last executing test programs: 1m22.55530913s ago: executing program 1 (id=706): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e"], 0x0, 0x4, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[], 0x48) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000740)=ANY=[@ANYBLOB="50000000100003040000000000000000f2000000", @ANYRES32=0x0, @ANYBLOB="00000000000000002800128009000100766c616e000000001800028006000100010000000c000200540a00001800000008000500", @ANYRES32=r4], 0x50}, 0x1, 0xba01}, 0x0) r5 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[], 0x0}, 0x94) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000001440)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r7}, 0x10) fsetxattr$security_capability(0xffffffffffffffff, &(0x7f0000000280), 0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={0x0}, 0x18) io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x0, &(0x7f00000002c0), 0x0) sendmsg$kcm(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="2e00000010008188040f80ec59acbc0413a1f8480d0000005e140602000000000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x404c080) write(r5, &(0x7f0000000000)="2400000011005f0414f9f40700090400810000000d0000000000000008000f0001000000", 0x24) 1m21.836707241s ago: executing program 1 (id=722): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r2}, 0x4) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x10, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000510700140000000000000001b7080000000000007b8af8ff00000000b7080000fcffffff7b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70500000800000085000000a500000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) r4 = socket$nl_rdma(0x10, 0x3, 0x14) setxattr$trusted_overlay_upper(&(0x7f0000000380)='./file0\x00', &(0x7f0000000440), &(0x7f0000000500)={0x0, 0xfb, 0x1e, 0x4, 0x1, "146d55d70c08eec5e49a44332eb01161", "061e9b08abb094e82e"}, 0x1e, 0x2) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r4, 0x0, r7, 0x0, 0x400000008000f28, 0x0) splice(r6, 0x0, r5, 0x0, 0x114, 0xe) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=ANY=[@ANYBLOB="00010000031401"], 0x100}, 0x1, 0x0, 0x0, 0x10000010}, 0x4000) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000100)={'team0\x00', 0x0}) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r9, &(0x7f0000006280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000014c0)=@newtaction={0x88, 0x30, 0xb, 0x0, 0x25dfdbfc, {0x0, 0x0, 0x6a00}, [{0x74, 0x1, [@m_mirred={0x70, 0x1, 0x0, 0x0, {{0xb}, {0x44, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0xffffffff, 0x6, 0x10000000, 0x0, 0xffe0000}}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x6, 0xff, 0x4, 0x6, 0x6}, 0x4, r8}}]}, {0x4, 0xa}, {0xc}, {0xc}}}]}]}, 0x88}}, 0x2000a804) getsockopt$SO_BINDTODEVICE(r9, 0x1, 0x19, &(0x7f0000000180), 0x10) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="200000001100010100"/18], 0x20}, 0x1, 0x0, 0x0, 0x80d5}, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x4) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='tlb_flush\x00', r0}, 0x18) socket$igmp6(0xa, 0x3, 0x2) syz_clone(0x40000000, 0x0, 0x0, 0x0, 0x0, 0x0) 1m21.065011592s ago: executing program 1 (id=716): r0 = fsopen(0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) fsmount(r0, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xf, &(0x7f0000000440)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x1}, {}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001580)={&(0x7f0000000180)='kmem_cache_free\x00', r1}, 0x10) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000900)=ANY=[@ANYBLOB="440000001000090600"/20, @ANYRES32=0x0, @ANYBLOB="adffa888000000001c00128009000100626f6e64000000000c000280050001000600000008000a0079"], 0x44}}, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r3, &(0x7f00000000c0)={0x2, 0x4e20, @empty}, 0x10) sendto$inet(r3, &(0x7f0000000140), 0xffffffffffffff58, 0x20008005, &(0x7f0000000100)={0x2, 0x4e20}, 0x10) ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, &(0x7f00000015c0)={0x0, 0x0, {0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) shutdown(r3, 0x1) recvfrom(r3, &(0x7f0000000000)=""/116, 0xffffffdd, 0x734, 0x0, 0x0) getpgrp(0x0) getdents64(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) getdents(0xffffffffffffffff, 0xffffffffffffffff, 0x5a) recvmmsg(0xffffffffffffffff, &(0x7f0000000480)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=""/11, 0x17}}], 0x400000000000179, 0x0, 0x0) lsetxattr$security_selinux(&(0x7f00000001c0)='.\x00', &(0x7f0000000300), &(0x7f0000000280)='system_u:object_r:hwdata_t:s0\x00', 0xffd7, 0x1) 1m20.823512335s ago: executing program 1 (id=719): socket$nl_audit(0x10, 0x3, 0x9) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = epoll_create(0x3ff) r1 = epoll_create1(0x80000) r2 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000340)='syz0\x00', 0x200002, 0x0) ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f0000000380)={{0x1, 0x1, 0x18, r2}, './file0\x00'}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x10, 0x2, &(0x7f0000000100)=@raw=[@ldst={0x1, 0x2, 0x4, 0x0, 0x5}, @jmp={0x5, 0x0, 0x9, 0x0, 0x4, 0xfffffffffffffe88}], &(0x7f0000000000)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x1200000, &(0x7f0000000940)={[{@noblock_validity}, {}, {@sysvgroups}, {@norecovery}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@noquota}, {@nobh}, {@noauto_da_alloc}, {@nomblk_io_submit}]}, 0x1, 0x57e, &(0x7f0000001b40)="$eJzs3c9rHOUbAPBnNkl/f79NoRT1IIEerNRumsQfFYTWo2ixoPe6JNNQsumW7KY0sdD2YC9epAgiFsQ/wLvH4j8gePVc0EKREvTgJTKb2XabzSabZHW37ucD077vzGSfeXfmffd5d3bZAAbWWPZPIeLFiPgiiTjctG048o1ja/utPL4xnS1JrK5+9HsSSb6usX+S/38wr7wQET9+FnGy0Bq3urQ8VyqX04W8Pl6bvzpeXVo+dXm+NJvOplcmp6bOvDE1+fZbb3atra9e+PPrD++/d+bz4ytfff/wyN0kzsWhfFtzO3bhVnNlLMby52Qkzq3bcaILwfpJ0usDYEeG8n4+EtkYcDiG8l4P/PfdjIhVYEAl+j8MqEYe0Jjbd2ke/Nx49O7aBKi1/cNr743Evvrc6MBK8szMKJvvjnYhfhbjh9/u3c2W2OJ9iJtdiAfQcOt2RJweHm4d/5J8/Nu50/U3jze3Psagvf5AL93P8p/XNsp/Ck/yn2jJf36uZ467HR+io/5feNiFMG1l+d87G+a/T4au0aG89r96zjeSXLpcTk9HxP8j4kSM7M3qm93PObPyYLXdtub8L1uy+I1cMD+Oh8N7n/2bmVKttJs2N3t0O+Klp/lvEi3j/756rrs+/82ejwsdxjiW3nu53bat29+s+xnw6ncRr2x4/p/e0Uo2vz85Xr8exhtXRas/7hz7qV387bW/+7Lzf2Dz9o8mzfdrq9uP8e2+v9J223Z6/e9JPq6X9+TrrpdqtYWJiD3JB63rJ5/+baPe2D9r/4njm49/G13/+yPikw7bf+fonba79sP5n9nW+d9+4cH7n37TLn5n5//1eulEvqaT8a/TA9zNcwcAAAAAAAD9phARhyIpFJ+UC4Vice07vEfjQKFcqdZOXqosXpmJ+ndlR2Ok0LjTfbjp8xAT+edhG/XJdfWpiDgSEV8O7a/Xi9OV8kyvGw8AAAAAAAAAAAAAAAAAAAB94mCb7/9nfh3q9dEB/zg/+Q2Da8v+341fegL6ktd/GFz6Pwwu/R8GV4f9/5ctf80deO54/YfBpf/D4NL/YXBt3P/N9gEAAAAAAAAAAAAAAAAAAAAAAAAAAGCHLpw/ny2rK49vTGf1mWtLi3OVa6dm0upccX5xujhdWbhanK1UZstpcboyv9XjlSuVqxOTsXh9vJZWa+PVpeWL85XFK7WLl+dLs+nFdORfaRUAAAAAAAAAAAAAAAAAAAA8X6pLy3OlcjldUGhbOBt9cRg7LiRbneWz+cWwoxDDm+2zfzePrNDLQg8HJQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABY5+8AAAD//5d3NP0=") mount$bind(&(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x101091, 0x0) r4 = getpid() r5 = syz_pidfd_open(r4, 0x0) setns(r5, 0x8020000) mount_setattr(0xffffffffffffff9c, &(0x7f0000000180)='.\x00', 0x9000, &(0x7f0000001dc0)={0x8, 0x70, 0x80000}, 0x20) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r6 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) setsockopt$inet_opts(0xffffffffffffffff, 0x0, 0x4, 0x0, 0x0) write$tun(r3, &(0x7f0000000240)={@val={0x8, 0x800}, @val={0x7, 0x0, 0x0, 0x300, 0x14}, @ipv4=@tcp={{0x5, 0x4, 0x0, 0x3c, 0x3a, 0xfffe, 0x0, 0x0, 0x2f, 0x0, @remote, @broadcast}, {{0xa200, 0x22eb, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}, {"4adcda08f6e83e2aa00e133f88a8349f246e"}}}}, 0x48) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000240)={0xa0000000}) epoll_ctl$EPOLL_CTL_MOD(r0, 0x3, r1, &(0x7f0000000280)={0x2000000}) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={{0x14, 0x10, 0x1, 0x2, 0x0, {0x2}}, [@NFT_MSG_NEWSET={0x14, 0x9, 0xa, 0x401, 0x0, 0x0, {0x3, 0x0, 0xfffe}}], {0x14, 0x10}}, 0x3c}}, 0x0) 1m20.054978027s ago: executing program 1 (id=723): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000180000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000f0850000002d00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r0}, 0x18) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100000100000000000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000002d00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r1}, 0x10) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r3, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000000)="2e00000010008188e6b62aa73772cc9f1ba1f848430000005e1406ca000000000e000a000f000000028000001294", 0x2e}], 0x1}, 0x4000000) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) accept$packet(r5, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000380)=0x14) getsockname$packet(r4, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000400)=0x14) sendmsg$nl_route_sched(r2, &(0x7f0000006280)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000740)=@newtaction={0x98, 0x30, 0x1, 0x0, 0x0, {0x0, 0x0, 0x6a00}, [{0x84, 0x1, [@m_mirred={0x50, 0x1, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x80d, 0x0, 0x10000000, 0x5, 0x4}, 0x1, r6}}]}, {0x4, 0xa}, {0xc}, {0xc, 0x8, {0x2, 0x2}}}}, @m_mpls={0x30, 0x2, 0x0, 0x0, {{0x9}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}, 0x98}, 0x1, 0x0, 0x0, 0x4008001}, 0x0) getsockopt$inet_IP_XFRM_POLICY(r5, 0x0, 0x11, &(0x7f0000000c00)={{{@in6=@private2, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@empty}, 0x0, @in=@empty}}, &(0x7f00000004c0)=0xe8) sendmsg$nl_xfrm(r4, &(0x7f00000005c0)={&(0x7f0000000440), 0xc, &(0x7f0000000580)={&(0x7f0000000d00)=@getpolicy={0x330, 0x15, 0x2, 0x70bd27, 0x25dfdbfe, {{@in=@multicast2, @in6=@dev={0xfe, 0x80, '\x00', 0x42}, 0x4e20, 0x9, 0x4e23, 0x6, 0x2, 0x80, 0xa0, 0x2e, r6, r7}, 0x0, 0x2}, [@XFRMA_SET_MARK_MASK={0x8, 0x1e, 0x5}, @algo_auth={0x13b, 0x1, {{'sha1-generic\x00'}, 0x798, "0f2d9b13087dcf2f08439cd2f22790a687bf8f5758533b38d8be3a5452bd9a3a1bbd2aef9225ba7ef3d72b198bb039832780dd660c5be426e93b5c6b250960a1f300a6aaa3acdf27746b6180faf6861207e0a2bd079888eada09dec6746442294a10bfa426de0ff5aa7626003050208a42d15df5f4c88d1147d00aa5479267442de1f47cdbc422c51abafe9df84850c5feb3e10783d5b6b2873f69b47ea373905492999316eba1e41cbf47cc7348b946ba983797b5ff45ba9ec4a6f5d3657d0aceeba6f7a8ef52c81bcf8474ce56d698b2ac5323ef393ef1eddce0747e6f64c6652937d7ffd9b2c96d2f6ad31a03368a1a51f9"}}, @encap={0x1c, 0x4, {0x2, 0x4e20, 0x4e23, @in6=@ipv4={'\x00', '\xff\xff', @multicast2}}}, @migrate={0x180, 0x11, [{@in=@empty, @in6=@private0, @in=@private=0xa010101, @in=@local, 0xff, 0x2, 0x0, 0x3503, 0x2, 0x2fee5c8aa30d3aa}, {@in6=@local, @in=@multicast2, @in=@multicast2, @in6=@empty, 0xff, 0x1, 0x0, 0x3502, 0x2, 0xa}, {@in=@rand_addr=0x64010100, @in=@multicast2, @in=@local, @in6=@mcast2, 0x3c, 0x1, 0x0, 0x3505, 0xa, 0xa}, {@in=@dev={0xac, 0x14, 0x14, 0x11}, @in=@broadcast, @in6=@remote, @in=@dev={0xac, 0x14, 0x14, 0x32}, 0x2b, 0x4, 0x0, 0x3501, 0x2, 0xa}, {@in=@broadcast, @in=@broadcast, @in6=@mcast2, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x1d1, 0x3, 0x0, 0x3500, 0x2, 0xa}]}]}, 0x330}, 0x1, 0x0, 0x0, 0x8044}, 0x8004) r8 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000010c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r8}, 0x4) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000000)='kfree\x00'}, 0x10) r9 = socket$key(0xf, 0x3, 0x2) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x2010008, &(0x7f00000001c0), 0xff, 0x52e, &(0x7f0000000640)="$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") sendmsg$key(r9, &(0x7f0000000400)={0x10000000, 0x0, &(0x7f0000000040)={&(0x7f0000000840)=ANY=[@ANYBLOB="020e0080150000000000000000000000030005000000000002004e24ac1e00010000000000000000030006003c000000020000fc34000000000000000000000001001800000000000800120000000200fcffffff000000000600330000000000000000000000eafffd8000000000000000000000000000aa000000000000000000000000000000000400"], 0xa8}}, 0x2) 1m19.456161976s ago: executing program 1 (id=730): r0 = fsopen(0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xf, &(0x7f0000000440)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x1}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001580)={&(0x7f0000000180)='kmem_cache_free\x00', r2}, 0x10) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000900)=ANY=[@ANYBLOB="440000001000090600"/20, @ANYRES32=0x0, @ANYBLOB="adffa888000000001c00128009000100626f6e64000000000c000280050001000600000008000a0079"], 0x44}}, 0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r4, &(0x7f00000000c0)={0x2, 0x4e20, @empty}, 0x10) sendto$inet(r4, &(0x7f0000000140), 0xffffffffffffff58, 0x20008005, &(0x7f0000000100)={0x2, 0x4e20}, 0x10) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r1, 0x84009422, &(0x7f00000015c0)={0x0, 0x0, {0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) shutdown(r4, 0x1) recvfrom(r4, &(0x7f0000000000)=""/116, 0xffffffdd, 0x734, 0x0, 0x0) getpgrp(0x0) getdents64(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) getdents(0xffffffffffffffff, 0xffffffffffffffff, 0x5a) recvmmsg(0xffffffffffffffff, &(0x7f0000000480)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=""/11, 0x17}}], 0x400000000000179, 0x0, 0x0) lsetxattr$security_selinux(&(0x7f00000001c0)='.\x00', &(0x7f0000000300), &(0x7f0000000280)='system_u:object_r:hwdata_t:s0\x00', 0xffd7, 0x1) 1m19.455814006s ago: executing program 32 (id=730): r0 = fsopen(0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xf, &(0x7f0000000440)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x1}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001580)={&(0x7f0000000180)='kmem_cache_free\x00', r2}, 0x10) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000900)=ANY=[@ANYBLOB="440000001000090600"/20, @ANYRES32=0x0, @ANYBLOB="adffa888000000001c00128009000100626f6e64000000000c000280050001000600000008000a0079"], 0x44}}, 0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r4, &(0x7f00000000c0)={0x2, 0x4e20, @empty}, 0x10) sendto$inet(r4, &(0x7f0000000140), 0xffffffffffffff58, 0x20008005, &(0x7f0000000100)={0x2, 0x4e20}, 0x10) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r1, 0x84009422, &(0x7f00000015c0)={0x0, 0x0, {0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) shutdown(r4, 0x1) recvfrom(r4, &(0x7f0000000000)=""/116, 0xffffffdd, 0x734, 0x0, 0x0) getpgrp(0x0) getdents64(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) getdents(0xffffffffffffffff, 0xffffffffffffffff, 0x5a) recvmmsg(0xffffffffffffffff, &(0x7f0000000480)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=""/11, 0x17}}], 0x400000000000179, 0x0, 0x0) lsetxattr$security_selinux(&(0x7f00000001c0)='.\x00', &(0x7f0000000300), &(0x7f0000000280)='system_u:object_r:hwdata_t:s0\x00', 0xffd7, 0x1) 11.120464004s ago: executing program 4 (id=1220): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x36, 0x1, 0x0, 0x0, 0x0, 0x7, 0x518, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0xd}, 0x9111, 0x3, 0x0, 0x1, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000003000), r0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x7b, 0x4) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(0xffffffffffffffff, 0x0, 0xfffffffffffffe1a, 0x200007fd, &(0x7f0000000040)={0x2, 0x4e23, @local}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=@base={0xb, 0x7, 0x8, 0x8, 0x5}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x0, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) open_tree(0xffffffffffffff9c, 0x0, 0x89901) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@bloom_filter={0x1e, 0x0, 0x5, 0x6, 0x0, 0x1}, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='sched_switch\x00'}, 0x10) r2 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000900)=@newqdisc={0x7c, 0x24, 0x3fe3aa0262d8c583, 0x70bd29, 0x25dfdbfe, {0x0, 0x0, 0x0, r3, {0x0, 0xffe0}, {0xffff, 0xffff}, {0x10, 0xe}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x2c, 0x2, [@TCA_FQ_FLOW_DEFAULT_RATE={0x8, 0x6, 0xffffffff}, @TCA_FQ_QUANTUM={0x8, 0x3, 0x9}, @TCA_FQ_FLOW_MAX_RATE={0x8, 0x7, 0x3}, @TCA_FQ_FLOW_MAX_RATE={0x8, 0x7, 0x101}, @TCA_FQ_ORPHAN_MASK={0x8, 0xa, 0xaced}]}}, @TCA_STAB={0x24, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x8, 0xc, 0xc89f, 0xfff75ef7, 0x0, 0x8001, 0x3}}, {0x4}}]}]}, 0x7c}}, 0x4048000) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r4, 0x8933, &(0x7f0000003040)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_TP_METER(r0, &(0x7f0000003140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01002bbd7000fbdbdf25020000000a000900aaaaaaaaaa44000008000300", @ANYRES32=r5, @ANYBLOB='\b\x00\v'], 0x30}, 0x1, 0x0, 0x0, 0x20000050}, 0x20040084) r6 = syz_genetlink_get_family_id$l2tp(&(0x7f00000008c0), 0xffffffffffffffff) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000005c0)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="01002cbd701004000000050000000600010005000000080009000200000008000b000002000008000c00a80a00001400080070696d36726567310000000000000000050012"], 0x50}, 0x1, 0x0, 0x0, 0x20008000}, 0x30) sendmsg$L2TP_CMD_SESSION_DELETE(r0, &(0x7f0000000340)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000280)={&(0x7f0000000440)={0x44, r6, 0x4, 0x70bd2c, 0x25dfdbff, {}, [@L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x8000000000000001}, @L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0x7}, @L2TP_ATTR_PW_TYPE={0x6}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0x7}, @L2TP_ATTR_RECV_TIMEOUT={0xc, 0x16, 0x100000000}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000010}, 0x20000014) 10.857623118s ago: executing program 4 (id=1225): perf_event_open(&(0x7f0000000340)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$ptp0(0xffffffffffffff9c, &(0x7f0000000140), 0x481, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x80400, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x52, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x0, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000004c0)={&(0x7f0000000580)='ext4_writepages\x00', r2, 0x0, 0xfffffffffffffffc}, 0x18) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x11, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001000000"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = fsopen(&(0x7f0000000400)='autofs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r4, 0x1, &(0x7f0000000240)=',-\x10*\x00', &(0x7f0000000380)='$\x00', 0x0) fsconfig$FSCONFIG_SET_BINARY(r4, 0x2, &(0x7f0000000540)='\x00', &(0x7f0000001c80)='n', 0x1) fsconfig$FSCONFIG_SET_STRING(r4, 0x1, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0) close(r4) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000180)={'ip6gretap0\x00', 0x400}) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000240)=ANY=[@ANYRESHEX=r5, @ANYRES32, @ANYRESHEX], 0xe8}}, 0x20008000) close(r0) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x4, 0xc, &(0x7f00000005c0)=ANY=[@ANYRESDEC=r1, @ANYRES16, @ANYRESDEC=r3, @ANYRESHEX=r2, @ANYRES8, @ANYBLOB="a7bcfd455dd9082ee91a0136c6f0def5d60ec4804beb2cba2bac2122b27ecd601ff0", @ANYRES8=r3, @ANYRES8=r2], 0x0, 0x3, 0x0, 0x0, 0x41100, 0x78, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x94) r6 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r6}, &(0x7f0000bbdffc)) pipe(&(0x7f00000002c0)={0xffffffffffffffff}) read(r7, &(0x7f0000032440)=""/102364, 0x18fdc) timer_settime(0x0, 0x0, &(0x7f0000000400)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) 9.955254842s ago: executing program 4 (id=1245): r0 = fsopen(0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) fsmount(r0, 0x0, 0x0) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xf, &(0x7f0000000440)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x1}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001580)={&(0x7f0000000180)='kmem_cache_free\x00', r2}, 0x10) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000900)=ANY=[@ANYBLOB="440000001000090600"/20, @ANYRES32=0x0, @ANYBLOB="adffa888000000001c00128009000100626f6e64000000000c0002800500010006000000"], 0x44}}, 0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r4, &(0x7f00000000c0)={0x2, 0x4e20, @empty}, 0x10) sendto$inet(r4, &(0x7f0000000140), 0xffffffffffffff58, 0x20008005, &(0x7f0000000100)={0x2, 0x4e20}, 0x10) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r1, 0x84009422, &(0x7f00000015c0)={0x0, 0x0, {0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) shutdown(r4, 0x1) recvfrom(r4, &(0x7f0000000000)=""/116, 0xffffffdd, 0x734, 0x0, 0x0) getpgrp(0x0) getdents64(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) getdents(0xffffffffffffffff, 0xffffffffffffffff, 0x5a) recvmmsg(0xffffffffffffffff, &(0x7f0000000480)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=""/11, 0x17}}], 0x400000000000179, 0x0, 0x0) lsetxattr$security_selinux(&(0x7f00000001c0)='.\x00', &(0x7f0000000300), &(0x7f0000000280)='system_u:object_r:hwdata_t:s0\x00', 0xffd7, 0x1) 9.670709346s ago: executing program 4 (id=1238): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x801}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x5, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$MAP_CREATE(0x0, 0x0, 0x48) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) openat(0xffffffffffffff9c, 0x0, 0x141442, 0x100) r2 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r2, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r2, 0x1, 0x56bd338ab48f7b84, &(0x7f0000000000)=0x5, 0x4) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), r3) sendmsg$DEVLINK_CMD_RATE_NEW(r3, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)={0x34, r4, 0x1, 0x0, 0x25dfdbfb, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r2, 0x10e, 0x4, &(0x7f0000000640)=0x1800, 0x4) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000a40)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18060000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000003000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kmem_cache_free\x00', r5}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b708000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000181100", @ANYRESHEX=r4], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xa, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000a00)=ANY=[@ANYBLOB="442300003b0007010100000000000000017c00000400fc802b2301809665036d51de82b1", @ANYRES32, @ANYRES32], 0x2344}, 0x1, 0x0, 0x0, 0x20000000}, 0x4c000) 8.199494858s ago: executing program 4 (id=1243): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYRES32=0xffffffffffffffff, @ANYBLOB, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00'], 0x50) socket$inet(0x2, 0x2, 0x1) fcntl$dupfd(0xffffffffffffffff, 0x406, 0xffffffffffffffff) bpf$MAP_CREATE(0x0, 0x0, 0x48) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000a00)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000380)={r1, 0xffffffffffffffff}, 0x4) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0x18, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70500000000000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], &(0x7f0000000180)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000000)='kfree\x00', r3, 0x0, 0x4}, 0x18) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000140)=ANY=[@ANYRES32=r0]) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) semget(0x2, 0x4, 0x60) r4 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x1, 0x0, 0x0, 0x2) syz_clone(0x4021400, 0x0, 0x9000, 0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) io_setup(0x8, &(0x7f00000002c0)=0x0) prctl$PR_SET_NAME(0xf, &(0x7f00000001c0)='w\xde\xa3\x05\xff\a\x00\x00\x00\x00\x00\x00\x8f\xc0\x9b\x86\xef\\\xc0\x89\av\x9f\xd6\xd1\x98,\xc8\x18E/\x8c\x1a\xe3\xbd') r6 = signalfd4(r4, &(0x7f0000000200)={[0x100000001]}, 0x8, 0x0) io_cancel(r5, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x7, 0x5, r2, &(0x7f0000001340)="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", 0x1000, 0x7, 0x0, 0x0, r6}, &(0x7f0000000280)) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x200000005c832, 0xffffffffffffffff, 0x0) 8.118583519s ago: executing program 0 (id=1246): bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x5, 0x6, 0x8, 0xae, 0x0, 0x1, 0x20727ff}, 0x50) r0 = socket$kcm(0x10, 0x400000002, 0x0) sendmsg$inet(r0, &(0x7f0000000100)={0x0, 0x2, &(0x7f0000000080)=[{&(0x7f0000000140)="600000002e000d190a762d7f089e", 0xfca2}, {&(0x7f0000000280)="68cabf2dfb58fc0a1d6b689866f05d490d010088a8ffff0200258f2e4409b8f9e6aaeb88bea123dc2c6726e89b1ae2f6e8bcb5ee52dcd7298d39093c510293bca0b646a3ce904f6e6b788b3204c233e60ddc", 0x52}], 0x2}, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file2\x00', 0x200801f, &(0x7f00000000c0), 0x2, 0x4ee, &(0x7f0000000880)="$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") r1 = perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext, 0x0, 0x6, 0x7}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = socket$kcm(0x21, 0x2, 0x2) sendmsg$inet(r2, &(0x7f0000002780)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="140000000000000000000000020000000b000000000000002000000000000000100100000d000000070f8cac1414390a01010264010100001400000000000000000000000100000000800000000000001100000000000000000000000100000009000000000000001400000000000000000000000200000003000000000000001c00000000000000000000000700000094040100940401000100000000000000110000000000000000000000010000000200000000000000723a0b29fdad149d0d4185978aef78d7c056076d490b567bc474f5f8e7f947613f5a451609f434378377373a7e0fb3d9d62fe2fb1a"], 0xb8}, 0x4040) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000009c0000000b"], 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x3, &(0x7f00000002c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x6}}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x4c, '\x00', 0x0, @fallback=0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='kmem_cache_free\x00', r3}, 0x18) socket$nl_route(0x10, 0x3, 0x0) r4 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) r6 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x6, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18020000000000000000000000000000850000001700000095"], &(0x7f00000005c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000000c0)={r6, r5, 0x25, 0x0, @void}, 0x10) syz_emit_ethernet(0xfdef, &(0x7f0000000540)=ANY=[], 0x0) r7 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000011c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r7, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_QUERY_ROUTE(r7, &(0x7f0000000080)={0x5, 0x10, 0xfa00, {0x0, r8}}, 0x18) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000180)='kfree\x00', r9}, 0x18) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x40082406, &(0x7f00000001c0)='cpu&00\t&&') syz_open_dev$evdev(&(0x7f0000000040), 0x5, 0x20000) 7.826492903s ago: executing program 0 (id=1249): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'veth0_to_batadv\x00'}) mkdir(&(0x7f0000000140)='./control\x00', 0x5) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x400e, &(0x7f0000000300), 0x1, 0x440, &(0x7f0000000cc0)="$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") bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f00000001c0)='sched_switch\x00'}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=@base={0x12, 0x2, 0x8, 0xd0eb, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x4}, 0x50) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000280), 0x10000, 0x0) unshare(0x2a020400) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400}, [@call={0x85, 0x0, 0x0, 0x2}]}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000001740)={r2, 0x0, &(0x7f0000001700)=""/53}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000008c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r3}, 0x10) lsm_get_self_attr(0x67, 0x0, 0x0, 0x0) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="58000000020605000000000000000000000000000900020073797a3100000000050005000a000000050001000600000013000300686173683a6e65742c696661636500000c0007800800124005000000050004"], 0x58}, 0x1, 0x0, 0x0, 0x1}, 0x810) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000080)=0x1) r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) pwrite64(r4, &(0x7f00000000c0)='a', 0x200000c1, 0x9000) 3.488181938s ago: executing program 0 (id=1262): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_MEDIA_GET(r1, 0x0, 0x80) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="020000000400000008000000"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x5, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x73cea2d47785b264, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f00000005c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000730000007b1af8ff00000000bf"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r2}, 0x10) r3 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r3, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x808000, 0x4, 0x20300, 0xfc}, 0x1c) setsockopt$packet_rx_ring(r3, 0x107, 0x5, &(0x7f0000000100)=@req3={0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x861}, 0x1c) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) unshare(0x62040200) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)=ANY=[@ANYBLOB="4c00000002060108000034e40000000000000000050001000600000005000400000000000900020073797a3100000000050005000200000c12000300686173683a6e65742c706f7274"], 0x4c}}, 0x2) sendmsg$IPSET_CMD_ADD(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)=ANY=[], 0x50}, 0x1, 0x0, 0x0, 0x10000003}, 0x80) 3.487884398s ago: executing program 5 (id=1263): r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext, 0x0, 0x0, 0x8, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) sendmsg$TIPC_CMD_ENABLE_BEARER(0xffffffffffffffff, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000340)=@delqdisc={0x24, 0x25, 0x4, 0x70bd27, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0x8, 0xffe0}, {0xfff1, 0xb}, {0x7}}}, 0x24}}, 0x50) r2 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000000c0)={'dummy0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000005a40)=ANY=[@ANYBLOB="b400000010000904000000000000000000002200", @ANYRES32=0x0, @ANYBLOB="fffffffed9526cfd8400128009000100766c616e000000007400028006000100000600000c000200367da1650e000000280003800c00010001800000002000000c000100a1000000c84200000c0001000800000008000000340004800c00010006000000ff0300000c00010004000000080000000c00010004000000020000000c000100050000000300000008000500", @ANYRES32=r3, @ANYBLOB='\b\x00\n\x00', @ANYRES32], 0xb4}}, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r4, &(0x7f00000002c0), 0x40000000000009f, 0x0) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f00000004c0)='/proc/asound/seq/clients\x00', 0x0, 0x0) inotify_init1(0x800) setsockopt$packet_tx_ring(r5, 0x107, 0xd, &(0x7f0000000000)=@req3={0xffff, 0x94, 0x1, 0x9, 0x7, 0x5, 0x4}, 0x1c) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x4}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r1}, &(0x7f0000000180), &(0x7f00000001c0)=r0}, 0x20) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='kfree\x00', r6}, 0x18) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) 3.486875278s ago: executing program 2 (id=1264): r0 = socket$key(0xf, 0x3, 0x2) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r1}, 0x4) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000800)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70500000800000085000000b600000095"], &(0x7f00000007c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f0000000000)={'veth1_virt_wifi\x00', &(0x7f0000000140)=@ethtool_dump={0x3a, 0x0, 0xef8}}) r3 = creat(&(0x7f0000000040)='./file0\x00', 0x10) close(r3) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r4, &(0x7f0000001580)={0x0, 0x0, &(0x7f0000001400)=[{&(0x7f0000000080)="3bfdd75fa5717852d59a9367444a2130e72cd4dabc8854532cca0c32a5b9f844a4610c7525650ce3d3b76b15026d93e6dee896115e9364066aa3d14e33ef732b4681335c576902153114bdb9c74b538a71115fb1d1a63d1b04129661b29aab89d0be999a6b7c9bea755adedbf305a79f70b71d3d4c98577b49db4963ce89b0def5e840f459659cb6f86d56b069a5de11d601d348ff88ca6e5e2cfe40176880b33e9e8dbc32ba2e6a99b1b50276dc4f06166000d7069a3cc76f", 0xb9}, {&(0x7f0000000180)="892950e2405ee8629d9384a90f16d1706a3e61f305119f95cac0f1927f4c205b971eb41147cb1f86883d6910e68ac3996551800b3ec64b77f8444b18345a2c8b178eeeba0cde7319a5a46bfe7f5770e019efd9d52069edcced33a758c4e657f3a792dc193a1911b4e82ea800ad7afe03c851a8", 0x73}, {&(0x7f0000000200)="a68cde0d56b170df7710b54f17d9a39c4f98f3547190", 0x20000216}, {&(0x7f0000000240)="45e04400f2b383517a08c397dd0a76e67ecfc8e74573c24dedd3a48fb62418c1412fdcd15e888cb0f5d02e77bfecefda6b064c0bb2b66a9a522e63873dde02330510255eec7dfa1af708cdab59fb71eca786a359a2c3b0cbad35144ec5b069c53f90e43339845dc7fd140c55b0149ab38eb27c140f374bcc2c95b0b121d1a9302f3a01b888243b3fc0d46f0de0", 0x8d}, {&(0x7f0000000300)="87fb74cf4d67adbbd062637f514c1f5eb18d7b442e6457a356c6cb1f71a43dfae773c8489cce5145f92615d4bdb13ef54d6ae90ec7733180fcf5adf3e13fdb05b57b748bd14eda042a97fdd84498304a504a0a159b972e8200c2d0f536a3465ec498ed12b924bd134057df36129d3ebe3dd3ce9f0671e5278143e4afa3d43f444681de1b5f9725fca34fa357fe2154981666fb9dc202fc17a0199eb1c25bdd1005e590e84783ee9894c888998dc25a83c14aeee31d114acfa0bcd235d571cd765f4b9259ba43e6fc30291d8a642146c4771898030b736aeee6b247abb0784b154e104e7dcda401f9b1736fea30a41a4153fe6a9a525bd0a3487571f914f05b590e242341ade289d8f5b842c6be4a93c2755dfd47174def782a2f8f61c068b5a012f02c0801601e860def788121e8808c01fed4c920a3698d0d684920918c95b17f76bbcb4f265c931d8f79560ff8114b70f4dd6791e2ed70cfeb89905791b88be26efe1c5c66b7b50b3d2be0dbc066dfc31618f9507f6f340b85a2f76a6dcac9d6ccc289ace5e5fecd25afe22ffa451f5e365ab33cc985f2e9d7f7fb1be4794740a94215d7db14b0ffcec19e5e3c5ae0d8578ef3b65d2a7a77a11e390a6c3a6b391061c886b961e3c2f42d62047bfe1356a44b840d3d956105f4c0fa95db08c4933f00de77cdc057c28b41fecfc8398c442be1ad065954f6c9dfeb2fd7207e8548a00a1d50bdf522d2abfdafd71723616a34830fbfa8fc81e0c2639cc12f363a4919b7a00ac8189dad3e7e54122a2ef430f623658d5e281c9a19442995bb9b0e3f7d13e3016b6f9523be196bf23bbcc5ec802f43ef8b651d688d9d5a44f35c9847e4c32bce3e9ebed2326adadc76f06a195db32c80b3090d7cd65c9d8518ba4e528c5eb5c7a1c5695b21595fa8a8621734bfda8afddd65e1f37a1990220a00fa9bd2c22b0117ceb08ae6af3c944c2eca924abfddad065d1472d0c3f742a49b1e78c669471873706ad157d831d7482b773f07b0673a6ce1e227a7a4d13744bf459434c0ab1c323a38b1a84cbf1ce9741f2b8fdcc2e073e56171603d035aacd83e71d5132831f4f1e8bf517979f132a33fd03783272e9b8c96dfa4e1d320a58d82acfc8d3d53a5a52daafe4dc8be08f4ad53e11cc21374b6ff4ff5ea2ecc5d3f7c057f74f0098e57d990090475cdaffdef0da917653ed10fb70b94b72e5b4d95cbea0fc1dd2579635ad6ab545ba4d7b6d2f5442bdb78beb6c8ed62942a439117025b4566b48d9f3a17fdf4577e8606a4bc4c26557e58312fd2d1a541ebec3e5ae28eef8b2ab0597083716dd12889335570ee7839530eee879d9b137606cd4dd7103991671b4464bb68529eb19fb7a8845e3491bfbac688a87cf0744f429ea112014402915c4c1f6bae08d689d3cb7d641d7befe8fc74a2242310a9a367a39531b4c86da5b39df524e52f33ff9c40b48cb196ffc9ca855b6e698ade8a83e52b9ddc5031ff09e1907e4f8b0d07e64e1fb8e427f8819a7be907aa216bf8e2a4c7cc87ed53bf9490d4cc788b91f3b9f705e984a7e62c7a495e8421b97c39dc954b35468f17c6682334f4e16308448f457faeffff6d1f818522fa441d3a48168bdb12ffebace436a3915b63076cb6a655718647f87eaaf313b5bbd430421eed3a2215e439600a56eac8c65291eb103326a8034662bd337ab51577d9110ec7151be5cc9c54b2a30891acac5ad006ed537dbeb8f16eecbde7cf4e71373faf3c36b772f6d7ea9346875c8cf1049d49d4f8eb01b946c11e8c8e3ab2015f282167acddcc77fff03e1be9134252af0abfe538b4d25fc4ff874b52b9fb0996b5f32b4141dbd30578ff46e13ef6c63fc1620f62cb11a3dce401993976c272a5f62fde3f2a0e654d19e7a39dcdb622b9526d2a15cc18e6f817c916a00775353dd9c8954e66d0445b59bb0f5e6e3b46447232f52a0e398b057d123ef503afcbd48544db6434d2025bfc8dab72262a4fa5426a03061e7f8966e0086ff8ab5a91ab59f19b830394ee8bc76d6fb4816b8f4cde35b7eb9d3811228d51c54828f97fd1e648196c81bc73ed56249a59f318704e84656a6cedd2b8c1e1808d1cc648749abc643131e494c01336d4a14b8609656f2c972dc23c5c2e43fe40119fb88b5ec2aade35c03646e347354c493de8ab3672ccf94af0df333c6678299129d79be0eec281c5b3858ce3995566a390b674635b356692e3e9c53a089638ba0d69e772b7b410a5ae03de12e7de755ee559e1707b7b8003aabc8e2ce03c01e3183ff2d93262f6d5ceaafecdae66bc7cb3952c5a6571d864d502f281db5a228695badca5d022fdb6da56ab15dc377d1c1f8581ff56e28c2b2a84edb629547d28275c2ed571103b4ca7cdeb0776ba9f9dffcd78d21c3d4caa9289ed199672f4e7b912068c49c817114c37d37ea03954bae87d1ddae3da2ad85feb2fbb735b75a51f7bee5c8d88cc7bf64700d1a46ec6b631ae22ac7b06730a86a26bdcb992e1c7b50142de96b14a8468e4514068a30896fc677fddefaebb125c693a8d460469c7fe535f844781940f66d6abd091191c3122d584f5b0f5b0d443713d7d5186124d73de28aca30b719d4a55e09d259bddbf16995aeb1000880890afbd24d4066b0398985a40999de22ce176348e1c1f57eaf75b92a1e4f1482e89a00ac2cc36b20e36af9ec310599c19a5b1d6f8fadba104c58c801c6633315f82ebfa88faddd0b693e2f827f586c1cc5538e93bcf10f81af6dd7ee727df3b5018c0b4e31e40d040a47503b6ace4d29a1162ce487351825255f5584aff7cbd421f85c3d9fbb3784abd9848f16028b68f0d32ed8bb80106e8cc4acb939ff88bd39976d166b2addebf628b3fcd056da2f60e1b90f7a32702954921908ebccb683622a1f574ceba6951bef5e751c338c8279318dc28e36b9fc2bb17c3ad08aceb00fc388e6db112a738f86a4a1eb11526e1b9d73250b326285ed47c4398d93a3933d9a784249b65ad7d78a1f81d96ef36493ed693045a2150a8eb43cecc0c93e7d20b15b39a0646b081c2923b816365b7fbb41683a41732d942c5aa12faf876ec7f036becde8f3295af6dacff38d076d8e06260fee167703bb610745374a2758a6b88e465ca77d1f3105ae8b6b04a1eb509fb178d6249dbbc84d5d1d069278449a89d03e4a9a395d8170c329a296cfc329798cb9b9f1078d098cf3f989fd4ec53e013fbe917df35292d44fb1f3da4da4432a1847d4721514ade8cda5e5c0b51183580fc35266a970ebba74faeda56d4dcb56df51f96ad237452cedbd0cb2bee112713c3d450835811bf3da9745136d428e148fd0932dc77c8d8e61a16c625241fad8425b4ece394eedd5f165bd94923bfa1172be8edc8a4fcaae5f77ee8cc510192b27964da09c3e84efb4bc7154da1a24da8b7e544b42278d2574687ec76143afa6cf193d52a2a7f4c20ee57b6056a1337d5e408117a6cf1ab49c8980f39597f69902085d3e8d374d44e6ab4ed1185a26be2bc7281e9cfbbeb6bed899aa1924d3faa06d95999fbeaf2337494e0c2c39eef5a73fcde84459a9ea48d4e015d9e5bb5839354967ce02f637bc8678d2595b9a918fc36b927d7501f0ac2e3471ce02b5df355689c87f191ef5390900a41deec29984e45a878ece964b0009aad561316fc3b30ce1b49266d32eb17cd30f3e17e1f59014e8c518940dd0a093d1349c1a7c2581963bbe0ba372b6426e81c33c71b2ec8141c5713e52a37fff0a417a5b259e1420d9fb6a731f5baa0cc494221947895aa8fa14745a986a366bff9d0c239a19f85372497565b5b703da16439019df5f3d29f4247fb528854c9648630f03e9dedde5a08a47728ea6a4d42e62eff6fa3bd402325e0f4387b60171c37c180f958ad80955779c899517e7ea76eed00598e01552eaaf08b723daf9d466e8c57af43a15a46528b1119f5074aa3c51f77357ebe158275bc06b89640d7ce3c0a03af01418d7dc6ae8a1be8ab08c1722d66d1e9277480b8b178447667c024f9b78f8a878a2d7cf8e83e5104f6964b2907a989abafc7d7d0df941abf3d7283b6a11d46c2911a42182ec27ab785d92946e1ee8ef44846d561850d2a98c305c382f36d4cfc9b2bfd3b86ef21a0d187adcafbec8268c7d662a34dda1c83c4967097743133bc8c587edf249f5668c34ddb112fa4eb1bea9c8f6a000f1f34428b54688a5e214a7919868b25dbe930e86a243ecf54afe0b518c647d04873d2cf62cb2ab27f00015537a4fd2ea3dc8777abdf3284622347016566da0b9c406ca8c40694e4013a53fbf2e803d51b0bbe5e9df5fc74f66be618856357ccf803c53ed0e3b3fe79f69f0ede9b565d8f7a8ce5aa8cbb4e8fa61be3fd00ffb07e45065498925c14c0b311942d4ed951ad6237aadb5405bc7b2d79e1fd295b7c2ed8efa883e44c86a5053e2f421c6d4dc0c47d3a05d911db37d6efdb8e50fb3f06139ac147bc7162c21aece79eaf72e9779f19eb5395cec3d15a7594ea70a6b373d98651d2215b210f037ea3f8a57ded74474f6fdb64a08b56af52168da70b30aee03472cd8bee5af04cad7303004a4aba464b99", 0xcb3}], 0x5, &(0x7f0000001480)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @private, @multicast1}}}], 0x20}, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000240)=ANY=[@ANYBLOB="180000000000000000000000000092fc180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000002000000b703000000090000850000000400000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x22, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r6}, 0x10) eventfd(0x1) mmap(&(0x7f0000fec000/0x14000)=nil, 0x14000, 0x2, 0x31, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000001300)={r6, 0x0, 0xaf, 0x9f, &(0x7f0000001080)="be82a83a9d22d420ee85d24d671d228b3708502bb3c09d97708a510f2ea9efe3668931401c0ddb9117e21427c844915339e93d1e81878bff7c9d27562f63c310c49d6b84920141754bc844df9811db9a1a9cbc72cd238f8fa9b07b4f44a28a87df9994fb3e7615cf26f9240a8155de8093c6b2f50e31055a7eafb63f909106184ab8c9e106a3b4e93c3fcb6a23555230139d44701ccab16cc2a5d57e123543942691eeecdf2f38ae4c367930e2e177", &(0x7f0000001180)=""/159, 0x0, 0x0, 0x4a, 0x84, &(0x7f0000000fc0)="cdf4720caa2034092a404a47aa82cc755bc8e5bd89fc3cefaa0b6aeed8f5e61049c8e6f44685b05ada1eb75229a7aad8aa5ca6099e2051410a7e4ec73cde7a57e1425eb0f3f691e120c1", &(0x7f0000001240)="bd496212a0078fe22addac619a01700325ad16a49ab3327652d63d7534a32b12bc59eb3ec0502047fdb62fd38859d36d9186e376a4ffb467f5de7e48205e701c5034b5961e9f3ee093ed340e502f573b03c32fc212ccc1c9887e53625603f4990b18f9f5754d935dee7f936d002e33e82a1f017d8114c0e630ca48afbbf0eb1b5a7dde6e", 0x2, 0x0, 0x7}, 0x50) r7 = gettid() process_vm_writev(r7, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0xf7}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xffffff4e}], 0x23a, 0x0) recvmsg$unix(r5, &(0x7f0000001140)={0x0, 0x0, &(0x7f0000001040)=[{&(0x7f00000015c0)=""/4096, 0x7ffff000}], 0x1}, 0x40000100) r8 = getpid() r9 = syz_pidfd_open(r8, 0x0) mount$9p_fd(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f0000000380)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r9}}) sendmsg$key(r0, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000100)={0x2, 0x3, 0x0, 0x3, 0xd, 0x0, 0x700, 0x0, [@sadb_key={0x3, 0x9, 0x68, 0x0, "01d78771b90bd8a3b4914783c5"}, @sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x0, @private}}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x2, 0xd}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @dev}}]}, 0x68}, 0x1, 0x7}, 0x0) 3.393463299s ago: executing program 3 (id=1266): r0 = fsopen(0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) fsmount(r0, 0x0, 0x0) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xf, &(0x7f0000000440)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x1}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001580)={&(0x7f0000000180)='kmem_cache_free\x00', r2}, 0x10) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000900)=ANY=[@ANYBLOB="440000001000090600"/20, @ANYRES32=0x0, @ANYBLOB="adffa888000000001c00128009000100626f6e64000000000c000280050001000600000008000a00"], 0x44}}, 0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r4, &(0x7f00000000c0)={0x2, 0x4e20, @empty}, 0x10) sendto$inet(r4, &(0x7f0000000140), 0xffffffffffffff58, 0x20008005, &(0x7f0000000100)={0x2, 0x4e20}, 0x10) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r1, 0x84009422, &(0x7f00000015c0)={0x0, 0x0, {0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) shutdown(r4, 0x1) recvfrom(r4, &(0x7f0000000000)=""/116, 0xffffffdd, 0x734, 0x0, 0x0) getpgrp(0x0) getdents64(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) getdents(0xffffffffffffffff, 0xffffffffffffffff, 0x5a) recvmmsg(0xffffffffffffffff, &(0x7f0000000480)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=""/11, 0x17}}], 0x400000000000179, 0x0, 0x0) lsetxattr$security_selinux(&(0x7f00000001c0)='.\x00', &(0x7f0000000300), &(0x7f0000000280)='system_u:object_r:hwdata_t:s0\x00', 0xffd7, 0x1) 2.981797585s ago: executing program 3 (id=1267): setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x4, 0x0, 0x0) syz_io_uring_setup(0x1bcf, &(0x7f0000000040)={0x0, 0x86f7, 0x200, 0x0, 0x2bf}, &(0x7f00000000c0), 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0xa6c3, 0x0) fcntl$setlease(r0, 0x400, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18080000000000000000000000000002850000000f000000850000002a00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={0x0, r1}, 0x18) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r2, 0x8923, &(0x7f0000000000)={'vlan1\x00', @broadcast}) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1e0000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0x2, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffc89, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r4}, 0x10) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r5, 0x10e, 0x1, &(0x7f0000000400)=0x1, 0x4) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r6, 0x6, 0x4, &(0x7f0000000180)=0x4, 0x4) r7 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r7, 0x29, 0x23, &(0x7f0000000180)={{{@in=@private=0xa010102, @in=@dev={0xac, 0x14, 0x14, 0x13}, 0x4e20, 0x0, 0x4e21, 0x2, 0x2}, {0x0, 0x1}, {}, 0x0, 0x0, 0x1, 0x0, 0x9833bf88d1b218f5}, {{@in=@empty, 0x0, 0x6c}, 0x0, @in6=@loopback, 0x0, 0x0, 0x1, 0x7}}, 0xe8) connect$inet6(r7, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}, 0x1c) lsetxattr$system_posix_acl(&(0x7f0000000000)='./file1\x00', &(0x7f00000003c0)='system.posix_acl_access\x00', 0x0, 0x0, 0x0) 2.980679186s ago: executing program 5 (id=1269): syz_open_dev$usbmon(0x0, 0x1, 0x10280) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000000c0)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0xc2354000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f0000000040)={0x0, 0x7, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r3, &(0x7f0000000180)={0x7, 0x8, 0xfa00, {r4, 0x9}}, 0x10) close(r3) setregid(0xffffffffffffffff, 0x0) setuid(0xee01) syz_io_uring_setup(0x109, 0x0, 0x0, 0x0) chdir(0x0) r5 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_int(r5, 0x0, 0x33, &(0x7f0000000000)=0x80000000, 0x4) listen(r5, 0x0) 2.881664587s ago: executing program 3 (id=1270): r0 = syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000001100)='./file1\x00', 0x0, &(0x7f0000000200)={[{@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x4}}, {@usrjquota}, {@errors_remount}, {@dioread_lock}, {@max_batch_time={'max_batch_time', 0x3d, 0x5}}, {@mblk_io_submit}, {@minixdf}, {@barrier_val}, {@nombcache}, {}]}, 0x45, 0x7b6, &(0x7f0000001140)="$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") faccessat(r0, &(0x7f00000000c0)='./file1\x00', 0x1) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000140)={0xffffffffffffffff}, 0x111, 0x9}}, 0x20) write$RDMA_USER_CM_CMD_BIND(0xffffffffffffffff, &(0x7f0000000540)={0x14, 0x88, 0xfa00, {r1, 0x30, 0x0, @in6={0xa, 0x4e24, 0x31, @private2={0xfc, 0x2, '\x00', 0x1}, 0x1}}}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xa, 0x6, &(0x7f0000000600)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x94) mkdir(0x0, 0x0) r2 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0) write$UHID_CREATE2(r2, &(0x7f00000007c0)=ANY=[@ANYBLOB="0b00000073797a31000000dfff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a30000037b35f0a000089b4c45a10000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a3100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001"], 0x119) r3 = syz_open_dev$hidraw(0x0, 0x0, 0x14a042) ioctl$BTRFS_IOC_SCRUB(r3, 0x4004480d, 0x0) acct(&(0x7f0000000200)='./file1\x00') r4 = fspick(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0) fsconfig$FSCONFIG_SET_FLAG(r4, 0x0, &(0x7f0000000080)='ro\x00', 0x0, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r5, &(0x7f0000514ff4)={0x10, 0x0, 0x25dfdbfc, 0x2ffffffff}, 0xc) r6 = socket(0x2a, 0x2, 0x0) sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) getsockname$packet(r6, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000000)=@newtfilter={0x4c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {0xfffa, 0x2}, {}, {0x1c, 0xfff9}}, [@filter_kind_options=@f_flower={{0xb}, {0x1c, 0x2, [@TCA_FLOWER_KEY_ETH_TYPE={0x6, 0x8, 0x800}, @TCA_FLOWER_KEY_IP_PROTO={0x5, 0x9, 0x84}, @TCA_FLOWER_KEY_SCTP_DST={0x6}]}}]}, 0x4c}}, 0x24004000) r8 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r8, &(0x7f00000002c0), 0x40000000000009f, 0x0) fsconfig$FSCONFIG_CMD_RECONFIGURE(r4, 0x7, 0x0, 0x0, 0x0) 2.167865768s ago: executing program 2 (id=1271): r0 = open(&(0x7f0000000240)='./file1\x00', 0x145142, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000003200)=ANY=[@ANYBLOB="1e0000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f00000018c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x41}, 0x94) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x161281, 0x0) write$binfmt_aout(r2, &(0x7f0000000080)=ANY=[], 0xff2e) ioctl$TCSETS(r2, 0x40045431, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, "0040001e1d113c812e5d6000"}) r3 = syz_open_pts(r2, 0x0) dup3(r3, r2, 0x0) ppoll(&(0x7f0000000140)=[{r2}], 0x1, 0x0, 0x0, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000040)=0x3) ioctl$TCSETSF(r3, 0x5404, &(0x7f0000000180)={0x38000, 0x8, 0x0, 0x2, 0x5, "aa32b73986bbee6bd231334cbfa0b758261a93"}) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r4}, 0x10) r5 = syz_open_dev$tty1(0xc, 0x4, 0x2) ioctl$VT_RESIZE(r5, 0x5609, &(0x7f0000000180)={0x65f5, 0x1, 0xff}) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r0, 0xffffffffffffffff}, &(0x7f0000000040), &(0x7f00000001c0)=r4}, 0x20) r7 = syz_open_dev$vcsn(&(0x7f0000001700), 0x5, 0x2000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001800)={0x11, 0xc, &(0x7f0000000280)=@raw=[@func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffe}, @initr0={0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff}, @map_val={0x18, 0xa, 0x2, 0x0, r1}, @btf_id={0x18, 0x5, 0x3, 0x0, 0x2}, @tail_call={{0x18, 0x2, 0x1, 0x0, r6}}], &(0x7f00000014c0)='GPL\x00', 0x839, 0xfd, &(0x7f0000001600)=""/253, 0x40f00, 0x4c, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000001500)={0x7, 0x4}, 0x8, 0x10, &(0x7f0000001540)={0x2, 0x3, 0xfffffff6, 0xa3}, 0x10, 0x0, 0x0, 0x6, &(0x7f0000001740)=[r7, r0, r0, r1, r1, r1, r0], &(0x7f0000001780)=[{0x3, 0x3, 0x4, 0x6}, {0x4, 0x4, 0xd, 0x9}, {0x0, 0x2, 0x4, 0x4}, {0x2, 0x1, 0x6, 0x2}, {0x1, 0x4, 0x4, 0x1}, {0x2, 0x2, 0x2, 0x8}], 0x10, 0x5}, 0x94) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) prctl$PR_SET_NAME(0xf, &(0x7f0000000140)='+}[@\x00') r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000300)=ANY=[@ANYBLOB="620af8ffa1dc0021bfa100000000000007010000f8ffffffb702000007000000bd120000000000008500000010000000b70000000000000095000000000000003faf4f2aa3d9b18ed812a2e2c49e8020a6f4e0e4a9446c7670568982b4e020f698393aa0f3881f9c24561f1b2607995daa56f151905ea23c22624c9f87f9793f50bb546040677b0c5077da80fb982c1e9400e693146cea484a415b76966118b64b751a0f241b072e90080008002d75593a286cecc93e64c227c95aa0b784625704f07372c29184ff7f4a7c0000070000006056feb4cc664c0af9360a1f7a5e6b607130c89f18c0c1089d8b8588d72ec29c48284b70043dc6124d877142a48448b45e0000000000000401d01aa27ae8b09e00e79ab20b0b8ed8fb7a68af2ad0810000000000006fa03c6468978089b302d7ff6023cdcedb5e0125ebbcebdde510cb2364149215108337719acd97cfa107d4023f210fa34b63a715a74e802a0dc6bf25d8a242bc6099ad2300000480006ef6c1ff0900000000000010c63a949e8b7955394ffaff03000000000000ab87b1bfeda7be586602d985430cea080000000000000026abfb0767192361448279b05d96a703a660581eecdbf5bcd3de227a167ca17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c9b081d6a08000000ea2b1a52496dfcaf99431412fd134a996382a1a04d5bb924cfe5f3185418d605ffff9c4d2ec7c32f2095e63c80aff9fa740b6c7632d5933a1c1fa5605bd7603f2ba2a790d62d6faec2fed44da4928b30142ba1fde5c5d50b83bae616b5054d1e7c13b1355d6f4a8245ffa4997da9c77af4c0cb97fca585ec6bf58351d578be00d952aab9c71764b0a8a7583c90b3433b809bdb9fbd48fc877505ebf6c9d13330ca006bce1a84521f14518c9b476fccbd6c712016219848624b87cec2dbe98223d8d9e86c5ea06d108d8f80a0eb4fa39f6b5c02e6d6d90756ff578f01000000009700cf0b4b8bc229413300000000000000000003000000000000000000000000001000000000559711e6e8fcffffffffffffffb2d02edc3e01dd271c896249ed85b980680b09000000000f0000169cdcacc413b48dafb796ffffffd897ef3b7cda42f93d53046da21b40216e14ba2d6af8656b01e17addaedab25b30002abbba7fa725f38400be7c1f001b2cd317902f19e385be9e48dccf1f9f3282830689da6b53b263339863297771d74732d400003341bf4a00fc9fec2271ff01589646efd1cf870cd7bb2366fde4a594290c405ff870ce5dfd3467decb05cfd9fcb32c8ed1dbd9d30a64c108285e71b5565b1768ee58969c41595229df17bcad70fb4021428ce970275d13b78249788f11f761038b75d4fe32b561d46ea3abe0fa4d30dc94ef241875f3b4b6ab04000000ffe760e717a04becff0f719197724f4fce1093b62d7e8c7123d890decace0200f404e4e1f74b7eed82571be54c72d978cf906df0042e36acd37d7f9e109f2c06f815312e0cfe222a06f56dd022c074eb8a322fb0bf47c0a8d154b405c37feaf3dd95f6ef29cd1fe582786105c70600000000000000b7561301bb997316dbf17866fb84d4173731efe895ff2e1c5560926e90109b598502d3e959efc71f665c542c9062ece84c99a061887a20639b41c8c12ee86c50804042b3eac1f871b136345cf67ca3fb5aac518a75f9e7d7101da841735e186c489b3a06fb99e0347f23a054de2f4d92d6bd72ee2c9fdc75aaaf0100483b4ad05573af403269b4a39ce40293947d9a631bcbf3583784acbda216550d7aec6b79e30cbd128f91e358c3b377327ac9ecc34f24c9ae153ec60ac0694da85bff9f5f4df90400000000000000d6b2c5ea1393fdf24285bf16b99c9cc0ad1857216f1a985f369191ae954febb3df464bfe0f7f3ee9afe7befb89d2777399f5874c553aeb3729cffe86e669261192899d4562db0e22d564ae09bb6d163118e401e024fd452277c3887d6116c6cc9d8046c216c1f895778cb26e22a2a998de44aeadea2a40da8daccf080842a486721737390cbf3a74cb2003016f1514216bdf57d2a40d40b51ab63e96ec8485b3b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde8a168c3f5db2fea6f26e4a4304e50c349f4f9ecee27defc93871c5f99a3594191e104d417e60fc3541a2c905a1a95e9571bf38ae1981c4238ecaee6f75cd0a6881bd1517a8250df98674152f94e32409e2a3bce109b6000000000000a1fec9000000d694210d7560eb92d6a97a27602b81f76386f1535bef1497f92186086e29c6bc5a1fad6ec9a31137ab79a404abde7750898b59270bb29b81367ac91bd627e87306703be8672d70d1ab57075228a9f46ed9bd1f00fb8191bbab2dc591dda61f7a45319f18101288a0268893373750d1a8fe64680b0a3fc22dd704e4214d00000000d6c98cd1a9fbe1e7d58c08acaf30065b928a31d2eca55f74a23641f61f2d5b308cf0d031b0c7f0ce21d69993e9960ff5f76015e6c354463d7d0917fc80e5009756237badf4e7965bbe2777e808fcba821a00e8c5c39609ff854356cb490000000000c1fee30a3f7a85d1b29e58c77685efc0ceb1c8e5729c66018d169fc03aa188546b3ad2a182068e1e3a0e2505bc7f41019645466ac96e0d0b3bc19faa5449209b085f3c334b47f067bbab4000000000000000028df75cf43f8ecc8d37b126602111b40e761fd21081920382f14d12ca3c471c7868e7da7eaa69eb7f7f80572fdd11bb1d070080fbc22bf73468788df51710eb0b428ee751c47d8e894f745a868404a0bf35f0121008b722b1eaa6aedfa1bf2e7ccb2d61d5d76331ff5e20fa26b8471d42645288d7226bbd9c9e9e1cc9eb3d541e407cc2dae5e690cd628ab84875f2c50ba830d3f474b079b407000000deff000040430a537a395dc73bda367bf12cb7d81691a5fe8c47be395656a297e9df0e71b967ce7daac4be290159f6bcd75f0dda9de5532e66ae9e48b0ed1254a81faae79b6af6fbb869604d51de44c4e0973171ad47d6c00ebc7603093f000000fdec743af930cd6db49a47613808bad959719c0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f15d6533f78a1f4e2df4ca23d867693fd42de9b49a1b36d48a44ba6a4530e59bec53e876dc660dd63bed8d31c31c37a373d4efd89fa516dab183ee65744fb8fc4f9ce2242e0f00000000010000000000000000000057d77480e0345effff6413258d1f6eb190aa28cbb4bafe3436b176c7ed4b132fb805d5edd9d188daf28d89c014c3ecca10ae55704544673e1fa03b84f63e022fe755f4007a4a899eaf52c4f49198e97c862e29e4570600000091c691faee1e0c8fe056a07474e6e5490a7d3c3402000000b60600d837c6befc63ddf2f594ad7cbc56a1e44d218c956a5392a995f1fae8e9f206efbb33854dc70104d74dc07748f9745cb796da2dfb714a0500000000000000faed94fc39acfb3fd25dfa8116a154cd1226e1bb72b59fed817072a0da60160761fd3dffda0f7c592eabd8ab68334d2a1693cb187539049e331272bf5135044df8161400211b8012b6eb1ed5656e83f65509bb4b323c5bd61bff949d3bade2f6ffda1360c2786e16937ab61d6dcafed319c716357d0885f9c6d1f442954c167dd9b4acd9468ce3674c82bbb2e31389179b025dbe063b7f906217b2cf8410c7023aa3e5cc3ba1000000000000000000000000000000006ae6301a2da44394275c582a6516bb92ea1980a0a659f2f1811c8b281c209647c4241f292b20508b215dde27bb2487a6e2b5e4a8ccfab90c23827ef06cbe364073005f8a6d1456aaeb85ffb7858f24eced67a67ab825e863928ed64c83f62ffdaa997657335b63c6b4163aff094059e626766845fd779c9e6cdbbd64c24936615ee68538e8fddd0d90f3a7579579a142c0f7b318264d5c13c31cf475829528267ead38523cab7e1664e8426cfce471fef821c8a02a7e7d954d05b68a9c28f79429b09e2bb3681ae2b831e27c735123361c193d66ed4d71f19b199d371ec6bfada7cd370e3fdd3cd980fa1e145fd3f3e96b1feb53c865e1ada08f5d16ed652ee0c7f45352222692fbd679212c225d097aa90f7e1fb1f983415f43e75a19ecf7fd21bfa150ef563aa72ba1c43c5f3d9be128ec26b691f31f9cab931631606a81622f120675c962be2d3b5e95f74f0b209e42e6bdd76e6e725295b1d78d928f6f63c41cbde2ba66ad81168070c8c6e18a6e452a31bde54ad3e16304d06a234f5f9311ef0f78924b68dbb4712efdb6974667bdb54f16fd2061b9ba93638dd177227e94e4ebd0ec1d437db948062bf41742000000000000000000305f70dd02fa0c61d5fe6d8ff35389246037e18d34c1375ae04f44f0c2543c772c5ccb137be7dc1874c514b37c668554d77d4ea5ed144a648257f4a0301067bbcd9b91072659d872f26b796e2b81025edb5f45f785e2c2602b248ecdd80f019ca659be7e8ae953325a27564f33c9d458a60be3dab38baab7eb1a66ab1ffd6308f7fd51beb356fe75eb985b7581bb5584c53984ba9c7340f97e8d3825681c53de5f554e595b00000000000000006a8fa9f05d64c4be42f981f00051a39938613067dbd1427e01bfec016e51844cefa8a855bf23ac887b4a88eed6d9443857242f28e31a41d20105fbf3394ff910e734b4d9101265ff729c426e01c1ab13dda8c388b9e6626f19eecb87e39175e85eff010000000000000000009431807e43886903526074e6b40244c938a4c68a38c25ddd7c143b3f14eafe4b28ec66815cf8d1f56aa1424bc9b5d58790298e5b310969e50c222563b54e60854e1bfeef448aca8c5ccbf5546ce4c3cd5a733fec25fb94e1e0f966bcbd28a4d8fe4f556eaa1104a793006619700798354c6ae05025040965e3083562bfa20968c04007d21dc02c9fd1f75e1ff40f439bdde4e784012e52049b483d02f81b88f5f57816b3fecec79cfca8d37203e769759d6b6a56b7605ced8ee18475a77ff0963a565fb6021d216c01b1099e40550a1cfd80e918d685a7b099a4f8ed654cd76ca61fe5ad8a31ec558fdbfa706d5e738bceae81fe777c307d5bc72183a4c2d35732ab916a781b9912160a3fd2a2e74dd690c57bdfdc1f069f9491bca7a8c59363799be70018c25ece5ad7307dc7a95c51bc25a8bbe2cf5ddf6aa161693782b0e7feb8a768f391b49d4c978c96dbb52f21c122eba9f17c8bed10591958cf06321a248b5f76ceedfe0d080d6aeadc11b237b3326dd04b86ac37c0d131544888db9e128d059761ad9a393e96c3b41c13c5a381bff187a75de560ba6eb3faa5ff8d2bb3c88f8de5efc2fb2200cfda6d07ceae22577064334fbf76a23e62e6059211d995b879f6b7d3f7fcf03652b81e6b7cdeff947ad185d3c6269ca247b429c3b872a8f1ef60407d29a874f4ec31c9effed55543a65a6b4d778cebcd43b7905f3960140bd783540a7353014bda8e9c7a34a5f428fd1f8eb11e837dd9d586487fdebcb1ecd3a003ff0fda4be617fecf1ff0ef2cdfb7fea73ca18874664d60a4b9423f3297bc8eb91b4ee1d73272abbef3e7a828a7d7ab055a8eb58fe379de85338304e26e3620941b463e9049fd105c74c91cc4d71b0f76e2c2e4825106aa7ce2a3adbbc7a0443ece58e752b47e6f677ec97c5c568a89d6e36b165c391339878b699644c96bd6ea589765ed2a0f27080ece2a94c320b002c77f82662675a7713c7067081cac15994698c41ff4754268ae2676384ff799783f55d7e5a1a092a01b965dc99cb7a9d98440c355927629f2bcf9dc2396eb2f5d25829715b24327642ac4741201014a95e0e65e12cdf27e19043e3c5d3e798375cead35b9a93190a52cdecaaccc854a1d41ef365303f0e9b4fc969c9dab6d00000000000000000000008f6555f3b7d5021dfc8eb504f1e4fef716d60f0d50b03fc014fd3dff46f56750f0ba4f1b9f7de5c17e7d1f18522897edab8e9e76b667ec6b01908400f55e16f0cfbf026be5f5acc681053f697d62b3545aec4606e190216c22c1d8807b6c43f0f0a4b53619fe5c9412821c3816194a5e29cf12cc7a197b5bdafb096d2d7f6be483814c92ef29c3a21c169794c7de3b4c706f4de5f4b93c831944c7b66fa49f317aa22dbc211e19f031c4f8bee14ecd5eb061a052044adc4dd1b63a1500a9c0e09dbba23f2726a55975efb4519d864d984dcb3a1dcafa1124a6b004029a706478df3be2438d2e35e6ca674dc190143a0b6f7db3408c0c08011e5d8f54711a0bd410ab53a15b1596cb77d2b58df2d8d8"], &(0x7f0000000100)='GPL\x00'}, 0x41) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001580)={&(0x7f00000015c0)='kmem_cache_free\x00', r8}, 0x10) sendfile(r0, r0, 0x0, 0x800000009) 1.94239944s ago: executing program 5 (id=1272): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000340)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x9, 0x4, 0x7ffc0002}]}) prctl$PR_GET_PDEATHSIG(0x2, &(0x7f0000000240)) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000001c0)='./file2\x00', 0x404, &(0x7f0000000300)={[{@init_itable_val}, {@jqfmt_vfsold}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x6a}}, {@jqfmt_vfsold}, {@minixdf}, {@quota}]}, 0x3, 0x42f, &(0x7f0000000940)="$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") lsetxattr$trusted_overlay_upper(&(0x7f0000000100)='./file1\x00', &(0x7f00000000c0), &(0x7f0000000040)=ANY=[], 0xfe37, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x3000046, &(0x7f0000000440)={[{@delalloc}, {}, {@barrier_val={'barrier', 0x3d, 0x3}}, {@prjquota}, {@nouid32}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x4007b1}}, {@noblock_validity}, {@noblock_validity}, {@debug_want_extra_isize}, {@user_xattr}, {@bh}, {@dioread_nolock}], [{@fowner_eq}, {@euid_lt}, {@measure}, {@euid_eq}]}, 0x1, 0x567, &(0x7f0000000b00)="$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") openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42042, 0x14a) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="0a00000004000000060000000c00000002000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000000000000000055c67c9b29e4339000"/33], 0x50) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) ioctl$FS_IOC_GETFSMAP(r2, 0xc0c0583b, &(0x7f0000000d40)={0x0, 0x2904c, 0x3fffffffffffe52, 0x10003, '\x00', [{}, {0xffffffff}]}) ioctl$PPPIOCSACTIVE(r2, 0x40107446, &(0x7f0000000600)={0x2, &(0x7f0000000580)=[{0x6, 0x5, 0x9, 0x9}, {0x8, 0x6, 0xfb, 0x80000000}]}) r3 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r3}, 0x10) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f0000000840)=ANY=[@ANYBLOB="0173699b332d3986e9d4fc08378dec4d9dcd494c83932fab7b1f5ea41856c256b3fa3c2a6061f64242487676ffdb9e973b1561c8ed12f0c1be29b06789fe49beabf8115b34a27c716cb8d0a5f7926bef110e6aff7c9609f95f85684cb83901147c3ef049763c11a24068f6bd2ae2ed55a754b9ca9f19b13513c2c843a9fea3fe5da1a83cc8d272d66c4dc297b979b5009243ca414b57a74c7e39fa04b7e95f5ed5bc8880f8739baabea45047"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x5a, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000280)={r4, 0xfeffff, 0x102, 0x0, &(0x7f0000000700)="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", 0x0, 0xf0}, 0x50) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000080850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000280)='kmem_cache_free\x00', r5}, 0x18) r6 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r6, &(0x7f0000000200)={0x28, 0x0, 0xffffffff, @host}, 0x10) splice(0xffffffffffffffff, 0x0, r1, 0x0, 0x1, 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000140)='/sys/power/disk', 0x105000, 0x28) vmsplice(r0, &(0x7f00000005c0)=[{&(0x7f0000000180)="04", 0x1}], 0x1, 0x6) ioctl$sock_inet_udp_SIOCINQ(r1, 0x541b, 0x0) 1.719655244s ago: executing program 2 (id=1273): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000020000000000000000180900", @ANYRES32], 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = memfd_create(&(0x7f0000000000)='\xf3e\t\x9f\x918\xc0y\x01c\x1fnux\x00sV\ad\xb0l \xfd\xd7\x8e\x7f\x89\xb8\xc5;~\x04\x03~K\xfbP\x84=\xfa\x81\f\x1et\x10\x0e\xcf^9\xbe\\', 0x0) pwrite64(r2, &(0x7f00000008c0)='/', 0x1, 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x4, 0x11, r2, 0x0) lseek(r2, 0x0, 0x4) sendfile(r2, r2, &(0x7f00000001c0), 0x7fa) symlink(&(0x7f0000001000)='./file0\x00', &(0x7f00000000c0)='./file0\x00') rename(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280)='./file0/file0\x00') bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000002080)={&(0x7f0000000040)='fsi_master_aspeed_opb_write\x00', r1, 0x0, 0x5}, 0x18) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000240)=ANY=[], 0xe8}}, 0x0) close(r0) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0xf, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018000000", @ANYRES32], 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="190000000400000008000000"], 0x48) r3 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r3}, 0x0) pipe(&(0x7f00000001c0)) openat$tun(0xffffffffffffff9c, 0x0, 0x42001, 0x0) io_setup(0x3ff, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x0, 0x200000005c831, 0xffffffffffffffff, 0xd85fd000) 1.629714195s ago: executing program 3 (id=1274): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={0x0, r0}, 0x18) alarm(0x7) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000180)=ANY=[@ANYBLOB="1800"/14, @ANYRES32], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000d00)={0x11, 0x4, 0x0, &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffd}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@base={0x12, 0x4, 0x8, 0x2}, 0x48) bpf$MAP_LOOKUP_ELEM(0x1, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) clock_getres(0xffffffea, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x36, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0xd}, 0x0, 0x10000, 0x0, 0x9, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r1, 0x800448d4, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) write$selinux_load(0xffffffffffffffff, 0x0, 0x65) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f00000005c0)=ANY=[@ANYBLOB="4c000000020601080000000000000000000000400500010006000000050005000200000005000400000000000900020073797a310000000011000300686173683a69702c6d61726b"], 0x4c}}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000a00)=ANY=[@ANYBLOB="480000000906010200000000000000000700ffff200007800c00018008000140e000000208000a400000000105000300020010000900020073797a31000000000500010007000000b752ed6fdce36883cfc7b83b0e654e9886550cc5"], 0x48}, 0x1, 0x0, 0x0, 0x800}, 0x40c0080) 1.460694567s ago: executing program 5 (id=1275): r0 = fsopen(0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) fsmount(r0, 0x0, 0x0) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xf, &(0x7f0000000440)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x1}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001580)={&(0x7f0000000180)='kmem_cache_free\x00', r2}, 0x10) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000900)=ANY=[@ANYBLOB="440000001000090600"/20, @ANYRES32=0x0, @ANYBLOB="adffa888000000001c00128009000100626f6e64000000000c0002800500010006000000"], 0x44}}, 0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r4, &(0x7f00000000c0)={0x2, 0x4e20, @empty}, 0x10) sendto$inet(r4, &(0x7f0000000140), 0xffffffffffffff58, 0x20008005, &(0x7f0000000100)={0x2, 0x4e20}, 0x10) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r1, 0x84009422, &(0x7f00000015c0)={0x0, 0x0, {0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) shutdown(r4, 0x1) recvfrom(r4, &(0x7f0000000000)=""/116, 0xffffffdd, 0x734, 0x0, 0x0) getpgrp(0x0) getdents64(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) getdents(0xffffffffffffffff, 0xffffffffffffffff, 0x5a) recvmmsg(0xffffffffffffffff, &(0x7f0000000480)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=""/11, 0x17}}], 0x400000000000179, 0x0, 0x0) lsetxattr$security_selinux(&(0x7f00000001c0)='.\x00', &(0x7f0000000300), &(0x7f0000000280)='system_u:object_r:hwdata_t:s0\x00', 0xffd7, 0x1) 1.162231692s ago: executing program 3 (id=1276): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000001440)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r4, 0x0, 0x100}, 0x18) bind$inet(r2, &(0x7f0000000240)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x2c}}, 0x10) sendmmsg$inet(r2, &(0x7f0000003cc0)=[{{&(0x7f0000000140)={0x2, 0x4e20, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000d40)=[@ip_retopts={{0x10}}], 0x10}}], 0x1, 0x44008004) sendmsg$nl_route_sched(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000001e80)=@newtaction={0x48, 0x31, 0x1, 0xfffffffd, 0x25dfdbfb, {0x0, 0x0, 0x11}, [{0x34, 0x1, [@m_police={0x30, 0x1, 0x0, 0x0, {{0xb}, {0x4}, {0x4}, {0xc, 0x3, {0x1}}, {0xc}}}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x8800}, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r5 = socket(0x400000000010, 0x2, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r7, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x4000) bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0x3, &(0x7f0000000280)=ANY=[@ANYBLOB="1810000000000020ae200000008a00000900000000000000"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000fbff000000000000001d8500000007000000850000002a00000095"], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f00000001c0)='kmem_cache_free\x00', r8}, 0x10) r9 = socket$inet6_sctp(0xa, 0x5, 0x84) bind$inet6(r9, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r9, &(0x7f0000847fff)='X', 0x34000, 0x600, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendmsg$nl_route_sched(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000005f80)=@newtfilter={0x90, 0x2c, 0xd27, 0x70bd25, 0x2, {0x0, 0x0, 0x0, r7, {0x0, 0x1}, {}, {0x8}}, [@filter_kind_options=@f_flow={{0x9}, {0x58, 0x2, [@TCA_FLOW_ACT={0x54, 0x9, 0x0, 0x1, [@m_mirred={0x50, 0x1, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x1ff, 0x0, 0x20000001, 0x4, 0x2}, 0x1, r7}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}]}]}}, @TCA_RATE={0x6, 0x5, {0xff}}]}, 0x90}}, 0x0) 1.158675232s ago: executing program 2 (id=1286): bpf$MAP_CREATE(0x1900000000000000, 0x0, 0x50) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x18) bpf$MAP_CREATE(0x0, &(0x7f0000000600)=@base={0x12, 0x8, 0x4, 0x7cb4, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x2}, 0x48) r1 = syz_open_dev$tty1(0xc, 0x4, 0x2) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000080)={{{@in, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@empty}, 0x0, @in=@remote}}, &(0x7f00000001c0)=0xe8) lstat(&(0x7f0000000200)='./file0\x00', &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) newfstatat(0xffffffffffffff9c, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) unshare(0x22020600) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="080000000400000004000000a4"], 0x48) r6 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r6, 0x6, 0x0, 0x0, 0x0) r7 = fsmount(r6, 0x0, 0x4) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000440)={{r5}, &(0x7f00000002c0), &(0x7f0000000300)=r7}, 0x20) fsetxattr$system_posix_acl(r1, &(0x7f0000000000)='system.posix_acl_default\x00', &(0x7f0000000380)=ANY=[@ANYBLOB="02000000010001000000000002000700", @ANYRES32=r2, @ANYBLOB="040000000000000008ed0700", @ANYRES32=r3, @ANYBLOB='\b\x00\x00\x00', @ANYRES32=r4, @ANYBLOB="10000400000000002000060000000000"], 0x3c, 0x2) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kmem_cache_free\x00', r9, 0x0, 0x2}, 0x18) time(0x0) ioctl$PPPIOCSPASS(0xffffffffffffffff, 0x40107447, 0x0) timer_gettime(0x0, 0x0) 1.055002164s ago: executing program 0 (id=1277): r0 = socket$kcm(0x10, 0x400000002, 0x0) fcntl$setstatus(r0, 0x4, 0x2400) sendmsg$inet(r0, &(0x7f0000000100)={0x0, 0x2, &(0x7f0000000080)=[{&(0x7f0000000140)="600000002e000d190a762d7f089e", 0xfca2}, {&(0x7f0000000280)="68cabf2dfb58fc0a1d6b689866f05d490d010088a8ffff0200258f2e4409b8f9e6aaeb88bea123dc2c6726e89b1ae2f6e8bcb5ee52dcd7298d39093c510293bca0b646a3ce904f6e6b788b3204c233e60ddc", 0x52}], 0x2}, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="020000000400000006000000050000000010"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002300000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x10) r3 = openat$selinux_user(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000a40)=@base={0xa, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x4}, 0x50) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB, @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000002c0)={{r6}, &(0x7f0000000040), &(0x7f0000000280)='%pS \x00'}, 0x20) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000180)='sys_enter\x00', r7}, 0x10) r8 = socket$packet(0x11, 0x3, 0x300) dup2(r8, r6) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kfree\x00', r5}, 0x10) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000280), &(0x7f0000000280), 0xfd, r4}, 0x38) write$selinux_user(r3, &(0x7f0000000040)=ANY=[@ANYBLOB='system_u:object_r:auth_cache_t root'], 0x27) r9 = socket$nl_route(0x10, 0x3, 0x0) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) getsockname$packet(r10, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000400)=0x14) sendmsg$nl_route_sched(r9, &(0x7f0000006280)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000280)=@newtaction={0xc4, 0x30, 0x1, 0x4000000, 0x0, {0x0, 0x0, 0x6a00}, [{0xb0, 0x1, [@m_mirred={0x50, 0x1, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x0, 0x0, 0x10000000, 0x0, 0x4}, 0x3, r11}}]}, {0x4, 0xa}, {0xc}, {0xffac, 0x8, {0x0, 0x2}}}}, @m_mpls={0x5c, 0x2, 0x0, 0x0, {{0x9}, {0x30}, {0x4}, {0xc}, {0xc}}}]}]}, 0xc4}}, 0x0) 860.424967ms ago: executing program 0 (id=1278): r0 = gettid() prctl$PR_SET_KEEPCAPS(0x8, 0xfdfffffffffffffb) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000000040)) socket$inet6_tcp(0xa, 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000280)=@framed={{0x18, 0x0, 0x0, 0x0, 0x5}}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r1 = memfd_create(&(0x7f0000000a80)='\x00\xc76\xbe\x91\x8d\x182)!\x9a%\xd9\x19\x17\xb0\xed|\xb3\xc2\x017h\xe9kL\xa2\xd28\xd6\x06\a\x0e\xfc\xfe\x12\x8f&\x13\xae%@T\xa3\xb0>\\\xec\xa9\xf9Q@6A\x10\x8cn|\x00\x00\x00\x00\x00\x00\x00\x00\xeb0\xdd\xe8\x87\x05=\xfb\x8b$\xdcQ\xee\xc5\x1f\x8bQ\xf7fo\"i\xa1hk\x1d\xf5z\xc1\x7f\xa4\\]\xc4\xbe3\xf9\xa8\t?:\xd8\xda\x84\xeepI[\x1c\x00\x00\x00\x00\xf9v\x00\x00\x00\x00\x00T\xb6\xbe\x0f~\xc0\x92\xe9O{\xa8\x81(\x01\x14\xfc\x83\xf9\xfb\x05\x94Tr@Lq]\xf9\x15zj\x87\xc4\x8e\xe8/\xb9-&R\x8e\xb2\xb3bBx\x1e1\x18\x8f2\xf7]#\xed,\xc7\x03\x00\x00\x00\xa3\xee\xcb\xaf\xb3\xe3\'}\x18\xe8O\xa8#K\xb6\xe4R$\xaa\x00U\x92\xd2\x99\xb80x0}, &(0x7f0000000340)=0x8) setsockopt$inet_sctp_SCTP_ADD_STREAMS(r0, 0x84, 0x79, &(0x7f0000000380)={r1, 0xfff, 0x9}, 0x8) r2 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$EBT_SO_SET_ENTRIES(r2, 0x0, 0x80, &(0x7f0000000000)=@broute={'broute\x00', 0x20, 0x0, 0x90, [0x800000000000, 0x0, 0x0, 0x751, 0x7, 0x200000000080], 0x0, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000feffffff0000000000000000000000000000000000000200000000000000000000000000000000000000000000000000fcffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffff00000000"]}, 0x108) getsockopt$inet_mreqn(r2, 0x0, 0x23, &(0x7f0000000000)={@rand_addr, @initdev, 0x0}, &(0x7f0000000080)=0xc) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1e0000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000040)='kmem_cache_free\x00', r5}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) clock_gettime(0x1, &(0x7f0000000000)={0x0, 0x0}) clock_settime(0x0, &(0x7f0000000040)={r6, r7+10000000}) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=@base={0x1, 0x4, 0x17fe2, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', r3, 0xffffffffffffffff, 0x0, 0x0, 0x4}, 0x50) socket$inet_sctp(0x2, 0x1, 0x84) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r8}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_mount_image$ext4(&(0x7f00000002c0)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x200010, &(0x7f0000000300)={[{@jqfmt_vfsold}]}, 0xfe, 0x55d, &(0x7f0000000980)="$eJzs3d9rW1UcAPDvTX/sp66DMdQHKezByVy6tv6Y4MN8FB0O9H2G9q6Mpsto0rHWgduDe9mLDEHEgfgH+O7j8B/wrxjoYMgo+uBL5aY3XbYmbZZlSzSfD9ztnPuj55yce07OyUm4AQytyeyfQsSrEfFNEnGo6dho5AcnN89bf3htLtuS2Nj47M8kknxf4/wk//9AHnklIn79OuJEYXu61dW1xVK5nC7n8ana0uWp6urayYtLpYV0Ib00Mzt7+p3Zmfffe7dnZX3z3N/ff3r3o9O3jq1/9/P9w7eTOBMH82PN5XgG15sjkzGZvyZjceaJE6d7kNggSfqdAboykrfzscj6gEMxkrd64P/vq4jYAIZUov3DkGqMAxpz+x7Ng/8zHny4OQHaXv7Rzc9GYm99brR/PXlsZpTNdyd6kH6Wxi9/3LmdbdG7zyEAdnX9RkScGh3d3v8lef/XvVMdnPNkGvo/eHHuZuOft1qNfwpb459oMf450KLtdmP39l+43+KypFefUmfjvw9ajn+3Fq0mRvLYS/Ux31hy4WI5zfq2lyPieIztyeI7reecXr+30e5Y8/gv27L0G2PBPB/3R/c8fs18qVZ6ljI3e3Aj4rWW499kq/6TFvWfvR7nOkzjaHrn9XbHdi//87XxU8QbLev/0YpWsvP65FT9fphq3BXb/XXz6G/t0u93+bP6379z+SeS5vXa6tOn8ePef9J2x7q9/8eTz+vh8Xzf1VKttjwdMZ58sn3/zKNrG/HG+Vn5jx/buf9rdf/vi4gvOiz/zSM32546CPU//1T1//SBex9/+UO79Dur/7froeP5nk76v04z+CyvHQAAAAAAAAyaQkQcjKRQ3AoXCsXi5vc7jsT+QrlSrZ24UFm5NB/138pOxFihsdJ9qOn7ENP592Eb8Zkn4rMRcTgivh3ZV48X5yrl+X4XHgAAAAAAAAAAAAAAAAAAAAbEgTa//8/8PtLykvEXm0PgufLIbxheu7b/XjzpCRhI3v9heHXV/vf1Ph/Ai+f9H4bUWL8zAPST938YXto/DC/tH4aX9g8AAAAAAAAAAAAAAAAAAAAAAAAAAAA9de7s2WzbWH94bS6Lz19ZXVmsXDk5n1YXi0src8W5yvLl4kKlslBOi3OVpd3+XrlSuTw9EytXp2pptTZVXV07v1RZuVQ7f3GptJCeTz1tCAAAAAAAAAAAAAAAAAAAALarrq4tlsrldFlAoKvA6GBkQ6ApcKsHrbvPHRMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAANPk3AAD//0unNek=") r9 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x242, 0x0) pwrite64(r9, &(0x7f0000000280)='2', 0x1, 0x8080c64) r10 = open(&(0x7f0000000240)='./file1\x00', 0x145142, 0x0) sendfile(r10, r10, 0x0, 0x800000009) 673.416ms ago: executing program 5 (id=1281): r0 = socket$qrtr(0x2a, 0x2, 0x0) connect$qrtr(r0, &(0x7f0000000340)={0x2a, 0xffffffff00000002, 0x7fff}, 0xc) bind$qrtr(r0, &(0x7f0000000500)={0x2a, 0x1, 0x1}, 0xc) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x5, &(0x7f0000000080)=[{0x45, 0x0, 0x2}, {}, {}, {0x20, 0x0, 0x0, 0x20}, {0x6}]}) syz_read_part_table(0x4086, &(0x7f00000040c0)="$eJzszz9K9EAcBuB3/2QTlo9PxNJCtLIS7WxsPIDdXmA7Owv7VY8jHkC8keAJbCKZBGVRO0WR5yl+8zLzJsOEH/f40eZ1klnz6Tf3y7vNTJNZksOkK04v/pejtrfa6Y6OUs2bcf4luXz/l8XtFz4DAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD4zdrX9PS22fRLVeZkrT9JRslVkuV2Wyc5HifdmpvJ8/lQ2j3IVgkbZe6VWU/LffOhs3j4phcBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAH/UOCenQxxlP3Ufm/XSWTfaVZ3qhd05pAIABIIoeOdQRMDQgyiUoQ0peVQAO6PW7c+7eqzRMkvErA+X+zMZAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA47MCBAAAAAACQ/2sjVFVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVWEHDkgAAAAABP1/3Y5AAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADYKwAA//+vbhs5") r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCBRDELBR(r1, 0x89a1, &(0x7f0000000100)='batadv_slave_1\x00') r2 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000e8ffffff850000000400000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x21, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = timerfd_create(0x0, 0x800) r5 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000040)={&(0x7f0000000300)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x8, [@enum]}, {0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x5f]}}, &(0x7f00000001c0)=""/131, 0x2c, 0x83, 0x1}, 0x28) r6 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0300000004000000040000000100000000000000", @ANYRES32=0x0, @ANYRES32=0xffffffffffffffff, @ANYBLOB="19"], 0x48) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000400000045000000"], 0x50) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000300000207b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000a00)=ANY=[@ANYRES8=r8, @ANYRES64=r4, @ANYRES64=r6, @ANYRESOCT=r9, @ANYRESHEX=r9, @ANYRESHEX=r10, @ANYRES32, @ANYRESHEX=r5, @ANYBLOB="94053be58adbb539c6010b2f7a50abcce20f39d652ba73a6544ddab3c0ae4f321c17ad9e78496970f6fe27f98a8d3d7edfcb43e91811c0befd3f0ae44a722397e8d16d6873f2ad4d7f517ec86d42c7630112b4b663c8c816fca4d66fb0816e31e154b40a41b709a3d78d8b", @ANYRES32=r7], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x18, 0x4, &(0x7f0000000280)=ANY=[@ANYRESDEC=r6], 0x0}, 0x94) write$UHID_CREATE2(r6, &(0x7f00000007c0)=ANY=[@ANYBLOB="0b00000073797a31000000dfff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a30000037b35f0a000089b4c45a10000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a3100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001"], 0x119) write$UHID_DESTROY(r6, &(0x7f00000002c0), 0x4) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000580)={&(0x7f0000000280)='kfree\x00', r3}, 0x18) sendmsg$NFT_BATCH(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000300000000000000000000000000a20000000000a01030000000000000000010000000900010073797a310000000054000000030a01020000000000000000010000000900030073797a320000000028000480080002400000000008000140000000051400030076657468315f6d6163767461700000000900010073797a31000000004c000000050a01020000000000000000010020000c00024000000000000000010900010073797a3100000000200004801400030076657468315f6d6163767461700000000800014000000005"], 0xe8}, 0x1, 0x0, 0x0, 0x40040000}, 0x0) setsockopt$inet_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f0000000000)={@in6={{0xa, 0x4e21, 0x6, @private0={0xfc, 0x0, '\x00', 0xfe}, 0x8000}}, 0x0, 0x0, 0x1e, 0x0, "d95e93abc68ca29e7a65cd04fa55cb2fcaadba517572a6ecb6ea73c934df67ad44f500a0aae82c2d369c408db144010763d1a8d1194a52ddbc21b7a720177ab0b3b0de2c18629a3400"}, 0xd8) 659.15378ms ago: executing program 4 (id=1282): creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0x2000007d, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0xf}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x21, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r2 = socket$kcm(0x11, 0x2, 0x0) setsockopt$sock_attach_bpf(r2, 0x107, 0x14, &(0x7f0000000000), 0x4) sendmsg$kcm(r2, &(0x7f0000000240)={&(0x7f0000000280)=@tipc=@name={0x1e, 0x2, 0x1, {{0x42, 0x2}, 0x3}}, 0x80, 0x0}, 0x4000080) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0x1, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r4}, 0x10) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r5, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff018004000800395032303030"], 0x15) r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0xa101, 0x0) write$binfmt_aout(r6, &(0x7f00000001c0)=ANY=[@ANYRES64, @ANYRES64], 0xff2e) ioctl$TCSETS(r6, 0x40045431, &(0x7f0000000dc0)={0x0, 0x0, 0x3, 0x0, 0x0, "0062ba7d82000000000000000000f7fffeff00"}) r7 = syz_open_pts(r6, 0x8182) r8 = dup3(r7, r6, 0x0) ioctl$TIOCSTI(r8, 0x5412, &(0x7f0000000000)=0x17) 610.53895ms ago: executing program 2 (id=1283): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x275a, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0xfe, 0x0, 0x7ffc0002}]}) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x3000002, 0x2010, r1, 0x0) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x600, 0x0) futex(&(0x7f00000002c0)=0x1, 0x7, 0x2, &(0x7f00000003c0)={0x0, 0x989680}, &(0x7f0000000440), 0x1) mknod$loop(&(0x7f0000000080)='./file0\x00', 0x100000000000600d, 0x0) syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x1018e58, &(0x7f00000011c0)={[{@bsdgroups}, {@orlov}, {@grpjquota}, {@init_itable_val={'init_itable', 0x3d, 0x6}}, {@debug}, {@resuid}]}, 0x1, 0x5fd, &(0x7f0000000600)="$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") bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00}, 0x94) r2 = msgget$private(0x0, 0x0) futex(&(0x7f0000000300), 0x2, 0x1, 0x0, 0x0, 0x2) msgctl$IPC_SET(r2, 0x1, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={0x0, 0xffffffffffffffff, 0x0, 0x68e}, 0x18) r3 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) fcntl$dupfd(r0, 0x0, r3) socket$nl_route(0x10, 0x3, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000480)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r4}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="180100001700000000000000ff000000850000006d000000181100", @ANYRES32, @ANYBLOB="0000000000000000b7080000000002007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008002010b70400000000000085000000010000"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_read_part_table(0x5c8, &(0x7f0000000600)="$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") msgrcv(r2, 0x0, 0x0, 0x3, 0x0) 98.984478ms ago: executing program 3 (id=1284): r0 = open(&(0x7f0000000240)='./file1\x00', 0x145142, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000003200)=ANY=[@ANYBLOB="1e0000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f00000018c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x41}, 0x94) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x161281, 0x0) write$binfmt_aout(r2, &(0x7f0000000080)=ANY=[], 0xff2e) ioctl$TCSETS(r2, 0x40045431, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, "0040001e1d113c812e5d6000"}) r3 = syz_open_pts(r2, 0x0) dup3(r3, r2, 0x0) ppoll(&(0x7f0000000140)=[{r2}], 0x1, 0x0, 0x0, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000040)=0x3) ioctl$TCSETSF(r3, 0x5404, &(0x7f0000000180)={0x38000, 0x8, 0x0, 0x2, 0x5, "aa32b73986bbee6bd231334cbfa0b758261a93"}) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r4}, 0x10) r5 = syz_open_dev$tty1(0xc, 0x4, 0x2) ioctl$VT_RESIZE(r5, 0x5609, &(0x7f0000000180)={0x65f5, 0x1, 0xff}) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r0, 0xffffffffffffffff}, &(0x7f0000000040), &(0x7f00000001c0)=r4}, 0x20) r7 = syz_open_dev$vcsn(&(0x7f0000001700), 0x5, 0x2000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001800)={0x11, 0xc, &(0x7f0000000280)=@raw=[@func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffe}, @initr0={0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff}, @map_val={0x18, 0xa, 0x2, 0x0, r1}, @btf_id={0x18, 0x5, 0x3, 0x0, 0x2}, @tail_call={{0x18, 0x2, 0x1, 0x0, r6}}], &(0x7f00000014c0)='GPL\x00', 0x839, 0xfd, &(0x7f0000001600)=""/253, 0x40f00, 0x4c, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000001500)={0x7, 0x4}, 0x8, 0x10, &(0x7f0000001540)={0x2, 0x3, 0xfffffff6, 0xa3}, 0x10, 0x0, 0x0, 0x6, &(0x7f0000001740)=[r7, r0, r0, r1, r1, r1, r0], &(0x7f0000001780)=[{0x3, 0x3, 0x4, 0x6}, {0x4, 0x4, 0xd, 0x9}, {0x0, 0x2, 0x4, 0x4}, {0x2, 0x1, 0x6, 0x2}, {0x1, 0x4, 0x4, 0x1}, {0x2, 0x2, 0x2, 0x8}], 0x10, 0x5}, 0x94) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) prctl$PR_SET_NAME(0xf, &(0x7f0000000140)='+}[@\x00') r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000300)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x41) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001580)={&(0x7f00000015c0)='kmem_cache_free\x00', r8}, 0x10) sendfile(r0, r0, 0x0, 0x800000009) 0s ago: executing program 0 (id=1285): bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x11, 0xb, &(0x7f0000000500)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x33, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f00000003c0)='./file1\x00', 0x1a240a0, &(0x7f0000000200)={[{@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x2}}, {@usrjquota}, {@errors_remount}, {@dioread_lock}, {@max_batch_time={'max_batch_time', 0x3d, 0x5}}, {@mblk_io_submit}, {@minixdf}, {@barrier_val}, {@nombcache}, {}]}, 0x45, 0x7b6, &(0x7f0000001140)="$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") r0 = socket$inet6(0xa, 0x3, 0xff) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x16, &(0x7f0000000000)=0x4, 0x4) setsockopt$inet6_int(r0, 0x29, 0x16, &(0x7f0000fcb000)=0xfffffffc, 0x4) r1 = fspick(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000a80)=ANY=[@ANYBLOB="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"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x24}, 0x94) r3 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r3, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000014000000b7e22ba43612cf55030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b700000043e7b5538500000085000000b700"], &(0x7f00000004c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bind$nfc_llcp(r1, &(0x7f00000002c0)={0x27, 0x0, 0xffffffffffffffff, 0x7, 0x1, 0xff, "045a67d768c4b15644458f23e3b4ca0011f3484fcfcd0fbdbd83a2197d073cfcb05104dc942646bd18fd8b0ceac7392a9a77e935aebb9ade32d2720ab7752d", 0x30}, 0x60) rt_sigtimedwait(0x0, 0x0, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000340)={'syz_tun\x00'}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000580)='xen_mmu_flush_tlb_one_user\x00', r2, 0x0, 0x5}, 0x18) write$sndseq(0xffffffffffffffff, 0x0, 0x0) r5 = socket$kcm(0x2, 0x200000000000001, 0x106) sendmsg$inet(r5, &(0x7f0000000080)={&(0x7f0000000000)={0x2, 0x4001, @local}, 0x10, 0x0}, 0x30004001) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x37, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, @perf_bp={0x0, 0xd}, 0x4100, 0x1, 0x0, 0x1, 0x8, 0x20002, 0xb, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r6 = openat$selinux_user(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$selinux_user(r6, &(0x7f0000000040)=ANY=[@ANYBLOB='system_u:object_r:auth_cache_t root'], 0x27) sendmsg(r5, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000780)="a9", 0xfffffdef}], 0x11}, 0x0) kernel console output (not intermixed with test programs): m netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 141.803000][ T6340] vhci_hcd: connection reset by peer [ 141.820939][ T6214] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 141.828049][ T6214] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 141.854242][ T6214] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 141.866144][ T31] vhci_hcd: stop threads [ 141.870507][ T31] vhci_hcd: release socket [ 141.874982][ T31] vhci_hcd: disconnect device [ 141.909839][ T6214] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 141.916874][ T6214] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 141.943161][ T6214] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 141.982045][ T6374] IPv4: Oversized IP packet from 127.202.26.0 [ 142.007091][ T6354] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 142.080576][ T6381] loop2: detected capacity change from 0 to 512 [ 142.111374][ T6214] hsr_slave_0: entered promiscuous mode [ 142.119113][ T6214] hsr_slave_1: entered promiscuous mode [ 142.149440][ T6354] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 142.159768][ T6381] EXT4-fs (loop2): too many log groups per flexible block group [ 142.168621][ T6381] EXT4-fs (loop2): failed to initialize mballoc (-12) [ 142.180664][ T6381] EXT4-fs (loop2): mount failed [ 142.189936][ T6354] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 142.238935][ T6381] IPv4: Oversized IP packet from 127.202.26.0 [ 142.249942][ T6354] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 142.418350][ T6354] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 142.581912][ T6409] loop2: detected capacity change from 0 to 2048 [ 142.651416][ T6409] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 142.679218][ T6408] loop3: detected capacity change from 0 to 2048 [ 142.723370][ T6408] EXT4-fs (loop3): failed to initialize system zone (-117) [ 142.753031][ T6408] EXT4-fs (loop3): mount failed [ 142.777856][ T6409] ( speed is unknown, defaulting to 1000 [ 143.023215][ T6214] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 143.072423][ T6214] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 143.371368][ T6214] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 143.410208][ T6214] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 143.443069][ T6423] netlink: 14 bytes leftover after parsing attributes in process `syz.0.760'. [ 143.546413][ T6408] tipc: Started in network mode [ 143.551416][ T6408] tipc: Node identity ac14140f, cluster identity 4711 [ 143.579764][ T6408] tipc: New replicast peer: 0.0.255.255 [ 143.585503][ T6408] tipc: Enabled bearer , priority 10 [ 143.665145][ T6214] 8021q: adding VLAN 0 to HW filter on device bond0 [ 143.729829][ T6440] loop4: detected capacity change from 0 to 512 [ 143.751450][ T6214] 8021q: adding VLAN 0 to HW filter on device team0 [ 143.765311][ T6440] EXT4-fs: Ignoring removed nomblk_io_submit option [ 143.804993][ T51] bridge0: port 1(bridge_slave_0) entered blocking state [ 143.812194][ T51] bridge0: port 1(bridge_slave_0) entered forwarding state [ 143.859445][ T6440] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 143.883407][ T337] bridge0: port 2(bridge_slave_1) entered blocking state [ 143.890676][ T337] bridge0: port 2(bridge_slave_1) entered forwarding state [ 143.909215][ T6440] ext4 filesystem being mounted at /167/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 143.943033][ T6214] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 143.953588][ T6214] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 144.098307][ T3306] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 144.182132][ T6450] bond2: entered promiscuous mode [ 144.187258][ T6450] bond2: entered allmulticast mode [ 144.196196][ T6450] 8021q: adding VLAN 0 to HW filter on device bond2 [ 144.198815][ T3309] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 144.213411][ T6450] bond2 (unregistering): Released all slaves [ 144.266208][ T6214] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 144.350897][ T6471] netlink: 4 bytes leftover after parsing attributes in process `syz.0.767'. [ 144.432726][ T6480] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 144.461929][ T6480] Cannot find set identified by id 0 to match [ 144.505782][ T6477] loop4: detected capacity change from 0 to 512 [ 144.588099][ T3401] tipc: Node number set to 2886997007 [ 144.622881][ T6214] veth0_vlan: entered promiscuous mode [ 144.636570][ T6214] veth1_vlan: entered promiscuous mode [ 144.673303][ T6477] EXT4-fs (loop4): too many log groups per flexible block group [ 144.684305][ T6477] EXT4-fs (loop4): failed to initialize mballoc (-12) [ 144.689455][ T6214] veth0_macvtap: entered promiscuous mode [ 144.713731][ T6477] EXT4-fs (loop4): mount failed [ 144.716692][ T6214] veth1_macvtap: entered promiscuous mode [ 144.754998][ T6214] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 144.774501][ T6214] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 144.790902][ T6214] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 144.795222][ T6477] xt_hashlimit: size too large, truncated to 1048576 [ 144.799826][ T6214] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 144.799896][ T6214] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 144.799937][ T6214] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 144.840890][ T6504] IPv4: Oversized IP packet from 127.202.26.0 [ 144.863063][ T29] kauditd_printk_skb: 79 callbacks suppressed [ 144.863084][ T29] audit: type=1400 audit(1751154751.099:7958): avc: denied { mounton } for pid=6214 comm="syz-executor" path="/root/syzkaller.Jn9Ktj/syz-tmp" dev="sda1" ino=2047 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1 [ 144.893935][ T29] audit: type=1400 audit(1751154751.099:7959): avc: denied { mount } for pid=6214 comm="syz-executor" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 144.929524][ T29] audit: type=1400 audit(1751154751.169:7960): avc: denied { mount } for pid=6214 comm="syz-executor" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 144.959674][ T29] audit: type=1400 audit(1751154751.169:7961): avc: denied { mounton } for pid=6214 comm="syz-executor" path="/root/syzkaller.Jn9Ktj/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 144.986619][ T29] audit: type=1400 audit(1751154751.169:7962): avc: denied { mounton } for pid=6214 comm="syz-executor" path="/root/syzkaller.Jn9Ktj/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=14022 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 145.014438][ T29] audit: type=1400 audit(1751154751.189:7963): avc: denied { mounton } for pid=6214 comm="syz-executor" path="/dev/gadgetfs" dev="devtmpfs" ino=536 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 145.037420][ T29] audit: type=1400 audit(1751154751.189:7964): avc: denied { mount } for pid=6214 comm="syz-executor" name="/" dev="gadgetfs" ino=3873 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 145.125419][ T29] audit: type=1326 audit(1751154751.349:7965): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6514 comm="syz.5.731" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7effc358e929 code=0x7ffc0000 [ 145.148883][ T29] audit: type=1326 audit(1751154751.349:7966): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6514 comm="syz.5.731" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7effc358e929 code=0x7ffc0000 [ 145.172389][ T29] audit: type=1326 audit(1751154751.349:7967): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6514 comm="syz.5.731" exe="/root/syz-executor" sig=0 arch=c000003e syscall=283 compat=0 ip=0x7effc358e929 code=0x7ffc0000 [ 146.509777][ T6549] ( speed is unknown, defaulting to 1000 [ 146.927848][ T10] usb 5-1: enqueue for inactive port 0 [ 146.970405][ T10] usb 5-1: enqueue for inactive port 0 [ 147.023052][ T6559] loop2: detected capacity change from 0 to 512 [ 147.080352][ T10] vhci_hcd: vhci_device speed not set [ 147.632293][ T6565] loop2: detected capacity change from 0 to 512 [ 147.651978][ T6565] EXT4-fs (loop2): mounting ext2 file system using the ext4 subsystem [ 147.730126][ T6565] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a002c018, mo2=0002] [ 147.749082][ T6565] System zones: 1-12 [ 147.753457][ T6565] EXT4-fs error (device loop2): mb_free_blocks:1948: group 0, inode 11: block 64:freeing already freed block (bit 63); block bitmap corrupt. [ 147.788732][ T6565] EXT4-fs error (device loop2): ext4_do_update_inode:5568: inode #11: comm syz.2.776: corrupted inode contents [ 147.810923][ T6565] EXT4-fs error (device loop2): ext4_dirty_inode:6459: inode #11: comm syz.2.776: mark_inode_dirty error [ 147.838622][ T6565] EXT4-fs error (device loop2): ext4_free_branches:1023: inode #11: comm syz.2.776: invalid indirect mapped block 1 (level 1) [ 147.863033][ T6565] EXT4-fs error (device loop2): ext4_do_update_inode:5568: inode #11: comm syz.2.776: corrupted inode contents [ 147.888749][ T6565] EXT4-fs error (device loop2) in ext4_orphan_del:305: Corrupt filesystem [ 147.908708][ T6565] EXT4-fs error (device loop2): ext4_do_update_inode:5568: inode #11: comm syz.2.776: corrupted inode contents [ 147.932955][ T6565] EXT4-fs error (device loop2): ext4_truncate:4597: inode #11: comm syz.2.776: mark_inode_dirty error [ 147.958154][ T6565] EXT4-fs error (device loop2) in ext4_process_orphan:347: Corrupt filesystem [ 147.978329][ T6565] EXT4-fs (loop2): 1 truncate cleaned up [ 147.984380][ T6565] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 148.297229][ T6574] bond1: entered promiscuous mode [ 148.302411][ T6574] bond1: entered allmulticast mode [ 148.335020][ T6574] 8021q: adding VLAN 0 to HW filter on device bond1 [ 148.369117][ T6574] bond1 (unregistering): Released all slaves [ 148.401189][ T6582] loop3: detected capacity change from 0 to 764 [ 148.409240][ T6582] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 148.476526][ T3309] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 148.496884][ T6582] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 148.533810][ T6587] loop2: detected capacity change from 0 to 1024 [ 148.562455][ T6587] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 148.576098][ T6582] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 148.604272][ T3309] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 148.630713][ T6582] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 148.700139][ T6582] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 148.765997][ T6582] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 148.779110][ T6582] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 148.791893][ T6582] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 148.804596][ T6582] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 150.041337][ T29] kauditd_printk_skb: 204 callbacks suppressed [ 150.041358][ T29] audit: type=1326 audit(1751154756.279:8172): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6613 comm="syz.4.789" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f149c0de929 code=0x0 [ 150.165721][ T29] audit: type=1400 audit(1751154756.329:8173): avc: denied { read } for pid=6603 comm="syz.5.788" name="msr" dev="devtmpfs" ino=85 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 150.188857][ T29] audit: type=1400 audit(1751154756.329:8174): avc: denied { open } for pid=6603 comm="syz.5.788" path="/dev/cpu/0/msr" dev="devtmpfs" ino=85 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 150.212699][ T29] audit: type=1400 audit(1751154756.389:8175): avc: denied { watch watch_reads } for pid=6603 comm="syz.5.788" path="/4" dev="tmpfs" ino=34 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 150.455927][ T6623] netlink: 36 bytes leftover after parsing attributes in process `syz.0.790'. [ 150.601263][ T3782] IPVS: starting estimator thread 0... [ 150.698208][ T6628] IPVS: using max 2256 ests per chain, 112800 per kthread [ 150.845613][ T6621] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 150.855265][ T6621] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 150.930280][ T29] audit: type=1326 audit(1751154757.169:8176): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6613 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f149c0de929 code=0x7ffc0000 [ 150.953343][ T29] audit: type=1326 audit(1751154757.169:8177): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6613 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f149c0de929 code=0x7ffc0000 [ 151.005325][ T6631] netlink: 'syz.2.792': attribute type 1 has an invalid length. [ 151.082630][ T29] audit: type=1326 audit(1751154757.209:8178): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6613 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=83 compat=0 ip=0x7f149c0de929 code=0x7ffc0000 [ 151.105691][ T29] audit: type=1326 audit(1751154757.209:8179): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6613 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f149c0de929 code=0x7ffc0000 [ 151.128736][ T29] audit: type=1326 audit(1751154757.209:8180): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6613 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f149c0de929 code=0x7ffc0000 [ 151.151853][ T29] audit: type=1326 audit(1751154757.219:8181): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6613 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=235 compat=0 ip=0x7f149c0de929 code=0x7ffc0000 [ 151.211512][ T6633] loop3: detected capacity change from 0 to 512 [ 151.235200][ T6636] loop2: detected capacity change from 0 to 512 [ 151.274028][ T6636] EXT4-fs: Ignoring removed nomblk_io_submit option [ 151.338864][ T6623] Set syz1 is full, maxelem 65536 reached [ 151.341475][ T6636] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 151.372284][ T6633] EXT4-fs (loop3): too many log groups per flexible block group [ 151.378113][ T6636] ext4 filesystem being mounted at /153/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 151.385303][ T6633] EXT4-fs (loop3): failed to initialize mballoc (-12) [ 151.423248][ T6633] EXT4-fs (loop3): mount failed [ 151.467633][ T3309] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 151.556075][ T6633] xt_hashlimit: size too large, truncated to 1048576 [ 151.566319][ T6645] tipc: New replicast peer: 0.0.255.255 [ 151.572171][ T6645] tipc: Enabled bearer , priority 10 [ 151.629668][ T6650] IPv4: Oversized IP packet from 127.202.26.0 [ 152.063210][ T6662] wireguard0: entered promiscuous mode [ 152.068989][ T6662] wireguard0: entered allmulticast mode [ 152.643829][ T6671] netlink: 4 bytes leftover after parsing attributes in process `syz.0.800'. [ 152.917302][ T6679] xt_hashlimit: max too large, truncated to 1048576 [ 152.985389][ T6688] netlink: 'syz.2.805': attribute type 298 has an invalid length. [ 153.001244][ T6689] loop5: detected capacity change from 0 to 2048 [ 153.040817][ T6689] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 153.124636][ T6700] loop2: detected capacity change from 0 to 512 [ 153.164124][ T6700] EXT4-fs: dax option not supported [ 153.197170][ T6700] netlink: 'syz.2.808': attribute type 10 has an invalid length. [ 153.221608][ T6689] netlink: 16 bytes leftover after parsing attributes in process `syz.5.804'. [ 153.234057][ T6700] $Hÿ: (slave dummy0): Enslaving as an active interface with an up link [ 154.403399][ T6721] pim6reg: entered allmulticast mode [ 154.414520][ T6723] netlink: 4 bytes leftover after parsing attributes in process `syz.3.815'. [ 154.427513][ T6721] pim6reg: left allmulticast mode [ 154.472448][ T6214] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 154.502243][ T6726] netlink: 12 bytes leftover after parsing attributes in process `syz.2.813'. [ 154.629082][ T6731] 9pnet: Could not find request transport: fd00000000000000000000003 [ 154.939251][ T6747] bond1: entered promiscuous mode [ 154.944569][ T6747] bond1: entered allmulticast mode [ 154.956093][ T6747] 8021q: adding VLAN 0 to HW filter on device bond1 [ 154.976243][ T6747] bond1 (unregistering): Released all slaves [ 155.110945][ T6755] netlink: 'syz.0.830': attribute type 298 has an invalid length. [ 155.367516][ T6769] netlink: 4 bytes leftover after parsing attributes in process `syz.5.822'. [ 155.431818][ T6773] netlink: zone id is out of range [ 155.437097][ T6773] netlink: zone id is out of range [ 155.442466][ T6773] netlink: zone id is out of range [ 155.447764][ T6773] netlink: zone id is out of range [ 155.452978][ T6773] netlink: zone id is out of range [ 155.458134][ T6773] netlink: zone id is out of range [ 155.463271][ T6773] netlink: zone id is out of range [ 155.468442][ T6773] netlink: zone id is out of range [ 155.863792][ T29] kauditd_printk_skb: 262 callbacks suppressed [ 155.863807][ T29] audit: type=1400 audit(1751154762.099:8444): avc: denied { listen } for pid=6777 comm="syz.5.824" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 156.155260][ T6800] bond1: entered promiscuous mode [ 156.160494][ T6800] bond1: entered allmulticast mode [ 156.193759][ T6800] 8021q: adding VLAN 0 to HW filter on device bond1 [ 156.229010][ T6800] bond1 (unregistering): Released all slaves [ 156.411649][ T29] audit: type=1326 audit(1751154762.649:8445): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6812 comm="syz.5.833" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7effc358e929 code=0x7ffc0000 [ 156.495666][ T29] audit: type=1326 audit(1751154762.669:8446): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6812 comm="syz.5.833" exe="/root/syz-executor" sig=0 arch=c000003e syscall=83 compat=0 ip=0x7effc358e929 code=0x7ffc0000 [ 156.519155][ T29] audit: type=1326 audit(1751154762.669:8447): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6812 comm="syz.5.833" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7effc358e929 code=0x7ffc0000 [ 156.542669][ T29] audit: type=1326 audit(1751154762.669:8448): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6812 comm="syz.5.833" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7effc358e929 code=0x7ffc0000 [ 156.566099][ T29] audit: type=1326 audit(1751154762.669:8449): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6812 comm="syz.5.833" exe="/root/syz-executor" sig=0 arch=c000003e syscall=165 compat=0 ip=0x7effc358e929 code=0x7ffc0000 [ 156.589536][ T29] audit: type=1326 audit(1751154762.669:8450): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6812 comm="syz.5.833" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7effc358e929 code=0x7ffc0000 [ 156.613055][ T29] audit: type=1326 audit(1751154762.669:8451): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6812 comm="syz.5.833" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7effc358e929 code=0x7ffc0000 [ 156.636573][ T29] audit: type=1326 audit(1751154762.669:8452): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6812 comm="syz.5.833" exe="/root/syz-executor" sig=0 arch=c000003e syscall=42 compat=0 ip=0x7effc358e929 code=0x7ffc0000 [ 156.660048][ T29] audit: type=1326 audit(1751154762.669:8453): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6812 comm="syz.5.833" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7effc358e929 code=0x7ffc0000 [ 156.738947][ T6753] syz.2.820 (6753) used greatest stack depth: 5824 bytes left [ 156.815610][ T6826] loop3: detected capacity change from 0 to 512 [ 156.832475][ T6824] loop2: detected capacity change from 0 to 1024 [ 156.845234][ T6826] EXT4-fs error (device loop3): ext4_iget_extra_inode:5035: inode #15: comm syz.3.837: corrupted in-inode xattr: invalid ea_ino [ 157.009051][ T6833] pim6reg: entered allmulticast mode [ 157.067238][ T6824] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 157.094673][ T6830] loop4: detected capacity change from 0 to 512 [ 157.149725][ T6830] EXT4-fs: Ignoring removed bh option [ 157.197276][ T6830] EXT4-fs (loop4): feature flags set on rev 0 fs, running e2fsck is recommended [ 157.255055][ T6826] EXT4-fs error (device loop3): ext4_orphan_get:1398: comm syz.3.837: couldn't read orphan inode 15 (err -117) [ 157.335936][ T6826] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 157.369321][ T3309] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 157.493880][ T6852] ( speed is unknown, defaulting to 1000 [ 157.610739][ T6859] loop2: detected capacity change from 0 to 128 [ 158.053702][ T6861] FAT-fs (loop2): error, invalid FAT chain (i_pos 548, last_block 8) [ 158.062016][ T6861] FAT-fs (loop2): Filesystem has been set read-only [ 158.083375][ T6861] FAT-fs (loop2): error, corrupted file size (i_pos 548, 522) [ 158.146372][ T3312] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 158.219447][ T6861] SELinux: syz.2.839 (6861) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 158.354663][ T6861] wireguard0: entered promiscuous mode [ 158.360310][ T6861] wireguard0: entered allmulticast mode [ 158.381090][ T6855] SELinux: policydb version 508263358 does not match my version range 15-34 [ 158.420370][ T6855] SELinux: failed to load policy [ 158.500166][ T6866] ÿÿÿÿÿÿ: renamed from vlan1 (while UP) [ 158.526072][ T6881] ( speed is unknown, defaulting to 1000 [ 158.756287][ T6887] loop3: detected capacity change from 0 to 1024 [ 158.786131][ T6887] EXT4-fs: Ignoring removed orlov option [ 158.791931][ T6887] EXT4-fs: Ignoring removed nomblk_io_submit option [ 158.905095][ T6901] netlink: 14528 bytes leftover after parsing attributes in process `syz.2.847'. [ 159.109530][ T6887] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 159.475224][ T3312] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 159.549886][ T6913] loop4: detected capacity change from 0 to 512 [ 159.581207][ T6913] EXT4-fs: dax option not supported [ 159.608731][ T6913] netlink: 'syz.4.851': attribute type 10 has an invalid length. [ 159.640394][ T6918] netlink: 36 bytes leftover after parsing attributes in process `syz.3.850'. [ 159.649382][ T6918] netlink: 36 bytes leftover after parsing attributes in process `syz.3.850'. [ 159.683555][ T6913] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 159.696314][ T6909] loop2: detected capacity change from 0 to 512 [ 159.710487][ T6922] loop3: detected capacity change from 0 to 512 [ 159.722988][ T6918] netlink: 36 bytes leftover after parsing attributes in process `syz.3.850'. [ 159.815901][ T6918] netlink: 36 bytes leftover after parsing attributes in process `syz.3.850'. [ 159.825090][ T6918] netlink: 36 bytes leftover after parsing attributes in process `syz.3.850'. [ 159.867857][ T6909] EXT4-fs (loop2): too many log groups per flexible block group [ 159.868157][ T6927] bond1: entered promiscuous mode [ 159.868179][ T6927] bond1: entered allmulticast mode [ 159.868372][ T6927] 8021q: adding VLAN 0 to HW filter on device bond1 [ 159.883805][ T6918] netlink: 36 bytes leftover after parsing attributes in process `syz.3.850'. [ 159.892006][ T6909] EXT4-fs (loop2): failed to initialize mballoc (-12) [ 159.914519][ T6927] bond1 (unregistering): Released all slaves [ 159.988582][ T6918] netlink: 36 bytes leftover after parsing attributes in process `syz.3.850'. [ 159.997564][ T6918] netlink: 36 bytes leftover after parsing attributes in process `syz.3.850'. [ 160.032235][ T6918] netlink: 36 bytes leftover after parsing attributes in process `syz.3.850'. [ 160.056421][ T6909] EXT4-fs (loop2): mount failed [ 160.141662][ T6947] loop5: detected capacity change from 0 to 512 [ 160.391286][ T6909] xt_hashlimit: size too large, truncated to 1048576 [ 160.450825][ T6972] net_ratelimit: 25 callbacks suppressed [ 160.450878][ T6972] IPv4: Oversized IP packet from 127.202.26.0 [ 160.894585][ T29] kauditd_printk_skb: 209 callbacks suppressed [ 160.894605][ T29] audit: type=1326 audit(1751154767.129:8663): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6981 comm="syz.0.867" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0d214de929 code=0x7ffc0000 [ 160.978640][ T29] audit: type=1326 audit(1751154767.159:8664): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6981 comm="syz.0.867" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f0d214de929 code=0x7ffc0000 [ 161.001973][ T29] audit: type=1326 audit(1751154767.159:8665): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6981 comm="syz.0.867" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0d214de929 code=0x7ffc0000 [ 161.025489][ T29] audit: type=1326 audit(1751154767.159:8666): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6981 comm="syz.0.867" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0d214de929 code=0x7ffc0000 [ 161.048946][ T29] audit: type=1326 audit(1751154767.159:8667): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6981 comm="syz.0.867" exe="/root/syz-executor" sig=0 arch=c000003e syscall=216 compat=0 ip=0x7f0d214de929 code=0x7ffc0000 [ 161.072470][ T29] audit: type=1326 audit(1751154767.159:8668): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6981 comm="syz.0.867" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0d214de929 code=0x7ffc0000 [ 161.072574][ T29] audit: type=1326 audit(1751154767.159:8669): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6981 comm="syz.0.867" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0d214de929 code=0x7ffc0000 [ 161.072650][ T29] audit: type=1326 audit(1751154767.159:8670): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6981 comm="syz.0.867" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0d214de929 code=0x7ffc0000 [ 161.072677][ T29] audit: type=1326 audit(1751154767.159:8671): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6981 comm="syz.0.867" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0d214de929 code=0x7ffc0000 [ 161.072732][ T29] audit: type=1326 audit(1751154767.159:8672): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6981 comm="syz.0.867" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0d214de929 code=0x7ffc0000 [ 161.185730][ T6987] SELinux: policydb version 508263358 does not match my version range 15-34 [ 161.285451][ T6987] SELinux: failed to load policy [ 161.420241][ T7009] loop4: detected capacity change from 0 to 2048 [ 161.451626][ T7009] SELinux: security_context_str_to_sid (staff_u) failed with errno=-22 [ 161.746630][ T7020] loop3: detected capacity change from 0 to 164 [ 161.936043][ T7033] bond0: entered promiscuous mode [ 161.941538][ T7033] bond0: entered allmulticast mode [ 161.958132][ T7033] 8021q: adding VLAN 0 to HW filter on device bond0 [ 161.969727][ T7033] bond0 (unregistering): Released all slaves [ 162.153930][ T7098] tipc: Enabled bearer , priority 0 [ 162.240289][ T7098] syzkaller0: entered promiscuous mode [ 162.245960][ T7098] syzkaller0: entered allmulticast mode [ 162.269051][ T7098] tipc: Resetting bearer [ 162.346523][ T7096] tipc: Resetting bearer [ 162.363342][ T7096] tipc: Disabling bearer [ 162.420007][ T7107] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 162.434265][ T7108] IPv6: NLM_F_CREATE should be specified when creating new route [ 162.466967][ T7108] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 162.481253][ T7110] loop2: detected capacity change from 0 to 1024 [ 162.505438][ T7107] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 162.530404][ T7108] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 162.558505][ T7110] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 162.586223][ T7107] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 162.613560][ T7110] SELinux: policydb magic number 0x58 does not match expected magic number 0xf97cff8c [ 162.624580][ T7110] SELinux: failed to load policy [ 162.642699][ T7110] 9pnet_fd: Insufficient options for proto=fd [ 162.662946][ T3309] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 162.675800][ T7107] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 162.728002][ T7107] netdevsim netdevsim5 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 162.742914][ T7107] netdevsim netdevsim5 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 162.756148][ T7117] loop2: detected capacity change from 0 to 1024 [ 162.791787][ T7117] EXT4-fs: Ignoring removed orlov option [ 162.795938][ T7107] netdevsim netdevsim5 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 162.822845][ T7117] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 162.843097][ T7107] netdevsim netdevsim5 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 162.848566][ T7117] EXT4-fs (loop2): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 162.903964][ T7117] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e840e01c, mo2=0000] [ 162.926430][ T7117] System zones: 0-1, 3-12 [ 162.938276][ T7117] EXT4-fs error (device loop2): ext4_map_blocks:816: inode #3: block 1: comm syz.2.875: lblock 1 mapped to illegal pblock 1 (length 1) [ 162.964989][ T7117] EXT4-fs error (device loop2): ext4_acquire_dquot:6933: comm syz.2.875: Failed to acquire dquot type 0 [ 162.984806][ T7117] EXT4-fs error (device loop2): ext4_free_blocks:6587: comm syz.2.875: Freeing blocks not in datazone - block = 0, count = 4096 [ 163.002680][ T7131] 9pnet_fd: Insufficient options for proto=fd [ 163.009480][ T7117] EXT4-fs error (device loop2): ext4_read_inode_bitmap:139: comm syz.2.875: Invalid inode bitmap blk 0 in block_group 0 [ 163.028941][ T7059] EXT4-fs error (device loop2): ext4_map_blocks:780: inode #3: block 1: comm kworker/u8:31: lblock 1 mapped to illegal pblock 1 (length 1) [ 163.034810][ T7117] EXT4-fs error (device loop2) in ext4_free_inode:361: Corrupt filesystem [ 163.053774][ T7117] EXT4-fs (loop2): 1 orphan inode deleted [ 163.063338][ T7117] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 163.065100][ T7059] EXT4-fs error (device loop2): ext4_release_dquot:6969: comm kworker/u8:31: Failed to release dquot type 0 [ 163.098667][ T7117] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 163.173085][ T7117] loop2: detected capacity change from 0 to 2048 [ 163.209223][ T7145] bond2: entered promiscuous mode [ 163.214385][ T7145] bond2: entered allmulticast mode [ 163.220443][ T7145] 8021q: adding VLAN 0 to HW filter on device bond2 [ 163.222184][ T3491] Alternate GPT is invalid, using primary GPT. [ 163.233689][ T3491] loop2: p1 p2 p3 [ 163.241994][ T7145] bond2 (unregistering): Released all slaves [ 163.257771][ T7117] Alternate GPT is invalid, using primary GPT. [ 163.264144][ T7117] loop2: p1 p2 p3 [ 163.279536][ T2995] Alternate GPT is invalid, using primary GPT. [ 163.285920][ T2995] loop2: p1 p2 p3 [ 163.405622][ T7162] netlink: 'syz.0.884': attribute type 13 has an invalid length. [ 164.073365][ T7176] __vm_enough_memory: pid: 7176, comm: syz.2.887, bytes: 21200143929344 not enough memory for the allocation [ 164.177681][ T7179] 9pnet_fd: Insufficient options for proto=fd [ 164.185828][ T7176] loop2: detected capacity change from 0 to 512 [ 164.195653][ T7176] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 164.244700][ T7176] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a002c0a8, mo2=0002] [ 164.253158][ T7176] System zones: 1-12 [ 164.266530][ T7176] EXT4-fs error (device loop2): ext4_xattr_inode_iget:437: inode #11: comm syz.2.887: missing EA_INODE flag [ 164.279531][ T7176] EXT4-fs (loop2): Remounting filesystem read-only [ 164.286481][ T7176] EXT4-fs (loop2): 1 orphan inode deleted [ 164.293062][ T7176] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 164.327419][ T7183] loop4: detected capacity change from 0 to 128 [ 164.347555][ T7189] bond1: entered promiscuous mode [ 164.352772][ T7189] bond1: entered allmulticast mode [ 164.366518][ T7189] 8021q: adding VLAN 0 to HW filter on device bond1 [ 164.377899][ T3309] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 164.397752][ T7183] FAT-fs (loop4): error, invalid FAT chain (i_pos 548, last_block 8) [ 164.411685][ T7183] FAT-fs (loop4): Filesystem has been set read-only [ 164.442966][ T7189] bond1 (unregistering): Released all slaves [ 164.471241][ T7192] geneve1: entered promiscuous mode [ 164.489485][ T7192] __nla_validate_parse: 8 callbacks suppressed [ 164.489503][ T7192] netlink: 4 bytes leftover after parsing attributes in process `syz.3.893'. [ 164.517520][ T7183] FAT-fs (loop4): error, corrupted file size (i_pos 548, 522) [ 164.545045][ T7186] SELinux: syz.4.890 (7186) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 164.636767][ T7205] loop2: detected capacity change from 0 to 512 [ 164.695529][ T7205] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 164.749111][ T7205] EXT4-fs (loop2): 1 truncate cleaned up [ 164.755317][ T7205] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 164.802184][ T7186] wireguard0: entered promiscuous mode [ 164.807736][ T7186] wireguard0: entered allmulticast mode [ 164.821379][ T7213] Invalid ELF header magic: != ELF [ 164.853993][ T7205] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 164.917788][ T7203] loop5: detected capacity change from 0 to 1024 [ 164.956553][ T7209] veth0: entered promiscuous mode [ 164.983490][ T7209] netlink: 4 bytes leftover after parsing attributes in process `syz.0.899'. [ 165.015328][ T7209] veth0 (unregistering): left promiscuous mode [ 165.058631][ T7203] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 165.245351][ T6214] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 165.337091][ T7227] loop4: detected capacity change from 0 to 2048 [ 165.373790][ T7228] 9pnet_fd: Insufficient options for proto=fd [ 165.400394][ T7227] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 165.516965][ T7232] bond1: entered promiscuous mode [ 165.522280][ T7232] bond1: entered allmulticast mode [ 165.538598][ T7232] 8021q: adding VLAN 0 to HW filter on device bond1 [ 165.561918][ T7232] bond1 (unregistering): Released all slaves [ 165.596757][ T7227] netlink: 16 bytes leftover after parsing attributes in process `syz.4.903'. [ 165.596946][ T7237] bond2: entered promiscuous mode [ 165.610932][ T7237] bond2: entered allmulticast mode [ 165.616514][ T7237] 8021q: adding VLAN 0 to HW filter on device bond2 [ 165.627163][ T7237] bond2 (unregistering): Released all slaves [ 165.682566][ T7243] loop2: detected capacity change from 0 to 1024 [ 165.712006][ T7243] EXT4-fs: Ignoring removed orlov option [ 165.717884][ T7243] EXT4-fs: Ignoring removed bh option [ 165.751254][ T7249] bond2: entered promiscuous mode [ 165.756440][ T7249] bond2: entered allmulticast mode [ 165.766913][ T3306] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 165.791933][ T7243] EXT4-fs: Ignoring removed bh option [ 165.800848][ T7249] 8021q: adding VLAN 0 to HW filter on device bond2 [ 165.811305][ T7243] EXT4-fs (loop2): mounted filesystem 05000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 165.853234][ T7249] bond2 (unregistering): Released all slaves [ 165.931278][ T29] kauditd_printk_skb: 392 callbacks suppressed [ 165.931378][ T29] audit: type=1400 audit(1751154772.169:9062): avc: denied { bind } for pid=7261 comm="syz.4.909" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 166.039150][ T29] audit: type=1326 audit(1751154772.269:9063): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7271 comm="syz.4.914" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f149c0de929 code=0x7ffc0000 [ 166.062887][ T29] audit: type=1326 audit(1751154772.279:9064): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7271 comm="syz.4.914" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f149c0de929 code=0x7ffc0000 [ 166.086381][ T29] audit: type=1326 audit(1751154772.279:9065): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7271 comm="syz.4.914" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f149c0de929 code=0x7ffc0000 [ 166.109781][ T29] audit: type=1326 audit(1751154772.279:9066): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7271 comm="syz.4.914" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f149c0de929 code=0x7ffc0000 [ 166.133314][ T29] audit: type=1326 audit(1751154772.279:9067): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7271 comm="syz.4.914" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f149c0de929 code=0x7ffc0000 [ 166.156889][ T29] audit: type=1326 audit(1751154772.279:9068): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7271 comm="syz.4.914" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f149c0de929 code=0x7ffc0000 [ 166.180279][ T29] audit: type=1326 audit(1751154772.279:9069): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7271 comm="syz.4.914" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f149c0de929 code=0x7ffc0000 [ 166.203572][ T29] audit: type=1326 audit(1751154772.279:9070): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7271 comm="syz.4.914" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f149c0de929 code=0x7ffc0000 [ 166.233328][ T7280] 9pnet_fd: Insufficient options for proto=fd [ 166.253011][ T29] audit: type=1326 audit(1751154772.279:9071): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7271 comm="syz.4.914" exe="/root/syz-executor" sig=0 arch=c000003e syscall=129 compat=0 ip=0x7f149c0de929 code=0x7ffc0000 [ 166.278995][ T7282] loop4: detected capacity change from 0 to 512 [ 166.290714][ T7282] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 166.303070][ T7282] EXT4-fs (loop4): 1 truncate cleaned up [ 166.309822][ T7282] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 166.467182][ T3309] EXT4-fs error (device loop2): ext4_readdir:264: inode #11: block 36: comm syz-executor: path /174/file1/lost+found: bad entry in directory: inode out of bounds - offset=0, inode=1459617792, rec_len=1024, size=1024 fake=0 [ 166.504191][ T3309] EXT4-fs (loop2): Remounting filesystem read-only [ 166.514312][ T3309] EXT4-fs (loop2): unmounting filesystem 05000000-0000-0000-0000-000000000000. [ 166.901913][ T7288] geneve1: entered promiscuous mode [ 166.910508][ T7288] netlink: 4 bytes leftover after parsing attributes in process `syz.2.920'. [ 167.067361][ T7288] geneve1 (unregistering): left promiscuous mode [ 167.081852][ T7292] loop5: detected capacity change from 0 to 512 [ 167.099099][ T7292] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 167.127564][ T7295] bond2: entered promiscuous mode [ 167.132806][ T7295] bond2: entered allmulticast mode [ 167.294951][ T7295] 8021q: adding VLAN 0 to HW filter on device bond2 [ 167.441744][ T7282] syz.4.916 invoked oom-killer: gfp_mask=0x402dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_ZERO|__GFP_NOWARN), order=0, oom_score_adj=1000 [ 167.455953][ T7282] CPU: 0 UID: 0 PID: 7282 Comm: syz.4.916 Not tainted 6.16.0-rc3-syzkaller-00319-gded779017ad7 #0 PREEMPT(voluntary) [ 167.456053][ T7282] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 167.456102][ T7282] Call Trace: [ 167.456111][ T7282] [ 167.456122][ T7282] __dump_stack+0x1d/0x30 [ 167.456151][ T7282] dump_stack_lvl+0xe8/0x140 [ 167.456174][ T7282] dump_stack+0x15/0x1b [ 167.456194][ T7282] dump_header+0x81/0x220 [ 167.456283][ T7282] oom_kill_process+0x334/0x3f0 [ 167.456326][ T7282] out_of_memory+0x979/0xb80 [ 167.456361][ T7282] try_charge_memcg+0x5e6/0x9e0 [ 167.456456][ T7282] obj_cgroup_charge_pages+0xa6/0x150 [ 167.456490][ T7282] __memcg_kmem_charge_page+0x9f/0x170 [ 167.456527][ T7282] __alloc_frozen_pages_noprof+0x188/0x360 [ 167.456628][ T7282] alloc_pages_mpol+0xb3/0x250 [ 167.456701][ T7282] alloc_pages_noprof+0x90/0x130 [ 167.456750][ T7282] __vmalloc_node_range_noprof+0x6f2/0xe00 [ 167.456881][ T7282] __kvmalloc_node_noprof+0x30f/0x4e0 [ 167.456938][ T7282] ? ip_set_alloc+0x1f/0x30 [ 167.456971][ T7282] ? ip_set_alloc+0x1f/0x30 [ 167.457000][ T7282] ? __kmalloc_cache_noprof+0x189/0x320 [ 167.457078][ T7282] ip_set_alloc+0x1f/0x30 [ 167.457113][ T7282] hash_netiface_create+0x282/0x740 [ 167.457150][ T7282] ? __pfx_hash_netiface_create+0x10/0x10 [ 167.457267][ T7282] ip_set_create+0x3cc/0x960 [ 167.457316][ T7282] ? __nla_parse+0x40/0x60 [ 167.457344][ T7282] nfnetlink_rcv_msg+0x4c3/0x590 [ 167.457409][ T7282] ? selinux_capable+0x1f9/0x270 [ 167.457448][ T7282] netlink_rcv_skb+0x123/0x220 [ 167.457592][ T7282] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 167.457637][ T7282] nfnetlink_rcv+0x16b/0x1690 [ 167.457753][ T7282] ? __kfree_skb+0x109/0x150 [ 167.457790][ T7282] ? nlmon_xmit+0x4f/0x60 [ 167.457825][ T7282] ? consume_skb+0x49/0x150 [ 167.457866][ T7282] ? nlmon_xmit+0x4f/0x60 [ 167.457924][ T7282] ? dev_hard_start_xmit+0x3b0/0x3e0 [ 167.458030][ T7282] ? __dev_queue_xmit+0x11c0/0x1fb0 [ 167.458073][ T7282] ? __dev_queue_xmit+0x182/0x1fb0 [ 167.458122][ T7282] ? ref_tracker_free+0x37d/0x3e0 [ 167.458195][ T7282] ? __netlink_deliver_tap+0x4dc/0x500 [ 167.458310][ T7282] netlink_unicast+0x59e/0x670 [ 167.458404][ T7282] netlink_sendmsg+0x58b/0x6b0 [ 167.458427][ T7282] ? __pfx_netlink_sendmsg+0x10/0x10 [ 167.458454][ T7282] __sock_sendmsg+0x145/0x180 [ 167.458490][ T7282] ____sys_sendmsg+0x31e/0x4e0 [ 167.458542][ T7282] ___sys_sendmsg+0x17b/0x1d0 [ 167.458678][ T7282] __x64_sys_sendmsg+0xd4/0x160 [ 167.458720][ T7282] x64_sys_call+0x2999/0x2fb0 [ 167.458754][ T7282] do_syscall_64+0xd2/0x200 [ 167.458784][ T7282] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 167.458812][ T7282] ? clear_bhb_loop+0x40/0x90 [ 167.458835][ T7282] ? clear_bhb_loop+0x40/0x90 [ 167.458865][ T7282] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 167.459054][ T7282] RIP: 0033:0x7f149c0de929 [ 167.459074][ T7282] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 167.459105][ T7282] RSP: 002b:00007f149a747038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 167.459124][ T7282] RAX: ffffffffffffffda RBX: 00007f149c305fa0 RCX: 00007f149c0de929 [ 167.459137][ T7282] RDX: 0000000000000810 RSI: 0000200000000040 RDI: 0000000000000005 [ 167.459150][ T7282] RBP: 00007f149c160b39 R08: 0000000000000000 R09: 0000000000000000 [ 167.459162][ T7282] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 167.459249][ T7282] R13: 0000000000000000 R14: 00007f149c305fa0 R15: 00007fff3b831b18 [ 167.459276][ T7282] [ 167.805729][ T7282] memory: usage 307120kB, limit 307200kB, failcnt 233 [ 167.812716][ T7282] memory+swap: usage 307732kB, limit 9007199254740988kB, failcnt 0 [ 167.820679][ T7282] kmem: usage 307072kB, limit 9007199254740988kB, failcnt 0 [ 167.828093][ T7282] Memory cgroup stats for /syz4: [ 167.828985][ T7282] cache 12288 [ 167.837293][ T7282] rss 0 [ 167.840148][ T7282] shmem 0 [ 167.843117][ T7282] mapped_file 0 [ 167.846696][ T7282] dirty 0 [ 167.849758][ T7282] writeback 0 [ 167.853124][ T7282] workingset_refault_anon 1150 [ 167.857973][ T7282] workingset_refault_file 193 [ 167.862692][ T7282] swap 634880 [ 167.866177][ T7282] swapcached 24576 [ 167.870002][ T7282] pgpgin 85215 [ 167.873457][ T7282] pgpgout 85205 [ 167.877007][ T7282] pgfault 99374 [ 167.880535][ T7282] pgmajfault 202 [ 167.884184][ T7282] inactive_anon 12288 [ 167.888245][ T7282] active_anon 12288 [ 167.892086][ T7282] inactive_file 16384 [ 167.896093][ T7282] active_file 0 [ 167.899650][ T7282] unevictable 0 [ 167.903159][ T7282] hierarchical_memory_limit 314572800 [ 167.908596][ T7282] hierarchical_memsw_limit 9223372036854771712 [ 167.914902][ T7282] total_cache 12288 [ 167.918831][ T7282] total_rss 0 [ 167.922193][ T7282] total_shmem 0 [ 167.925739][ T7282] total_mapped_file 0 [ 167.929768][ T7282] total_dirty 0 [ 167.933245][ T7282] total_writeback 0 [ 167.937078][ T7282] total_workingset_refault_anon 1150 [ 167.942454][ T7282] total_workingset_refault_file 193 [ 167.947803][ T7282] total_swap 634880 [ 167.951761][ T7282] total_swapcached 24576 [ 167.956053][ T7282] total_pgpgin 85215 [ 167.959995][ T7282] total_pgpgout 85205 [ 167.964050][ T7282] total_pgfault 99374 [ 167.968097][ T7282] total_pgmajfault 202 [ 167.972205][ T7282] total_inactive_anon 12288 [ 167.976748][ T7282] total_active_anon 12288 [ 167.981142][ T7282] total_inactive_file 16384 [ 167.985745][ T7282] total_active_file 0 [ 167.989821][ T7282] total_unevictable 0 [ 167.993851][ T7282] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz4,task_memcg=/syz4,task=syz.4.916,pid=7281,uid=0 [ 168.008634][ T7282] Memory cgroup out of memory: Killed process 7281 (syz.4.916) total-vm:93752kB, anon-rss:936kB, file-rss:22312kB, shmem-rss:0kB, UID:0 pgtables:128kB oom_score_adj:1000 [ 168.028925][ T7292] EXT4-fs (loop5): 1 truncate cleaned up [ 168.036717][ T7295] bond2 (unregistering): Released all slaves [ 168.059484][ T7292] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 168.079403][ T7292] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 168.125097][ T7304] loop2: detected capacity change from 0 to 2048 [ 168.137408][ T7306] netlink: 36 bytes leftover after parsing attributes in process `syz.0.923'. [ 168.146601][ T7306] netlink: 36 bytes leftover after parsing attributes in process `syz.0.923'. [ 168.160018][ T7306] netlink: 36 bytes leftover after parsing attributes in process `syz.0.923'. [ 168.179444][ T7304] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 168.208492][ T7308] bond2: entered promiscuous mode [ 168.213688][ T7308] bond2: entered allmulticast mode [ 168.232548][ T7306] netlink: 36 bytes leftover after parsing attributes in process `syz.0.923'. [ 168.241616][ T7306] netlink: 36 bytes leftover after parsing attributes in process `syz.0.923'. [ 168.261839][ T7308] 8021q: adding VLAN 0 to HW filter on device bond2 [ 168.268643][ T7306] netlink: 36 bytes leftover after parsing attributes in process `syz.0.923'. [ 168.291035][ T7308] bond2 (unregistering): Released all slaves [ 168.382141][ T3306] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 168.428346][ T3309] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 168.503022][ T7329] 9pnet_fd: Insufficient options for proto=fd [ 168.756805][ T7343] netdevsim netdevsim5 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 168.813654][ T7344] netlink: zone id is out of range [ 168.834629][ T7343] netdevsim netdevsim5 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 168.910318][ T7343] netdevsim netdevsim5 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 168.950471][ T7343] netdevsim netdevsim5 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 169.044340][ T7343] netdevsim netdevsim5 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 169.089590][ T7343] netdevsim netdevsim5 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 169.104965][ T7343] netdevsim netdevsim5 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 169.125372][ T7343] netdevsim netdevsim5 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 169.217388][ T7354] netlink: 'syz.5.933': attribute type 10 has an invalid length. [ 169.236092][ T7354] dummy0: entered promiscuous mode [ 169.257117][ T7354] bridge0: port 3(dummy0) entered blocking state [ 169.263690][ T7354] bridge0: port 3(dummy0) entered disabled state [ 169.288368][ T7354] dummy0: entered allmulticast mode [ 169.297478][ T7354] bridge0: port 3(dummy0) entered blocking state [ 169.304035][ T7354] bridge0: port 3(dummy0) entered forwarding state [ 169.535061][ T7362] loop3: detected capacity change from 0 to 2048 [ 169.598626][ T3491] loop3: p1 < > p3 [ 169.603407][ T3491] loop3: p3 size 134217728 extends beyond EOD, truncated [ 169.621994][ T7362] loop3: p1 < > p3 [ 169.623744][ T7371] netlink: zone id is out of range [ 169.639195][ T7362] loop3: p3 size 134217728 extends beyond EOD, truncated [ 169.733541][ T3299] udevd[3299]: inotify_add_watch(7, /dev/loop3p3, 10) failed: No such file or directory [ 169.743702][ T7373] bond1: entered promiscuous mode [ 169.748921][ T7373] bond1: entered allmulticast mode [ 169.756080][ T3491] udevd[3491]: inotify_add_watch(7, /dev/loop3p1, 10) failed: No such file or directory [ 169.767984][ T7373] 8021q: adding VLAN 0 to HW filter on device bond1 [ 169.783991][ T7373] bond1 (unregistering): Released all slaves [ 169.793618][ T3491] udevd[3491]: inotify_add_watch(7, /dev/loop3p1, 10) failed: No such file or directory [ 169.806061][ T3299] udevd[3299]: inotify_add_watch(7, /dev/loop3p3, 10) failed: No such file or directory [ 169.832730][ T7376] vhci_hcd: invalid port number 96 [ 169.838214][ T7376] vhci_hcd: default hub control req: 0000 vfffc i0060 l0 [ 169.931439][ T7385] loop4: detected capacity change from 0 to 1024 [ 169.968983][ T7385] EXT4-fs (loop4): couldn't mount as ext2 due to feature incompatibilities [ 169.970441][ T7387] __nla_validate_parse: 8 callbacks suppressed [ 169.970513][ T7387] netlink: 8 bytes leftover after parsing attributes in process `syz.2.946'. [ 170.041951][ T7390] ip6gre1: entered allmulticast mode [ 170.083233][ T7381] loop3: detected capacity change from 0 to 512 [ 170.149128][ T7381] EXT4-fs (loop3): too many log groups per flexible block group [ 170.166568][ T7381] EXT4-fs (loop3): failed to initialize mballoc (-12) [ 170.281157][ T7381] EXT4-fs (loop3): mount failed [ 170.351265][ T7381] xt_hashlimit: size too large, truncated to 1048576 [ 170.693195][ T7411] IPv4: Oversized IP packet from 127.202.26.0 [ 170.910614][ T7417] netlink: 14 bytes leftover after parsing attributes in process `syz.3.952'. [ 171.070347][ T7420] netlink: 14 bytes leftover after parsing attributes in process `syz.5.953'. [ 171.101754][ T7424] bond2: entered promiscuous mode [ 171.106903][ T7424] bond2: entered allmulticast mode [ 171.112649][ T7424] 8021q: adding VLAN 0 to HW filter on device bond2 [ 171.143930][ T7424] bond2 (unregistering): Released all slaves [ 171.252468][ T7436] loop5: detected capacity change from 0 to 2048 [ 171.266153][ T29] kauditd_printk_skb: 117 callbacks suppressed [ 171.266169][ T29] audit: type=1326 audit(1751154777.499:9189): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7437 comm="syz.2.968" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f796109e929 code=0x7ffc0000 [ 171.273128][ T7438] netlink: 16 bytes leftover after parsing attributes in process `syz.2.968'. [ 171.296815][ T29] audit: type=1326 audit(1751154777.499:9190): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7437 comm="syz.2.968" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f796109e929 code=0x7ffc0000 [ 171.328317][ T29] audit: type=1326 audit(1751154777.499:9191): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7437 comm="syz.2.968" exe="/root/syz-executor" sig=0 arch=c000003e syscall=441 compat=0 ip=0x7f796109e929 code=0x7ffc0000 [ 171.340219][ T3491] loop5: p1 < > p3 [ 171.351745][ T29] audit: type=1326 audit(1751154777.499:9192): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7437 comm="syz.2.968" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f796109e929 code=0x7ffc0000 [ 171.379330][ T7439] loop3: detected capacity change from 0 to 1024 [ 171.382390][ T7439] EXT4-fs: Ignoring removed orlov option [ 171.385781][ T29] audit: type=1326 audit(1751154777.499:9193): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7437 comm="syz.2.968" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f796109e929 code=0x7ffc0000 [ 171.391535][ T7439] EXT4-fs: Ignoring removed bh option [ 171.396726][ T7439] EXT4-fs: Ignoring removed bh option [ 171.414883][ T29] audit: type=1326 audit(1751154777.499:9194): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7437 comm="syz.2.968" exe="/root/syz-executor" sig=0 arch=c000003e syscall=53 compat=0 ip=0x7f796109e929 code=0x7ffc0000 [ 171.449157][ T29] audit: type=1326 audit(1751154777.499:9195): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7437 comm="syz.2.968" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f796109e929 code=0x7ffc0000 [ 171.470771][ T3491] loop5: p3 size 134217728 extends beyond EOD, truncated [ 171.472542][ T29] audit: type=1326 audit(1751154777.499:9196): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7437 comm="syz.2.968" exe="/root/syz-executor" sig=0 arch=c000003e syscall=233 compat=0 ip=0x7f796109e929 code=0x7ffc0000 [ 171.479627][ T29] audit: type=1326 audit(1751154777.499:9197): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7437 comm="syz.2.968" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f796109e929 code=0x7ffc0000 [ 171.479720][ T29] audit: type=1326 audit(1751154777.499:9198): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7437 comm="syz.2.968" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f796109e929 code=0x7ffc0000 [ 171.529956][ T7439] EXT4-fs (loop3): mounted filesystem 05000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 171.559362][ T7436] loop5: p1 < > p3 [ 171.567435][ T7436] loop5: p3 size 134217728 extends beyond EOD, truncated [ 171.649813][ T7448] loop2: detected capacity change from 0 to 128 [ 171.663420][ T3491] udevd[3491]: inotify_add_watch(7, /dev/loop5p1, 10) failed: No such file or directory [ 171.684787][ T3299] udevd[3299]: inotify_add_watch(7, /dev/loop5p3, 10) failed: No such file or directory [ 171.701236][ T7448] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 171.726214][ T7448] ext4 filesystem being mounted at /184/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 171.850815][ T7453] ( speed is unknown, defaulting to 1000 [ 172.116304][ T7452] loop5: detected capacity change from 0 to 512 [ 172.301227][ T3312] EXT4-fs error (device loop3): ext4_readdir:264: inode #11: block 36: comm syz-executor: path /175/file1/lost+found: bad entry in directory: inode out of bounds - offset=0, inode=1459617792, rec_len=1024, size=1024 fake=0 [ 172.382153][ T3312] EXT4-fs (loop3): Remounting filesystem read-only [ 172.419796][ T3312] EXT4-fs (loop3): unmounting filesystem 05000000-0000-0000-0000-000000000000. [ 173.654519][ T3309] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 173.687730][ T7473] x_tables: ip6_tables: CLASSIFY target: used from hooks PREROUTING, but only usable from FORWARD/OUTPUT/POSTROUTING [ 173.726111][ T7475] netlink: 14 bytes leftover after parsing attributes in process `syz.2.967'. [ 173.889205][ T7480] netlink: 5 bytes leftover after parsing attributes in process `syz.4.972'. [ 173.906374][ T7490] loop5: detected capacity change from 0 to 1024 [ 173.917667][ T7490] EXT4-fs (loop5): couldn't mount as ext2 due to feature incompatibilities [ 174.051721][ T7496] ( speed is unknown, defaulting to 1000 [ 174.089447][ T7505] netlink: 32 bytes leftover after parsing attributes in process `syz.4.976'. [ 174.168469][ T7511] smc: net device bond0 applied user defined pnetid SYZ0 [ 174.198846][ T7511] smc: net device bond0 erased user defined pnetid SYZ0 [ 174.243688][ T7511] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=7511 comm=syz.5.981 [ 174.371047][ T7519] ( speed is unknown, defaulting to 1000 [ 174.437969][ T7525] loop4: detected capacity change from 0 to 512 [ 174.444850][ T7525] EXT4-fs: Ignoring removed oldalloc option [ 174.456611][ T7525] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 174.492028][ T7525] EXT4-fs (loop4): orphan cleanup on readonly fs [ 174.500341][ T7525] EXT4-fs error (device loop4): ext4_acquire_dquot:6933: comm syz.4.984: Failed to acquire dquot type 1 [ 174.579645][ T7525] EXT4-fs (loop4): 1 truncate cleaned up [ 174.873614][ T3401] Process accounting resumed [ 175.331342][ T7525] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 175.618672][ T7530] loop5: detected capacity change from 0 to 512 [ 175.658742][ T7530] SELinux: security_context_str_to_sid (user_u) failed with errno=-22 [ 175.749154][ T7530] binfmt_misc: register: failed to install interpreter file ./file2 [ 176.268539][ T3306] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 176.395324][ T7543] netlink: 12 bytes leftover after parsing attributes in process `syz.5.991'. [ 176.546632][ T7558] netlink: 32 bytes leftover after parsing attributes in process `syz.0.994'. [ 176.632763][ T7556] loop4: detected capacity change from 0 to 1024 [ 176.793538][ T7556] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 176.934974][ T3306] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 177.203391][ T7580] netlink: 'syz.2.998': attribute type 37 has an invalid length. [ 177.593836][ T7581] netdevsim netdevsim5 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 177.647808][ T7583] loop3: detected capacity change from 0 to 512 [ 177.671612][ T7581] netdevsim netdevsim5 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 177.693583][ T7583] EXT4-fs (loop3): too many log groups per flexible block group [ 177.702897][ T7583] EXT4-fs (loop3): failed to initialize mballoc (-12) [ 177.714177][ T7583] EXT4-fs (loop3): mount failed [ 177.721565][ T7581] netdevsim netdevsim5 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 177.756641][ T7583] xt_hashlimit: size too large, truncated to 1048576 [ 177.777431][ T7581] netdevsim netdevsim5 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 177.848868][ T7595] IPv4: Oversized IP packet from 127.202.26.0 [ 177.899266][ T7599] netlink: 'syz.2.1005': attribute type 21 has an invalid length. [ 177.905438][ T7581] netdevsim netdevsim5 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 177.915748][ T7599] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1005'. [ 177.930468][ T7581] netdevsim netdevsim5 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 177.943888][ T7581] netdevsim netdevsim5 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 177.957280][ T7581] netdevsim netdevsim5 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 177.987381][ T29] kauditd_printk_skb: 195 callbacks suppressed [ 177.987399][ T29] audit: type=1326 audit(1751154784.219:9392): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7598 comm="syz.2.1005" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f796109e929 code=0x7ffc0000 [ 178.047834][ T29] audit: type=1326 audit(1751154784.259:9393): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7598 comm="syz.2.1005" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f796109e929 code=0x7ffc0000 [ 178.071480][ T29] audit: type=1326 audit(1751154784.259:9394): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7598 comm="syz.2.1005" exe="/root/syz-executor" sig=0 arch=c000003e syscall=435 compat=0 ip=0x7f796109e929 code=0x7ffc0000 [ 178.095153][ T29] audit: type=1326 audit(1751154784.269:9395): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7598 comm="syz.2.1005" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f796109e929 code=0x7ffc0000 [ 178.118758][ T29] audit: type=1326 audit(1751154784.269:9396): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7598 comm="syz.2.1005" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f796109e929 code=0x7ffc0000 [ 178.142373][ T29] audit: type=1326 audit(1751154784.269:9397): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7598 comm="syz.2.1005" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f796109e929 code=0x7ffc0000 [ 178.165836][ T29] audit: type=1326 audit(1751154784.269:9398): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7598 comm="syz.2.1005" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f796109e929 code=0x7ffc0000 [ 178.189454][ T29] audit: type=1326 audit(1751154784.269:9399): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7598 comm="syz.2.1005" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f796109e929 code=0x7ffc0000 [ 178.212966][ T29] audit: type=1326 audit(1751154784.269:9400): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7598 comm="syz.2.1005" exe="/root/syz-executor" sig=0 arch=c000003e syscall=61 compat=0 ip=0x7f796109e929 code=0x7ffc0000 [ 178.236448][ T29] audit: type=1326 audit(1751154784.269:9401): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7602 comm="syz.2.1005" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f79610d11e5 code=0x7ffc0000 [ 178.349406][ T7605] netlink: 'syz.5.1018': attribute type 1 has an invalid length. [ 178.418150][ T7605] 8021q: adding VLAN 0 to HW filter on device bond1 [ 178.471876][ T7619] loop4: detected capacity change from 0 to 512 [ 178.487486][ T7605] bond1: (slave gretap1): making interface the new active one [ 178.505757][ T7605] bond1: (slave gretap1): Enslaving as an active interface with an up link [ 178.631733][ T7622] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1013'. [ 178.656022][ T7619] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 178.672995][ T7619] ext4 filesystem being mounted at /213/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 178.733831][ T7631] xt_CT: You must specify a L4 protocol and not use inversions on it [ 178.965111][ T3306] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 179.190253][ T7637] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 179.197783][ T7637] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 179.207448][ T7637] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 179.215076][ T7637] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 179.392622][ T7645] netlink: 'syz.5.1017': attribute type 28 has an invalid length. [ 179.400781][ T7645] netlink: 'syz.5.1017': attribute type 3 has an invalid length. [ 179.408680][ T7645] netlink: 132 bytes leftover after parsing attributes in process `syz.5.1017'. [ 179.419493][ T7647] netlink: 14 bytes leftover after parsing attributes in process `syz.2.1020'. [ 179.490046][ T7650] netlink: 'syz.4.1016': attribute type 37 has an invalid length. [ 179.942567][ T7654] netlink: 'syz.3.1021': attribute type 10 has an invalid length. [ 179.950561][ T7654] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1021'. [ 180.003031][ T7654] dummy0: entered promiscuous mode [ 180.010076][ T7654] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check. [ 180.303739][ T7663] loop2: detected capacity change from 0 to 512 [ 180.353357][ T7663] EXT4-fs (loop2): too many log groups per flexible block group [ 180.356499][ T7669] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1027'. [ 180.365369][ T7663] EXT4-fs (loop2): failed to initialize mballoc (-12) [ 180.370681][ T7669] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1027'. [ 180.400714][ T7663] EXT4-fs (loop2): mount failed [ 180.463095][ T7663] xt_hashlimit: size too large, truncated to 1048576 [ 180.517262][ T7676] IPv4: Oversized IP packet from 127.202.26.0 [ 180.953755][ T7683] loop3: detected capacity change from 0 to 1024 [ 181.061088][ T7683] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 181.173081][ T7687] random: crng reseeded on system resumption [ 181.213839][ T3312] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 181.246888][ T7696] netlink: 14 bytes leftover after parsing attributes in process `syz.2.1033'. [ 181.257517][ T7696] hsr_slave_0: left promiscuous mode [ 181.265832][ T7696] hsr_slave_1: left promiscuous mode [ 181.419961][ T7714] loop3: detected capacity change from 0 to 512 [ 181.452495][ T7714] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 181.466833][ T7717] loop2: detected capacity change from 0 to 512 [ 181.477779][ T7714] EXT4-fs (loop3): 1 truncate cleaned up [ 181.489148][ T7714] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 181.828109][ T7728] xt_CT: You must specify a L4 protocol and not use inversions on it [ 182.571915][ T7730] netlink: 'syz.4.1042': attribute type 10 has an invalid length. [ 182.579897][ T7730] __nla_validate_parse: 1 callbacks suppressed [ 182.579918][ T7730] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1042'. [ 182.617829][ T7733] netlink: 14 bytes leftover after parsing attributes in process `syz.0.1051'. [ 182.638532][ T7734] loop2: detected capacity change from 0 to 1024 [ 182.649311][ T7733] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 182.663361][ T7733] bond0 (unregistering): Released all slaves [ 182.684517][ T7734] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 182.697470][ T7730] dummy0: entered promiscuous mode [ 182.714721][ T7730] bond0: (slave dummy0): Releasing backup interface [ 182.739922][ T7730] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check. [ 182.756348][ T7738] netlink: 'syz.5.1043': attribute type 27 has an invalid length. [ 182.773905][ T7734] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 49 with max blocks 1 with error 28 [ 182.786347][ T7734] EXT4-fs (loop2): This should not happen!! Data will be lost [ 182.786347][ T7734] [ 182.796185][ T7734] EXT4-fs (loop2): Total free blocks count 0 [ 182.802344][ T7734] EXT4-fs (loop2): Free/Dirty block details [ 182.808366][ T7734] EXT4-fs (loop2): free_blocks=0 [ 182.813346][ T7734] EXT4-fs (loop2): dirty_blocks=0 [ 182.818543][ T7734] EXT4-fs (loop2): Block reservation details [ 182.824567][ T7734] EXT4-fs (loop2): i_reserved_data_blocks=0 [ 182.844712][ T3312] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 182.875959][ T7738] bridge0: port 3(dummy0) entered disabled state [ 182.882523][ T7738] bridge0: port 2(bridge_slave_1) entered disabled state [ 182.889894][ T7738] bridge0: port 1(bridge_slave_0) entered disabled state [ 182.908284][ T3309] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 183.068765][ T7738] netdevsim netdevsim5 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 183.077330][ T7738] netdevsim netdevsim5 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 183.086075][ T7738] netdevsim netdevsim5 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 183.094547][ T7738] netdevsim netdevsim5 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 183.105078][ T7748] xt_connbytes: Forcing CT accounting to be enabled [ 183.129351][ T7748] set match dimension is over the limit! [ 183.140364][ T7757] netlink: 14 bytes leftover after parsing attributes in process `syz.3.1049'. [ 183.220481][ T7759] ( speed is unknown, defaulting to 1000 [ 183.748527][ T29] kauditd_printk_skb: 298 callbacks suppressed [ 183.748598][ T29] audit: type=1326 audit(1751154789.909:9700): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7777 comm="syz.3.1056" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fae3edde929 code=0x7ffc0000 [ 183.778426][ T29] audit: type=1326 audit(1751154789.909:9701): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7777 comm="syz.3.1056" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fae3edde929 code=0x7ffc0000 [ 183.801890][ T29] audit: type=1326 audit(1751154789.919:9702): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7777 comm="syz.3.1056" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fae3edde929 code=0x7ffc0000 [ 183.825368][ T29] audit: type=1326 audit(1751154789.919:9703): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7777 comm="syz.3.1056" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fae3edde929 code=0x7ffc0000 [ 183.849011][ T29] audit: type=1326 audit(1751154789.919:9704): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7777 comm="syz.3.1056" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fae3edde929 code=0x7ffc0000 [ 183.872489][ T29] audit: type=1326 audit(1751154789.919:9705): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7777 comm="syz.3.1056" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fae3edde929 code=0x7ffc0000 [ 183.896064][ T29] audit: type=1326 audit(1751154789.929:9706): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7777 comm="syz.3.1056" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fae3edde929 code=0x7ffc0000 [ 183.919592][ T29] audit: type=1326 audit(1751154789.929:9707): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7777 comm="syz.3.1056" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fae3edde929 code=0x7ffc0000 [ 183.943336][ T29] audit: type=1326 audit(1751154789.929:9708): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7777 comm="syz.3.1056" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fae3edde929 code=0x7ffc0000 [ 183.949335][ T7779] netlink: 300 bytes leftover after parsing attributes in process `syz.4.1055'. [ 183.966872][ T29] audit: type=1326 audit(1751154789.929:9709): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7777 comm="syz.3.1056" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fae3edde929 code=0x7ffc0000 [ 184.029287][ T7781] netlink: 14 bytes leftover after parsing attributes in process `syz.3.1056'. [ 184.075348][ T7769] netlink: 96 bytes leftover after parsing attributes in process `syz.2.1053'. [ 184.160831][ T7781] bond0 (unregistering): left promiscuous mode [ 184.167757][ T7781] bond_slave_0: left promiscuous mode [ 184.207221][ T7781] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 184.226405][ T7785] xt_hashlimit: size too large, truncated to 1048576 [ 184.244596][ T7781] bond0 (unregistering): Released all slaves [ 184.299753][ T23] syz2: Port: 1 Link DOWN [ 184.421814][ T7797] netlink: 14 bytes leftover after parsing attributes in process `syz.5.1062'. [ 184.981092][ T7800] loop2: detected capacity change from 0 to 1024 [ 185.185725][ T7800] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 185.496952][ T3309] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 185.507303][ T7820] tipc: New replicast peer: 255.255.255.255 [ 185.513677][ T7820] tipc: Enabled bearer , priority 10 [ 185.531769][ T7820] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1069'. [ 185.541934][ T7820] tipc: Disabling bearer [ 185.625003][ T7827] loop5: detected capacity change from 0 to 512 [ 185.635703][ T7827] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 185.664420][ T7827] EXT4-fs (loop5): 1 truncate cleaned up [ 185.677446][ T7827] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 185.760230][ T7834] loop3: detected capacity change from 0 to 512 [ 185.764414][ T7818] loop4: detected capacity change from 0 to 512 [ 185.790747][ T7834] EXT4-fs (loop3): too many log groups per flexible block group [ 185.790789][ T7834] EXT4-fs (loop3): failed to initialize mballoc (-12) [ 185.790819][ T7834] EXT4-fs (loop3): mount failed [ 185.834419][ T7834] xt_hashlimit: size too large, truncated to 1048576 [ 185.846979][ T7837] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 185.890742][ T6214] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 185.905153][ T7837] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 185.934412][ T7818] EXT4-fs (loop4): too many log groups per flexible block group [ 185.943536][ T7818] EXT4-fs (loop4): failed to initialize mballoc (-12) [ 185.952923][ T7818] EXT4-fs (loop4): mount failed [ 185.962420][ T7839] IPv4: Oversized IP packet from 127.202.26.0 [ 186.087970][ T7818] xt_hashlimit: size too large, truncated to 1048576 [ 186.126898][ T7846] loop5: detected capacity change from 0 to 1024 [ 186.147560][ T7846] loop5: detected capacity change from 0 to 512 [ 186.155571][ T7846] journal_path: Lookup failure for './file0/../file0/file0' [ 186.164105][ T7846] EXT4-fs: error: could not find journal device path [ 186.440541][ T7859] netlink: 'syz.0.1082': attribute type 13 has an invalid length. [ 186.527756][ T7857] loop4: detected capacity change from 0 to 1024 [ 186.760882][ T7857] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 187.142545][ T3306] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 187.332697][ T7870] loop5: detected capacity change from 0 to 1024 [ 187.418736][ T7870] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 187.482184][ T7870] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 49 with max blocks 1 with error 28 [ 187.494564][ T7870] EXT4-fs (loop5): This should not happen!! Data will be lost [ 187.494564][ T7870] [ 187.504291][ T7870] EXT4-fs (loop5): Total free blocks count 0 [ 187.510415][ T7870] EXT4-fs (loop5): Free/Dirty block details [ 187.516360][ T7870] EXT4-fs (loop5): free_blocks=0 [ 187.521469][ T7870] EXT4-fs (loop5): dirty_blocks=0 [ 187.526542][ T7870] EXT4-fs (loop5): Block reservation details [ 187.532596][ T7870] EXT4-fs (loop5): i_reserved_data_blocks=0 [ 187.599647][ T7876] netlink: 'syz.4.1085': attribute type 3 has an invalid length. [ 187.663829][ T7876] netlink: 'syz.4.1085': attribute type 21 has an invalid length. [ 187.859930][ T7879] serio: Serial port ptm0 [ 187.978465][ T6214] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 188.087224][ T7887] netlink: 'syz.2.1090': attribute type 1 has an invalid length. [ 188.135646][ T7887] 8021q: adding VLAN 0 to HW filter on device bond0 [ 188.216384][ T7887] bond0: (slave gretap1): making interface the new active one [ 188.245598][ T7887] bond0: (slave gretap1): Enslaving as an active interface with an up link [ 188.440097][ T7899] vhci_hcd: invalid port number 96 [ 188.445312][ T7899] vhci_hcd: default hub control req: 0000 vfffc i0060 l0 [ 188.514271][ T7902] loop5: detected capacity change from 0 to 1024 [ 188.523646][ T7899] Cannot find del_set index 0 as target [ 188.525613][ T7906] loop3: detected capacity change from 0 to 128 [ 188.538534][ T7909] loop2: detected capacity change from 0 to 164 [ 188.560327][ T7902] EXT4-fs (loop5): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 188.571382][ T7902] EXT4-fs (loop5): ext4_check_descriptors: Checksum for group 0 failed (42152!=20869) [ 188.609956][ T7902] EXT4-fs (loop5): stripe (2) is not aligned with cluster size (16), stripe is disabled [ 188.649166][ T7902] EXT4-fs error (device loop5): ext4_get_journal_inode:5796: inode #5: comm syz.5.1095: unexpected bad inode w/o EXT4_IGET_BAD [ 188.667825][ T7902] EXT4-fs (loop5): no journal found [ 188.673205][ T7902] EXT4-fs (loop5): can't get journal size [ 188.682337][ T7902] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 188.695524][ T7902] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 188.739895][ T7906] syz.3.1096: attempt to access beyond end of device [ 188.739895][ T7906] loop3: rw=2049, sector=129, nr_sectors = 16 limit=128 [ 188.750071][ T3789] kernel write not supported for file /688/attr/exec (pid: 3789 comm: kworker/1:5) [ 188.777265][ T7915] syz.3.1096: attempt to access beyond end of device [ 188.777265][ T7915] loop3: rw=2049, sector=145, nr_sectors = 24 limit=128 [ 188.792687][ T7915] syz.3.1096: attempt to access beyond end of device [ 188.792687][ T7915] loop3: rw=2049, sector=177, nr_sectors = 8 limit=128 [ 188.807138][ T7915] syz.3.1096: attempt to access beyond end of device [ 188.807138][ T7915] loop3: rw=2049, sector=193, nr_sectors = 8 limit=128 [ 188.880590][ T29] kauditd_printk_skb: 406 callbacks suppressed [ 188.880608][ T29] audit: type=1326 audit(1751154795.119:10116): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7919 comm="syz.4.1100" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f149c0de929 code=0x7ffc0000 [ 188.916855][ T7921] loop4: detected capacity change from 0 to 1024 [ 188.919496][ T7915] syz.3.1096: attempt to access beyond end of device [ 188.919496][ T7915] loop3: rw=2049, sector=209, nr_sectors = 8 limit=128 [ 188.955715][ T7921] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 188.976929][ T29] audit: type=1326 audit(1751154795.149:10117): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7919 comm="syz.4.1100" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f149c0de929 code=0x7ffc0000 [ 188.984252][ T7915] syz.3.1096: attempt to access beyond end of device [ 188.984252][ T7915] loop3: rw=2049, sector=225, nr_sectors = 8 limit=128 [ 189.000569][ T29] audit: type=1326 audit(1751154795.149:10118): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7919 comm="syz.4.1100" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f149c0de929 code=0x7ffc0000 [ 189.000621][ T29] audit: type=1326 audit(1751154795.149:10119): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7919 comm="syz.4.1100" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f149c0de929 code=0x7ffc0000 [ 189.000720][ T29] audit: type=1326 audit(1751154795.149:10120): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7919 comm="syz.4.1100" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7f149c0de929 code=0x7ffc0000 [ 189.000775][ T29] audit: type=1326 audit(1751154795.149:10121): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7919 comm="syz.4.1100" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f149c0de963 code=0x7ffc0000 [ 189.000810][ T29] audit: type=1326 audit(1751154795.149:10122): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7919 comm="syz.4.1100" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f149c0dd3df code=0x7ffc0000 [ 189.000840][ T29] audit: type=1326 audit(1751154795.149:10123): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7919 comm="syz.4.1100" exe="/root/syz-executor" sig=0 arch=c000003e syscall=11 compat=0 ip=0x7f149c0de9b7 code=0x7ffc0000 [ 189.000935][ T29] audit: type=1326 audit(1751154795.149:10124): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7919 comm="syz.4.1100" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f149c0dd290 code=0x7ffc0000 [ 189.000964][ T29] audit: type=1326 audit(1751154795.149:10125): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7919 comm="syz.4.1100" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f149c0de52b code=0x7ffc0000 [ 189.155944][ T7929] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 49 with max blocks 1 with error 28 [ 189.221725][ T7929] EXT4-fs (loop4): This should not happen!! Data will be lost [ 189.221725][ T7929] [ 189.231491][ T7929] EXT4-fs (loop4): Total free blocks count 0 [ 189.237546][ T7929] EXT4-fs (loop4): Free/Dirty block details [ 189.243581][ T7929] EXT4-fs (loop4): free_blocks=0 [ 189.248681][ T7929] EXT4-fs (loop4): dirty_blocks=0 [ 189.253752][ T7929] EXT4-fs (loop4): Block reservation details [ 189.256144][ T7915] syz.3.1096: attempt to access beyond end of device [ 189.256144][ T7915] loop3: rw=2049, sector=241, nr_sectors = 8 limit=128 [ 189.259783][ T7929] EXT4-fs (loop4): i_reserved_data_blocks=0 [ 189.277029][ T7932] rdma_op ffff888102885580 conn xmit_rdma 0000000000000000 [ 189.304754][ T7915] syz.3.1096: attempt to access beyond end of device [ 189.304754][ T7915] loop3: rw=2049, sector=257, nr_sectors = 8 limit=128 [ 189.318948][ T7915] syz.3.1096: attempt to access beyond end of device [ 189.318948][ T7915] loop3: rw=2049, sector=273, nr_sectors = 8 limit=128 [ 189.332757][ T7915] syz.3.1096: attempt to access beyond end of device [ 189.332757][ T7915] loop3: rw=2049, sector=289, nr_sectors = 8 limit=128 [ 189.352023][ T3306] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 189.427470][ T7938] netlink: 14 bytes leftover after parsing attributes in process `syz.4.1103'. [ 189.627866][ T7948] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 189.714718][ T7952] netlink: 'syz.4.1107': attribute type 28 has an invalid length. [ 189.722740][ T7952] netlink: 'syz.4.1107': attribute type 3 has an invalid length. [ 189.730663][ T7952] netlink: 132 bytes leftover after parsing attributes in process `syz.4.1107'. [ 189.740503][ T7948] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 189.832499][ T7953] xt_CT: You must specify a L4 protocol and not use inversions on it [ 190.499718][ T7964] netlink: 300 bytes leftover after parsing attributes in process `syz.2.1114'. [ 190.781824][ T7978] ( speed is unknown, defaulting to 1000 [ 191.114939][ T7977] netlink: zone id is out of range [ 191.277693][ T7983] loop4: detected capacity change from 0 to 164 [ 191.343116][ T7985] netlink: 36 bytes leftover after parsing attributes in process `syz.5.1119'. [ 191.596076][ T7995] ( speed is unknown, defaulting to 1000 [ 191.633210][ T7999] netlink: 68 bytes leftover after parsing attributes in process `syz.5.1124'. [ 191.668045][ T7999] team0: No ports can be present during mode change [ 191.703117][ T8003] ref_ctr_offset mismatch. inode: 0x4bc offset: 0x0 ref_ctr_offset(old): 0x0 ref_ctr_offset(new): 0x8 [ 191.743970][ T8005] netlink: 'syz.0.1126': attribute type 3 has an invalid length. [ 191.803320][ T8007] loop5: detected capacity change from 0 to 128 [ 191.819006][ T8007] EXT4-fs: Ignoring removed oldalloc option [ 191.849393][ T8007] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 191.865584][ T8007] ext4 filesystem being mounted at /74/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 191.877631][ T8007] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 192.282131][ T8021] xt_CT: You must specify a L4 protocol and not use inversions on it [ 193.194419][ T8023] ( speed is unknown, defaulting to 1000 [ 193.903710][ T29] kauditd_printk_skb: 57 callbacks suppressed [ 193.903726][ T29] audit: type=1326 audit(1751154800.139:10183): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8031 comm="syz.3.1132" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fae3edde929 code=0x7ffc0000 [ 193.952287][ T8035] netlink: 14 bytes leftover after parsing attributes in process `syz.5.1133'. [ 193.975450][ T8035] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 193.995764][ T29] audit: type=1326 audit(1751154800.169:10184): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8031 comm="syz.3.1132" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fae3edde929 code=0x7ffc0000 [ 194.019729][ T8032] loop3: detected capacity change from 0 to 1024 [ 194.027044][ T29] audit: type=1326 audit(1751154800.169:10185): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8031 comm="syz.3.1132" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fae3edde929 code=0x7ffc0000 [ 194.051900][ T29] audit: type=1326 audit(1751154800.169:10186): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8031 comm="syz.3.1132" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fae3edde929 code=0x7ffc0000 [ 194.060613][ T8032] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 194.076760][ T29] audit: type=1326 audit(1751154800.179:10187): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8031 comm="syz.3.1132" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7fae3edde929 code=0x7ffc0000 [ 194.112381][ T29] audit: type=1326 audit(1751154800.179:10188): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8031 comm="syz.3.1132" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7fae3edde963 code=0x7ffc0000 [ 194.136922][ T29] audit: type=1326 audit(1751154800.179:10189): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8031 comm="syz.3.1132" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7fae3eddd3df code=0x7ffc0000 [ 194.161509][ T29] audit: type=1326 audit(1751154800.189:10190): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8031 comm="syz.3.1132" exe="/root/syz-executor" sig=0 arch=c000003e syscall=11 compat=0 ip=0x7fae3edde9b7 code=0x7ffc0000 [ 194.201558][ T29] audit: type=1326 audit(1751154800.259:10191): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8031 comm="syz.3.1132" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fae3eddd290 code=0x7ffc0000 [ 194.225253][ T29] audit: type=1326 audit(1751154800.259:10192): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8031 comm="syz.3.1132" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fae3edde52b code=0x7ffc0000 [ 194.250048][ T8035] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 194.262502][ T8035] bond0 (unregistering): Released all slaves [ 194.271472][ T8042] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1134'. [ 194.291692][ T8032] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 49 with max blocks 1 with error 28 [ 194.304223][ T8032] EXT4-fs (loop3): This should not happen!! Data will be lost [ 194.304223][ T8032] [ 194.315014][ T8032] EXT4-fs (loop3): Total free blocks count 0 [ 194.322197][ T8032] EXT4-fs (loop3): Free/Dirty block details [ 194.329293][ T8032] EXT4-fs (loop3): free_blocks=0 [ 194.334331][ T8032] EXT4-fs (loop3): dirty_blocks=0 [ 194.340658][ T8032] EXT4-fs (loop3): Block reservation details [ 194.346698][ T8032] EXT4-fs (loop3): i_reserved_data_blocks=0 [ 194.384346][ T3312] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 194.386295][ T8050] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1147'. [ 194.436269][ T8053] xt_policy: too many policy elements [ 194.447194][ T8057] netlink: zone id is out of range [ 194.713239][ T8071] netlink: 'syz.4.1144': attribute type 1 has an invalid length. [ 194.736345][ T8077] 9pnet_fd: Insufficient options for proto=fd [ 194.755281][ T8078] SELinux: Context  is not valid (left unmapped). [ 194.835686][ T8071] 8021q: adding VLAN 0 to HW filter on device bond1 [ 195.221457][ T8084] ( speed is unknown, defaulting to 1000 [ 195.730692][ T8088] netlink: 'syz.3.1146': attribute type 13 has an invalid length. [ 196.120199][ T8088] netdevsim netdevsim3 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 196.128657][ T8088] netdevsim netdevsim3 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 196.137151][ T8088] netdevsim netdevsim3 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 196.145646][ T8088] netdevsim netdevsim3 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 196.208629][ T3783] ( speed is unknown, defaulting to 1000 [ 196.214344][ T3783] syz0: Port: 1 Link DOWN [ 196.264522][ T8071] bond1: (slave gretap1): making interface the new active one [ 196.280125][ T8071] bond1: (slave gretap1): Enslaving as an active interface with an up link [ 196.465517][ T8094] netlink: 'syz.2.1159': attribute type 13 has an invalid length. [ 197.020382][ T8098] ( speed is unknown, defaulting to 1000 [ 197.295931][ T8111] netlink: 36 bytes leftover after parsing attributes in process `syz.5.1153'. [ 197.927969][ T8116] ( speed is unknown, defaulting to 1000 [ 198.214905][ T8124] loop5: detected capacity change from 0 to 512 [ 198.249580][ T8128] netlink: 14 bytes leftover after parsing attributes in process `syz.2.1169'. [ 198.342606][ T8124] EXT4-fs (loop5): too many log groups per flexible block group [ 198.350558][ T8124] EXT4-fs (loop5): failed to initialize mballoc (-12) [ 198.401191][ T8124] EXT4-fs (loop5): mount failed [ 198.867474][ T8134] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1161'. [ 198.881230][ T8136] netlink: 'syz.0.1160': attribute type 1 has an invalid length. [ 198.893780][ T8134] loop2: detected capacity change from 0 to 512 [ 198.920028][ T8134] EXT4-fs (loop2): revision level too high, forcing read-only mode [ 198.928876][ T8136] 8021q: adding VLAN 0 to HW filter on device bond0 [ 198.938625][ T8119] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 198.947232][ T8119] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 198.955117][ T8123] xt_hashlimit: size too large, truncated to 1048576 [ 198.968134][ T8134] EXT4-fs (loop2): orphan cleanup on readonly fs [ 199.012438][ T8136] bond0: (slave gretap1): making interface the new active one [ 199.021362][ T8136] bond0: (slave gretap1): Enslaving as an active interface with an up link [ 199.061461][ T8134] __quota_error: 134 callbacks suppressed [ 199.061484][ T8134] Quota error (device loop2): dq_insert_tree: Quota tree root isn't allocated! [ 199.076408][ T8134] Quota error (device loop2): qtree_write_dquot: Error -5 occurred while creating quota [ 199.086271][ T8134] EXT4-fs error (device loop2): ext4_acquire_dquot:6933: comm syz.2.1161: Failed to acquire dquot type 1 [ 199.117536][ T8134] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.1161: bg 0: block 40: padding at end of block bitmap is not set [ 199.144129][ T8134] EXT4-fs error (device loop2) in ext4_mb_clear_bb:6548: Corrupt filesystem [ 199.161533][ T8141] ( speed is unknown, defaulting to 1000 [ 199.182446][ T8142] netlink: 'syz.4.1162': attribute type 1 has an invalid length. [ 199.208635][ T8134] EXT4-fs (loop2): 1 truncate cleaned up [ 199.223136][ T8134] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 199.243026][ T8142] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1162'. [ 199.331159][ T8142] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 199.406224][ T8142] bond2: (slave batadv0): Enslaving as a backup interface with an up link [ 199.443720][ T8149] bond2 (unregistering): (slave batadv0): Releasing backup interface [ 199.453801][ T8149] bond2 (unregistering): Released all slaves [ 199.554969][ T3309] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 199.607115][ T29] audit: type=1326 audit(1751154805.839:10327): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8161 comm="syz.0.1167" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0d214de929 code=0x7ffc0000 [ 199.644172][ T8162] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1167'. [ 199.676511][ T29] audit: type=1326 audit(1751154805.839:10328): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8161 comm="syz.0.1167" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0d214de929 code=0x7ffc0000 [ 199.700156][ T29] audit: type=1326 audit(1751154805.869:10329): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8161 comm="syz.0.1167" exe="/root/syz-executor" sig=0 arch=c000003e syscall=282 compat=0 ip=0x7f0d214de929 code=0x7ffc0000 [ 199.723811][ T29] audit: type=1326 audit(1751154805.869:10330): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8161 comm="syz.0.1167" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0d214de929 code=0x7ffc0000 [ 199.747953][ T29] audit: type=1326 audit(1751154805.869:10331): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8161 comm="syz.0.1167" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0d214de929 code=0x7ffc0000 [ 199.772201][ T29] audit: type=1326 audit(1751154805.869:10332): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8161 comm="syz.0.1167" exe="/root/syz-executor" sig=0 arch=c000003e syscall=294 compat=0 ip=0x7f0d214de929 code=0x7ffc0000 [ 199.796031][ T29] audit: type=1326 audit(1751154805.869:10333): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8161 comm="syz.0.1167" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0d214de929 code=0x7ffc0000 [ 199.819727][ T29] audit: type=1326 audit(1751154805.869:10334): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8161 comm="syz.0.1167" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0d214de929 code=0x7ffc0000 [ 200.554038][ T8215] loop2: detected capacity change from 0 to 128 [ 200.594416][ T8215] EXT4-fs: Ignoring removed oldalloc option [ 200.621894][ T8215] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 200.651743][ T8215] ext4 filesystem being mounted at /227/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 200.665025][ T8215] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 200.943187][ T8271] loop2: detected capacity change from 0 to 2048 [ 200.956022][ T8275] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1178'. [ 200.979153][ T3491] loop2: p1 < > p4 [ 200.983838][ T3491] loop2: p4 size 8388608 extends beyond EOD, truncated [ 200.997255][ T8271] loop2: p1 < > p4 [ 201.006415][ T8271] loop2: p4 size 8388608 extends beyond EOD, truncated [ 201.026187][ T8277] loop3: detected capacity change from 0 to 256 [ 201.049893][ T8271] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1176'. [ 201.051837][ T8277] FAT-fs (loop3): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 201.125391][ T8277] FAT-fs (loop3): Directory bread(block 64) failed [ 201.136813][ T8277] FAT-fs (loop3): Directory bread(block 65) failed [ 201.160374][ T8281] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1192'. [ 201.171848][ T8277] FAT-fs (loop3): Directory bread(block 66) failed [ 201.180616][ T8277] FAT-fs (loop3): Directory bread(block 67) failed [ 201.187332][ T8277] FAT-fs (loop3): Directory bread(block 68) failed [ 201.195909][ T8277] FAT-fs (loop3): Directory bread(block 69) failed [ 201.203790][ T8277] FAT-fs (loop3): Directory bread(block 70) failed [ 201.209960][ T8283] netlink: 'syz.2.1180': attribute type 3 has an invalid length. [ 201.213287][ T8277] FAT-fs (loop3): Directory bread(block 71) failed [ 201.224843][ T8277] FAT-fs (loop3): Directory bread(block 72) failed [ 201.234435][ T8277] FAT-fs (loop3): Directory bread(block 73) failed [ 201.501559][ T8299] siw: device registration error -23 [ 201.511939][ T8299] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1188'. [ 201.589646][ T8293] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=8293 comm=syz.4.1186 [ 201.603431][ T8293] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=8293 comm=syz.4.1186 [ 201.719880][ T8302] ( speed is unknown, defaulting to 1000 [ 202.156507][ T8309] netlink: 'syz.4.1189': attribute type 1 has an invalid length. [ 202.218651][ T8310] netlink: 32 bytes leftover after parsing attributes in process `syz.5.1190'. [ 202.584914][ T8306] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1189'. [ 202.611015][ T8310] loop5: detected capacity change from 0 to 512 [ 202.627153][ T8306] 8021q: adding VLAN 0 to HW filter on device bond2 [ 202.717317][ T8322] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1194'. [ 202.750951][ T8310] EXT4-fs (loop5): revision level too high, forcing read-only mode [ 202.760200][ T8310] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e040e018, mo2=0002] [ 202.801351][ T8310] System zones: 0-1, 15-15, 18-18, 34-34 [ 202.807202][ T8310] EXT4-fs (loop5): orphan cleanup on readonly fs [ 202.834496][ T8310] EXT4-fs warning (device loop5): ext4_enable_quotas:7168: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 202.849433][ T8310] EXT4-fs (loop5): Cannot turn on quotas: error -22 [ 202.898367][ T8310] EXT4-fs (loop5): 1 truncate cleaned up [ 202.904557][ T8310] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 202.985670][ T8336] netlink: 'syz.2.1198': attribute type 3 has an invalid length. [ 203.002892][ T8336] netlink: 'syz.2.1198': attribute type 21 has an invalid length. [ 203.190779][ T6214] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 204.374216][ T8350] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 204.425480][ T8356] loop4: detected capacity change from 0 to 512 [ 204.433775][ T29] kauditd_printk_skb: 212 callbacks suppressed [ 204.433795][ T29] audit: type=1326 audit(1751154810.669:10546): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8351 comm="syz.2.1202" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f796109e929 code=0x7ffc0000 [ 204.455681][ T8357] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1205'. [ 204.477185][ T29] audit: type=1326 audit(1751154810.669:10547): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8351 comm="syz.2.1202" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f796109e929 code=0x7ffc0000 [ 204.502202][ T29] audit: type=1326 audit(1751154810.689:10548): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8351 comm="syz.2.1202" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f796109e929 code=0x7ffc0000 [ 204.518374][ T8361] loop2: detected capacity change from 0 to 512 [ 204.527250][ T29] audit: type=1326 audit(1751154810.689:10549): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8351 comm="syz.2.1202" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f796109e929 code=0x7ffc0000 [ 204.534821][ T8361] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 204.557786][ T29] audit: type=1326 audit(1751154810.689:10550): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8351 comm="syz.2.1202" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f796109e929 code=0x7ffc0000 [ 204.557840][ T29] audit: type=1326 audit(1751154810.689:10551): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8351 comm="syz.2.1202" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f796109e929 code=0x7ffc0000 [ 204.557876][ T29] audit: type=1326 audit(1751154810.689:10552): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8351 comm="syz.2.1202" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f796109e929 code=0x7ffc0000 [ 204.642103][ T29] audit: type=1326 audit(1751154810.689:10553): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8351 comm="syz.2.1202" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f796109e929 code=0x7ffc0000 [ 204.666977][ T29] audit: type=1326 audit(1751154810.689:10554): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8351 comm="syz.2.1202" exe="/root/syz-executor" sig=0 arch=c000003e syscall=430 compat=0 ip=0x7f796109e929 code=0x7ffc0000 [ 204.691714][ T29] audit: type=1326 audit(1751154810.689:10555): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8351 comm="syz.2.1202" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f796109e929 code=0x7ffc0000 [ 204.701604][ T8366] netlink: 188 bytes leftover after parsing attributes in process `syz.3.1207'. [ 204.730980][ T8356] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 204.738090][ T8366] netlink: 'syz.3.1207': attribute type 27 has an invalid length. [ 204.745750][ T8361] EXT4-fs (loop2): 1 truncate cleaned up [ 204.753350][ T8366] dummy0: left promiscuous mode [ 204.769322][ T8356] ext4 filesystem being mounted at /247/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 204.781319][ T8361] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 204.799938][ T8356] EXT4-fs error (device loop4): ext4_do_update_inode:5568: inode #2: comm syz.4.1203: corrupted inode contents [ 204.827730][ T8356] EXT4-fs error (device loop4): ext4_dirty_inode:6459: inode #2: comm syz.4.1203: mark_inode_dirty error [ 204.836141][ T8366] 8021q: adding VLAN 0 to HW filter on device team0 [ 204.860383][ T8356] EXT4-fs error (device loop4): ext4_do_update_inode:5568: inode #2: comm syz.4.1203: corrupted inode contents [ 204.886520][ T8366] A link change request failed with some changes committed already. Interface 60ªX¹¦À may have been left with an inconsistent configuration, please check. [ 204.903877][ T3785] ( speed is unknown, defaulting to 1000 [ 204.910799][ T3785] syz0: Port: 1 Link ACTIVE [ 204.921734][ T8371] EXT4-fs error (device loop4): ext4_do_update_inode:5568: inode #2: comm syz.4.1203: corrupted inode contents [ 204.996636][ T8371] EXT4-fs error (device loop4): ext4_dirty_inode:6459: inode #2: comm syz.4.1203: mark_inode_dirty error [ 205.024852][ T8371] EXT4-fs error (device loop4): ext4_do_update_inode:5568: inode #2: comm syz.4.1203: corrupted inode contents [ 205.051575][ T8371] EXT4-fs error (device loop4): __ext4_ext_dirty:206: inode #2: comm syz.4.1203: mark_inode_dirty error [ 205.077031][ T8380] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=8380 comm=syz.5.1210 [ 205.089969][ T8371] EXT4-fs error (device loop4): ext4_do_update_inode:5568: inode #2: comm syz.4.1203: corrupted inode contents [ 205.091342][ T8371] EXT4-fs error (device loop4): ext4_dirty_inode:6459: inode #2: comm syz.4.1203: mark_inode_dirty error [ 205.103823][ T8380] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=8380 comm=syz.5.1210 [ 205.130337][ T8382] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1211'. [ 205.159519][ T8356] EXT4-fs error (device loop4): ext4_do_update_inode:5568: inode #2: comm syz.4.1203: corrupted inode contents [ 205.201114][ T8382] bond0: entered promiscuous mode [ 205.206296][ T8382] bond0: entered allmulticast mode [ 205.229532][ T8382] 8021q: adding VLAN 0 to HW filter on device bond0 [ 205.240938][ T3306] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 205.301074][ T8388] netlink: 'syz.5.1213': attribute type 3 has an invalid length. [ 205.369615][ T8392] siw: device registration error -23 [ 205.372609][ T8388] netlink: 'syz.5.1213': attribute type 21 has an invalid length. [ 205.390206][ T3785] hid-generic FFFF:FFFFFFFC:20000001.0004: unknown main item tag 0x1 [ 205.399608][ T3785] hid-generic FFFF:FFFFFFFC:20000001.0004: unknown main item tag 0x0 [ 205.407759][ T3785] hid-generic FFFF:FFFFFFFC:20000001.0004: unknown main item tag 0x0 [ 205.416979][ T3785] hid-generic FFFF:FFFFFFFC:20000001.0004: unknown main item tag 0x0 [ 205.426271][ T3785] hid-generic FFFF:FFFFFFFC:20000001.0004: unknown main item tag 0x0 [ 205.435524][ T3785] hid-generic FFFF:FFFFFFFC:20000001.0004: unknown main item tag 0x0 [ 205.444910][ T3785] hid-generic FFFF:FFFFFFFC:20000001.0004: unknown main item tag 0x4 [ 205.454243][ T3785] hid-generic FFFF:FFFFFFFC:20000001.0004: unknown main item tag 0x0 [ 205.454273][ T3785] hid-generic FFFF:FFFFFFFC:20000001.0004: unknown main item tag 0x0 [ 205.471786][ T3785] hid-generic FFFF:FFFFFFFC:20000001.0004: unknown main item tag 0x0 [ 205.481137][ T3785] hid-generic FFFF:FFFFFFFC:20000001.0004: unknown main item tag 0x2 [ 205.490488][ T3785] hid-generic FFFF:FFFFFFFC:20000001.0004: unknown main item tag 0x0 [ 205.499999][ T3785] hid-generic FFFF:FFFFFFFC:20000001.0004: unknown main item tag 0x0 [ 205.509362][ T3785] hid-generic FFFF:FFFFFFFC:20000001.0004: unknown main item tag 0x0 [ 205.517573][ T3785] hid-generic FFFF:FFFFFFFC:20000001.0004: unknown main item tag 0x0 [ 205.526865][ T3785] hid-generic FFFF:FFFFFFFC:20000001.0004: unknown main item tag 0x0 [ 205.533774][ T8392] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1212'. [ 205.536337][ T3785] hid-generic FFFF:FFFFFFFC:20000001.0004: unknown main item tag 0x0 [ 205.553429][ T3785] hid-generic FFFF:FFFFFFFC:20000001.0004: unknown main item tag 0x0 [ 205.562762][ T3785] hid-generic FFFF:FFFFFFFC:20000001.0004: unknown main item tag 0x0 [ 205.572013][ T3785] hid-generic FFFF:FFFFFFFC:20000001.0004: unknown main item tag 0x0 [ 205.581252][ T3785] hid-generic FFFF:FFFFFFFC:20000001.0004: unknown main item tag 0x0 [ 205.589680][ T3785] hid-generic FFFF:FFFFFFFC:20000001.0004: unknown main item tag 0x0 [ 205.597875][ T3785] hid-generic FFFF:FFFFFFFC:20000001.0004: unknown main item tag 0x0 [ 205.606057][ T3785] hid-generic FFFF:FFFFFFFC:20000001.0004: unknown main item tag 0x0 [ 205.614306][ T3785] hid-generic FFFF:FFFFFFFC:20000001.0004: unknown main item tag 0x0 [ 205.623630][ T3785] hid-generic FFFF:FFFFFFFC:20000001.0004: unknown main item tag 0x0 [ 205.632881][ T3785] hid-generic FFFF:FFFFFFFC:20000001.0004: unknown main item tag 0x0 [ 205.642179][ T3785] hid-generic FFFF:FFFFFFFC:20000001.0004: unknown main item tag 0x0 [ 205.651485][ T3785] hid-generic FFFF:FFFFFFFC:20000001.0004: unknown main item tag 0x0 [ 205.660875][ T3785] hid-generic FFFF:FFFFFFFC:20000001.0004: unknown main item tag 0x0 [ 205.670282][ T3785] hid-generic FFFF:FFFFFFFC:20000001.0004: unknown main item tag 0x0 [ 205.678553][ T3785] hid-generic FFFF:FFFFFFFC:20000001.0004: unknown main item tag 0x0 [ 205.686813][ T3785] hid-generic FFFF:FFFFFFFC:20000001.0004: unknown main item tag 0x0 [ 205.696142][ T3785] hid-generic FFFF:FFFFFFFC:20000001.0004: unknown main item tag 0x0 [ 205.705611][ T3785] hid-generic FFFF:FFFFFFFC:20000001.0004: unknown main item tag 0x0 [ 205.714933][ T3785] hid-generic FFFF:FFFFFFFC:20000001.0004: unknown main item tag 0x0 [ 205.724237][ T3785] hid-generic FFFF:FFFFFFFC:20000001.0004: unknown main item tag 0x0 [ 205.733640][ T3785] hid-generic FFFF:FFFFFFFC:20000001.0004: unknown main item tag 0x0 [ 205.743027][ T3785] hid-generic FFFF:FFFFFFFC:20000001.0004: unknown main item tag 0x0 [ 205.752465][ T3785] hid-generic FFFF:FFFFFFFC:20000001.0004: unknown main item tag 0x0 [ 205.769230][ T3785] hid-generic FFFF:FFFFFFFC:20000001.0004: hidraw0: HID v5.6f Device [syz0] on syz1 [ 205.809740][ T8375] Cannot find del_set index 0 as target [ 205.827770][ T3309] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 205.885422][ T8399] fido_id[8399]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 205.887752][ T8405] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1217'. [ 205.909289][ T8405] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1217'. [ 205.960834][ T8405] bond2: entered promiscuous mode [ 205.966061][ T8405] bond2: entered allmulticast mode [ 205.984953][ T8405] 8021q: adding VLAN 0 to HW filter on device bond2 [ 206.054945][ T8419] sch_fq: defrate 4294967295 ignored. [ 206.118464][ T8423] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1221'. [ 206.201352][ T8425] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 206.216348][ T8428] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1223'. [ 206.312339][ T8436] loop5: detected capacity change from 0 to 512 [ 206.325590][ T8436] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 206.345588][ T8436] EXT4-fs (loop5): 1 truncate cleaned up [ 206.367448][ T8436] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 206.367775][ T8440] futex_wake_op: syz.0.1227 tries to shift op by -1; fix this program [ 206.452057][ T8442] vhci_hcd: invalid port number 96 [ 206.457361][ T8442] vhci_hcd: default hub control req: 0000 vfffc i0060 l0 [ 206.478697][ T8442] Cannot find del_set index 0 as target [ 206.695880][ T8451] netlink: 'syz.0.1230': attribute type 3 has an invalid length. [ 206.712891][ T8449] bond2: entered promiscuous mode [ 206.718275][ T8449] bond2: entered allmulticast mode [ 206.733112][ T8451] netlink: 'syz.0.1230': attribute type 21 has an invalid length. [ 206.742728][ T8449] 8021q: adding VLAN 0 to HW filter on device bond2 [ 207.272048][ T8477] bond3: entered promiscuous mode [ 207.277222][ T8477] bond3: entered allmulticast mode [ 207.317590][ T8477] 8021q: adding VLAN 0 to HW filter on device bond3 [ 207.346143][ T8489] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=8489 comm=syz.3.1236 [ 207.358943][ T8489] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=8489 comm=syz.3.1236 [ 207.380704][ T6214] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 207.488130][ T8500] netlink: zone id is out of range [ 208.086941][ T8559] __nla_validate_parse: 10 callbacks suppressed [ 208.086970][ T8559] netlink: 44 bytes leftover after parsing attributes in process `syz.0.1240'. [ 208.263642][ T8563] loop5: detected capacity change from 0 to 512 [ 208.331675][ T8563] EXT4-fs warning (device loop5): ext4_enable_quotas:7168: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 208.404107][ T8574] 9pnet_fd: Insufficient options for proto=fd [ 208.416059][ T8574] siw: device registration error -23 [ 208.905351][ T8563] EXT4-fs (loop5): mount failed [ 209.021397][ T8582] netlink: 36 bytes leftover after parsing attributes in process `syz.5.1247'. [ 209.047507][ T8583] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1246'. [ 209.462413][ T8596] ( speed is unknown, defaulting to 1000 [ 209.809874][ T8598] loop2: detected capacity change from 0 to 512 [ 209.817169][ T8598] EXT4-fs: Ignoring removed mblk_io_submit option [ 209.824897][ T8598] EXT4-fs: Ignoring removed bh option [ 209.955238][ T8598] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 209.970723][ T8598] EXT4-fs (loop2): 1 truncate cleaned up [ 209.977021][ T8598] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 210.272447][ T8608] ( speed is unknown, defaulting to 1000 [ 210.591293][ T3309] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 210.707063][ T8606] SELinux: syz.5.1251 (8606) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 211.515419][ T8619] loop2: detected capacity change from 0 to 256 [ 211.569177][ T29] kauditd_printk_skb: 397 callbacks suppressed [ 211.569196][ T29] audit: type=1326 audit(1751154817.769:10952): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8618 comm="syz.2.1255" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f796109e929 code=0x7ffc0000 [ 211.600152][ T29] audit: type=1326 audit(1751154817.769:10953): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8618 comm="syz.2.1255" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f796109e929 code=0x7ffc0000 [ 211.624997][ T29] audit: type=1326 audit(1751154817.769:10954): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8618 comm="syz.2.1255" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f796109e929 code=0x7ffc0000 [ 211.649689][ T29] audit: type=1326 audit(1751154817.769:10955): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8618 comm="syz.2.1255" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f796109e929 code=0x7ffc0000 [ 211.674376][ T29] audit: type=1326 audit(1751154817.769:10956): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8618 comm="syz.2.1255" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f796109e929 code=0x7ffc0000 [ 211.699241][ T29] audit: type=1326 audit(1751154817.779:10957): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8618 comm="syz.2.1255" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f796109e929 code=0x7ffc0000 [ 211.724108][ T29] audit: type=1326 audit(1751154817.779:10958): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8618 comm="syz.2.1255" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f796109e929 code=0x7ffc0000 [ 211.748935][ T29] audit: type=1326 audit(1751154817.779:10959): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8618 comm="syz.2.1255" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f796109e929 code=0x7ffc0000 [ 211.773905][ T29] audit: type=1326 audit(1751154817.779:10960): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8618 comm="syz.2.1255" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f796109e929 code=0x7ffc0000 [ 211.798830][ T29] audit: type=1326 audit(1751154817.779:10961): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8618 comm="syz.2.1255" exe="/root/syz-executor" sig=0 arch=c000003e syscall=86 compat=0 ip=0x7f796109e929 code=0x7ffc0000 [ 212.564333][ T8629] netlink: 332 bytes leftover after parsing attributes in process `syz.5.1268'. [ 212.625648][ T8629] netlink: 'syz.5.1268': attribute type 9 has an invalid length. [ 212.634742][ T8629] netlink: 108 bytes leftover after parsing attributes in process `syz.5.1268'. [ 212.644975][ T8629] netlink: 32 bytes leftover after parsing attributes in process `syz.5.1268'. [ 212.663549][ T8630] netlink: zone id is out of range [ 212.675161][ T8631] netlink: 20 bytes leftover after parsing attributes in process `syz.5.1268'. [ 212.827439][ T8635] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1259'. [ 213.750158][ T8650] vlan0: entered allmulticast mode [ 213.877787][ T8652] bond2: entered promiscuous mode [ 213.884079][ T8652] bond2: entered allmulticast mode [ 213.904235][ T8652] 8021q: adding VLAN 0 to HW filter on device bond2 [ 214.196341][ T8655] ( speed is unknown, defaulting to 1000 [ 214.329620][ T8664] loop3: detected capacity change from 0 to 2048 [ 214.347205][ T8664] EXT4-fs: Ignoring removed mblk_io_submit option [ 214.515116][ T8664] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 215.120067][ T3785] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 215.151221][ T3783] Process accounting resumed [ 215.164101][ T3785] hid-generic 0000:0000:0000.0005: hidraw0: HID v0.00 Device [syz1] on syz0 [ 215.276770][ T56] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm kworker/u8:4: bg 0: block 234: padding at end of block bitmap is not set [ 215.297700][ T8676] loop5: detected capacity change from 0 to 512 [ 215.351211][ T56] EXT4-fs (loop3): Remounting filesystem read-only [ 215.352820][ T8676] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 215.428516][ T8676] EXT4-fs (loop5): 1 truncate cleaned up [ 215.434879][ T8676] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 215.507570][ T3312] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 215.670682][ T6214] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 215.971702][ T8686] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1275'. [ 216.058044][ T8686] bond0: entered promiscuous mode [ 216.063275][ T8686] bond0: entered allmulticast mode [ 216.079480][ T8686] 8021q: adding VLAN 0 to HW filter on device bond0 [ 216.090014][ T8689] netlink: 'syz.3.1276': attribute type 3 has an invalid length. [ 216.099350][ T8693] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1277'. [ 216.126417][ T8693] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1277'. [ 216.136558][ T8693] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1277'. [ 216.146706][ T8693] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1277'. [ 216.157550][ T8693] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1277'. [ 216.167819][ T8693] netlink: 'syz.0.1277': attribute type 6 has an invalid length. [ 216.256342][ T8699] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 216.344850][ T8705] loop2: detected capacity change from 0 to 1024 [ 216.385958][ T8705] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 216.476242][ T3309] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 216.520427][ T8714] loop2: detected capacity change from 0 to 1024 [ 216.529853][ T8714] EXT4-fs: Ignoring removed orlov option [ 216.536899][ T8714] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 216.547487][ T8714] EXT4-fs (loop2): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 216.560782][ T8714] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e840e01c, mo2=0000] [ 216.570634][ T8714] System zones: 0-1, 3-12 [ 216.576693][ T8714] EXT4-fs error (device loop2): ext4_map_blocks:816: inode #3: block 1: comm syz.2.1283: lblock 1 mapped to illegal pblock 1 (length 1) [ 216.591915][ T8714] __quota_error: 218 callbacks suppressed [ 216.591933][ T8714] Quota error (device loop2): write_blk: dquota write failed [ 216.606255][ T8714] Quota error (device loop2): qtree_write_dquot: Error -117 occurred while creating quota [ 216.617320][ T8714] EXT4-fs error (device loop2): ext4_acquire_dquot:6933: comm syz.2.1283: Failed to acquire dquot type 0 [ 216.629331][ T8714] EXT4-fs error (device loop2): ext4_free_blocks:6587: comm syz.2.1283: Freeing blocks not in datazone - block = 0, count = 4096 [ 216.644104][ T8714] EXT4-fs error (device loop2): ext4_read_inode_bitmap:139: comm syz.2.1283: Invalid inode bitmap blk 0 in block_group 0 [ 216.659160][ T8714] EXT4-fs error (device loop2) in ext4_free_inode:361: Corrupt filesystem [ 216.660702][ T56] EXT4-fs error (device loop2): ext4_map_blocks:780: inode #3: block 1: comm kworker/u8:4: lblock 1 mapped to illegal pblock 1 (length 1) [ 216.669410][ T8714] EXT4-fs (loop2): 1 orphan inode deleted [ 216.684424][ T56] Quota error (device loop2): remove_tree: Can't read quota data block 1 [ 216.690739][ T8714] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 216.699953][ T56] EXT4-fs error (device loop2): ext4_release_dquot:6969: comm kworker/u8:4: Failed to release dquot type 0 [ 216.727165][ T8714] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 216.740472][ T29] audit: type=1326 audit(216.725:11180): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8713 comm="syz.2.1283" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f796109d290 code=0x7ffc0000 [ 216.772378][ T3789] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 216.781869][ T29] audit: type=1326 audit(216.725:11181): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8713 comm="syz.2.1283" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f796109e52b code=0x7ffc0000 [ 216.805845][ T29] audit: type=1326 audit(216.725:11182): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8713 comm="syz.2.1283" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f796109d58a code=0x7ffc0000 [ 216.829624][ T29] audit: type=1326 audit(216.725:11183): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8713 comm="syz.2.1283" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f796109e929 code=0x7ffc0000 [ 216.853743][ T29] audit: type=1326 audit(216.725:11184): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8713 comm="syz.2.1283" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f796109e929 code=0x7ffc0000 [ 216.879090][ T29] audit: type=1326 audit(216.765:11185): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8713 comm="syz.2.1283" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f796109e929 code=0x7ffc0000 [ 216.903230][ T29] audit: type=1326 audit(216.765:11186): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8713 comm="syz.2.1283" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f796109e929 code=0x7ffc0000 [ 216.926611][ T3789] hid-generic 0000:0000:0000.0006: hidraw0: HID v0.00 Device [syz1] on syz0 [ 216.941509][ T8714] loop2: detected capacity change from 0 to 2048 [ 216.966280][ T8719] fido_id[8719]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 217.004214][ T3299] Alternate GPT is invalid, using primary GPT. [ 217.011878][ T3299] loop2: p1 p2 p3 [ 217.031532][ T8714] Alternate GPT is invalid, using primary GPT. [ 217.039265][ T8714] loop2: p1 p2 p3 [ 217.126724][ T7047] ================================================================== [ 217.134924][ T7047] BUG: KCSAN: data-race in ppp_asynctty_receive / tty_set_termios [ 217.142813][ T7047] [ 217.142823][ T7047] write to 0xffff888118bdfd08 of 44 bytes by task 8725 on cpu 0: [ 217.142844][ T7047] tty_set_termios+0xc0/0x8c0 [ 217.142880][ T7047] set_termios+0x496/0x4e0 [ 217.142908][ T7047] tty_mode_ioctl+0x379/0x5c0 [ 217.142937][ T7047] ppp_asynctty_ioctl+0x13f/0x2d0 [ 217.142966][ T7047] tty_ioctl+0x845/0xb80 [ 217.142998][ T7047] __se_sys_ioctl+0xcb/0x140 [ 217.143030][ T7047] __x64_sys_ioctl+0x43/0x50 [ 217.143061][ T7047] x64_sys_call+0x19a8/0x2fb0 [ 217.143088][ T7047] do_syscall_64+0xd2/0x200 [ 217.143111][ T7047] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 217.143134][ T7047] [ 217.143140][ T7047] read to 0xffff888118bdfd08 of 4 bytes by task 7047 on cpu 1: [ 217.143155][ T7047] ppp_asynctty_receive+0x75c/0xd40 [ 217.143186][ T7047] tty_ldisc_receive_buf+0xbf/0xf0 [ 217.143221][ T7047] tty_port_default_receive_buf+0x59/0x90 [ 217.143258][ T7047] flush_to_ldisc+0x141/0x360 [ 217.143301][ T7047] process_scheduled_works+0x4ce/0x9d0 [ 217.143333][ T7047] worker_thread+0x582/0x770 [ 217.143362][ T7047] kthread+0x486/0x510 [ 217.143379][ T7047] ret_from_fork+0xda/0x150 [ 217.143399][ T7047] ret_from_fork_asm+0x1a/0x30 [ 217.143426][ T7047] [ 217.143431][ T7047] value changed: 0x00000500 -> 0x00038000 [ 217.143444][ T7047] [ 217.143448][ T7047] Reported by Kernel Concurrency Sanitizer on: [ 217.143476][ T7047] CPU: 1 UID: 0 PID: 7047 Comm: kworker/u8:19 Not tainted 6.16.0-rc3-syzkaller-00319-gded779017ad7 #0 PREEMPT(voluntary) [ 217.143510][ T7047] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 217.143530][ T7047] Workqueue: events_unbound flush_to_ldisc [ 217.143573][ T7047] ==================================================================