, 0x10000, 0x8, 0x6, 0x8, 0x2, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) socket$inet_sctp(0x2, 0x1, 0x84) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x18, 0x4, &(0x7f0000000180)=ANY=[], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1000000e}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuacct.usage_sys\x00', 0x275a, 0x0) r2 = socket$phonet_pipe(0x23, 0x5, 0x2) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000040)='team_slave_1\x00', 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) getuid() r3 = syz_clone(0x0, 0x0, 0x9, 0x0, 0x0, 0x0) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="0a00000002000000ff0f000007", @ANYRES64, @ANYRES8, @ANYRES64=r3, @ANYBLOB="0280059ba8c106272101821d94fee624797f2181d5d49deb3bbaca3ff208e74c4cdef15dd29ee36eb002c21f4e95"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x0, 0x22c7, &(0x7f0000000380)=ANY=[@ANYRESOCT, @ANYRESDEC, @ANYRES8=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) fcntl$lock(r1, 0x5, &(0x7f0000000180)={0x0, 0x1, 0x86, 0x80000000}) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) syz_clone3(&(0x7f0000000580)={0x4100, &(0x7f00000001c0), &(0x7f0000000240), &(0x7f0000000280), {0x25}, &(0x7f00000002c0)=""/35, 0x23, &(0x7f0000000300)=""/94, &(0x7f0000000380)}, 0x58) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSETMODE(r4, 0x4b45, 0x1) ioctl$TIOCL_SETSEL(r4, 0x541c, &(0x7f00000000c0)={0x2, {0x2, 0xfffc, 0x2fd, 0x1, 0x101}}) socket$inet6_tcp(0xa, 0x1, 0x0) perf_event_open(&(0x7f00000004c0)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4e93, 0x18445, 0x9, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, @perf_config_ext={0xc0000000000000, 0xfffe}, 0x1088a0, 0xa9, 0x80000000, 0x5, 0x400000a5, 0x0, 0x8, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) syz_clone(0x41064400, 0x0, 0x0, 0x0, 0x0, 0x0) 2.398692396s ago: executing program 0 (id=652): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0x7, &(0x7f0000000080)=ANY=[@ANYBLOB="1800"/14, @ANYRES32], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="05000000040000"], 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = socket$inet_icmp(0x2, 0x2, 0x1) sendmmsg$inet(r4, &(0x7f0000000340)=[{{&(0x7f0000000080)={0x2, 0x4e22, @local}, 0x10, &(0x7f0000000040)=[{&(0x7f0000000400)='\b\x00\x00\x00(\x00\x00\x00', 0x8}], 0x1}}, {{&(0x7f0000000480)={0x2, 0x4e22, @local}, 0x10, &(0x7f0000000180)=[{&(0x7f00000000c0)="c685e3edc50741e5", 0x8}], 0x1}}], 0x2, 0x4000) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r3, 0x0, 0x2}, 0x18) r5 = syz_open_dev$tty20(0xc, 0x4, 0x0) perf_event_open(&(0x7f00000004c0)={0xa, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x840, 0x8, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x8}, 0x10000, 0x3, 0x5, 0x0, 0x3, 0x0, 0x7, 0x0, 0x0, 0x0, 0x8ab}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_clone(0x111, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f00000007c0)={@cgroup, 0x16, 0x0, 0x80000000, &(0x7f0000000380)=[0x0], 0x4000000000000026, 0x0, &(0x7f00000003c0)=[0x0, 0x0, 0x0], &(0x7f0000000280)=[0x0, 0x0, 0x0], &(0x7f0000000780)=[0x0, 0x0, 0x0, 0x0, 0x0]}, 0x40) ioctl$VT_DISALLOCATE(r5, 0x5608) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x400a, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x5421000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) syslog(0x9, 0x0, 0x0) r6 = syz_genetlink_get_family_id$ipvs(&(0x7f00000018c0), r1) sendmsg$IPVS_CMD_NEW_DAEMON(r1, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f00000004c0)=ANY=[@ANYBLOB='x\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="01002abd7000ffdbdf25090000006400038008000100010000000800030004000000140002007665744e315f6d616376746170000000060004000200000008000500e0000000140002006970766c616e31"], 0x78}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000c80)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000}, 0x94) r7 = syz_genetlink_get_family_id$tipc(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_PORTS(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000200)={0x1c, r7, 0x1, 0x78bd29, 0x25dfdbfe}, 0x1c}, 0x1, 0x0, 0x0, 0x880}, 0x50) syz_emit_ethernet(0xd81, &(0x7f0000000800)=ANY=[@ANYBLOB="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"], 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f00000001c0)='sched_switch\x00', r0}, 0x10) r8 = socket$netlink(0x10, 0x3, 0x0) writev(r8, &(0x7f00000003c0), 0x0) r9 = socket$netlink(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$TOKEN_CREATE(0x24, &(0x7f0000000040)={0x0, r9}, 0x8) 2.216475544s ago: executing program 3 (id=653): r0 = socket$netlink(0x10, 0x3, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) clock_nanosleep(0x9, 0x1, &(0x7f00000004c0)={0x0, 0x3938700}, 0x0) symlinkat(&(0x7f0000003040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00') quotactl$Q_QUOTAON(0xffffffff80000200, &(0x7f0000000ac0)=@filename='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0x0, &(0x7f0000001ac0)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00') r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000040), 0x40002, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r1, 0xc0189374, &(0x7f0000000240)={{0x1, 0x1, 0x1018, 0xffffffffffffffff, {0x29}}, './file0\x00'}) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc9ffb}]}) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="020000000400000008000000"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r2, @ANYBLOB="0000000000000000b704000008000000850000007800000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc2, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x18, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kmem_cache_free\x00', r3}, 0x10) ioperm(0x4, 0x3, 0x100d649) r4 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r4, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000002ac0)={0x1a, 0xf, &(0x7f0000000440)=ANY=[@ANYBLOB="180001000400000001000000182f000000000000", @ANYRES16=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000010000008500000084000000b7000000000000009500000000000000"], &(0x7f0000000280)='GPL\x00', 0x2, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001580)={&(0x7f0000000180)='kmem_cache_free\x00', r5}, 0x10) setsockopt$sock_int(r4, 0x1, 0x8, &(0x7f0000000000)=0x80, 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r4, 0x10e, 0x4, &(0x7f0000000180)=0x800, 0x4) r6 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000a00)={r3, 0xe0, &(0x7f0000000900)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f0000000640)=[0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, &(0x7f0000000680)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000740), 0x0, 0xe8, &(0x7f0000000780)=[{}, {}, {}, {}, {}, {}], 0x30, 0x10, &(0x7f00000007c0), &(0x7f0000000800), 0x8, 0xa7, 0x8, 0x8, &(0x7f00000008c0)}}, 0x10) sendmsg$DEVLINK_CMD_RATE_NEW(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000840)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="0100250000000e0001006e657464657673696d0000000f0002006ed96d24657464657673696d300000"], 0x34}}, 0x6048800) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000001800ff0f00000000001b0000850000006d000000850000002300000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000140)='fsi_master_gpio_crc_rsp_error\x00', r7, 0x0, 0xb8}, 0x18) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x4000001, 0x200000005c831, 0xffffffffffffffff, 0x0) mlock(&(0x7f00007d8000/0x800000)=nil, 0x800000) mbind(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x0, 0x2) syz_genetlink_get_family_id$team(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000240)) bind$netlink(r0, &(0x7f0000000100)={0x10, 0x0, 0x25dfdbfe, 0x2000}, 0xc) 2.07814574s ago: executing program 0 (id=654): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x7, 0x8604, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0}, 0x0, 0x10000, 0x8, 0x6, 0x8, 0x2, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) socket$inet_sctp(0x2, 0x1, 0x84) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x18, 0x4, &(0x7f0000000180)=ANY=[], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1000000e}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuacct.usage_sys\x00', 0x275a, 0x0) r2 = socket$phonet_pipe(0x23, 0x5, 0x2) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000040)='team_slave_1\x00', 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x8, 0xf9, 0x7ffc1ffb}]}) getuid() openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="0a00000002000000ff0f000007", @ANYRES64, @ANYRES8, @ANYRES64, @ANYBLOB="0280059ba8c106272101821d94fee624797f2181d5d49deb3bbaca3ff208e74c4cdef15dd29ee36eb002c21f4e95"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x0, 0x22c7, &(0x7f0000000380)=ANY=[@ANYRESOCT, @ANYRESDEC, @ANYRES8=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) fcntl$lock(r1, 0x5, &(0x7f0000000180)={0x0, 0x1, 0x86, 0x80000000}) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) syz_clone3(&(0x7f0000000580)={0x4100, &(0x7f00000001c0), &(0x7f0000000240), &(0x7f0000000280), {0x25}, &(0x7f00000002c0)=""/35, 0x23, &(0x7f0000000300)=""/94, &(0x7f0000000380)}, 0x58) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSETMODE(r3, 0x4b45, 0x1) ioctl$TIOCL_SETSEL(r3, 0x541c, &(0x7f00000000c0)={0x2, {0x2, 0xfffc, 0x2fd, 0x1, 0x101}}) socket$inet6_tcp(0xa, 0x1, 0x0) perf_event_open(&(0x7f00000004c0)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4e93, 0x18445, 0x9, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, @perf_config_ext={0xc0000000000000, 0xfffe}, 0x1088a0, 0xa9, 0x80000000, 0x5, 0x400000a5, 0x0, 0x8, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) syz_clone(0x41064400, 0x0, 0x0, 0x0, 0x0, 0x0) 2.077602969s ago: executing program 3 (id=655): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000040)={r0}, 0x4) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0x18, &(0x7f00000001c0)=ANY=[@ANYRES32=r0, @ANYBLOB="0000000000000000b70500000800000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000000)='kmem_cache_free\x00', r1}, 0x10) r2 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r2, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r3 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r3, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) getpid() socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(&(0x7f0000000140), 0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0x8, &(0x7f0000000080)=ANY=[@ANYRES32, @ANYRES8], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000840)=ANY=[], 0x50) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r4, &(0x7f0000000040)={0x2, 0x4e21, @empty}, 0x10) connect$inet(r4, &(0x7f0000000140)={0x2, 0x4e21, @empty}, 0x10) pipe2(&(0x7f0000000080), 0x0) sendto$inet(0xffffffffffffffff, &(0x7f0000000b00)="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", 0x1b9, 0x0, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x8, 0x94, 0x7fff0000}]}) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) 2.07682041s ago: executing program 1 (id=656): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000d00)={0x11, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="180100000100a7d9000000000020b200850000007b00000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x40000007}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000340)='kfree\x00', r1, 0x0, 0x2}, 0x18) sendmsg$nl_route_sched(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=@deltaction={0x54, 0x18, 0x1, 0x70bd2a, 0x25dfdc00, {0xa}, [@TCA_ACT_TAB={0x40, 0x1, [{0xc, 0x8f, 0x0, 0x0, @TCA_ACT_INDEX={0x8}}, {0x14, 0x5, 0x0, 0x0, @TCA_ACT_KIND={0xf, 0x1, 'tunnel_key\x00'}}, {0xc, 0x9, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x37}}, {0x10, 0x8, 0x0, 0x0, @TCA_ACT_KIND={0xc, 0x1, 'skbedit\x00'}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x44000}, 0x20040844) bpf$MAP_CREATE(0x0, &(0x7f0000001440)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000080)={0x1, &(0x7f0000000380)=[{0x200000000006, 0x1, 0x7, 0x7ffc1ffb}]}) syz_mount_image$ext4(&(0x7f00000003c0)='ext4\x00', &(0x7f00000002c0)='./bus\x00', 0x404, &(0x7f0000000580)={[{@orlov}, {@min_batch_time={'min_batch_time', 0x3d, 0x4}}]}, 0x1, 0x5d8, &(0x7f0000000c00)="$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") r2 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x4040, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1202, 0x0) write(r3, &(0x7f0000004200)='t', 0x1) sendfile(r3, r2, 0x0, 0x3ffff) sendfile(r3, r2, 0x0, 0x7ffff000) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x1a, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f66f63bb850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0xdb, '\x00', 0x0, @tracing=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0xce56fe61a68fc369, 0x8, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x10) r6 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r6, 0x0, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x300, 0x198, 0xffffffff, 0xffffffff, 0x198, 0xffffffff, 0x268, 0xffffff7a, 0xffffffff, 0x268, 0xffffffff, 0x7fffffe, 0x0, {[{{@ip={@broadcast, @loopback, 0x0, 0x0, 'veth1\x00', 'veth0_to_team\x00', {}, {}, 0x0, 0x0, 0x41}, 0x6, 0x130, 0x198, 0x0, {}, [@common=@unspec=@string={{0xc0}, {0x0, 0x0, 'bm\x00', "00000100cbd047da9ca965f96ad5801f0514d363ee84bb895919d9490f6785fba3c4a44f1e25ecefef2a2d6054f5260ece5ce1a56a5ef73be11d65bfe8c37674024c183ebacdf741cea92ded3a9ca54de15dd9ec8ef62f9e000000000000000000ffffff7f00", 0x7d}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x2, 0x0, 'snmp_trap\x00', 'syz1\x00'}}}, {{@uncond, 0x0, 0x70, 0xd0}, @common=@SET={0x60}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x360) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000030000000000000000000400b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r4, @ANYBLOB="0000000000000000b705000008000000850000006900000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r7, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000680)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r8, @ANYBLOB='ya\x00\x00\x00\x00\x00\x00\x00\x00~'], 0x1c}}, 0x0) write(0xffffffffffffffff, &(0x7f0000004200), 0x0) r9 = shmget(0x0, 0x2000, 0x2c000400, &(0x7f0000fae000/0x2000)=nil) shmctl$IPC_RMID(r9, 0x0) r10 = socket$nl_route(0x10, 0x3, 0x0) fcntl$setlease(r10, 0x400, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x3000002, 0x5d031, 0xffffffffffffffff, 0x0) futex(0x0, 0x3, 0x0, &(0x7f0000fd7ff0)={0x0, 0x3938700}, 0x0, 0xfffffffd) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0) 2.040262571s ago: executing program 2 (id=657): syz_emit_ethernet(0xfe, &(0x7f0000000800)=ANY=[@ANYBLOB], 0x0) socket$inet6(0x10, 0x3, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) sendmsg$tipc(r0, &(0x7f00000001c0)={&(0x7f0000000040)=@id={0x1e, 0x3, 0x3, {0x4e23, 0x1}}, 0x10, 0x0, 0x0, &(0x7f0000000200)="6a4049f89aa3ce4d3c806b9de9f944dc35085a45f098e15d6c12a0c4b0486efbb972bc234a9ded434287dba03f00ec7570c80d25e90684", 0x37}, 0x44048850) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x5, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x51, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000640)={&(0x7f00000004c0)='kmem_cache_free\x00', r2, 0x0, 0x400000}, 0x18) syz_clone3(&(0x7f0000000740)={0x8180080, 0x0, 0x0, 0x0, {0x39}, 0x0, 0x0, 0x0, &(0x7f00000005c0)=[0xffffffffffffffff], 0x1}, 0x58) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000000001000000000000000000851000000600000018000000", @ANYRES32, @ANYBLOB="00000000000100006608000000000000180000000000000000000000000000009500000000000000360a020000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b50a000000000000850000000600000095"], &(0x7f0000000000)='GPL\x00', 0xa, 0x0, 0x0, 0x0, 0x8}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000a80)='kfree\x00', r3, 0x0, 0xfffffffffffffffe}, 0x18) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xb, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020782500000000002020207b1af8fe00000000bfa100000000000007010000f8ffffffb702000008000000b703000007000000850000001100000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r4, 0x0, 0x4}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000580)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0xff, 0x7ffc5ffb}]}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) openat$null(0xffffffffffffff9c, 0x0, 0x101401, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000140)='cpuset.memory_spread_page\x00', 0x2, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r5 = bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r5}, 0x4) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r5, @ANYBLOB="0000000000000000b70500000000000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a5000000"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = epoll_create1(0x0) prctl$PR_SET_NAME(0xf, &(0x7f0000000980)='\xff\x00\x00\x00\x00\x00\x000`\x14\x99\x06\xc0\x7fs\x00\t\x14\x17\xc3\xf5\xc9\v\x85\xe7\x00\x00\x18\x88\x06\x94\x98\xa9\xe7\x1c\x8a\x89\xdc\xcc\xf7L\xbd%\xc3!\x0e\x91S\xb2~8\"\xe2\xed\xbf\x12\x1a\\6p\'p\xef\x1a\n\x99\x12\xe8\'\x1c\x97M\xa5N\xd9\xbeV&\x1c2K?\x95\xd9\"\xbe\x050+\xca\xea\'\xe9)\xfe\xeb\x9c\xb5\xa0F`\xe4D\x10F\x831\xec\\v\xf0\xab_M\b\x03\xc3\n\x89\x01E`\xd35Q2\xecZz\xdc\x065p\x1c\x8f\x9b\x99IGXO\x00\x00\v\xed\xb0\xc5\xd4\xc7,\x1a\xb3}CMOO\x8a\xa8kh\x7f\x05c\xfc\xebb\xc8\xa2\xa9\xbf\xb3\x9b\xafE\xbd\xc5\xdc\xde\xbe_') bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000180)='kfree\x00', 0xffffffffffffffff, 0x0, 0x2}, 0x18) syz_usb_connect(0x0, 0x2a9, &(0x7f00000006c0)=ANY=[], 0x0) close_range(r6, 0xffffffffffffffff, 0x0) mq_unlink(&(0x7f0000000000)='eth0\x00') 1.998457233s ago: executing program 4 (id=658): socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000780), 0xffffffffffffffff) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) r0 = memfd_create(&(0x7f0000000bc0)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf#2\x99\x1e\xa1`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\f<\x8f\xc1\x99\x89r\xe1?\xbdu\x98\xc3\xf8\xd2Q#\xc6g\xa0\x85\xd6G\x85\x11X\x8d,\x02\xd45\xb8\xca\x97\x9d\xcb\x1e\x80\xd6\xd5>N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xec\x8aog\x87BR\x9d\xad\xd4FcB\xda\x95\xc3\xdd\x9d\x8f\x1a\xce\x18\x80\"j\xe1\xba\x1e\x97uX\xccv\xd6\vcz\x92A^\xbc\xceF\xf7\xe5:\xaf\xc5~\xbcJ e\r\x88c\x9d\xb92\xb6i4zq\xb3c\x0f\xb2t\x93\xf2E6b\xfa\xcdJ5\xe3W]`4\xd8D\x05\v\xfc)\xca\xedQ\xd0]Ot\'\xc2tDF\xf9\xa7\xb5(\x83\xa5\x0f\x1d\x1d\x06Dg\x13>\x19\xe85#\aaT\x89=\x104\xd5\x85Q\x96\x91\xea\x172P\xb3:\xadZ\xbc\xbe\x00\xf0\x14\x96\xd9M\xd7\x88QZs\xb2\xe1+$jfQodH\x05/y`~Mx\x02\x00(v\xe6`\x026\xfcgC\xb5\xf0\x13.zb\xc5bj+@\x00\x00\x00\x00\x00\x00\x00.\xd4`=z\xd1n\x8d\x8f\xa5hS\x8e[\xb3\xa3\x87\xb9\xe2_Z\x11\xef\xc2]V\xf3\x03\x94\xb9\xe1\xa68\x8d\\\xe5\xef\xacpM\xf0\xa6\x04\x10\xb7\xc0t\x83\\\xf7\x12k\x9f\x10\xd5Z\x19\xc1\xc1\x80\\o\x97\xce=U\xdd\xaa\x1b\x05\x14\x13\xa6\xbd#\xde\x04\xe6$\xec$3\xf6\x97\xc6\xeaSL\xb7A72M\x88k@\xe5\xa3\n&\x1e\xc84\xa9\xe2\xccM\x906\x95xQ-2p\xd62\'\xec\x0f\x13;I\x95fE_\r\xe7\t!A\x05\xe4\x8f\x9e0\xf8/T\x18\xf7\xa1\x9f\xde1\xd5\x80<\xf5\b\xa9\xec\x85\xaeW\xb3\xd8#)bn \xfb\xf2\x88\xfaR\xff\xdd\x80\x96_\xec5\xf0\x1c\a\x8a\x80\x00@=\r8u+%f:\x1e\x82\xfap\xf6\x89\xea\xba\xe3\xbbM%F\xdb\\\xd1eJJ*\xc67\xca\x03\xa3\xf7(\xbb\xecN\xd4\xe7\xf2:u\x8a\b\xd5\v\xca\xfd\\\xd6\xe3\x05\xb3\x03\xd5\xe0\xd2\xf2{\'\x8b\xdf\xa1\xbe}\xb2\xe4y\xbb\xe6\x1f\x10c\xf5WQ\x82\x04\x01C\x83,\x90\x1a\xfa\x8e\x17\x89\xe2\xedX\x8d\rmq\t\xb5$\xb4\x9b\x92z\xd6/-\x13,\xb5%\x8eM/\x04\xa7\x7f\x1b\x85\xf1\xa4X\x17\xbb\x1cR14\xfb!\b\x10\xe8\xb2\xd41gK\xe4\xea\xe39d\bL\xe5\x1b\xbd[\x9bWD:\r&\xe9\vn^\xcc\x86\xe3\xce1>3{\xaa{\xbd0P\x9f\xa68\xf5\x82\xb8\x9aD\x9c{\xe6\xf8\xcbD\xb5aJ\xb0\x92\x89\xbc\x80\x1ch\x89\xe7\xdd]q,\xec\xc4\xa5\x93\xe5,\x0e,>/\xaf|\xf0\x01V\x7f\xc9?\xba\x16\xe4$+}5dy\xb1\xef\xf1m\xa5\x94d9\xaf\xcfq\x8b=\x026\xef\r\x91\x18\xc5\xb6\xb9fM\x8ayZ\xbcd\xa5\x8a\x88\x98\xc3\xfc`\xa6\xba\x1f\x17\v$\x88g\xb4\xad\b\xc1\xddW\xa6\xc1\xb7\xb0\xa3\x84Q\x13GoU\xe2\xb7\x03\x9c\xd5\x0f\xa8\x0ef\"\x15\x82\xe7\xbd\xf8\xca\x10f\xfe6h\xe9\xc3\xc2\xa0O:\xac~\x1a\xf7\xbeF\xbe\xe5\xf0\x81\xd6&\xc00xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="07000000040000000800000001"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r3, @ANYBLOB="0000000000000000b703000000030000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x18) futex(0xfffffffffffffffd, 0x6, 0x2, 0x0, 0x0, 0x2) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x26e1, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f00000001c0)={'sit0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000006c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hhf={{0x8}, {0xc, 0x2, [@TCA_HHF_QUANTUM={0x8}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x48801}, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) r9 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'lo\x00', 0x0}) sendmsg$ETHTOOL_MSG_TSINFO_GET(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000035c0)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="3183000000000000000019000000200001801400020076657468315f766c616e0000000000000800", @ANYRES32=r10, @ANYBLOB="d14cb2ddf69b79dfd0eb2ded6b93e9097cc2cec80d4ea8c5a595cdd2ffffadc7c40b931c63dc42b85784b8e00179930bf24e583355eff9c826ed08fd76505d998a0ad5e78b2644d5c441617f830eadef488d3fa6252e0c256b0b82c4ff27a73252d94acc5a7819cc167f97800ac6954b33aa517bf100ce516e9261723a75ef6ed77a59817d0e0f876979e105c30f9e599808d1c25513a56e7772d94c3e8c286c6d0a181098"], 0x34}}, 0x40010) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f00000002c0)={'vcan0\x00'}) sendmsg$ETHTOOL_MSG_FEATURES_SET(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x40041}, 0x20000000) perf_event_open(&(0x7f0000000000)={0x8, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000000)={0x8, 0x80, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x30046, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x400}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) syz_mount_image$ext4(&(0x7f00000005c0)='ext4\x00', &(0x7f0000000600)='./file0\x00', 0x61016, &(0x7f0000000180), 0x1, 0x5a8, &(0x7f0000000680)="$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") 1.184221309s ago: executing program 0 (id=660): syz_emit_ethernet(0xfe, &(0x7f0000000800)=ANY=[@ANYBLOB="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"], 0x0) socket$inet6(0x10, 0x3, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) sendmsg$tipc(r0, &(0x7f00000001c0)={&(0x7f0000000040)=@id={0x1e, 0x3, 0x3, {0x4e23, 0x1}}, 0x10, 0x0, 0x0, &(0x7f0000000200)="6a4049f89aa3ce4d3c806b9de9f944dc35085a45f098e15d6c12a0c4b0486efbb972bc234a9ded434287dba03f00ec7570c80d25e90684", 0x37}, 0x44048850) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x5, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x51, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000640)={&(0x7f00000004c0)='kmem_cache_free\x00', r2, 0x0, 0x400000}, 0x18) syz_clone3(&(0x7f0000000740)={0x8180080, 0x0, 0x0, 0x0, {0x39}, 0x0, 0x0, 0x0, &(0x7f00000005c0)=[0xffffffffffffffff], 0x1}, 0x58) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000000001000000000000000000851000000600000018000000", @ANYRES32, @ANYBLOB="00000000000100006608000000000000180000000000000000000000000000009500000000000000360a020000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b50a000000000000850000000600000095"], &(0x7f0000000000)='GPL\x00', 0xa, 0x0, 0x0, 0x0, 0x8}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000a80)='kfree\x00', r3, 0x0, 0xfffffffffffffffe}, 0x18) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xb, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020782500000000002020207b1af8fe00000000bfa100000000000007010000f8ffffffb702000008000000b703000007000000850000001100000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r4, 0x0, 0x4}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000580)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0xff, 0x7ffc5ffb}]}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) openat$null(0xffffffffffffff9c, 0x0, 0x101401, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000140)='cpuset.memory_spread_page\x00', 0x2, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r5 = bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r5}, 0x4) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r5, @ANYBLOB="0000000000000000b70500000000000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a5000000"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = epoll_create1(0x0) prctl$PR_SET_NAME(0xf, &(0x7f0000000980)='\xff\x00\x00\x00\x00\x00\x000`\x14\x99\x06\xc0\x7fs\x00\t\x14\x17\xc3\xf5\xc9\v\x85\xe7\x00\x00\x18\x88\x06\x94\x98\xa9\xe7\x1c\x8a\x89\xdc\xcc\xf7L\xbd%\xc3!\x0e\x91S\xb2~8\"\xe2\xed\xbf\x12\x1a\\6p\'p\xef\x1a\n\x99\x12\xe8\'\x1c\x97M\xa5N\xd9\xbeV&\x1c2K?\x95\xd9\"\xbe\x050+\xca\xea\'\xe9)\xfe\xeb\x9c\xb5\xa0F`\xe4D\x10F\x831\xec\\v\xf0\xab_M\b\x03\xc3\n\x89\x01E`\xd35Q2\xecZz\xdc\x065p\x1c\x8f\x9b\x99IGXO\x00\x00\v\xed\xb0\xc5\xd4\xc7,\x1a\xb3}CMOO\x8a\xa8kh\x7f\x05c\xfc\xebb\xc8\xa2\xa9\xbf\xb3\x9b\xafE\xbd\xc5\xdc\xde\xbe_') bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000180)='kfree\x00', 0xffffffffffffffff, 0x0, 0x2}, 0x18) syz_usb_connect(0x0, 0x2a9, &(0x7f00000006c0)=ANY=[], 0x0) close_range(r6, 0xffffffffffffffff, 0x0) mq_unlink(&(0x7f0000000000)='eth0\x00') 1.169472599s ago: executing program 2 (id=661): unshare(0x2a020400) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000a80)=ANY=[@ANYBLOB="620af8ffa1dc0021bfa100000000000007010000f8ffffffb702000007000000bd120000000000008500000010000000b70000000000000095000000000000003faf4f2aa3d9b18ed812a2e2c49e8020a6f4e0e4a9446c7670568982b4e020f698393aa0f3881f9c24561f1b2607995daa56f151905ea23c22624c9f87f9793f50bb546040677b0c5077da80fb982c1e9400e693146cea484a415b76966118b64b751a0f241b072e90080008002d75593a286cecc93e64c227c95aa0b784625704f07372c29184ff7f4a7c0000070000006056feb4cc664c0af9360a1f7a5e6b607130c89f18c0c1088d8b8588d72ec29c48f0af5f2d9f51c4b45e0000000000000401d01aa27ae8b09e00e79ab20b0b8ed8fb7a68af2ad0810000000000006fa03c6468978089b302d7ff6023cdcedb5e0125ebbcebdde510cb2364149215108337719acd97cfa107d40224edc5465ad32b77a74e802a0dc6bf25cca242bc6099ad2300000480006ef6c1ff0900000000000010c63a949e8b7955394ffaff03000000000000ab87b1bfeda7be586602d985430cea080000000000000026abfb0767042361448279b05d96a703a660581eecdbf5bcd3de227a167ca17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c9b081d6a08000000ea2b1a52496dfcaf99431412fd134a996382a1a04d5bb924cfe5f3185418d605ffff9c4d2ec7c32f2095e63c80aff9fa740b6c7632d5933a1c1fa5605bd7603f2ba2a790d62d6faec2fed44da4928b30142ba1fde5c5d50b83bae645ffa4997da9c77af4c0cb97fca585ec6bf58351d578be00d952aab9c71764b0a8a7583c90b3433b809bdb9fbd48fc877505ebf6c9d13330ca006bce1a84521f14518c9b476fccbd6c712016219848624b87cec2dbe98223d8d9e86c5ea06d108d8f80a0eb4fa39f6b5c02e6d6d90756ff578f57000000009700cf0b4b8bc229413300000000000000000003000000000000000000000000001000000000559711e6e8fcffffffffffffffb2d02edc3e01dd271c896249ed85b980680b09000000000f0000169cdcacc413b48dafb7a2c8cb482bac0ac502d9ba96ffffffd897ef3b7cda42f93d53046da21b40216e14ba2d6af8656b01e17addaedab25b30002abbba7fa725f38400be7c1fb8f72cd317902f19e385be9e48dccf1f9f3282830689da6b53b263339863297771d74732d400003341bf4a00fc9fec2271ff01589646efd1cf870cd7bb2366fde4a594290c405ff870ce5dfd3467decb05cfd9fcb32c8ed1dbd9d30a64c108285e71b5565b1768ee58969c41595229df17bcad70fb4021428ce970275d13b78249788f11f761038b75d4fe32b561d46ea3abe0fa7956488bef241875f3b4b6ab7929a57affe760e797724f4fce1093b62d7e8c7123d890decacec55bf404e4e1f74b7eed82571be54c72d978cf906df0042e36acd37d7f9e109f2c06f815312e0cfe222a06f56dd022c074eb8a322fb0bf47c0a8d154b405c37feaf3dd95f6ef2acd1fe582786105c70600000000000000b7561301bb997316dbf17866fb84d4173731efe895ff2e1c5560926e90109b598502d3e959efc71f665c542c9062ece84c99a061887a20639b41c8c12ee86c50804042b3eac1f870b136345cf67ca3fb5aac518a75f9e7d7101da841735e186c489b3a06fb99e0347f23a054de2f4d92d6bd72ee2c9fdc75aaaf1e3e483b4ad05573af403269b4a39ce40293947d9a631bcbf3583784acbda216550d7aec6b79e30cbd128f91e358c3b377327ac9ecc34f24c9ae153ec60ac0694da85bff9f5f4df90400000000000000d6b2c5ea1393fdf24285bf16b99c9cc0ad1857216f1a985f369191ae954febb3df464bfe0f7f3ee9afe7befb89d2777399f5874c553aeb3729cffe86e669261192899d4562db0e22d564ae09bb6d163118e401e024fd452277c3887d6116c6cc9d8046c216c1f895778cb26e22a2a998de44aeadea2a40da8daccf080842a486721737390cbf3a74cb2003016f154772f514216bdf57d2a40d40b51ab67903ec8485b3b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde8a168c3f5db2fea6f26e4a4304e50c349f4f9ecee27defc93871c5f99a3594191e104d417e60fc3541a2c905a1a95e9571bf38ae1981c4238ecaee6f75cd0a6881bd1594e32409e2a3bce109b6000000000000a1fec9000000d694210d7560eb92d6a97a27602b81f76386f1535bef1497f92186086e29c6bc5a1fad6ec9a31137ab79a404abde7750898b59270bb29b81367ac91bd627e87306703be8672d70d1ab57075228a9f46ed9bd1f00fb8191bbab2dc591dda61f0868afc4294859323e7a45319f18101288a0268893373750d1a8fe64680b0a3fc22dd704e4214d00000000d6c98cd1a9fbe1e7d58c08acaf30065b928a31d2eca55f74a23641f61f2d5b308cf0d031b0c7f0ce21d69993e9960ff5f76015e6009756237badf4e7965bbe2777e808fcba821a00e8c5c39609ff854356cb490000000000c1fee30a3f7a85d1b29e58c77685efc0ceb1c8e5729c66018d169fc03aa188546b3ad2a182068e1e3a0e2505bc7f41019645466ac96e0d0b3bc19faa5449209b085f3c334b47f067bbab40743b2a428f1da1f68df75cf43f8ecc8d3726602111b40e761fd21081920382f14d12ca3c471c784ae7da7eaa69eb7f7f80572fdd11bb1d070080fbc22bf73468788df51710eb0b428ee751c47d8e894f745a868404a0bf35f0121008b722b1eaa6aedfa1bf2e7ccb2d61d5d76331ff5e20fa26b8471d42645288d7226bbd9c9e9e1cc9eb3d541e407cc2dae5e690cd628ab84875f2c50ba830d3f474b079b407000000deff000040430a537a395dc73bda367bf12cb7d81691a5fe8c47be395656a297e9df0e71b967ce7daac4be290159f6bcd75f0dda9de5532e66ae9e48b0ed1254a81faae79b6af6fbb869604d51de44c4e0973171ad47d6c00ebc7603093f000000fdec30cd6db49a47613808bad959719c0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f15d6533f78a1f4e2df4ca23d867693fd42de9b49a1b36d48a44ba6a4530e59bec53e876dc660dd63bed8d31c31c37a373d4efd89f0000377b1b1292a893a516dab183ee65744fb8fc4f9ce2242e0f0059161c5e0000000000000000000057d77480e0345effff6413258d1f6eb190aa28cbb4bafe34124172e436b176c7ed4b132fb805d5edd9d188daf28d89c014c3ecca10ae55704544673e1fa03b84f63e022fe755f4007a4a899eaf52c4f491d8e97c862e29e457060000007ac691faee1e0c8fe056a07474e6e5490a7d3c3402000000b60600d837c6befc63ddf2f594ad7cbc56a1e44d218c956a5392a995f1fae8e9f206efbb33854dc70104ebc1581848f9745cb796da2dfb714a0500000000000000faed94fc39acfb3fd25dfa8116a154cd1226e1bb72b59fed817072a0da60160761fd3dffda0f7c592eabd8ab68334d2a1693cb187539049e331272bf5135044df8161400211b8012b6eb1ed5656e83f65509bb4b323c5bd61bff949d3bade2f6ffda1360c2786e16937ab61d6dcafed319c716357d0885f9c6d1f442954c167dd9b4acd9468ce3674c82bbb2e31389179b025dbe063b7f906217b2cf8410c7023aa3e5cc3ba1000000000000000000000000000000006ae6301a2da44394275c582a6516bb92ea1980a0a659f2f1811c8b281c209647c4241f292b20508b215dde27bb2487a6e2b5e4a8ccfab90c23827ef06cbe364073005f8a6d1456aaeb85ffb7858f24eced67a67ab825e863928ed64c83f62ffdaa997657335b63c6b4163aff094059e626766845fd779c9e6cdbbd64c24936615ee68538e8fddd0d90f3a7579579a142c0f7b318264d5c13c31cf475829528267ead38523cab7e1664e8426ca85e82ccf821c8a02a7e7d954d05b68a9c28f79429b09e2bb3681ae2b831e27c735123361c193d66ed4d71f19b199d371ec6bfada7cd370e3fdd3cd980fa1e145fd3f3e96b1feb53c865e1ad6acf5d16ed652ee0c7f45352222692fbd679212c225d097aa90f7e1fb1f983415f43e75a19ecf7fd21bfa150ef563aa72ba1c43c5f3d9be128ec26b691f31f9cab931631606a81622f120675c962be2d3b5e95f74f0b209e42e6bdd76e6e725295b1d78d928f6f63c41cbde2ba66ad81168070c8c6e18a6e452a31bdc4a60d637545ed4c8a1c649c3ce54ad3e16304d06a234f5f9311ef0f78924b68dbb4712efdb6974667bdb54f16fd2061b9ba93638dd177227e94e4ebd0ec1d437db948062bf41742000000000000000000305f70dd02fa0c61d5fe6d8ff35389246037e18d34c1375ae04f44f0c2543c772c5ccb137be7dc1874c5140200000054d77d4ea5ed144a648257f4a0301067bbcd9b91072659d872f26b796e2b81025edb5f45f785e2c2602b248ecdd80f019ca659be7e8ae953325a27564f33c9d458a60be3dab38baab7eb1a66ab1ffd6308f7fd51beb356fe75eb985b7581bb5584c53984ba9c7340f97e8d3825681c53de5f554e595b00000000000000006a8fa9f05d64c4be42f981f00051a3bc38613067dbd1427e01bfec016e51844cefa8a855bf23ac887b4a88eed6d9443857242f28e31a41d20105fbf3394ff910e734b4d9101265ff729c426e01c1ab13dda8c388b9e6626f19eecb87e39175e85e17000000000000000000009431807e43886903526074e6b40244c938a4c68a38c25ddd7c143b3f14eafe4b28ec66815cf8d1f56aa1424bc9b5d58790298e5b310969e50c222563b54e60854e1bfeef448aca8c5ccbf5546ce4c3cd5a733fec25fb94e1e0f966bcbd28a4d8fe4f556eaa1104a793006619700798354c6ae0040965e3083562bfa20968c04007d21dc02c9fd1f75e1ff40f439bdde4e784012e52049b483f02f81b88f5f57816b3fecec79cfca8d37203e769759d6b6a56b7605ced8ee18475a77ff0963a565fb6021d216c01b1098e40550a1cfd80e9180100000000000000654cd76ca61fe5ad8a31ec558fdbfa706d5e738bceae81fe777c307d5bc72183a4c2d35732e74dd690c57bdfdc1f069f9491bca7a8c59363799be70018c25ece5ad7307dc7a95c51bc25a8bbe2cf5ddf6aa161693782b0e7feb8a768f391b49d4c978c96dbb52f21c122eba9f17c8bed10591958cf06321a248b5f76ceedfe0d080d6aeadc11b237b3326dd04b86ac37c0d131544888db9e128d059761ad9a393e96c3b41c13c5a381bff187a75de560ba6eb3faa5ff8d2bb3c88f8de5efc2fb2200cfda6d07ceae22577064334fbf76a23e62e6059211d995b879f6b7d3f7fcf03652b81e6b7cdeff947ad185d3c6269ca247b429c3b872a8f1ef60407d29a874f4ec31c9effed55543a65a6b4d778cebcd43b7905f3960140bd783540a7353014bda8e9c7a34a5f428fd1f8eb11e837dd9d586487fdebcb1ecd3a003ff0fda4be617fecf1ff0ef2cdfb7fea73ca18874664d60a4b9423f3297bc8eb91b4ee1d73272ab28a7d7ab055a8eb58fe379de85338304e26e3620941b463e9049fd105c74c91cc4d71b0f76e2c2e4825106aa7ce2a3adbbc7a0443ece98c077b358e752b439132a0f27080ece2a94c320b002c77f82662675a7713c7067081cac15994698c41ff4754268ae2676384ff799783f55d7e5a1a092a01b965dc99cb7a9d98440c355927629f2bcf9dc2396eb2f5d25829715b24327642ac48f1201014a95e0e65e12cdf27e19043e3c5d3e798375cead35b9a93190a52cdecaaccc854a1d41ef365303f0e9b4fc969c9dab6df5e8a795b140fcc09e8a7b694d12932917facd8ceaa4e2d0d16bb0b95387fcd5ff136d8abddf94daf442bbff744591931872a36cf921ad69f2127386e8b0f9afee4da8d3fbec809fbb3ca0fded2859cf25d4c6155d396c5b9bd1a928923123f63f4c40688eae69990a9419456247bbaeb7948de84d2ff875414883bb1e503d4bfebc01bc12a53ea06bf38e571157bd642dac25dbee7832c58378374a39483d6721eec96c28911db21c0c006b42afc90000000000000000000000700000000000000000008ce4ea442c1a207108b35511186c5e860278f6463f52f3990ce08b1bfccc3cff4b5ae27b610aa9ba11b47d4f94c439e055cdbb2b12c983885c93ea4ab4ca1e02d831ae162ee104"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xffffffffffffff27}, 0x41) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) r1 = accept$nfc_llcp(0xffffffffffffffff, &(0x7f00000002c0), &(0x7f00000001c0)=0x60) accept(r1, &(0x7f0000000680)=@ieee802154={0x24, @long}, &(0x7f0000000340)=0x80) prctl$PR_SET_NAME(0xf, &(0x7f0000000140)='+}[@\x00') bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="0b00000005000000020000000200000005000000a0091430969d862986753a139ffd4d1127f527f953159263d5ac2fae8949d9a5f91b4ddec5a9a2645833a08554549264527e18cab9ca6b0bb538027d2a9303c8e7dc0f8ccd9b0cb6909a58454cd14e95a459c21fb6093aa33cbbb45bb419807e03ff40e9f6a18020395eca38", @ANYRES32, @ANYBLOB='\x00'/15, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b70300000000a999850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0x23, 0x0, 0x0) r2 = socket$inet_sctp(0x2, 0x5, 0x84) clock_nanosleep(0x7, 0x0, &(0x7f0000000240), 0x0) r3 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x8401) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000640)='kfree\x00', 0xffffffffffffffff, 0x0, 0x2}, 0x18) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000c40)={0x11, 0xc, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b703000000000000850000007200000095"], &(0x7f0000001480)='GPL\x00', 0x5, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000380)='kfree\x00', r4, 0x0, 0x4804}, 0x18) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) r6 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000340)=ANY=[@ANYBLOB="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"], 0x114}], 0x1, 0x0, 0x0, 0x1}, 0x0) sendmsg$NFT_BATCH(r5, 0x0, 0x0) r7 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_MOD(r7, 0x3, r3, &(0x7f0000000180)={0xd0000006}) sendmsg$NFT_BATCH(r5, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000ac0)={&(0x7f0000000000)=ANY=[@ANYBLOB="14000000100001000000000000000d000000000a64000000060a0904000000000000000002000001300004802c0001800b0001006e756d67656e00001c000280080003400000000008000240fffff80108000140000000000900010073797a30000000000900020073797a32000000000500074075000000140000001100010000000000000000000000000a"], 0x8c}, 0x1, 0x0, 0x0, 0x40010}, 0x0) ioctl$SG_BLKTRACETEARDOWN(r3, 0x1276, 0x0) bind$netlink(0xffffffffffffffff, 0x0, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x8, &(0x7f0000000000)=0x80, 0x4) ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f0000000100)={{0x1, 0x1, 0x18}, './file1\x00'}) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x12, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32, @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @cgroup_sock_addr=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r8 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$inet_IP_IPSEC_POLICY(r2, 0x0, 0x10, &(0x7f0000000900)={{{@in6=@mcast1, @in6=@dev={0xfe, 0x80, '\x00', 0x44}, 0x4e23, 0x8000, 0x4e21, 0x7, 0xa, 0x80, 0x20, 0x2e}, {0x81, 0x9, 0x2, 0x7fffffff, 0x3, 0x1, 0xa05c, 0x9}, {0x0, 0x8, 0x9, 0x4}, 0x400, 0x0, 0x2, 0x0, 0x1}, {{@in=@multicast1, 0x4d2, 0xff}, 0x2, @in6=@empty, 0x34ff, 0x1, 0x1, 0x8, 0x3, 0xfffffffa, 0x3ff}}, 0xe8) sendmsg$nl_route(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="3000000010000100"/20, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=0x0, @ANYBLOB="08001b"], 0x30}}, 0x0) 986.142197ms ago: executing program 3 (id=662): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="5c000000020603000000000000000000ffea000005000100070000000900020073797a300000000014000780080012401b0000000800084000000000050005000000001005000400000000000d000300686173683a6d6163"], 0x5c}}, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000600000027"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={0x0, r2}, 0x18) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000880)={0x18, 0x5, &(0x7f0000000400)=ANY=[], &(0x7f0000000280)='GPL\x00', 0xfffffff3, 0x0, 0x0, 0x40f00, 0x12, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000000)='kmem_cache_free\x00', r3}, 0x18) quotactl$Q_QUOTAON(0xffffffff80000200, &(0x7f0000000440)=@sr0, 0x0, &(0x7f0000000480)='./file0\x00') r4 = socket$rds(0x15, 0x5, 0x0) bind$rds(r4, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10) r5 = request_key(&(0x7f00000000c0)='logon\x00', &(0x7f0000000140)={'syz', 0x0}, &(0x7f0000000280)='\x00', 0xfffffffffffffffc) add_key$fscrypt_provisioning(&(0x7f0000000300), &(0x7f0000000340)={'syz', 0x3}, &(0x7f0000000600)=ANY=[@ANYBLOB], 0x18, 0xfffffffffffffff9) r6 = socket$netlink(0x10, 0x3, 0x0) syz_io_uring_setup(0x3ac6, 0x0, &(0x7f0000000080), &(0x7f0000000100)=0x0) r8 = add_key$user(&(0x7f0000000200), &(0x7f00000003c0)={'syz', 0x3}, &(0x7f0000000780)="f95e9af246a541e6d1309b2d282fbffd23a8498b507d2cb2fc47fe3d001f2d35e4933a7ef3326fd115558a2ead5c80566f7ac1074dfc32775524f6892fa0b8d9ff5d2096e6bbefccddb8656d0ee57d144eb6419ec3c8ded413c09329a090e9ad39edac3901feea55cb358b5ec7ddf2abfa980f50fced799ed070995f1d89c29019f590123d75099358ed843d15d3b18ae9870f9eb7d2bf4977e6a91e603c2d1f839b66e2bf31ba699dcd9e7e52cb", 0xae, r5) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0xb, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1070}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r9}, 0x10) keyctl$set_timeout(0xf, r8, 0x100000000) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={&(0x7f0000000640)=@l2tp6={0xa, 0x0, 0x8, @mcast1, 0x3, 0xffffffff}, 0x80, &(0x7f0000001880)=[{&(0x7f0000000600)="f4000900062b2c25fe80000000000000dc8b850f238466cc00007a000000ad6f911b51430437121d", 0x28}], 0x1}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x19, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2b3}, 0x94) r10 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r10, &(0x7f0000000240)=@pppol2tpv3={0x18, 0x1, {0x0, r6, {0x2, 0x4e22, @multicast1}, 0x2, 0x0, 0x3}}, 0x2e) r11 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000a80)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYRES32=r7], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x51, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r12 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) ioctl$sock_SIOCOUTQ(r12, 0x5411, &(0x7f0000002080)) r13 = inotify_init1(0x80800) close(r13) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r11, @ANYBLOB="0000000004000000b705000008000000850000"], &(0x7f0000000000)='GPL\x00', 0x4, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$nl_route_sched(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=@newqdisc={0x54, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0xffe0}, {0xf}, {0xe, 0xd}}, [@TCA_RATE={0x6, 0x5, {0x9, 0x1}}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1a, {0x0, 0x0, 0x491, 0x0, 0x0, 0xfffffffe, 0x8, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x80}, 0x0) 984.187918ms ago: executing program 1 (id=672): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000040)={r0}, 0x4) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0x18, &(0x7f00000001c0)=ANY=[@ANYRES32=r0, @ANYBLOB="0000000000000000b70500000800000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000000)='kmem_cache_free\x00', r1}, 0x10) r2 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r2, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r3 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r3, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) getpid() socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(&(0x7f0000000140), 0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0x8, &(0x7f0000000080)=ANY=[@ANYRES32, @ANYRES8], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000840)=ANY=[], 0x50) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r4, &(0x7f0000000040)={0x2, 0x4e21, @empty}, 0x10) connect$inet(r4, &(0x7f0000000140)={0x2, 0x4e21, @empty}, 0x10) pipe2(&(0x7f0000000080), 0x0) sendto$inet(0xffffffffffffffff, &(0x7f0000000b00)="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", 0x1b9, 0x0, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x8, 0x94, 0x7fff0000}]}) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) 942.696529ms ago: executing program 2 (id=663): r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={0x3c, 0x4a, 0x1, 0x0, 0x0, {0xa, 0x0, 0x6e80}, [@nested={0x28, 0x1, 0x0, 0x1, [@nested={0x21, 0x8c, 0x0, 0x1, [@generic="1a04268ff9f83d024ce7787f973b78e4b833420b5e7c4fc460e6d27382"]}]}]}, 0x3c}}, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000080)=0x454a, 0x4) bind$inet(r0, &(0x7f0000000200)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x21}}, 0x10) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000006"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000019007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000d40)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r3}, 0x18) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000440)={{r2}, &(0x7f00000003c0), &(0x7f0000000400)=r3}, 0x20) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000600)={0x0, 0x0}) syz_mount_image$iso9660(&(0x7f0000000cc0), &(0x7f0000000180)='./file0\x00', 0x100c085, &(0x7f00000006c0)=ANY=[@ANYRES8=0x0, @ANYBLOB="c0da5b74006e9c47add458a1bd748b7ffa5628dc52f84873cbe6a43cfd29e4198255a0610d383b0e46b2b6457282a9f3caef22979e54c145e6a0ce2850a890af7c4e1fa3628453c70aae32270b0042f1532cf08030eccdca96e2c97aae42cf5d9ec5f0afa4fcc53c8f9289677038d09ae2b1bd2271e0a76e6324df3a2b01a9ed0277d7e8d6f7d463ae62692faa55bdb43dc2bea18eea4a635951fd0a220a835fa24d0700c8f8c245d1d7638b2cae5ed3bec0d2f0415ddff7884bb34ab0cb1598e9c7b92a29005e4090ede480b3412f5c33da5e7c8672bda19fd3d989f8336d69d9e70de142973e7e1f53987b2d", @ANYRESDEC], 0x10, 0x7f4, &(0x7f0000000e40)="$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") prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) unshare(0x62040200) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000a80)='kfree\x00', 0xffffffffffffffff, 0x0, 0xfffffffffffffffd}, 0x18) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000f40)={0x11, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) sendmsg$IPSET_CMD_TEST(r4, 0x0, 0x4804) bpf$MAP_CREATE(0x1900000000000000, 0x0, 0x50) ioctl$PPPIOCNEWUNIT(0xffffffffffffffff, 0xc004743e, &(0x7f00000000c0)) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) socket$inet_udp(0x2, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) 879.088272ms ago: executing program 4 (id=664): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x7, 0x8604, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0}, 0x0, 0x10000, 0x8, 0x6, 0x8, 0x2, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) socket$inet_sctp(0x2, 0x1, 0x84) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x18, 0x4, &(0x7f0000000180)=ANY=[], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1000000e}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuacct.usage_sys\x00', 0x275a, 0x0) r2 = socket$phonet_pipe(0x23, 0x5, 0x2) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000040)='team_slave_1\x00', 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) getuid() r3 = syz_clone(0x0, 0x0, 0x9, 0x0, 0x0, 0x0) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="0a00000002000000ff0f000007", @ANYRES64, @ANYRES8, @ANYRES64=r3, @ANYBLOB="0280059ba8c106272101821d94fee624797f2181d5d49deb3bbaca3ff208e74c4cdef15dd29ee36eb002c21f4e95"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x0, 0x22c7, &(0x7f0000000380)=ANY=[@ANYRESOCT, @ANYRESDEC, @ANYRES8=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) fcntl$lock(r1, 0x5, &(0x7f0000000180)={0x0, 0x1, 0x86, 0x80000000}) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) syz_clone3(&(0x7f0000000580)={0x4100, &(0x7f00000001c0), &(0x7f0000000240), &(0x7f0000000280), {0x25}, &(0x7f00000002c0)=""/35, 0x23, &(0x7f0000000300)=""/94, &(0x7f0000000380)}, 0x58) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSETMODE(r4, 0x4b45, 0x1) ioctl$TIOCL_SETSEL(r4, 0x541c, &(0x7f00000000c0)={0x2, {0x2, 0xfffc, 0x2fd, 0x1, 0x101}}) socket$inet6_tcp(0xa, 0x1, 0x0) perf_event_open(&(0x7f00000004c0)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4e93, 0x18445, 0x9, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, @perf_config_ext={0xc0000000000000, 0xfffe}, 0x1088a0, 0xa9, 0x80000000, 0x5, 0x400000a5, 0x0, 0x8, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) syz_clone(0x41064400, 0x0, 0x0, 0x0, 0x0, 0x0) 571.389326ms ago: executing program 3 (id=665): r0 = fsopen(&(0x7f0000001100)='debugfs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000ac0)='gid', &(0x7f0000000440)='0\x00#\x00\xd0\x00 \x00\x00qS\x00\x00\x00\x00\x00\x00\x00\x00$\xf6_\xbdI\x1c\xf2\xa9]\xcc\xe0*\xef\x01\x8d\x15\xd2h\x93\xc9\xb57\xc3\xea\\Eb\xf8\xe6,\xdf\xd4\xfae\x84\xcc\xd5\"d\xf0D-\x98\x9f\x81{\xfc$\xc4\xbcF\xf8\xc8\x8d\xcb\xb8\xf2\x1e\xe4\'U\xb3\xb8\xd3\xe6\xd7\x80Y\xc2\xeb\n\xb8_\xe8\x96YY\xe3\xc7\xe6\xf28\x19\xa6\xa7\xfa\xdb\x1ce\xc1\x03\x86J\xb2fh\x19\xee#\xcc\x0f\xed\xfea\xdc\x88\xcb%bW\xd35\xda=\xac\x1d\xae\x93\xfd\'T6\x94\n\xa4\x9cU\xc4\fA~[\xbf\x8b\x90\xfe\x04\xe7U\xf3h\x81\x14l7u\x95\x96t\\\x0f\xef;\x03\xa4C\xbc(Vc!a\xc1\xe39\xc6b\x905\xf8\xc9@h\x01\xf5\xcb\x88\xdf9\xaf5\xc8a:z\xe4\xcbag&67\x814\xf6}\xe10v6l\xd6,\x1e\xa0\xcc\xbf\xfdkm\b?\x839\x85N\x1c\xc1\xcb\xfc\x85\xd2\n\x02\"\xf2\x81g\x90\x01n%\x7f_\xe1.f>>\xa5\xfb\"\xab\xdb\x06\x12e\x14\x11~\x9a\bR-\x85\xc3\xa9\xe6\xf6R\x11\"\xc3\xc9\xfc\x14s X\xec\xdd\xc2qB\x85\xf0\xd7\x04\xdd<\x9a\x84\'\xa3\xf1\xd9<\xb9k', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r2 = fsmount(r1, 0x0, 0x0) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f00000004c0)=ANY=[@ANYBLOB="180000000000000000000000000000008500000023000000850000000800000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r4}, 0x10) close(r3) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x34, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x55}, 0x94) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb010789005e107538e486dd6317ce22000000fffe80000000000000101000007f0600080000000000000071273fa7b49301641184a907"], 0xfdef) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000280)={&(0x7f0000000040)="58db1d", 0x0, 0x0, 0x0, 0x40}, 0x38) r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f0000000200)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r5, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1100}, 0x48) r6 = socket$netlink(0x10, 0x3, 0x8000000004) r7 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="1b00000000000000000000000000040000000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/22], 0x50) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xf, &(0x7f0000000280)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1}, {{0x18, 0x1, 0x1, 0x0, r7}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000080)='GPL\x00', 0x6, 0x0, 0x0, 0x41000, 0x4, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r8}, 0x18) writev(r6, &(0x7f0000000580)=[{&(0x7f0000000080)="580000001400192340834b80040d8c560a067f0200ff000000000000000058000b4824ca945f64009400ff0325010ebc000000000000008000f0fffeffe809005300fff5dd00000010000200040010000800014004000000", 0x58}], 0x1) fchdir(r2) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x80) openat(r2, 0x0, 0x80101, 0x41) r9 = open_tree(0xffffffffffffff9c, &(0x7f0000000100)='\x00', 0x89901) move_mount(r9, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f00000000c0)={0x0, &(0x7f0000000080)}) r10 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) close_range(r10, 0xffffffffffffffff, 0x0) rmdir(0x0) 478.33179ms ago: executing program 2 (id=666): gettid() r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)=ANY=[@ANYBLOB="4c0000000206010700000000000000000000000014000300686173683a69702c706f72742c6970000900020073797a31000000000500010007000000050005000a0000000500040001000000c1590c9fe92c70409533a7acaf"], 0x4c}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000780)=ANY=[@ANYBLOB="74000000090601020000000000000000030000000900020073797a310000000005000100070000004c0007801800018014000240fe8000000000000000000000000000aa1800148014000240fc000000000000000000000000000000060004404e1f0000050007008400000006000540"], 0x74}, 0x1, 0x0, 0x0, 0x10040003}, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) syz_open_dev$tty1(0xc, 0x4, 0x4) bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x50) r2 = bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r2, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_mount_image$vfat(&(0x7f0000001800), &(0x7f0000000180)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xc888, &(0x7f0000002340)=ANY=[@ANYRES16=0x0, @ANYRES32=0x0], 0x4, 0x273, &(0x7f0000000680)="$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") seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x81, 0x7, 0x8}]}) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) semtimedop(0x0, &(0x7f00000003c0)=[{0x2, 0x4, 0x800}], 0x1, 0x0) semop(0x0, &(0x7f00000000c0), 0x0) semctl$IPC_RMID(0x0, 0x0, 0x0) gettid() timer_create(0x0, 0x0, &(0x7f0000bbdffc)) mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x2000001, 0x6031, 0xffffffffffffffff, 0x4000) munlock(&(0x7f00002a4000/0x2000)=nil, 0x2000) munlock(&(0x7f0000daf000/0x1000)=nil, 0x1000) munlockall() syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) 416.672413ms ago: executing program 3 (id=667): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x7, 0x8604, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0}, 0x0, 0x10000, 0x8, 0x6, 0x8, 0x2, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) socket$inet_sctp(0x2, 0x1, 0x84) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x18, 0x4, &(0x7f0000000180)=ANY=[], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1000000e}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuacct.usage_sys\x00', 0x275a, 0x0) r2 = socket$phonet_pipe(0x23, 0x5, 0x2) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000040)='team_slave_1\x00', 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) getuid() r3 = syz_clone(0x0, 0x0, 0x9, 0x0, 0x0, 0x0) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="0a00000002000000ff0f000007", @ANYRES64, @ANYRES8, @ANYRES64=r3, @ANYBLOB="0280059ba8c106272101821d94fee624797f2181d5d49deb3bbaca3ff208e74c4cdef15dd29ee36eb002c21f4e95"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x0, 0x22c7, &(0x7f0000000380)=ANY=[@ANYRESOCT, @ANYRESDEC, @ANYRES8=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) fcntl$lock(r1, 0x5, &(0x7f0000000180)={0x0, 0x1, 0x86, 0x80000000}) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) syz_clone3(&(0x7f0000000580)={0x4100, &(0x7f00000001c0), &(0x7f0000000240), &(0x7f0000000280), {0x25}, &(0x7f00000002c0)=""/35, 0x23, &(0x7f0000000300)=""/94, &(0x7f0000000380)}, 0x58) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSETMODE(r4, 0x4b45, 0x1) ioctl$TIOCL_SETSEL(r4, 0x541c, &(0x7f00000000c0)={0x2, {0x2, 0xfffc, 0x2fd, 0x1, 0x101}}) socket$inet6_tcp(0xa, 0x1, 0x0) perf_event_open(&(0x7f00000004c0)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4e93, 0x18445, 0x9, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, @perf_config_ext={0xc0000000000000, 0xfffe}, 0x1088a0, 0xa9, 0x80000000, 0x5, 0x400000a5, 0x0, 0x8, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) syz_clone(0x41064400, 0x0, 0x0, 0x0, 0x0, 0x0) 260.088049ms ago: executing program 0 (id=668): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$MAP_CREATE(0x0, 0x0, 0x48) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) futex_waitv(&(0x7f0000004240)=[{0xa968, 0x0, 0x2}], 0x1, 0x0, &(0x7f0000004dc0)={0x77359400}, 0x8123f3f502f2614e) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ENABLE(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)={0x54, r4, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_BEARER={0x40, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x0, @loopback}}, {0x14, 0x2, @in={0x2, 0x0, @multicast2}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}]}]}, 0x54}}, 0x0) sendmsg$TIPC_NL_KEY_SET(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)={0x58, r4, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_NODE={0x44, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x3c, 0x4, {'gcm(aes)\x00', 0x14, "e3de3d7b4cd07ec3ee777de774fc7987cca41989"}}, @TIPC_NLA_NODE_KEY_MASTER={0x4}]}]}, 0x58}, 0x1, 0x0, 0x0, 0x4}, 0x4000004) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_GET_PROTOCOL_FEATURES(r3, 0x0, 0x1) r6 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="8c000000", @ANYRES16=r6], 0x8c}, 0x1, 0x0, 0x0, 0x4}, 0x4000004) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000e40), 0xffffffffffffffff) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmsg$TIPC_NL_BEARER_ENABLE(r7, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000001080)={&(0x7f0000000440)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="010000b6b347338920e07c000000180001801119010065e91bd78f7f09a8e0b5a36b0974683a6970365f746930000000006561fe91263a3e8f25fac9361f8ea99d12c30f4ba87167ff1877a3d492d1c4df9d405a8a7030002e6253bbd9ca"], 0x2c}}, 0x8000) recvmsg(r0, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{0x0}], 0x1, 0x0, 0x0, 0x200000}, 0x1f00) sendmsg$tipc(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0) syz_emit_ethernet(0x86, &(0x7f00000010c0)={@broadcast, @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x78, 0x0, 0x0, 0x0, 0x1, 0x0, @private=0xa010102, @local}, @redirect={0x3, 0x4, 0x0, @broadcast=0x1000000, {0x17, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty, {[@timestamp_addr={0x44, 0xc, 0x0, 0x1, 0x0, [{@remote, 0x6e210000}]}, @timestamp_addr={0x44, 0x3c, 0x0, 0x1, 0x2, [{@multicast1}, {@broadcast}, {@dev}, {@private}, {@empty}, {@initdev={0xac, 0x1e, 0x0, 0x0}}, {@dev}]}]}}}}}}}, 0x0) setresuid(0x0, 0xee01, 0x0) r9 = shmget$private(0x0, 0x1000, 0x40, &(0x7f0000ffc000/0x1000)=nil) shmctl$IPC_SET(r9, 0x1, &(0x7f00000003c0)={{0x1, 0x0, 0x0, 0x0, 0x0, 0x65, 0xf}, 0xb, 0x1ff, 0xb0f0, 0x2, 0x0, 0x0, 0x4}) r10 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000004850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r10}, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000010000000900010073797a300000000080000000090a010400000000000000000100000008000a40000000000900020073797a32000000000900010073797a30000000000800054000000021440011800a0001006d617463680000003400028008000240000000001c0003000afe6cbf96caa5debdad61b67ddb2fb68fcf19f7807076430a00010071756f7461"], 0xc8}, 0x1, 0x0, 0x0, 0x4000005}, 0x20000004) setrlimit(0x40000000000008, 0x0) sendmmsg(r1, 0x0, 0x0, 0x4044080) 94.268067ms ago: executing program 4 (id=669): bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r0, 0xfca804a0, 0x10, 0x38, &(0x7f00000002c0)="b800000500000000", &(0x7f0000000300)=""/8, 0x500, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) syz_open_dev$sg(&(0x7f0000001600), 0x0, 0x22c01) gettid() r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="6000000002060103000000000000000000000004050001000700000013000300686173683a6e65742c696661636500000900020073797a30000000000500040000000000050005000a000000140007800500150000000000080012"], 0x60}}, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x4040, 0x0) io_setup(0xd6, &(0x7f0000000200)=0x0) r4 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000002740), 0x101002) io_submit(r3, 0x1, &(0x7f0000000180)=[&(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, r4, &(0x7f00000000c0)="01", 0x2020}]) syz_mount_image$ext4(&(0x7f00000003c0)='ext4\x00', &(0x7f00000002c0)='./bus\x00', 0x404, &(0x7f0000000580)={[{@orlov}, {@min_batch_time={'min_batch_time', 0x3d, 0x4}}]}, 0x1, 0x5d8, &(0x7f0000000c00)="$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") r5 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x4040, 0x0) syz_io_uring_setup(0x80c, &(0x7f0000000440)={0x0, 0x6d83, 0x0, 0x40000000, 0x54}, &(0x7f0000000100)=0x0, &(0x7f0000000040)) syz_io_uring_submit(r6, 0x0, &(0x7f00000001c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x4}) io_uring_enter(0xffffffffffffffff, 0x381b, 0x0, 0x0, 0x0, 0x0) r7 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1202, 0x0) write$P9_RVERSION(r2, &(0x7f0000000000)=ANY=[@ANYBLOB="1500000065ffff0a0000000800395032303030938f"], 0x15) write(r7, &(0x7f0000004200)='t', 0x1) sendfile(r7, r5, 0x0, 0x3ffff) sendfile(r7, r5, 0x0, 0x7ffff000) r8 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1002, 0x0) write(r8, &(0x7f0000004200)='t', 0x1) sendfile(r8, r2, 0x0, 0x7ffff000) socket$nl_xfrm(0x10, 0x3, 0x6) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) rseq(&(0x7f00000004c0), 0x20, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000002040)=ANY=[@ANYBLOB="1e0000000000000005000000"], 0x48) 33.785079ms ago: executing program 1 (id=670): r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x1, 0x2002) write$evdev(r0, &(0x7f0000000040)=[{{}, 0x0, 0x2}], 0x37) ioctl$EVIOCGLED(r0, 0x80404519, &(0x7f0000000240)=""/106) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) r2 = socket$inet_sctp(0x2, 0x5, 0x84) close(0xffffffffffffffff) r3 = perf_event_open(&(0x7f0000000200)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) perf_event_open$cgroup(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4}, 0x0, 0x2, 0x0, 0x0, 0x2, 0x1000000}, 0xffffffffffffffff, 0x0, r3, 0x0) prctl$PR_PAC_RESET_KEYS(0x36, 0x1) syz_clone(0x400, 0x0, 0x0, 0x0, 0x0, 0x0) r4 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000000080)=[@in={0x2, 0x0, @private=0xa010101}]}, &(0x7f0000000100)=0x10) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r4, 0x84, 0x1d, &(0x7f0000000140)={0x3, [0x0, 0x0, 0x0]}, &(0x7f0000000040)=0x10) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r2, 0x84, 0x1f, &(0x7f00000002c0)={r5, @in={{0x2, 0x4e20, @empty}}, 0x8, 0x5}, &(0x7f0000000000)=0x90) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r1}, 0x4) socket$can_raw(0x1d, 0x3, 0x1) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70500000000000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8f7ffffb702000008000000b703000000000000a5000000eeffffff95"], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x8, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000040)='sys_enter\x00', r6}, 0x10) mount_setattr(0xffffffffffffffff, 0x0, 0x900, &(0x7f0000000200)={0x76, 0x100080, 0x20000}, 0x20) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x40000f63c) r7 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000000)='ns/pid_for_children\x00') fremovexattr(r7, &(0x7f0000000040)=@known='trusted.overlay.metacopy\x00') r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000e000000850000000f00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) r9 = socket$nl_rdma(0x10, 0x3, 0x14) r10 = syz_open_dev$hiddev(&(0x7f0000000080), 0xd6, 0x20000) ioctl$HIDIOCGREPORT(r10, 0x400c4807, &(0x7f00000000c0)={0x2, 0x200, 0x4}) sendmsg$RDMA_NLDEV_CMD_STAT_DEL(r9, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000440)=ANY=[@ANYBLOB="380000001214010025bd70400000002508004f000300000008004b001300000008001500030000000800010000000000080003"], 0x38}, 0x1, 0x0, 0x0, 0x20040001}, 0x20000000) getsockopt$sock_cred(r9, 0x1, 0x11, &(0x7f00000003c0), &(0x7f0000000400)=0xc) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000700)='signal_generate\x00', r8}, 0x18) syz_open_procfs$namespace(0x0, 0xfffffffffffffffe) 0s ago: executing program 1 (id=671): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x7, 0x8604, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0}, 0x0, 0x10000, 0x8, 0x6, 0x8, 0x2, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) socket$inet_sctp(0x2, 0x1, 0x84) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x18, 0x4, &(0x7f0000000180)=ANY=[], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1000000e}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuacct.usage_sys\x00', 0x275a, 0x0) r2 = socket$phonet_pipe(0x23, 0x5, 0x2) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000040)='team_slave_1\x00', 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x8, 0xf9, 0x7ffc1ffb}]}) r3 = syz_clone(0x0, 0x0, 0x9, 0x0, 0x0, 0x0) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="0a00000002000000ff0f000007", @ANYRES64, @ANYRES8, @ANYRES64=r3, @ANYBLOB="0280059ba8c106272101821d94fee624797f2181d5d49deb3bbaca3ff208e74c4cdef15dd29ee36eb002c21f4e95"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x0, 0x22c7, &(0x7f0000000380)=ANY=[@ANYRESOCT, @ANYRESDEC, @ANYRES8=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) fcntl$lock(r1, 0x5, &(0x7f0000000180)={0x0, 0x1, 0x86, 0x80000000}) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) syz_clone3(&(0x7f0000000580)={0x4100, &(0x7f00000001c0), &(0x7f0000000240), &(0x7f0000000280), {0x25}, &(0x7f00000002c0)=""/35, 0x23, &(0x7f0000000300)=""/94, &(0x7f0000000380)}, 0x58) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSETMODE(r4, 0x4b45, 0x1) ioctl$TIOCL_SETSEL(r4, 0x541c, &(0x7f00000000c0)={0x2, {0x2, 0xfffc, 0x2fd, 0x1, 0x101}}) socket$inet6_tcp(0xa, 0x1, 0x0) perf_event_open(&(0x7f00000004c0)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4e93, 0x18445, 0x9, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, @perf_config_ext={0xc0000000000000, 0xfffe}, 0x1088a0, 0xa9, 0x80000000, 0x5, 0x400000a5, 0x0, 0x8, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) syz_clone(0x41064400, 0x0, 0x0, 0x0, 0x0, 0x0) kernel console output (not intermixed with test programs): ks 1 with error 28 [ 60.651520][ T4513] EXT4-fs (loop2): This should not happen!! Data will be lost [ 60.651520][ T4513] [ 60.661190][ T4513] EXT4-fs (loop2): Total free blocks count 0 [ 60.667246][ T4513] EXT4-fs (loop2): Free/Dirty block details [ 60.673173][ T4513] EXT4-fs (loop2): free_blocks=128 [ 60.678277][ T4513] EXT4-fs (loop2): dirty_blocks=0 [ 60.683331][ T4513] EXT4-fs (loop2): Block reservation details [ 60.689337][ T4513] EXT4-fs (loop2): i_reserved_data_blocks=0 [ 60.700946][ T4519] EXT4-fs (loop0): 1 truncate cleaned up [ 60.755696][ T4513] syz.2.242 (4513) used greatest stack depth: 9048 bytes left [ 60.830366][ T4526] netlink: 32 bytes leftover after parsing attributes in process `syz.0.244'. [ 60.941169][ T4532] netlink: 'syz.2.245': attribute type 1 has an invalid length. [ 60.948836][ T4532] netlink: 224 bytes leftover after parsing attributes in process `syz.2.245'. [ 61.052357][ T4534] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 61.191605][ T4536] 9pnet_fd: Insufficient options for proto=fd [ 61.434410][ T4534] lo speed is unknown, defaulting to 1000 [ 61.549415][ T4534] wg1 speed is unknown, defaulting to 1000 [ 62.373127][ T4547] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 62.430690][ T4547] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 62.741923][ T4549] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 62.764050][ T4549] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 62.923972][ T4552] set_capacity_and_notify: 9 callbacks suppressed [ 62.923988][ T4552] loop4: detected capacity change from 0 to 8192 [ 62.943334][ T4552] ./file0: Can't lookup blockdev [ 63.019573][ T4558] bridge_slave_0: left allmulticast mode [ 63.025332][ T4558] bridge_slave_0: left promiscuous mode [ 63.031052][ T4558] bridge0: port 1(bridge_slave_0) entered disabled state [ 63.040555][ T4558] bridge_slave_1: left allmulticast mode [ 63.046239][ T4558] bridge_slave_1: left promiscuous mode [ 63.052036][ T4558] bridge0: port 2(bridge_slave_1) entered disabled state [ 63.065230][ T4561] netlink: 'syz.4.254': attribute type 10 has an invalid length. [ 63.073068][ T4561] __nla_validate_parse: 2 callbacks suppressed [ 63.073082][ T4561] netlink: 40 bytes leftover after parsing attributes in process `syz.4.254'. [ 63.091748][ T4558] bond0: (slave bond_slave_0): Releasing backup interface [ 63.103608][ T4558] bond0: (slave bond_slave_1): Releasing backup interface [ 63.129474][ T4558] team0: Port device team_slave_0 removed [ 63.150527][ T4558] team0: Port device team_slave_1 removed [ 63.157508][ T4558] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 63.164921][ T4558] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 63.168720][ T4554] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 63.180736][ T4554] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 63.181992][ T4558] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 63.196055][ T4558] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 63.205576][ T4558] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 63.227895][ T4561] batman_adv: batadv0: Adding interface: veth1_vlan [ 63.234543][ T4561] batman_adv: batadv0: The MTU of interface veth1_vlan is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 63.261268][ T4561] batman_adv: batadv0: Interface activated: veth1_vlan [ 63.280495][ T4567] loop0: detected capacity change from 0 to 512 [ 63.287160][ T4567] EXT4-fs: Ignoring removed nomblk_io_submit option [ 63.300497][ T4567] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 63.313890][ T4567] EXT4-fs (loop0): 1 truncate cleaned up [ 63.389951][ T4580] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 63.397373][ T4580] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 63.405506][ T4580] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 63.412994][ T4580] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 63.424522][ T4585] loop2: detected capacity change from 0 to 1024 [ 63.437117][ T4585] EXT4-fs: Ignoring removed orlov option [ 63.438734][ T4584] loop4: detected capacity change from 0 to 1024 [ 63.458104][ T4584] EXT4-fs: Ignoring removed orlov option [ 63.512371][ T4578] lo speed is unknown, defaulting to 1000 [ 63.539809][ T4578] wg1 speed is unknown, defaulting to 1000 [ 63.901554][ T4600] hub 9-0:1.0: USB hub found [ 63.906328][ T4600] hub 9-0:1.0: 8 ports detected [ 63.971020][ T4603] netlink: 188 bytes leftover after parsing attributes in process `syz.1.263'. [ 64.089475][ T4604] loop3: detected capacity change from 0 to 8192 [ 64.108513][ T4593] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 64.130436][ T4604] ./file0: Can't lookup blockdev [ 64.145938][ T4607] loop1: detected capacity change from 0 to 764 [ 64.167144][ T4609] Driver unsupported XDP return value 0 on prog (id 307) dev N/A, expect packet loss! [ 64.175951][ T4593] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 64.185220][ T4607] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 64.239765][ T4607] usb usb6: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 64.275032][ T4607] vhci_hcd vhci_hcd.2: invalid port number 96 [ 64.281256][ T4607] vhci_hcd vhci_hcd.2: default hub control req: 0300 vfffa i0060 l0 [ 64.335208][ T4613] lo speed is unknown, defaulting to 1000 [ 64.341703][ T4613] wg1 speed is unknown, defaulting to 1000 [ 64.405228][ T4617] siw: device registration error -23 [ 64.496910][ T29] kauditd_printk_skb: 1009 callbacks suppressed [ 64.496927][ T29] audit: type=1326 audit(1765165449.148:6216): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4620 comm="syz.1.268" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f489febf749 code=0x7ffc0000 [ 64.526614][ T29] audit: type=1326 audit(1765165449.148:6217): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4620 comm="syz.1.268" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f489febf749 code=0x7ffc0000 [ 64.549856][ T29] audit: type=1326 audit(1765165449.148:6218): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4620 comm="syz.1.268" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f489febf749 code=0x7ffc0000 [ 64.573162][ T29] audit: type=1326 audit(1765165449.148:6219): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4620 comm="syz.1.268" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7f489febf749 code=0x7ffc0000 [ 64.596532][ T29] audit: type=1326 audit(1765165449.148:6220): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4620 comm="syz.1.268" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f489febf749 code=0x7ffc0000 [ 64.619862][ T29] audit: type=1326 audit(1765165449.148:6221): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4620 comm="syz.1.268" exe="/root/syz-executor" sig=0 arch=c000003e syscall=56 compat=0 ip=0x7f489febf749 code=0x7ffc0000 [ 64.643079][ T29] audit: type=1326 audit(1765165449.148:6222): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4622 comm="syz.1.268" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f489fef2005 code=0x7ffc0000 [ 64.666476][ T29] audit: type=1326 audit(1765165449.148:6223): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4620 comm="syz.1.268" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f489febf749 code=0x7ffc0000 [ 64.689852][ T29] audit: type=1326 audit(1765165449.158:6224): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4620 comm="syz.1.268" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f489febf749 code=0x7ffc0000 [ 64.713176][ T29] audit: type=1326 audit(1765165449.158:6225): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4620 comm="syz.1.268" exe="/root/syz-executor" sig=0 arch=c000003e syscall=56 compat=0 ip=0x7f489febf749 code=0x7ffc0000 [ 64.858058][ T4625] loop4: detected capacity change from 0 to 512 [ 64.875186][ T4625] EXT4-fs: Ignoring removed nomblk_io_submit option [ 64.882237][ T4625] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 64.914780][ T4625] EXT4-fs (loop4): 1 truncate cleaned up [ 65.060461][ T4640] bridge0: entered promiscuous mode [ 65.065785][ T4640] macvtap1: entered allmulticast mode [ 65.071215][ T4640] bridge0: entered allmulticast mode [ 65.078478][ T4640] bridge0: left allmulticast mode [ 65.083581][ T4640] bridge0: left promiscuous mode [ 65.455085][ T4646] netlink: 12 bytes leftover after parsing attributes in process `syz.3.274'. [ 65.733436][ T4653] loop4: detected capacity change from 0 to 1024 [ 65.740776][ T4653] EXT4-fs (loop4): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 65.751831][ T4653] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 65.763526][ T4653] JBD2: no valid journal superblock found [ 65.769409][ T4653] EXT4-fs (loop4): Could not load journal inode [ 65.786371][ T4659] netlink: 'syz.3.279': attribute type 3 has an invalid length. [ 65.790905][ T4660] loop0: detected capacity change from 0 to 512 [ 65.794069][ T4659] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.279'. [ 65.852392][ T4662] loop2: detected capacity change from 0 to 8192 [ 65.864105][ T4660] EXT4-fs mount: 49 callbacks suppressed [ 65.864194][ T4660] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 65.883322][ T4656] ./file0: Can't lookup blockdev [ 65.905591][ T4660] ext4 filesystem being mounted at /55/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 65.921645][ T4660] netlink: 12 bytes leftover after parsing attributes in process `syz.0.278'. [ 65.936644][ T4660] EXT4-fs error (device loop0): ext4_do_update_inode:5617: inode #2: comm syz.0.278: corrupted inode contents [ 65.954737][ T4660] EXT4-fs error (device loop0): ext4_dirty_inode:6502: inode #2: comm syz.0.278: mark_inode_dirty error [ 65.974797][ T4660] EXT4-fs error (device loop0): ext4_do_update_inode:5617: inode #2: comm syz.0.278: corrupted inode contents [ 65.990045][ T4660] EXT4-fs error (device loop0): __ext4_ext_dirty:206: inode #2: comm syz.0.278: mark_inode_dirty error [ 66.020522][ T2266] Bluetooth: hci0: Frame reassembly failed (-84) [ 66.050836][ T4677] netlink: 'syz.2.282': attribute type 39 has an invalid length. [ 66.215949][ T4679] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 66.224752][ T4679] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 66.274929][ T4685] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 66.287500][ T4685] ext4 filesystem being mounted at /59/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 66.313208][ T3323] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 66.443922][ T4688] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 66.452468][ T4688] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 66.631472][ T3317] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 66.691433][ T4696] EXT4-fs: Ignoring removed orlov option [ 66.702492][ T4696] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 66.835827][ T4704] xt_CT: You must specify a L4 protocol and not use inversions on it [ 66.914280][ T3322] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 67.036248][ T4709] ./file0: Can't lookup blockdev [ 67.264032][ T4711] siw: device registration error -23 [ 67.415253][ T4732] FAT-fs (loop2): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 67.443541][ T4732] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 67.483854][ T291] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 67.733565][ T4736] EXT4-fs: Ignoring removed nomblk_io_submit option [ 67.911561][ T4741] lo speed is unknown, defaulting to 1000 [ 67.934386][ T4741] wg1 speed is unknown, defaulting to 1000 [ 68.029027][ T3516] Bluetooth: hci0: command 0x1003 tx timeout [ 68.035217][ T44] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 68.123884][ T4736] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 68.147740][ T4734] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 68.167679][ T4733] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1306: group 0, block bitmap and bg descriptor inconsistent: 25 vs 281 free clusters [ 68.306890][ T4748] 9p: Bad value for 'source' [ 68.334609][ T3322] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 68.398008][ T4750] set_capacity_and_notify: 6 callbacks suppressed [ 68.398049][ T4750] loop4: detected capacity change from 0 to 512 [ 68.426464][ T4750] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 68.447389][ T4750] ext4 filesystem being mounted at /54/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 68.454590][ T3323] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 68.474253][ T4750] netlink: 12 bytes leftover after parsing attributes in process `syz.4.298'. [ 68.485134][ T4750] EXT4-fs error (device loop4): ext4_do_update_inode:5617: inode #2: comm syz.4.298: corrupted inode contents [ 68.505716][ T4750] EXT4-fs error (device loop4): ext4_dirty_inode:6502: inode #2: comm syz.4.298: mark_inode_dirty error [ 68.517854][ T4750] EXT4-fs error (device loop4): ext4_do_update_inode:5617: inode #2: comm syz.4.298: corrupted inode contents [ 68.530126][ T4750] EXT4-fs error (device loop4): __ext4_ext_dirty:206: inode #2: comm syz.4.298: mark_inode_dirty error [ 68.742913][ T4758] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 68.752118][ T4758] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 68.772807][ T4766] loop0: detected capacity change from 0 to 8192 [ 68.805143][ T4762] ./file0: Can't lookup blockdev [ 68.852199][ T4770] tipc: Started in network mode [ 68.857099][ T4770] tipc: Node identity 7f000001, cluster identity 4711 [ 68.876016][ T4759] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 68.881375][ T4770] tipc: Enabled bearer , priority 10 [ 68.885543][ T4759] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 68.903641][ T4764] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 68.913083][ T4764] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 69.230026][ T3322] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 69.334159][ T4777] batman_adv: batadv0: Interface deactivated: veth1_vlan [ 69.341500][ T4777] batman_adv: batadv0: Removing interface: veth1_vlan [ 69.465337][ T4781] netlink: 24 bytes leftover after parsing attributes in process `syz.1.308'. [ 69.556201][ T4783] netlink: 8 bytes leftover after parsing attributes in process `syz.3.306'. [ 69.613798][ T4783] 9pnet_fd: Insufficient options for proto=fd [ 69.624345][ T4782] siw: device registration error -23 [ 69.839736][ T4791] siw: device registration error -23 [ 69.952118][ T4794] bridge0: entered promiscuous mode [ 69.973714][ T4794] macvtap1: entered allmulticast mode [ 69.979198][ T4794] bridge0: entered allmulticast mode [ 70.047729][ T4794] bridge0: left allmulticast mode [ 70.052912][ T4794] bridge0: left promiscuous mode [ 70.347462][ T4791] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 70.406322][ T3368] tipc: Node number set to 2130706433 [ 70.419126][ T29] kauditd_printk_skb: 844 callbacks suppressed [ 70.419158][ T29] audit: type=1326 audit(1765165454.158:7070): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4776 comm="syz.4.307" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1feb4af749 code=0x7ffc0000 [ 70.448636][ T29] audit: type=1326 audit(1765165454.158:7071): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4776 comm="syz.4.307" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1feb4af749 code=0x7ffc0000 [ 70.471982][ T29] audit: type=1400 audit(1765165454.188:7072): avc: denied { ioctl } for pid=4779 comm="syz.1.308" path="socket:[9495]" dev="sockfs" ino=9495 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 70.497465][ T29] audit: type=1400 audit(1765165454.188:7073): avc: denied { ioctl } for pid=4779 comm="syz.1.308" path="socket:[9509]" dev="sockfs" ino=9509 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 70.521924][ T29] audit: type=1400 audit(1765165454.238:7074): avc: denied { firmware_load } for pid=4774 comm="syz.3.306" path="/lib/firmware/regulatory.db" dev="sda1" ino=448 scontext=system_u:system_r:kernel_t tcontext=system_u:object_r:lib_t tclass=system permissive=1 [ 70.546613][ T29] audit: type=1400 audit(1765165454.278:7075): avc: denied { mounton } for pid=4774 comm="syz.3.306" path="/68/file0" dev="tmpfs" ino=401 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 70.569075][ T29] audit: type=1400 audit(1765165454.308:7076): avc: denied { read write } for pid=4786 comm="syz.4.310" name="uhid" dev="devtmpfs" ino=252 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 70.592477][ T29] audit: type=1400 audit(1765165454.308:7077): avc: denied { open } for pid=4786 comm="syz.4.310" path="/dev/uhid" dev="devtmpfs" ino=252 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 70.615720][ T29] audit: type=1400 audit(1765165454.328:7078): avc: denied { create } for pid=4779 comm="syz.1.308" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 70.635026][ T29] audit: type=1400 audit(1765165454.328:7079): avc: denied { setopt } for pid=4786 comm="syz.4.310" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 70.708498][ T4791] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 70.779330][ T4798] netlink: 4 bytes leftover after parsing attributes in process `syz.2.313'. [ 70.788164][ T4798] netlink: 4 bytes leftover after parsing attributes in process `syz.2.313'. [ 70.826440][ T4791] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 70.857699][ T4798] netlink: 4 bytes leftover after parsing attributes in process `syz.2.313'. [ 70.897489][ T4798] netlink: 4 bytes leftover after parsing attributes in process `syz.2.313'. [ 70.906398][ T4798] netlink: 4 bytes leftover after parsing attributes in process `syz.2.313'. [ 70.927078][ T4791] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 71.008440][ T4804] loop2: detected capacity change from 0 to 2048 [ 71.029159][ T4802] loop1: detected capacity change from 0 to 8192 [ 71.036062][ T1074] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.046385][ T4798] netlink: 4 bytes leftover after parsing attributes in process `syz.2.313'. [ 71.066658][ T1074] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.079913][ T4802] ./file0: Can't lookup blockdev [ 71.119017][ T1074] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.168717][ T1074] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.190022][ T4798] netlink: 4 bytes leftover after parsing attributes in process `syz.2.313'. [ 71.207674][ T4808] loop0: detected capacity change from 0 to 1024 [ 71.217639][ T4804] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 71.236757][ T4808] EXT4-fs: Ignoring removed orlov option [ 71.260689][ T4808] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 71.310791][ T3323] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 71.449977][ T4814] xt_CT: You must specify a L4 protocol and not use inversions on it [ 71.577584][ T4820] loop1: detected capacity change from 0 to 128 [ 71.681218][ T3317] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 71.872224][ T4818] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 71.882641][ T4818] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 71.962703][ T4828] bridge0: entered promiscuous mode [ 71.970117][ T4828] bridge0: port 1(macsec1) entered blocking state [ 71.976626][ T4828] bridge0: port 1(macsec1) entered disabled state [ 71.989064][ T4828] macsec1: entered allmulticast mode [ 71.994443][ T4828] bridge0: entered allmulticast mode [ 72.009774][ T4828] macsec1: left allmulticast mode [ 72.014906][ T4828] bridge0: left allmulticast mode [ 72.026821][ T4823] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 72.036224][ T4823] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 72.044058][ T4828] bridge0: left promiscuous mode [ 72.239353][ T4837] loop4: detected capacity change from 0 to 128 [ 72.250082][ T4837] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 72.277611][ T4837] ext4 filesystem being mounted at /59/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 72.368863][ T3322] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 72.484969][ T4841] lo speed is unknown, defaulting to 1000 [ 72.491485][ T4841] wg1 speed is unknown, defaulting to 1000 [ 72.530043][ T4845] program syz.4.322 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 72.816613][ T4854] loop3: detected capacity change from 0 to 1024 [ 72.818292][ T4851] bridge0: entered promiscuous mode [ 72.823805][ T4854] EXT4-fs: Ignoring removed orlov option [ 72.838087][ T4854] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 72.851282][ T4854] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 72.851324][ T4853] loop2: detected capacity change from 0 to 1024 [ 72.877481][ T4851] macvtap1: entered allmulticast mode [ 72.882934][ T4851] bridge0: entered allmulticast mode [ 72.896048][ T4851] bridge0: left allmulticast mode [ 72.901170][ T4851] bridge0: left promiscuous mode [ 72.913726][ T4853] EXT4-fs (loop2): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 72.949222][ T4853] ext4 filesystem being mounted at /69/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 73.014088][ T4864] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 73.062650][ T4866] loop1: detected capacity change from 0 to 8192 [ 73.069676][ T4868] bridge: RTM_NEWNEIGH with invalid ether address [ 73.106773][ T4853] netlink: 'gtp': attribute type 4 has an invalid length. [ 73.107602][ T4864] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 73.152048][ T4859] ./file0: Can't lookup blockdev [ 73.179450][ T4871] ext4: Unknown parameter 'obj_role' [ 73.204358][ T4864] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 73.231520][ T4874] EXT4-fs: Ignoring removed orlov option [ 73.263031][ T3323] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 73.274330][ T4864] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 73.290056][ T4874] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 73.472707][ T4898] xt_CT: You must specify a L4 protocol and not use inversions on it [ 73.487339][ T4897] set_capacity_and_notify: 2 callbacks suppressed [ 73.487355][ T4897] loop2: detected capacity change from 0 to 764 [ 73.505235][ T288] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.516476][ T288] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.539267][ T2266] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.564285][ T288] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.596268][ T4897] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 73.688547][ T4897] lo speed is unknown, defaulting to 1000 [ 73.714848][ T3312] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 73.725442][ T4897] wg1 speed is unknown, defaulting to 1000 [ 73.928550][ T4922] loop4: detected capacity change from 0 to 8192 [ 73.997466][ T4922] loop4: detected capacity change from 0 to 1024 [ 74.058078][ T4922] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 74.178191][ T3322] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 74.207129][ T4942] loop4: detected capacity change from 0 to 512 [ 74.219619][ T4942] EXT4-fs: Ignoring removed oldalloc option [ 74.235984][ T4942] journal_path: Lookup failure for './file0' [ 74.242110][ T4942] EXT4-fs: error: could not find journal device path [ 74.294383][ T4938] lo speed is unknown, defaulting to 1000 [ 74.303052][ T4942] sg_write: data in/out 178/204 bytes for SCSI command 0xfe-- guessing data in; [ 74.303052][ T4942] program syz.4.340 not setting count and/or reply_len properly [ 74.333699][ T4914] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 74.339547][ T4938] wg1 speed is unknown, defaulting to 1000 [ 74.351166][ T4942] loop4: detected capacity change from 0 to 512 [ 74.358086][ T4942] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 74.367348][ T4914] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 74.377772][ T4942] EXT4-fs (loop4): 1 truncate cleaned up [ 74.393884][ T4942] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 74.463110][ T4927] siw: device registration error -23 [ 74.624457][ T4953] loop3: detected capacity change from 0 to 8192 [ 74.634402][ T4952] ./file0: Can't lookup blockdev [ 74.653748][ T3322] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 74.764724][ T4955] lo speed is unknown, defaulting to 1000 [ 74.771183][ T4955] wg1 speed is unknown, defaulting to 1000 [ 75.184099][ T4961] lo speed is unknown, defaulting to 1000 [ 75.201643][ T4975] loop3: detected capacity change from 0 to 512 [ 75.214629][ T4961] wg1 speed is unknown, defaulting to 1000 [ 75.221071][ T4976] loop1: detected capacity change from 0 to 1024 [ 75.227675][ T4976] EXT4-fs: Ignoring removed orlov option [ 75.235637][ T4975] EXT4-fs (loop3): orphan cleanup on readonly fs [ 75.242823][ T4975] EXT4-fs error (device loop3): ext4_orphan_get:1417: comm syz.3.344: bad orphan inode 13 [ 75.259981][ T4976] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 75.305899][ T4972] lo speed is unknown, defaulting to 1000 [ 75.324074][ T4975] ext4_test_bit(bit=12, block=18) = 1 [ 75.329513][ T4975] is_bad_inode(inode)=0 [ 75.333650][ T4975] NEXT_ORPHAN(inode)=2130706432 [ 75.338496][ T4975] max_ino=32 [ 75.341807][ T4975] i_nlink=1 [ 75.343008][ T4972] wg1 speed is unknown, defaulting to 1000 [ 75.351599][ T4975] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 75.405867][ T4975] EXT4-fs (loop3): warning: mounting fs with errors, running e2fsck is recommended [ 75.431343][ T4975] EXT4-fs (loop3): re-mounted 00000000-0000-0000-0000-000000000000 r/w. [ 75.461843][ T29] kauditd_printk_skb: 727 callbacks suppressed [ 75.461921][ T29] audit: type=1326 audit(1765165460.128:7807): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4960 comm="syz.3.344" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0f05dff749 code=0x7ffc0000 [ 75.531883][ T29] audit: type=1326 audit(1765165460.128:7808): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4960 comm="syz.3.344" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0f05dff749 code=0x7ffc0000 [ 75.555269][ T29] audit: type=1326 audit(1765165460.198:7809): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4982 comm="syz.2.353" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fc9422a2005 code=0x7ffc0000 [ 75.634287][ T29] audit: type=1326 audit(1765165460.288:7810): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4983 comm="syz.4.346" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f1feb4e2005 code=0x7ffc0000 [ 75.657724][ T29] audit: type=1400 audit(1765165460.298:7811): avc: denied { ioctl } for pid=4960 comm="syz.3.344" path="socket:[10568]" dev="sockfs" ino=10568 ioctlcmd=0x48cb scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 75.682791][ T29] audit: type=1400 audit(1765165460.298:7812): avc: denied { bind } for pid=4960 comm="syz.3.344" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 75.702856][ T29] audit: type=1326 audit(1765165460.348:7813): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4982 comm="syz.2.353" exe="/root/syz-executor" sig=0 arch=c000003e syscall=60 compat=0 ip=0x7fc94226f749 code=0x7ffc0000 [ 75.725197][ T4981] __nla_validate_parse: 9 callbacks suppressed [ 75.725211][ T4981] netlink: 4 bytes leftover after parsing attributes in process `syz.0.347'. [ 75.726150][ T29] audit: type=1326 audit(1765165460.348:7814): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4958 comm="syz.2.353" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc94226f749 code=0x7ffc0000 [ 75.732335][ T4981] netlink: 4 bytes leftover after parsing attributes in process `syz.0.347'. [ 75.741055][ T29] audit: type=1326 audit(1765165460.348:7815): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4958 comm="syz.2.353" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc94226f749 code=0x7ffc0000 [ 75.796930][ T29] audit: type=1326 audit(1765165460.468:7816): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4983 comm="syz.4.346" exe="/root/syz-executor" sig=0 arch=c000003e syscall=60 compat=0 ip=0x7f1feb4af749 code=0x7ffc0000 [ 75.834670][ T4984] loop0: detected capacity change from 0 to 2048 [ 75.841176][ T4981] netlink: 4 bytes leftover after parsing attributes in process `syz.0.347'. [ 75.857039][ T3312] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 75.875726][ T4981] netlink: 4 bytes leftover after parsing attributes in process `syz.0.347'. [ 75.884570][ T4981] netlink: 4 bytes leftover after parsing attributes in process `syz.0.347'. [ 75.910830][ T4981] netlink: 4 bytes leftover after parsing attributes in process `syz.0.347'. [ 75.946306][ T4981] netlink: 4 bytes leftover after parsing attributes in process `syz.0.347'. [ 75.955148][ T4981] netlink: 4 bytes leftover after parsing attributes in process `syz.0.347'. [ 75.960863][ T4987] loop2: detected capacity change from 0 to 764 [ 75.970899][ T3314] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 75.981568][ T4981] netlink: 4 bytes leftover after parsing attributes in process `syz.0.347'. [ 75.992600][ T4984] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 76.005695][ T4987] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 76.015945][ T4995] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=8856c01c, mo2=0002] [ 76.034485][ T4995] EXT4-fs (loop4): orphan cleanup on readonly fs [ 76.060765][ T4991] netlink: 8 bytes leftover after parsing attributes in process `syz.1.359'. [ 76.075500][ T4995] EXT4-fs warning (device loop4): ext4_enable_quotas:7221: Failed to enable quota tracking (type=2, err=-22, ino=15). Please run e2fsck to fix. [ 76.096010][ T4995] EXT4-fs (loop4): Cannot turn on quotas: error -22 [ 76.104785][ T3317] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 76.106237][ T5001] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 76.114700][ T4987] usb usb6: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 76.128030][ T5001] ext4 filesystem being mounted at /75/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 76.169360][ T4995] EXT4-fs error (device loop4): ext4_ext_check_inode:523: inode #13: comm syz.4.350: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 0(0) [ 76.204081][ T4987] vhci_hcd vhci_hcd.2: invalid port number 96 [ 76.210208][ T4987] vhci_hcd vhci_hcd.2: default hub control req: 0300 vfffa i0060 l0 [ 76.218540][ T4995] EXT4-fs error (device loop4): ext4_orphan_get:1396: comm syz.4.350: couldn't read orphan inode 13 (err -117) [ 76.242712][ T4995] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 76.297284][ T4995] EXT4-fs (loop4): warning: mounting fs with errors, running e2fsck is recommended [ 76.307295][ T4995] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=8856c01c, mo2=0002] [ 76.320220][ T4995] EXT4-fs warning (device loop4): ext4_enable_quotas:7221: Failed to enable quota tracking (type=2, err=-22, ino=15). Please run e2fsck to fix. [ 76.397451][ T3314] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 76.463423][ T3322] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 76.516061][ T5017] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 76.621561][ T5019] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 76.636216][ T5017] lo speed is unknown, defaulting to 1000 [ 76.642529][ T5019] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 76.662003][ T5017] wg1 speed is unknown, defaulting to 1000 [ 76.881313][ T5012] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 76.890332][ T5012] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 76.955989][ T5029] tipc: Started in network mode [ 76.961002][ T5029] tipc: Node identity 7f000001, cluster identity 4711 [ 76.982052][ T5029] tipc: Enabled bearer , priority 10 [ 77.073084][ T5031] lo speed is unknown, defaulting to 1000 [ 77.099512][ T5031] wg1 speed is unknown, defaulting to 1000 [ 77.209813][ T5034] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 77.228018][ T5034] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 77.284020][ T5039] lo speed is unknown, defaulting to 1000 [ 77.290255][ T5039] wg1 speed is unknown, defaulting to 1000 [ 77.458741][ T5050] EXT4-fs: Ignoring removed orlov option [ 77.477581][ T5050] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 77.517857][ T5050] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 77.533467][ T5043] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 77.551440][ T5043] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 77.580642][ T5052] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 77.593029][ T5052] ext4 filesystem being mounted at /66/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 77.663013][ T3312] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 77.791650][ T5065] EXT4-fs: Ignoring removed i_version option [ 77.797665][ T5065] EXT4-fs: Ignoring removed bh option [ 77.830593][ T5063] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 77.831725][ T5065] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 77.880574][ T5067] hub 9-0:1.0: USB hub found [ 77.890353][ T5063] usb usb6: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 77.890828][ T5065] ext4 filesystem being mounted at /67/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 77.897841][ T5063] vhci_hcd vhci_hcd.2: invalid port number 96 [ 77.913899][ T5063] vhci_hcd vhci_hcd.2: default hub control req: 0300 vfffa i0060 l0 [ 77.914112][ T5067] hub 9-0:1.0: 8 ports detected [ 77.977440][ T5067] sch_tbf: burst 3298 is lower than device lo mtu (65550) ! [ 78.099028][ T3427] tipc: Node number set to 2130706433 [ 78.110793][ T5080] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 78.139860][ T5080] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 78.245000][ T3312] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 78.310078][ T5086] lo speed is unknown, defaulting to 1000 [ 78.321991][ T5090] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 78.359727][ T5086] wg1 speed is unknown, defaulting to 1000 [ 78.432084][ T3312] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 78.539985][ T5101] lo speed is unknown, defaulting to 1000 [ 78.546207][ T5101] wg1 speed is unknown, defaulting to 1000 [ 78.759516][ T5112] set_capacity_and_notify: 10 callbacks suppressed [ 78.759543][ T5112] loop3: detected capacity change from 0 to 1024 [ 78.775758][ T5095] siw: device registration error -23 [ 78.826490][ T5112] EXT4-fs: Ignoring removed orlov option [ 78.837809][ T5112] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 78.842133][ T5099] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 78.858726][ T5099] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 78.994722][ T5119] xt_CT: You must specify a L4 protocol and not use inversions on it [ 79.027131][ T5120] loop2: detected capacity change from 0 to 512 [ 79.070073][ T5120] ext4: Unknown parameter 'obj_role' [ 79.126794][ T3314] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 79.143988][ T5118] loop4: detected capacity change from 0 to 764 [ 79.161342][ T5118] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 79.198232][ T5130] loop3: detected capacity change from 0 to 512 [ 79.204806][ T5130] EXT4-fs: Ignoring removed i_version option [ 79.211020][ T5130] EXT4-fs: Ignoring removed bh option [ 79.230750][ T5130] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 79.243552][ T5130] ext4 filesystem being mounted at /81/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 79.277756][ T5132] loop0: detected capacity change from 0 to 764 [ 79.295483][ T5118] usb usb6: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 79.331203][ T5118] vhci_hcd vhci_hcd.2: invalid port number 96 [ 79.337380][ T5118] vhci_hcd vhci_hcd.2: default hub control req: 0300 vfffa i0060 l0 [ 79.374329][ T5137] loop2: detected capacity change from 0 to 1024 [ 79.402602][ T5132] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 79.432225][ T5137] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 79.470887][ T5128] lo speed is unknown, defaulting to 1000 [ 79.487292][ T5128] wg1 speed is unknown, defaulting to 1000 [ 79.508862][ T5137] team0: Port device team_slave_1 removed [ 79.571367][ T3323] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 79.730421][ T3314] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 79.947957][ T5160] loop2: detected capacity change from 0 to 2048 [ 79.987464][ T5159] loop3: detected capacity change from 0 to 512 [ 80.017247][ T5160] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 80.032998][ T5160] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1306: group 0, block bitmap and bg descriptor inconsistent: 25 vs 281 free clusters [ 80.183647][ T5159] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 80.326464][ T5159] ext4 filesystem being mounted at /82/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 80.421916][ T5174] lo speed is unknown, defaulting to 1000 [ 80.430993][ T5175] loop4: detected capacity change from 0 to 1024 [ 80.437785][ T5174] wg1 speed is unknown, defaulting to 1000 [ 80.444375][ T5175] EXT4-fs: Ignoring removed orlov option [ 80.518142][ T29] kauditd_printk_skb: 1181 callbacks suppressed [ 80.518162][ T29] audit: type=1326 audit(1765165466.181:8998): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5171 comm="syz.1.394" exe="/root/syz-executor" sig=0 arch=c000003e syscall=60 compat=0 ip=0x7f489febf749 code=0x7ffc0000 [ 80.552100][ T5175] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 80.561259][ T29] audit: type=1326 audit(1765165466.211:8999): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5170 comm="syz.1.394" exe="/root/syz-executor" sig=0 arch=c000003e syscall=60 compat=0 ip=0x7f489febf749 code=0x7ffc0000 [ 80.588561][ T3323] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 80.588719][ T29] audit: type=1326 audit(1765165466.231:9000): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5172 comm="syz.4.396" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f1feb4adf90 code=0x7ffc0000 [ 80.621033][ T29] audit: type=1326 audit(1765165466.231:9001): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5172 comm="syz.4.396" exe="/root/syz-executor" sig=0 arch=c000003e syscall=80 compat=0 ip=0x7f1feb4ae497 code=0x7ffc0000 [ 80.644257][ T29] audit: type=1326 audit(1765165466.231:9002): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5172 comm="syz.4.396" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f1feb4adf90 code=0x7ffc0000 [ 80.667544][ T29] audit: type=1326 audit(1765165466.231:9003): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5172 comm="syz.4.396" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1feb4af749 code=0x7ffc0000 [ 80.690981][ T29] audit: type=1326 audit(1765165466.231:9004): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5172 comm="syz.4.396" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1feb4af749 code=0x7ffc0000 [ 80.714525][ T29] audit: type=1326 audit(1765165466.261:9005): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5172 comm="syz.4.396" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f1feb4af749 code=0x7ffc0000 [ 80.737864][ T29] audit: type=1326 audit(1765165466.291:9006): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5172 comm="syz.4.396" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1feb4af749 code=0x7ffc0000 [ 80.761367][ T29] audit: type=1326 audit(1765165466.291:9007): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5172 comm="syz.4.396" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1feb4af749 code=0x7ffc0000 [ 80.806547][ T5182] xt_CT: You must specify a L4 protocol and not use inversions on it [ 80.833392][ T5184] loop1: detected capacity change from 0 to 128 [ 80.855667][ T5156] siw: device registration error -23 [ 80.880449][ T3314] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 81.025978][ T5189] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 81.049138][ T3322] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 81.104538][ T5197] EXT4-fs: Ignoring removed orlov option [ 81.120672][ T5199] __nla_validate_parse: 12 callbacks suppressed [ 81.120687][ T5199] netlink: 4 bytes leftover after parsing attributes in process `syz.1.400'. [ 81.157342][ T5197] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 81.250775][ T3312] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 81.291148][ T5204] xt_CT: You must specify a L4 protocol and not use inversions on it [ 81.330239][ T5186] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 81.355759][ T5208] netlink: 32 bytes leftover after parsing attributes in process `syz.1.403'. [ 81.370628][ T5186] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 81.379668][ T5208] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 81.403159][ T5192] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 81.408793][ T5209] lo speed is unknown, defaulting to 1000 [ 81.412471][ T5192] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 81.425326][ T5209] wg1 speed is unknown, defaulting to 1000 [ 81.431981][ T5208] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 81.482433][ T5208] lo speed is unknown, defaulting to 1000 [ 81.498128][ T3322] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 81.543461][ T5208] wg1 speed is unknown, defaulting to 1000 [ 81.555462][ T5214] netlink: 8 bytes leftover after parsing attributes in process `syz.4.405'. [ 81.790130][ T5232] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 81.807327][ T5232] Symlink component flag not implemented [ 81.823894][ T5232] Symlink component flag not implemented (7) [ 81.832490][ T5233] tipc: Started in network mode [ 81.837405][ T5233] tipc: Node identity 7f000001, cluster identity 4711 [ 81.852779][ T5233] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 81.859791][ T5233] tipc: Enabled bearer , priority 10 [ 81.930632][ T5241] EXT4-fs: Ignoring removed orlov option [ 81.941102][ T5241] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 81.994240][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 82.070405][ T5246] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 82.084547][ T5249] xt_CT: You must specify a L4 protocol and not use inversions on it [ 82.113432][ T5246] netlink: 4 bytes leftover after parsing attributes in process `syz.2.413'. [ 82.143875][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 82.189824][ T5253] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 82.221312][ T5260] EXT4-fs: Ignoring removed orlov option [ 82.241699][ T5253] usb usb6: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 82.252389][ T5253] vhci_hcd vhci_hcd.2: invalid port number 96 [ 82.258548][ T5253] vhci_hcd vhci_hcd.2: default hub control req: 0300 vfffa i0060 l0 [ 82.293509][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 82.443162][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 82.482812][ T5271] netlink: 32 bytes leftover after parsing attributes in process `syz.3.418'. [ 82.590494][ T5274] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 82.598626][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 82.663160][ T5274] lo speed is unknown, defaulting to 1000 [ 82.686094][ T5274] wg1 speed is unknown, defaulting to 1000 [ 82.742459][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 82.816727][ T5278] lo speed is unknown, defaulting to 1000 [ 82.857582][ T5278] wg1 speed is unknown, defaulting to 1000 [ 82.892086][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 82.983645][ T5283] netlink: 40 bytes leftover after parsing attributes in process `syz.3.422'. [ 83.072814][ T4166] tipc: Node number set to 2130706433 [ 83.191418][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 83.201684][ T5284] netlink: 4 bytes leftover after parsing attributes in process `syz.4.420'. [ 83.429571][ T5300] netlink: 4 bytes leftover after parsing attributes in process `syz.2.424'. [ 83.455977][ T5291] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 83.456188][ T5291] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 83.640610][ T5306] netlink: 'syz.4.427': attribute type 3 has an invalid length. [ 83.659395][ T5306] netlink: 'syz.4.427': attribute type 3 has an invalid length. [ 83.712701][ T5302] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 83.722372][ T5302] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 83.738548][ T5273] netlink: 4 bytes leftover after parsing attributes in process `syz.0.419'. [ 83.772507][ T5273] team0 (unregistering): Port device team_slave_0 removed [ 83.782008][ T5273] team0 (unregistering): Port device team_slave_1 removed [ 83.812144][ T5315] pim6reg: entered allmulticast mode [ 83.822690][ T5314] SELinux: Context È is not valid (left unmapped). [ 83.900216][ T5319] netlink: 4 bytes leftover after parsing attributes in process `syz.2.430'. [ 83.990394][ T5324] netlink: 'syz.2.430': attribute type 10 has an invalid length. [ 84.073165][ T5323] lo speed is unknown, defaulting to 1000 [ 84.090340][ T5323] wg1 speed is unknown, defaulting to 1000 [ 84.350900][ T5328] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 84.372750][ T5332] netlink: 'syz.1.434': attribute type 30 has an invalid length. [ 84.381003][ T5328] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 84.412134][ T42] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 84.420407][ T42] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 84.442553][ T5332] geneve2: entered promiscuous mode [ 84.447787][ T5332] geneve2: entered allmulticast mode [ 84.461548][ T42] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 84.462557][ T5333] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=5333 comm=syz.1.434 [ 84.470568][ T42] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 84.553931][ T5337] set_capacity_and_notify: 12 callbacks suppressed [ 84.553947][ T5337] loop4: detected capacity change from 0 to 512 [ 84.557260][ T5335] loop2: detected capacity change from 0 to 1024 [ 84.567631][ T5337] EXT4-fs: Ignoring removed nomblk_io_submit option [ 84.579192][ T5339] loop1: detected capacity change from 0 to 1024 [ 84.587599][ T5335] EXT4-fs: Ignoring removed orlov option [ 84.593745][ T5337] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 84.604527][ T5273] pim6reg: left allmulticast mode [ 84.613532][ T5337] EXT4-fs (loop4): 1 truncate cleaned up [ 84.977197][ T5359] loop1: detected capacity change from 0 to 2048 [ 85.019550][ T5360] loop0: detected capacity change from 0 to 1024 [ 85.029722][ T5360] EXT4-fs: Ignoring removed orlov option [ 85.092096][ T5359] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1306: group 0, block bitmap and bg descriptor inconsistent: 25 vs 281 free clusters [ 85.379865][ T5365] loop4: detected capacity change from 0 to 1024 [ 85.390846][ T5365] EXT4-fs: Ignoring removed mblk_io_submit option [ 85.436182][ T5365] EXT4-fs: Invalid want_extra_isize 0 [ 85.478429][ T5367] loop3: detected capacity change from 0 to 8192 [ 85.513331][ T5367] loop3: detected capacity change from 0 to 1024 [ 85.630018][ T5377] lo speed is unknown, defaulting to 1000 [ 85.636086][ T5377] wg1 speed is unknown, defaulting to 1000 [ 85.884869][ T29] kauditd_printk_skb: 1101 callbacks suppressed [ 85.884882][ T29] audit: type=1400 audit(85.536:10109): avc: denied { write } for pid=5372 comm="syz.2.442" name="rtc0" dev="devtmpfs" ino=244 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 85.913616][ T29] audit: type=1400 audit(85.536:10110): avc: denied { open } for pid=5372 comm="syz.2.442" path="/dev/rtc0" dev="devtmpfs" ino=244 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 85.936319][ T29] audit: type=1400 audit(85.536:10111): avc: denied { ioctl } for pid=5372 comm="syz.2.442" path="/dev/rtc0" dev="devtmpfs" ino=244 ioctlcmd=0x7008 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 85.960533][ T29] audit: type=1400 audit(85.536:10112): avc: denied { connect } for pid=5372 comm="syz.2.442" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 85.979585][ T29] audit: type=1400 audit(85.536:10113): avc: denied { ioctl } for pid=5372 comm="syz.2.442" path="socket:[11837]" dev="sockfs" ino=11837 ioctlcmd=0x89ed scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 86.003950][ T29] audit: type=1326 audit(85.536:10114): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5372 comm="syz.2.442" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc94226f749 code=0x7ffc0000 [ 86.063422][ T29] audit: type=1326 audit(85.685:10115): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5372 comm="syz.2.442" exe="/root/syz-executor" sig=0 arch=c000003e syscall=438 compat=0 ip=0x7fc94226f749 code=0x7ffc0000 [ 86.086188][ T29] audit: type=1326 audit(85.685:10116): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5372 comm="syz.2.442" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc94226f749 code=0x7ffc0000 [ 86.109333][ T29] audit: type=1326 audit(85.685:10117): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5372 comm="syz.2.442" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc94226f749 code=0x7ffc0000 [ 86.136398][ T29] audit: type=1326 audit(85.760:10118): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5385 comm="syz.1.444" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f489febf749 code=0x7ffc0000 [ 86.237486][ T5397] loop4: detected capacity change from 0 to 1024 [ 86.253140][ T5397] EXT4-fs: Ignoring removed nomblk_io_submit option [ 86.274031][ T5386] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 86.315082][ T5386] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 86.336127][ T5404] loop1: detected capacity change from 0 to 1024 [ 86.358597][ T5396] lo speed is unknown, defaulting to 1000 [ 86.391582][ T5396] wg1 speed is unknown, defaulting to 1000 [ 86.498468][ T5410] __nla_validate_parse: 5 callbacks suppressed [ 86.498482][ T5410] netlink: 56 bytes leftover after parsing attributes in process `syz.4.446'. [ 86.525836][ T5404] netlink: 4 bytes leftover after parsing attributes in process `syz.1.449'. [ 86.545521][ T5410] netlink: 28 bytes leftover after parsing attributes in process `syz.4.446'. [ 86.609818][ T5414] EXT4-fs: Ignoring removed oldalloc option [ 86.621964][ T5411] veth0: entered promiscuous mode [ 86.628124][ T5414] journal_path: Lookup failure for './file0' [ 86.634325][ T5414] EXT4-fs: error: could not find journal device path [ 86.645707][ T5414] sg_write: data in/out 178/204 bytes for SCSI command 0xfe-- guessing data in; [ 86.645707][ T5414] program syz.1.451 not setting count and/or reply_len properly [ 86.662754][ T5411] netlink: 4 bytes leftover after parsing attributes in process `syz.0.450'. [ 86.699841][ T5414] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 86.710166][ T5415] FAT-fs (loop0): error, invalid access to FAT (entry 0x0fff0000) [ 86.717999][ T5415] FAT-fs (loop0): Filesystem has been set read-only [ 86.726823][ T5414] EXT4-fs (loop1): 1 truncate cleaned up [ 87.145844][ T5422] lo speed is unknown, defaulting to 1000 [ 87.164645][ T5419] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 87.185818][ T5422] wg1 speed is unknown, defaulting to 1000 [ 87.201221][ T5419] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 87.278338][ T5393] syz.4.446 (5393) used greatest stack depth: 6216 bytes left [ 87.321563][ T5411] bio_check_eod: 1627 callbacks suppressed [ 87.321577][ T5411] syz.0.450: attempt to access beyond end of device [ 87.321577][ T5411] loop0: rw=2049, sector=128, nr_sectors = 1 limit=128 [ 87.340760][ T5411] buffer_io_error: 46 callbacks suppressed [ 87.340772][ T5411] Buffer I/O error on dev loop0, logical block 128, lost async page write [ 87.341408][ T5429] EXT4-fs: Ignoring removed orlov option [ 87.368495][ T5415] ÿ: attempt to access beyond end of device [ 87.368495][ T5415] loop0: rw=2049, sector=128, nr_sectors = 1 limit=128 [ 87.381190][ T5415] Buffer I/O error on dev loop0, logical block 128, lost async page write [ 87.414030][ C1] net_ratelimit: 4 callbacks suppressed [ 87.414045][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 87.449998][ T5433] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 87.489484][ T5411] syz.0.450: attempt to access beyond end of device [ 87.489484][ T5411] loop0: rw=2049, sector=128, nr_sectors = 1 limit=128 [ 87.502848][ T5411] Buffer I/O error on dev loop0, logical block 128, lost async page write [ 87.638882][ T5435] netlink: 'syz.1.457': attribute type 3 has an invalid length. [ 87.646566][ T5435] netlink: 'syz.1.457': attribute type 3 has an invalid length. [ 87.763253][ T5437] EXT4-fs (loop0): feature flags set on rev 0 fs, running e2fsck is recommended [ 87.790872][ T5440] EXT4-fs error (device loop1): ext4_xattr_block_get:597: inode #12: comm syz.1.458: corrupted xattr block 6: invalid header [ 87.807936][ T5440] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop1 ino=12 [ 87.819666][ T5440] EXT4-fs error (device loop1): ext4_xattr_block_get:597: inode #12: comm syz.1.458: corrupted xattr block 6: invalid header [ 87.846372][ T5440] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop1 ino=12 [ 87.859650][ T5440] EXT4-fs error (device loop1): ext4_xattr_block_get:597: inode #12: comm syz.1.458: corrupted xattr block 6: invalid header [ 87.874202][ T5440] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop1 ino=12 [ 87.883757][ T5440] EXT4-fs error (device loop1): ext4_xattr_block_get:597: inode #12: comm syz.1.458: corrupted xattr block 6: invalid header [ 87.889208][ T5447] lo speed is unknown, defaulting to 1000 [ 87.897650][ T5440] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop1 ino=12 [ 87.904085][ T5447] wg1 speed is unknown, defaulting to 1000 [ 87.912416][ T5440] EXT4-fs error (device loop1): ext4_xattr_block_get:597: inode #12: comm syz.1.458: corrupted xattr block 6: invalid header [ 87.931494][ T5440] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop1 ino=12 [ 87.941860][ T5440] EXT4-fs error (device loop1): ext4_xattr_block_get:597: inode #12: comm syz.1.458: corrupted xattr block 6: invalid header [ 87.994036][ T5451] xt_CT: You must specify a L4 protocol and not use inversions on it [ 88.036469][ T5451] wireguard0: entered promiscuous mode [ 88.041968][ T5451] wireguard0: entered allmulticast mode [ 88.086475][ T5456] Buffer I/O error on dev loop9, logical block 0, async page read [ 88.119033][ T5456] Buffer I/O error on dev loop9, logical block 0, async page read [ 88.126918][ T5456] loop9: unable to read partition table [ 88.138100][ T5455] netlink: 4 bytes leftover after parsing attributes in process `syz.3.461'. [ 88.145063][ T5456] loop_reread_partitions: partition scan of loop9 (þ被xüŸÑø éÚ¬§½dG¤´à–ƒÝ¡¯ â·û [ 88.145063][ T5456] ) failed (rc=-5) [ 88.152020][ T3525] Buffer I/O error on dev loop9, logical block 0, async page read [ 88.172674][ T5455] team0: Port device team_slave_1 removed [ 88.187764][ T3525] Buffer I/O error on dev loop9, logical block 0, async page read [ 88.197657][ T3525] Buffer I/O error on dev loop9, logical block 0, async page read [ 88.206053][ T3525] Buffer I/O error on dev loop9, logical block 0, async page read [ 88.219087][ T3525] Buffer I/O error on dev loop9, logical block 0, async page read [ 88.265317][ T5462] lo speed is unknown, defaulting to 1000 [ 88.303524][ T5473] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended [ 88.313522][ T3427] IPVS: starting estimator thread 0... [ 88.338727][ T5473] EXT4-fs warning (device loop3): ext4_update_dynamic_rev:1137: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 88.355780][ T5462] wg1 speed is unknown, defaulting to 1000 [ 88.394994][ T5473] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.466: bg 0: block 248: padding at end of block bitmap is not set [ 88.409232][ T5474] IPVS: using max 2640 ests per chain, 132000 per kthread [ 88.417478][ T5473] EXT4-fs error (device loop3): ext4_acquire_dquot:6986: comm syz.3.466: Failed to acquire dquot type 1 [ 88.429907][ T5473] EXT4-fs (loop3): 1 truncate cleaned up [ 88.448513][ T5473] netlink: 4 bytes leftover after parsing attributes in process `syz.3.466'. [ 88.491460][ T5484] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 88.503107][ T5481] lo speed is unknown, defaulting to 1000 [ 88.511821][ T5481] wg1 speed is unknown, defaulting to 1000 [ 88.523720][ T5484] EXT4-fs (loop1): orphan cleanup on readonly fs [ 88.530246][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 88.548018][ T5484] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.468: bg 0: block 248: padding at end of block bitmap is not set [ 88.577241][ T5484] EXT4-fs error (device loop1): ext4_acquire_dquot:6986: comm syz.1.468: Failed to acquire dquot type 1 [ 88.601074][ T5484] EXT4-fs (loop1): 1 truncate cleaned up [ 88.616368][ T5484] EXT4-fs error (device loop1): ext4_lookup:1789: inode #2: comm gtp: deleted inode referenced: 12 [ 88.721793][ T5486] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 88.731672][ T5486] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 88.768463][ T5493] netlink: 'syz.0.470': attribute type 3 has an invalid length. [ 88.776795][ T5493] netlink: 'syz.0.470': attribute type 3 has an invalid length. [ 88.845776][ T5495] EXT4-fs error (device loop1): ext4_lookup:1785: inode #15: comm syz.1.468: iget: bad i_size value: 360287970189639690 [ 88.862843][ T5491] EXT4-fs (loop1): shut down requested (0) [ 88.884605][ T5497] tipc: Enabling of bearer rejected, already enabled [ 88.913398][ T5499] EXT4-fs: Ignoring removed orlov option [ 89.332537][ T5507] lo speed is unknown, defaulting to 1000 [ 89.338866][ T5507] wg1 speed is unknown, defaulting to 1000 [ 89.617362][ T5516] loop1: p1 < > p2 < > p3 p4 < > [ 89.622430][ T5516] loop1: partition table partially beyond EOD, truncated [ 89.637682][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 89.641280][ T5516] loop1: p1 start 67108864 is beyond EOD, truncated [ 89.651326][ T5516] loop1: p2 start 4278190080 is beyond EOD, truncated [ 89.658084][ T5516] loop1: p3 start 100859904 is beyond EOD, truncated [ 89.758666][ T5518] netlink: 4 bytes leftover after parsing attributes in process `syz.3.476'. [ 89.800625][ T3306] udevd[3306]: inotify_add_watch(7, /dev/loop1p4, 10) failed: No such file or directory [ 89.865684][ T5529] EXT4-fs: Ignoring removed mblk_io_submit option [ 89.877434][ T5529] EXT4-fs: Invalid want_extra_isize 0 [ 89.885162][ T5533] netlink: 'syz.1.480': attribute type 13 has an invalid length. [ 89.912877][ T5529] team0 (unregistering): Port device team_slave_0 removed [ 89.935708][ T23] syz!: Port: 1 Link DOWN [ 89.961246][ T5536] rdma_rxe: rxe_newlink: failed to add bond0 [ 89.994924][ T5533] bridge0: port 2(bridge_slave_1) entered disabled state [ 90.002164][ T5533] bridge0: port 1(bridge_slave_0) entered disabled state [ 90.044051][ T5533] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 90.060490][ T5533] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 90.103688][ T3902] lo speed is unknown, defaulting to 1000 [ 90.109533][ T3902] syz2: Port: 1 Link DOWN [ 90.118832][ T42] netdevsim netdevsim1 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 90.127279][ T42] netdevsim netdevsim1 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 90.143458][ T5540] lo speed is unknown, defaulting to 1000 [ 90.149596][ T42] netdevsim netdevsim1 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 90.158095][ T42] netdevsim netdevsim1 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 90.167004][ T5534] lo speed is unknown, defaulting to 1000 [ 90.168080][ T5540] wg1 speed is unknown, defaulting to 1000 [ 90.174770][ T42] netdevsim netdevsim1 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 90.187052][ T42] netdevsim netdevsim1 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 90.195811][ T42] netdevsim netdevsim1 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 90.204382][ T42] netdevsim netdevsim1 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 90.213029][ T5534] wg1 speed is unknown, defaulting to 1000 [ 90.223407][ T5542] lo speed is unknown, defaulting to 1000 [ 90.236722][ T5542] wg1 speed is unknown, defaulting to 1000 [ 90.390707][ T5547] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 90.400754][ T5547] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 90.549133][ T5556] sch_tbf: burst 3298 is lower than device lo mtu (65550) ! [ 90.555702][ T5552] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 90.557624][ T5556] netlink: 20 bytes leftover after parsing attributes in process `syz.3.485'. [ 90.566033][ T5552] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 90.674773][ T5558] netlink: 4 bytes leftover after parsing attributes in process `syz.3.486'. [ 90.697779][ T5558] pim6reg: entered allmulticast mode [ 90.719112][ T5558] pim6reg: left allmulticast mode [ 90.760203][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 90.783599][ T5558] netlink: 164 bytes leftover after parsing attributes in process `syz.3.486'. [ 90.873342][ T5566] tipc: Enabling of bearer rejected, already enabled [ 90.875090][ T5568] set_capacity_and_notify: 16 callbacks suppressed [ 90.875105][ T5568] loop3: detected capacity change from 0 to 1024 [ 91.035084][ T5582] loop3: detected capacity change from 0 to 764 [ 91.043946][ T5582] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 91.069365][ T5582] lo speed is unknown, defaulting to 1000 [ 91.075786][ T5582] wg1 speed is unknown, defaulting to 1000 [ 91.223611][ T5587] loop1: detected capacity change from 0 to 512 [ 91.235682][ T29] kauditd_printk_skb: 1865 callbacks suppressed [ 91.235696][ T29] audit: type=1326 audit(90.549:11980): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5508 comm="syz.2.474" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fc9422665e7 code=0x7ffc0000 [ 91.240309][ T5589] lo speed is unknown, defaulting to 1000 [ 91.245368][ T29] audit: type=1326 audit(90.559:11981): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5508 comm="syz.2.474" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fc94220b829 code=0x7ffc0000 [ 91.292975][ T29] audit: type=1326 audit(90.559:11982): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5508 comm="syz.2.474" exe="/root/syz-executor" sig=0 arch=c000003e syscall=163 compat=0 ip=0x7fc94226f749 code=0x7ffc0000 [ 91.316841][ T29] audit: type=1326 audit(90.577:11983): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5508 comm="syz.2.474" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fc9422665e7 code=0x7ffc0000 [ 91.339542][ T29] audit: type=1326 audit(90.577:11984): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5508 comm="syz.2.474" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fc94220b829 code=0x7ffc0000 [ 91.362223][ T29] audit: type=1326 audit(90.577:11985): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5508 comm="syz.2.474" exe="/root/syz-executor" sig=0 arch=c000003e syscall=163 compat=0 ip=0x7fc94226f749 code=0x7ffc0000 [ 91.385013][ T29] audit: type=1326 audit(90.577:11986): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5508 comm="syz.2.474" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fc9422665e7 code=0x7ffc0000 [ 91.407750][ T29] audit: type=1326 audit(90.577:11987): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5508 comm="syz.2.474" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fc94220b829 code=0x7ffc0000 [ 91.430381][ T29] audit: type=1326 audit(90.577:11988): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5508 comm="syz.2.474" exe="/root/syz-executor" sig=0 arch=c000003e syscall=163 compat=0 ip=0x7fc94226f749 code=0x7ffc0000 [ 91.453121][ T29] audit: type=1326 audit(90.624:11989): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5508 comm="syz.2.474" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fc9422665e7 code=0x7ffc0000 [ 91.475856][ T5589] wg1 speed is unknown, defaulting to 1000 [ 91.773691][ T5597] loop0: detected capacity change from 0 to 1024 [ 91.780990][ T5597] EXT4-fs: Ignoring removed orlov option [ 91.861370][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 91.880678][ T5581] 9pnet_fd: p9_fd_create_tcp (5581): problem connecting socket to 127.0.0.1 [ 91.963895][ T5607] lo speed is unknown, defaulting to 1000 [ 91.964321][ T5610] loop4: detected capacity change from 0 to 128 [ 91.976765][ T5607] wg1 speed is unknown, defaulting to 1000 [ 91.990800][ T5610] FAT-fs (loop4): Directory bread(block 32) failed [ 91.999319][ T5610] FAT-fs (loop4): Directory bread(block 33) failed [ 92.007437][ T5610] FAT-fs (loop4): Directory bread(block 34) failed [ 92.014946][ T5610] FAT-fs (loop4): Directory bread(block 35) failed [ 92.022276][ T5610] FAT-fs (loop4): Directory bread(block 36) failed [ 92.029204][ T5610] FAT-fs (loop4): Directory bread(block 37) failed [ 92.039351][ T5610] FAT-fs (loop4): Directory bread(block 38) failed [ 92.046136][ T5610] FAT-fs (loop4): Directory bread(block 39) failed [ 92.067424][ T5610] FAT-fs (loop4): Directory bread(block 40) failed [ 92.081564][ T5610] FAT-fs (loop4): Directory bread(block 41) failed [ 92.150120][ T5615] loop1: detected capacity change from 0 to 1024 [ 92.216489][ T5615] __nla_validate_parse: 3 callbacks suppressed [ 92.216504][ T5615] netlink: 4 bytes leftover after parsing attributes in process `syz.1.502'. [ 92.432241][ T5618] netlink: 56 bytes leftover after parsing attributes in process `syz.4.500'. [ 92.502072][ T5623] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 92.512267][ T5623] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 92.601287][ T5627] loop3: detected capacity change from 0 to 512 [ 92.611223][ T5627] EXT4-fs: Ignoring removed nomblk_io_submit option [ 92.619627][ T5627] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 92.630975][ T5627] EXT4-fs (loop3): 1 truncate cleaned up [ 92.690530][ T5632] lo speed is unknown, defaulting to 1000 [ 92.711006][ T5632] lo speed is unknown, defaulting to 1000 [ 92.719646][ T5632] lo speed is unknown, defaulting to 1000 [ 92.761450][ T5632] infiniband sz1: set active [ 92.766187][ T5632] infiniband sz1: added lo [ 92.770753][ T3636] lo speed is unknown, defaulting to 1000 [ 92.789141][ T5632] RDS/IB: sz1: added [ 92.793222][ T5632] smc: adding ib device sz1 with port count 1 [ 92.799393][ T5632] smc: ib device sz1 port 1 has no pnetid [ 92.805621][ T3368] lo speed is unknown, defaulting to 1000 [ 92.811396][ T5629] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 92.812064][ T5632] lo speed is unknown, defaulting to 1000 [ 92.820755][ T5629] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 92.885959][ T5637] lo speed is unknown, defaulting to 1000 [ 92.892459][ T5637] wg1 speed is unknown, defaulting to 1000 [ 92.919123][ T5632] lo speed is unknown, defaulting to 1000 [ 92.945938][ T5641] netlink: 4 bytes leftover after parsing attributes in process `syz.4.508'. [ 92.983825][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 93.007324][ T5632] lo speed is unknown, defaulting to 1000 [ 93.042652][ T5637] lo speed is unknown, defaulting to 1000 [ 93.092968][ T5655] netlink: 48 bytes leftover after parsing attributes in process `syz.1.512'. [ 93.142431][ T5632] lo speed is unknown, defaulting to 1000 [ 93.186731][ T5660] netlink: 'syz.1.513': attribute type 10 has an invalid length. [ 93.194513][ T5660] netlink: 156 bytes leftover after parsing attributes in process `syz.1.513'. [ 93.199366][ T5632] lo speed is unknown, defaulting to 1000 [ 93.323177][ T5670] loop1: detected capacity change from 0 to 512 [ 93.334092][ T5670] EXT4-fs: Ignoring removed nomblk_io_submit option [ 93.349585][ T5670] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 93.364752][ T5670] EXT4-fs (loop1): 1 truncate cleaned up [ 93.381993][ T5665] lo speed is unknown, defaulting to 1000 [ 93.388123][ T5665] wg1 speed is unknown, defaulting to 1000 [ 93.467400][ T5686] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=57 sclass=netlink_route_socket pid=5686 comm=syz.2.519 [ 93.482979][ T5683] loop0: detected capacity change from 0 to 1024 [ 93.505629][ T5686] netlink: 88 bytes leftover after parsing attributes in process `syz.2.519'. [ 93.515749][ T5686] netlink: 4 bytes leftover after parsing attributes in process `syz.2.519'. [ 93.523144][ T5683] EXT4-fs: Ignoring removed orlov option [ 93.534154][ T5688] netlink: 'syz.1.520': attribute type 1 has an invalid length. [ 93.541949][ T5688] netlink: 224 bytes leftover after parsing attributes in process `syz.1.520'. [ 93.551077][ T5665] lo speed is unknown, defaulting to 1000 [ 93.586122][ T5690] loop2: detected capacity change from 0 to 512 [ 93.596498][ T5690] EXT4-fs error (device loop2): __ext4_fill_super:5553: inode #2: comm syz.2.519: casefold flag without casefold feature [ 93.637933][ T5690] EXT4-fs (loop2): get root inode failed [ 93.643699][ T5690] EXT4-fs (loop2): mount failed [ 93.721377][ T5703] netlink: 8 bytes leftover after parsing attributes in process `syz.2.524'. [ 93.730192][ T5703] netlink: 'syz.2.524': attribute type 30 has an invalid length. [ 93.752084][ T31] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 93.780271][ T288] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 93.799491][ T5703] geneve2: entered promiscuous mode [ 93.804739][ T5703] geneve2: entered allmulticast mode [ 93.820172][ T288] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 93.832947][ T5705] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=5705 comm=syz.2.524 [ 93.857685][ T288] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 93.889034][ T5707] netlink: 'syz.1.525': attribute type 13 has an invalid length. [ 94.003569][ T5715] EXT4-fs error (device loop2): ext4_orphan_get:1417: comm syz.2.526: bad orphan inode 11862016 [ 94.023297][ T5715] EXT4-fs (loop2): shut down requested (2) [ 94.040585][ T5715] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop2 ino=12 [ 94.052863][ T5715] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop2 ino=12 [ 94.095724][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 94.098458][ T5697] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 94.191069][ T5713] ./file0: Can't lookup blockdev [ 94.218186][ T5697] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 94.313432][ T5722] EXT4-fs: Ignoring removed nomblk_io_submit option [ 94.329972][ T5722] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 94.345741][ T5719] lo speed is unknown, defaulting to 1000 [ 94.352470][ T5722] EXT4-fs (loop1): 1 truncate cleaned up [ 94.366465][ T5719] wg1 speed is unknown, defaulting to 1000 [ 94.433424][ T5719] lo speed is unknown, defaulting to 1000 [ 94.526661][ T5731] netlink: 32 bytes leftover after parsing attributes in process `syz.0.532'. [ 94.589295][ T5725] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 94.623135][ T5734] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 94.624033][ T5725] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 94.650606][ T5734] lo speed is unknown, defaulting to 1000 [ 94.656949][ T5734] wg1 speed is unknown, defaulting to 1000 [ 94.687266][ T5734] lo speed is unknown, defaulting to 1000 [ 94.766105][ T5736] IPv6: NLM_F_CREATE should be specified when creating new route [ 94.779899][ T5736] EXT4-fs: Ignoring removed orlov option [ 94.929786][ T5746] EXT4-fs: Ignoring removed orlov option [ 94.936431][ T5747] xt_CT: You must specify a L4 protocol and not use inversions on it [ 95.019644][ T5744] veth0: entered promiscuous mode [ 95.040155][ T42] netdevsim netdevsim4 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 95.052142][ T42] netdevsim netdevsim4 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 95.060870][ T42] netdevsim netdevsim4 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 95.071403][ T42] netdevsim netdevsim4 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 95.073820][ T5754] xt_CT: You must specify a L4 protocol and not use inversions on it [ 95.104781][ T5744] FAT-fs (loop2): error, invalid access to FAT (entry 0x0fff0000) [ 95.112713][ T5744] FAT-fs (loop2): Filesystem has been set read-only [ 95.196782][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 95.337150][ T5751] syz.2.536: attempt to access beyond end of device [ 95.337150][ T5751] loop2: rw=2049, sector=128, nr_sectors = 1 limit=128 [ 95.350592][ T5751] Buffer I/O error on dev loop2, logical block 128, lost async page write [ 95.371708][ T5744] ÿ: attempt to access beyond end of device [ 95.371708][ T5744] loop2: rw=2049, sector=128, nr_sectors = 1 limit=128 [ 95.384425][ T5744] Buffer I/O error on dev loop2, logical block 128, lost async page write [ 95.407065][ T5756] ./file0: Can't lookup blockdev [ 95.530396][ T5769] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 95.544201][ T5765] EXT4-fs: Ignoring removed nomblk_io_submit option [ 95.569555][ T5772] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 95.580853][ T5765] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 95.591593][ T5769] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 95.638619][ T5774] lo speed is unknown, defaulting to 1000 [ 95.647051][ T5774] wg1 speed is unknown, defaulting to 1000 [ 95.661808][ T5769] lo speed is unknown, defaulting to 1000 [ 95.680982][ T5765] EXT4-fs (loop0): 1 truncate cleaned up [ 95.734634][ T5774] lo speed is unknown, defaulting to 1000 [ 95.735024][ T5769] wg1 speed is unknown, defaulting to 1000 [ 95.740709][ T5772] lo speed is unknown, defaulting to 1000 [ 95.768419][ T5772] wg1 speed is unknown, defaulting to 1000 [ 95.859553][ T5769] lo speed is unknown, defaulting to 1000 [ 95.927869][ T5777] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 95.955960][ T5777] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 95.965638][ T5772] lo speed is unknown, defaulting to 1000 [ 96.115054][ T5784] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 96.125257][ T5784] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 96.201356][ T5795] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 96.290293][ T5793] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 96.299017][ T5793] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 96.319281][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 96.334409][ T5799] set_capacity_and_notify: 12 callbacks suppressed [ 96.334425][ T5799] loop3: detected capacity change from 0 to 8192 [ 96.356126][ T5797] ./file0: Can't lookup blockdev [ 96.403821][ T5801] loop3: detected capacity change from 0 to 1024 [ 96.413256][ T5801] EXT4-fs: Ignoring removed orlov option [ 96.552051][ T5804] xt_CT: You must specify a L4 protocol and not use inversions on it [ 96.562753][ T5806] loop4: detected capacity change from 0 to 128 [ 96.574356][ T5806] veth0: entered promiscuous mode [ 96.580518][ T5806] veth0 (unregistering): left promiscuous mode [ 96.588710][ T29] kauditd_printk_skb: 1375 callbacks suppressed [ 96.588722][ T29] audit: type=1326 audit(95.554:13365): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5800 comm="syz.3.552" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0f05dff749 code=0x7ffc0000 [ 96.617881][ T29] audit: type=1326 audit(95.554:13366): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5800 comm="syz.3.552" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0f05dff749 code=0x7ffc0000 [ 96.643647][ T5807] FAT-fs (loop4): error, invalid access to FAT (entry 0x0fff0000) [ 96.652072][ T5807] FAT-fs (loop4): Filesystem has been set read-only [ 96.665731][ T29] audit: type=1326 audit(95.629:13367): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5808 comm="syz.3.554" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0f05dff749 code=0x7ffc0000 [ 96.688772][ T29] audit: type=1326 audit(95.647:13368): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5808 comm="syz.3.554" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0f05dff749 code=0x7ffc0000 [ 96.711961][ T29] audit: type=1326 audit(95.647:13369): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5808 comm="syz.3.554" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f0f05dff749 code=0x7ffc0000 [ 96.734678][ T29] audit: type=1326 audit(95.647:13370): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5808 comm="syz.3.554" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0f05dff749 code=0x7ffc0000 [ 96.757590][ T29] audit: type=1326 audit(95.647:13371): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5808 comm="syz.3.554" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7f0f05dff749 code=0x7ffc0000 [ 96.780303][ T29] audit: type=1326 audit(95.647:13372): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5808 comm="syz.3.554" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0f05dff749 code=0x7ffc0000 [ 96.803063][ T29] audit: type=1326 audit(95.647:13373): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5808 comm="syz.3.554" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0f05dff749 code=0x7ffc0000 [ 96.825811][ T29] audit: type=1326 audit(95.647:13374): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5808 comm="syz.3.554" exe="/root/syz-executor" sig=0 arch=c000003e syscall=56 compat=0 ip=0x7f0f05dff749 code=0x7ffc0000 [ 96.831874][ T5814] loop0: detected capacity change from 0 to 1024 [ 96.939028][ T5816] loop3: detected capacity change from 0 to 512 [ 96.954300][ T5821] loop2: detected capacity change from 0 to 764 [ 96.966646][ T5821] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 97.008435][ T5816] EXT4-fs: Ignoring removed nomblk_io_submit option [ 97.015694][ T5816] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 97.022413][ T5821] lo speed is unknown, defaulting to 1000 [ 97.032931][ T5816] EXT4-fs (loop3): 1 truncate cleaned up [ 97.044280][ T5816] EXT4-fs mount: 70 callbacks suppressed [ 97.044293][ T5816] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 97.065825][ T5821] wg1 speed is unknown, defaulting to 1000 [ 97.103344][ T3312] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 97.107276][ T5821] lo speed is unknown, defaulting to 1000 [ 97.116700][ T5807] ÿ: attempt to access beyond end of device [ 97.116700][ T5807] loop4: rw=2049, sector=128, nr_sectors = 1 limit=128 [ 97.130701][ T5807] Buffer I/O error on dev loop4, logical block 128, lost async page write [ 97.155681][ T5812] syz.4.553: attempt to access beyond end of device [ 97.155681][ T5812] loop4: rw=2049, sector=128, nr_sectors = 1 limit=128 [ 97.169146][ T5812] Buffer I/O error on dev loop4, logical block 128, lost async page write [ 97.178594][ T3314] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 97.234465][ T5807] ÿ: attempt to access beyond end of device [ 97.234465][ T5807] loop4: rw=2049, sector=128, nr_sectors = 1 limit=128 [ 97.247167][ T5807] Buffer I/O error on dev loop4, logical block 128, lost async page write [ 97.264271][ T3317] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 97.420490][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 97.458872][ T5830] loop2: detected capacity change from 0 to 764 [ 97.470938][ T5830] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 97.557553][ T5829] lo speed is unknown, defaulting to 1000 [ 97.566469][ T5829] wg1 speed is unknown, defaulting to 1000 [ 97.655924][ T5829] lo speed is unknown, defaulting to 1000 [ 97.939400][ T5835] lo speed is unknown, defaulting to 1000 [ 97.945606][ T5835] wg1 speed is unknown, defaulting to 1000 [ 97.973633][ T5843] loop3: detected capacity change from 0 to 764 [ 97.992688][ T5842] loop2: detected capacity change from 0 to 8192 [ 98.008680][ T5838] ./file0: Can't lookup blockdev [ 98.048128][ T5843] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 98.063311][ T5843] Symlink component flag not implemented [ 98.069030][ T5843] Symlink component flag not implemented (7) [ 98.165003][ T5848] loop1: detected capacity change from 0 to 1024 [ 98.235215][ T5848] EXT4-fs: Ignoring removed orlov option [ 98.249018][ T5835] lo speed is unknown, defaulting to 1000 [ 98.276487][ T5848] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 98.296797][ T5845] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 98.310400][ T5845] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 98.440078][ T5856] xt_CT: You must specify a L4 protocol and not use inversions on it [ 98.512266][ T3312] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 98.532361][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 98.572659][ T5863] EXT4-fs: Ignoring removed nomblk_io_submit option [ 98.579877][ T5863] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 98.592621][ T5863] EXT4-fs (loop1): 1 truncate cleaned up [ 98.598816][ T5863] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 98.825445][ T5870] lo speed is unknown, defaulting to 1000 [ 98.832067][ T5870] wg1 speed is unknown, defaulting to 1000 [ 98.883215][ T5870] lo speed is unknown, defaulting to 1000 [ 99.049939][ T3312] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 99.090841][ T5868] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 99.139624][ T5879] __nla_validate_parse: 8 callbacks suppressed [ 99.139640][ T5879] netlink: 4 bytes leftover after parsing attributes in process `syz.1.571'. [ 99.158270][ T5876] netlink: 12 bytes leftover after parsing attributes in process `syz.3.572'. [ 99.171700][ T5876] netlink: 50 bytes leftover after parsing attributes in process `syz.3.572'. [ 99.201335][ T5883] EXT4-fs: Ignoring removed mblk_io_submit option [ 99.221074][ T5883] EXT4-fs: Invalid want_extra_isize 0 [ 99.238200][ T5868] netlink: 4 bytes leftover after parsing attributes in process `syz.0.570'. [ 99.253493][ T5883] team0 (unregistering): Port device team_slave_0 removed [ 99.263235][ T5888] EXT4-fs: Ignoring removed bh option [ 99.268725][ T5888] EXT4-fs: inline encryption not supported [ 99.277356][ T5888] EXT4-fs (loop3): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 99.296532][ T5888] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c84ce018, mo2=0000] [ 99.306185][ T5888] EXT4-fs error (device loop3): ext4_map_blocks:783: inode #3: block 2: comm syz.3.575: lblock 2 mapped to illegal pblock 2 (length 1) [ 99.320438][ T5888] EXT4-fs error (device loop3): ext4_map_blocks:783: inode #3: block 48: comm syz.3.575: lblock 0 mapped to illegal pblock 48 (length 1) [ 99.335192][ T5888] EXT4-fs error (device loop3): ext4_acquire_dquot:6986: comm syz.3.575: Failed to acquire dquot type 0 [ 99.346900][ T5888] EXT4-fs error (device loop3) in ext4_reserve_inode_write:6298: Corrupt filesystem [ 99.372793][ T5888] EXT4-fs error (device loop3): ext4_evict_inode:253: inode #11: comm syz.3.575: mark_inode_dirty error [ 99.384801][ T5888] EXT4-fs warning (device loop3): ext4_evict_inode:256: couldn't mark inode dirty (err -117) [ 99.385190][ T3317] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 99.395054][ T5888] EXT4-fs (loop3): 1 orphan inode deleted [ 99.409810][ T12] EXT4-fs error (device loop3): ext4_map_blocks:783: inode #3: block 1: comm kworker/u8:0: lblock 1 mapped to illegal pblock 1 (length 1) [ 99.410343][ T5888] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 99.424409][ T12] EXT4-fs error (device loop3): ext4_release_dquot:7022: comm kworker/u8:0: Failed to release dquot type 0 [ 99.448919][ T5888] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 99.458577][ T5888] EXT4-fs error (device loop3): __ext4_get_inode_loc:4830: comm syz.3.575: Invalid inode table block 1 in block_group 0 [ 99.471585][ T5888] EXT4-fs error (device loop3) in ext4_reserve_inode_write:6298: Corrupt filesystem [ 99.494482][ T5888] EXT4-fs error (device loop3): ext4_quota_off:7270: inode #3: comm syz.3.575: mark_inode_dirty error [ 99.572940][ T5895] EXT4-fs: Ignoring removed orlov option [ 99.587835][ T5888] netlink: 8 bytes leftover after parsing attributes in process `syz.3.575'. [ 99.596690][ T5888] netlink: 48 bytes leftover after parsing attributes in process `syz.3.575'. [ 99.607264][ T5895] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 99.609250][ T5888] geneve2: entered promiscuous mode [ 99.624952][ T5888] geneve2: entered allmulticast mode [ 99.654805][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 99.686216][ T5892] ./file0: Can't lookup blockdev [ 99.746015][ T5910] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=0 sclass=netlink_xfrm_socket pid=5910 comm=syz.0.581 [ 99.790360][ T5908] xt_CT: You must specify a L4 protocol and not use inversions on it [ 99.868822][ T5910] netlink: 12 bytes leftover after parsing attributes in process `syz.0.581'. [ 99.895586][ T5907] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 99.904921][ T5907] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 99.928026][ T3322] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 100.078322][ T5918] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 100.087084][ T5918] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 100.092465][ T5879] 9pnet_fd: p9_fd_create_tcp (5879): problem connecting socket to 127.0.0.1 [ 100.755894][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 101.031498][ T5930] netlink: 4 bytes leftover after parsing attributes in process `syz.1.584'. [ 101.056838][ T5930] netlink: 4 bytes leftover after parsing attributes in process `syz.1.584'. [ 101.112305][ T5932] netlink: 'syz.1.584': attribute type 10 has an invalid length. [ 101.144355][ T5932] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 101.421709][ T5953] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 101.435927][ T5965] EXT4-fs: Ignoring removed mblk_io_submit option [ 101.448681][ T5965] EXT4-fs: Invalid want_extra_isize 0 [ 101.463835][ T5965] team0 (unregistering): Port device team_slave_0 removed [ 101.494689][ T5953] netlink: 4 bytes leftover after parsing attributes in process `syz.3.587'. [ 101.540863][ T3314] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 101.631069][ T5957] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 101.648510][ T5957] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 101.686289][ T5997] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 101.716211][ T5997] EXT4-fs (loop3): orphan cleanup on readonly fs [ 101.724406][ T5997] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.590: bg 0: block 248: padding at end of block bitmap is not set [ 101.739305][ T5997] EXT4-fs error (device loop3): ext4_acquire_dquot:6986: comm syz.3.590: Failed to acquire dquot type 1 [ 101.751455][ T6006] set_capacity_and_notify: 9 callbacks suppressed [ 101.751469][ T6006] loop0: detected capacity change from 0 to 1024 [ 101.777902][ T6006] EXT4-fs: Ignoring removed orlov option [ 101.791901][ T5997] EXT4-fs (loop3): 1 truncate cleaned up [ 101.806599][ T6006] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 101.829214][ T5997] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 101.832169][ T6000] loop1: detected capacity change from 0 to 512 [ 101.857635][ T6000] EXT4-fs (loop1): feature flags set on rev 0 fs, running e2fsck is recommended [ 101.862767][ T5997] EXT4-fs error (device loop3): ext4_lookup:1789: inode #2: comm gtp: deleted inode referenced: 12 [ 101.878426][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 101.903937][ T6000] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 101.945027][ T6000] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 101.982201][ T29] kauditd_printk_skb: 824 callbacks suppressed [ 101.982216][ T29] audit: type=1326 audit(101.593:14194): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5998 comm="syz.1.592" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f489febdf90 code=0x7ffc0000 [ 102.013384][ T29] audit: type=1326 audit(101.621:14195): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5998 comm="syz.1.592" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f489febf34b code=0x7ffc0000 [ 102.027750][ T6031] xt_CT: You must specify a L4 protocol and not use inversions on it [ 102.038127][ T29] audit: type=1326 audit(101.650:14196): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5998 comm="syz.1.592" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f489febe3aa code=0x7ffc0000 [ 102.066889][ T29] audit: type=1326 audit(101.650:14197): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5998 comm="syz.1.592" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f489febf749 code=0x7ffc0000 [ 102.089787][ T29] audit: type=1326 audit(101.650:14198): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5998 comm="syz.1.592" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f489febf749 code=0x7ffc0000 [ 102.114205][ T29] audit: type=1326 audit(101.715:14199): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5998 comm="syz.1.592" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7f489febf749 code=0x7ffc0000 [ 102.137165][ T29] audit: type=1326 audit(101.724:14200): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5998 comm="syz.1.592" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f489febf749 code=0x7ffc0000 [ 102.160048][ T29] audit: type=1326 audit(101.724:14201): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5998 comm="syz.1.592" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f489febf749 code=0x7ffc0000 [ 102.201261][ T29] audit: type=1326 audit(101.771:14202): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5998 comm="syz.1.592" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f489febf749 code=0x7ffc0000 [ 102.224011][ T29] audit: type=1326 audit(101.771:14203): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5998 comm="syz.1.592" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f489febf749 code=0x7ffc0000 [ 102.247249][ T6058] EXT4-fs error (device loop3): ext4_lookup:1785: inode #15: comm syz.3.590: iget: bad i_size value: 360287970189639690 [ 102.275849][ T6034] EXT4-fs (loop3): shut down requested (0) [ 102.348957][ T6069] loop4: detected capacity change from 0 to 1024 [ 102.355970][ T6069] EXT4-fs: Ignoring removed orlov option [ 102.381216][ T6069] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 102.475996][ T6076] loop1: detected capacity change from 0 to 1024 [ 102.476146][ T3317] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 102.483042][ T6076] EXT4-fs: inline encryption not supported [ 102.510477][ T6076] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 102.539224][ T6076] EXT4-fs error (device loop1): ext4_mb_mark_diskspace_used:4215: comm syz.1.597: Allocating blocks 385-513 which overlap fs metadata [ 102.557528][ T6076] EXT4-fs (loop1): pa ffff88810610b380: logic 16, phys. 129, len 24 [ 102.565598][ T6076] EXT4-fs error (device loop1): ext4_mb_release_inode_pa:5466: group 0, free 0, pa_free 8 [ 102.576444][ T6076] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 16 with max blocks 52 with error 28 [ 102.587601][ T6082] xt_CT: You must specify a L4 protocol and not use inversions on it [ 102.588836][ T6076] EXT4-fs (loop1): This should not happen!! Data will be lost [ 102.588836][ T6076] [ 102.606568][ T6076] EXT4-fs (loop1): Total free blocks count 0 [ 102.612582][ T6076] EXT4-fs (loop1): Free/Dirty block details [ 102.618584][ T6076] EXT4-fs (loop1): free_blocks=128 [ 102.623687][ T6076] EXT4-fs (loop1): dirty_blocks=0 [ 102.628743][ T6076] EXT4-fs (loop1): Block reservation details [ 102.634799][ T6076] EXT4-fs (loop1): i_reserved_data_blocks=0 [ 102.689619][ T3314] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 102.719772][ T6089] loop2: detected capacity change from 0 to 1024 [ 102.741989][ T6091] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 102.743015][ T6089] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 102.782347][ T3322] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 102.801991][ T6091] loop1: detected capacity change from 0 to 764 [ 102.814089][ T3323] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 102.857036][ T6091] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 102.921680][ T6098] sch_tbf: burst 3298 is lower than device lo mtu (65550) ! [ 102.975892][ T6096] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 102.984536][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 102.991904][ T6096] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 103.304929][ T6110] loop0: detected capacity change from 0 to 1024 [ 103.312389][ T6110] EXT4-fs: Ignoring removed mblk_io_submit option [ 103.312404][ T6107] xt_time: invalid argument - start or stop time greater than 23:59:59 [ 103.329844][ T6104] 9pnet_fd: p9_fd_create_tcp (6104): problem connecting socket to 127.0.0.1 [ 103.350301][ T6110] EXT4-fs: Invalid want_extra_isize 0 [ 103.459854][ T6120] loop1: detected capacity change from 0 to 764 [ 103.570761][ T6120] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 103.574609][ T6117] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 103.587924][ T6117] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 103.605186][ T6125] loop0: detected capacity change from 0 to 1024 [ 103.628109][ T6129] tipc: Started in network mode [ 103.633224][ T6129] tipc: Node identity 7f000001, cluster identity 4711 [ 103.640413][ T6129] tipc: Enabled bearer , priority 10 [ 103.657818][ T6125] EXT4-fs: Ignoring removed mblk_io_submit option [ 103.664342][ T6106] Symlink component flag not implemented [ 103.670000][ T6106] Symlink component flag not implemented (7) [ 103.679516][ T6125] EXT4-fs: Invalid want_extra_isize 0 [ 103.697299][ T6127] loop4: detected capacity change from 0 to 512 [ 103.710430][ T6127] EXT4-fs (loop4): feature flags set on rev 0 fs, running e2fsck is recommended [ 103.730167][ T6127] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 103.743823][ T6127] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 103.809519][ T6137] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 103.819087][ T6137] EXT4-fs (loop0): orphan cleanup on readonly fs [ 103.826159][ T6137] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.610: bg 0: block 248: padding at end of block bitmap is not set [ 103.840835][ T6137] EXT4-fs error (device loop0): ext4_acquire_dquot:6986: comm syz.0.610: Failed to acquire dquot type 1 [ 103.852595][ T6137] EXT4-fs (loop0): 1 truncate cleaned up [ 103.859140][ T6137] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 103.875739][ T6137] EXT4-fs error (device loop0): ext4_lookup:1789: inode #2: comm gtp: deleted inode referenced: 12 [ 103.970129][ T6140] lo speed is unknown, defaulting to 1000 [ 103.976708][ T6140] wg1 speed is unknown, defaulting to 1000 [ 104.019170][ T6140] lo speed is unknown, defaulting to 1000 [ 104.091448][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 104.117286][ T6145] EXT4-fs error (device loop0): ext4_lookup:1785: inode #15: comm syz.0.610: iget: bad i_size value: 360287970189639690 [ 104.133471][ T6143] EXT4-fs (loop0): shut down requested (0) [ 104.173073][ T6147] EXT4-fs: Ignoring removed orlov option [ 104.182036][ T6147] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 104.313478][ T6150] xt_CT: You must specify a L4 protocol and not use inversions on it [ 104.365755][ T6152] netlink: 'syz.4.613': attribute type 13 has an invalid length. [ 104.391130][ T3323] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 104.451307][ T6152] lo speed is unknown, defaulting to 1000 [ 104.457738][ T6152] wg1 speed is unknown, defaulting to 1000 [ 104.458379][ T6154] lo speed is unknown, defaulting to 1000 [ 104.470235][ T6154] wg1 speed is unknown, defaulting to 1000 [ 104.493735][ T6152] lo speed is unknown, defaulting to 1000 [ 104.569090][ T6162] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 104.579024][ T6162] EXT4-fs (loop3): couldn't mount as ext2 due to feature incompatibilities [ 104.590928][ T6162] __nla_validate_parse: 8 callbacks suppressed [ 104.590943][ T6162] netlink: 176 bytes leftover after parsing attributes in process `syz.3.615'. [ 104.624128][ T6154] lo speed is unknown, defaulting to 1000 [ 104.702084][ T3636] tipc: Node number set to 2130706433 [ 104.741068][ T6165] EXT4-fs warning (device loop2): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 104.752581][ T6165] EXT4-fs warning (device loop2): dx_probe:849: Enable large directory feature to access it [ 104.762689][ T6165] EXT4-fs warning (device loop2): dx_probe:934: inode #2: comm syz.2.616: Corrupt directory, running e2fsck is recommended [ 104.831650][ T6165] EXT4-fs (loop2): Cannot turn on journaled quota: type 1: error -2 [ 104.839728][ T6165] EXT4-fs error (device loop2): ext4_iget_extra_inode:5073: inode #15: comm syz.2.616: corrupted in-inode xattr: invalid ea_ino [ 104.861502][ T6165] EXT4-fs error (device loop2): ext4_orphan_get:1396: comm syz.2.616: couldn't read orphan inode 15 (err -117) [ 104.882914][ T6165] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 104.903390][ T6162] EXT4-fs (loop3): failed to initialize system zone (-117) [ 104.907059][ T6165] bond1: entered promiscuous mode [ 104.910889][ T6162] EXT4-fs (loop3): mount failed [ 104.924689][ T3317] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 104.977317][ T6165] EXT4-fs warning (device loop2): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 104.988851][ T6165] EXT4-fs warning (device loop2): dx_probe:849: Enable large directory feature to access it [ 104.998942][ T6165] EXT4-fs warning (device loop2): dx_probe:934: inode #2: comm syz.2.616: Corrupt directory, running e2fsck is recommended [ 105.021053][ T6173] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 105.027732][ T6165] EXT4-fs error (device loop2): ext4_readdir:264: inode #2: block 3: comm syz.2.616: path /124/file0: bad entry in directory: directory entry overrun - offset=0, inode=4294967295, rec_len=65552, size=1024 fake=0 [ 105.057931][ T6176] netlink: 4 bytes leftover after parsing attributes in process `syz.0.619'. [ 105.061307][ T6173] EXT4-fs (loop4): 1 truncate cleaned up [ 105.083778][ T6173] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 105.112653][ T6177] syz!: rxe_newlink: already configured on team_slave_0 [ 105.120876][ T3323] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 105.213899][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 105.246427][ T6185] EXT4-fs: Ignoring removed mblk_io_submit option [ 105.297243][ T6185] EXT4-fs: Invalid want_extra_isize 0 [ 105.399402][ T6184] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 105.412595][ T6184] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 105.539088][ T3322] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 105.584331][ T6188] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 105.593682][ T6188] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 105.630553][ T52] Bluetooth: hci0: Frame reassembly failed (-84) [ 105.919446][ T6180] 9pnet_fd: p9_fd_create_tcp (6180): problem connecting socket to 127.0.0.1 [ 105.944806][ T6199] tipc: Enabling of bearer rejected, already enabled [ 106.208207][ T6208] tipc: Enabled bearer , priority 0 [ 106.218350][ T6208] syzkaller0: entered promiscuous mode [ 106.223981][ T6208] syzkaller0: entered allmulticast mode [ 106.234074][ T6208] tipc: Resetting bearer [ 106.241167][ T6208] netlink: 28 bytes leftover after parsing attributes in process `syz.3.630'. [ 106.250103][ T6208] netem: change failed [ 106.255041][ T6207] tipc: Resetting bearer [ 106.263352][ T6207] tipc: Disabling bearer [ 106.263949][ T6206] rdma_rxe: rxe_newlink: failed to add bond0 [ 106.315012][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 106.342653][ T6204] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 106.351415][ T6204] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 106.931413][ T6213] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 106.946047][ T6213] EXT4-fs (loop2): orphan cleanup on readonly fs [ 106.953840][ T6215] netlink: 32 bytes leftover after parsing attributes in process `syz.0.642'. [ 106.954674][ T6216] EXT4-fs: Ignoring removed nomblk_io_submit option [ 106.969854][ T6216] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 106.980552][ T6213] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.631: bg 0: block 248: padding at end of block bitmap is not set [ 106.995283][ T6213] EXT4-fs error (device loop2): ext4_acquire_dquot:6986: comm syz.2.631: Failed to acquire dquot type 1 [ 107.007192][ T6213] EXT4-fs (loop2): 1 truncate cleaned up [ 107.013650][ T6213] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 107.020074][ T6219] ext4: Bad value for 'sb' [ 107.051192][ T6213] EXT4-fs error (device loop2): ext4_lookup:1789: inode #2: comm gtp: deleted inode referenced: 12 [ 107.075367][ T6216] EXT4-fs (loop3): 1 truncate cleaned up [ 107.081619][ T6216] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 107.161913][ T6222] lo speed is unknown, defaulting to 1000 [ 107.167917][ T6222] wg1 speed is unknown, defaulting to 1000 [ 107.170239][ T6220] set_capacity_and_notify: 10 callbacks suppressed [ 107.170253][ T6220] loop0: detected capacity change from 0 to 764 [ 107.188709][ T3314] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 107.235743][ T6220] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 107.264698][ T6215] lo speed is unknown, defaulting to 1000 [ 107.271690][ T6215] wg1 speed is unknown, defaulting to 1000 [ 107.288987][ T6222] lo speed is unknown, defaulting to 1000 [ 107.289184][ T6228] loop3: detected capacity change from 0 to 512 [ 107.314318][ T6228] EXT4-fs (loop3): Cannot turn on journaled quota: type 0: error -13 [ 107.326552][ T6228] EXT4-fs error (device loop3): ext4_clear_blocks:876: inode #13: comm syz.3.635: attempt to clear invalid blocks 2 len 1 [ 107.339939][ T6231] EXT4-fs error (device loop2): ext4_lookup:1785: inode #15: comm syz.2.631: iget: bad i_size value: 360287970189639690 [ 107.341737][ T6228] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1306: group 0, block bitmap and bg descriptor inconsistent: 218 vs 220 free clusters [ 107.368089][ T6228] EXT4-fs error (device loop3): ext4_free_branches:1023: inode #13: comm syz.3.635: invalid indirect mapped block 1819239214 (level 0) [ 107.383059][ T6228] EXT4-fs error (device loop3): ext4_free_branches:1023: inode #13: comm syz.3.635: invalid indirect mapped block 1819239214 (level 1) [ 107.396478][ T6215] lo speed is unknown, defaulting to 1000 [ 107.397818][ T6228] EXT4-fs (loop3): 1 truncate cleaned up [ 107.409149][ T6226] EXT4-fs (loop2): shut down requested (0) [ 107.409629][ T6228] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 107.426854][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 107.446489][ T6228] serio: Serial port ttyS3 [ 107.465669][ T29] kauditd_printk_skb: 1054 callbacks suppressed [ 107.465735][ T29] audit: type=1326 audit(106.729:15254): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6232 comm="syz.1.634" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f489fef2005 code=0x7ffc0000 [ 107.505266][ T29] audit: type=1400 audit(106.766:15255): avc: denied { listen } for pid=6227 comm="syz.3.635" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 107.524912][ T29] audit: type=1400 audit(106.776:15256): avc: denied { getopt } for pid=6227 comm="syz.3.635" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 107.560344][ T3314] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 107.569526][ T29] audit: type=1326 audit(106.813:15257): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6234 comm="syz.0.636" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f731869f749 code=0x7ffc0000 [ 107.592493][ T29] audit: type=1326 audit(106.813:15258): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6234 comm="syz.0.636" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f731869f749 code=0x7ffc0000 [ 107.592520][ T29] audit: type=1326 audit(106.813:15259): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6234 comm="syz.0.636" exe="/root/syz-executor" sig=0 arch=c000003e syscall=102 compat=0 ip=0x7f731869f749 code=0x7ffc0000 [ 107.592545][ T29] audit: type=1326 audit(106.813:15260): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6234 comm="syz.0.636" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f731869f749 code=0x7ffc0000 [ 107.592569][ T29] audit: type=1326 audit(106.813:15261): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6234 comm="syz.0.636" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f731869f749 code=0x7ffc0000 [ 107.592636][ T29] audit: type=1326 audit(106.813:15262): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6234 comm="syz.0.636" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f731869f749 code=0x7ffc0000 [ 107.592658][ T29] audit: type=1326 audit(106.813:15263): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6234 comm="syz.0.636" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f731869f749 code=0x7ffc0000 [ 107.699671][ T6237] lo speed is unknown, defaulting to 1000 [ 107.699929][ T6237] wg1 speed is unknown, defaulting to 1000 [ 107.758247][ T6243] netlink: 4 bytes leftover after parsing attributes in process `syz.3.639'. [ 107.769679][ T44] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 107.782448][ T3516] Bluetooth: hci0: command 0x1003 tx timeout [ 107.836763][ T6237] lo speed is unknown, defaulting to 1000 [ 107.894098][ T3323] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 107.913418][ T6250] loop2: detected capacity change from 0 to 128 [ 107.926034][ T6250] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 108.082835][ T6248] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 108.091447][ T6248] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 108.413704][ T6255] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 108.422336][ T6255] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 108.538644][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 108.648671][ T6245] 9pnet_fd: p9_fd_create_tcp (6245): problem connecting socket to 127.0.0.1 [ 108.670298][ T6258] tipc: Enabling of bearer rejected, already enabled [ 108.695221][ T6260] loop4: detected capacity change from 0 to 1024 [ 108.695384][ T6262] netlink: 8 bytes leftover after parsing attributes in process `syz.3.646'. [ 108.701980][ T6260] EXT4-fs: Ignoring removed bh option [ 108.716283][ T6260] EXT4-fs: inline encryption not supported [ 108.722763][ T6260] EXT4-fs (loop4): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 108.733910][ T6260] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c84ce018, mo2=0000] [ 108.743140][ T6260] EXT4-fs error (device loop4): ext4_map_blocks:783: inode #3: block 2: comm syz.4.645: lblock 2 mapped to illegal pblock 2 (length 1) [ 108.755971][ T6262] $Hÿ: renamed from bond0 (while UP) [ 108.757959][ T6260] EXT4-fs error (device loop4): ext4_map_blocks:783: inode #3: block 48: comm syz.4.645: lblock 0 mapped to illegal pblock 48 (length 1) [ 108.776803][ T6260] EXT4-fs error (device loop4): ext4_acquire_dquot:6986: comm syz.4.645: Failed to acquire dquot type 0 [ 108.778202][ T6262] $Hÿ: entered promiscuous mode [ 108.793070][ T6262] bond_slave_0: entered promiscuous mode [ 108.793083][ T6260] EXT4-fs error (device loop4) in ext4_reserve_inode_write:6298: Corrupt filesystem [ 108.798863][ T6262] bond_slave_1: entered promiscuous mode [ 108.808908][ T6260] EXT4-fs error (device loop4): ext4_evict_inode:253: inode #11: comm syz.4.645: mark_inode_dirty error [ 108.814359][ T6262] dummy0: entered promiscuous mode [ 108.829812][ T6260] EXT4-fs warning (device loop4): ext4_evict_inode:256: couldn't mark inode dirty (err -117) [ 108.840661][ T6260] EXT4-fs (loop4): 1 orphan inode deleted [ 108.856986][ T12] EXT4-fs error (device loop4): ext4_map_blocks:783: inode #3: block 1: comm kworker/u8:0: lblock 1 mapped to illegal pblock 1 (length 1) [ 108.857191][ T6260] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 108.871273][ T12] EXT4-fs error (device loop4): ext4_release_dquot:7022: comm kworker/u8:0: Failed to release dquot type 0 [ 108.896138][ T6260] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 108.896189][ T3323] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 108.909948][ T6260] EXT4-fs error (device loop4): __ext4_get_inode_loc:4830: comm syz.4.645: Invalid inode table block 1 in block_group 0 [ 108.927043][ T6260] EXT4-fs error (device loop4) in ext4_reserve_inode_write:6298: Corrupt filesystem [ 108.936631][ T6260] EXT4-fs error (device loop4): ext4_quota_off:7270: inode #3: comm syz.4.645: mark_inode_dirty error [ 108.969115][ T6267] loop2: detected capacity change from 0 to 512 [ 108.979931][ T6267] EXT4-fs: Ignoring removed nomblk_io_submit option [ 108.986937][ T6267] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 109.003174][ T6267] EXT4-fs (loop2): 1 truncate cleaned up [ 109.013023][ T6267] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 109.029175][ T6260] netlink: 8 bytes leftover after parsing attributes in process `syz.4.645'. [ 109.038027][ T6260] netlink: 48 bytes leftover after parsing attributes in process `syz.4.645'. [ 109.045352][ T6271] netlink: 'syz.0.649': attribute type 13 has an invalid length. [ 109.053997][ T6272] netlink: 32 bytes leftover after parsing attributes in process `syz.3.648'. [ 109.074477][ T3323] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 109.104571][ T6271] bridge0: port 2(bridge_slave_1) entered disabled state [ 109.111805][ T6271] bridge0: port 1(bridge_slave_0) entered disabled state [ 109.135414][ T6278] loop3: detected capacity change from 0 to 764 [ 109.155377][ T6278] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 109.203700][ T6260] geneve2: entered promiscuous mode [ 109.208958][ T6260] geneve2: entered allmulticast mode [ 109.215697][ T288] netdevsim netdevsim0 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 109.232375][ T288] netdevsim netdevsim0 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 109.248827][ T6278] lo speed is unknown, defaulting to 1000 [ 109.249330][ T288] netdevsim netdevsim0 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 109.263475][ T6275] lo speed is unknown, defaulting to 1000 [ 109.263883][ T6278] wg1 speed is unknown, defaulting to 1000 [ 109.269295][ T288] netdevsim netdevsim0 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 109.284210][ T6275] wg1 speed is unknown, defaulting to 1000 [ 109.290273][ T288] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.298952][ T288] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.307576][ T288] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.316093][ T288] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.352095][ T6278] lo speed is unknown, defaulting to 1000 [ 109.409114][ T6275] lo speed is unknown, defaulting to 1000 [ 109.548344][ T6281] netlink: 24 bytes leftover after parsing attributes in process `syz.0.652'. [ 109.557389][ T6281] IPVS: Error connecting to the multicast addr [ 109.633036][ T6291] lo speed is unknown, defaulting to 1000 [ 109.646989][ T6291] wg1 speed is unknown, defaulting to 1000 [ 109.652955][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 109.686252][ T6294] IPv6: NLM_F_CREATE should be specified when creating new route [ 109.702937][ T6291] lo speed is unknown, defaulting to 1000 [ 109.804502][ T6302] loop1: detected capacity change from 0 to 1024 [ 109.811870][ T6302] EXT4-fs: Ignoring removed orlov option [ 109.901744][ T6296] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 109.910669][ T6296] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 109.921496][ T6302] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 110.106392][ T6312] xt_CT: You must specify a L4 protocol and not use inversions on it [ 110.158921][ T6313] loop4: detected capacity change from 0 to 512 [ 110.241121][ T6312] netlink: 8 bytes leftover after parsing attributes in process `syz.1.656'. [ 110.562905][ T6318] netlink: '+}[@': attribute type 1 has an invalid length. [ 110.570160][ T6318] netlink: 224 bytes leftover after parsing attributes in process `+}[@'. [ 110.591498][ T6318] bond0: (slave dummy0): Releasing backup interface [ 110.601394][ T6318] bridge_slave_0: left allmulticast mode [ 110.607154][ T6318] bridge_slave_0: left promiscuous mode [ 110.612892][ T6318] bridge0: port 1(bridge_slave_0) entered disabled state [ 110.625717][ T6318] bridge_slave_1: left allmulticast mode [ 110.631431][ T6318] bridge_slave_1: left promiscuous mode [ 110.637273][ T6318] bridge0: port 2(bridge_slave_1) entered disabled state [ 110.649225][ T6318] bond0: (slave bond_slave_0): Releasing backup interface [ 110.659636][ T6318] bond0: (slave bond_slave_1): Releasing backup interface [ 110.673238][ T6318] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 110.703386][ T3312] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 110.773030][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 110.823161][ T6316] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 110.835620][ T6324] netlink: 32 bytes leftover after parsing attributes in process `syz.2.663'. [ 110.839832][ T6316] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 110.847042][ T6326] netlink: 'syz.3.662': attribute type 13 has an invalid length. [ 110.884681][ T6326] bridge0: port 2(bridge_slave_1) entered disabled state [ 110.891859][ T6326] bridge0: port 1(bridge_slave_0) entered disabled state [ 110.930302][ T6331] loop2: detected capacity change from 0 to 764 [ 110.943506][ T6331] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 110.969559][ T6326] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 110.979013][ T6326] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 111.026676][ T23] lo speed is unknown, defaulting to 1000 [ 111.032646][ T23] sz1: Port: 1 Link DOWN [ 111.037224][ T3401] wg1 speed is unknown, defaulting to 1000 [ 111.043089][ T3401] syz0: Port: 1 Link DOWN [ 111.047571][ T2076] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 111.056540][ T6331] lo speed is unknown, defaulting to 1000 [ 111.061681][ T23] lo speed is unknown, defaulting to 1000 [ 111.062378][ T2076] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 111.078991][ T6331] wg1 speed is unknown, defaulting to 1000 [ 111.079388][ T6328] lo speed is unknown, defaulting to 1000 [ 111.092099][ T6328] wg1 speed is unknown, defaulting to 1000 [ 111.092281][ T2076] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 111.123476][ T2076] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 111.137112][ T6331] lo speed is unknown, defaulting to 1000 [ 111.270426][ T6328] lo speed is unknown, defaulting to 1000 [ 111.334001][ T6339] loop2: detected capacity change from 0 to 128 [ 111.383124][ T6340] lo speed is unknown, defaulting to 1000 [ 111.391587][ T6340] wg1 speed is unknown, defaulting to 1000 [ 111.463949][ T6345] tipc: Enabling of bearer rejected, already enabled [ 111.505366][ T6340] lo speed is unknown, defaulting to 1000 [ 111.587036][ T6349] EXT4-fs: Ignoring removed orlov option [ 111.598263][ T6349] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 111.611145][ T6349] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 111.767381][ T6352] ================================================================== [ 111.775487][ T6352] BUG: KCSAN: data-race in atime_needs_update / touch_atime [ 111.782788][ T6352] [ 111.785111][ T6352] write to 0xffff88811bea1b18 of 4 bytes by task 6349 on cpu 1: [ 111.792839][ T6352] touch_atime+0x1e8/0x340 [ 111.797260][ T6352] shmem_file_read_iter+0x477/0x540 [ 111.802460][ T6352] copy_splice_read+0x442/0x660 [ 111.807297][ T6352] splice_direct_to_actor+0x290/0x680 [ 111.812655][ T6352] do_splice_direct+0xda/0x150 [ 111.817403][ T6352] do_sendfile+0x380/0x650 [ 111.821805][ T6352] __x64_sys_sendfile64+0x105/0x150 [ 111.826991][ T6352] x64_sys_call+0x2db1/0x3000 [ 111.831660][ T6352] do_syscall_64+0xd8/0x2a0 [ 111.836171][ T6352] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 111.842055][ T6352] [ 111.844376][ T6352] read to 0xffff88811bea1b18 of 4 bytes by task 6352 on cpu 0: [ 111.851901][ T6352] atime_needs_update+0x25f/0x3e0 [ 111.856917][ T6352] touch_atime+0x4a/0x340 [ 111.861323][ T6352] shmem_file_read_iter+0x477/0x540 [ 111.866515][ T6352] copy_splice_read+0x442/0x660 [ 111.871348][ T6352] splice_direct_to_actor+0x290/0x680 [ 111.876707][ T6352] do_splice_direct+0xda/0x150 [ 111.881457][ T6352] do_sendfile+0x380/0x650 [ 111.884828][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 111.885862][ T6352] __x64_sys_sendfile64+0x105/0x150 [ 111.897976][ T6352] x64_sys_call+0x2db1/0x3000 [ 111.902648][ T6352] do_syscall_64+0xd8/0x2a0 [ 111.907146][ T6352] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 111.913023][ T6352] [ 111.915326][ T6352] value changed: 0x2c3c3d8b -> 0x2ccaf899 [ 111.921053][ T6352] [ 111.923357][ T6352] Reported by Kernel Concurrency Sanitizer on: [ 111.929502][ T6352] CPU: 0 UID: 0 PID: 6352 Comm: syz.4.669 Not tainted syzkaller #0 PREEMPT(voluntary) [ 111.939120][ T6352] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 111.949170][ T6352] ================================================================== [ 111.972830][ T6357] lo speed is unknown, defaulting to 1000 [ 111.978914][ T6357] wg1 speed is unknown, defaulting to 1000 [ 112.062388][ T6357] lo speed is unknown, defaulting to 1000 [ 112.986002][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 114.097789][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 115.220314][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 116.321439][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 117.433286][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 118.545090][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 119.656923][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 120.768742][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available