last executing test programs: 2m16.581160983s ago: executing program 4 (id=13516): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000"], 0x48) r1 = bpf$MAP_CREATE(0x0, 0x0, 0x48) syz_emit_ethernet(0x3b6, &(0x7f00000003c0)=ANY=[@ANYBLOB="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"], 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) r2 = socket$inet_tcp(0x2, 0x1, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000001c0)={'sit0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xc}}, [@qdisc_kind_options=@q_hhf={{0x8}, {0x4}}, @TCA_RATE={0x6}]}, 0x38}, 0x1, 0x0, 0x0, 0x24048084}, 0x4006) ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000380)={{0x1, 0x1, 0x18, r0, {0x8}}, './file0\x00'}) syz_genetlink_get_family_id$tipc2(&(0x7f0000000340), r5) setsockopt$inet_IP_XFRM_POLICY(r2, 0x0, 0x11, &(0x7f0000000000)={{{@in6=@loopback, @in=@private=0xa010102, 0x4e23, 0x0, 0x9, 0x20, 0x2, 0x0, 0x20, 0x73, r4}, {0x3, 0x2, 0x3, 0x2, 0x0, 0x1375, 0xc, 0x4}, {0x9, 0x6c3, 0x8000000000000001, 0x3ff}, 0x0, 0x26e6bba, 0x2, 0x0, 0x2}, {{@in6=@dev={0xfe, 0x80, '\x00', 0x35}, 0x4d3, 0x32}, 0xa, @in=@multicast1, 0x3505, 0x1, 0x1, 0x7a, 0x6, 0x8, 0x7}}, 0xe8) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000300)='sys_enter\x00', r6}, 0x10) fsmount(0xffffffffffffffff, 0x0, 0xa) r7 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000780)=ANY=[@ANYBLOB="02000000040000000800000001"], 0xe) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="0500000004000000990000000b"], 0x48) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000b40)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r9}, 0x10) writev(0xffffffffffffffff, 0x0, 0x0) r10 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) close(r10) r11 = socket$netlink(0x10, 0x3, 0x0) r12 = socket$nl_generic(0x10, 0x3, 0x10) r13 = syz_genetlink_get_family_id$tipc(&(0x7f00000026c0), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_STATS(r12, &(0x7f0000002780)={0x0, 0x0, &(0x7f0000002740)={&(0x7f0000002700)={0x1c, r13, 0x1, 0x70bd29, 0x25dfdbfc}, 0x1c}, 0x1, 0x0, 0x0, 0x4030}, 0x200000c0) getsockopt$sock_cred(r11, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setresuid(r14, r14, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa10000000000000701000000feffffbfa40000000000000704000000fefffeb70200000800000018230000", @ANYRES32=r7, @ANYBLOB="0000000000000000b70500000800000085000000c500000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 2m16.579792773s ago: executing program 4 (id=13517): openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) capset(&(0x7f00000000c0)={0x19980330}, &(0x7f0000000040)={0x200000, 0x40200003, 0x0, 0x2, 0x7}) setrlimit(0x40000000000008, &(0x7f0000000080)={0x0, 0x7}) creat(&(0x7f00000002c0)='./file0\x00', 0xecf86c37d53048d6) io_setup(0x2, &(0x7f0000000180)=0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000040), 0x800002, 0x800) ioctl$EVIOCGRAB(r1, 0x40044590, &(0x7f0000000200)=0x7ffffffc) bpf$MAP_CREATE(0x0, 0x0, 0x48) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x85, 0x7, 0x7ffc0001}]}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000006900000000000001000000940000000fad413e850000000700000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000140)=@generic={&(0x7f0000000100)='./file0\x00', 0x0, 0x10}, 0x18) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x80, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000080)=0xf) fcntl$dupfd(r2, 0x0, r2) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r4, 0x0, r6, 0x0, 0x1, 0x0) vmsplice(r5, &(0x7f0000001280)=[{&(0x7f0000000100)='E>\n', 0x3}], 0x1, 0x2) vmsplice(r6, &(0x7f00000005c0)=[{&(0x7f0000000180)="04", 0x1}], 0x1, 0x6) write(r3, 0x0, 0x0) ioctl$TCFLSH(r2, 0x400455c8, 0x0) ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000040)=0x5) ioctl$EVIOCGRAB(r1, 0x40044590, 0x0) r7 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r7, &(0x7f0000000040)=[{&(0x7f0000000080)="580000001400192340834b80040d8c560a067f0202ff000000000000000058000b4824ca945f64009400ff0325010ebc000000000000008000f0fffeffe809005300fff5dd00000010000100080c100000000100ffffffff", 0x58}], 0x1) io_submit(r0, 0x1, &(0x7f0000000040)=[&(0x7f00000000c0)={0x0, 0x300, 0x0, 0x5, 0x0, 0xffffffffffffffff, 0x0}]) 2m15.944612411s ago: executing program 4 (id=13523): socket$nl_netfilter(0x10, 0x3, 0xc) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xb, 0x0, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x23, '\x00', 0x0, @fallback=0x2b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000340)='kfree\x00', r0, 0x0, 0x8}, 0x18) r1 = socket$inet_udp(0x2, 0x2, 0x0) pwritev(r1, &(0x7f0000000600), 0x0, 0x2, 0x6) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmmsg(r4, &(0x7f0000001e00)=[{{0x0, 0x0, &(0x7f0000000680)=[{&(0x7f0000000180)=""/65, 0x41}], 0x1}, 0x9}], 0x1, 0x122, 0x0) sendmmsg(r3, &(0x7f00000029c0), 0x400006d, 0x20000004) shutdown(r4, 0x2) sendmsg$IPCTNL_MSG_CT_DELETE(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000003c0)=ANY=[@ANYBLOB="b40000000201010400000000000000000200ffff0c00198008000100020800009400018006000340000000001400018008000100ac1414aa080002000a0101022c00018014000300fe80000000000000000000000000003d1400040000000000000000000000ffff0a01010206000340000200001400018008000100ac1414aa08000200e00000012c0001801400030000000000000000000000000100"/180], 0xb4}}, 0x20044804) perf_event_open(&(0x7f00000000c0)={0x5, 0x80, 0xec, 0x6, 0x40, 0x3, 0x0, 0x4000000000, 0xd4, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x4, 0x2, @perf_config_ext={0x2, 0x7fffffff}, 0x100882, 0x801, 0x6, 0x3, 0x600, 0x2, 0x3ff, 0x0, 0x0, 0x0, 0x2}, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2, 0x42032, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000ed07449e00000000000000001801", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x45, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000300)='f2fs_map_blocks\x00', r0}, 0x18) mremap(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x1000, 0x0, &(0x7f00008b5000/0x1000)=nil) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x100000a, 0x4082172, 0xffffffffffffffff, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000a00)=ANY=[@ANYBLOB="fc0000003b00010000000000000000000a000000c3000000eabdbbcc39c059568e18d42521e04b49c17c2d886b9fc1bdbfe00d00000100000000004570e615968b7c2e525a00e5bb208f6e1af669fa4f4c7246c3df7ad364fb2a75431773b5ac1f291ed2b4864ba4fa425c0f599071900ab2825cc17a96b2481658dfb521a986251f1e0caef9f282d7a50afe6d06000000eca7935157e40cd6dff1546e519ee7c743e0f511a69fb9742c8c2d2eb92dcee2bb68f27c76462c6a5910803f09793c87d80f53809ed509f9a3f70cadf90021000400a749eb0a0f1331605a4f8bc9d08b6faf388ff32a063a8c9a650f2f7fb500"/252], 0xfc}}, 0x0) fchownat(0xffffffffffffffff, &(0x7f00000006c0)='./file0\x00', 0x0, 0x0, 0x400) waitid(0x0, 0x0, &(0x7f0000002ff9), 0x2, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000240)={'veth1_to_bridge\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000001c0)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {0x0, 0xb}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mq={0x7}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000040)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x80000, {0x0, 0x0, 0x0, r6, {0x0, 0xffed}, {0xf, 0xb}, {0xd, 0xb}}, [@qdisc_kind_options=@q_pfifo_fast={0xf}]}, 0x34}, 0x1, 0x0, 0x0, 0x48061}, 0x24008084) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x19, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000800)=ANY=[@ANYBLOB="0b00000008000000010001000900000001"], 0x50) 2m15.488467934s ago: executing program 4 (id=13525): syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='kmem_cache_free\x00', r0}, 0x10) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000980)={0x6, 0x4, &(0x7f00000007c0)=ANY=[@ANYBLOB="18000000930d000000000000010000352b531400000000009500000000000000"], &(0x7f0000000800)='GPL\x00', 0x3, 0x0, 0x0, 0x40f00, 0x2, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xe3}, 0x94) socket$inet6_sctp(0xa, 0x5, 0x84) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) pwrite64(r2, &(0x7f00000000c0)='a', 0x200000c1, 0x9000) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000a00)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000440)={&(0x7f0000000080)='sched_switch\x00', r3, 0x0, 0xffffffffffff8001}, 0x18) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) rename(0x0, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0xbf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x14304, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x72051052ae3513ca}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r4, 0x40082406, &(0x7f00000006c0)='cp3\nW\xb0\x8aQtT\x87\x86\xf5\x13v&[\xa9\nF\xdf\x8d5\xe76\xd5\xe8\x9d\a\x17\x16\xfcc\xba\x1f\x85\'\x84^\xb0\x87m\xaa\x1dsM\x17\x99\xaf\x05\xd8\x96\xae%\x1e\xb2\xfc\xae+#c.5zY\x1a\xcb\xfe\x97\x8d\xcc\x8es\xfd11\xd0\"M\xebe\xdb\x11\xd0\xd38\xa6!\x97\xd7VQ\x8b\xa9>\x92x\x0f\xc5\xab\xc8\xd7\x03e\xed\x81G\xd2n\xb1Eu\a\x1c0\x82\x05\x84Hn\x9c=\x89\x85\xf7Z\x12\x0exA\xe1\xf9XI\xa1\xcf\xa2\xfe\xd8\xd3\x19\x1ba\x1c\xec\r\xe4\x1e\x19\xb2\x9f\xc9 8!\xe0\xb5\xeaH\x88\x1f\x98\x94\x18Q\xbe\xa1l\x93/\xb4f\xca\x1f\xb3O\r\xa8\x9bv\x05\x8c\x1b[XM\x176\x1c 0\xcd7\xef\x94T\xc8B\\2(b\x16\x85yi7\xa1\x00'/220) r5 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x82080, 0x174) ioctl$FS_IOC_SETFLAGS(r5, 0x40086602, &(0x7f0000000100)) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r6) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r6, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000680)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r7, @ANYBLOB='ya\x00\x00\x00\x00\x00\x00\x00\x00~\x00'], 0x20}}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1e0000000000000004000000ff"], 0x48) setgroups(0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x90) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r8}, 0x10) r9 = socket$inet(0x2, 0x2, 0x1) sendmsg$inet(r9, &(0x7f0000001040)={&(0x7f0000000040)={0x2, 0xffff, @remote}, 0x10, &(0x7f0000000000)=[{&(0x7f0000000400)='\b\x00', 0x2}, {&(0x7f0000000180)="2d0000008058", 0x6}], 0x2, &(0x7f0000000100)=ANY=[@ANYBLOB="1c000000000000000000000007000000890b040a0101027f00000100000000001c000000000000000000000008"], 0x40}, 0x20000024) 2m15.065022783s ago: executing program 4 (id=13526): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000004850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x78) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{}, {}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000005000000050000000900000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000009c0)={0x1f, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r2}, 0x10) r3 = socket$kcm(0x10, 0x2, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="19000000040000000400000008"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000015000000181100", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x18) syz_io_uring_setup(0x4e0, 0x0, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc9ffb}]}) sendmsg$rds(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x11, 0x8, &(0x7f0000000140)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r6, &(0x7f0000000d80)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000440)="ea", 0x1}], 0x1, &(0x7f00000002c0)=ANY=[@ANYBLOB], 0x18}, 0xc800) recvmmsg(r7, &(0x7f0000001140), 0x0, 0x121c3, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000700), 0xffffffffffffffff) sendmsg$kcm(r3, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000001900)="2e00000011008188040900000000000002a1810031000000000f000000048002002d1f00000000000000e2000000", 0x2e}], 0x1}, 0x20000000) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) unshare(0x2c060000) r8 = bpf$ITER_CREATE(0xb, 0x0, 0x0) syz_open_procfs$namespace(0xffffffffffffffff, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000980)={0x5, 0x4f, &(0x7f0000000180)=ANY=[@ANYBLOB="1804000000000000000000000000000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x80000003}, 0x94) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x40, '\x00', 0x0, @fallback=0x28, r8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r9, 0x0, 0xffffffffffffffff}, 0x13) unshare(0x2c020400) 2m14.902727008s ago: executing program 4 (id=13528): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000001c0)=0x5) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=@ipv4_newroute={0x1c, 0x1a, 0x1, 0x0, 0x0, {0xa, 0x10, 0x0, 0x0, 0xfe, 0x0, 0x0, 0xb}}, 0x1c}}, 0x0) r4 = gettid() timer_create(0x0, &(0x7f0000000180)={0x0, 0x21, 0x800000000004, @tid=r4}, &(0x7f0000bbdffc)) tgkill(r0, r4, 0x2e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffcb5, 0x2, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48) lsetxattr$security_capability(&(0x7f0000000080)='./bus\x00', &(0x7f0000000200), &(0x7f0000000280)=@v2={0x2000000, [{0x9, 0x8}, {0x6, 0x1}]}, 0x14, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x90) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00', r6}, 0x10) syz_open_dev$usbfs(&(0x7f0000000480), 0x76, 0x160341) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x13, 0x13, 0x0, &(0x7f0000000000)='GPL\x00', 0x2, 0xde, &(0x7f0000000340)=""/222, 0x0, 0x8, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file1\x00', 0x10, &(0x7f00000004c0)={[{@i_version}, {@nodiscard}, {@min_batch_time={'min_batch_time', 0x3d, 0x3ff}}]}, 0x1, 0x3f7, &(0x7f0000003080)="$eJzs3U1vG0UfAPD/bt7atE+TSs+Bl4sFSERCJE3aApVAIuLCoT3RA0es2C1RnQYlRqJVxItA3EAC8QHgAHwEjnDgO8AZOEClCOVAys1o7V3HxHbapA6ukt9PGnlmZ+2Z9XjW68nsJIBjqxQRL0fESESci4ipfHuah3i/FbL9trc2lv7e2lhKotF47c8kknxb8VpJ/ngqf4GZNCL9KInHe5S7fuv2jXKtVl3L03P1lbfm1m/dfnZ5pXy9er16c+G58xcuXnzh0sLzAzvWzZXkk6e+ufzbZx9XPv/pj++ns/qezvM6j2NQSlFqvye7XRp0YUN2oiOejA6xIgAA7CnNr/1Hm9f/UzESOxdvU/Hpj0OtHAAAADAQjUbxCAAAABxdid/+AAAAcMQV8wC2tzaWijDE6Qj8xzYXI2K61f5389DKGW3f0zu26/7eQSpFxKsnrixkIQ7pPmwAAACA4+yHxdbCf93jf2k80rHfyYiYLNb2G6DSrnT3+E96Z8BF0mFzMeLFiLjbNf6XFrtMj+Sp/zWHCseSa8u16rmIOBMRMzE2kaXn9yjj3SdufNsvr3P878tfX5/Pys8ed/ZI74xO/Ps5lXK9/CDHzI7NDyIeG+3V/kl7zLdzncyDeGN5+6V+eVn7Z+1dhO725zA1vop4umf/31m5NNl7fda55vlgLj8rTHSX8cvprz/sV35n/89CVn7xtwAOX9b/J/du/+Y6ue31etf3X8Z3f135uV/evdu/9/l/PLnarOB4vu2dcr2+Nh8xnlzu3u7T1Fa8H8X7lbX/zJO9v/+L678k/+4/07E+9H688t7Zq/3y9P/hytq/sq/+v//Im5OPzvQr//76/4VmZYoXcf13b/fbQMOuJwAAAAAAAACDkTbn9iXpbDueprOzrXm+/4/JtLa6Xn/m2urbNyutOYDTMZYW8z+nOuaDzrduI2+nF3alz0fE2Yj4YupkMz27tFqrDPvgAQAA4Jg41ef3f+b3g9zsAQAAADycpoddAQAAAODQ+f0PAAAAR9qDrOtfq64V/yLogE8XETlYZCT/4D0s9Tl6kSGelAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACIfwIAAP//keS8Nw==") r7 = open(&(0x7f00000005c0)='./bus\x00', 0x64842, 0x389b0d52417bb201) pwritev2(r7, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0x6a000}], 0x1, 0x7000, 0x0, 0x3) ioctl$sock_bt_hci(0xffffffffffffffff, 0x400448cb, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xb, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020782500000000002020207b1af8fe00000000bfa100000000000007010000f8ffffffb702000008000000b703000007000000850000001100000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x8, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sync() bind$bt_hci(0xffffffffffffffff, 0x0, 0x0) 2m0.223747885s ago: executing program 32 (id=13528): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000001c0)=0x5) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=@ipv4_newroute={0x1c, 0x1a, 0x1, 0x0, 0x0, {0xa, 0x10, 0x0, 0x0, 0xfe, 0x0, 0x0, 0xb}}, 0x1c}}, 0x0) r4 = gettid() timer_create(0x0, &(0x7f0000000180)={0x0, 0x21, 0x800000000004, @tid=r4}, &(0x7f0000bbdffc)) tgkill(r0, r4, 0x2e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffcb5, 0x2, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48) lsetxattr$security_capability(&(0x7f0000000080)='./bus\x00', &(0x7f0000000200), &(0x7f0000000280)=@v2={0x2000000, [{0x9, 0x8}, {0x6, 0x1}]}, 0x14, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x90) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00', r6}, 0x10) syz_open_dev$usbfs(&(0x7f0000000480), 0x76, 0x160341) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x13, 0x13, 0x0, &(0x7f0000000000)='GPL\x00', 0x2, 0xde, &(0x7f0000000340)=""/222, 0x0, 0x8, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file1\x00', 0x10, &(0x7f00000004c0)={[{@i_version}, {@nodiscard}, {@min_batch_time={'min_batch_time', 0x3d, 0x3ff}}]}, 0x1, 0x3f7, &(0x7f0000003080)="$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") r7 = open(&(0x7f00000005c0)='./bus\x00', 0x64842, 0x389b0d52417bb201) pwritev2(r7, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0x6a000}], 0x1, 0x7000, 0x0, 0x3) ioctl$sock_bt_hci(0xffffffffffffffff, 0x400448cb, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xb, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020782500000000002020207b1af8fe00000000bfa100000000000007010000f8ffffffb702000008000000b703000007000000850000001100000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x8, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sync() bind$bt_hci(0xffffffffffffffff, 0x0, 0x0) 10.683560442s ago: executing program 3 (id=14214): bpf$ITER_CREATE(0x21, 0x0, 0x0) r0 = add_key(&(0x7f0000001080)='rxrpc\x00', &(0x7f00000010c0)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$link(0x8, r0, 0x0) creat(&(0x7f00000002c0)='./file0\x00', 0x1) r1 = getpid() r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40e00, 0x5a, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000012c0)={r2, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f00000002c0)=[0xfffffffffffffff1], 0x0, 0x0, 0x1, 0x1, r1}}, 0x40) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) syz_usb_connect(0x0, 0x553, 0x0, &(0x7f0000001000)={0xa, &(0x7f0000000400)={0xa, 0x6, 0x201, 0x7, 0x3, 0x3, 0x40}, 0x5, &(0x7f0000001240)=ANY=[@ANYBLOB="050f0500adf9cad81350a2cd489f2ac710"], 0x5, [{0x40, &(0x7f0000000f00)=@string={0x40, 0x3, "96959cb2056d019b1ee9eb838288bb800caa0560c330a2f58e760853cd8ad95e186ee1b994c4e54e241542482510344cbe5df23822f41f786031ee9657d8"}}, {0x0, 0x0}, {0x4, &(0x7f0000000580)=@lang_id={0x4, 0x3, 0x2009}}, {0x4, &(0x7f00000007c0)=@lang_id={0x4, 0x3, 0x402}}, {0x4, &(0x7f0000000fc0)=@lang_id={0x4, 0x3, 0xf8ff}}]}) sendmsg$nl_route_sched(r3, 0x0, 0x4000c00) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000001340)=@newtaction={0x14, 0x30, 0x871a15abc695fa3d, 0x70bd2d}, 0x14}}, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_FLUSH(r5, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)={0x28, 0x4, 0x6, 0x201, 0x0, 0x0, {0xa, 0x0, 0x5}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0x11}, 0x28000080) shutdown(0xffffffffffffffff, 0x1) r6 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r6, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(0xffffffffffffffff, 0x84, 0x6d, &(0x7f0000000080)={r7}, &(0x7f0000000140)=0x8) getsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(0xffffffffffffffff, 0x84, 0x75, &(0x7f00000011c0)={r7, 0xf51b}, &(0x7f0000001200)=0x8) r8 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r8) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000080)={0x0, 0x0}) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x3, 0x0, 0x0, 0x40e00, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r9, 0x0, 0xfffffffffffffffd}, 0x18) r10 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000001b40)='/proc/self/attr/current\x00', 0x64, 0x0) pread64(r10, &(0x7f0000000000)=""/4096, 0x1000, 0x4) 9.529123999s ago: executing program 3 (id=14223): setsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010005"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x1, 0x803, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x4, 0x8, 0xe}, 0x48) r6 = syz_io_uring_setup(0x14dd, &(0x7f0000000300)={0x0, 0x5121, 0x0, 0x3, 0x258}, &(0x7f0000000040)=0x0, &(0x7f0000000600)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r7, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r7, r8, &(0x7f0000000080)=@IORING_OP_SYMLINKAT={0x26, 0x4, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000140)='./file1\x00'}) io_uring_enter(r6, 0x47ba, 0x0, 0x0, 0x0, 0x0) r9 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000a80)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000100000000000000fe00181100", @ANYRES32=r9, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000040)='kmem_cache_free\x00', r10, 0x0, 0x10007ffffffff}, 0x18) socket$kcm(0x10, 0x2, 0x0) sendmsg$nl_route(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x300}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8, 0x1, 0x8}]}}}, @IFLA_LINK={0x8, 0x5, r5}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x4c}}, 0x0) r11 = socket$nl_route(0x10, 0x3, 0x0) r12 = socket(0x1, 0x803, 0x0) select(0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)={0x77359400}) getsockname$packet(r12, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r11, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=@newlink={0x44, 0x10, 0x403, 0x70bd25, 0x0, {0x0, 0x0, 0x0, 0x0, 0x400}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ip6gretap={{0xe}, {0x8, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}]}}}, @IFLA_MASTER={0x8, 0xa, r13}]}, 0x44}, 0x1, 0x0, 0x0, 0x24000804}, 0x8000) 8.640807622s ago: executing program 0 (id=14228): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0xa, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f00000004c0)=ANY=[@ANYBLOB="18000000000000000000000000b6221a623a863a12238041654f241ecc00000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x94) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)=ANY=[@ANYBLOB="580000001900010026bd7000000000000a000000fd04000b0000000005001400030000001800168014000100010000000000000038000400054006000c00090008"], 0x58}, 0x1, 0x0, 0x0, 0x8000}, 0x48800) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000580)=ANY=[@ANYBLOB="0dc02a1fe38c1b2134be5815", @ANYRES64=r0], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r3, 0x0, 0x5}, 0x18) bpf$BPF_MAP_FREEZE(0x16, &(0x7f0000000200)=r1, 0x4) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x1, 0x10, &(0x7f00000005c0)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r4}}, {}, [@call={0x85, 0x0, 0x0, 0xe}], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r5, 0xfca804a0, 0x10, 0x38, &(0x7f00000002c0)="b800000500000000", &(0x7f0000000300)=""/8, 0x500, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0700000004000000"], 0x48) munmap(&(0x7f0000470000/0x400000)=nil, 0xe06500) prctl$PR_SET_MM(0x23, 0x6, &(0x7f0000ffc000/0x4000)=nil) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000080)={'syztnl1\x00', &(0x7f00000000c0)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0xd, @dev={0xfe, 0x80, '\x00', 0x29}, @private0={0xfc, 0x0, '\x00', 0x1}, 0x700, 0x8000, 0xfffffffc}}) prctl$PR_SET_MM(0x23, 0x7, &(0x7f0000ffd000/0x3000)=nil) brk(0x200000ffc000) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000b80)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r6, @ANYBLOB="0000000000000000b703000000030000850000001b000000b70000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r8 = openat$ptp0(0xffffffffffffff9c, &(0x7f00000006c0), 0x200, 0x0) read$ptp(r8, &(0x7f0000000a80)=""/219, 0xdb) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='kfree\x00', r7, 0x0, 0x4}, 0x18) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r9, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a58000000060a010400000000000000000a0000010900010073797a31000000002c0004802800018007000100637400001c0002800500030001000000080002400000001108000440000000150900020073797a32"], 0x80}, 0x1, 0x0, 0x0, 0x4008091}, 0x24000000) 8.636705172s ago: executing program 3 (id=14229): r0 = socket$xdp(0x2c, 0x3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000000001000000000000000000851000000600000018000000", @ANYRES32=0x0, @ANYBLOB="00000000000100006608000000000000180000000000000000000000000000009500000000000000360a020000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b50a000000000000850000000600000095"], &(0x7f0000000000)='GPL\x00', 0xa, 0x0, 0x0, 0x0, 0x8}, 0x94) setsockopt$XDP_TX_RING(r0, 0x11b, 0x6, &(0x7f0000000000)=0x40000000, 0x4) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000440)=@framed, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) unshare(0x2060600) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000000)={0x0, 0xb007}, 0x4) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r2, 0x107, 0xf, &(0x7f0000000100)=0x9, 0x4) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000980)={'wg2\x00', 0x0}) sendto$packet(r2, &(0x7f0000000180)="0b031407e0ff640f0200475400f6a13bb1000e00080008004803", 0x10000, 0x0, &(0x7f0000000140)={0x11, 0x0, r3}, 0x14) r4 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000440)=@base={0x12, 0x3f, 0x8, 0x2, 0x0, 0x1}, 0x50) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000c40)={r4, &(0x7f0000000b80), 0x0}, 0x20) r5 = socket$inet6(0xa, 0x5, 0x0) setsockopt$inet_int(r5, 0x0, 0xf, &(0x7f0000000340)=0xfffffffffffffff9, 0x4) r6 = socket$caif_seqpacket(0x25, 0x5, 0x5) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000100000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x78) socketpair(0x1, 0x3, 0x0, &(0x7f0000000100)) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000018c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="280000001e0001000000000000000000ff000000", @ANYRES32=0x0, @ANYBLOB="000002000a0002000000000000000000"], 0x28}}, 0x0) setsockopt$CAIFSO_REQ_PARAM(r6, 0x116, 0x80, &(0x7f0000000000)="b50ac0ecb01b1b6555b7b34f104fb5d3053ce7cba5ba931b7965199c433dfd1e962792fb815debffc4829a5f87b7f3023787df992598a4f37e7344819a677b580dc30f011f6cb96d7e7fd3e079e6697089963419870c34654c7985e8599359aad8985cad0b5fabc74fe51a62c2be", 0x6e) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r5, 0x84, 0x64, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r7 = socket$netlink(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)={0x34, r8, 0x1, 0x70bd29, 0x25dfdbfb, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x8) unshare(0x68040200) socket(0xa, 0x3, 0x3a) 7.988012832s ago: executing program 0 (id=14234): socket$nl_route(0x10, 0x3, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r1}, 0x10) r2 = syz_io_uring_setup(0x5c4, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x4, 0x8000000}, &(0x7f0000000300)=0x0, &(0x7f00000001c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffff8, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f00000004c0)=@IORING_OP_TIMEOUT={0xb, 0x49, 0x0, 0x0, 0x4, &(0x7f0000000280)={0x0, 0x989680}, 0x1, 0x40, 0x1}) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x11, 0xc, 0x0, &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000140)='kfree\x00', r5, 0x0, 0x3}, 0x18) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000d40)=ANY=[@ANYBLOB="f9ffffff00e41ca58a59bb90bd4aff8fe01de4ab2649d1f9e25421f754d090ec5135a81a1f6da22b4048af2942ebc27f127698043de7be5228e257588adf61b9a938494d81d5dae53f8517b5da012153e811ce8d01c22ac207687dbe75941fe250c9afbd35462df1043e4e10eef0c7d909f435bb38a191172588164523568f", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000e40)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002010000850000004300000095"], 0x0, 0x80000, 0x0, 0x0, 0x0, 0x1d, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r7 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x18, 0x7, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000000000000000000000000000e50003000000000085100000fcffffff2500000010"], &(0x7f0000000140)='GPL\x00', 0x1, 0x0, 0x0, 0x41100, 0x8, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x80000}, 0x94) r8 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r8, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="38000000031401002cbd7000fcdbdf250900020073797a32000000000800410073697700140033006c6f"], 0x38}, 0x1, 0x0, 0x0, 0x44}, 0x810) sendmsg$RDMA_NLDEV_CMD_DELLINK(r8, 0x0, 0x0) bpf$BPF_PROG_QUERY(0x10, 0x0, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000001500)=ANY=[@ANYRES32=r6, @ANYRES32=r7, @ANYBLOB="5435f423282000000000000084fb70747cf5c769fc989154e933b436fed7ee20b4a905ad066054fba07ac734ca6214ddb6f6391209f8ffffffffffffff12ad6cb6e86969f8a13db710da31104e2018b532333a6a8e3b19903884de6155d19bb100252b92894a2c", @ANYRES32, @ANYRES64], 0x20) bpf$BPF_PROG_GET_NEXT_ID(0xb, &(0x7f0000000280)={0x4, 0x0}, 0x8) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000000)={r9}, 0x4) io_uring_enter(r2, 0x6e2, 0x3900, 0x3, 0x0, 0x0) clock_nanosleep(0x2, 0x1000000, &(0x7f0000000040)={0x77359400}, 0x0) 7.155109339s ago: executing program 0 (id=14239): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x300000e, 0x20c44fb6edc09a38, 0xffffffffffffffff, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x1a, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000001800", @ANYRES32=0x0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f66f63bb850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0xdb, '\x00', 0x0, @tracing=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000021007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b7"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$BTRFS_IOC_QUOTA_RESCAN(r2, 0x4040942c, &(0x7f0000000400)={0x0, 0x8, [0x7fff, 0xfffffffffffff241, 0x7, 0x1, 0x4, 0x5]}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r2}, 0x10) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000580)=ANY=[@ANYRES32, @ANYRESDEC=r0, @ANYRESHEX=r0], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000ac0)={&(0x7f0000000b00)='kmem_cache_free\x00', r3, 0x0, 0x1034}, 0x18) r4 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r4, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) syz_emit_ethernet(0xbe, &(0x7f0000000000)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x23}, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "7b4b143b7461fd777b1c012bd14efb9f49fcdb8f080c26a04883ad5c8c82b8af", "584cbf2649a50f2dbc43efa8698d0a881c51852e4451b57d037ad3c045942824251d7d17b5191584bcd4fbe40a23424d", "bcfd56f1375461caaa2f19935e6996c7096ffeeb0300000000000064", {"9a3bfbc1f39cb307b3472eb9cdb042d2", "643fcbb2c5a57df67d544af6e8dafe09"}}}}}}}, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x66, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc094, 0x2, @perf_config_ext={0x9, 0x6}, 0x0, 0x3ee53089, 0x10003, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x3, 0x0, 0x0, 0x0, 0xc0}, 0x94) recvmmsg(r4, &(0x7f0000003d40)=[{{0x0, 0x94, 0x0}, 0x5}], 0x1, 0x2, 0x0) r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x7}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r5, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r8, 0x1, 0x1a, &(0x7f0000000000)={0x3, &(0x7f00000000c0)=[{0x20, 0x0, 0x0, 0xfffff038}, {0x20, 0x0, 0x2, 0x3b63}, {0x6, 0x0, 0xfe}]}, 0x10) sendmmsg(r7, &(0x7f0000000180), 0x4000190, 0x0) r9 = socket(0x40000000015, 0x5, 0x0) connect$inet(r9, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10) bind$inet(r9, &(0x7f0000000340)={0x2, 0x0, @loopback}, 0x10) getpeername$inet(r9, &(0x7f00000001c0)={0x2, 0x0, @broadcast}, &(0x7f0000000200)=0x10) sendto$inet(r9, 0x0, 0x0, 0x0, 0x0, 0x0) sendto$inet(r9, 0x0, 0x0, 0x0, 0x0, 0x0) close_range(r6, 0xffffffffffffffff, 0x0) 6.097530016s ago: executing program 1 (id=14240): setsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010005"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x1, 0x803, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x4, 0x8, 0xe}, 0x48) r5 = syz_io_uring_setup(0x14dd, &(0x7f0000000300)={0x0, 0x5121, 0x0, 0x3, 0x258}, &(0x7f0000000040)=0x0, &(0x7f0000000600)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r6, r7, &(0x7f0000000080)=@IORING_OP_SYMLINKAT={0x26, 0x4, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000140)='./file1\x00'}) io_uring_enter(r5, 0x47ba, 0x0, 0x0, 0x0, 0x0) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000a80)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000100000000000000fe0018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000040)='kmem_cache_free\x00', r9, 0x0, 0x10007ffffffff}, 0x18) socket$kcm(0x10, 0x2, 0x0) sendmsg$nl_route(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) r10 = socket$nl_route(0x10, 0x3, 0x0) r11 = socket(0x1, 0x803, 0x0) select(0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)={0x77359400}) getsockname$packet(r11, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r10, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=@newlink={0x44, 0x10, 0x403, 0x70bd25, 0x0, {0x0, 0x0, 0x0, 0x0, 0x400}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ip6gretap={{0xe}, {0x8, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}]}}}, @IFLA_MASTER={0x8, 0xa, r12}]}, 0x44}, 0x1, 0x0, 0x0, 0x24000804}, 0x8000) 5.95163425s ago: executing program 0 (id=14242): fsopen(&(0x7f0000000100)='ramfs\x00', 0x1) socket$inet6_sctp(0xa, 0x1, 0x84) r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xc, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x3ff}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000}, 0x94) r2 = socket$nl_generic(0x10, 0x3, 0x10) setresuid(0xee01, 0x0, 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_TID_CONFIG(r2, &(0x7f0000000680)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)={0x38, r0, 0x10ada85e65c25359, 0xfffffffc, 0x25dfdbfd, {{0x6b}, {@val={0x8}, @val={0xc, 0x99, {0x7431, 0x4e}}}}, [@NL80211_ATTR_TID_CONFIG={0x10, 0x11d, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x9}]}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x8441}, 0x4000000) 5.922702023s ago: executing program 0 (id=14243): bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001380)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000c00)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000818110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000019007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f00000007c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x41, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000280)='kfree\x00', r1}, 0x10) syz_mount_image$vfat(&(0x7f0000001200), &(0x7f0000001240)='./file0\x00', 0x0, &(0x7f0000002480)=ANY=[@ANYBLOB="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"], 0x1, 0x11f4, &(0x7f0000001280)="$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") open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket(0x28, 0x5, 0x0) connect$vsock_stream(r2, &(0x7f0000000040)={0x28, 0x0, 0x2710}, 0x10) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB='\v\x00\x00\x00\b\x00\x00\x00\f'], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000340)={0x0, 0x0, 0x0, &(0x7f0000000740), 0x1, r3}, 0x38) r4 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000180)='kfree\x00', r4, 0x0, 0x2}, 0x18) connect$vsock_stream(r2, &(0x7f0000000400)={0x28, 0x0, 0x0, @host}, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x20040844) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x14, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f66f63bb85"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0xae, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x8000}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) syz_open_procfs(0x0, &(0x7f0000000280)='net/ip_mr_vif\x00') openat(0xffffffffffffff9c, 0x0, 0x42, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'bridge_slave_1\x00'}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=ANY=[], &(0x7f0000000000)='GPL\x00', 0xa, 0x0, 0x0, 0x0, 0x8}, 0x94) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DESTROY(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000640)={0x1c, 0x3, 0x6, 0x401, 0x0, 0x0, {0x7}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x10) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$IPSET_CMD_CREATE(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000040)={0x44, 0x2, 0x6, 0x3, 0x0, 0x0, {0xd}, [@IPSET_ATTR_TYPENAME={0xc, 0x3, 'hash:ip\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x44}}, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)={0x44, 0x9, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x1c, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @broadcast}}, @IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @loopback}}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x10040057}, 0x240008c4) 5.439693337s ago: executing program 2 (id=14246): mbind(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x4006, &(0x7f0000000000)=0x4, 0x5, 0x2) ioctl$sock_bt_hidp_HIDPGETCONNINFO(0xffffffffffffffff, 0x800448d3, &(0x7f0000000040)={@any, 0x2, 0x8, 0x7, 0xf, 0x9, "7949d67d0ae2643b173c2e45ff76b52b5859871b2025393134efaa0ed544dd2f1d755feb0735326a1131943314e3b59277e5296d3c6892cf03ce6cd82cf1b913f80a0ddbdde8b982f22738c03a7f84367a823df687d842cea0f756fabc13f804f5d190b422f36c8afa4a03bbde10fdd8120504ad37d8ca266401a10d253ec357"}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x10, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x39, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000003c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5945}, 0x94) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r2 = socket(0x2b, 0x80801, 0x1) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8000000, 0x7fffffe, 0x2d0, 0x0, 0xffffffff, 0xffffffff, 0x110, 0xffffffff, 0x200, 0xffffffff, 0xffffffff, 0x200, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@initdev={0xfe, 0x88, '\x00', 0x3, 0x0}, @mcast1, [0x0, 0x0, 0x0, 0xffffff], [0x0, 0x0, 0x4c62d6309aaa1bde, 0xff000000], 'ip6tnl0\x00', 'nicvf0\x00', {}, {0xff}, 0x3a}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x4, '\x00', 'syz1\x00'}}}, {{@ipv6={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @mcast1, [], [0x0, 0x0, 0xffffff00, 0xffffff00], 'veth1\x00', 'veth0_to_bridge\x00'}, 0x0, 0xa8, 0xf0}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'snmp\x00', {0x1}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x330) sendmsg$DEVLINK_CMD_SB_POOL_SET(r2, &(0x7f0000001700)={0x0, 0x0, &(0x7f0000001540)={0x0, 0xd4}, 0x1, 0x0, 0x0, 0x40000}, 0x20000000) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r3, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x201, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, @perf_config_ext={0x9, 0x7}, 0x100, 0xa88, 0x8406, 0x5, 0x0, 0x3c, 0xffff, 0x0, 0x0, 0x0, 0x46}, 0x0, 0xffbfffffffffffff, 0xffffffffffffffff, 0xa) shmctl$SHM_INFO(0xffffffffffffffff, 0xe, 0x0) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x85, 0x7, 0x7ffc0001}]}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) umount2(&(0x7f00000002c0)='./file0/../file0\x00', 0x0) newfstatat(0xffffffffffffff9c, 0x0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x1000) r6 = getgid() syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x21891d, &(0x7f0000000500)={[{@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x800000}}, {@noblock_validity}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x200000}}, {@resgid={'resgid', 0x3d, r5}}, {@noinit_itable}, {@quota}, {@noauto_da_alloc}, {@sysvgroups}, {@resgid={'resgid', 0x3d, r6}, 0x32}]}, 0x1, 0x4e8, &(0x7f0000000f40)="$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") bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000260018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x60, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x527d}, 0x94) r7 = msgget$private(0x0, 0x0) msgsnd(r7, &(0x7f0000000340)=ANY=[], 0x2000, 0x0) fstat(r4, &(0x7f0000000540)) syz_clone3(&(0x7f0000000700)={0x200000, &(0x7f0000000200), &(0x7f0000000280), &(0x7f0000000380), {0x17}, &(0x7f00000005c0)=""/75, 0x4b, &(0x7f0000000640)=""/77, &(0x7f00000006c0)=[0x0, 0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0], 0x6}, 0x58) bpf$MAP_CREATE(0x0, 0x0, 0x0) socket$kcm(0x29, 0x2, 0x0) setsockopt$sock_int(r1, 0x1, 0x1d, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r0}, 0x10) 5.19106651s ago: executing program 1 (id=14247): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket(0x1d, 0x2, 0x6) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000040)={'vxcan0\x00', 0x0}) socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x2, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f0000000040)={0x3ff, 0xfffffffffffffffe, 0x0, 0x4000000000009, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) bind$can_j1939(r1, &(0x7f0000000080)={0x1d, r2, 0x2, {0x1}}, 0x18) sendmsg$inet(r1, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000880)=[{0x0, 0x500}, {&(0x7f0000000780)="8af83b42e304bd", 0x7}], 0x2}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x10) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r3, 0x10e, 0x4, &(0x7f0000000640)=0x1802, 0x4) r4 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r4, &(0x7f0000000600)={0x0, 0xfd, &(0x7f00000004c0)=[{&(0x7f0000000380)="2e00000010008188e6b62aa73772cc9f1ba1f848110000005e140602000000000e000a001000000002900000121f", 0x2e}], 0x1}, 0x40) sendmsg$kcm(r4, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000040)="2e00000010008188040f80ec59acbc0413a1f848110000005e140602000000000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x4008084) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0xf) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES32=r5, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00', r6}, 0x10) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$xdp(0xffffffffffffffff, &(0x7f0000000100)={0x2c, 0x2, 0x0, 0xa}, 0x10) sendmsg$NFT_BATCH(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000001000040000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000058000000160a01000000000000000000010000000900010073797a30000000000900020073797a30000000002c0003800800014000000000080002400000000010000380140001007465616d3000000000000000000000005c000000160a0101000b000000000000010000000900020073797a30000000000900010073797a3000000000300003802c00038014"], 0xfc}}, 0x0) syz_clone3(&(0x7f0000000880)={0x2900080, 0x0, 0x0, 0x0, {0xf}, 0x0, 0x0, 0x0, &(0x7f00000006c0)=[0x0], 0x1}, 0x58) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x41100}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000004c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008"], 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 4.501144474s ago: executing program 5 (id=14248): ioctl$F2FS_IOC_PRECACHE_EXTENTS(0xffffffffffffffff, 0xf50f, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x18, 0x5, &(0x7f00000000c0)=ANY=[@ANYBLOB="180000000000000000000000ff000000850000000e000000c500000001f0ffff95"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, 0x2}, 0x94) r1 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000880)={0xee4564d931d18f25, 0x2, &(0x7f0000000300)=@raw=[@func={0x85, 0x0, 0x1, 0x0, 0x7}, @generic={0x6, 0x2, 0x4, 0x8, 0x9}], &(0x7f0000000340)='syzkaller\x00', 0x3, 0xcc, &(0x7f0000000540)=""/204, 0x1f00, 0x55, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000380)={0x4, 0xb, 0x6}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f00000003c0)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r2, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r3}, 0x10) ioctl$SCSI_IOCTL_STOP_UNIT(r1, 0x6) add_key$keyring(&(0x7f00000000c0), 0x0, 0x0, 0x0, 0xffffffffffffffff) request_key(&(0x7f0000000480)='asymmetric\x00', &(0x7f00000004c0)={'syz', 0x0}, &(0x7f0000000500)='abcdefghijklmnop', 0x0) r4 = socket$inet6(0xa, 0x1, 0x0) r5 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f00000001c0)='kfree\x00', r0, 0x0, 0xe9d0}, 0x18) r6 = socket$netlink(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000001200)={&(0x7f00000004c0)=ANY=[@ANYBLOB="38000000031401002dbd7000000000000900020073797a30000000000800410073697700140033006c6f"], 0xffaf}, 0x1, 0x0, 0x0, 0x40814}, 0x0) socket$nl_route(0x10, 0x3, 0x0) r7 = dup3(r5, r3, 0x0) setsockopt$MRT_DONE(r7, 0x0, 0xc9, 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r4, 0x89f1, &(0x7f00000004c0)={'ip6_vti0\x00', &(0x7f0000000740)={'syztnl1\x00', 0x0, 0x29, 0xfa, 0x3, 0x2, 0x5c, @local, @empty, 0x7800, 0x40, 0x4, 0x4}}) r8 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r8) socket$kcm(0x29, 0x0, 0x0) ioctl$BLKRAGET(r7, 0x1263, &(0x7f0000000240)) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r4, 0x89f2, &(0x7f0000000680)={'syztnl1\x00', 0x0}) request_key(&(0x7f0000001d40)='asymmetric\x00', &(0x7f0000000080)={'syz', 0x0}, 0x0, 0xfffffffffffffffe) r9 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xc, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180c0045f54a34ac6a0bd17e032920f4f2e24100", @ANYRES32=r9, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x69, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 3.981959942s ago: executing program 5 (id=14249): socket$nl_route(0x10, 0x3, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r1}, 0x10) r2 = syz_io_uring_setup(0x5c4, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x4, 0x8000000}, &(0x7f0000000300)=0x0, &(0x7f00000001c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffff8, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f00000004c0)=@IORING_OP_TIMEOUT={0xb, 0x49, 0x0, 0x0, 0x4, &(0x7f0000000280)={0x0, 0x989680}, 0x1, 0x40, 0x1}) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x11, 0xc, 0x0, &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000140)='kfree\x00', r5, 0x0, 0x3}, 0x18) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000d40)=ANY=[@ANYBLOB="f9ffffff00e41ca58a59bb90bd4aff8fe01de4ab2649d1f9e25421f754d090ec5135a81a1f6da22b4048af2942ebc27f127698043de7be5228e257588adf61b9a938494d81d5dae53f8517b5da012153e811ce8d01c22ac207687dbe75941fe250c9afbd35462df1043e4e10eef0c7d909f435bb38a191172588164523568f", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000e40)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002010000850000004300000095"], 0x0, 0x80000, 0x0, 0x0, 0x0, 0x1d, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r7 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x18, 0x7, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000000000000000000000000000e50003000000000085100000fcffffff2500000010000000060000"], &(0x7f0000000140)='GPL\x00', 0x1, 0x0, 0x0, 0x41100, 0x8, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x80000}, 0x94) r8 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r8, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="38000000031401002cbd7000fcdbdf250900020073797a32000000000800410073697700140033006c6f"], 0x38}, 0x1, 0x0, 0x0, 0x44}, 0x810) sendmsg$RDMA_NLDEV_CMD_DELLINK(r8, 0x0, 0x0) bpf$BPF_PROG_QUERY(0x10, 0x0, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000001500)=ANY=[@ANYRES32=r6, @ANYRES32=r7, @ANYBLOB="5435f423282000000000000084fb70747cf5c769fc989154e933b436fed7ee20b4a905ad066054fba07ac734ca6214ddb6f6391209f8ffffffffffffff12ad6cb6e86969f8a13db710da31104e2018b532333a6a8e3b19903884de6155d19bb100252b92894a2c", @ANYRES32, @ANYRES64], 0x20) bpf$BPF_PROG_GET_NEXT_ID(0xb, &(0x7f0000000280)={0x4, 0x0}, 0x8) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000000)={r9}, 0x4) io_uring_enter(r2, 0x6e2, 0x3900, 0x3, 0x0, 0x0) clock_nanosleep(0x2, 0x1000000, &(0x7f0000000040)={0x77359400}, 0x0) 3.509446386s ago: executing program 2 (id=14250): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001a80)=@base={0xe, 0x4, 0x8, 0x8}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f00000004c0)=ANY=[@ANYRES64=r0, @ANYBLOB="994943d6789f03033f4efa49d322a9c4e0e20bbeab5e654813c7c48345b116c5f6b52965bd191dade8e676758be263b658a11888ed09efabfef04e002534628fbf1470589d3b00db171c3985cfa3334ec96b6889f01784334de701b4f334589093c3c9f004875473e6c9c978c5770f1c290e2c02cb584ecba6d03485284861dcb3631e8b89a88704c6afa4f0ac9735e9f9b34d9737aed88e7574dd41a17abc104bfc34c850f7b61d7bbd66b14bf62887991d49d3e23eb0ed6bc17509f17ba4853bd349ef2a24b7e551dca7c50641521ed2058a2aae984d7a43de0be7b7260db16973624451f2c5dde4c80628f2d7d65bdf62b2fb9f15d3f9da", @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e85000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x2e, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10) r2 = socket$rxrpc(0x21, 0x2, 0x2) sendto$rxrpc(r2, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x18, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r3, 0x84, 0x64, &(0x7f0000000080)=[@in={0x2, 0x4e20, @empty}], 0x10) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x4e20, @local}]}, &(0x7f0000000100)=0x10) r4 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r4, 0x0, 0xc8, &(0x7f0000003d40), 0x4) setsockopt$MRT_ADD_VIF(r4, 0x0, 0xca, &(0x7f0000003d80)={0x0, 0x0, 0x0, 0x0, @vifc_lcl_addr=@local, @dev}, 0x10) r5 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r6 = socket$igmp(0x2, 0x3, 0x2) setsockopt$inet_mreq(r5, 0x0, 0x23, &(0x7f0000000000)={@multicast1=0xe0000300, @local}, 0x8) syz_emit_ethernet(0x2a, &(0x7f0000000040)={@local, @broadcast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x80, 0x2, 0x0, @empty, @multicast1=0xe0000300}, @echo_reply={0x0, 0x0, 0x0, 0x64, 0xd2}}}}}, 0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000001800)={0x11, 0xc, &(0x7f0000000600)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r8 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r8, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)=ANY=[@ANYBLOB="0213f803030000002cbd7000fddbdf25010018"], 0x18}}, 0x2000) r9 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000340)={'syz_tun\x00', 0x0}) sendmsg$nl_route_sched(r9, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=@getchain={0x24, 0x11, 0x1, 0x2000000, 0x0, {0x0, 0x0, 0x0, r10, {}, {0x0, 0xf}, {0xfff1}}}, 0x24}}, 0x0) setsockopt$MRT_ADD_MFC_PROXY(r6, 0x0, 0xd2, &(0x7f0000000200)={@empty, @multicast2=0xe0000300, 0x0, "028a3f6c58b274e6d8451697efe42811ee1df06e9264f7d866b1970548fc3c7b", 0xb2, 0xfffffff7, 0x4, 0x40000006}, 0x3c) r11 = socket$rxrpc(0x21, 0x2, 0xa) bind$rxrpc(r11, &(0x7f0000001280)=@in6={0x21, 0x300, 0x2, 0x1c, {0xa, 0x300, 0x3000000, @ipv4={'\x00', '\xff\xff', @local}, 0xb9}}, 0x24) syz_emit_ethernet(0x5e, &(0x7f0000000380)=ANY=[@ANYBLOB="81004900000d020000c013010000ec752b4a8fea328dcdefed8162e5bf8aa3822f7f0e72704d7a2c6ceeebd7fe7236177dde9896693c45041849a6067777e987808b0adf32d500bec1b729489e4500"/94], &(0x7f0000000280)={0x1, 0x2, [0x505, 0x57, 0x489, 0x3c1]}) 3.369603389s ago: executing program 3 (id=14251): r0 = fsopen(&(0x7f0000000100)='ramfs\x00', 0x1) socket$inet6_sctp(0xa, 0x1, 0x84) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xc, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x3ff}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000f00)='kfree\x00', r3, 0x0, 0x4}, 0x18) bpf$MAP_CREATE(0x0, 0x0, 0x48) r4 = socket$nl_generic(0x10, 0x3, 0x10) setreuid(0x0, 0xee01) setresuid(0xee01, 0x0, 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_TID_CONFIG(r4, &(0x7f0000000680)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)={0x38, r1, 0x10ada85e65c25359, 0xfffffffc, 0x25dfdbfd, {{0x6b}, {@val={0x8}, @val={0xc, 0x99, {0x7431, 0x4e}}}}, [@NL80211_ATTR_TID_CONFIG={0x10, 0x11d, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x9}]}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x8441}, 0x4000000) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r5 = fsmount(r0, 0x0, 0x20) symlinkat(&(0x7f0000000000)='.\x00', r5, &(0x7f0000000140)='./file0\x00') openat(r5, &(0x7f00000000c0)='./file0\x00', 0x515a02, 0x52abe154ad664fa4) 3.159241608s ago: executing program 5 (id=14252): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f00000004c0), r0) sendmsg$TIPC_CMD_SET_LINK_WINDOW(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000500)={0x68, r1, 0x1, 0x70bd27, 0x25dfdbfd, {{}, {}, {0x4c, 0x18, {0x7fff, @media='ib\x00'}}}}, 0x68}, 0x1, 0x0, 0x0, 0x40000}, 0x40000) r2 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_buf(r2, 0x0, 0x29, 0x0, &(0x7f0000003180)) prctl$PR_SET_NAME(0xf, &(0x7f0000001600)='w\xde\xa3\x05\xff\a\x00\x00\x00\x00\x00\x00\x8f\xc0\x9b\x85\x99\xab\xa7AkQ\x16$\x15\xcf\x14#\xad\x1f\xce}K\xea\x90.!\xd6z\x9e\xc3\xe5\xbf\xc2c\x02\xdc\x86\x86\xef\\\xc0\x89\av\x9f\xd6\xd1\x98<\xdc)\x82\xeb\b\xa9\x14\xf86\xdc\x8e$B\xa0\x12Zqeo\xb8Z\xa1{\x9ewcbQ[O\xf3y\x99\xc7\xd29\xb7R\xc4:5wV\x86\xef\x95\xa8\x8f2TmN]0\xb8K\x95vP~\xbd\f>m\n\xb3\xe5\x94\xa7\xd3\xc3_\xc9\xcc\xa0nN\xc14k\xcd\xad\x9d}\xd5$\xaaf\xe8\xdd\xcf\t\xb8\x89\xb5\x94t_\xf0\xfc\x18\xa2\xa2rm@\x9b1~3\xbc8\xde\xe3n~\xd2\xd2') bpf$PROG_LOAD(0x5, 0x0, 0x64) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r3 = add_key$keyring(&(0x7f00000000c0), &(0x7f00000002c0)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) keyctl$restrict_keyring(0xa, r3, &(0x7f0000000300)='asymmetric\x00', &(0x7f00000001c0)='dn:\xff\xffe{') r4 = socket(0x2b, 0x80801, 0x1) r5 = add_key$keyring(&(0x7f0000000080), &(0x7f0000000340)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r5, &(0x7f0000000240)='asymmetric\x00', &(0x7f00000000c0)=@chain) keyctl$restrict_keyring(0x1d, r5, 0x0, 0x0) connect$inet6(r4, &(0x7f0000000000)={0xa, 0x0, 0x10000, @loopback, 0x1}, 0x1c) setsockopt$inet6_tcp_int(r4, 0x6, 0x8, &(0x7f00000001c0)=0x400, 0x4) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000000de0000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000000)='kmem_cache_free\x00', r6}, 0x10) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f00005fd000/0x4000)=nil, 0x4000, 0x0, 0x5, 0x20000) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4, 0x0, 0x0, 0x2) syz_usb_connect$hid(0x0, 0x3f, &(0x7f0000000040)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0x10, 0x5ac, 0x242, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0x0, 0x20, 0x25, [{{0x9, 0x4, 0x0, 0xb, 0x2, 0x3, 0x1, 0x0, 0xa8, {0x9, 0x21, 0x101, 0x2, 0x1, {0x22, 0xb63}}, {{{0x9, 0x5, 0x81, 0x3, 0x3ff, 0x4, 0x3, 0x2}}, [{{0x9, 0x5, 0x2, 0x3, 0x400, 0xb, 0x5, 0xc5}}]}}}]}}]}}, &(0x7f0000000140)={0xa, &(0x7f0000000080)={0xa, 0x6, 0x110, 0x7, 0xb9, 0x8, 0x8, 0x8}, 0x0, 0x0}) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000009c0)=ANY=[@ANYBLOB], &(0x7f0000000100)='GPL\x00'}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r7}, 0x10) prctl$PR_SET_NAME(0xf, &(0x7f0000000280)='+}[@\x00') socket$netlink(0x10, 0x3, 0x0) 2.385987539s ago: executing program 0 (id=14253): syz_open_dev$tty1(0xc, 0x4, 0x2) r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000010100008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000001dc0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x2d) ioctl$USBDEVFS_FORBID_SUSPEND(0xffffffffffffffff, 0x5521) r2 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x20, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x8) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x6770c000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) syz_clone(0x40000080, 0x0, 0x0, 0x0, 0x0, 0x0) r7 = socket$rds(0x15, 0x5, 0x0) bind$rds(r7, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r7, &(0x7f0000000580)={&(0x7f00000005c0)={0x2, 0x4, @rand_addr=0x64010101}, 0x10, 0x0, 0x0, &(0x7f0000003a80)=[@rdma_args={0x48, 0x114, 0x1, {{0x0, 0x2}, {0x0}, &(0x7f0000003a00)=[{&(0x7f00000016c0)=""/96, 0x60}], 0x1, 0x0, 0x2}}], 0x48, 0x4000000}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000005c0)={0x3, 0xc, &(0x7f0000000740)=ANY=[@ANYRES64=r6, @ANYBLOB="16cfc515847a96d5ec40aa629b29dbce89f7c103b1d93b100456ff9cbcd4dca9defbf72be3055c2589351597ee8c611a7270301fc29dec4a803902d3d55b9b4f936f9833fe9dad98335ec209b9bbfcd95ce13e3ca67791516227dda81a0bcb334fb1d8f484ca8c2cae9b2a855f53ef02b3a6421421dd4b0076b0a4c6dae57123fd808ff08334cbc239ff35cd10520955c534ce0bb76f55339a01b94be000cc745db4843d39d842"], 0x0, 0x0, 0x0, 0x0, 0x40f00}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={0x0}, 0x18) r8 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r8, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="38000000031401002cbd7000fcdbdf250900020073797a32000000000800410073697700140033006c6f"], 0x38}, 0x1, 0x0, 0x0, 0x44}, 0x810) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000400)={0xffffffffffffffff, 0x0, 0x0}, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) 2.333566395s ago: executing program 2 (id=14254): fsopen(&(0x7f0000000100)='ramfs\x00', 0x1) socket$inet6_sctp(0xa, 0x1, 0x84) r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xc, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x3ff}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000f00)='kfree\x00', 0xffffffffffffffff, 0x0, 0x4}, 0x18) r2 = socket$nl_generic(0x10, 0x3, 0x10) setresuid(0xee01, 0x0, 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_TID_CONFIG(r2, &(0x7f0000000680)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)={0x38, r0, 0x10ada85e65c25359, 0xfffffffc, 0x25dfdbfd, {{0x6b}, {@val={0x8}, @val={0xc, 0x99, {0x7431, 0x4e}}}}, [@NL80211_ATTR_TID_CONFIG={0x10, 0x11d, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x9}]}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x8441}, 0x4000000) 2.237046514s ago: executing program 1 (id=14255): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0xa, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f00000004c0)=ANY=[@ANYBLOB="18000000000000000000000000b6221a623a863a12238041654f241ecc00000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x94) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)=ANY=[@ANYBLOB="580000001900010026bd7000000000000a000000fd04000b0000000005001400030000001800168014000100010000000000000038000400054006000c00090008"], 0x58}, 0x1, 0x0, 0x0, 0x8000}, 0x48800) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000580)=ANY=[@ANYBLOB="0dc02a1fe38c1b2134be5815", @ANYRES64=r0], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r3, 0x0, 0x5}, 0x18) bpf$BPF_MAP_FREEZE(0x16, &(0x7f0000000200)=r1, 0x4) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x1, 0x10, &(0x7f00000005c0)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r4}}, {}, [@call={0x85, 0x0, 0x0, 0xe}], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r5, 0xfca804a0, 0x10, 0x38, &(0x7f00000002c0)="b800000500000000", &(0x7f0000000300)=""/8, 0x500, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0700000004000000"], 0x48) munmap(&(0x7f0000470000/0x400000)=nil, 0xe06500) prctl$PR_SET_MM(0x23, 0x6, &(0x7f0000ffc000/0x4000)=nil) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000080)={'syztnl1\x00', &(0x7f00000000c0)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0xd, @dev={0xfe, 0x80, '\x00', 0x29}, @private0={0xfc, 0x0, '\x00', 0x1}, 0x700, 0x8000, 0xfffffffc}}) prctl$PR_SET_MM(0x23, 0x7, &(0x7f0000ffd000/0x3000)=nil) brk(0x200000ffc000) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000b80)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r6, @ANYBLOB="0000000000000000b703000000030000850000001b000000b70000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r8 = openat$ptp0(0xffffffffffffff9c, &(0x7f00000006c0), 0x200, 0x0) read$ptp(r8, &(0x7f0000000a80)=""/219, 0xdb) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='kfree\x00', r7, 0x0, 0x4}, 0x18) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r9, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a58000000060a010400000000000000000a0000010900010073797a31000000002c0004802800018007000100637400001c0002800500030001000000080002400000001108000440000000150900020073797a32"], 0x80}, 0x1, 0x0, 0x0, 0x4008091}, 0x24000000) 2.227369575s ago: executing program 2 (id=14256): syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r0, 0x0, 0x40006) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f00000000c0)={'syztnl0\x00', &(0x7f0000000180)={'sit0\x00', 0x0, 0x700, 0x7800, 0x7, 0x5, {{0x1a, 0x4, 0x1, 0x9, 0x68, 0x64, 0x0, 0xd, 0x4, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @private=0xa010102, {[@lsrr={0x83, 0x13, 0xec, [@remote, @multicast1, @loopback, @local]}, @rr={0x7, 0x7, 0x97, [@remote]}, @end, @lsrr={0x83, 0x7, 0xf, [@rand_addr=0x64010101]}, @ra={0x94, 0x4}, @cipso={0x86, 0x2d, 0xffffffffffffffff, [{0x6, 0xe, "b981e1144a3406e8bb4d3a96"}, {0x0, 0x9, "a99164d005aeb1"}, {0x5, 0xd, "7057d1f49221cb1ade7950"}, {0x1, 0x3, "d6"}]}]}}}}}) r3 = socket(0x10, 0x803, 0x0) getsockname$packet(r3, &(0x7f00000004c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x58) sendmsg$nl_route(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="4800000010000507000000000000000000000002", @ANYRES32=r4, @ANYBLOB="0000400000000002280012000c00010076657468"], 0x48}}, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000500)={0xffffffffffffffff, 0x0, 0x0}, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000540)={'batadv_slave_1\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000600)={'syztnl0\x00', &(0x7f0000000580)={'syztnl1\x00', 0x0, 0x4, 0x4, 0x81, 0x1, 0x5, @ipv4={'\x00', '\xff\xff', @private=0xa010101}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x7800, 0x7800, 0x101, 0x55b5c3b6}}) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) r9 = socket$inet_sctp(0x2, 0x1, 0x84) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$ETHTOOL_MSG_WOL_GET(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000400)={0x20, r8, 0x1, 0x70bd29, 0x0, {0x1b}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}]}]}, 0x20}}, 0x0) r11 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r11, &(0x7f0000000000), 0x10) ioctl$ifreq_SIOCGIFINDEX_vcan(r11, 0x8933, &(0x7f0000000100)={'vxcan0\x00', 0x0}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000200)=ANY=[@ANYBLOB="9feb010018000000000000003c0000003c00000006000000040000000000000e0400000000000000000000000100000d0400000004000000040000000000000000000010040000000000000000000002030000000000000061"], 0x0, 0x5a, 0x0, 0x4, 0x80000}, 0x28) sendmsg$ETHTOOL_MSG_COALESCE_GET(0xffffffffffffffff, &(0x7f0000000840)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000800)={&(0x7f0000000700)={0xd0, r1, 0x10, 0x70bd2a, 0x25dfdbfe, {}, [@HEADER={0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_virt_wifi\x00'}]}, @HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_bridge\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}]}, @HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r12}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netpci0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}]}, 0xd0}, 0x1, 0x0, 0x0, 0x24000000}, 0x24000000) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x1000000000021, 0x0, 0x0) 2.226928734s ago: executing program 3 (id=14257): setsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010005"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x1, 0x803, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x4, 0x8, 0xe}, 0x48) r5 = syz_io_uring_setup(0x14dd, &(0x7f0000000300)={0x0, 0x5121, 0x0, 0x3, 0x258}, &(0x7f0000000040)=0x0, &(0x7f0000000600)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r6, r7, &(0x7f0000000080)=@IORING_OP_SYMLINKAT={0x26, 0x4, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000140)='./file1\x00'}) io_uring_enter(r5, 0x47ba, 0x0, 0x0, 0x0, 0x0) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000a80)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000100000000000000fe0018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000040)='kmem_cache_free\x00', r9, 0x0, 0x10007ffffffff}, 0x18) socket$kcm(0x10, 0x2, 0x0) sendmsg$nl_route(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) r10 = socket$nl_route(0x10, 0x3, 0x0) r11 = socket(0x1, 0x803, 0x0) select(0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)={0x77359400}) getsockname$packet(r11, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r10, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=@newlink={0x44, 0x10, 0x403, 0x70bd25, 0x0, {0x0, 0x0, 0x0, 0x0, 0x400}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ip6gretap={{0xe}, {0x8, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}]}}}, @IFLA_MASTER={0x8, 0xa, r12}]}, 0x44}, 0x1, 0x0, 0x0, 0x24000804}, 0x8000) 1.505254761s ago: executing program 5 (id=14258): openat$sndseq(0xffffffffffffff9c, &(0x7f0000000700), 0x0) lsetxattr$security_capability(0x0, 0x0, &(0x7f00000002c0)=@v3={0x3000000, [{0x80032a5, 0x81}, {0x1, 0x3}]}, 0x18, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000280)=[@mss={0x2, 0x7}, @timestamp], 0x59) r1 = socket(0x10, 0x3, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="07000000040000000800000001"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800"/15, @ANYRES32=r2, @ANYBLOB="0000000000000000b703000000060000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000100)='kmem_cache_free\x00', r3}, 0x18) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x12020d0, &(0x7f0000001500)={[{@debug}, {@data_err_ignore}, {@data_err_ignore}, {@nobarrier}, {@inlinecrypt}, {@delalloc}, {@nogrpid}, {@nombcache}, {@stripe={'stripe', 0x3d, 0x2}}]}, 0x3, 0x57f, &(0x7f0000001600)="$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") r4 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x441, 0x104) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000300)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x41) setpgid(0x0, 0x0) syz_read_part_table(0x1050, &(0x7f0000000000)="$eJzsz7GtwjAYBOB7eQlJCsRKsAENm7APFQ1TULEGJWMEQWyYACGk7yvs8y+dLYev+nul4bn+l9M26zk0ZbC8DJmmsdbGdG3OSRbHW/rHpN60X5Vw7ZPNWPvtvB2m7v1wszt97mcAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA8DvuAQAA//8yUgpN") wait4(0x0, 0x0, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001580)={&(0x7f00000015c0)='kmem_cache_free\x00', r5}, 0x10) prctl$PR_SET_NAME(0xf, &(0x7f0000000140)='+}[@\x00') move_mount(0xffffffffffffffff, 0x0, 0xffffffffffffff9c, 0x0, 0x262) fallocate(r4, 0x0, 0x3, 0x800000) r6 = syz_open_procfs$pagemap(0x0, &(0x7f0000001080)) ioctl$PAGEMAP_SCAN(r6, 0xc0606610, &(0x7f0000000140)={0x60, 0x0, &(0x7f0000001000/0x3000)=nil, &(0x7f0000ffb000/0x4000)=nil, 0x0, &(0x7f0000000640)=[{0x800000000}, {0x0, 0x5, 0x4}], 0x2, 0x100000c01, 0x61, 0x0, 0x0, 0x6e}) r7 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x101042, 0x1b6) pwrite64(r7, &(0x7f0000000140)='2', 0xfdef, 0xfecc) connect$netlink(r1, &(0x7f00000014c0)=@proc={0x10, 0x0, 0x1}, 0xc) symlink(&(0x7f0000000380)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000640)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') 1.043157124s ago: executing program 1 (id=14259): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = msgget$private(0x0, 0x0) msgsnd(r1, &(0x7f0000000340)=ANY=[@ANYRES16], 0x2000, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1e0000000000000004000000ff"], 0x50) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b00"/13, @ANYRES32=0x0, @ANYBLOB="0000000000000000f53d00"/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000005c0)='sched_switch\x00', r3}, 0x10) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[], 0x48) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) perf_event_open(&(0x7f0000000000)={0x8, 0x80, 0x0, 0xfe, 0x0, 0xff, 0x0, 0x0, 0x5022, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}, 0x0, 0x2, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x80, 0x0, 0x0, 0x0, 0x9, 0x200b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x8000}, 0x0, 0x31, 0x6, 0x7, 0x9, 0x6, 0x0, 0x0, 0x0, 0x0, 0xfffffffff32ac69b}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000001980)=@newtfilter={0x974, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0x9}, {}, {0xd, 0xfff1}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x944, 0x2, [@TCA_CGROUP_ACT={0x940, 0x1, [@m_nat={0x104, 0x8, 0x0, 0x0, {{0x8}, {0xcc, 0x2, 0x0, 0x1, [@TCA_NAT_PARMS={0x28, 0x1, {{0x0, 0x95, 0x8, 0x5, 0x8d4}, @initdev={0xac, 0x1e, 0x1, 0x0}, @remote, 0x0, 0x1}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x1, 0x9, 0x10000000, 0xfca, 0x9}, @dev={0xac, 0x14, 0x14, 0x10}, @dev={0xac, 0x14, 0x14, 0x3e}, 0xffffffff, 0x1}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x1, 0x81a, 0x1, 0x132, 0x4}, @multicast1, @local}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x3, 0x1c8c, 0x7, 0x0, 0x4}, @loopback, @multicast2}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x4, 0x14, 0x5, 0x7, 0x8}, @remote, @initdev={0xac, 0x1e, 0x0, 0x0}, 0xff, 0x1}}]}, {0x13, 0x6, "df4b61002c2d8f3de92d86aa9ff3db"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x3, 0x1}}}}, @m_simple={0x110, 0x17, 0x0, 0x0, {{0xb}, {0x2c, 0x2, 0x0, 0x1, [@TCA_DEF_PARMS={0x18, 0x2, {0x758acb2, 0x436, 0x8, 0x2, 0x4}}, @TCA_DEF_DATA={0x6, 0x3, '!\x00'}, @TCA_DEF_DATA={0x7, 0x3, ']-\x00'}]}, {0xbb, 0x6, "a69ef42bd246e41cc291233fb0f44bf0e8823a9b39bd32e3bda4e24850562f1e46f5ae432374a03020ee104ff11a43f5c8ccd22166a77181594354a53f76ecc4b2222d5ea4232c7e7806a7b74ea5a8e3ff520684073e90a633c1152bb567b9ffff2ba5e9bc81c393f087ea9048a235351ac0646dc44e48dd07539f6e8b617738aa2dbef50b2971cc2a429ff6d49672fa97c8d16cbc2ea77b93317de856f57730beb756f4d43d28b22901ab09068c1029337b1c14bb1fb4"}, {0xc}, {0xc, 0x8, {0x3, 0x2}}}}, @m_ife={0x168, 0x3, 0x0, 0x0, {{0x8}, {0x40, 0x2, 0x0, 0x1, [@TCA_IFE_TYPE={0x6, 0x5, 0x7}, @TCA_IFE_SMAC={0xa}, @TCA_IFE_DMAC={0xa, 0x3, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x35}}, @TCA_IFE_TYPE={0x6, 0x5, 0x5}, @TCA_IFE_METALST={0xc, 0x6, [@IFE_META_TCINDEX={0x6, 0x5, @val=0x1}]}, @TCA_IFE_TYPE={0x6, 0x5, 0xfff9}]}, {0x101, 0x6, "f8468f69fa2777ae2adb842bf1092f6e6c97a34c23ea4aedddbdf9a10716ad8444e64fe401b55f50bf7761ac56351a31db1d8ce502bd0466791e2ee6a779ac9665338c1f2b64b478897941eecbb787ebd354c5c6fb17d3f82b98b60767640fa3d910afd30441b4097fac4533d899d044d7aa35fbb93aae6834a5fc04446917c97c60e7ed44d3eaa5a5972832b5afc7994b6d776035c4047b44405066ceeda47366e2f6b8022350e9f651adfb2c94a18c6b4ffc9f6a3522e0372a9c602a27721deee23c3b1bd20612176a94b67fcec28960239629968d42d5d5697da4277f84fe36a2a725a3ab937de27f902740777e511021b234b4fcee0c3134b4a514"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3, 0x3}}}}, @m_ife={0xac, 0x9, 0x0, 0x0, {{0x8}, {0x10, 0x2, 0x0, 0x1, [@TCA_IFE_DMAC={0xa, 0x3, @local}]}, {0x77, 0x6, "bc0348b3b3aa9d93ce16c768bde5564ecf14f3318699ef20b26f25fadc9113cbb18aae3a0157cfbce386e06ab65a28b658b60393bb8e87ead6da0b5be56f8c12effbb9655351f126c09735f10259c5031d235f944e136ae57110bc036708d7cfee98dff1c270506ac232f82f446a3a7868b399"}, {0xc}, {0xc, 0x8, {0x2, 0x2}}}}, @m_xt={0x118, 0x1f, 0x0, 0x0, {{0x7}, {0xc, 0x2, 0x0, 0x1, [@TCA_IPT_INDEX={0x8, 0x3, 0x2}]}, {0xe8, 0x6, "e40f5a6975607355edf47f9e1d2deff1fd22bb72fbe45cdb5bf11b4c024fbc9d42ba57d5681993bff483b8738b29604f23502a684fd15eb10c8baafbc4eaefc401d1910e7c184562f4d16c1cf23ed896c4c359def509754d0bd5d9a023a184abe7ff9d2c9ac3fb4d2a58116809d6c4600475c048f78ca15b611e1b12bc9f946774355fef9bd59c17be5070c4f93464af9daa0cb70d16535333ef33410cf43d3602fc7114adff20df7280d7cd3a44cc5635e6e42e82d7d71dc85458b12897a8d6bccd9dcb056cd81c5b2758d226419c09551a0e7da968a36ccd9be659ed47049dc8aabefe"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_gact={0xe4, 0xb, 0x0, 0x0, {{0x9}, {0x70, 0x2, 0x0, 0x1, [@TCA_GACT_PROB={0xc, 0x3, {0x2, 0x17a0, 0x8}}, @TCA_GACT_PARMS={0x18, 0x2, {0x3, 0xf4, 0x7, 0x9c8e, 0xd4}}, @TCA_GACT_PARMS={0x18, 0x2, {0xd, 0x8b, 0x4, 0x8, 0x1}}, @TCA_GACT_PROB={0xc, 0x3, {0x0, 0x122f, 0x5}}, @TCA_GACT_PARMS={0x18, 0x2, {0x7, 0x10000, 0x4, 0x6, 0x8}}, @TCA_GACT_PROB={0xc, 0x3, {0x1, 0x733}}]}, {0x49, 0x6, "b13f4c6883c355e6f1b76276b8755d61b3cb7d054fed95a202b2ad83b6f921b35d710de907c8d7237439ea877e287a406e2fec170adfb291f8f7320b72c4803d2331f3b771"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x1}}}}, @m_xt={0x17c, 0x2, 0x0, 0x0, {{0x7}, {0x58, 0x2, 0x0, 0x1, [@TCA_IPT_TABLE={0x24, 0x1, 'nat\x00'}, @TCA_IPT_INDEX={0x8, 0x3, 0x8}, @TCA_IPT_HOOK={0x8, 0x2, 0x3}, @TCA_IPT_HOOK={0x8}, @TCA_IPT_HOOK={0x8, 0x2, 0x3}, @TCA_IPT_HOOK={0x8, 0x2, 0x3}, @TCA_IPT_INDEX={0x8, 0x3, 0x2}]}, {0xff, 0x6, "1d228b155065f495964d46482dcd36c1126c942d65841c612216da83628d0b73e9f3f238bf70989c0d7e3c2c5cd5a990399a12ea33a67e094c79be862f495528bf0b06cda62bbf0c245abb755ffe10567e737cff87098733df216e6637c9ecfe573bea1693bc142609a665da91d9b600a3533858aedd238f6e58c3590306276dccae85c30fbe8f28fcc3686b8ae86e4a771afd16572d805cdb0413174096a23fc280dbd490572127f97eb4a27f2f709bef47b9d9f34363ea14cdedaf77625d4fafaeddead3665cb751e8ada5d26db0e4c655e67635cade0d3df79bde345b6e7dbdede49ae6b33a0382ddae7197a5d8db841c0ee0b7b66cb11ced8f"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x2, 0x2}}}}, @m_xt={0x19c, 0x11, 0x0, 0x0, {{0x7}, {0xf4, 0x2, 0x0, 0x1, [@TCA_IPT_HOOK={0x8, 0x2, 0x3}, @TCA_IPT_INDEX={0x8, 0x3, 0x1}, @TCA_IPT_TARG={0xdf, 0x6, {0x0, 'nat\x00', 0xe, 0x7, "9dad01c1b5eedd9fa3a49bc6a7088b37831227698d80e17392fe4fef40e40d331effbe157d90137965f8c9ca3de9f9f9c6ea53feb612249539e95f005de3a23ba3a4f772e825fa815e65a94f5866ae313f12cc1eefae8c69a41840e50fe72063c68c14ddc0a4eb4e64a659e1a528104da86ca47149b2d8a970ef6125e51348d1613b5be150637f280c21debdf52f0c409554a621e1e9ecef8894d56666e1423e2b08ccda6bacc3e726dbe5c18172943c30e0c3cbfc"}}]}, {0x84, 0x6, "cd89b4a447bd49ea6198f2c7b8391c314d9c585c3e872eba447521bb1682ec34ec7a1519187db4360f737a4fb2c1fb29f65de726a7516e35264f7a1f863b77c922f9c5d89a8f12120274bbf5d30e899e21f173cbed12f6574b3c23e8d171d287ba741f65e89643cbb096bbf7f58b5a6229d7ff6bde7057b28a0e50a5c1ce735b"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}]}]}}]}, 0x974}}, 0x1) getsockname$packet(0xffffffffffffffff, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="400000001000030500000000000700", @ANYRES32=0x0, @ANYBLOB="0000000000100000180012800e0001007769726567756172640000000400028008000a00", @ANYRES32=r4], 0x40}, 0x1, 0x0, 0x0, 0x800}, 0xc0b0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r5, &(0x7f00000002c0), 0x40000000000009f, 0x0) msgctl$IPC_SET(r1, 0x1, &(0x7f00000004c0)={{0x0, 0xee00, 0x0, 0x0, 0x0, 0x0, 0xfffe}, 0x0, 0x0, 0xb, 0x6f76, 0x7, 0x0, 0x1, 0x8, 0x7f, 0x3}) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=@newqdisc={0x54, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0xffe0}, {0xf}, {0xe, 0xd}}, [@TCA_RATE={0x6, 0x5, {0x9, 0x1}}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1a, {0x0, 0x0, 0x491, 0x0, 0x0, 0x0, 0x8, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x4004}, 0x4000c00) socket$nl_route(0x10, 0x3, 0x0) 1.001509778s ago: executing program 5 (id=14260): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000fd0f000007"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000900)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00', r3}, 0x10) request_key(&(0x7f0000002740)='asymmetric\x00', &(0x7f0000002780)={'syz', 0x3}, &(0x7f00000027c0)=',*[\\/&)\x00', 0xffffffffffffffff) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0xd, 0xfffffffb, 0x7fffefff}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r7, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0) recvmsg(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000000)=""/233, 0xe9}], 0x1, &(0x7f0000001d00)=""/4080, 0xff0}, 0x0) close(r6) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000700)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002d00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r8}, 0x10) syz_clone(0x102311, 0x0, 0x0, 0x0, 0x0, 0x0) r9 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$TIOCSETD(r9, 0x5423, &(0x7f0000000040)=0x2) readv(r9, &(0x7f0000000640)=[{&(0x7f0000000400)=""/244, 0xf4}], 0x1) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x200000, &(0x7f0000000200)={[{@noblock_validity}, {}, {@sysvgroups}, {@resuid={'resuid', 0x3d, 0xee01}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@orlov}, {@nogrpid}, {@noauto_da_alloc}, {@nomblk_io_submit}]}, 0x3, 0x56a, &(0x7f00000015c0)="$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") r10 = socket$nl_route(0x10, 0x3, 0x0) r11 = open$dir(&(0x7f0000000180)='./file1\x00', 0x800, 0x24) open_tree(r11, &(0x7f00000002c0)='./file1\x00', 0x80001) sendmsg$nl_route(r10, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000100)=ANY=[@ANYBLOB="240000002100010000000000000000000a000000000000000000000008001b"], 0x24}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000001c0)=@newqdisc={0x74, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r5, {0x3}, {}, {0x2, 0x1}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x3c, 0x2, [@TCA_GRED_PARMS={0x38, 0x1, {0x8, 0x0, 0x8, 0x2, 0xfffff001, 0x7, 0x2, 0x4, 0xff, 0x9, 0x7, 0x19, 0x15, 0xdb, 0x6, 0xf21}}]}}, @TCA_RATE={0x6, 0x5, {0xa2, 0x1c}}]}, 0x74}, 0x1, 0x0, 0x0, 0x40098}, 0x4000000) 879.153449ms ago: executing program 2 (id=14261): socket$nl_route(0x10, 0x3, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r1}, 0x10) r2 = syz_io_uring_setup(0x5c4, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x4, 0x8000000}, &(0x7f0000000300)=0x0, &(0x7f00000001c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffff8, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f00000004c0)=@IORING_OP_TIMEOUT={0xb, 0x49, 0x0, 0x0, 0x4, &(0x7f0000000280)={0x0, 0x989680}, 0x1, 0x40, 0x1}) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x11, 0xc, 0x0, &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000140)='kfree\x00', r5, 0x0, 0x3}, 0x18) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000d40)=ANY=[@ANYBLOB="f9ffffff00e41ca58a59bb90bd4aff8fe01de4ab2649d1f9e25421f754d090ec5135a81a1f6da22b4048af2942ebc27f127698043de7be5228e257588adf61b9a938494d81d5dae53f8517b5da012153e811ce8d01c22ac207687dbe75941fe2", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000e40)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002010000850000004300000095"], 0x0, 0x80000, 0x0, 0x0, 0x0, 0x1d, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r7 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x18, 0x7, &(0x7f0000000080)=ANY=[], &(0x7f0000000140)='GPL\x00', 0x1, 0x0, 0x0, 0x41100, 0x8, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x80000}, 0x94) r8 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r8, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="38000000031401002cbd7000fcdbdf250900020073797a32000000000800410073697700140033006c6f"], 0x38}, 0x1, 0x0, 0x0, 0x44}, 0x810) sendmsg$RDMA_NLDEV_CMD_DELLINK(r8, 0x0, 0x0) bpf$BPF_PROG_QUERY(0x10, 0x0, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000001500)=ANY=[@ANYRES32=r6, @ANYRES32=r7, @ANYBLOB="5435f423282000000000000084fb70747cf5c769fc989154e933b436fed7ee20b4a905ad066054fba07ac734ca6214ddb6f6391209f8ffffffffffffff12ad6cb6e86969f8a13db710da31104e2018b532333a6a8e3b19903884de6155d19bb100252b92894a2c", @ANYRES32, @ANYRES64], 0x20) bpf$BPF_PROG_GET_NEXT_ID(0xb, &(0x7f0000000280)={0x4, 0x0}, 0x8) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000000)={r9}, 0x4) io_uring_enter(r2, 0x6e2, 0x3900, 0x3, 0x0, 0x0) clock_nanosleep(0x2, 0x1000000, &(0x7f0000000040)={0x77359400}, 0x0) 329.65796ms ago: executing program 5 (id=14262): socket$nl_route(0x10, 0x3, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r1}, 0x10) r2 = syz_io_uring_setup(0x5c4, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x4, 0x8000000}, &(0x7f0000000300)=0x0, &(0x7f00000001c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffff8, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f00000004c0)=@IORING_OP_TIMEOUT={0xb, 0x49, 0x0, 0x0, 0x4, &(0x7f0000000280)={0x0, 0x989680}, 0x1, 0x40, 0x1}) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x11, 0xc, 0x0, &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000140)='kfree\x00', r5, 0x0, 0x3}, 0x18) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000d40)=ANY=[@ANYBLOB="f9ffffff00e41ca58a59bb90bd4aff8fe01de4ab2649d1f9e25421f754d090ec5135a81a1f6da22b4048af2942ebc27f127698043de7be5228e257588adf61b9a938494d81d5dae53f8517b5da012153e811ce8d01c22ac207687dbe75941fe250c9afbd35462df1043e4e10eef0c7d909f435bb38a191172588164523568f", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000e40)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002010000850000004300000095"], 0x0, 0x80000, 0x0, 0x0, 0x0, 0x1d, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r7 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x18, 0x7, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000000000000000000000000000e50003000000000085100000fcffffff2500000010000000060000"], &(0x7f0000000140)='GPL\x00', 0x1, 0x0, 0x0, 0x41100, 0x8, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x80000}, 0x94) r8 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r8, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="38000000031401002cbd7000fcdbdf250900020073797a32000000000800410073697700140033006c6f"], 0x38}, 0x1, 0x0, 0x0, 0x44}, 0x810) sendmsg$RDMA_NLDEV_CMD_DELLINK(r8, 0x0, 0x0) bpf$BPF_PROG_QUERY(0x10, 0x0, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000001500)=ANY=[@ANYRES32=r6, @ANYRES32=r7, @ANYBLOB="5435f423282000000000000084fb70747cf5c769fc989154e933b436fed7ee20b4a905ad066054fba07ac734ca6214ddb6f6391209f8ffffffffffffff12ad6cb6e86969f8a13db710da31104e2018b532333a6a8e3b19903884de6155d19bb100252b92894a2c", @ANYRES32, @ANYRES64], 0x20) bpf$BPF_PROG_GET_NEXT_ID(0xb, &(0x7f0000000280)={0x4, 0x0}, 0x8) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000000)={r9}, 0x4) io_uring_enter(r2, 0x6e2, 0x3900, 0x3, 0x0, 0x0) clock_nanosleep(0x2, 0x1000000, &(0x7f0000000040)={0x77359400}, 0x0) 276.132205ms ago: executing program 3 (id=14263): socket$key(0xf, 0x3, 0x2) fsconfig$FSCONFIG_SET_PATH_EMPTY(0xffffffffffffffff, 0x4, &(0x7f0000000140)='++\xae\x00', &(0x7f0000000180)='./file0\x00', 0xffffffffffffff9c) prctl$PR_SET_NAME(0xf, &(0x7f0000000200)='gtp\x00\xe4\xaa\xae\xdf~2\xa6X\x14\x92\xdarV\xf4U\xf7\xa2\xc3l\x1b@\xaf\xf9\xc9\xa9#\xf0S\xd9=q\xd6\x14\xedt\xc8!W\xe9@\xeb\x7f~\tB0EE\x9a:\xb7\xff\xc1\xfc\x9a\x1f\xf2\xfb\x19\xda#x\xc5F\x1c~\x8c\xe1\xdf\xdc\x01k\f\xde0~\x95\r\xa2\x80\b4M\x14\xe7\xd0\t`n!g\x14\xe6\xd1\xc2\xd3\x88\xf8cVtd\xbeY\xa5\xe7\x16sD\x96}7\n\x88e\x00\xf0\xff\xff\xf0\xcb\x94\xb4S\x00\x00') r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000300)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x41) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001580)={&(0x7f00000015c0)='kmem_cache_free\x00', r0}, 0x10) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x8000000004) r4 = socket$inet(0x2, 0x1, 0x0) setsockopt$sock_int(r4, 0x1, 0x2, &(0x7f0000000040)=0x7f, 0x4) bind$inet(r4, &(0x7f0000e15000)={0x2, 0x4e20, @multicast2}, 0x10) r5 = socket$inet(0x2, 0x1, 0x0) setsockopt$sock_int(r5, 0x1, 0x2, &(0x7f0000000040)=0x7f, 0x4) bind$inet(r5, &(0x7f0000e15000)={0x2, 0x4e20, @multicast2}, 0x10) writev(r3, &(0x7f0000000040)=[{&(0x7f0000000080)="580000001400192340834b80040d8c560a067f0202ff000000000000000058000b4824ca945f64009400ff0325010ebc000000000000008000f0fffeffe809005300fff5dd00000010000100080c100000000100ffffffff", 0x58}], 0x1) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000016c0)=ANY=[@ANYBLOB="3c00000010000104000080000000000000000000", @ANYRES32=0x0, @ANYBLOB="01480000195301001c00128009000100626f6e64000000000c00028005000e00080000009306f5976b242b115e8c11040000005737527e7731cfac1b1c5eaf984bf1ced3046a3e33049e03857b217607b26178900a75395c7001b829c2695ceaaeb710fbdcdfba707a401ee743cb35b70c420028646d2fe974226e29e82f97e59ff30e67b6875c77f99fd4bbf304c15d7094a5afd54c50dc8aad81a36a4a322cadfebc1d8994d7aaec8570e667b3fb6668d60c479c2b6663d89d25124fe1d2bcba2073ee11f50826bc36d71c5f6b9820faede37cfb3d4115160e5d1f7c00d5fe14ec1d20287681ffd76151079f9c90009b32a6e8c680"], 0x3c}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x20008810) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000001600)={0x11, 0xb, &(0x7f00000006c0)=ANY=[@ANYBLOB="18000000000000000000000095980000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f0ffffffb702000005000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) io_setup(0x80000000, &(0x7f00000000c0)) sendmsg$nl_xfrm(r1, &(0x7f0000001500)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="d3e701e6bb567f71a483ef68c2dc9752105028af4f3de5bee88d794b2f53459c71b7830db490c017064950b185b31299"], 0x138}, 0x1, 0x0, 0x0, 0x28672d6ebaefccea}, 0x4040011) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='freezer.state\x00', 0x275a, 0x0) fcntl$lock(r8, 0x26, &(0x7f0000000040)={0x1, 0x1, 0x400000000, 0x10000000000008}) fcntl$lock(r8, 0x25, &(0x7f00000000c0)={0x1, 0x0, 0x5, 0x345}) fcntl$lock(r8, 0x25, &(0x7f0000000580)={0x0, 0x1, 0x10000400000007, 0x2000730}) epoll_create1(0x0) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000018c0)=ANY=[@ANYBLOB="380100001874eea677e5e27fc3bb15d469c1e15732bb20e97d7fc8662a0f358b090000006c", @ANYBLOB="2dab7666b26be80fad040234e1387ae596b28d9c464d7f137deccdef04b48544aed1394d14982f6b308232a5d3fb85506eaa075e7957e643f666d82ae7210bace58037b5ac938c176003b3fb0ff19f62e148d8ae8e4effce8fd1462de784fbbaadd107f4a5f03bd8da66c14063e7189a5aa17e201d0e7ff80a71c69b2378bfc6ba351cc91212a34e6456a881a1320c96015a1af2a4c2f9f7efe212b648c1e25b00e3d785358d4c66f16554f31c080979212d67", @ANYRES8=r7], 0x138}, 0x1, 0x0, 0x0, 0x8801}, 0x0) 190.869973ms ago: executing program 1 (id=14264): r0 = socket$netlink(0x10, 0x3, 0x6) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000000), 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f0000000100)=0x1800, 0x4) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r1 = socket$key(0xf, 0x3, 0x2) bpf$BPF_PROG_QUERY(0x10, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="070000000400000080"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f00000007c0)=ANY=[], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x30, '\x00', 0x0, @fallback=0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x80000}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x21, 0x5, &(0x7f0000000140)=ANY=[@ANYRES16], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r2 = perf_event_open$cgroup(&(0x7f0000000180)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x8}, 0x240}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) syz_clone(0xd024100, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r2, 0x4008240b, &(0x7f0000000000)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x4}, 0x10000}) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000280)='/proc/bus/input/devices\x00', 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r3, &(0x7f0000000000)={0x40002001}) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000640)={@fallback, 0x20, 0x0, 0xe, &(0x7f0000000380)=[0x0, 0x0, 0x0, 0x0], 0x4, 0x0, &(0x7f00000003c0)=[0x0], &(0x7f0000000440)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000480)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x40) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000280)={0x1, &(0x7f0000000780)=[{0x200000000006, 0xf, 0x6, 0x7ffc1ffb}]}) bpf$MAP_DELETE_ELEM(0x3, 0x0, 0x0) r4 = open(&(0x7f0000000400)='./file0\x00', 0x64842, 0x2) pwritev2(r4, &(0x7f0000000240)=[{}], 0x1, 0x7c00, 0x0, 0x3) sendmsg$key(r1, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="02030609100000000000004c9e0000000200130002000000da16c167d803f1f805000600200000000a00060000000000ff0000000000000000001ffeff0001000003f1dc7f7c6e7c02000100000000000040000280ffffff05000500000000000a"], 0x80}}, 0x0) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="3801000010000100feffffff00010000fc00000000000000000000000000000164010101000000000000000000000000000107144e230005000000003a000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ff020000000000000000000000000001000004d46c000000ac141437000000000000000000000000000000000000000092010000000000000600000000000000ffff00000000020000000800000000000200000000000000f8ffffffffffffff0000000000000000ffffffffffffffff00000000000000001f00000000000000feffffffffffffff02000000fcffffbf000000002abd700004350000020001002000000000000000480003006465666c617465"], 0x138}, 0x1, 0x0, 0x0, 0x8801}, 0x0) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(0xffffffffffffffff, 0x7, &(0x7f0000000300)=r4, 0x1) sendmsg$nl_xfrm(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="3801000018"], 0x138}, 0x1, 0x0, 0x0, 0x8801}, 0x0) 54.030536ms ago: executing program 2 (id=14265): r0 = socket$inet_icmp(0x2, 0x2, 0x1) ioctl$F2FS_IOC_PRECACHE_EXTENTS(r0, 0xf50f, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r2 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000880)={0xee4564d931d18f25, 0x2, &(0x7f0000000300)=@raw=[@func={0x85, 0x0, 0x1, 0x0, 0x7}, @generic={0x6, 0x2, 0x4, 0x8, 0x9}], &(0x7f0000000340)='syzkaller\x00', 0x3, 0xcc, &(0x7f0000000540)=""/204, 0x1f00, 0x55, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000380)={0x4, 0xb, 0x6}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f00000003c0)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r3, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r4}, 0x10) ioctl$SCSI_IOCTL_STOP_UNIT(r2, 0x6) add_key$keyring(&(0x7f00000000c0), 0x0, 0x0, 0x0, 0xffffffffffffffff) request_key(&(0x7f0000000480)='asymmetric\x00', &(0x7f00000004c0)={'syz', 0x0}, &(0x7f0000000500)='abcdefghijklmnop', 0x0) r5 = socket$inet6(0xa, 0x1, 0x0) r6 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f00000001c0)='kfree\x00', r1, 0x0, 0xe9d0}, 0x18) r7 = socket$netlink(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000001200)={&(0x7f00000004c0)=ANY=[@ANYBLOB="38000000031401002dbd7000000000000900020073797a30000000000800410073697700140033006c6f"], 0xffaf}, 0x1, 0x0, 0x0, 0x40814}, 0x0) socket$nl_route(0x10, 0x3, 0x0) r8 = dup3(r6, r4, 0x0) setsockopt$MRT_DONE(r8, 0x0, 0xc9, 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r5, 0x89f1, &(0x7f00000004c0)={'ip6_vti0\x00', &(0x7f0000000740)={'syztnl1\x00', 0x0, 0x29, 0xfa, 0x3, 0x2, 0x5c, @local, @empty, 0x7800, 0x40, 0x4, 0x4}}) r9 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r9) socket$kcm(0x29, 0x0, 0x0) ioctl$BLKRAGET(r8, 0x1263, &(0x7f0000000240)) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r5, 0x89f2, &(0x7f0000000680)={'syztnl1\x00', 0x0}) request_key(&(0x7f0000001d40)='asymmetric\x00', &(0x7f0000000080)={'syz', 0x0}, 0x0, 0xfffffffffffffffe) r10 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xc, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180c0045f54a34ac6a0bd17e032920f4f2e24100", @ANYRES32=r10, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x69, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 0s ago: executing program 1 (id=14266): fsopen(&(0x7f0000000100)='ramfs\x00', 0x1) socket$inet6_sctp(0xa, 0x1, 0x84) r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xc, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x3ff}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000f00)='kfree\x00', 0xffffffffffffffff, 0x0, 0x4}, 0x18) r2 = socket$nl_generic(0x10, 0x3, 0x10) setresuid(0xee01, 0x0, 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_TID_CONFIG(r2, &(0x7f0000000680)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)={0x38, r0, 0x10ada85e65c25359, 0xfffffffc, 0x25dfdbfd, {{0x6b}, {@val={0x8}, @val={0xc, 0x99, {0x7431, 0x4e}}}}, [@NL80211_ATTR_TID_CONFIG={0x10, 0x11d, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x9}]}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x8441}, 0x4000000) kernel console output (not intermixed with test programs): invalid length. [ 1462.567184][T16105] loop5: detected capacity change from 0 to 1024 [ 1462.575138][T16105] EXT4-fs: Ignoring removed orlov option [ 1462.585775][T16105] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1462.630325][T16111] netlink: 'syz.0.13659': attribute type 1 has an invalid length. [ 1462.632275][T16113] netlink: 'syz.3.13660': attribute type 1 has an invalid length. [ 1462.654718][T16111] 8021q: adding VLAN 0 to HW filter on device bond53 [ 1462.721128][T16113] 8021q: adding VLAN 0 to HW filter on device bond54 [ 1462.748207][T16118] macvlan3: entered promiscuous mode [ 1462.754960][T16118] macvlan3: entered allmulticast mode [ 1462.805175][T16118] bond53: entered promiscuous mode [ 1462.819885][T16118] 8021q: adding VLAN 0 to HW filter on device macvlan3 [ 1462.832039][T16118] bond53: left promiscuous mode [ 1462.893106][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 1462.899207][T16113] macvlan3: entered promiscuous mode [ 1462.906581][T16113] macvlan3: entered allmulticast mode [ 1462.926043][T16113] bond54: entered promiscuous mode [ 1462.947082][T16113] 8021q: adding VLAN 0 to HW filter on device macvlan3 [ 1462.957176][T16113] bond54: left promiscuous mode [ 1463.272142][T15640] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1463.307438][T16128] netlink: 'syz.5.13662': attribute type 1 has an invalid length. [ 1463.490127][T16145] netlink: 'syz.3.13666': attribute type 1 has an invalid length. [ 1463.501690][T16144] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1536) ! [ 1463.535081][T16145] 8021q: adding VLAN 0 to HW filter on device bond55 [ 1463.623605][T16153] macvlan3: entered promiscuous mode [ 1463.628976][T16153] macvlan3: entered allmulticast mode [ 1463.664106][T16153] bond55: entered promiscuous mode [ 1463.676019][T16151] netlink: zone id is out of range [ 1463.681724][T16151] netlink: zone id is out of range [ 1463.691111][T16151] netlink: zone id is out of range [ 1463.697184][T16151] netlink: zone id is out of range [ 1463.703090][T16151] netlink: zone id is out of range [ 1463.708601][T16151] netlink: zone id is out of range [ 1463.776290][T16153] 8021q: adding VLAN 0 to HW filter on device macvlan3 [ 1463.785700][T16153] bond55: left promiscuous mode [ 1464.139588][T16161] loop5: detected capacity change from 0 to 512 [ 1464.152279][T16161] EXT4-fs (loop5): revision level too high, forcing read-only mode [ 1464.160578][T16161] EXT4-fs (loop5): orphan cleanup on readonly fs [ 1464.168482][T16161] EXT4-fs error (device loop5): ext4_acquire_dquot:6986: comm syz.5.13668: Failed to acquire dquot type 1 [ 1464.180804][T16161] EXT4-fs (loop5): Remounting filesystem read-only [ 1464.187413][T16161] EXT4-fs (loop5): 1 truncate cleaned up [ 1464.194137][T16161] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 1464.207135][T16161] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1464.543683][T16172] lo speed is unknown, defaulting to 1000 [ 1464.665852][T16172] lo speed is unknown, defaulting to 1000 [ 1465.582822][T16192] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=16192 comm=syz.1.13677 [ 1465.715721][T16197] lo speed is unknown, defaulting to 1000 [ 1465.722238][T16197] lo speed is unknown, defaulting to 1000 [ 1465.728337][T16197] lo speed is unknown, defaulting to 1000 [ 1465.741665][T16197] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 1465.777632][T16197] lo speed is unknown, defaulting to 1000 [ 1465.785863][T16197] lo speed is unknown, defaulting to 1000 [ 1465.792367][T16197] lo speed is unknown, defaulting to 1000 [ 1465.798929][T16197] lo speed is unknown, defaulting to 1000 [ 1465.805189][T16197] lo speed is unknown, defaulting to 1000 [ 1465.817619][T16197] lo speed is unknown, defaulting to 1000 [ 1465.824398][T16197] lo speed is unknown, defaulting to 1000 [ 1465.830984][T16197] lo speed is unknown, defaulting to 1000 [ 1465.837772][T16197] lo speed is unknown, defaulting to 1000 [ 1465.844403][T16197] lo speed is unknown, defaulting to 1000 [ 1466.301104][T16208] netlink: 'syz.0.13681': attribute type 1 has an invalid length. [ 1466.321141][T16208] 8021q: adding VLAN 0 to HW filter on device bond54 [ 1466.396913][T16210] macvlan3: entered promiscuous mode [ 1466.402971][T16210] macvlan3: entered allmulticast mode [ 1466.424420][T16210] bond54: entered promiscuous mode [ 1466.441941][T16210] 8021q: adding VLAN 0 to HW filter on device macvlan3 [ 1466.461887][T16210] bond54: left promiscuous mode [ 1466.499299][T16214] netlink: 'syz.1.13682': attribute type 1 has an invalid length. [ 1466.538585][T16214] 8021q: adding VLAN 0 to HW filter on device bond36 [ 1466.625632][T16214] macvlan4: entered promiscuous mode [ 1466.631198][T16214] macvlan4: entered allmulticast mode [ 1466.655604][T16214] bond36: entered promiscuous mode [ 1466.661309][T16214] 8021q: adding VLAN 0 to HW filter on device macvlan4 [ 1466.702039][T16214] bond36: left promiscuous mode [ 1467.359870][ T29] kauditd_printk_skb: 399 callbacks suppressed [ 1467.359883][ T29] audit: type=1326 audit(2534.869:175711): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16237 comm="syz.1.13688" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff961dff749 code=0x7ffc0000 [ 1467.404842][ T29] audit: type=1326 audit(2534.890:175712): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16237 comm="syz.1.13688" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7ff961dff749 code=0x7ffc0000 [ 1467.429567][ T29] audit: type=1326 audit(2534.890:175713): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16237 comm="syz.1.13688" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7ff961dff783 code=0x7ffc0000 [ 1467.453921][ T29] audit: type=1326 audit(2534.890:175714): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16237 comm="syz.1.13688" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7ff961dfe1ff code=0x7ffc0000 [ 1467.478399][ T29] audit: type=1326 audit(2534.890:175715): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16237 comm="syz.1.13688" exe="/root/syz-executor" sig=0 arch=c000003e syscall=11 compat=0 ip=0x7ff961dff7d7 code=0x7ffc0000 [ 1467.503002][ T29] audit: type=1326 audit(2534.890:175716): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16237 comm="syz.1.13688" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7ff961dfdf90 code=0x7ffc0000 [ 1467.527554][ T29] audit: type=1326 audit(2534.890:175717): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16237 comm="syz.1.13688" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7ff961dfe3aa code=0x7ffc0000 [ 1467.551969][ T29] audit: type=1326 audit(2534.890:175718): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16237 comm="syz.1.13688" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff961dff749 code=0x7ffc0000 [ 1467.576495][ T29] audit: type=1326 audit(2534.890:175719): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16237 comm="syz.1.13688" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7ff961dff749 code=0x7ffc0000 [ 1467.601206][ T29] audit: type=1326 audit(2534.890:175720): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16237 comm="syz.1.13688" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff961dff749 code=0x7ffc0000 [ 1467.642475][T16243] __nla_validate_parse: 6 callbacks suppressed [ 1467.642492][T16243] netlink: 8 bytes leftover after parsing attributes in process `syz.1.13688'. [ 1468.185694][T16248] loop5: detected capacity change from 0 to 512 [ 1468.193208][T16248] EXT4-fs (loop5): mounting ext3 file system using the ext4 subsystem [ 1468.202707][T16248] EXT4-fs (loop5): invalid journal inode [ 1468.217473][T16248] EXT4-fs (loop5): can't get journal size [ 1468.229814][T16248] EXT4-fs (loop5): 1 truncate cleaned up [ 1468.236966][T16248] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1468.790757][T16282] netlink: 56 bytes leftover after parsing attributes in process `syz.2.13705'. [ 1468.858274][T16284] netlink: 'syz.3.13695': attribute type 11 has an invalid length. [ 1468.891991][T16282] xt_hashlimit: max too large, truncated to 1048576 [ 1468.947334][T16287] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 1469.108424][T16289] lo speed is unknown, defaulting to 1000 [ 1469.216590][T16289] lo speed is unknown, defaulting to 1000 [ 1469.241508][T16289] lo speed is unknown, defaulting to 1000 [ 1469.357273][T16299] netlink: 'syz.2.13700': attribute type 1 has an invalid length. [ 1469.380410][T16299] 8021q: adding VLAN 0 to HW filter on device bond59 [ 1469.527961][T16303] macvlan3: entered promiscuous mode [ 1469.534975][T16303] macvlan3: entered allmulticast mode [ 1469.580962][T16303] bond59: entered promiscuous mode [ 1469.594960][T16303] 8021q: adding VLAN 0 to HW filter on device macvlan3 [ 1469.619659][T16303] bond59: left promiscuous mode [ 1470.105893][T16310] netlink: 9 bytes leftover after parsing attributes in process `syz.0.13699'. [ 1470.133324][T16310] netlink: 9 bytes leftover after parsing attributes in process `syz.0.13699'. [ 1470.260139][T16319] netlink: 14 bytes leftover after parsing attributes in process `syz.3.13703'. [ 1470.281340][T16322] netlink: 16 bytes leftover after parsing attributes in process `syz.2.13704'. [ 1470.297526][T16322] netlink: 'syz.2.13704': attribute type 1 has an invalid length. [ 1470.353501][T16324] netlink: 4 bytes leftover after parsing attributes in process `syz.0.13706'. [ 1470.377553][T16324] netlink: 4 bytes leftover after parsing attributes in process `syz.0.13706'. [ 1470.466876][T16326] netlink: 'syz.0.13707': attribute type 1 has an invalid length. [ 1470.529108][T16326] 8021q: adding VLAN 0 to HW filter on device bond55 [ 1470.587063][T16331] netlink: 16 bytes leftover after parsing attributes in process `syz.1.13718'. [ 1470.664131][T16326] macvlan3: entered promiscuous mode [ 1470.670746][T16326] macvlan3: entered allmulticast mode [ 1470.708872][T16326] bond55: entered promiscuous mode [ 1470.726687][T16326] 8021q: adding VLAN 0 to HW filter on device macvlan3 [ 1470.749423][T16326] bond55: left promiscuous mode [ 1470.761871][T16336] netlink: 4 bytes leftover after parsing attributes in process `syz.3.13708'. [ 1471.001258][T15640] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1471.450681][T16370] 9p: Bad value for 'source' [ 1471.459638][T16370] netlink: 'syz.0.13727': attribute type 6 has an invalid length. [ 1471.723872][T16374] netlink: 'syz.2.13731': attribute type 1 has an invalid length. [ 1471.743637][T16374] 8021q: adding VLAN 0 to HW filter on device bond60 [ 1471.813441][T16382] macvlan3: entered promiscuous mode [ 1471.818784][T16382] macvlan3: entered allmulticast mode [ 1471.826866][T16382] bond60: entered promiscuous mode [ 1471.832747][T16382] 8021q: adding VLAN 0 to HW filter on device macvlan3 [ 1471.849069][T16382] bond60: left promiscuous mode [ 1471.941564][T16383] loop5: detected capacity change from 0 to 32768 [ 1471.980822][T16383] loop5: p1 p2 p3 < > p4 < p5 p6 > [ 1471.986131][T16383] loop5: p1 start 460800 is beyond EOD, truncated [ 1471.993387][T16383] loop5: p2 size 83886080 extends beyond EOD, truncated [ 1472.004014][T16383] loop5: p5 start 460800 is beyond EOD, truncated [ 1472.011466][T16383] loop5: p6 size 83886080 extends beyond EOD, truncated [ 1472.025019][T16379] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'filter' [ 1472.116244][T16385] netlink: 'syz.1.13722': attribute type 11 has an invalid length. [ 1472.130022][ T29] kauditd_printk_skb: 557 callbacks suppressed [ 1472.130093][ T29] audit: type=1326 audit(2539.887:176278): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16358 comm="syz.0.13727" exe="/root/syz-executor" sig=0 arch=c000003e syscall=34 compat=0 ip=0x7f3601e2f749 code=0x7ffc0000 [ 1472.135278][ T9409] hid-generic 0003:0004:0000.0003: unknown main item tag 0x0 [ 1472.137037][ T29] audit: type=1326 audit(2539.887:176279): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16386 comm="syz.5.13721" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe5fe7af749 code=0x7ffc0000 [ 1472.159704][ T9409] hid-generic 0003:0004:0000.0003: unknown main item tag 0x0 [ 1472.167048][ T29] audit: type=1326 audit(2539.887:176280): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16386 comm="syz.5.13721" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe5fe7af749 code=0x7ffc0000 [ 1472.191546][ T9409] hid-generic 0003:0004:0000.0003: unknown main item tag 0x0 [ 1472.197745][ T29] audit: type=1326 audit(2539.887:176281): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16386 comm="syz.5.13721" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fe5fe7af749 code=0x7ffc0000 [ 1472.222224][ T9409] hid-generic 0003:0004:0000.0003: unknown main item tag 0x0 [ 1472.228748][ T29] audit: type=1326 audit(2539.887:176282): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16386 comm="syz.5.13721" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe5fe7af749 code=0x7ffc0000 [ 1472.228797][ T29] audit: type=1326 audit(2539.887:176283): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16386 comm="syz.5.13721" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7fe5fe7af749 code=0x7ffc0000 [ 1472.229296][ T29] audit: type=1326 audit(2539.992:176284): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16386 comm="syz.5.13721" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe5fe7af749 code=0x7ffc0000 [ 1472.229566][ T29] audit: type=1326 audit(2539.992:176285): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16386 comm="syz.5.13721" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe5fe7af749 code=0x7ffc0000 [ 1472.230069][ T29] audit: type=1326 audit(2539.992:176286): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16386 comm="syz.5.13721" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fe5fe7af749 code=0x7ffc0000 [ 1472.254281][ T9409] hid-generic 0003:0004:0000.0003: unknown main item tag 0x0 [ 1472.294624][ T29] audit: type=1326 audit(2540.024:176287): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16386 comm="syz.5.13721" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe5fe7af749 code=0x7ffc0000 [ 1472.310422][ T9409] hid-generic 0003:0004:0000.0003: unknown main item tag 0x0 [ 1472.423858][ T9409] hid-generic 0003:0004:0000.0003: unknown main item tag 0x0 [ 1472.432148][ T9409] hid-generic 0003:0004:0000.0003: unknown main item tag 0x0 [ 1472.440397][ T9409] hid-generic 0003:0004:0000.0003: unknown main item tag 0x0 [ 1472.448660][ T9409] hid-generic 0003:0004:0000.0003: unknown main item tag 0x0 [ 1472.464403][ T9409] hid-generic 0003:0004:0000.0003: hidraw0: USB HID v0.02 Device [syz0] on syz1 [ 1472.566257][T16399] netlink: 176 bytes leftover after parsing attributes in process `syz.2.13725'. [ 1472.796700][T16409] sd 0:0:1:0: device reset [ 1473.307137][T16413] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 1473.347460][T16412] netlink: 'syz.2.13729': attribute type 21 has an invalid length. [ 1473.355514][T16412] netlink: 128 bytes leftover after parsing attributes in process `syz.2.13729'. [ 1473.364999][T16412] netlink: 'syz.2.13729': attribute type 5 has an invalid length. [ 1473.373415][T16412] netlink: 3 bytes leftover after parsing attributes in process `syz.2.13729'. [ 1474.819229][T16434] loop9: detected capacity change from 0 to 7 [ 1474.825644][T16434] buffer_io_error: 2 callbacks suppressed [ 1474.825658][T16434] Buffer I/O error on dev loop9, logical block 0, async page read [ 1475.626512][T16434] Buffer I/O error on dev loop9, logical block 0, async page read [ 1475.634401][T16434] loop9: unable to read partition table [ 1475.641968][T16434] loop_reread_partitions: partition scan of loop9 (þ被xüŸÑø éÚ¬§½dG¤´à–ƒÝ¡¯ â·û [ 1475.641968][T16434] ) failed (rc=-5) [ 1475.663423][T16437] netlink: 8 bytes leftover after parsing attributes in process `syz.5.13736'. [ 1475.717305][T16441] netlink: 'syz.5.13738': attribute type 1 has an invalid length. [ 1475.759264][T16441] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1475.841345][T16443] macvlan2: entered promiscuous mode [ 1475.846660][T16443] macvlan2: entered allmulticast mode [ 1475.884271][T16443] bond1: entered promiscuous mode [ 1475.905487][T16443] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 1475.926416][T16443] bond1: left promiscuous mode [ 1476.329400][T16452] netlink: 60 bytes leftover after parsing attributes in process `syz.2.13739'. [ 1476.339165][T16452] netlink: 60 bytes leftover after parsing attributes in process `syz.2.13739'. [ 1476.348955][T16452] netlink: 4 bytes leftover after parsing attributes in process `syz.2.13739'. [ 1476.415660][T16454] netlink: 'syz.1.13740': attribute type 1 has an invalid length. [ 1476.441048][T16454] 8021q: adding VLAN 0 to HW filter on device bond37 [ 1476.533591][T16457] macvlan4: entered promiscuous mode [ 1476.538985][T16457] macvlan4: entered allmulticast mode [ 1476.611421][T16457] bond37: entered promiscuous mode [ 1476.612837][T16462] siw: device registration error -23 [ 1476.639095][T16457] 8021q: adding VLAN 0 to HW filter on device macvlan4 [ 1476.660009][T16457] bond37: left promiscuous mode [ 1476.674394][T16465] loop5: detected capacity change from 0 to 1024 [ 1476.685633][T16465] EXT4-fs: Ignoring removed orlov option [ 1476.703179][T16465] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1476.743465][T16465] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1476.760056][T16465] netlink: 8 bytes leftover after parsing attributes in process `syz.5.13743'. [ 1476.812143][T15640] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1476.845628][T16472] loop5: detected capacity change from 0 to 512 [ 1476.853635][T16472] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 1476.872626][T16472] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1476.896852][ T29] kauditd_printk_skb: 161 callbacks suppressed [ 1476.896865][ T29] audit: type=1326 audit(2544.896:176449): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16471 comm="syz.5.13744" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe5fe7af749 code=0x7ffc0000 [ 1476.934936][ T29] audit: type=1326 audit(2544.896:176450): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16471 comm="syz.5.13744" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe5fe7af749 code=0x7ffc0000 [ 1476.959849][ T29] audit: type=1326 audit(2544.896:176451): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16471 comm="syz.5.13744" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fe5fe7af749 code=0x7ffc0000 [ 1476.972366][T16459] cgroup2: Unknown parameter 'memory_hugZ¯ ‡@† iüF£T…ÆäÞetlb_acco~nting' [ 1476.984539][ T29] audit: type=1326 audit(2544.896:176452): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16471 comm="syz.5.13744" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe5fe7af749 code=0x7ffc0000 [ 1477.017334][ T29] audit: type=1326 audit(2544.896:176453): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16471 comm="syz.5.13744" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe5fe7af749 code=0x7ffc0000 [ 1477.042003][ T29] audit: type=1326 audit(2544.896:176454): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16471 comm="syz.5.13744" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fe5fe7af749 code=0x7ffc0000 [ 1477.066500][ T29] audit: type=1326 audit(2544.896:176455): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16471 comm="syz.5.13744" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe5fe7af749 code=0x7ffc0000 [ 1477.091267][ T29] audit: type=1326 audit(2544.896:176456): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16471 comm="syz.5.13744" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe5fe7af749 code=0x7ffc0000 [ 1477.115930][ T29] audit: type=1326 audit(2544.896:176457): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16471 comm="syz.5.13744" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fe5fe7af749 code=0x7ffc0000 [ 1477.136827][T16478] netlink: 28 bytes leftover after parsing attributes in process `syz.2.13747'. [ 1477.139469][ T29] audit: type=1326 audit(2544.896:176458): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16471 comm="syz.5.13744" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe5fe7af749 code=0x7ffc0000 [ 1477.148204][T16478] netlink: 28 bytes leftover after parsing attributes in process `syz.2.13747'. [ 1477.213321][T15640] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1477.493296][T16487] netlink: 14 bytes leftover after parsing attributes in process `syz.1.13749'. [ 1477.535731][T16488] loop5: detected capacity change from 0 to 512 [ 1477.567487][T16488] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1477.585842][T16488] netlink: 4 bytes leftover after parsing attributes in process `syz.5.13748'. [ 1477.605090][T16488] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1477.612535][T16488] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1477.637603][T16488] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1477.645102][T16488] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1477.716341][T16490] netlink: 12 bytes leftover after parsing attributes in process `syz.1.13750'. [ 1477.890464][T16496] netlink: 'syz.2.13753': attribute type 1 has an invalid length. [ 1477.919681][T16496] 8021q: adding VLAN 0 to HW filter on device bond61 [ 1478.095590][T16496] macvlan3: entered promiscuous mode [ 1478.100921][T16496] macvlan3: entered allmulticast mode [ 1478.109062][T16496] bond61: entered promiscuous mode [ 1478.116324][T16496] 8021q: adding VLAN 0 to HW filter on device macvlan3 [ 1478.169675][T16496] bond61: left promiscuous mode [ 1478.240709][T16507] netlink: 36 bytes leftover after parsing attributes in process `syz.1.13755'. [ 1478.312484][T16502] lo speed is unknown, defaulting to 1000 [ 1478.337644][T16501] gretap0: entered promiscuous mode [ 1478.343013][T16501] netlink: 8 bytes leftover after parsing attributes in process `syz.0.13752'. [ 1478.415885][T16502] lo speed is unknown, defaulting to 1000 [ 1478.424141][T16502] lo speed is unknown, defaulting to 1000 [ 1478.634917][T16525] netlink: 8 bytes leftover after parsing attributes in process `syz.1.13758'. [ 1478.680912][T16525] bond38: option ad_user_port_key: invalid value (1136) [ 1478.687970][T16525] bond38: option ad_user_port_key: allowed values 0 - 1023 [ 1478.715197][T16525] bond38 (unregistering): Released all slaves [ 1479.048420][T16535] netlink: 12 bytes leftover after parsing attributes in process `syz.5.13762'. [ 1479.631306][T16541] Cannot find add_set index 0 as target [ 1479.701165][T16551] siw: device registration error -23 [ 1479.792702][T16548] netlink: 83992 bytes leftover after parsing attributes in process `syz.2.13764'. [ 1479.794062][T16554] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1479.820121][T16548] net_ratelimit: 5 callbacks suppressed [ 1479.820135][T16548] netlink: zone id is out of range [ 1479.832168][T16548] netlink: zone id is out of range [ 1479.833971][T16554] netlink: 8 bytes leftover after parsing attributes in process `syz.3.13769'. [ 1479.850239][T16548] netlink: zone id is out of range [ 1479.855932][T16548] netlink: zone id is out of range [ 1479.861357][T16548] netlink: zone id is out of range [ 1479.868259][T16548] netlink: zone id is out of range [ 1479.874326][T16548] netlink: zone id is out of range [ 1479.884060][T16548] netlink: zone id is out of range [ 1479.891013][T16545] siw: device registration error -23 [ 1479.898373][T16548] netlink: zone id is out of range [ 1479.903596][T16548] netlink: zone id is out of range [ 1479.946451][T16560] netlink: 16 bytes leftover after parsing attributes in process `syz.0.13771'. [ 1479.974074][T16562] netlink: 'syz.2.13772': attribute type 1 has an invalid length. [ 1480.190695][T16573] netlink: 'gtp': attribute type 39 has an invalid length. [ 1480.212711][T16558] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'filter' [ 1480.356663][T16596] siw: device registration error -23 [ 1481.086701][T16628] siw: device registration error -23 [ 1481.678185][ T9404] lo speed is unknown, defaulting to 1000 [ 1481.686442][ T29] kauditd_printk_skb: 275 callbacks suppressed [ 1481.686455][ T29] audit: type=1326 audit(2549.925:176734): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16635 comm="syz.2.13787" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f39028cf749 code=0x7ffc0000 [ 1481.757980][T16642] netlink: 'syz.5.13788': attribute type 13 has an invalid length. [ 1481.782320][T16642] gretap0: refused to change device tx_queue_len [ 1481.788898][ T29] audit: type=1326 audit(2549.967:176735): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16635 comm="syz.2.13787" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f39028cf749 code=0x7ffc0000 [ 1481.884160][ T29] audit: type=1326 audit(2550.124:176736): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16641 comm="syz.5.13788" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe5fe7af749 code=0x7ffc0000 [ 1481.907590][ T29] audit: type=1326 audit(2550.124:176737): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16641 comm="syz.5.13788" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe5fe7af749 code=0x7ffc0000 [ 1481.931035][ T29] audit: type=1326 audit(2550.124:176738): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16641 comm="syz.5.13788" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fe5fe7af749 code=0x7ffc0000 [ 1481.954616][ T29] audit: type=1326 audit(2550.124:176739): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16641 comm="syz.5.13788" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe5fe7af749 code=0x7ffc0000 [ 1481.977940][ T29] audit: type=1326 audit(2550.124:176740): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16641 comm="syz.5.13788" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe5fe7af749 code=0x7ffc0000 [ 1482.001342][ T29] audit: type=1326 audit(2550.124:176741): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16641 comm="syz.5.13788" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fe5fe7af749 code=0x7ffc0000 [ 1482.024721][ T29] audit: type=1326 audit(2550.124:176742): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16641 comm="syz.5.13788" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe5fe7af749 code=0x7ffc0000 [ 1482.048197][ T29] audit: type=1326 audit(2550.124:176743): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16641 comm="syz.5.13788" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe5fe7af749 code=0x7ffc0000 [ 1482.138952][T16646] loop5: detected capacity change from 0 to 1024 [ 1482.148527][T16646] EXT4-fs: Ignoring removed bh option [ 1482.154120][T16646] EXT4-fs: inline encryption not supported [ 1482.161064][T16646] EXT4-fs (loop5): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 1482.178665][T16646] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c84ce018, mo2=0000] [ 1482.201546][T16646] EXT4-fs error (device loop5): ext4_map_blocks:783: inode #3: block 2: comm syz.5.13789: lblock 2 mapped to illegal pblock 2 (length 1) [ 1482.217083][T16646] EXT4-fs error (device loop5): ext4_map_blocks:783: inode #3: block 48: comm syz.5.13789: lblock 0 mapped to illegal pblock 48 (length 1) [ 1482.234013][T16646] EXT4-fs error (device loop5): ext4_acquire_dquot:6986: comm syz.5.13789: Failed to acquire dquot type 0 [ 1482.252954][T16646] EXT4-fs error (device loop5) in ext4_reserve_inode_write:6298: Corrupt filesystem [ 1482.263477][T16646] EXT4-fs error (device loop5): ext4_evict_inode:253: inode #11: comm syz.5.13789: mark_inode_dirty error [ 1482.278931][T16646] EXT4-fs warning (device loop5): ext4_evict_inode:256: couldn't mark inode dirty (err -117) [ 1482.292456][T16646] EXT4-fs (loop5): 1 orphan inode deleted [ 1482.300754][T16646] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1482.314162][ T8454] EXT4-fs error (device loop5): ext4_map_blocks:783: inode #3: block 1: comm kworker/u8:97: lblock 1 mapped to illegal pblock 1 (length 1) [ 1482.330117][ T8454] EXT4-fs error (device loop5): ext4_release_dquot:7022: comm kworker/u8:97: Failed to release dquot type 0 [ 1482.373690][T15640] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1482.385183][T15640] EXT4-fs error (device loop5): __ext4_get_inode_loc:4830: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 1482.401832][T15640] EXT4-fs error (device loop5) in ext4_reserve_inode_write:6298: Corrupt filesystem [ 1482.412471][T15640] EXT4-fs error (device loop5): ext4_quota_off:7270: inode #3: comm syz-executor: mark_inode_dirty error [ 1482.496431][T16653] bond39: (slave batadv2): Releasing backup interface [ 1482.523835][T16653] bond57: (slave batadv0): Releasing active interface [ 1482.622464][T16634] lo speed is unknown, defaulting to 1000 [ 1483.002784][T16671] __nla_validate_parse: 6 callbacks suppressed [ 1483.002801][T16671] netlink: 16 bytes leftover after parsing attributes in process `syz.0.13795'. [ 1483.091983][T16673] netlink: 'syz.0.13795': attribute type 1 has an invalid length. [ 1483.120392][T16634] lo speed is unknown, defaulting to 1000 [ 1483.127648][T16634] lo speed is unknown, defaulting to 1000 [ 1483.133911][T16668] siw: device registration error -23 [ 1483.630056][T16676] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1536) ! [ 1483.789251][T16680] loop5: detected capacity change from 0 to 1024 [ 1483.799190][T16680] EXT4-fs: Ignoring removed orlov option [ 1483.811716][T16680] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1483.831308][T16684] netlink: 8 bytes leftover after parsing attributes in process `syz.3.13799'. [ 1483.850422][T16680] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1483.863310][T16680] netlink: 8 bytes leftover after parsing attributes in process `syz.5.13800'. [ 1483.927925][T15640] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1483.982118][T16688] netlink: 4 bytes leftover after parsing attributes in process `+}[@'. [ 1483.991878][T16690] netlink: 'syz.1.13802': attribute type 1 has an invalid length. [ 1484.032153][T16690] 8021q: adding VLAN 0 to HW filter on device bond38 [ 1484.051046][T16692] netlink: 12 bytes leftover after parsing attributes in process `syz.5.13801'. [ 1484.111312][T16690] macvlan4: entered promiscuous mode [ 1484.117846][T16690] macvlan4: entered allmulticast mode [ 1484.135857][T16690] bond38: entered promiscuous mode [ 1484.148153][T16690] 8021q: adding VLAN 0 to HW filter on device macvlan4 [ 1484.169195][T16690] bond38: left promiscuous mode [ 1484.487765][T16699] netlink: 83992 bytes leftover after parsing attributes in process `syz.0.13797'. [ 1484.619006][T16704] netlink: 12 bytes leftover after parsing attributes in process `syz.2.13805'. [ 1484.663052][T16708] netlink: 'syz.2.13806': attribute type 3 has an invalid length. [ 1484.972051][T16706] netlink: 'syz.0.13803': attribute type 21 has an invalid length. [ 1484.980050][T16706] netlink: 128 bytes leftover after parsing attributes in process `syz.0.13803'. [ 1485.069347][T16723] rdma_op ffff88811c01cd80 conn xmit_rdma 0000000000000000 [ 1485.128126][T16725] siw: device registration error -23 [ 1485.146023][T16706] netlink: 'syz.0.13803': attribute type 5 has an invalid length. [ 1485.154435][T16706] netlink: 3 bytes leftover after parsing attributes in process `syz.0.13803'. [ 1485.989647][T16752] loop5: detected capacity change from 0 to 512 [ 1486.010810][T16752] EXT4-fs (loop5): revision level too high, forcing read-only mode [ 1486.019256][T16752] EXT4-fs (loop5): orphan cleanup on readonly fs [ 1486.028960][T16752] EXT4-fs error (device loop5): ext4_do_update_inode:5617: inode #16: comm syz.5.13817: corrupted inode contents [ 1486.041789][T16752] EXT4-fs (loop5): Remounting filesystem read-only [ 1486.051316][T16752] EXT4-fs (loop5): 1 truncate cleaned up [ 1486.219008][ T6514] EXT4-fs (loop5): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 1486.229554][ T6514] EXT4-fs (loop5): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 1486.240553][ T6514] EXT4-fs (loop5): Quota write (off=8, len=24) cancelled because transaction is not started [ 1486.254025][T16752] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 1486.293794][T15640] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1486.311427][T16762] xt_TPROXY: Can be used only with -p tcp or -p udp [ 1486.330456][T16764] netlink: 'syz.5.13820': attribute type 1 has an invalid length. [ 1486.585083][T16764] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1486.609306][T16769] macvlan2: entered promiscuous mode [ 1486.614775][T16769] macvlan2: entered allmulticast mode [ 1486.666035][T16769] bond2: entered promiscuous mode [ 1486.672974][T16769] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 1486.681665][T16769] bond2: left promiscuous mode [ 1486.763567][T16770] lo speed is unknown, defaulting to 1000 [ 1486.938566][T16770] lo speed is unknown, defaulting to 1000 [ 1486.946014][T16770] lo speed is unknown, defaulting to 1000 [ 1488.972224][T16750] net_ratelimit: 24 callbacks suppressed [ 1488.972242][T16750] Set syz1 is full, maxelem 65536 reached [ 1489.016503][T16782] netlink: 12 bytes leftover after parsing attributes in process `syz.5.13822'. [ 1489.053808][ T29] kauditd_printk_skb: 494 callbacks suppressed [ 1489.053821][ T29] audit: type=1326 audit(2557.652:177229): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16784 comm="syz.1.13823" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff961dff749 code=0x7ffc0000 [ 1489.099270][ T29] audit: type=1326 audit(2557.684:177230): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16784 comm="syz.1.13823" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff961dff749 code=0x7ffc0000 [ 1489.122745][ T29] audit: type=1326 audit(2557.684:177231): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16784 comm="syz.1.13823" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff961dff749 code=0x7ffc0000 [ 1489.146129][ T29] audit: type=1326 audit(2557.684:177232): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16784 comm="syz.1.13823" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff961dff749 code=0x7ffc0000 [ 1489.169388][ T29] audit: type=1326 audit(2557.684:177233): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16784 comm="syz.1.13823" exe="/root/syz-executor" sig=0 arch=c000003e syscall=64 compat=0 ip=0x7ff961dff749 code=0x7ffc0000 [ 1489.193272][ T29] audit: type=1326 audit(2557.684:177234): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16784 comm="syz.1.13823" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff961dff749 code=0x7ffc0000 [ 1489.216544][ T29] audit: type=1326 audit(2557.694:177235): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16784 comm="syz.1.13823" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff961dff749 code=0x7ffc0000 [ 1489.239909][ T29] audit: type=1326 audit(2557.694:177236): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16784 comm="syz.1.13823" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff961dff749 code=0x7ffc0000 [ 1489.263421][ T29] audit: type=1326 audit(2557.694:177237): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16784 comm="syz.1.13823" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff961dff749 code=0x7ffc0000 [ 1489.286800][ T29] audit: type=1326 audit(2557.694:177238): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16784 comm="syz.1.13823" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff961dff749 code=0x7ffc0000 [ 1489.326618][T16788] netlink: 4 bytes leftover after parsing attributes in process `syz.1.13823'. [ 1489.773573][T16794] Cannot find add_set index 0 as target [ 1489.811154][T16794] netlink: 16186 bytes leftover after parsing attributes in process `syz.0.13826'. [ 1489.946773][T16805] netlink: 'syz.2.13831': attribute type 1 has an invalid length. [ 1489.973887][T16805] 8021q: adding VLAN 0 to HW filter on device bond62 [ 1490.089103][T16802] netlink: 'syz.5.13829': attribute type 13 has an invalid length. [ 1490.100859][T16813] macvlan3: entered promiscuous mode [ 1490.106295][T16813] macvlan3: entered allmulticast mode [ 1490.148519][T16813] bond62: entered promiscuous mode [ 1490.155823][T16813] 8021q: adding VLAN 0 to HW filter on device macvlan3 [ 1490.164777][T16813] bond62: left promiscuous mode [ 1490.236852][T16816] siw: device registration error -23 [ 1490.263514][T16802] bridge0: port 2(bridge_slave_1) entered disabled state [ 1490.270835][T16802] bridge0: port 1(bridge_slave_0) entered disabled state [ 1490.435905][ T5454] netdevsim netdevsim5 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1490.464438][ T5454] netdevsim netdevsim5 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1490.475145][ T5454] netdevsim netdevsim5 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1490.486966][ T5454] netdevsim netdevsim5 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1490.636524][T16824] netlink: 'syz.0.13833': attribute type 1 has an invalid length. [ 1490.661146][T16824] 8021q: adding VLAN 0 to HW filter on device bond56 [ 1490.836757][T16828] macvlan3: entered promiscuous mode [ 1490.843503][T16828] macvlan3: entered allmulticast mode [ 1490.863745][T16828] bond56: entered promiscuous mode [ 1490.892874][T16828] 8021q: adding VLAN 0 to HW filter on device macvlan3 [ 1490.903790][T16828] bond56: left promiscuous mode [ 1490.907323][T16832] netlink: 28 bytes leftover after parsing attributes in process `syz.2.13834'. [ 1490.918463][T16832] netlink: 28 bytes leftover after parsing attributes in process `syz.2.13834'. [ 1490.979362][T16836] netlink: 24 bytes leftover after parsing attributes in process `syz.1.13837'. [ 1491.055417][T16831] !yz!: rxe_newlink: already configured on team_slave_0 [ 1491.074794][T16841] loop5: detected capacity change from 0 to 2048 [ 1491.121972][T16841] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000900 r/w without journal. Quota mode: none. [ 1491.172062][T16848] netlink: 12 bytes leftover after parsing attributes in process `syz.3.13835'. [ 1491.195415][T16841] netlink: 'syz.5.13840': attribute type 3 has an invalid length. [ 1491.345433][T16850] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1306: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 1491.365135][T16850] EXT4-fs (loop5): Delayed block allocation failed for inode 18 at logical offset 744 with max blocks 818 with error 28 [ 1491.379055][T16850] EXT4-fs (loop5): This should not happen!! Data will be lost [ 1491.379055][T16850] [ 1491.390068][T16850] EXT4-fs (loop5): Total free blocks count 0 [ 1491.397688][T16850] EXT4-fs (loop5): Free/Dirty block details [ 1491.405074][T16850] EXT4-fs (loop5): free_blocks=2415919104 [ 1491.412184][T16850] EXT4-fs (loop5): dirty_blocks=1568 [ 1491.415077][T16856] rdma_rxe: rxe_newlink: failed to add bond_slave_0 [ 1491.417532][T16850] EXT4-fs (loop5): Block reservation details [ 1491.417547][T16850] EXT4-fs (loop5): i_reserved_data_blocks=98 [ 1491.678101][ T5505] EXT4-fs (loop5): Delayed block allocation failed for inode 18 at logical offset 24 with max blocks 2 with error 28 [ 1491.741822][T16874] netlink: 'syz.5.13846': attribute type 1 has an invalid length. [ 1491.792613][T16874] 8021q: adding VLAN 0 to HW filter on device bond3 [ 1491.854004][T16875] lo speed is unknown, defaulting to 1000 [ 1491.933107][T16875] lo speed is unknown, defaulting to 1000 [ 1491.940617][T16875] lo speed is unknown, defaulting to 1000 [ 1492.067461][T16878] macvlan2: entered promiscuous mode [ 1492.072812][T16878] macvlan2: entered allmulticast mode [ 1492.098220][T16878] bond3: entered promiscuous mode [ 1492.115206][T16878] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 1492.136225][T16878] bond3: left promiscuous mode [ 1492.934519][T16897] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma? [ 1492.979320][T16898] siw: device registration error -23 [ 1493.509538][T16907] netlink: 'syz.0.13853': attribute type 1 has an invalid length. [ 1493.537925][T16907] 8021q: adding VLAN 0 to HW filter on device bond57 [ 1493.622663][T16909] macvlan3: entered promiscuous mode [ 1493.628032][T16909] macvlan3: entered allmulticast mode [ 1493.661301][T16909] bond57: entered promiscuous mode [ 1493.681444][T16909] 8021q: adding VLAN 0 to HW filter on device macvlan3 [ 1493.738517][T16909] bond57: left promiscuous mode [ 1493.889056][T16913] netlink: 'syz.5.13854': attribute type 13 has an invalid length. [ 1495.069315][ T29] kauditd_printk_skb: 359 callbacks suppressed [ 1495.069329][ T29] audit: type=1326 audit(2563.973:177598): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16928 comm="syz.2.13858" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f39028cf749 code=0x7ffc0000 [ 1495.101275][ T29] audit: type=1326 audit(2564.004:177599): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16930 comm="syz.5.13859" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe5fe7af749 code=0x7ffc0000 [ 1495.125928][ T29] audit: type=1326 audit(2564.004:177600): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16930 comm="syz.5.13859" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe5fe7af749 code=0x7ffc0000 [ 1495.161771][ T29] audit: type=1326 audit(2564.004:177601): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16930 comm="syz.5.13859" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe5fe7af749 code=0x7ffc0000 [ 1495.186386][ T29] audit: type=1326 audit(2564.004:177602): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16930 comm="syz.5.13859" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe5fe7af749 code=0x7ffc0000 [ 1495.211188][ T29] audit: type=1326 audit(2564.057:177603): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16930 comm="syz.5.13859" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fe5fe7af749 code=0x7ffc0000 [ 1495.235756][ T29] audit: type=1326 audit(2564.057:177604): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16930 comm="syz.5.13859" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe5fe7af749 code=0x7ffc0000 [ 1495.260531][ T29] audit: type=1326 audit(2564.057:177605): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16930 comm="syz.5.13859" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe5fe7af749 code=0x7ffc0000 [ 1495.285108][ T29] audit: type=1326 audit(2564.057:177606): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16928 comm="syz.2.13858" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f39028cf749 code=0x7ffc0000 [ 1495.309640][ T29] audit: type=1326 audit(2564.057:177607): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16928 comm="syz.2.13858" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f39028cf749 code=0x7ffc0000 [ 1495.387788][T16944] netlink: 4 bytes leftover after parsing attributes in process `syz.3.13857'. [ 1495.436396][T16937] SELinux: Context × is not valid (left unmapped). [ 1495.503303][T16949] veth0: entered promiscuous mode [ 1495.508449][T16949] veth0: entered allmulticast mode [ 1495.931946][T16952] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1496.008706][T16955] siw: device registration error -23 [ 1496.032496][T16952] netlink: 8 bytes leftover after parsing attributes in process `syz.1.13863'. [ 1496.253278][T16960] netlink: 16 bytes leftover after parsing attributes in process `syz.0.13861'. [ 1497.958159][T16965] netlink: 8 bytes leftover after parsing attributes in process `syz.1.13865'. [ 1498.062196][T16970] netlink: 'syz.2.13877': attribute type 13 has an invalid length. [ 1498.205330][T16973] loop5: detected capacity change from 0 to 2048 [ 1498.223070][T16973] EXT4-fs: Ignoring removed nomblk_io_submit option [ 1498.231737][T16973] EXT4-fs: Ignoring removed nobh option [ 1498.301500][T16970] A link change request failed with some changes committed already. Interface 60ªX¹¦À may have been left with an inconsistent configuration, please check. [ 1498.318958][ T9409] lo speed is unknown, defaulting to 1000 [ 1498.325954][ T9409] syz0: Port: 1 Link ACTIVE [ 1498.451230][T16973] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1498.472441][T16972] EXT4-fs error (device loop5): ext4_iget_extra_inode:5073: inode #15: comm syz.5.13868: corrupted in-inode xattr: invalid ea_ino [ 1498.487979][T16972] EXT4-fs (loop5): Remounting filesystem read-only [ 1498.498311][T16972] netlink: 9 bytes leftover after parsing attributes in process `syz.5.13868'. [ 1498.510470][T16972] netlink: 9 bytes leftover after parsing attributes in process `syz.5.13868'. [ 1498.576066][T16982] netlink: 72 bytes leftover after parsing attributes in process `syz.0.13869'. [ 1498.595274][T16982] bridge_slave_0: entered promiscuous mode [ 1498.770076][T15640] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1499.070282][T16992] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1499.089472][T16992] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1499.158367][T16996] netlink: 'syz.5.13871': attribute type 13 has an invalid length. [ 1499.311611][T16998] netlink: 8 bytes leftover after parsing attributes in process `syz.2.13873'. [ 1499.841943][T17004] netlink: 16 bytes leftover after parsing attributes in process `syz.5.13875'. [ 1499.863702][T17004] netlink: 'syz.5.13875': attribute type 4 has an invalid length. [ 1500.054549][T17004] lo speed is unknown, defaulting to 1000 [ 1500.244078][T17007] netlink: 16 bytes leftover after parsing attributes in process `syz.1.13876'. [ 1500.299810][ T29] kauditd_printk_skb: 393 callbacks suppressed [ 1500.299824][ T29] audit: type=1326 audit(2569.464:178001): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17006 comm="syz.1.13876" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff961dff749 code=0x7ffc0000 [ 1500.338341][T17004] lo speed is unknown, defaulting to 1000 [ 1500.346110][ T29] audit: type=1326 audit(2569.495:178002): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17006 comm="syz.1.13876" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff961dff749 code=0x7ffc0000 [ 1500.353210][T17004] lo speed is unknown, defaulting to 1000 [ 1500.370995][ T29] audit: type=1326 audit(2569.495:178003): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17006 comm="syz.1.13876" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff961dff749 code=0x7ffc0000 [ 1500.401557][ T29] audit: type=1326 audit(2569.495:178004): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17006 comm="syz.1.13876" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff961dff749 code=0x7ffc0000 [ 1500.426121][ T29] audit: type=1326 audit(2569.495:178005): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17006 comm="syz.1.13876" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff961dff749 code=0x7ffc0000 [ 1500.502158][ T29] audit: type=1326 audit(2569.516:178006): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17006 comm="syz.1.13876" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff961dff749 code=0x7ffc0000 [ 1500.526845][ T29] audit: type=1326 audit(2569.516:178007): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17006 comm="syz.1.13876" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff961dff749 code=0x7ffc0000 [ 1500.551375][ T29] audit: type=1326 audit(2569.548:178008): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17006 comm="syz.1.13876" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff961dff749 code=0x7ffc0000 [ 1500.574887][ T29] audit: type=1326 audit(2569.548:178009): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17006 comm="syz.1.13876" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff961dff749 code=0x7ffc0000 [ 1500.600762][ T29] audit: type=1326 audit(2569.548:178010): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17006 comm="syz.1.13876" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff961dff749 code=0x7ffc0000 [ 1500.736071][T17001] netlink: 72 bytes leftover after parsing attributes in process `syz.3.13874'. [ 1500.863413][T17011] netlink: 'syz.1.13878': attribute type 13 has an invalid length. [ 1500.981108][ T3555] lo speed is unknown, defaulting to 1000 [ 1500.989254][ T3555] syz2: Port: 1 Link DOWN [ 1501.358534][T17036] netlink: 'syz.2.13883': attribute type 13 has an invalid length. [ 1501.589442][T17042] netlink: 28 bytes leftover after parsing attributes in process `syz.1.13884'. [ 1501.602601][T17042] netlink: 28 bytes leftover after parsing attributes in process `syz.1.13884'. [ 1502.172303][T17052] netlink: 224 bytes leftover after parsing attributes in process `syz.0.13887'. [ 1502.231389][ T3555] lo speed is unknown, defaulting to 1000 [ 1502.237455][ T3555] syz0: Port: 1 Link DOWN [ 1502.366477][ T9404] hid_parser_main: 8 callbacks suppressed [ 1502.366494][ T9404] hid-generic 0000:0005:0000.0004: unknown main item tag 0x0 [ 1502.379734][ T9404] hid-generic 0000:0005:0000.0004: unknown main item tag 0x0 [ 1502.387213][ T9404] hid-generic 0000:0005:0000.0004: unknown main item tag 0x0 [ 1502.394795][ T9404] hid-generic 0000:0005:0000.0004: unknown main item tag 0x0 [ 1502.402271][ T9404] hid-generic 0000:0005:0000.0004: unknown main item tag 0x0 [ 1502.409854][ T9404] hid-generic 0000:0005:0000.0004: unknown main item tag 0x0 [ 1502.417312][ T9404] hid-generic 0000:0005:0000.0004: unknown main item tag 0x0 [ 1502.424777][ T9404] hid-generic 0000:0005:0000.0004: unknown main item tag 0x0 [ 1502.432192][ T9404] hid-generic 0000:0005:0000.0004: unknown main item tag 0x0 [ 1502.439604][ T9404] hid-generic 0000:0005:0000.0004: unknown main item tag 0x0 [ 1502.458584][ T9404] hid-generic 0000:0005:0000.0004: hidraw0: HID v0.00 Device [sy] on syz0 [ 1502.643448][T17075] netlink: 'syz.1.13892': attribute type 1 has an invalid length. [ 1502.669211][T17075] 8021q: adding VLAN 0 to HW filter on device bond39 [ 1502.736999][T17080] netlink: 3 bytes leftover after parsing attributes in process `{/}\'. [ 1502.747155][T17081] macvlan4: entered promiscuous mode [ 1502.752468][T17081] macvlan4: entered allmulticast mode [ 1502.759238][T17081] bond39: entered promiscuous mode [ 1502.765257][T17081] 8021q: adding VLAN 0 to HW filter on device macvlan4 [ 1502.782781][T17081] bond39: left promiscuous mode [ 1502.799778][T17080] 1ªX¹¦À: renamed from 60ªX¹¦À [ 1502.807493][T17080] A link change request failed with some changes committed already. Interface 61ªX¹¦À may have been left with an inconsistent configuration, please check. [ 1503.358081][T17107] netlink: 'syz.5.13898': attribute type 13 has an invalid length. [ 1503.551241][T17113] Invalid logical block size (4608) [ 1503.704705][T17117] loop5: detected capacity change from 0 to 8192 [ 1503.773607][T17117] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(14) [ 1503.780231][T17117] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 1503.789064][T17117] vhci_hcd vhci_hcd.0: Device attached [ 1504.010699][ T1105] usb 11-1: new low-speed USB device number 2 using vhci_hcd [ 1504.257618][T17134] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma? [ 1504.297342][T17140] RDS: rds_bind could not find a transport for ::ffff:172.20.20.27, load rds_tcp or rds_rdma? [ 1504.403150][T17120] vhci_hcd: connection reset by peer [ 1504.409235][T32109] vhci_hcd vhci_hcd.5: stop threads [ 1504.414567][T32109] vhci_hcd vhci_hcd.5: release socket [ 1504.419970][T32109] vhci_hcd vhci_hcd.5: disconnect device [ 1504.668590][T17151] netlink: 'syz.3.13912': attribute type 1 has an invalid length. [ 1504.688343][T17151] 8021q: adding VLAN 0 to HW filter on device bond56 [ 1504.805076][T17151] macvlan3: entered promiscuous mode [ 1504.811663][T17151] macvlan3: entered allmulticast mode [ 1504.818658][T17151] bond56: entered promiscuous mode [ 1504.825524][T17151] 8021q: adding VLAN 0 to HW filter on device macvlan3 [ 1504.838292][T17151] bond56: left promiscuous mode [ 1504.902815][T15640] FAT-fs (loop5): error, invalid access to FAT (entry 0x0000e1b1) [ 1504.911548][T15640] FAT-fs (loop5): Filesystem has been set read-only [ 1504.946407][T17159] netlink: 24 bytes leftover after parsing attributes in process `syz.1.13913'. [ 1505.006956][T17163] netlink: 'syz.2.13916': attribute type 1 has an invalid length. [ 1505.034558][T17163] 8021q: adding VLAN 0 to HW filter on device bond63 [ 1505.083437][ T29] kauditd_printk_skb: 364 callbacks suppressed [ 1505.083453][ T29] audit: type=1326 audit(2574.482:178375): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17167 comm="syz.0.13919" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3601e2f749 code=0x7ffc0000 [ 1505.107952][T17169] macvlan3: entered promiscuous mode [ 1505.117112][ T29] audit: type=1326 audit(2574.482:178376): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17167 comm="syz.0.13919" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3601e2f749 code=0x7ffc0000 [ 1505.119889][T17169] macvlan3: entered allmulticast mode [ 1505.141935][ T29] audit: type=1326 audit(2574.482:178377): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17167 comm="syz.0.13919" exe="/root/syz-executor" sig=0 arch=c000003e syscall=293 compat=0 ip=0x7f3601e2f749 code=0x7ffc0000 [ 1505.142048][ T29] audit: type=1326 audit(2574.482:178378): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17167 comm="syz.0.13919" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3601e2f749 code=0x7ffc0000 [ 1505.142134][ T29] audit: type=1326 audit(2574.482:178379): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17167 comm="syz.0.13919" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3601e2f749 code=0x7ffc0000 [ 1505.142256][ T29] audit: type=1326 audit(2574.482:178380): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17167 comm="syz.0.13919" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f3601e2f749 code=0x7ffc0000 [ 1505.142391][ T29] audit: type=1326 audit(2574.482:178381): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17167 comm="syz.0.13919" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3601e2f749 code=0x7ffc0000 [ 1505.142441][ T29] audit: type=1326 audit(2574.482:178382): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17167 comm="syz.0.13919" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3601e2f749 code=0x7ffc0000 [ 1505.142507][ T29] audit: type=1326 audit(2574.482:178383): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17167 comm="syz.0.13919" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f3601e2f749 code=0x7ffc0000 [ 1505.142583][ T29] audit: type=1326 audit(2574.482:178384): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17167 comm="syz.0.13919" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3601e2f749 code=0x7ffc0000 [ 1505.365606][T17169] bond63: entered promiscuous mode [ 1505.371230][T17169] 8021q: adding VLAN 0 to HW filter on device macvlan3 [ 1505.386724][T17169] bond63: left promiscuous mode [ 1505.408595][T17168] siw: device registration error -23 [ 1505.555049][T17180] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 1506.103995][T17214] veth2: entered promiscuous mode [ 1506.109157][T17214] veth2: entered allmulticast mode [ 1506.126565][T17194] netlink: 'syz.0.13925': attribute type 13 has an invalid length. [ 1506.158867][ T9404] IPVS: starting estimator thread 0... [ 1506.197026][T17221] netlink: 'syz.0.13932': attribute type 1 has an invalid length. [ 1506.218440][T17221] 8021q: adding VLAN 0 to HW filter on device bond58 [ 1506.256851][T17217] IPVS: using max 2256 ests per chain, 112800 per kthread [ 1506.323092][T17223] macvlan3: entered promiscuous mode [ 1506.328462][T17223] macvlan3: entered allmulticast mode [ 1506.335367][T17223] bond58: entered promiscuous mode [ 1506.340860][T17223] 8021q: adding VLAN 0 to HW filter on device macvlan3 [ 1506.351255][T17223] bond58: left promiscuous mode [ 1506.364266][T17214] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1506.374994][T17214] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1506.827883][T17235] lo speed is unknown, defaulting to 1000 [ 1506.907215][T17235] lo speed is unknown, defaulting to 1000 [ 1506.914322][T17235] lo speed is unknown, defaulting to 1000 [ 1507.065261][T17240] netlink: 'syz.3.13936': attribute type 1 has an invalid length. [ 1507.142234][T17242] netlink: 24 bytes leftover after parsing attributes in process `syz.0.13935'. [ 1507.162704][T17240] 8021q: adding VLAN 0 to HW filter on device bond57 [ 1507.251857][T17244] macvlan3: entered promiscuous mode [ 1507.257250][T17244] macvlan3: entered allmulticast mode [ 1507.316129][T17244] bond57: entered promiscuous mode [ 1507.333457][T17244] 8021q: adding VLAN 0 to HW filter on device macvlan3 [ 1507.483455][T17251] syz1: rxe_newlink: already configured on lo [ 1507.516005][T17244] bond57: left promiscuous mode [ 1508.579354][T17264] netlink: 'gtp': attribute type 39 has an invalid length. [ 1508.831217][ T1105] usb 11-1: enqueue for inactive port 0 [ 1508.837011][ T1105] usb 11-1: enqueue for inactive port 0 [ 1508.892554][T17286] netlink: 'syz.0.13946': attribute type 1 has an invalid length. [ 1508.916613][ T1105] vhci_hcd vhci_hcd.5: vhci_device speed not set [ 1508.930722][T17286] 8021q: adding VLAN 0 to HW filter on device bond59 [ 1509.002962][T17288] macvlan3: entered promiscuous mode [ 1509.008355][T17288] macvlan3: entered allmulticast mode [ 1509.041335][T17288] bond59: entered promiscuous mode [ 1509.047087][T17288] 8021q: adding VLAN 0 to HW filter on device macvlan3 [ 1509.064482][T17288] bond59: left promiscuous mode [ 1509.510886][T17297] veth34: entered promiscuous mode [ 1509.516298][T17297] veth34: entered allmulticast mode [ 1509.637057][T17300] loop5: detected capacity change from 0 to 256 [ 1510.071580][T17305] Set syz1 is full, maxelem 65536 reached [ 1510.140270][ T29] kauditd_printk_skb: 297 callbacks suppressed [ 1510.140285][ T29] audit: type=1326 audit(2579.795:178682): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17307 comm="syz.1.13952" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff961dff749 code=0x7ffc0000 [ 1510.172521][ T29] audit: type=1326 audit(2579.795:178683): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17307 comm="syz.1.13952" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff961dff749 code=0x7ffc0000 [ 1510.190454][T17310] netlink: 224 bytes leftover after parsing attributes in process `syz.1.13953'. [ 1510.199041][ T29] audit: type=1326 audit(2579.795:178684): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17307 comm="syz.1.13952" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff961dff749 code=0x7ffc0000 [ 1510.233201][ T29] audit: type=1326 audit(2579.795:178685): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17307 comm="syz.1.13952" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff961dff749 code=0x7ffc0000 [ 1510.257317][ T29] audit: type=1326 audit(2579.795:178686): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17307 comm="syz.1.13952" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff961dff749 code=0x7ffc0000 [ 1510.282425][ T29] audit: type=1326 audit(2579.795:178687): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17307 comm="syz.1.13952" exe="/root/syz-executor" sig=0 arch=c000003e syscall=94 compat=0 ip=0x7ff961dff749 code=0x7ffc0000 [ 1510.306898][ T29] audit: type=1326 audit(2579.795:178688): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17307 comm="syz.1.13952" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff961dff749 code=0x7ffc0000 [ 1510.337795][T17315] netlink: 'syz.2.13955': attribute type 1 has an invalid length. [ 1510.366126][T17315] 8021q: adding VLAN 0 to HW filter on device bond64 [ 1510.441565][T17321] lo speed is unknown, defaulting to 1000 [ 1510.558781][T17315] macvlan3: entered promiscuous mode [ 1510.565731][T17315] macvlan3: entered allmulticast mode [ 1510.573165][T17315] bond64: entered promiscuous mode [ 1510.579063][T17315] 8021q: adding VLAN 0 to HW filter on device macvlan3 [ 1510.587276][T17315] bond64: left promiscuous mode [ 1510.599181][T17321] lo speed is unknown, defaulting to 1000 [ 1510.607804][T17321] lo speed is unknown, defaulting to 1000 [ 1510.645250][T17331] netlink: '+}[@': attribute type 10 has an invalid length. [ 1510.654072][T17331] netlink: '+}[@': attribute type 10 has an invalid length. [ 1510.655112][T17321] infiniband sz1: set active [ 1510.666448][T17321] infiniband sz1: added lo [ 1510.671063][ T9404] lo speed is unknown, defaulting to 1000 [ 1510.690654][T17321] RDS/IB: sz1: added [ 1510.694675][T17321] smc: adding ib device sz1 with port count 1 [ 1510.700889][T17321] smc: ib device sz1 port 1 has no pnetid [ 1510.707015][ T9404] lo speed is unknown, defaulting to 1000 [ 1510.713372][T17321] lo speed is unknown, defaulting to 1000 [ 1510.727432][T17333] netlink: 32 bytes leftover after parsing attributes in process `syz.1.13960'. [ 1510.748406][T17321] lo speed is unknown, defaulting to 1000 [ 1510.785477][T17321] lo speed is unknown, defaulting to 1000 [ 1510.825644][T17321] lo speed is unknown, defaulting to 1000 [ 1510.889608][T17335] netlink: 'syz.0.13961': attribute type 1 has an invalid length. [ 1510.902439][T17321] lo speed is unknown, defaulting to 1000 [ 1510.936827][T17335] 8021q: adding VLAN 0 to HW filter on device bond60 [ 1510.967380][T17321] lo speed is unknown, defaulting to 1000 [ 1510.977137][ T29] audit: type=1326 audit(2580.677:178689): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17338 comm="syz.1.13963" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff961dff749 code=0x7ffc0000 [ 1511.005081][T17321] lo speed is unknown, defaulting to 1000 [ 1511.024076][ T29] audit: type=1326 audit(2580.708:178690): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17338 comm="syz.1.13963" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff961dff749 code=0x7ffc0000 [ 1511.042843][T17321] lo speed is unknown, defaulting to 1000 [ 1511.048803][ T29] audit: type=1326 audit(2580.708:178691): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17338 comm="syz.1.13963" exe="/root/syz-executor" sig=0 arch=c000003e syscall=258 compat=0 ip=0x7ff961dff749 code=0x7ffc0000 [ 1511.092589][T17337] macvlan3: entered promiscuous mode [ 1511.097967][T17337] macvlan3: entered allmulticast mode [ 1511.105019][T17337] bond60: entered promiscuous mode [ 1511.110900][T17337] 8021q: adding VLAN 0 to HW filter on device macvlan3 [ 1511.123331][T17337] bond60: left promiscuous mode [ 1511.170980][T17321] lo speed is unknown, defaulting to 1000 [ 1511.292286][T17321] lo speed is unknown, defaulting to 1000 [ 1511.350933][T17349] loop5: detected capacity change from 0 to 2048 [ 1511.396888][T17349] Alternate GPT is invalid, using primary GPT. [ 1511.403463][T17349] loop5: p2 p3 p7 [ 1511.457022][T17360] netlink: 8 bytes leftover after parsing attributes in process `syz.5.13969'. [ 1511.468334][T17360] netlink: 8 bytes leftover after parsing attributes in process `syz.5.13969'. [ 1511.673765][T17366] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 1511.714883][T17368] netlink: 'syz.0.13972': attribute type 1 has an invalid length. [ 1511.882810][T17368] 8021q: adding VLAN 0 to HW filter on device bond61 [ 1511.896207][T17371] macvlan3: entered promiscuous mode [ 1511.902800][T17371] macvlan3: entered allmulticast mode [ 1511.911132][T17371] bond61: entered promiscuous mode [ 1511.916447][T17373] Cannot find del_set index 286 as target [ 1511.924601][T17371] 8021q: adding VLAN 0 to HW filter on device macvlan3 [ 1511.934564][T17371] bond61: left promiscuous mode [ 1512.374059][T17385] netlink: 'syz.2.13986': attribute type 1 has an invalid length. [ 1512.394521][T17385] 8021q: adding VLAN 0 to HW filter on device bond65 [ 1512.695104][T17385] macvlan3: entered promiscuous mode [ 1512.700552][T17385] macvlan3: entered allmulticast mode [ 1512.708179][T17385] bond65: entered promiscuous mode [ 1512.714050][T17385] 8021q: adding VLAN 0 to HW filter on device macvlan3 [ 1512.724068][T17385] bond65: left promiscuous mode [ 1512.809571][T17390] lo speed is unknown, defaulting to 1000 [ 1512.917298][T17390] lo speed is unknown, defaulting to 1000 [ 1512.925198][T17390] lo speed is unknown, defaulting to 1000 [ 1512.932300][T17390] lo speed is unknown, defaulting to 1000 [ 1514.042544][T17394] netlink: 9 bytes leftover after parsing attributes in process `syz.0.13977'. [ 1514.052600][T17394] netlink: 9 bytes leftover after parsing attributes in process `syz.0.13977'. [ 1514.405663][T17410] netlink: 'gtp': attribute type 39 has an invalid length. [ 1514.777691][T17418] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma? [ 1514.802055][T17420] xt_SECMARK: invalid security context 'system_u:object_r:dbusd_etc_t:s0' [ 1514.852938][T17423] 9p: Bad value for 'wfdno' [ 1514.880719][T17425] netlink: 24 bytes leftover after parsing attributes in process `syz.3.13987'. [ 1514.915821][ T29] kauditd_printk_skb: 357 callbacks suppressed [ 1514.915837][ T29] audit: type=1326 audit(2584.803:179049): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17422 comm="syz.0.13984" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f3601e265e7 code=0x7ffc0000 [ 1514.958192][ T29] audit: type=1326 audit(2584.845:179050): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17426 comm="syz.1.13988" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff961dff749 code=0x7ffc0000 [ 1514.981581][ T29] audit: type=1326 audit(2584.845:179051): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17426 comm="syz.1.13988" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff961dff749 code=0x7ffc0000 [ 1515.005149][ T29] audit: type=1326 audit(2584.845:179052): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17422 comm="syz.0.13984" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f3601dcb829 code=0x7ffc0000 [ 1515.028458][ T29] audit: type=1326 audit(2584.845:179053): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17422 comm="syz.0.13984" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f3601e265e7 code=0x7ffc0000 [ 1515.051714][ T29] audit: type=1326 audit(2584.845:179054): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17422 comm="syz.0.13984" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f3601dcb829 code=0x7ffc0000 [ 1515.075170][ T29] audit: type=1326 audit(2584.845:179055): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17422 comm="syz.0.13984" exe="/root/syz-executor" sig=0 arch=c000003e syscall=449 compat=0 ip=0x7f3601e2f749 code=0x7ffc0000 [ 1515.098756][ T29] audit: type=1326 audit(2584.845:179056): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17426 comm="syz.1.13988" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff961dff749 code=0x7ffc0000 [ 1515.122212][ T29] audit: type=1326 audit(2584.845:179057): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17426 comm="syz.1.13988" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff961dff749 code=0x7ffc0000 [ 1515.145587][ T29] audit: type=1326 audit(2584.845:179058): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17426 comm="syz.1.13988" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff961dff749 code=0x7ffc0000 [ 1515.171396][ T3611] page_pool_release_retry() stalled pool shutdown: id 166, 45 inflight 1029 sec [ 1515.217935][T17433] netlink: 4 bytes leftover after parsing attributes in process `syz.3.13987'. [ 1515.841316][T17440] netlink: 'syz.2.13992': attribute type 1 has an invalid length. [ 1515.869787][T17440] 8021q: adding VLAN 0 to HW filter on device bond66 [ 1515.954458][T17442] macvlan3: entered promiscuous mode [ 1515.959800][T17442] macvlan3: entered allmulticast mode [ 1515.982456][T17442] bond66: entered promiscuous mode [ 1516.007318][T17442] 8021q: adding VLAN 0 to HW filter on device macvlan3 [ 1516.032280][T17442] bond66: left promiscuous mode [ 1516.100356][T17449] netlink: 9 bytes leftover after parsing attributes in process `syz.1.13995'. [ 1516.110333][T17449] netlink: 9 bytes leftover after parsing attributes in process `syz.1.13995'. [ 1516.327866][T17447] netlink: 36 bytes leftover after parsing attributes in process `syz.3.13993'. [ 1516.942913][T17469] netlink: 'syz.5.13997': attribute type 10 has an invalid length. [ 1516.954133][T17469] team0: Port device dummy0 added [ 1516.966242][T17469] netlink: 'syz.5.13997': attribute type 10 has an invalid length. [ 1516.981460][T17469] team0: Port device dummy0 removed [ 1516.991630][T17469] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 1517.037044][T17469] netlink: 32 bytes leftover after parsing attributes in process `syz.5.13997'. [ 1517.080128][T17474] pim6reg: entered allmulticast mode [ 1517.637373][T17486] SELinux: Context system_u:object_r:pam_console_exec_t:s0 is not valid (left unmapped). [ 1517.759039][T17490] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 1518.193779][T17499] 9p: Bad value for 'wfdno' [ 1518.509774][T17504] sd 0:0:1:0: device reset [ 1518.740604][T17508] netlink: 8 bytes leftover after parsing attributes in process `syz.0.14008'. [ 1518.798623][T17508] bond62: option ad_user_port_key: invalid value (1136) [ 1518.806971][T17508] bond62: option ad_user_port_key: allowed values 0 - 1023 [ 1518.830201][T17508] bond62 (unregistering): Released all slaves [ 1519.201052][T17514] netlink: 'syz.1.14011': attribute type 1 has an invalid length. [ 1519.236394][T17514] 8021q: adding VLAN 0 to HW filter on device bond40 [ 1519.374037][T17514] macvlan4: entered promiscuous mode [ 1519.379395][T17514] macvlan4: entered allmulticast mode [ 1519.405015][T17514] bond40: entered promiscuous mode [ 1519.423311][T17514] 8021q: adding VLAN 0 to HW filter on device macvlan4 [ 1519.471196][T17514] bond40: left promiscuous mode [ 1519.765068][T17527] netlink: '+}[@': attribute type 10 has an invalid length. [ 1519.773687][T17527] netlink: '+}[@': attribute type 10 has an invalid length. [ 1520.046862][T17527] netlink: 32 bytes leftover after parsing attributes in process `+}[@'. [ 1520.203761][ T29] kauditd_printk_skb: 502 callbacks suppressed [ 1520.203775][ T29] audit: type=1326 audit(2590.368:179561): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17537 comm="syz.1.14016" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff961dff749 code=0x7ffc0000 [ 1520.234437][ T29] audit: type=1326 audit(2590.368:179562): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17537 comm="syz.1.14016" exe="/root/syz-executor" sig=0 arch=c000003e syscall=121 compat=0 ip=0x7ff961dff749 code=0x7ffc0000 [ 1520.259360][ T29] audit: type=1326 audit(2590.368:179563): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17537 comm="syz.1.14016" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff961dff749 code=0x7ffc0000 [ 1520.282737][ T29] audit: type=1326 audit(2590.368:179564): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17537 comm="syz.1.14016" exe="/root/syz-executor" sig=0 arch=c000003e syscall=44 compat=0 ip=0x7ff961e015dc code=0x7ffc0000 [ 1520.307474][ T29] audit: type=1326 audit(2590.368:179565): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17537 comm="syz.1.14016" exe="/root/syz-executor" sig=0 arch=c000003e syscall=45 compat=0 ip=0x7ff961e01514 code=0x7ffc0000 [ 1520.315253][T17540] lo speed is unknown, defaulting to 1000 [ 1520.331940][ T29] audit: type=1326 audit(2590.368:179566): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17537 comm="syz.1.14016" exe="/root/syz-executor" sig=0 arch=c000003e syscall=45 compat=0 ip=0x7ff961e01514 code=0x7ffc0000 [ 1520.362246][ T29] audit: type=1326 audit(2590.368:179567): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17537 comm="syz.1.14016" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff961dff749 code=0x7ffc0000 [ 1520.387035][ T29] audit: type=1326 audit(2590.368:179568): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17537 comm="syz.1.14016" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7ff961dff749 code=0x7ffc0000 [ 1520.422721][ T29] audit: type=1326 audit(2590.420:179569): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17537 comm="syz.1.14016" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff961dff749 code=0x7ffc0000 [ 1520.447381][ T29] audit: type=1326 audit(2590.420:179570): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17537 comm="syz.1.14016" exe="/root/syz-executor" sig=0 arch=c000003e syscall=125 compat=0 ip=0x7ff961dff749 code=0x7ffc0000 [ 1520.495584][T17540] lo speed is unknown, defaulting to 1000 [ 1520.503843][T17540] lo speed is unknown, defaulting to 1000 [ 1520.517269][T17540] lo speed is unknown, defaulting to 1000 [ 1520.750217][T17551] netlink: 'syz.0.14019': attribute type 1 has an invalid length. [ 1520.836959][T17556] loop5: detected capacity change from 0 to 512 [ 1520.877131][T17556] EXT4-fs (loop5): mounting ext3 file system using the ext4 subsystem [ 1520.909607][T17556] EXT4-fs (loop5): invalid journal inode [ 1520.915271][T17556] EXT4-fs (loop5): can't get journal size [ 1520.974998][T17556] EXT4-fs (loop5): 1 truncate cleaned up [ 1520.981281][T17556] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1521.626914][T17551] 8021q: adding VLAN 0 to HW filter on device bond62 [ 1521.642858][T17562] macvlan3: entered promiscuous mode [ 1521.648185][T17562] macvlan3: entered allmulticast mode [ 1521.663166][T17562] bond62: entered promiscuous mode [ 1521.671678][T17562] 8021q: adding VLAN 0 to HW filter on device macvlan3 [ 1521.699335][T17562] bond62: left promiscuous mode [ 1521.771425][T17571] netlink: 'syz.1.14022': attribute type 13 has an invalid length. [ 1522.349842][T17580] 9p: Bad value for 'wfdno' [ 1522.378140][T17576] xt_SECMARK: invalid security context 'system_u:object_r:dbusd_etc_t:s0' [ 1522.497129][T17582] netlink: 'syz.0.14026': attribute type 1 has an invalid length. [ 1522.589827][T17582] 8021q: adding VLAN 0 to HW filter on device bond63 [ 1522.834398][T17593] macvlan3: entered promiscuous mode [ 1522.839730][T17593] macvlan3: entered allmulticast mode [ 1522.887117][T17593] bond63: entered promiscuous mode [ 1522.900083][T17593] 8021q: adding VLAN 0 to HW filter on device macvlan3 [ 1522.946408][T17593] bond63: left promiscuous mode [ 1523.058585][T17592] lo speed is unknown, defaulting to 1000 [ 1523.303760][T17592] lo speed is unknown, defaulting to 1000 [ 1523.318870][T17592] lo speed is unknown, defaulting to 1000 [ 1523.325277][T17592] lo speed is unknown, defaulting to 1000 [ 1523.607224][T17611] netlink: 'syz.1.14033': attribute type 4 has an invalid length. [ 1523.685254][T17613] netlink: 28 bytes leftover after parsing attributes in process `syz.1.14034'. [ 1523.707616][T17613] netlink: 52 bytes leftover after parsing attributes in process `syz.1.14034'. [ 1523.895153][T17617] netlink: 'syz.1.14035': attribute type 13 has an invalid length. [ 1523.962224][T17619] netlink: 28 bytes leftover after parsing attributes in process `syz.0.14036'. [ 1523.972612][T17619] netlink: 108 bytes leftover after parsing attributes in process `syz.0.14036'. [ 1524.038005][T17619] netlink: 28 bytes leftover after parsing attributes in process `syz.0.14036'. [ 1524.083356][T17619] netlink: 108 bytes leftover after parsing attributes in process `syz.0.14036'. [ 1524.093948][T17619] netlink: 84 bytes leftover after parsing attributes in process `syz.0.14036'. [ 1524.180110][T17633] netlink: 'syz.3.14039': attribute type 1 has an invalid length. [ 1524.199959][T17635] siw: device registration error -23 [ 1524.224226][T15640] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1524.251897][T17633] 8021q: adding VLAN 0 to HW filter on device bond58 [ 1524.369533][T17633] macvlan3: entered promiscuous mode [ 1524.375473][T17633] macvlan3: entered allmulticast mode [ 1524.384060][T17633] bond58: entered promiscuous mode [ 1524.423684][T17633] 8021q: adding VLAN 0 to HW filter on device macvlan3 [ 1524.452907][T17633] bond58: left promiscuous mode [ 1525.028560][ T29] kauditd_printk_skb: 469 callbacks suppressed [ 1525.028575][ T29] audit: type=1326 audit(2595.428:180040): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17663 comm="syz.2.14044" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f39028cf749 code=0x7ffc0000 [ 1525.060855][ T29] audit: type=1326 audit(2595.428:180041): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17663 comm="syz.2.14044" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f39028cf749 code=0x7ffc0000 [ 1525.096697][ T29] audit: type=1326 audit(2595.460:180042): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17663 comm="syz.2.14044" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f39028cf749 code=0x7ffc0000 [ 1525.110873][T17670] netlink: 68 bytes leftover after parsing attributes in process `syz.1.14045'. [ 1525.121420][ T29] audit: type=1326 audit(2595.460:180043): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17663 comm="syz.2.14044" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f39028cf749 code=0x7ffc0000 [ 1525.152963][ T29] audit: type=1326 audit(2595.460:180044): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17663 comm="syz.2.14044" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f39028cf749 code=0x7ffc0000 [ 1525.177481][ T29] audit: type=1326 audit(2595.491:180045): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17663 comm="syz.2.14044" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f39028cf749 code=0x7ffc0000 [ 1525.216963][ T29] audit: type=1326 audit(2595.491:180046): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17663 comm="syz.2.14044" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f39028cf749 code=0x7ffc0000 [ 1525.241698][ T29] audit: type=1326 audit(2595.491:180047): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17663 comm="syz.2.14044" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f39028cf749 code=0x7ffc0000 [ 1525.266222][ T29] audit: type=1326 audit(2595.491:180048): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17663 comm="syz.2.14044" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f39028cf749 code=0x7ffc0000 [ 1525.290818][ T29] audit: type=1326 audit(2595.491:180049): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17663 comm="syz.2.14044" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f39028cf749 code=0x7ffc0000 [ 1525.303972][T17674] netlink: 'syz.1.14046': attribute type 1 has an invalid length. [ 1525.417376][T17674] 8021q: adding VLAN 0 to HW filter on device bond41 [ 1525.440686][T17678] macvlan4: entered promiscuous mode [ 1525.446040][T17678] macvlan4: entered allmulticast mode [ 1525.470422][T17678] bond41: entered promiscuous mode [ 1525.486274][T17678] 8021q: adding VLAN 0 to HW filter on device macvlan4 [ 1525.495106][T17678] bond41: left promiscuous mode [ 1525.738043][T17676] netlink: 'syz.3.14047': attribute type 13 has an invalid length. [ 1525.886622][ T9404] lo speed is unknown, defaulting to 1000 [ 1525.892447][ T9404] sz1: Port: 1 Link DOWN [ 1525.897166][ T9404] lo speed is unknown, defaulting to 1000 [ 1525.948057][T17693] netlink: 16 bytes leftover after parsing attributes in process `syz.3.14051'. [ 1530.733352][ T29] kauditd_printk_skb: 108 callbacks suppressed [ 1530.733367][ T29] audit: type=1326 audit(2601.413:180158): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17719 comm="syz.0.14058" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3601e2f749 code=0x7ffc0000 [ 1530.788332][T17721] netlink: 24 bytes leftover after parsing attributes in process `syz.2.14059'. [ 1530.793624][ T29] audit: type=1326 audit(2601.413:180159): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17719 comm="syz.0.14058" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f3601e2f749 code=0x7ffc0000 [ 1530.820830][ T29] audit: type=1326 audit(2601.413:180160): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17719 comm="syz.0.14058" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3601e2f749 code=0x7ffc0000 [ 1530.844323][ T29] audit: type=1326 audit(2601.423:180161): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17719 comm="syz.0.14058" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f3601e2f749 code=0x7ffc0000 [ 1530.867894][ T29] audit: type=1326 audit(2601.423:180162): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17719 comm="syz.0.14058" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3601e2f749 code=0x7ffc0000 [ 1530.891184][ T29] audit: type=1326 audit(2601.423:180163): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17719 comm="syz.0.14058" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f3601e2f749 code=0x7ffc0000 [ 1530.914431][ T29] audit: type=1326 audit(2601.423:180164): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17719 comm="syz.0.14058" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3601e2f749 code=0x7ffc0000 [ 1530.937719][ T29] audit: type=1326 audit(2601.423:180165): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17719 comm="syz.0.14058" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f3601e2f749 code=0x7ffc0000 [ 1530.960963][ T29] audit: type=1326 audit(2601.423:180166): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17719 comm="syz.0.14058" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3601e2f749 code=0x7ffc0000 [ 1530.984256][ T29] audit: type=1326 audit(2601.423:180167): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17719 comm="syz.0.14058" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f3601e2f749 code=0x7ffc0000 [ 1531.004276][T17724] netlink: 4 bytes leftover after parsing attributes in process `syz.2.14059'. [ 1531.033928][T17725] netlink: 8 bytes leftover after parsing attributes in process `syz.0.14058'. [ 1531.243632][T17729] siw: device registration error -23 [ 1531.414377][T17736] netlink: 16 bytes leftover after parsing attributes in process `syz.0.14062'. [ 1531.433246][T17737] netlink: 'syz.1.14063': attribute type 1 has an invalid length. [ 1531.463504][T17737] 8021q: adding VLAN 0 to HW filter on device bond42 [ 1531.533781][T17740] macvlan4: entered promiscuous mode [ 1531.540457][T17740] macvlan4: entered allmulticast mode [ 1531.563515][T17740] bond42: entered promiscuous mode [ 1531.578403][T17740] 8021q: adding VLAN 0 to HW filter on device macvlan4 [ 1531.614765][T17740] bond42: left promiscuous mode [ 1531.712736][T17746] atomic_op ffff88811cb4e128 conn xmit_atomic 0000000000000000 [ 1531.757635][T17746] SELinux: security_context_str_to_sid () failed with errno=-22 [ 1531.818946][T17751] netlink: 12 bytes leftover after parsing attributes in process `syz.3.14065'. [ 1532.044841][T17757] netlink: 56 bytes leftover after parsing attributes in process `syz.2.14066'. [ 1532.062541][T17759] loop5: detected capacity change from 0 to 512 [ 1532.070695][T17759] EXT4-fs (loop5): mounting ext3 file system using the ext4 subsystem [ 1532.079898][T17759] EXT4-fs (loop5): invalid journal inode [ 1532.085604][T17759] EXT4-fs (loop5): can't get journal size [ 1532.095428][T17759] EXT4-fs (loop5): 1 truncate cleaned up [ 1532.102750][T17759] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1532.561494][T17747] lo speed is unknown, defaulting to 1000 [ 1532.891442][T17747] lo speed is unknown, defaulting to 1000 [ 1532.904693][T17747] lo speed is unknown, defaulting to 1000 [ 1532.913473][T17771] netlink: 16 bytes leftover after parsing attributes in process `syz.3.14069'. [ 1532.924774][T17747] lo speed is unknown, defaulting to 1000 [ 1533.012361][T17773] netlink: 24 bytes leftover after parsing attributes in process `syz.3.14070'. [ 1533.466298][T17777] 9p: Bad value for 'rfdno' [ 1533.829956][T17781] netlink: 'syz.2.14073': attribute type 3 has an invalid length. [ 1533.933244][T17789] x_tables: ip_tables: rpfilter match: used from hooks FORWARD, but only valid from PREROUTING [ 1534.313428][T17798] netlink: 'syz.1.14078': attribute type 1 has an invalid length. [ 1534.337333][T17798] 8021q: adding VLAN 0 to HW filter on device bond43 [ 1534.422378][T17802] macvlan4: entered promiscuous mode [ 1534.429384][T17802] macvlan4: entered allmulticast mode [ 1534.456181][T17802] bond43: entered promiscuous mode [ 1534.481510][T17802] 8021q: adding VLAN 0 to HW filter on device macvlan4 [ 1534.501152][T17802] bond43: left promiscuous mode [ 1534.549211][T17801] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=4 sclass=netlink_route_socket pid=17801 comm=syz.2.14077 [ 1534.582047][T17791] netlink: 20 bytes leftover after parsing attributes in process `syz.0.14071'. [ 1534.693885][T17806] atomic_op ffff88818dde4928 conn xmit_atomic 0000000000000000 [ 1534.759014][T17807] netlink: 40 bytes leftover after parsing attributes in process `syz.3.14079'. [ 1535.512110][ T29] kauditd_printk_skb: 313 callbacks suppressed [ 1535.512126][ T29] audit: type=1326 audit(2614.428:180481): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17826 comm="syz.1.14086" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff961dff749 code=0x7ffc0000 [ 1535.560483][ T29] audit: type=1326 audit(2614.470:180482): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17826 comm="syz.1.14086" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff961dff749 code=0x7ffc0000 [ 1535.585426][ T29] audit: type=1326 audit(2614.470:180483): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17826 comm="syz.1.14086" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7ff961dff783 code=0x7ffc0000 [ 1535.609950][ T29] audit: type=1326 audit(2614.470:180484): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17826 comm="syz.1.14086" exe="/root/syz-executor" sig=0 arch=c000003e syscall=10 compat=0 ip=0x7ff961dff807 code=0x7ffc0000 [ 1535.634486][ T29] audit: type=1326 audit(2614.470:180485): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17826 comm="syz.1.14086" exe="/root/syz-executor" sig=0 arch=c000003e syscall=14 compat=0 ip=0x7ff961db6bdd code=0x7ffc0000 [ 1535.659041][ T29] audit: type=1326 audit(2614.470:180486): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17826 comm="syz.1.14086" exe="/root/syz-executor" sig=0 arch=c000003e syscall=435 compat=0 ip=0x7ff961e33e89 code=0x7ffc0000 [ 1535.683792][ T29] audit: type=1326 audit(2614.470:180487): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17826 comm="syz.1.14086" exe="/root/syz-executor" sig=0 arch=c000003e syscall=14 compat=0 ip=0x7ff961db6c47 code=0x7ffc0000 [ 1535.707955][ T29] audit: type=1326 audit(2614.470:180488): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17826 comm="syz.1.14086" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff961dff749 code=0x7ffc0000 [ 1535.732624][ T29] audit: type=1326 audit(2614.470:180489): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17826 comm="syz.1.14086" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff961dff749 code=0x7ffc0000 [ 1535.757448][ T29] audit: type=1326 audit(2614.470:180490): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17826 comm="syz.1.14086" exe="/root/syz-executor" sig=0 arch=c000003e syscall=273 compat=0 ip=0x7ff961db6357 code=0x7ffc0000 [ 1535.783697][T15640] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1535.856555][T17834] loop5: detected capacity change from 0 to 764 [ 1535.865079][T17834] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 1535.934325][T17840] siw: device registration error -23 [ 1535.970000][T17837] loop5: detected capacity change from 0 to 128 [ 1536.076662][T17848] netlink: 20 bytes leftover after parsing attributes in process `syz.5.14093'. [ 1536.087532][T17848] x_tables: (null)_tables: SNAT target: only valid in nat table, not syz0 [ 1536.106140][T17849] netlink: 4 bytes leftover after parsing attributes in process `syz.2.14092'. [ 1536.571358][T17867] FAT-fs (loop3): unable to read boot sector [ 1538.450820][T17875] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks [ 1539.456089][T17875] loop5: detected capacity change from 0 to 1024 [ 1539.464200][T17875] EXT4-fs (loop5): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 1539.475583][T17875] EXT4-fs (loop5): revision level too high, forcing read-only mode [ 1540.246462][T17875] EXT4-fs (loop5): orphan cleanup on readonly fs [ 1540.401422][T17875] EXT4-fs error (device loop5): __ext4_get_inode_loc:4830: comm syz.5.14101: Invalid inode table block 0 in block_group 0 [ 1540.416816][T17875] EXT4-fs error (device loop5) in ext4_reserve_inode_write:6298: Corrupt filesystem [ 1541.089449][T17889] netlink: 36 bytes leftover after parsing attributes in process `syz.2.14104'. [ 1541.138884][T17875] EXT4-fs error (device loop5): ext4_quota_write:7375: inode #3: comm syz.5.14101: mark_inode_dirty error [ 1541.152609][T17875] __quota_error: 90 callbacks suppressed [ 1541.152634][T17875] Quota error (device loop5): write_blk: dquota write failed [ 1541.165944][T17875] Quota error (device loop5): qtree_write_dquot: Error -117 occurred while creating quota [ 1541.175919][T17875] EXT4-fs error (device loop5): ext4_acquire_dquot:6986: comm syz.5.14101: Failed to acquire dquot type 0 [ 1541.187774][T17875] EXT4-fs error (device loop5): __ext4_get_inode_loc:4830: comm syz.5.14101: Invalid inode table block 0 in block_group 0 [ 1541.201472][T17875] EXT4-fs error (device loop5) in ext4_reserve_inode_write:6298: Corrupt filesystem [ 1541.211436][T17875] EXT4-fs error (device loop5): ext4_ext_truncate:4475: inode #15: comm syz.5.14101: mark_inode_dirty error [ 1541.224251][T17875] EXT4-fs error (device loop5): __ext4_get_inode_loc:4830: comm syz.5.14101: Invalid inode table block 0 in block_group 0 [ 1541.237809][T17875] EXT4-fs error (device loop5) in ext4_reserve_inode_write:6298: Corrupt filesystem [ 1541.248914][T17875] EXT4-fs error (device loop5) in ext4_orphan_del:303: Corrupt filesystem [ 1541.257741][T17875] EXT4-fs error (device loop5): __ext4_get_inode_loc:4830: comm syz.5.14101: Invalid inode table block 0 in block_group 0 [ 1541.270872][T17875] EXT4-fs error (device loop5) in ext4_reserve_inode_write:6298: Corrupt filesystem [ 1541.280606][T17875] EXT4-fs error (device loop5): ext4_truncate:4635: inode #15: comm syz.5.14101: mark_inode_dirty error [ 1541.292738][T17875] EXT4-fs error (device loop5) in ext4_process_orphan:345: Corrupt filesystem [ 1541.302510][T17875] EXT4-fs (loop5): 1 truncate cleaned up [ 1541.309221][T17875] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 1541.343858][T17893] netlink: 4 bytes leftover after parsing attributes in process `syz.1.14105'. [ 1541.436995][T17895] siw: device registration error -23 [ 1541.464648][T15640] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1541.530962][T17902] netlink: 16 bytes leftover after parsing attributes in process `syz.5.14106'. [ 1541.544378][T17903] netlink: 24 bytes leftover after parsing attributes in process `syz.1.14108'. [ 1541.567840][ T29] audit: type=1326 audit(2620.780:180581): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17900 comm="syz.5.14106" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe5fe7af749 code=0x7ffc0000 [ 1541.592580][ T29] audit: type=1326 audit(2620.780:180582): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17900 comm="syz.5.14106" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fe5fe7af749 code=0x7ffc0000 [ 1541.617274][ T29] audit: type=1326 audit(2620.780:180583): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17900 comm="syz.5.14106" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe5fe7af749 code=0x7ffc0000 [ 1541.642059][ T29] audit: type=1326 audit(2620.780:180584): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17900 comm="syz.5.14106" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fe5fe7af749 code=0x7ffc0000 [ 1541.666614][ T29] audit: type=1326 audit(2620.780:180585): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17900 comm="syz.5.14106" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe5fe7af749 code=0x7ffc0000 [ 1541.691239][ T29] audit: type=1326 audit(2620.780:180586): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17901 comm="syz.1.14108" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff961dff749 code=0x7ffc0000 [ 1541.715857][ T29] audit: type=1326 audit(2620.780:180587): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17901 comm="syz.1.14108" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff961dff749 code=0x7ffc0000 [ 1541.811469][ T29] audit: type=1326 audit(2620.979:180588): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17901 comm="syz.1.14108" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff961dff749 code=0x7ffc0000 [ 1541.846160][T17908] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=17908 comm=syz.1.14108 [ 1542.283674][T17918] netlink: 4 bytes leftover after parsing attributes in process `syz.2.14111'. [ 1542.464540][T17920] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=17920 comm=syz.1.14113 [ 1542.479407][T17920] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=17920 comm=syz.1.14113 [ 1542.540117][T17923] netlink: 8 bytes leftover after parsing attributes in process `syz.3.14114'. [ 1542.634816][T17927] netlink: 24 bytes leftover after parsing attributes in process `syz.5.14116'. [ 1542.736709][T17930] netlink: 8 bytes leftover after parsing attributes in process `syz.2.14117'. [ 1542.898480][T17932] loop5: detected capacity change from 0 to 8192 [ 1542.922158][T17932] FAT-fs (loop5): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 1543.454260][T17946] syzkaller0: entered allmulticast mode [ 1543.460814][T17946] syzkaller0: entered promiscuous mode [ 1543.488730][T17954] loop5: detected capacity change from 0 to 512 [ 1543.605760][T17945] syzkaller0: left promiscuous mode [ 1543.611313][T17945] syzkaller0: left allmulticast mode [ 1543.934261][T17954] EXT4-fs (loop5): feature flags set on rev 0 fs, running e2fsck is recommended [ 1544.004541][T17954] EXT4-fs (loop5): orphan cleanup on readonly fs [ 1544.013902][T17954] EXT4-fs error (device loop5): ext4_mb_mark_diskspace_used:4215: comm syz.5.14122: Allocating blocks 41-42 which overlap fs metadata [ 1544.030033][T17954] EXT4-fs error (device loop5): ext4_mb_mark_diskspace_used:4215: comm syz.5.14122: Allocating blocks 41-42 which overlap fs metadata [ 1544.048415][T17954] EXT4-fs error (device loop5): ext4_acquire_dquot:6986: comm syz.5.14122: Failed to acquire dquot type 1 [ 1544.060319][T17954] EXT4-fs error (device loop5): mb_free_blocks:2037: group 0, inode 12: block 14:freeing already freed block (bit 14); block bitmap corrupt. [ 1544.075231][T17954] EXT4-fs error (device loop5): ext4_do_update_inode:5617: inode #12: comm syz.5.14122: corrupted inode contents [ 1544.100357][T17966] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 1544.119598][T17954] EXT4-fs error (device loop5): ext4_dirty_inode:6502: inode #12: comm syz.5.14122: mark_inode_dirty error [ 1544.131930][T17954] EXT4-fs error (device loop5): ext4_do_update_inode:5617: inode #12: comm syz.5.14122: corrupted inode contents [ 1544.144561][T17954] EXT4-fs error (device loop5): __ext4_ext_dirty:206: inode #12: comm syz.5.14122: mark_inode_dirty error [ 1544.169592][T17954] EXT4-fs error (device loop5): ext4_do_update_inode:5617: inode #12: comm syz.5.14122: corrupted inode contents [ 1544.184839][T17954] EXT4-fs error (device loop5) in ext4_orphan_del:303: Corrupt filesystem [ 1544.198474][T17954] EXT4-fs error (device loop5): ext4_do_update_inode:5617: inode #12: comm syz.5.14122: corrupted inode contents [ 1544.202741][T17971] siw: device registration error -23 [ 1544.218745][T17954] EXT4-fs error (device loop5): ext4_truncate:4635: inode #12: comm syz.5.14122: mark_inode_dirty error [ 1544.230519][T17954] EXT4-fs error (device loop5) in ext4_process_orphan:345: Corrupt filesystem [ 1544.242807][T17954] EXT4-fs (loop5): 1 truncate cleaned up [ 1544.251846][T17954] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 1544.374588][T15640] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1544.886100][T17995] SELinux: Context system_u:object_r:mqueue_spool_t:s0 is not valid (left unmapped). [ 1545.037901][T18002] wireguard0: entered promiscuous mode [ 1545.043429][T18002] wireguard0: entered allmulticast mode [ 1545.179403][T18005] gtp1: entered promiscuous mode [ 1545.326875][T17987] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1545.340467][T17987] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1545.388116][T18018] netlink: 8 bytes leftover after parsing attributes in process `syz.1.14141'. [ 1545.440656][T18022] netlink: 'syz.1.14145': attribute type 1 has an invalid length. [ 1545.466837][T18022] 8021q: adding VLAN 0 to HW filter on device bond44 [ 1545.600933][T18028] xt_hashlimit: max too large, truncated to 1048576 [ 1545.705261][T18036] siw: device registration error -23 [ 1545.979988][T18050] netlink: 12 bytes leftover after parsing attributes in process `syz.0.14155'. [ 1546.005992][T18048] gtp1: entered promiscuous mode [ 1546.134481][T18064] pim6reg9: entered allmulticast mode [ 1546.342803][ T29] kauditd_printk_skb: 489 callbacks suppressed [ 1546.342820][ T29] audit: type=1326 audit(2625.808:181074): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18069 comm="syz.1.14160" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff961dff749 code=0x7ffc0000 [ 1546.440980][ T29] audit: type=1326 audit(2625.840:181075): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18069 comm="syz.1.14160" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff961dff749 code=0x7ffc0000 [ 1546.464574][ T29] audit: type=1326 audit(2625.840:181076): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18069 comm="syz.1.14160" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff961dff749 code=0x7ffc0000 [ 1546.487994][ T29] audit: type=1326 audit(2625.840:181077): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18069 comm="syz.1.14160" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff961dff749 code=0x7ffc0000 [ 1546.512572][ T29] audit: type=1326 audit(2625.840:181078): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18069 comm="syz.1.14160" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff961dff749 code=0x7ffc0000 [ 1546.537287][ T29] audit: type=1326 audit(2625.840:181079): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18069 comm="syz.1.14160" exe="/root/syz-executor" sig=0 arch=c000003e syscall=94 compat=0 ip=0x7ff961dff749 code=0x7ffc0000 [ 1546.561895][ T29] audit: type=1326 audit(2625.840:181080): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18069 comm="syz.1.14160" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff961dff749 code=0x7ffc0000 [ 1546.586671][ T29] audit: type=1326 audit(2625.840:181081): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18069 comm="syz.1.14160" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff961dff749 code=0x7ffc0000 [ 1546.647849][T18072] netlink: 44 bytes leftover after parsing attributes in process `syz.1.14161'. [ 1547.136859][T18078] Invalid ELF header magic: != ELF [ 1547.199833][T18078] lo speed is unknown, defaulting to 1000 [ 1547.271070][T18078] lo speed is unknown, defaulting to 1000 [ 1547.279284][T18078] lo speed is unknown, defaulting to 1000 [ 1547.286916][T18078] lo speed is unknown, defaulting to 1000 [ 1547.390321][T18078] netlink: 12 bytes leftover after parsing attributes in process `syz.3.14162'. [ 1547.508858][ T29] audit: type=1326 audit(2627.026:181082): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18087 comm="syz.2.14165" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f39028cf749 code=0x7ffc0000 [ 1547.534745][ T29] audit: type=1326 audit(2627.058:181083): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18087 comm="syz.2.14165" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f39028cf749 code=0x7ffc0000 [ 1547.878524][T18100] netlink: 'syz.2.14170': attribute type 1 has an invalid length. [ 1547.904670][T18100] 8021q: adding VLAN 0 to HW filter on device bond67 [ 1548.855523][T18118] xt_connbytes: Forcing CT accounting to be enabled [ 1548.870063][T18118] set match dimension is over the limit! [ 1548.880203][T18117] lo speed is unknown, defaulting to 1000 [ 1549.109801][T18117] lo speed is unknown, defaulting to 1000 [ 1549.137069][T18117] lo speed is unknown, defaulting to 1000 [ 1549.162340][T18117] lo speed is unknown, defaulting to 1000 [ 1549.934047][T18138] netlink: 12 bytes leftover after parsing attributes in process `syz.1.14181'. [ 1550.124538][T18135] netlink: 'syz.1.14181': attribute type 1 has an invalid length. [ 1550.315132][T18144] Cannot find del_set index 2 as target [ 1550.331255][T18144] tipc: Enabling of bearer rejected, already enabled [ 1550.517989][T18153] xt_addrtype: both incoming and outgoing interface limitation cannot be selected [ 1550.577115][T18157] netlink: 8 bytes leftover after parsing attributes in process `syz.0.14185'. [ 1550.650039][T18162] netlink: 28 bytes leftover after parsing attributes in process `+}[@'. [ 1550.669336][T18155] netlink: 'syz.5.14187': attribute type 13 has an invalid length. [ 1550.679283][T18162] netem: change failed [ 1550.841681][T18170] netlink: 8 bytes leftover after parsing attributes in process `syz.2.14191'. [ 1550.850727][T18170] netlink: 40 bytes leftover after parsing attributes in process `syz.2.14191'. [ 1550.864059][T18170] netlink: 'syz.2.14191': attribute type 13 has an invalid length. [ 1550.879035][T18174] program syz.5.14193 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1550.903802][T18174] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 1550.964811][T18177] siw: device registration error -23 [ 1551.108579][T18172] netlink: 4 bytes leftover after parsing attributes in process `syz.1.14192'. [ 1551.141343][ T29] kauditd_printk_skb: 211 callbacks suppressed [ 1551.141359][ T29] audit: type=1326 audit(2630.847:181295): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18192 comm="syz.2.14196" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f39028cf749 code=0x7ffc0000 [ 1551.141859][ T29] audit: type=1326 audit(2630.847:181296): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18192 comm="syz.2.14196" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f39028cf749 code=0x7ffc0000 [ 1551.142119][ T29] audit: type=1326 audit(2630.847:181297): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18192 comm="syz.2.14196" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f39028cf749 code=0x7ffc0000 [ 1551.142467][ T29] audit: type=1326 audit(2630.847:181298): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18192 comm="syz.2.14196" exe="/root/syz-executor" sig=0 arch=c000003e syscall=234 compat=0 ip=0x7f39028cf749 code=0x7ffc0000 [ 1551.142840][ T29] audit: type=1326 audit(2630.847:181299): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18192 comm="syz.2.14196" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f39028cf749 code=0x7ffc0000 [ 1551.143076][ T29] audit: type=1326 audit(2630.847:181300): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18192 comm="syz.2.14196" exe="/root/syz-executor" sig=0 arch=c000003e syscall=101 compat=0 ip=0x7f39028cf749 code=0x7ffc0000 [ 1551.143561][ T29] audit: type=1326 audit(2630.847:181301): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18192 comm="syz.2.14196" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f39028cf749 code=0x7ffc0000 [ 1551.143890][ T29] audit: type=1326 audit(2630.847:181302): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18192 comm="syz.2.14196" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f39028cf749 code=0x7ffc0000 [ 1551.144274][ T29] audit: type=1326 audit(2630.847:181303): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18192 comm="syz.2.14196" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f39028cf749 code=0x7ffc0000 [ 1551.144742][ T29] audit: type=1326 audit(2630.847:181304): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18192 comm="syz.2.14196" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f39028cf749 code=0x7ffc0000 [ 1551.344165][T18199] netlink: 24 bytes leftover after parsing attributes in process `syz.2.14198'. [ 1551.918996][T18214] netlink: 'syz.3.14203': attribute type 1 has an invalid length. [ 1551.943933][T18214] 8021q: adding VLAN 0 to HW filter on device bond59 [ 1551.955382][T18217] netlink: 16 bytes leftover after parsing attributes in process `syz.2.14199'. [ 1551.995184][T18208] netlink: 'syz.5.14200': attribute type 13 has an invalid length. [ 1552.115988][T18225] pim6reg: entered allmulticast mode [ 1552.158140][T18225] SELinux: ebitmap start bit (280) is not a multiple of the map unit size (64) [ 1552.185195][T18225] SELinux: failed to load policy [ 1552.213624][T18225] pim6reg: left allmulticast mode [ 1552.375326][T18240] loop5: detected capacity change from 0 to 512 [ 1552.400663][T18234] lo speed is unknown, defaulting to 1000 [ 1552.443043][T18243] FAT-fs (loop5): error, corrupted file size (i_pos 51, 9216) [ 1552.460746][T18243] FAT-fs (loop5): error, corrupted file size (i_pos 51, 8960) [ 1552.498172][T18234] lo speed is unknown, defaulting to 1000 [ 1552.504100][T18246] netlink: 24 bytes leftover after parsing attributes in process `syz.1.14211'. [ 1552.510513][T18234] lo speed is unknown, defaulting to 1000 [ 1552.527853][T18234] lo speed is unknown, defaulting to 1000 [ 1552.872699][T18256] netlink: 72 bytes leftover after parsing attributes in process `syz.1.14215'. [ 1553.122584][T18256] Set syz1 is full, maxelem 65536 reached [ 1553.165065][T18263] netlink: 16 bytes leftover after parsing attributes in process `syz.2.14216'. [ 1553.457470][T18265] netlink: 'syz.2.14217': attribute type 13 has an invalid length. [ 1553.511344][T18280] program syz.5.14221 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1553.542614][T18280] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 1553.612618][T18280] siw: device registration error -23 [ 1553.968271][T18289] netlink: 'syz.3.14223': attribute type 1 has an invalid length. [ 1554.066718][T18293] netlink: 24 bytes leftover after parsing attributes in process `syz.2.14225'. [ 1554.077862][T18294] netlink: 'syz.5.14224': attribute type 1 has an invalid length. [ 1554.104796][T18294] 8021q: adding VLAN 0 to HW filter on device bond4 [ 1554.352257][T18289] 8021q: adding VLAN 0 to HW filter on device bond60 [ 1554.440735][T18297] macvlan3: entered promiscuous mode [ 1554.447519][T18297] macvlan3: entered allmulticast mode [ 1554.459344][T18297] bond60: entered promiscuous mode [ 1554.466743][T18297] 8021q: adding VLAN 0 to HW filter on device macvlan3 [ 1554.486014][T18297] bond60: left promiscuous mode [ 1554.503917][T18311] pim6reg: left allmulticast mode [ 1554.904418][T18320] syz.3.14229: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=syz3,mems_allowed=0 [ 1554.921131][T18320] CPU: 1 UID: 0 PID: 18320 Comm: syz.3.14229 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 1554.921165][T18320] Tainted: [W]=WARN [ 1554.921172][T18320] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1554.921183][T18320] Call Trace: [ 1554.921190][T18320] [ 1554.921198][T18320] __dump_stack+0x1d/0x30 [ 1554.921259][T18320] dump_stack_lvl+0x95/0xd0 [ 1554.921278][T18320] dump_stack+0x15/0x1b [ 1554.921299][T18320] warn_alloc+0x12b/0x1a0 [ 1554.921328][T18320] ? __schedule+0x85f/0xcd0 [ 1554.921382][T18320] ? __rcu_read_unlock+0x4f/0x70 [ 1554.921404][T18320] __vmalloc_node_range_noprof+0xa0/0x1310 [ 1554.921428][T18320] ? __futex_wait+0x1fa/0x260 [ 1554.921447][T18320] ? __pfx_futex_wake_mark+0x10/0x10 [ 1554.921539][T18320] ? __rcu_read_unlock+0x4f/0x70 [ 1554.921559][T18320] ? avc_has_perm_noaudit+0xab/0x130 [ 1554.921589][T18320] ? should_fail_ex+0x30/0x280 [ 1554.921609][T18320] ? should_failslab+0x8c/0xb0 [ 1554.921636][T18320] vmalloc_user_noprof+0x7d/0xb0 [ 1554.921659][T18320] ? xskq_create+0x80/0xe0 [ 1554.921720][T18320] xskq_create+0x80/0xe0 [ 1554.921824][T18320] xsk_init_queue+0x95/0xf0 [ 1554.921893][T18320] xsk_setsockopt+0x3f5/0x640 [ 1554.921919][T18320] ? __pfx_xsk_setsockopt+0x10/0x10 [ 1554.921947][T18320] __sys_setsockopt+0x184/0x200 [ 1554.922039][T18320] __x64_sys_setsockopt+0x64/0x80 [ 1554.922068][T18320] x64_sys_call+0x21d5/0x3000 [ 1554.922223][T18320] do_syscall_64+0xca/0x2b0 [ 1554.922323][T18320] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1554.922479][T18320] RIP: 0033:0x7f21f2f3f749 [ 1554.922497][T18320] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1554.922517][T18320] RSP: 002b:00007f21f199f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 1554.922540][T18320] RAX: ffffffffffffffda RBX: 00007f21f3195fa0 RCX: 00007f21f2f3f749 [ 1554.922555][T18320] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000003 [ 1554.922569][T18320] RBP: 00007f21f2fc3f91 R08: 0000000000000004 R09: 0000000000000000 [ 1554.922584][T18320] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1554.922649][T18320] R13: 00007f21f3196038 R14: 00007f21f3195fa0 R15: 00007ffd5fe77fc8 [ 1554.922675][T18320] [ 1555.145727][T18320] Mem-Info: [ 1555.148841][T18320] active_anon:77652 inactive_anon:19609 isolated_anon:0 [ 1555.148841][T18320] active_file:15149 inactive_file:5410 isolated_file:0 [ 1555.148841][T18320] unevictable:22850 dirty:273 writeback:0 [ 1555.148841][T18320] slab_reclaimable:4904 slab_unreclaimable:198066 [ 1555.148841][T18320] mapped:33578 shmem:77376 pagetables:6405 [ 1555.148841][T18320] sec_pagetables:0 bounce:0 [ 1555.148841][T18320] kernel_misc_reclaimable:0 [ 1555.148841][T18320] free:1490024 free_pcp:11933 free_cma:0 [ 1555.151233][T18322] netlink: 16 bytes leftover after parsing attributes in process `syz.0.14228'. [ 1555.196900][T18320] Node 0 active_anon:310608kB inactive_anon:78436kB active_file:60596kB inactive_file:21640kB unevictable:91400kB isolated(anon):0kB isolated(file):0kB mapped:134312kB dirty:1092kB writeback:0kB shmem:309504kB kernel_stack:10960kB pagetables:25736kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 1555.234641][T18320] Node 0 DMA free:15360kB boost:0kB min:20kB low:32kB high:44kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1555.266295][T18320] lowmem_reserve[]: 0 2880 7859 7859 [ 1555.271631][T18320] Node 0 DMA32 free:2874072kB boost:0kB min:4132kB low:7060kB high:9988kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:3129332kB managed:2949516kB mlocked:0kB bounce:0kB free_pcp:9900kB local_pcp:6372kB free_cma:0kB [ 1555.303570][T18320] lowmem_reserve[]: 0 0 4978 4978 [ 1555.308683][T18320] Node 0 Normal free:3071888kB boost:0kB min:7188kB low:12284kB high:17380kB reserved_highatomic:0KB free_highatomic:0KB active_anon:310608kB inactive_anon:78436kB active_file:60596kB inactive_file:21640kB unevictable:91400kB writepending:1092kB zspages:0kB present:5242880kB managed:5098240kB mlocked:0kB bounce:0kB free_pcp:39572kB local_pcp:14108kB free_cma:0kB [ 1555.344285][T18320] lowmem_reserve[]: 0 0 0 0 [ 1555.348907][T18320] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 1555.363873][T18320] Node 0 DMA32: 2*4kB (M) 3*8kB (UM) 4*16kB (UM) 6*32kB (UM) 3*64kB (M) 4*128kB (UM) 5*256kB (M) 3*512kB (UM) 3*1024kB (M) 4*2048kB (UM) 698*4096kB (UM) = 2874080kB [ 1555.382786][T18320] Node 0 Normal: 3256*4kB (UM) 1720*8kB (UM) 1067*16kB (UME) 1225*32kB (UME) 725*64kB (UME) 1468*128kB (UME) 1106*256kB (UME) 913*512kB (UME) 751*1024kB (UM) 589*2048kB (UME) 7*4096kB (U) = 3071920kB [ 1555.403420][T18320] Node 0 hugepages_total=6 hugepages_free=4 hugepages_surp=2 hugepages_size=2048kB [ 1555.414558][T18320] 117960 total pagecache pages [ 1555.420501][T18320] 252 pages in swap cache [ 1555.424829][T18320] Free swap = 0kB [ 1555.429809][T18320] Total swap = 124996kB [ 1555.433972][T18320] 2097051 pages RAM [ 1555.439119][T18320] 0 pages HighMem/MovableOnly [ 1555.443802][T18320] 81272 pages reserved [ 1555.509059][T18335] siw: device registration error -23 [ 1555.518320][T18339] program syz.5.14235 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1555.532667][T18339] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 1555.545702][T18339] siw: device registration error -23 [ 1555.618550][T18329] netlink: 'syz.2.14232': attribute type 13 has an invalid length. [ 1555.619578][T18320] lo speed is unknown, defaulting to 1000 [ 1555.672421][T18352] netlink: 24 bytes leftover after parsing attributes in process `syz.2.14237'. [ 1555.913555][ T29] kauditd_printk_skb: 602 callbacks suppressed [ 1555.913570][ T29] audit: type=1326 audit(2635.855:181907): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18347 comm="syz.1.14236" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7ff961e32005 code=0x7ffc0000 [ 1555.947064][ T29] audit: type=1326 audit(2635.886:181908): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18347 comm="syz.1.14236" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7ff961e32005 code=0x7ffc0000 [ 1555.971796][ T29] audit: type=1326 audit(2635.886:181909): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18347 comm="syz.1.14236" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7ff961e32005 code=0x7ffc0000 [ 1556.006575][ T29] audit: type=1326 audit(2635.939:181910): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18347 comm="syz.1.14236" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7ff961e32005 code=0x7ffc0000 [ 1556.031348][ T29] audit: type=1326 audit(2635.939:181911): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18347 comm="syz.1.14236" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7ff961e32005 code=0x7ffc0000 [ 1556.056143][ T29] audit: type=1326 audit(2635.939:181912): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18347 comm="syz.1.14236" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7ff961e32005 code=0x7ffc0000 [ 1556.088814][ T29] audit: type=1326 audit(2636.033:181913): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18347 comm="syz.1.14236" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7ff961e32005 code=0x7ffc0000 [ 1556.113471][ T29] audit: type=1326 audit(2636.033:181914): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18347 comm="syz.1.14236" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7ff961e32005 code=0x7ffc0000 [ 1556.147517][ T29] audit: type=1326 audit(2636.086:181915): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18347 comm="syz.1.14236" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff961dff749 code=0x7ffc0000 [ 1556.172528][ T29] audit: type=1326 audit(2636.086:181916): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18347 comm="syz.1.14236" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff961dff749 code=0x7ffc0000 [ 1557.339641][T18369] netlink: 'syz.1.14240': attribute type 1 has an invalid length. [ 1557.398433][T18369] 8021q: adding VLAN 0 to HW filter on device bond45 [ 1557.418898][T18320] lo speed is unknown, defaulting to 1000 [ 1557.425848][T18320] lo speed is unknown, defaulting to 1000 [ 1557.432381][T18320] lo speed is unknown, defaulting to 1000 [ 1557.499556][T18373] netlink: 'syz.5.14241': attribute type 39 has an invalid length. [ 1557.846362][T18381] netlink: 16 bytes leftover after parsing attributes in process `syz.5.14244'. [ 1558.487825][T18396] netlink: 'syz.1.14247': attribute type 10 has an invalid length. [ 1558.548490][T18397] netlink: 'syz.1.14247': attribute type 10 has an invalid length. [ 1558.806906][T18391] netlink: 8 bytes leftover after parsing attributes in process `syz.1.14247'. [ 1558.978331][T18402] program syz.5.14248 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1558.990570][T18402] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 1559.106153][T18405] siw: device registration error -23 [ 1559.565177][T18409] siw: device registration error -23 [ 1560.239493][T18416] netlink: 4 bytes leftover after parsing attributes in process `syz.2.14250'. [ 1560.508228][T18422] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1560.517545][T18422] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1561.053162][T18379] Set syz1 is full, maxelem 65536 reached [ 1561.270408][T18431] netlink: 'syz.3.14257': attribute type 1 has an invalid length. [ 1561.278765][T18434] netlink: 16 bytes leftover after parsing attributes in process `syz.1.14255'. [ 1561.346609][T18437] netlink: 24 bytes leftover after parsing attributes in process `syz.2.14256'. [ 1561.385286][T18438] siw: device registration error -23 [ 1561.472792][T18431] 8021q: adding VLAN 0 to HW filter on device bond61 [ 1561.544904][T18436] lo speed is unknown, defaulting to 1000 [ 1561.623487][T18436] lo speed is unknown, defaulting to 1000 [ 1561.630745][T18436] lo speed is unknown, defaulting to 1000 [ 1561.637235][T18436] lo speed is unknown, defaulting to 1000 [ 1561.938820][T18449] loop5: detected capacity change from 0 to 1024 [ 1561.999660][T18449] loop5: detected capacity change from 0 to 8192 [ 1562.028185][ T29] kauditd_printk_skb: 345 callbacks suppressed [ 1562.028202][ T29] audit: type=1326 audit(2642.185:182262): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18448 comm="syz.5.14258" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe5fe7af749 code=0x7ffc0000 [ 1562.057747][ T29] audit: type=1326 audit(2642.185:182263): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18448 comm="syz.5.14258" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fe5fe7af749 code=0x7ffc0000 [ 1562.081144][ T29] audit: type=1326 audit(2642.196:182264): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18448 comm="syz.5.14258" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe5fe7af749 code=0x7ffc0000 [ 1562.104458][ T29] audit: type=1326 audit(2642.196:182265): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18448 comm="syz.5.14258" exe="/root/syz-executor" sig=0 arch=c000003e syscall=109 compat=0 ip=0x7fe5fe7af749 code=0x7ffc0000 [ 1562.127799][ T29] audit: type=1326 audit(2642.196:182266): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18448 comm="syz.5.14258" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe5fe7af749 code=0x7ffc0000 [ 1562.151254][ T29] audit: type=1326 audit(2642.196:182267): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18448 comm="syz.5.14258" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7fe5fe7af749 code=0x7ffc0000 [ 1562.174907][ T29] audit: type=1326 audit(2642.196:182268): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18448 comm="syz.5.14258" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7fe5fe7af783 code=0x7ffc0000 [ 1562.198045][ T29] audit: type=1326 audit(2642.217:182269): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18448 comm="syz.5.14258" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7fe5fe7ae1ff code=0x7ffc0000 [ 1562.221223][ T29] audit: type=1326 audit(2642.238:182270): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18448 comm="syz.5.14258" exe="/root/syz-executor" sig=0 arch=c000003e syscall=11 compat=0 ip=0x7fe5fe7af7d7 code=0x7ffc0000 [ 1562.244590][ T29] audit: type=1326 audit(2642.238:182271): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18448 comm="syz.5.14258" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fe5fe7adf90 code=0x7ffc0000 [ 1562.313829][T18449] loop5: p1 p2 p4 < > [ 1562.318533][T18449] loop5: partition table partially beyond EOD, truncated [ 1562.361051][T18449] loop5: p1 start 16777216 is beyond EOD, truncated [ 1562.367732][T18449] loop5: p2 size 515840 extends beyond EOD, truncated [ 1562.429147][T18449] loop5: p4 start 16777216 is beyond EOD, truncated [ 1562.616866][T18452] netlink: 'syz.1.14259': attribute type 13 has an invalid length. [ 1562.758487][T18454] serio: Serial port ptm0 [ 1562.824745][T18456] loop5: detected capacity change from 0 to 1024 [ 1562.937007][T18456] EXT4-fs: Ignoring removed orlov option [ 1562.943388][T18456] EXT4-fs: Ignoring removed nomblk_io_submit option [ 1562.993516][T18456] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1563.138654][T15640] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1563.316443][T18472] bond62: option xmit_hash_policy: invalid value (8) [ 1563.328792][T18472] bond62 (unregistering): Released all slaves [ 1563.348461][T18474] netlink: 64 bytes leftover after parsing attributes in process `syz.1.14264'. [ 1563.445234][ T3555] ================================================================== [ 1563.453340][ T3555] BUG: KCSAN: data-race in __filemap_remove_folio / nr_blockdev_pages [ 1563.461506][ T3555] [ 1563.463824][ T3555] read-write to 0xffff888100482af8 of 8 bytes by task 15640 on cpu 0: [ 1563.471971][ T3555] __filemap_remove_folio+0x1bc/0x2a0 [ 1563.477354][ T3555] __remove_mapping+0x390/0x4c0 [ 1563.482208][ T3555] remove_mapping+0x22/0x90 [ 1563.486715][ T3555] mapping_try_invalidate+0x26a/0x3f0 [ 1563.492079][ T3555] invalidate_mapping_pages+0x27/0x40 [ 1563.497444][ T3555] invalidate_bdev+0x58/0x70 [ 1563.502031][ T3555] ext4_put_super+0x624/0x7d0 [ 1563.506696][ T3555] generic_shutdown_super+0xe6/0x210 [ 1563.511983][ T3555] kill_block_super+0x2a/0x70 [ 1563.516646][ T3555] ext4_kill_sb+0x42/0x80 [ 1563.520960][ T3555] deactivate_locked_super+0x75/0x1c0 [ 1563.526333][ T3555] deactivate_super+0x97/0xa0 [ 1563.531011][ T3555] cleanup_mnt+0x2a9/0x320 [ 1563.535525][ T3555] __cleanup_mnt+0x19/0x20 [ 1563.539935][ T3555] task_work_run+0x131/0x1a0 [ 1563.544555][ T3555] exit_to_user_mode_loop+0x1fe/0x740 [ 1563.549913][ T3555] do_syscall_64+0x1dd/0x2b0 [ 1563.554499][ T3555] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1563.560379][ T3555] [ 1563.562686][ T3555] read to 0xffff888100482af8 of 8 bytes by task 3555 on cpu 1: [ 1563.570210][ T3555] nr_blockdev_pages+0x7e/0xd0 [ 1563.574964][ T3555] si_meminfo+0x87/0xd0 [ 1563.579109][ T3555] update_defense_level+0x47/0x5c0 [ 1563.584217][ T3555] defense_work_handler+0x1f/0x80 [ 1563.589242][ T3555] process_scheduled_works+0x4ce/0x9d0 [ 1563.594704][ T3555] worker_thread+0x582/0x770 [ 1563.599287][ T3555] kthread+0x489/0x510 [ 1563.603351][ T3555] ret_from_fork+0x149/0x290 [ 1563.608037][ T3555] ret_from_fork_asm+0x1a/0x30 [ 1563.612811][ T3555] [ 1563.615125][ T3555] value changed: 0x0000000000000006 -> 0x0000000000000005 [ 1563.622217][ T3555] [ 1563.624523][ T3555] Reported by Kernel Concurrency Sanitizer on: [ 1563.630663][ T3555] CPU: 1 UID: 0 PID: 3555 Comm: kworker/1:9 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 1563.642019][ T3555] Tainted: [W]=WARN [ 1563.645807][ T3555] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1563.655857][ T3555] Workqueue: events_long defense_work_handler [ 1563.661920][ T3555] ================================================================== [ 1563.684725][T18482] siw: device registration error -23 [ 1573.153372][ T9404] page_pool_release_retry() stalled pool shutdown: id 166, 45 inflight 1090 sec