last executing test programs: 6.465450358s ago: executing program 3 (id=2054): r0 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r0, &(0x7f0000000340)=@nameseq={0x1e, 0x1, 0x3, {0x43}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000100)={0x43, 0x4, 0x3, 0x3}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, 0x0, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x10) setsockopt$TIPC_GROUP_JOIN(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000100)={0x43, 0x0, 0x3, 0x3}, 0x10) sendmsg$tipc(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000040), 0x10, 0x0}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)={0x1c, 0x9, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x10000047}, 0x0) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000800)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r3}, 0x4) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000440)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000580), &(0x7f0000000380)}, 0x20) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x18, 0x19, &(0x7f0000000600)=ANY=[@ANYBLOB="1800000008000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70500000800000085000000a500000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r5}, 0x10) munmap(&(0x7f0000002000/0x1000)=nil, 0x1000) r6 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r6, &(0x7f0000000080)="b1", 0xfffd, 0x400c0d4, &(0x7f0000000140)={0xa, 0x4e23, 0x0, @loopback, 0xffffffff}, 0x1c) 6.339030443s ago: executing program 3 (id=2058): bpf$MAP_CREATE(0x0, &(0x7f0000002040)=ANY=[@ANYBLOB="1e0000000000000005000000ff"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000750000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000e00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x3, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r0}, 0x10) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x103400, 0x0) ioctl$TIOCMIWAIT(r1, 0x545c, 0x0) ioctl$TIOCVHANGUP(r1, 0x5437, 0x300) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x27, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2}, 0x10) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/resume', 0x149a82, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000300)='syzkaller\x00', 0x8, 0x0, 0x0, 0x0, 0x4c, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r5, 0x0, 0x4}, 0x18) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'vxcan0\x00', 0x0}) bind$can_raw(0xffffffffffffffff, &(0x7f0000000240)={0x1d, r6}, 0x10) close(0xffffffffffffffff) write$cgroup_int(r3, &(0x7f0000000040)=0xfe8e, 0x12) 3.695305905s ago: executing program 3 (id=2070): bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000910441000000000095000072"], 0x0, 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000007000000080000000800000005"], 0x48) r1 = openat$selinux_create(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$selinux_create(r1, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000e00)={0x11, 0xc, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000100000000000000fe0018110000", @ANYRES32=r0, @ANYRES8=r0, @ANYRESHEX=r1], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) getpgrp(0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, 0x0, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) writev(0xffffffffffffffff, &(0x7f00000003c0)=[{&(0x7f0000000240)="3900000013000318680907070000000f0000ff3f04000000170a001700000000040037000f00030001332564aaee7b1d58b9a64411f6bbf44d", 0x39}], 0x1) r2 = socket(0x10, 0x3, 0x9) connect$netlink(r2, &(0x7f00000014c0)=@proc={0x10, 0x0, 0x25dfdbfc}, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000001c0)={&(0x7f0000000080), 0xc, &(0x7f0000000180)={&(0x7f0000002100)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [], {0x14}}, 0x28}}, 0x0) 3.57197223s ago: executing program 3 (id=2074): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000002040)=ANY=[@ANYBLOB="1e0000000000000005000000ff"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000750000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000e00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x3, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x10) r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x103400, 0x0) ioctl$TIOCMIWAIT(r2, 0x545c, 0x0) ioctl$TIOCVHANGUP(r2, 0x5437, 0x300) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x41000}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x27, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r3}, 0x10) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/resume', 0x149a82, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) r5 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r5, 0x0, 0x4}, 0x18) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'vxcan0\x00', 0x0}) bind$can_raw(0xffffffffffffffff, &(0x7f0000000240)={0x1d, r6}, 0x10) close(0xffffffffffffffff) write$cgroup_int(r4, &(0x7f0000000040)=0xfe8e, 0x12) 2.677342438s ago: executing program 3 (id=2096): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0200000004000000020000000c00"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="180100001700000000000000ff000000850000006d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000002007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008002010b70400000000000085000000010000"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r2, 0x0, 0x40, &(0x7f0000000980)=@raw={'raw\x00', 0x8, 0x3, 0x340, 0x1c0, 0x43, 0xa0, 0x1c0, 0x98, 0xa88, 0x178, 0x178, 0xa88, 0x178, 0x49, 0x0, {[{{@ip={@loopback, @local, 0x0, 0x0, 'veth0_to_bond\x00', 'ip6erspan0\x00'}, 0x12a, 0x1a0, 0x1c0, 0x0, {0x0, 0x7a010000}, [@common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x8, 0x0, 'syz0\x00'}}, @common=@unspec=@quota={{0x38}, {0x0, 0x0, 0x3, {0x100000001}}}]}, @unspec=@TRACE={0x20}}, {{@uncond, 0x0, 0xa8, 0xe8, 0x0, {}, [@common=@unspec=@connbytes={{0x38}, {[{0xb}]}}]}, @common=@unspec=@ERROR={0x40, 'ERROR\x00', 0x0, "f1c098b60204ed02d82cf440fef5497b80c29d381d41116000"}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x3a0) 2.652116929s ago: executing program 3 (id=2097): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000100)='.\x00', 0x0) r1 = openat(r0, &(0x7f00000000c0)='./file0\x00', 0x6a1c2, 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000002d00)={0x11, 0xb, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00002efd1dbacbd3c20000bfa100000000000007010000f8ffffffb702000000000000b7030000000010008500"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x10) shutdown(r1, 0x1) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000080)={'batadv0\x00', 0x0}) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000001f00)={r1, 0x58, &(0x7f0000001e80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) ioctl$EVIOCSABS3F(r0, 0x401845ff, &(0x7f0000000940)={0x9, 0x5, 0x5, 0x3, 0xa, 0xfffffffc}) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f0000002000)={'gretap0\x00', &(0x7f0000001f40)={'tunl0\x00', 0x0, 0x40, 0x700, 0x4, 0x5, {{0x1f, 0x4, 0x1, 0x14, 0x7c, 0x66, 0x0, 0x6, 0x4, 0x0, @loopback, @rand_addr=0x64010101, {[@timestamp_addr={0x44, 0x3c, 0xfd, 0x1, 0xf, [{@broadcast, 0x68b}, {@loopback, 0x2}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x6}, {@multicast1, 0xfffffffd}, {@broadcast, 0x6}, {@dev={0xac, 0x14, 0x14, 0x29}, 0x7ff}, {@remote}]}, @noop, @lsrr={0x83, 0x23, 0x4d, [@local, @empty, @rand_addr=0x64010102, @empty, @empty, @loopback, @multicast2, @multicast1]}, @noop, @ra={0x94, 0x4, 0x1}]}}}}}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r6, 0x0, r8, 0x0, 0x8000f28, 0x8) splice(r7, 0x0, 0xffffffffffffffff, 0x0, 0x6, 0xb) ioctl$sock_inet_tcp_SIOCINQ(r8, 0x541b, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f00000020c0)={'syztnl1\x00', &(0x7f0000002040)={'syztnl1\x00', 0x0, 0x20, 0x20, 0x0, 0x4, {{0x12, 0x4, 0x3, 0x7, 0x48, 0x64, 0x0, 0x15, 0x4, 0x0, @empty, @initdev={0xac, 0x1e, 0x1, 0x0}, {[@timestamp_prespec={0x44, 0x14, 0xa3, 0x3, 0xc, [{@dev={0xac, 0x14, 0x14, 0x3c}, 0x2}, {@empty, 0x5}]}, @end, @timestamp_prespec={0x44, 0x1c, 0xc7, 0x3, 0x0, [{@initdev={0xac, 0x1e, 0x1, 0x0}, 0x1}, {@private=0xa010100, 0x3}, {@broadcast, 0xfffffff7}]}, @end]}}}}}) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r1, 0x89f2, &(0x7f0000002940)={'syztnl0\x00', &(0x7f00000028c0)={'syztnl0\x00', 0x0, 0x2f, 0x3, 0x2f, 0x8, 0x8, @private1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x40, 0x7800, 0x0, 0x5}}) r11 = socket(0x2a, 0x2, 0x0) getsockname$packet(r11, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000440)=@newqdisc={0x44, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r12, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x9, 0x5}}}}]}, 0x44}}, 0x20004000) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=@newtfilter={0x40, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r12, {0x0, 0x9}, {}, {0x1, 0xfff1}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x10, 0x2, [@TCA_CGROUP_EMATCHES={0xc, 0x3, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x6}}]}]}}]}, 0x40}}, 0x1) sendmmsg$inet(r1, &(0x7f0000002b80)=[{{0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000180)="422697edb539aeaf2a2a3eb7d2eb9b60f2729cfc5672448c2fea58dd308d904e51735f5853b28b789d857f1a434e34e3fbd02523a51ad78471dfba2127b7bcb85854243aa5a679e64cca09d2a63e7a4df74b83c70ae8f417daf27abc8925fb23db765fe6cd4f4ac87e30446fda9bb70a8b", 0x71}, {&(0x7f00000002c0)="2f82c095b09378d25f13645f68a13a9c307101f7471d0c019f0be297af0e2dfbec5276a733d09f1064cc5332794210b1bd33c6e04b55efe26e24fb8d24466767692a170e1dc907706bfd7f2b27bacbab95c6b357327f5675b36f694dffb96efe48dcf097e27812b6ccf998ffa451d882d0e88b17992ffcb272320d1c70a4edcdafddf7d0a5afcc2807d847a73f2ca1b38ca649b64851589e838e9624091dc4d4158bc5ccf90766f5101d3296ba061ad4035c950589c9", 0xb6}, {&(0x7f0000000380)="ccaf33089edf6b2445f1655e9962cfa88b3325ad6ef850dad781a3485bcd361378c84c1de2f3aaf04713705d1304d532557a10fbb8db27a5fb6a8f1a941eb96e6cd7a7ec58376d1802ed4b62edbe7120955ef67abd774b54fa05254512ed2f3d719b02a34c8152b7693a71cd7edf8f2cccf0", 0x72}, {&(0x7f0000000400)="b32f179652eca8cb316f2dbaca6e265dc53c52040190ebd447f889cb28583398ae14acac9ab3eaa9e5b6878d5f2044391ec782403c119a973dca83188d66f418aa96b83b18d2189814544068440e0a3a247b179b643d7e1eaaa2da20152cf14851fe930d8566dc1be432e2909ac2781aece15f29ed43dc615242c50a9a43514e25b0f43f61", 0x85}, {&(0x7f00000004c0)="ec2a0970a5db3d8477e706021cc17a7fcf715dfa9d969edb4820dee597a9a9836f6ec937c310bd5aa0b65e7d41eb3d7ed6733345ea0a72b5d0a9e49ff63e9a9bcad7c1cdb66c8297b5319aea88997a72724f47ffba291b4bb08b1fa37a8bd0e10801c055795ac7a0e11d662b7e7705ff3315e7fa2af457c78627f93050873bd65186cea61ae8ed0a4cbd170bad2dde2288ba9428dea5e58644928b9dcd7fc13044219340d5b4989e4fde976c424a46627b44c9ebedc7c17fd54e39843783", 0xbe}], 0x5, &(0x7f0000000600)=[@ip_tos_int={{0x14, 0x0, 0x1, 0x8}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r3, @broadcast, @empty}}}], 0x38}}, {{0x0, 0x0, &(0x7f0000000980)=[{&(0x7f0000000640)="936d0119c6d5ae397359b0ba28aa1ba32fe48b4f3062bbc27c43c581a812811fc332d606b22f5799fcc04d6d8ce5d7435deb75b824a170492c150747cf911ab6f1763142a36a160d3b8ca8f7fed6b53c5876ab764610df033d5e0e2c5ca734893c961d5902c96af427368ae534a96cf0460190daf4f46470739d6cb98e2fef116398a1e41cf632c3c7fbb7d5d11009d82532b1b18df37b26c8bff1bbf5e7cfc6d3d235468eaf4648d64a72776e0da1ad", 0xb0}, {&(0x7f0000000700)="83db48b616a0c832f2b9819ac8c1fddcf6276cd0cafe1cf35c9579e82f6d7fa164b7f237507210e9a3d89d92885c3491b9b664ee901343d18cb873f505020d36c5aac60736c228502a2d3b1b8b17d428d634eb02c11b15573ee6b06e6685da668ae4ef2ee1d2226e5c67c35d064c149a12dc8f8200fb9b0b47c2e5231bb601fd5a1e3f954bb2a65606a8a5b8efdc713fb52069af7b8351901ee234cf98d49b180c63b99707568c8b3c05833c", 0xac}, {&(0x7f00000007c0)="a88e07e0d2571d29406d5649eb10eb8fd8e2649c0cbb434de77f24968d45ae322c994b99cfa1f4ea8472bcabf169913309fedfb98dd19e101b96ba68ba", 0x3d}, {&(0x7f0000000800)="a07ae95104388168764f3936d30c45a946698c78bab9fda7f35616654b3b4965186e5191b439ad56faccdc411b153a344d23f5e195eb16aea813ff1004b911758061ba314cfff1532e4fcf56159787904a78b3e1584558996acabd09fa31dc5394046bc4aef4410fe56736db68faae9f8fbcfe1291e7475fa8e3dbb42f2f96c9fcfacbbaa3c77f210005c9aa0da468c85964fec9", 0x94}, {&(0x7f00000008c0)="d0ea44cbfa6952c150dfd3c1cd7c0a6dc53d3f358bf25ba885eb6049bb26009670333ffb5de56306d6b5dfe211f20a610647b4e620266c75e38cd9f0c3a24f9be2abe97fd769ae43c2958b11bb36097b90bb7464fbdaea3123ea503abce3fcb7fb315404d661e2e0c275ad69f5c6c95e4708196c70a51328070be68ac85441", 0x7f}, {&(0x7f0000000940)}], 0x6, &(0x7f0000000a00)=ANY=[@ANYBLOB="1c000000000000000000000007000000990b920a010100000000001700000000"], 0x20}}, {{&(0x7f0000000a40)={0x2, 0x4e20, @empty}, 0x10, &(0x7f0000001e00)=[{&(0x7f0000000c00)="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", 0x1000}, {&(0x7f0000000a80)="811ce5f36b0efb00c59d0f76", 0xc}, {&(0x7f0000000ac0)="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", 0xfe}, {&(0x7f0000001c00)="0b7dd763dc7076904e4fb5d6d697354b492f38ed8a931b8e9a6513bd7cfa39ee88d196c1fbb8d810780354852d75dda3518f85515a589f37ceca950b7ae17e145a4a6348ea499edd84752b69609f7b7151d9e0f811a8445f15a6f80d00be7d43ba74f75780e0ba96de7ecaf8310bf5b52b4fb297800bc0c30262511fad77401cd1fd6bf4b8e2ca7c7e67fffee06a32b1958e45a6a7cf49a1ea2b49477103aea720e716121d67364e65d05b4a36bce72d67746a39e07873926f9e70489742b3c1d69d1bd5ca10dea7f0f5c017e8a31dd4664c0d", 0xd3}, {&(0x7f0000001d00)="e31aa4718a20c4f119f277b929f8643e6d30450e433735202f14612013bb3f6fbaa5ee0903dcf538998fe71290e495312f065401b3865451addc430eb36312f4363c0657edd75a01901e929de673d357c9c6bb8376de18f5b943acc306161e09fbe9aab45c29a0bb277cd4212fd6bbb348e1c8acbb6dd4d2ee0031403ece56e649647a94eb37145f9db79ff1da38b35193de6d835cff553117183109f6c83c6480da385a53006c7c09c2d77f8802fe39472e27df260bab5a43159fe1aff3af819c0a4ab42612da035fad91f469f188838c89d044394bf2a68f3cc9cd6044", 0xde}], 0x5, &(0x7f0000002100)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r4, @remote, @local}}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r5, @empty, @multicast1}}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x8}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x1163}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r9, @loopback, @empty}}}], 0x90}}, {{&(0x7f00000021c0)={0x2, 0x4e20, @empty}, 0x10, &(0x7f0000002300)=[{&(0x7f0000002200)="27019f84ce56d5f76712759325786aff472aca0bda065772cee908316cb60e750a7defa108c5c35e683d83cd4bb2bc96959cb2ba5f59ceb4d3cc63f0dfe9fb7cfe1ead39b6803c9cc6f47d81348c95a47f39c2b42abf73db2aa0de9ed0808086b3dab56bad31e64e0e14a360aaa0cc2eab50258bc9a76b21881b53a6886145a4bca87a87f67350369fa3e455c0c3f0d98f2e3031b77b85a3920211bc985c98b73c19e6cb88b557b9d8f50aafa8e29efb5d9127026be6c57b9553786ca21dda89f5377123b61ba05138a6aaf1d1801df4000d8d87af2302dd85d3083e99ee", 0xde}], 0x1}}, {{&(0x7f0000002340)={0x2, 0x4e24, @remote}, 0x10, &(0x7f0000002840)=[{&(0x7f0000002380)="4a448ad5c1460c8e2c6a049831f5513b55afbf6e6d2df20b0e7c3bbc6f0c38ec606543497ea1c4c1902f4e3aadc3c9c2c2a73e4de22412cb58ec9f0bd33c8ce4c187036226deb32962bd5e13989013509bb5bb26029f8cbfa5d4d2d27e8d6857036b0f127f100ed6145967ffca3560ba04ce6c6dd78e73bbefb219d5a7aa82b9104ef71e680b202d7b7c9135f5ec82c5776ead5cefd16664c4368ac172e41e980977ba9e9a355b086cbd7091f101b5371c", 0xb1}, {&(0x7f0000002440)="88ea1ad3a4a5f542f2043b56d4abf8d8bc900352390ccd6a5e67f72a42af819c8d5b793b7555afc546149d4cc6ff4aa9292d78f6e3f86cb505646fa863e024450bb95db20fa0660d9277b555b42140235ec37a0aa33448f898e3ba74201e056e9ee13a2b7985f4b0a48feb528494ba22f003617d22c917b978b9ec1294b81821524588804007c99e1a0e49e7013d7e01913c35432ef4a84df1e5fcb076f9739dbfcc613aa3d6a77182f2dc061259e8ffc4b2d99ce41b6437103d09ad2de19210b204de65ac0cc17a755e5bd92503169737e3697912618002ded81638c88558740e0913e6f1d9e4ceb9c23735810d04", 0xef}, {&(0x7f0000002540)="31bf33780a562463c307948676d94bd4ebdc440984640e733642cdc0e09cb13d14da4680d0962091d5bcd65b5ed38d273d3538881ae10ebf1297f7705bd1c2182521a696decb18ed9dff926bbcf224b024eb461998109a5b2432993d6f53753d70d838b332681e4f1012ee6b5e5a0a294c2f625d0c3e02488b9c131b7c9796a04c21f1f51a48281031092c0e89f19413ba7c1e7302bd646a8a6d2f88b925aedaf5ab831e8d9ca758a838", 0xaa}, {&(0x7f0000002600)="cba048863e271146d5ae4a9746f400cf34e4cc5a8da5a86ed967d32d31b6d2c8562db7bde71920d7d344492a6912712b10b276c56f94fa466e3d3e211d816351f8bb4aaec166b16c533f6abdd8bfcce77f52c13376a34fec7d5fcc12d3ea3c3306e89c6ad794054a89e48dbac672a399f5e95aab0035ac094e9a6f2e3a10392db72a24f8038c5f567740a34ae50bcd7ac6deae55b8b1c9be0fce90848906a4cd4aa3287de958315750af3786a6764c0a56277fb991a9b6aa89124f924093fc2df73d9010157e2df5256d5aa5e4bde6441aea0d7b863c2fc86ba5f973cd4b94b809f20fdcc177a1bb605cc65df80976b8b21f0d0a9d748b", 0xf7}, {&(0x7f0000002700)="d413ee4d54cec5de0c8c044be92b20145dad5c599917558f1a522a72700adfb869", 0x21}, {&(0x7f0000002740)="fa6f6e161ef7d412995812695326b2c571f5b9598f35e0b131da508d315bbe222a927e563af706775d98607d8626225bff65e235f18eddb50eff5e393b1b33d13369a74bb4fcd74c4bc06f6f3bd3252dd33cf8b9c1394ef2f83d5bc6ed3ae7a804b44bfac8", 0x65}, {&(0x7f00000027c0)="f6267eadf648533e27d0659a", 0xc}, {&(0x7f0000002800)="650d62345057db126a63", 0xa}], 0x8, &(0x7f0000002980)=[@ip_tos_u8={{0x11, 0x0, 0x1, 0x4}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x10}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x1}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x564}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r10, @multicast1, @multicast2}}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r12, @rand_addr=0x64010101, @multicast2}}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @local, @broadcast}}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x92}}], 0xd8}}, {{&(0x7f0000002a80)={0x2, 0x4e21, @empty}, 0x10, &(0x7f0000002b00)=[{&(0x7f0000002ac0)="a5aed1905a821f5c202648d644", 0xd}], 0x1, &(0x7f0000002b40)=[@ip_retopts={{0x20, 0x0, 0x7, {[@rr={0x7, 0xb, 0x17, [@multicast1, @multicast2]}, @end, @noop, @noop]}}}, @ip_ttl={{0x14, 0x0, 0x2, 0x5}}], 0x38}}], 0x6, 0x40) r13 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x8, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r13, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002010000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x3, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) r14 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000140)='kmem_cache_free\x00', r14}, 0x10) syz_emit_ethernet(0x4a, &(0x7f0000000240)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaa60086"], 0x0) faccessat(r0, &(0x7f0000000000)='./file0\x00', 0x5) 1.750801107s ago: executing program 4 (id=2108): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0200000004000000020000000c00"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="180100001700000000000000ff000000850000006d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000002007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008002010b70400000000000085000000010000"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r2, 0x0, 0x40, &(0x7f0000000980)=@raw={'raw\x00', 0x8, 0x3, 0xae8, 0x1c0, 0x43, 0xa0, 0x1c0, 0x98, 0xa88, 0x178, 0x178, 0xa88, 0x178, 0x49, 0x0, {[{{@ip={@loopback, @local, 0x0, 0x0, 'veth0_to_bond\x00', 'ip6erspan0\x00'}, 0x12a, 0x1a0, 0x1c0, 0x0, {0x0, 0x7a010000}, [@common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x8, 0x0, 'syz0\x00'}}, @common=@unspec=@quota={{0x38}, {0x0, 0x0, 0x3, {0x100000001}}}]}, @unspec=@TRACE={0x20}}, {{@uncond, 0x0, 0x850, 0x890, 0x0, {}, [@common=@unspec=@u32={{0x7e0}, {[{[{0x9}, {0x3}, {0x1, 0x1}, {0x0, 0x3}, {0x4, 0x2}, {0xb1d}, {0x3}, {0x8}, {0x2, 0x3}, {0x3}, {0x103}], [{0xe8f3, 0x5}, {0x1d, 0x6}, {0x4, 0x8}, {0x0, 0x4}, {0x4, 0xc3e}, {0x1, 0x100}, {0x6, 0x7}, {0x3, 0x3}, {0xf2, 0x3}, {0x3ff, 0x8}, {0x10, 0x3}], 0x6, 0x6}, {[{0x80, 0x3}, {0x2}, {0x6, 0x1}, {0x355cbac3, 0x2}, {0x0, 0x2}, {0x0, 0x2}, {0x7}, {0xe7, 0x2}, {0x3, 0x3}, {0x5598e8fe, 0x2}, {0x6, 0x1}], [{0x9, 0x9097}, {0x7, 0x9}, {0x7, 0xa}, {0x6, 0x8}, {0x20080, 0x5}, {0x13, 0xc0000000}, {0x40, 0xb}, {0x9, 0x6}, {0x4, 0x2}, {0x6, 0x7fffffff}, {0x7fffffff, 0x400}], 0x7}, {[{0x84, 0x2}, {}, {0x0, 0x2}, {0xffffffff, 0x1}, {}, {0x5, 0x1}, {0x5, 0x2}, {0x8, 0x3}, {0x2, 0x3}, {0x8, 0x1}, {0x7, 0x1}], [{0x9, 0x5}, {0x80, 0x32}, {0x0, 0xfffffff7}, {0xff, 0x1}, {0x7, 0x6}, {0xdb9, 0xff4}, {0x6, 0x3ff}, {0x3, 0x6}, {0x5, 0x10}, {0x9, 0x6}, {0x10000, 0x2}], 0x4, 0x2a}, {[{0x3, 0x2}, {0xa, 0x1}, {0x6, 0x1}, {0x10, 0x3}, {0x2, 0x2}, {0x2, 0x2}, {0x3, 0x1}, {0x2, 0x3}, {0x3, 0x1}, {0x2, 0x2}, {0x477d, 0x1}], [{0x4, 0xffffffff}, {0x200, 0x6}, {0x4be1, 0x4044}, {0x1}, {0x5, 0xc}, {0x3, 0x4}, {0x2, 0x4}, {0x800, 0x8000}, {0x8, 0x800}, {0x3, 0x2}, {0xe, 0x8000}], 0x4, 0xb}, {[{0x7, 0x1}, {0xd, 0x3}, {0x5}, {0x61}, {0x9}, {}, {0x2}, {0x1}, {0x0, 0x2}, {0x9, 0x3}, {0x5, 0x3}], [{0x58d, 0x3ff}, {0x0, 0x7f}, {0x6}, {0xfc9b, 0x80000001}, {0x101, 0x7}, {0x7, 0x1}, {0x7, 0x8001}, {0x2, 0x1}, {0x2, 0x2}, {0x9, 0x4cf}, {0x7, 0x10000}], 0x1}, {[{0x2}, {0x9}, {0x8, 0x1}, {0x2, 0x3}, {0x71, 0x3}, {0x0, 0x2}, {0xe, 0x2}, {0x6, 0x2}, {0x5}, {0x3000000, 0x3}, {0x6, 0x1}], [{0x9, 0x3}, {0x5, 0x7fffffff}, {0xffff, 0x4}, {0x0, 0x7}, {0x8, 0xb502}, {0x1ff, 0x86}, {0x6, 0xffffffff}, {0x3, 0x4}, {0x5, 0x6}, {0xf, 0xf93}, {0x5, 0x4}], 0x3, 0x3}, {[{0x7, 0x1}, {0x3, 0x1}, {0x45d7}, {0xfff, 0x3}, {0xc4f, 0x3}, {0x0, 0x2}, {0x400, 0x1}, {0x2, 0x1}, {0x4, 0x2}, {0xfffffffd}, {0x2}], [{0x3, 0x6}, {0xed, 0xd}, {0x80, 0xb81d}, {0x2ca, 0x80000000}, {0x8, 0xff}, {0x7, 0x45a8}, {0x8, 0x6}, {0x4, 0x1}, {0x2, 0x6}, {0xfc, 0x6}, {0xd, 0x138c}], 0x6}, {[{0x4, 0x1}, {0x800}, {0x9, 0x2}, {0xf0000000, 0x2}, {0x6, 0x3}, {0x3, 0x2}, {0x8, 0x2}, {}, {0x9}, {0x400, 0x2}, {0x8, 0x3}], [{0x7, 0xfffffffd}, {0x2}, {0x2, 0x2}, {0x8f, 0x6}, {0x7, 0x5}, {0x8, 0x7}, {0xb, 0x82c6}, {0xb1b}, {0xbd5c, 0xffff}, {0x1, 0x9b8d}, {0xec, 0x5}], 0x2, 0x6}, {[{0x8}, {0x0, 0x1}, {0xac000000}, {0x6, 0x2}, {0x2d8, 0x3}, {0x7e3ea4bc}, {0x8, 0x1}, {0x4f, 0x3}, {0x4, 0x2}, {0xfffffff7}, {0x3, 0x2}], [{0x5, 0x42}, {0x76a74689, 0x4}, {0x1}, {0x8000, 0x7}, {0x400, 0xdd}, {0xfff, 0x8}, {0x76b, 0xfffffffe}, {0xa6d00, 0xfffffff7}, {0x10001, 0xfc8d}, {0x0, 0x10001}, {0x4, 0x3}], 0x1, 0x9}, {[{0x8, 0x1}, {0x3, 0x3}, {0x18, 0x3}, {0x3ff, 0x3}, {0x7fffffff}, {0x8}, {0x1}, {0x8, 0x3}, {0xf1b6}, {0x80, 0x3}, {0x4, 0x2}], [{0x2, 0x4}, {0x3, 0xf}, {0x9, 0x6}, {0x7f, 0x8}, {0x7, 0x273e1899}, {0x4, 0x1}, {0x6, 0x3}, {0x1, 0xb7}, {0x8, 0x3}, {0x3, 0x1}, {0x7ff, 0x63}], 0xb, 0x3}, {[{0x1, 0x2}, {0x6, 0x3}, {0xffff, 0x1}, {0x1}, {0x4, 0x3}, {0x4, 0x3}, {0xaa7}, {0x100, 0x3}, {0x2}, {0xfffffff7, 0xb90af65875a5dc08}, {0x4, 0x3}], [{0x3}, {0x8001, 0x7}, {0x10000, 0x7524}, {0x73d, 0x4}, {0x0, 0x280000}, {0x3, 0x3af}, {0x5, 0x2}, {0x101, 0xbf}, {0x10000, 0x6}, {0x3, 0x800}], 0x8, 0x5}], 0x3}}]}, @common=@unspec=@ERROR={0x40, 'ERROR\x00', 0x0, "f1c098b60204ed02d82cf440fef5497b80c29d381d41116000"}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0xb48) 1.750421837s ago: executing program 4 (id=2109): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kmem_cache_free\x00', 0xffffffffffffffff, 0x0, 0x1}, 0x18) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000500000002"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000000)='kmem_cache_free\x00', r1}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffc}]}) r2 = socket(0x1, 0x80802, 0x0) r3 = epoll_create1(0x0) r4 = syz_open_dev$tty1(0xc, 0x4, 0x3) ioctl$KDFONTOP_SET(r4, 0x4b72, &(0x7f0000000000)={0x0, 0x0, 0x8, 0x5, 0x200, &(0x7f0000003c40)="1ae19337aa151f36ae49bb3f8cb95c5bf840d4f1e55efaaf098d47a70eb36a73090000000000001b0f4743f490c585108c1331c7749299a25a705f5096cb268cbc6070d680e1be250700000000000000472471ff550c0010000007f3c7b61abe4162256004ea8ca5e5b5f379c6eb3257eda08f7e6959090000004d13184d382747e035b4722525e00ade86b4c6d1e157c75d15c1f961ebc0a64d7f2a73f8979fcecacaa64f9b9069ebcc1d5b471edbc4f6c7f1b98ae74e909aa6f25b7fa77bf9cd4ed36d5c53dc519d11c3cc1c22a3b86cf3c645413f4afbcea0c99ded703699d2bb6a4a663b99b6069da5aaf64785a5887c31261d4b9e57ee07000000def6f255ca26108f11f02047d47f2d0fec30f7e92482f71496e184214a4e0c5fdc48b0af0c0478940016d8f0990a0e1090fd515380aae83c5eaeed338701574b64200a16ef2811fadcf1e0f49a514df529061e09ce45e3da03a03fe9b4a6bcfa7d04594e4f6d0714a2e14ea127ab37d64a5e0db630cd4f4a2e6c985a542ff20a9b2193f265f93a258a88dd6c9d6a926dd23d32425849c5d9210007660a617f22133b6cb5087f4c6057942aa18193172bd995fa70a1f949b196f2e2a3c175858575713be5ee3f7f4dcecc98123f9ded3afdebe13d79a7f7fcb2469ae0ac503111401612df7ee995f74fb97a63bf62d61f78c062f959119ab50c1f706a930121ebcd53ccb93d158186ed360750ca8e728150d988844b9a5cff46591ccaff416e5a8c25f9555da5ca6fdf75b86ea6171b046b856168f403b5253a5cc393430a09a4489a0895571e597ac8846f945ffb372a88d3a25978b463dc961416c80c55773f917020751ed51cfd73c1e06fbadd156d56bedc117af95d242d6dccbe2ce34dccd6005e944afa92b22ec9a698469c6edc06caa2cfcd61912607d459b4c28ebea9745bcd4697d75c9601fd333d3cd797963a3c71b7cc5fdc756da8d97207936e5f53b53b732533c2722e03002293517966611602f297de6ff5408777b7a93c45cee3ee5c5601a4e94266b295ea7a86812a7ab8896ec5ea1b12643e1844b185734528399e62bceb8700cc6cd491e4a4430d0a3ba329a5a2fa170fd0b1cc4ba8294de988cd35df2cd7344aa8a9f3432b96fb889c02f484f635a0cc3466a3c2733d45f176931b2db18dba54991a9553cedb7f585786388d4042dbae1c95b769e3d4e036e8afea0a04c04f542b152ca1fd1f8efee60425c5a122fd1b90e98635284abd9f217d9e19cb2a64b354c9d79509cc47d7305114990148a7291cb0fe2d1c773a6664b66ae04aa62c534d072ae54c2ca0d5962cc58945d8924abfc4d5af922462507430d8f2c17479a6678b0b3700000000000000000000000000000000000000000000f800"}) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f00000000c0)={0x10000001}) epoll_pwait(r3, &(0x7f0000000080)=[{}], 0x1, 0x80000000, 0x0, 0x0) shutdown(r2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) mq_open(&(0x7f0000000180)='&\xaf\x12}N\xf3oW\'\x00', 0x9998bdb00e53b971, 0x80, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000001a00)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_CREATE(0x0, &(0x7f0000000b00)=ANY=[@ANYBLOB="0a000000050000000200000007"], 0x48) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/vlan/vlan1\x00') r5 = socket(0x2, 0x2, 0x1) ioctl$sock_SIOCSIFVLAN_DEL_VLAN_CMD(r5, 0x8983, &(0x7f0000000000)={0x1, 'vlan1\x00', {}, 0x5832}) 1.548666956s ago: executing program 0 (id=2112): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0xfc, 0x0, 0x7ffc0002}]}) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xb, &(0x7f00000002c0)=ANY=[@ANYBLOB], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000340)='kmem_cache_free\x00', r0, 0x0, 0x2c69}, 0x18) mkdirat(0xffffffffffffff9c, 0x0, 0x0) fcntl$setlease(0xffffffffffffffff, 0x400, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="09000000160000000800000040"], 0x50) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000500)={r2, &(0x7f0000000340), 0x0}, 0x20) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) socket(0x10, 0x3, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) sendmsg$TIPC_CMD_SET_LINK_PRI(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x68, 0x0, 0x1, 0x2, 0x0, {{}, {0x0, 0x410c}, {0x4c, 0x14, {0xfffffff0, @link='broadcast-link\x00'}}}}, 0x68}, 0x1, 0x0, 0x0, 0x4008855}, 0x0) 1.45254125s ago: executing program 4 (id=2114): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000240)=0x100000001, 0x59) connect$inet6(r0, &(0x7f0000000200)={0xa, 0xffff, 0xb7, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000040), 0x1e) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x0, 0x0, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='kfree\x00', r1}, 0x18) socket(0x2a, 0x2, 0x0) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f0000000080)=@gcm_128={{0x303}, "ba28597967d1b54c", "9712b0d86846b5ecc522bc6f13a6e30c", "ea0292da", "9e87dc79f4c04982"}, 0x28) close(r0) 1.451861529s ago: executing program 4 (id=2115): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="0500000004000000990000000b"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000009c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000780)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000240)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, 0x0, 0x0, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="180000000008002b000000000000000018040000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r6 = socket$inet_sctp(0x2, 0x5, 0x84) sendto$inet(r6, &(0x7f0000000a80)="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", 0xfb, 0x8000, &(0x7f0000000340)={0x2, 0x4e22, @rand_addr=0x64010101}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f00000003c0)='sched_switch\x00', r5}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000080)=ANY=[], &(0x7f0000000000)='syzkaller\x00'}, 0x94) r7 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x60, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r9, {0x0, 0xa}, {0xffff, 0xffff}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0x4, 0x2, 0x0, 0x0, 0x7, 0x8}, {0x12, 0x3, 0x0, 0x1, 0x1, 0x400}, 0xa5, 0x4, 0x10000000}}, @TCA_TBF_BURST={0x8, 0x6, 0x8057}]}}]}, 0x60}}, 0x44080) sendmsg$nl_route_sched(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000001c0)=@newqdisc={0x78, 0x24, 0xd0f, 0x0, 0x0, {0x60, 0x0, 0x0, r9, {0x0, 0xf}, {0xd, 0xa}, {0x6}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x7, 0x10001, 0x3, 0x0, 0x7}, 0xf0, 0x1, 0x8, 0x3, 0x88a, 0x9, 0x8e, 0x1f, 0x3, 0xff, {0x4415, 0x2, 0x800, 0x5, 0x0, 0x5}}}}]}, 0x78}}, 0x4000) 1.362675274s ago: executing program 0 (id=2117): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="0500000004000000990000000b"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000009c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000780)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000240)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r6 = socket$inet_sctp(0x2, 0x5, 0x84) sendto$inet(r6, &(0x7f0000000a80)="d1b90fe74e766f18e29fe999fbf4c118f4aeb19304e30bef3bb6011585f5e5333e9f3993fa9be0ca78c4834f2fe0bc2caf3e5b1387e22b535fb47032e1107c2900f16858051f1e13fd8e3dbe58669dab41ab627b08a2169e23b18110ae1c23178a422ef3328403cb7f2069bbbbbab24703ea16ff8ea6a892159d7b8b620ea4692d638833a503abf1518112c02e85ee73ece5909d7b463d2f6a54bd14b3ad3100c29c1d1cf44b828649fe62cc5aeeb5ddae84671c4474d1aab739c1030e2e093188636b58d9529b302d07e9fc085e89cd6d71b4e125f35e0c1333b17bae869d589b236f6d8faf47dfce7d02d1c98c6d62e1eea6c554e587fda0b185", 0xfb, 0x8000, &(0x7f0000000340)={0x2, 0x4e22, @rand_addr=0x64010101}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f00000003c0)='sched_switch\x00', r5}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000080)=ANY=[], &(0x7f0000000000)='syzkaller\x00'}, 0x94) r7 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x60, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r9, {0x0, 0xa}, {0xffff, 0xffff}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0x4, 0x2, 0x0, 0x0, 0x7, 0x8}, {0x12, 0x3, 0x0, 0x1, 0x1, 0x400}, 0xa5, 0x4, 0x10000000}}, @TCA_TBF_BURST={0x8, 0x6, 0x8057}]}}]}, 0x60}}, 0x44080) sendmsg$nl_route_sched(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000001c0)=@newqdisc={0x78, 0x24, 0xd0f, 0x0, 0x0, {0x60, 0x0, 0x0, r9, {0x0, 0xf}, {0xd, 0xa}, {0x6}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x7, 0x10001, 0x3, 0x0, 0x7}, 0xf0, 0x1, 0x8, 0x3, 0x88a, 0x9, 0x8e, 0x1f, 0x3, 0xff, {0x4415, 0x2, 0x800, 0x5, 0x0, 0x5}}}}]}, 0x78}}, 0x4000) 898.488912ms ago: executing program 2 (id=2127): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0xfc, 0x0, 0x7ffc0002}]}) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xb, &(0x7f00000002c0)=ANY=[@ANYBLOB], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000340)='kmem_cache_free\x00', r0, 0x0, 0x2c69}, 0x18) mkdirat(0xffffffffffffff9c, 0x0, 0x0) fcntl$setlease(0xffffffffffffffff, 0x400, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="09000000160000000800000040"], 0x50) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000500)={r2, &(0x7f0000000340), 0x0}, 0x20) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) socket(0x10, 0x3, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) sendmsg$TIPC_CMD_SET_LINK_PRI(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x68, 0x0, 0x1, 0x2, 0x0, {{}, {0x0, 0x410c}, {0x4c, 0x14, {0xfffffff0, @link='broadcast-link\x00'}}}}, 0x68}, 0x1, 0x0, 0x0, 0x4008855}, 0x0) 727.02497ms ago: executing program 2 (id=2128): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) r2 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x34120, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x4000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000940), 0x0, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) open_tree(r4, &(0x7f0000000980)='./file0\x00', 0x0) r5 = dup(r3) sendmsg$inet(r5, &(0x7f0000000780)={&(0x7f0000000100)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000001600)=[{&(0x7f0000000140)="be38", 0xffdf}], 0x1, &(0x7f0000000c80)=ANY=[@ANYBLOB="1c000000000000000000000008000000", @ANYRES32=0x0, @ANYBLOB="ac1414aa00000000000000001c000000000000000000e8ff060000004404730001000000"], 0x40}, 0x0) read$char_usb(r5, &(0x7f0000000180)=""/147, 0xfdef) ioctl$TUNSETCARRIER(r5, 0x400454e2, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r6}, &(0x7f0000000180), &(0x7f00000001c0)=r2}, 0x20) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r9}, 0x18) r10 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000340), r7) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000800)={r8, 0xe0, &(0x7f0000000700)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, &(0x7f0000000400)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x5, 0x8, &(0x7f0000000540)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000580)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xd0, &(0x7f00000005c0)=[{}, {}, {}, {}, {}, {}, {}, {}], 0x40, 0x10, &(0x7f0000000640), &(0x7f0000000680), 0x8, 0x9, 0x8, 0x8, &(0x7f00000006c0)}}, 0x10) sendmsg$ETHTOOL_MSG_COALESCE_GET(r8, &(0x7f0000000900)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000008c0)={&(0x7f0000000840)={0x80, r10, 0x100, 0x70bd2a, 0x25dfdbfc, {}, [@HEADER={0x6c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ipvlan1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r11}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_hsr\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}]}, 0x80}, 0x1, 0x0, 0x0, 0x20008000}, 0x20000000) r12 = syz_open_dev$usbfs(&(0x7f0000000100), 0x77, 0x141301) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480), 0x4) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={0x0}, 0x18) ioctl$USBDEVFS_CONTROL(r12, 0xc0105500, &(0x7f00000000c0)={0x80, 0x17, 0x6, 0x3, 0x0, 0x6e9, 0x0}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'ip6gretap0\x00', 0x0}) setsockopt$inet6_mreq(r1, 0x29, 0x1b, &(0x7f0000000280)={@remote, r13}, 0x14) dup2(r0, r1) 621.131654ms ago: executing program 2 (id=2129): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) r2 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x34120, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x4000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000940), 0x0, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) open_tree(r4, &(0x7f0000000980)='./file0\x00', 0x0) r5 = dup(r3) sendmsg$inet(r5, &(0x7f0000000780)={&(0x7f0000000100)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000001600)=[{&(0x7f0000000140)="be38", 0xffdf}], 0x1, &(0x7f0000000c80)=ANY=[@ANYBLOB="1c000000000000000000000008000000", @ANYRES32=0x0, @ANYBLOB="ac1414aa00000000000000001c000000000000000000e8ff060000004404730001000000"], 0x40}, 0x0) read$char_usb(r5, &(0x7f0000000180)=""/147, 0xfdef) ioctl$TUNSETCARRIER(r5, 0x400454e2, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r6}, &(0x7f0000000180), &(0x7f00000001c0)=r2}, 0x20) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r9}, 0x18) r10 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000340), r7) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000800)={r8, 0xe0, &(0x7f0000000700)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, &(0x7f0000000400)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x5, 0x8, &(0x7f0000000540)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000580)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xd0, 0x0, 0x0, 0x10, &(0x7f0000000640), &(0x7f0000000680), 0x8, 0x9, 0x8, 0x8, &(0x7f00000006c0)}}, 0x10) sendmsg$ETHTOOL_MSG_COALESCE_GET(r8, &(0x7f0000000900)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000008c0)={&(0x7f0000000840)={0x80, r10, 0x100, 0x70bd2a, 0x25dfdbfc, {}, [@HEADER={0x6c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ipvlan1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r11}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_hsr\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}]}, 0x80}, 0x1, 0x0, 0x0, 0x20008000}, 0x20000000) r12 = syz_open_dev$usbfs(&(0x7f0000000100), 0x77, 0x141301) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480), 0x4) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={0x0}, 0x18) ioctl$USBDEVFS_CONTROL(r12, 0xc0105500, &(0x7f00000000c0)={0x80, 0x17, 0x6, 0x3, 0x0, 0x6e9, 0x0}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'ip6gretap0\x00', 0x0}) setsockopt$inet6_mreq(r1, 0x29, 0x1b, &(0x7f0000000280)={@remote, r13}, 0x14) dup2(r0, r1) 557.712727ms ago: executing program 4 (id=2131): r0 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r0, &(0x7f0000000340)=@nameseq={0x1e, 0x1, 0x3, {0x43}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000100)={0x43, 0x4, 0x3, 0x3}, 0x10) r1 = socket$tipc(0x1e, 0x5, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000000000f7850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r2}, 0x10) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000100)={0x43, 0x0, 0x3, 0x3}, 0x10) sendmsg$tipc(r1, &(0x7f0000000280)={&(0x7f0000000040), 0x10, 0x0}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r3, 0x0, 0x0) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000800)=ANY=[@ANYBLOB="020000000400000008"], 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r4}, 0x4) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000440)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000580), &(0x7f0000000380)}, 0x20) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x18, 0x19, &(0x7f0000000600)=ANY=[@ANYBLOB="1800000008000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r4, @ANYBLOB="0000000000000000b70500000800000085000000a500000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r6}, 0x10) munmap(&(0x7f0000002000/0x1000)=nil, 0x1000) r7 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r7, &(0x7f0000000080)="b1", 0xfffd, 0x400c0d4, &(0x7f0000000140)={0xa, 0x4e23, 0x0, @loopback, 0xffffffff}, 0x1c) 505.072839ms ago: executing program 0 (id=2133): bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000910441000000000095000072"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000007000000080000000800000005"], 0x48) r0 = openat$selinux_create(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$selinux_create(r0, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000e00)={0x11, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000040)='kmem_cache_free\x00', r1, 0x0, 0x10007ffffffff}, 0x18) r2 = getpgrp(0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0x0, 0x0, 0x0, 0x2, 0xfffffe81, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="070000000400000008"], 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r3, @ANYBLOB="0000000000000000b703000000030000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000000)='kfree\x00', r4}, 0x18) r5 = socket$netlink(0x10, 0x3, 0x0) writev(r5, &(0x7f00000003c0)=[{&(0x7f0000000240)="3900000013000318680907070000000f0000ff3f04000000170a001700000000040037000f00030001332564aaee7b1d58b9a64411f6bbf44d", 0x39}], 0x1) syz_open_procfs(r2, &(0x7f0000000300)='net/ip_tables_names\x00') r6 = socket(0x10, 0x3, 0x9) sendmsg$NFT_BATCH(r6, &(0x7f00000001c0)={&(0x7f0000000080), 0xc, &(0x7f0000000180)={&(0x7f0000002100)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [], {0x14}}, 0x28}}, 0x0) 465.124381ms ago: executing program 4 (id=2134): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000002040)=ANY=[@ANYBLOB="1e0000000000000005000000ff"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000750000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000e00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x3, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x10) r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x103400, 0x0) ioctl$TIOCMIWAIT(r2, 0x545c, 0x0) ioctl$TIOCVHANGUP(r2, 0x5437, 0x300) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x41000}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x27, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r3}, 0x10) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/resume', 0x149a82, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) r5 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r5, 0x0, 0x4}, 0x18) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'vxcan0\x00', 0x0}) bind$can_raw(0xffffffffffffffff, &(0x7f0000000240)={0x1d, r6}, 0x10) close(0xffffffffffffffff) write$cgroup_int(r4, &(0x7f0000000040)=0xfe8e, 0x12) 416.945903ms ago: executing program 0 (id=2136): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kmem_cache_free\x00', 0xffffffffffffffff, 0x0, 0x1}, 0x18) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000500000002"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000000)='kmem_cache_free\x00', r1}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffc}]}) r2 = socket(0x1, 0x80802, 0x0) r3 = epoll_create1(0x0) r4 = syz_open_dev$tty1(0xc, 0x4, 0x3) ioctl$KDFONTOP_SET(r4, 0x4b72, &(0x7f0000000000)={0x0, 0x0, 0x8, 0x5, 0x200, &(0x7f0000003c40)="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"}) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f00000000c0)={0x10000001}) epoll_pwait(r3, &(0x7f0000000080)=[{}], 0x1, 0x80000000, 0x0, 0x0) shutdown(r2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) mq_open(&(0x7f0000000180)='&\xaf\x12}N\xf3oW\'\x00', 0x9998bdb00e53b971, 0x80, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000001a00)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_CREATE(0x0, &(0x7f0000000b00)=ANY=[@ANYBLOB="0a000000050000000200000007"], 0x48) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/vlan/vlan1\x00') r5 = socket(0x2, 0x2, 0x1) ioctl$sock_SIOCSIFVLAN_DEL_VLAN_CMD(r5, 0x8983, &(0x7f0000000000)={0x1, 'vlan1\x00', {}, 0x5832}) 366.078955ms ago: executing program 2 (id=2139): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) r2 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x34120, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x4000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000940), 0x0, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) open_tree(r4, &(0x7f0000000980)='./file0\x00', 0x0) r5 = dup(r3) sendmsg$inet(r5, &(0x7f0000000780)={&(0x7f0000000100)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000001600)=[{&(0x7f0000000140)="be38", 0xffdf}], 0x1, &(0x7f0000000c80)=ANY=[@ANYBLOB="1c000000000000000000000008000000", @ANYRES32=0x0, @ANYBLOB="ac1414aa00000000000000001c000000000000000000e8ff060000004404730001000000"], 0x40}, 0x0) read$char_usb(r5, &(0x7f0000000180)=""/147, 0xfdef) ioctl$TUNSETCARRIER(r5, 0x400454e2, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r6}, &(0x7f0000000180), &(0x7f00000001c0)=r2}, 0x20) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r9}, 0x18) r10 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000340), r7) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000800)={r8, 0xe0, &(0x7f0000000700)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, &(0x7f0000000400)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x5, 0x8, &(0x7f0000000540)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000580)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xd0, &(0x7f00000005c0)=[{}, {}, {}, {}, {}, {}, {}, {}], 0x40, 0x10, &(0x7f0000000640), &(0x7f0000000680), 0x8, 0x9, 0x8, 0x8, &(0x7f00000006c0)}}, 0x10) sendmsg$ETHTOOL_MSG_COALESCE_GET(r8, &(0x7f0000000900)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000008c0)={&(0x7f0000000840)={0x80, r10, 0x100, 0x70bd2a, 0x25dfdbfc, {}, [@HEADER={0x6c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ipvlan1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r11}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_hsr\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}]}, 0x80}, 0x1, 0x0, 0x0, 0x20008000}, 0x20000000) r12 = syz_open_dev$usbfs(&(0x7f0000000100), 0x77, 0x141301) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480), 0x4) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={0x0}, 0x18) ioctl$USBDEVFS_CONTROL(r12, 0xc0105500, &(0x7f00000000c0)={0x80, 0x17, 0x6, 0x3, 0x0, 0x6e9, 0x0}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'ip6gretap0\x00', 0x0}) setsockopt$inet6_mreq(r1, 0x29, 0x1b, &(0x7f0000000280)={@remote, r13}, 0x14) dup2(r0, r1) 269.013109ms ago: executing program 2 (id=2140): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0xfe, 0x0, 0x7ffc9ffe}]}) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000000180)={{0x1, 0x1, 0x18, r0, {0x3, 0x9}}, './file0\x00'}) r1 = syz_open_dev$evdev(&(0x7f00000002c0), 0xc000, 0x142) ioctl$EVIOCGRAB(r1, 0x40044590, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) link(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280)='./file0\x00') r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000007000000080000000800000005"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x11, 0xc, &(0x7f0000000140)=ANY=[@ANYRESHEX=r1, @ANYRESHEX=r2, @ANYBLOB="0065000000000000b708000000000e007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000002085000000010006000000000000000974c2e5df24bdf922063e165e045ffaad46911167b73f5b2eb8fab15c12c4"], &(0x7f0000000240)='GPL\x00', 0x10000, 0x0, 0x0, 0x41000, 0x32, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffff4}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r3}, 0x10) open(&(0x7f0000000100)='.\x00', 0x501343, 0x111) socket$pppl2tp(0x18, 0x1, 0x1) r4 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) r5 = socket$inet(0x2, 0x1, 0x100) setsockopt$sock_int(r5, 0x1, 0x2, &(0x7f0000000040)=0x7f, 0x4) bind$inet(r5, &(0x7f0000e15000)={0x2, 0x4e20, @multicast2}, 0x10) r6 = socket$inet(0x2, 0x1, 0x0) setsockopt$sock_int(r6, 0x1, 0x2, &(0x7f0000000040)=0x7f, 0x4) bind$inet(r5, &(0x7f0000e15000)={0x2, 0x4e20, @private=0xa010100}, 0x10) listen(r5, 0x0) fcntl$notify(r4, 0x402, 0x8000003d) socket$nl_generic(0x10, 0x3, 0x10) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000007c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000170900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}}, 0x2000c450) sendmsg$NFT_BATCH(r7, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000d80)=ANY=[@ANYBLOB="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"], 0x18c}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840) sendto$unix(0xffffffffffffffff, &(0x7f0000000580)="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", 0xfe, 0x1, &(0x7f0000000680)=@file={0x0, './file0\x00'}, 0x6e) r8 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x4, 0x1, 0x9f, 0x4}]}) close_range(r8, 0xffffffffffffffff, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f0000000740), 0xffffffffffffffff) 239.49192ms ago: executing program 0 (id=2141): r0 = socket$packet(0x11, 0x2, 0x300) r1 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x11, 0x1, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000660000000000"], 0x0, 0x7ff}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r3}, 0x10) r4 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00'}, 0x80) r5 = bpf$ITER_CREATE(0xb, &(0x7f00000004c0)={r4}, 0x8) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r1) sendmsg$NL80211_CMD_REGISTER_FRAME(r1, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000180)={&(0x7f0000000840)=ANY=[@ANYBLOB="e9f00000", @ANYRES16=r6, @ANYBLOB="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"], 0x104}, 0x1, 0x0, 0x0, 0x48004}, 0x4004004) close(r5) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r4, 0x8, 0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) bpf$LINK_DETACH(0x22, 0x0, 0x0) syz_clone(0x40000000, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$LINK_DETACH(0x22, 0x0, 0x0) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) r7 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000380)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) keyctl$read(0xb, r7, &(0x7f0000000200)=""/236, 0xec) mmap(&(0x7f0000001000/0x3000)=nil, 0x30000, 0x0, 0x11, r0, 0x0) mremap(&(0x7f0000003000/0x1000)=nil, 0x1000, 0x1000, 0x3, &(0x7f0000007000/0x1000)=nil) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095dce64fe7a8577aa73e8e5a14936aa1e8220072a92e11b7541ff97f89251d68f69c8368eb01e2e6bb79a04b"], 0x0}, 0x94) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000b40)='neigh_create\x00', r9}, 0x10) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000b40)='neigh_create\x00', r10}, 0x10) write(0xffffffffffffffff, &(0x7f00000002c0)="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", 0xfc) syz_clone(0x2800400, 0x0, 0x0, 0x0, 0x0, 0x0) 237.51058ms ago: executing program 1 (id=2142): bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000910441000000000095000072"], 0x0, 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000007000000080000000800000005"], 0x48) r1 = openat$selinux_create(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$selinux_create(r1, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000e00)={0x11, 0xc, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000100000000000000fe0018110000", @ANYRES32=r0, @ANYRES8=r0, @ANYRESHEX=r1], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) getpgrp(0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32, @ANYBLOB], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) writev(0xffffffffffffffff, &(0x7f00000003c0)=[{&(0x7f0000000240)="3900000013000318680907070000000f0000ff3f04000000170a001700000000040037000f00030001332564aaee7b1d58b9a64411f6bbf44d", 0x39}], 0x1) r2 = socket(0x10, 0x3, 0x9) connect$netlink(r2, &(0x7f00000014c0)=@proc={0x10, 0x0, 0x25dfdbfc}, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000001c0)={&(0x7f0000000080), 0xc, &(0x7f0000000180)={&(0x7f0000002100)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [], {0x14}}, 0x28}}, 0x0) 221.351731ms ago: executing program 2 (id=2143): syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000600)='./file0\x00', 0x80c890, &(0x7f0000000140)=ANY=[@ANYRES8=0x0], 0x1, 0x30e, &(0x7f0000000f00)="$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") r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x40, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1002, 0x12) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000006"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000019007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r4}, 0x10) r5 = socket$kcm(0x29, 0x2, 0x0) sendmmsg$inet(r5, &(0x7f0000000780)=[{{0x0, 0x0, &(0x7f0000000b00)=[{&(0x7f0000000080)="da", 0x1}], 0x1, &(0x7f0000000040)=ANY=[], 0xd0}}, {{0x0, 0x0, &(0x7f0000000280)=[{&(0x7f00000001c0)='/', 0x1}], 0x1}}], 0x2, 0x0) close(r5) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000020000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000030000009500000000fdff00"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x28, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYRESDEC=r6, @ANYRESDEC=r0], 0x50) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000004c0)={r7, &(0x7f0000000340), &(0x7f00000005c0)=""/155}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r7], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000400)='sched_switch\x00', r8}, 0x18) write(r2, &(0x7f0000000a00)="c7885a8f24f458bed7211672288cfc5eb321cf4074dc131b8e11e775ef7ff118fe916e4017771c3d08", 0x29) sendfile(r2, r1, 0x0, 0x3ffff) sendfile(r2, r1, 0x0, 0x7ffff000) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) pipe(&(0x7f0000000000)) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000000000f7850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000700)=ANY=[@ANYBLOB="9feb01001800000000000000200000002000000002000000000000000100000d0a00800000010000000000000000000000000005000000000000b9ae59f0bb5d482a60c4eea826c587bf1428c8bf6ff5448a4b88d38adb22175d993c920b011f0567bb2b372dfffa17fc3a877b1da5750916fc9994d936d06fd7a8dd25c6ab8edb62d3803f80c8f981210b2089727d0a5ffd7867ad2eebfa9bdef18fcdf42f3be1339025d00dbe397d084b87ab8084bbbcca325c90eebf2371ef11d510c6ec0145d71f7fb4f251bc0efa7d03a01303e600ca31bc3e2a6669c285c4b5e40e25dbc4b5dcc80815eb004b8cd25eec07e9d62b8658ee3cc99011"], &(0x7f0000000f40)=""/4074, 0x3a, 0xfea, 0x1}, 0x28) r10 = socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r10) sendmsg$TIPC_CMD_ENABLE_BEARER(r10, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r11, @ANYBLOB="010000000d0000000000010000000000000001410000001c0017"], 0x38}}, 0x0) sendmsg$NFNL_MSG_CTHELPER_NEW(r9, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000480)=ANY=[@ANYRES16=r9], 0x70}}, 0x671b15abd97e4cb0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)) 194.921053ms ago: executing program 1 (id=2144): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x6, 0x4, 0x8, 0xc}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000067b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000200)='cpuset.mem_hardwall\x00', 0x2, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, &(0x7f0000000100), 0x0, 0xfe, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000380)={'erspan0\x00', &(0x7f0000000340)={'ip_vti0\x00', 0x0, 0x40, 0x0, 0x0, 0x4, {{0x8, 0x4, 0x3, 0x2b, 0x20, 0x66, 0x1, 0x9, 0x29, 0x0, @loopback, @multicast2, {[@generic={0x83, 0x7, "19e2f3ee6a"}, @noop, @ra={0x94, 0x4}]}}}}}) sendmsg$nl_route(r2, &(0x7f0000000440)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)=@ipv4_getaddr={0x2c, 0x16, 0x400, 0x70bd28, 0x25dfdbfe, {0x2, 0x18, 0x50, 0xc8, r3}, [@IFA_CACHEINFO={0x14, 0x6, {0x9, 0x2, 0x80000001, 0x4}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000000}, 0x8040) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip6tnl0\x00', 0x210}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r4, 0x89f1, &(0x7f0000000080)) 131.343985ms ago: executing program 1 (id=2145): bpf$PROG_LOAD(0x5, &(0x7f0000000b80)={0x11, 0xc, &(0x7f0000000240)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000840)='GPL\x00', 0x1, 0x0, 0x0, 0x41000, 0x5, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000300)='kfree\x00', r0}, 0x10) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000001c0)={&(0x7f0000000140), 0xc, &(0x7f0000000180)={&(0x7f0000001700)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWOBJ={0x1c, 0x12, 0xa, 0x101, 0x0, 0x0, {0x2, 0x0, 0x9}, @NFT_OBJECT_SECMARK=@NFTA_OBJ_TYPE={0x8}}, @NFT_MSG_NEWRULE={0x230, 0x6, 0xa, 0x5, 0x0, 0x0, {0x1, 0x0, 0xa}, [@NFTA_RULE_ID={0x8, 0x9, 0x1, 0x0, 0x2}, @NFTA_RULE_EXPRESSIONS={0x20c, 0x4, 0x0, 0x1, [{0x1e4, 0x1, 0x0, 0x1, @target={{0xb}, @val={0x1d4, 0x2, 0x0, 0x1, [@NFTA_TARGET_REV={0x8}, @NFTA_TARGET_INFO={0x50, 0x3, "9fd135d4292dfa9d4d664323a7ea4cc2bd51fb724533583d026d6fa1dae69e3c2e88bf83442095a1d347e8de0dcc51288147564f041c9f95c5d30af68c8cf32f3ee1d57ab5991af75c56b4e0"}, @NFTA_TARGET_NAME={0xc, 0x1, 'SECMARK\x00'}, @NFTA_TARGET_INFO={0x6f, 0x3, "1311e8b65b2adf802b2ab9038fd0972114f2220ba37c986fe7365d99a19ef6086921ba18e30245d5d31dea881afb34d8931a7b72289d610ea3fb7c9a940908f2b5a8d875fd87ff8a6505822a41c5045f85a49dd385661df52dbe0ee8e522404da8b0173b7899c5c6af7f96"}, @NFTA_TARGET_NAME={0xa, 0x1, 'HMARK\x00'}, @NFTA_TARGET_INFO={0xf0, 0x3, "fb1f9f6c166bf3aa28051cc68960297c6fee4df79ff5b052364c0d55173dd0bbf64d1f87230a79104ac7d30b1ee3cce2664193fdad1e8d60a86f83a50e7a80fd314bfb619eb2e8d0ce7d25026eec376bf2c90eb24e9c48b2bd435535098b927d7dc02c0d054f3c7b53978805b04b29ef06c120a0285f73eb876a81acd5629d0443b80027ebb6e53c9af58363238cd4b59ba4e9f91651cd269b44b05fe457554bd195eed7a00baa2728941d7ed00ddcb1ab7410703e168b48e69b580dc8360495147cada48d539f80f03e175d67a18f3dc1473ac6e5293271109d8204b2aa134dab2453fcdd219ea291f307ca"}]}}}, {0x24, 0x1, 0x0, 0x1, @socket={{0xb}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_SOCKET_KEY={0x8}, @NFTA_SOCKET_LEVEL={0x8, 0x3, 0xe7}]}}}]}, @NFTA_RULE_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x2}]}, @NFT_MSG_NEWFLOWTABLE={0x20, 0x16, 0xa, 0x101, 0x0, 0x0, {0x3}, [@NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x4a4, 0x6, 0xa, 0x401, 0x0, 0x0, {0x5, 0x0, 0x4}, [@NFTA_RULE_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x2}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_ID={0x8, 0x9, 0x1, 0x0, 0x1}, @NFTA_RULE_COMPAT={0x44, 0x5, 0x0, 0x1, [@NFTA_RULE_COMPAT_PROTO_IPV4={0x8, 0x1, 0x1, 0x0, 0x3f}, @NFTA_RULE_COMPAT_PROTO_BRIDGE={0x8, 0x1, 0x1, 0x0, 0x17}, @NFTA_RULE_COMPAT_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_RULE_COMPAT_PROTO_IPV6={0x8, 0x1, 0x1, 0x0, 0x2f}, @NFTA_RULE_COMPAT_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_RULE_COMPAT_PROTO_BRIDGE={0x8, 0x1, 0x1, 0x0, 0xea8a867f4386ca85}, @NFTA_RULE_COMPAT_PROTO_BRIDGE={0x8, 0x1, 0x1, 0x0, 0x892f}, @NFTA_RULE_COMPAT_PROTO_BRIDGE={0x8, 0x1, 0x1, 0x0, 0x4}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x410, 0x4, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @queue={{0xa}, @void}}, {0x1c, 0x1, 0x0, 0x1, @objref={{0xb}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_OBJREF_IMM_TYPE={0x8, 0x1, 0x1, 0x0, 0x9}]}}}, {0x334, 0x1, 0x0, 0x1, @dynset={{0xb}, @val={0x324, 0x2, 0x0, 0x1, [@NFTA_DYNSET_EXPRESSIONS={0x90, 0xa, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, @inner={{0xa}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_INNER_NUM={0x8}]}}}, {0x10, 0x1, 0x0, 0x1, @xfrm={{0x9}, @void}}, {0x44, 0x1, 0x0, 0x1, @last={{0x9}, @val={0x34, 0x2, 0x0, 0x1, [@NFTA_LAST_MSECS={0xc, 0x2, 0x1, 0x0, 0xc4}, @NFTA_LAST_SET={0x8}, @NFTA_LAST_MSECS={0xc, 0x2, 0x1, 0x0, 0x3}, @NFTA_LAST_SET={0x8, 0x1, 0x1, 0x0, 0x17}, @NFTA_LAST_SET={0x8, 0x1, 0x1, 0x0, 0x4}]}}}, {0x1c, 0x1, 0x0, 0x1, @match={{0xa}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_MATCH_REV={0x8, 0x2, 0x1, 0x0, 0x2}]}}}]}, @NFTA_DYNSET_SET_ID={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_DYNSET_EXPRESSIONS={0xe8, 0xa, 0x0, 0x1, [{0x30, 0x1, 0x0, 0x1, @dup={{0x8}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0x15}, @NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0x3}, @NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0x15}, @NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0x10}]}}}, {0x40, 0x1, 0x0, 0x1, @flow_offload={{0x11}, @val={0x28, 0x2, 0x0, 0x1, [@NFTA_FLOW_TABLE_NAME={0x9, 0x1, 'syz1\x00'}, @NFTA_FLOW_TABLE_NAME={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOW_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}}}, {0x28, 0x1, 0x0, 0x1, @flow_offload={{0x11}, @val={0x10, 0x2, 0x0, 0x1, [@NFTA_FLOW_TABLE_NAME={0x9, 0x1, 'syz2\x00'}]}}}, {0x2c, 0x1, 0x0, 0x1, @socket={{0xb}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_SOCKET_KEY={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_SOCKET_DREG={0x8, 0x2, 0x1, 0x0, 0x3}, @NFTA_SOCKET_KEY={0x8, 0x1, 0x1, 0x0, 0x1}]}}}, {0x10, 0x1, 0x0, 0x1, @socket={{0xb}, @void}}, {0x10, 0x1, 0x0, 0x1, @quota={{0xa}, @void}}]}, @NFTA_DYNSET_TIMEOUT={0xc, 0x6, 0x1, 0x0, 0xffff}, @NFTA_DYNSET_TIMEOUT={0xc, 0x6, 0x1, 0x0, 0x7fffffff}, @NFTA_DYNSET_FLAGS={0x8, 0x9, 0x1, 0x0, 0x2}, @NFTA_DYNSET_EXPRESSIONS={0x16c, 0xa, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, @numgen={{0xb}, @val={0x4}}}, {0x60, 0x1, 0x0, 0x1, @cmp={{0x8}, @val={0x54, 0x2, 0x0, 0x1, [@NFTA_CMP_SREG={0x8, 0x1, 0x1, 0x0, 0x12}, @NFTA_CMP_OP={0x8, 0x2, 0x1, 0x0, 0x4}, @NFTA_CMP_OP={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_CMP_SREG={0x8, 0x1, 0x1, 0x0, 0xd}, @NFTA_CMP_SREG={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_CMP_DATA={0x20, 0x3, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x1c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}]}]}, @NFTA_CMP_SREG={0x8, 0x1, 0x1, 0x0, 0xa}]}}}, {0x38, 0x1, 0x0, 0x1, @dup_ipv4={{0x8}, @val={0x2c, 0x2, 0x0, 0x1, [@NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0x8}, @NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0x11}, @NFTA_DUP_SREG_ADDR={0x8, 0x1, 0x1, 0x0, 0xc}, @NFTA_DUP_SREG_ADDR={0x8, 0x1, 0x1, 0x0, 0x992e4db50a01024e}, @NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0x1}]}}}, {0x5c, 0x1, 0x0, 0x1, @queue={{0xa}, @val={0x4c, 0x2, 0x0, 0x1, [@NFTA_QUEUE_SREG_QNUM={0x8, 0x4, 0x1, 0x0, 0xc}, @NFTA_QUEUE_TOTAL={0x6, 0x2, 0x1, 0x0, 0x6}, @NFTA_QUEUE_TOTAL={0x6, 0x2, 0x1, 0x0, 0x2}, @NFTA_QUEUE_NUM={0x6, 0x1, 0x1, 0x0, 0x4}, @NFTA_QUEUE_FLAGS={0x6, 0x3, 0x1, 0x0, 0x1}, @NFTA_QUEUE_NUM={0x6, 0x1, 0x1, 0x0, 0x2}, @NFTA_QUEUE_NUM={0x6, 0x1, 0x1, 0x0, 0xfff7}, @NFTA_QUEUE_NUM={0x6, 0x1, 0x1, 0x0, 0x81}, @NFTA_QUEUE_NUM={0x6, 0x1, 0x1, 0x0, 0x4}]}}}, {0x14, 0x1, 0x0, 0x1, @notrack={{0xc}, @val={0x4, 0x2, 0x0, 0x1, ["", "", "", "", ""]}}}, {0x30, 0x1, 0x0, 0x1, @dup_ipv6={{0x8}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_DUP_SREG_ADDR={0x8, 0x1, 0x1, 0x0, 0x15}, @NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0x8}, @NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0x3}, @NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0x11}]}}}, {0x1c, 0x1, 0x0, 0x1, @meta={{0x9}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_META_KEY={0x8, 0x2, 0x1, 0x0, 0x3}]}}}]}, @NFTA_DYNSET_FLAGS={0x8}, @NFTA_DYNSET_TIMEOUT={0xc, 0x6, 0x1, 0x0, 0x94f8}]}}}, {0x30, 0x1, 0x0, 0x1, @rt={{0x7}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_RT_KEY={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_RT_DREG={0x8, 0x1, 0x1, 0x0, 0xc}, @NFTA_RT_DREG={0x8, 0x1, 0x1, 0x0, 0x17}, @NFTA_RT_DREG={0x8, 0x1, 0x1, 0x0, 0x15}]}}}, {0x10, 0x1, 0x0, 0x1, @tunnel={{0xb}, @void}}, {0x34, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_TYPE={0x5, 0x2, 0x83}, @NFTA_EXTHDR_DREG={0x8, 0x1, 0x1, 0x0, 0x11}, @NFTA_EXTHDR_OP={0x8, 0x6, 0x1, 0x0, 0x2}, @NFTA_EXTHDR_LEN={0x8, 0x4, 0x1, 0x0, 0xb3}]}}}, {0x24, 0x1, 0x0, 0x1, @tunnel={{0xb}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_TUNNEL_MODE={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_TUNNEL_MODE={0x8, 0x3, 0x1, 0x0, 0x1}]}}}, {0x14, 0x1, 0x0, 0x1, @notrack={{0xc}, @val={0x4, 0x2, 0x0, 0x1, ["", "", ""]}}}]}, @NFTA_RULE_HANDLE={0xc, 0x3, 0x1, 0x0, 0x2}, @NFTA_RULE_ID={0x8, 0x9, 0x1, 0x0, 0x2}]}, @NFT_MSG_NEWRULE={0x38, 0x6, 0xa, 0x801, 0x0, 0x0, {0x7, 0x0, 0x2}, [@NFTA_RULE_ID={0x8, 0x9, 0x1, 0x0, 0x2}, @NFTA_RULE_ID={0x8, 0x9, 0x1, 0x0, 0x3}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_RULE_ID={0x8, 0x9, 0x1, 0x0, 0x3}]}, @NFT_MSG_NEWSET={0x1c0, 0x9, 0xa, 0x801, 0x0, 0x0, {0x1, 0x0, 0x5}, [@NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x10}, @NFTA_SET_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_SET_HANDLE={0xc, 0x10, 0x1, 0x0, 0x5}, @NFTA_SET_DESC={0x184, 0x9, 0x0, 0x1, [@NFTA_SET_DESC_CONCAT={0x178, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x3}]}, {0x44, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x10000}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x70ee}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x80000000}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x4}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x4}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7bb}, @NFTA_SET_FIELD_LEN={0x8}]}, {0x44, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x70aa}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x6}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xffffffff}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x5}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x66}]}, {0x2c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x6}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x43a}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xc31}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xc75}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x10001}]}, {0x34, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x100}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xf}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x3ff}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x80000001}]}, {0xc, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xbd9}]}, {0x24, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xfffffffd}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xf5a1}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x5}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x5}]}, {0xc, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x4}]}, {0x44, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x95a}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x5}, @NFTA_SET_FIELD_LEN={0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7b}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x49d}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xd}, @NFTA_SET_FIELD_LEN={0x8}]}]}, @NFTA_SET_DESC_SIZE={0x8, 0x1, 0x1, 0x0, 0x2}]}, @NFTA_SET_DATA_TYPE={0x8, 0x6, 0x1, 0x0, 0xffffff00}]}, @NFT_MSG_DELTABLE={0x14, 0x2, 0xa, 0x201, 0x0, 0x0, {0xa, 0x0, 0x1}}, @NFT_MSG_DELSETELEM={0x40, 0xe, 0xa, 0x101, 0x0, 0x0, {0x5, 0x0, 0xa}, [@NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_SET_ID={0x8}]}, @NFT_MSG_DELOBJ={0x94, 0x14, 0xa, 0x5, 0x0, 0x0, {0x1, 0x0, 0xa}, [@NFTA_OBJ_USERDATA={0x24, 0x8, "1dfed412832666e0c8760df22438e687ba33cdcba62cfd26c3b478e3dfc501d1"}, @NFTA_OBJ_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_OBJ_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0xa}, @NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_OBJ_USERDATA={0x4}, @NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x3}, @NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x3}, @NFTA_OBJ_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_OBJ_NAME={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0xa18}, 0x1, 0x0, 0x0, 0xc005}, 0x800) 111.205646ms ago: executing program 1 (id=2146): socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000800), 0xffffffffffffffff) (async) r0 = fsopen(&(0x7f0000000080)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) (async, rerun: 32) r1 = fsmount(r0, 0x0, 0x18) (rerun: 32) symlinkat(&(0x7f0000000000)='.\x00', r1, &(0x7f0000000140)='./file0\x00') (async, rerun: 64) connect$inet6(0xffffffffffffffff, 0x0, 0x0) (async, rerun: 64) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x20088004, &(0x7f0000000280)={0xa, 0x4e23, 0x0, @remote, 0x7}, 0x1c) (async, rerun: 32) ioctl$USBDEVFS_DISCONNECT_CLAIM(0xffffffffffffffff, 0x8108551b, 0x0) (async, rerun: 32) sendmsg$netlink(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000240)={0x44, 0x33, 0x100, 0x70bd26, 0x25dfdbfb, "", [@nested={0x32, 0x149, 0x0, 0x1, [@generic="a6351f7a2da1202628c49a8918fd37745b3b1470a5100e936f821ada5d0eeb8aa6ea44004e699e817483c3fd1542"]}]}, 0x44}], 0x1}, 0x0) sendmsg(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000280)='G', 0x1}], 0x1, 0x0, 0x0, 0x11000000}, 0x0) (async) r2 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r2) (async) ptrace$setregs(0xd, r2, 0x0, &(0x7f0000000540)) ptrace$cont(0x20, r2, 0x0, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (async) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48) (async, rerun: 32) bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b708000008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (rerun: 32) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r3], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (async, rerun: 64) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000780)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) (async, rerun: 64) r5 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSTI(r5, 0x5412, &(0x7f0000000100)=0xff) (async) r6 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TCSETSW2(r6, 0x402c542c, &(0x7f0000000200)={0xffffffd1, 0x2, 0x2, 0x831a, 0x4, "aaa700000000000000049dd0ffd76d7fcb0b0e", 0x6, 0x201}) ioctl$TIOCSTI(r6, 0x5412, &(0x7f0000000000)=0xff) r7 = syz_genetlink_get_family_id$smc(&(0x7f00000001c0), r1) sendmsg$SMC_PNETID_ADD(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000240)={&(0x7f00000004c0)={0x94, r7, 0x200, 0x70bd28, 0x25dfdbff, {}, [@SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_NAME={0x9, 0x1, 'syz0\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'syzkaller0\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'veth1_to_team\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'xfrm0\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'erspan0\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz0\x00'}]}, 0x94}, 0x1, 0x0, 0x0, 0x88a0}, 0x4000004) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r4}, 0x10) getcwd(&(0x7f0000000000)=""/137, 0x89) 46.650049ms ago: executing program 1 (id=2147): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000009c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x41) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) prctl$PR_SET_NAME(0xf, &(0x7f00000001c0)='w\xde\xa3\x05\xff\a\x00\x00\x00\x00\x00\x00\x8f\xc0\x9b\x86\xef\\\xc0\x89\av\x9f\xd6\xd1\x98,\xc8\x18E/\x8c\x1a\xe3\xbd') r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000780)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="0100000000000000000005000000180001801400020073797a5f74756e000000080000000000180003"], 0x44}}, 0x0) 46.074329ms ago: executing program 1 (id=2148): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) r2 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x34120, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x4000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000940), 0x0, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) open_tree(r4, &(0x7f0000000980)='./file0\x00', 0x0) r5 = dup(r3) sendmsg$inet(r5, 0x0, 0x0) read$char_usb(r5, &(0x7f0000000180)=""/147, 0xfdef) ioctl$TUNSETCARRIER(r5, 0x400454e2, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r6}, &(0x7f0000000180), &(0x7f00000001c0)=r2}, 0x20) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r9}, 0x18) r10 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000340), r7) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000800)={r8, 0xe0, &(0x7f0000000700)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, &(0x7f0000000400)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x5, 0x8, &(0x7f0000000540)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000580)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xd0, &(0x7f00000005c0)=[{}, {}, {}, {}, {}, {}, {}, {}, {}], 0x48, 0x10, &(0x7f0000000640), &(0x7f0000000680), 0x8, 0x9, 0x8, 0x8, &(0x7f00000006c0)}}, 0x10) sendmsg$ETHTOOL_MSG_COALESCE_GET(r8, &(0x7f0000000900)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000008c0)={&(0x7f0000000840)={0x80, r10, 0x100, 0x70bd2a, 0x25dfdbfc, {}, [@HEADER={0x6c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ipvlan1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r11}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_hsr\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}]}, 0x80}, 0x1, 0x0, 0x0, 0x20008000}, 0x20000000) r12 = syz_open_dev$usbfs(&(0x7f0000000100), 0x77, 0x141301) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480), 0x4) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={0x0}, 0x18) ioctl$USBDEVFS_CONTROL(r12, 0xc0105500, &(0x7f00000000c0)={0x80, 0x17, 0x6, 0x3, 0x0, 0x6e9, 0x0}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'ip6gretap0\x00', 0x0}) setsockopt$inet6_mreq(r1, 0x29, 0x1b, &(0x7f0000000280)={@remote, r13}, 0x14) dup2(r0, r1) 0s ago: executing program 0 (id=2149): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0xfe, 0x0, 0x7ffc9ffe}]}) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="1b000000000000"], 0x48) ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000000180)={{0x1, 0x1, 0x18, r0, {0x3, 0x9}}, './file0\x00'}) r1 = syz_open_dev$evdev(&(0x7f00000002c0), 0xc000, 0x142) ioctl$EVIOCGRAB(r1, 0x40044590, &(0x7f0000000080)=0x76960bb5) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) link(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280)='./file0\x00') r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000007000000080000000800000005"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x11, 0xc, &(0x7f0000000140)=ANY=[@ANYRESHEX=r1, @ANYRESHEX=r2, @ANYBLOB="0065000000000000b708000000000e007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000002085000000010006000000000000000974c2e5df24bdf922063e165e045ffaad46911167b73f5b2eb8fab15c12c4"], &(0x7f0000000240)='GPL\x00', 0x10000, 0x0, 0x0, 0x41000, 0x32, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffff4}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r3}, 0x10) open(&(0x7f0000000100)='.\x00', 0x501343, 0x111) socket$pppl2tp(0x18, 0x1, 0x1) r4 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) r5 = socket$inet(0x2, 0x1, 0x100) setsockopt$sock_int(r5, 0x1, 0x2, &(0x7f0000000040)=0x7f, 0x4) bind$inet(r5, &(0x7f0000e15000)={0x2, 0x4e20, @multicast2}, 0x10) r6 = socket$inet(0x2, 0x1, 0x0) setsockopt$sock_int(r6, 0x1, 0x2, &(0x7f0000000040)=0x7f, 0x4) bind$inet(r5, &(0x7f0000e15000)={0x2, 0x4e20, @private=0xa010100}, 0x10) listen(r5, 0x0) fcntl$notify(r4, 0x402, 0x8000003d) socket$nl_generic(0x10, 0x3, 0x10) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000007c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000170900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}}, 0x2000c450) sendmsg$NFT_BATCH(r7, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000d80)=ANY=[@ANYBLOB="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"], 0x18c}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840) sendto$unix(0xffffffffffffffff, &(0x7f0000000580)="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", 0xfe, 0x1, &(0x7f0000000680)=@file={0x0, './file0\x00'}, 0x6e) r8 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x4, 0x1, 0x9f, 0x4}]}) close_range(r8, 0xffffffffffffffff, 0x0) kernel console output (not intermixed with test programs): 2.068336][ T6207] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=6207 comm=syz.4.912 [ 82.080800][ T6207] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=6207 comm=syz.4.912 [ 82.124758][ T6209] loop4: detected capacity change from 0 to 512 [ 82.132672][ T6209] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 82.148354][ T6209] ext4 filesystem being mounted at /180/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 82.220682][ T6164] syz.2.894 (6164) used greatest stack depth: 7496 bytes left [ 82.253017][ T6218] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 82.273004][ T6218] loop1: detected capacity change from 0 to 136 [ 82.295817][ T6218] team0: Unable to change to the same mode the team is in [ 82.354936][ T6225] loop0: detected capacity change from 0 to 512 [ 82.398743][ T6225] ext4 filesystem being mounted at /186/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 82.443040][ T6228] loop3: detected capacity change from 0 to 1024 [ 82.463129][ T6239] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=6239 comm=syz.4.923 [ 82.475647][ T6239] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=6239 comm=syz.4.923 [ 82.509702][ T6228] EXT4-fs: Ignoring removed mblk_io_submit option [ 82.542644][ T6228] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 82.560580][ T6235] vhci_hcd: default hub control req: 8017 v0006 i0003 l0 [ 82.650280][ T6246] loop0: detected capacity change from 0 to 512 [ 82.669107][ T6252] loop4: detected capacity change from 0 to 512 [ 82.692605][ T6246] ext4 filesystem being mounted at /188/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 82.707581][ T6252] EXT4-fs: Ignoring removed nobh option [ 82.743107][ T6252] EXT4-fs error (device loop4): ext4_do_update_inode:5632: inode #3: comm syz.4.929: corrupted inode contents [ 82.766964][ T6252] EXT4-fs (loop4): Remounting filesystem read-only [ 82.789560][ T6252] EXT4-fs (loop4): 1 truncate cleaned up [ 82.806689][ T6252] ext4 filesystem being mounted at /184/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 82.827418][ T6263] loop2: detected capacity change from 0 to 512 [ 82.839859][ T6263] ext4 filesystem being mounted at /181/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 82.856013][ T6265] macvtap7: entered allmulticast mode [ 82.862098][ T6265] batman_adv: batadv0: Adding interface: macvtap7 [ 82.868562][ T6265] batman_adv: batadv0: The MTU of interface macvtap7 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 82.902632][ T6265] batman_adv: batadv0: Interface activated: macvtap7 [ 83.007416][ T6276] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=6276 comm=syz.4.936 [ 83.019869][ T6276] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=6276 comm=syz.4.936 [ 83.029105][ T6274] vhci_hcd: default hub control req: 8017 v0006 i0003 l0 [ 83.040078][ T6281] hub 1-0:1.0: USB hub found [ 83.049708][ T6281] hub 1-0:1.0: 8 ports detected [ 83.056224][ T6284] sch_tbf: burst 4398 is lower than device lo mtu (65550) ! [ 83.210712][ T6302] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 83.231230][ T6302] loop2: detected capacity change from 0 to 136 [ 83.241670][ T6302] team0: Unable to change to the same mode the team is in [ 83.373871][ T6305] loop3: detected capacity change from 0 to 1024 [ 83.385184][ T6305] EXT4-fs: Ignoring removed mblk_io_submit option [ 83.398169][ T6305] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 83.499802][ T29] kauditd_printk_skb: 639 callbacks suppressed [ 83.499816][ T29] audit: type=1400 audit(1763855708.052:3553): avc: denied { map } for pid=6304 comm="syz.3.948" path="/204/file0/cgroup.controllers" dev="loop3" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 83.532870][ T29] audit: type=1400 audit(1763855708.052:3554): avc: denied { write } for pid=6304 comm="syz.3.948" path="/204/file0/cgroup.controllers" dev="loop3" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 83.734423][ T29] audit: type=1326 audit(1763855708.282:3555): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6343 comm="syz.1.963" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faf25b8f749 code=0x7ffc0000 [ 83.757965][ T29] audit: type=1326 audit(1763855708.282:3556): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6343 comm="syz.1.963" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faf25b8f749 code=0x7ffc0000 [ 83.794534][ T29] audit: type=1326 audit(1763855708.342:3557): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6343 comm="syz.1.963" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7faf25b8f749 code=0x7ffc0000 [ 83.817989][ T29] audit: type=1326 audit(1763855708.342:3558): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6343 comm="syz.1.963" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faf25b8f749 code=0x7ffc0000 [ 83.841397][ T29] audit: type=1326 audit(1763855708.342:3559): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6343 comm="syz.1.963" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faf25b8f749 code=0x7ffc0000 [ 83.864743][ T29] audit: type=1326 audit(1763855708.342:3560): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6343 comm="syz.1.963" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7faf25b8f749 code=0x7ffc0000 [ 83.888131][ T29] audit: type=1326 audit(1763855708.342:3561): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6343 comm="syz.1.963" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faf25b8f749 code=0x7ffc0000 [ 83.911538][ T29] audit: type=1326 audit(1763855708.342:3562): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6343 comm="syz.1.963" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7faf25b8df90 code=0x7ffc0000 [ 84.031553][ T6354] netlink: 8 bytes leftover after parsing attributes in process `syz.3.969'. [ 84.057329][ T6356] netlink: 5 bytes leftover after parsing attributes in process `syz.4.970'. [ 84.066385][ T6356] 0ªî{X¹¦: renamed from 31ªî{X¹¦ (while UP) [ 84.087970][ T6356] A link change request failed with some changes committed already. Interface 30ªî{X¹¦ may have been left with an inconsistent configuration, please check. [ 84.109088][ T6356] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=6356 comm=syz.4.970 [ 84.201988][ T6373] vhci_hcd: default hub control req: 8017 v0006 i0003 l0 [ 84.231435][ T6378] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 84.253930][ T6378] loop1: detected capacity change from 0 to 136 [ 84.274993][ T6380] loop2: detected capacity change from 0 to 512 [ 84.284646][ T6378] team0: Unable to change to the same mode the team is in [ 84.297027][ T6380] ext4 filesystem being mounted at /199/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 84.534040][ T6398] loop2: detected capacity change from 0 to 1024 [ 84.560492][ T6398] EXT4-fs: Ignoring removed mblk_io_submit option [ 84.585775][ T6398] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 84.621158][ T6411] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 84.648682][ T6411] loop1: detected capacity change from 0 to 136 [ 84.666740][ T6411] team0: Unable to change to the same mode the team is in [ 84.741946][ T6398] netlink: 'syz.2.988': attribute type 21 has an invalid length. [ 84.805124][ T6420] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 84.856917][ T6429] loop1: detected capacity change from 0 to 136 [ 84.877090][ T6428] 1ªî{X¹¦: renamed from 30ªî{X¹¦ (while UP) [ 84.895226][ T6420] team0: Unable to change to the same mode the team is in [ 85.003300][ T6438] loop3: detected capacity change from 0 to 136 [ 85.034497][ T6438] team0: Unable to change to the same mode the team is in [ 85.162426][ T6456] loop4: detected capacity change from 0 to 512 [ 85.176572][ T6457] sch_tbf: burst 4398 is lower than device lo mtu (65550) ! [ 85.200897][ T6456] ext4 filesystem being mounted at /193/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 85.246183][ T6443] loop0: detected capacity change from 0 to 1024 [ 85.267587][ T6443] EXT4-fs: Ignoring removed mblk_io_submit option [ 85.282406][ T6443] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 85.420534][ T6479] vhci_hcd: default hub control req: 8017 v0006 i0003 l0 [ 85.666429][ T6502] net_ratelimit: 2 callbacks suppressed [ 85.666449][ T6502] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 85.677411][ T6504] __nla_validate_parse: 3 callbacks suppressed [ 85.677431][ T6504] netlink: 5 bytes leftover after parsing attributes in process `syz.1.1032'. [ 85.693897][ T6502] loop3: detected capacity change from 0 to 136 [ 85.697388][ T6504] 1ªî{X¹¦: renamed from 30ªî{X¹¦ (while UP) [ 85.730989][ T6504] A link change request failed with some changes committed already. Interface 31ªî{X¹¦ may have been left with an inconsistent configuration, please check. [ 85.747095][ T6502] team0: Unable to change to the same mode the team is in [ 85.897368][ T6521] loop0: detected capacity change from 0 to 512 [ 85.918548][ T6521] ext4 filesystem being mounted at /208/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 86.007909][ T6536] netlink: 5 bytes leftover after parsing attributes in process `syz.1.1048'. [ 86.017640][ T6536] 0ªî{X¹¦: renamed from 31ªî{X¹¦ (while UP) [ 86.027818][ T6536] A link change request failed with some changes committed already. Interface 30ªî{X¹¦ may have been left with an inconsistent configuration, please check. [ 86.221190][ T6549] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1054'. [ 86.245568][ T6559] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 86.277872][ T6561] loop0: detected capacity change from 0 to 512 [ 86.297670][ T6561] ext4 filesystem being mounted at /211/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 86.330783][ T6559] netlink: 'syz.4.1058': attribute type 17 has an invalid length. [ 86.360172][ T6559] A link change request failed with some changes committed already. Interface ip_vti0 may have been left with an inconsistent configuration, please check. [ 86.593590][ T6593] netlink: 5 bytes leftover after parsing attributes in process `syz.1.1072'. [ 86.621711][ T6593] 1ªî{X¹¦: renamed from 30ªî{X¹¦ (while UP) [ 86.647819][ T6596] selinux_netlink_send: 7 callbacks suppressed [ 86.647835][ T6596] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=6596 comm=syz.1.1072 [ 86.666475][ T6596] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=6596 comm=syz.1.1072 [ 86.680662][ T6593] A link change request failed with some changes committed already. Interface 31ªî{X¹¦ may have been left with an inconsistent configuration, please check. [ 86.850747][ T6611] netlink: 5 bytes leftover after parsing attributes in process `syz.0.1080'. [ 86.863732][ T6611] 0ªî{X¹¦: renamed from 31ªî{X¹¦ (while UP) [ 86.871998][ T6611] A link change request failed with some changes committed already. Interface 30ªî{X¹¦ may have been left with an inconsistent configuration, please check. [ 86.893647][ T6611] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=6611 comm=syz.0.1080 [ 86.906276][ T6611] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=6611 comm=syz.0.1080 [ 86.969963][ T6623] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=6623 comm=syz.0.1085 [ 86.982621][ T6623] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=6623 comm=syz.0.1085 [ 87.012995][ T6621] loop1: detected capacity change from 0 to 512 [ 87.021281][ T6621] EXT4-fs: Ignoring removed nobh option [ 87.057466][ T6631] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=6631 comm=syz.0.1090 [ 87.070121][ T6631] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=6631 comm=syz.0.1090 [ 87.084675][ T6621] EXT4-fs error (device loop1): ext4_do_update_inode:5632: inode #3: comm syz.1.1086: corrupted inode contents [ 87.104772][ T6621] EXT4-fs (loop1): Remounting filesystem read-only [ 87.112217][ T6621] EXT4-fs (loop1): 1 truncate cleaned up [ 87.118650][ T6621] ext4 filesystem being mounted at /219/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 87.276099][ T6637] netlink: 'syz.2.1092': attribute type 21 has an invalid length. [ 87.291306][ T6637] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1092'. [ 87.301305][ T6637] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1092'. [ 87.325930][ T6656] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 87.359866][ T6665] loop2: detected capacity change from 0 to 512 [ 87.377676][ T6665] ext4 filesystem being mounted at /212/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 87.389612][ T6670] sch_tbf: burst 4398 is lower than device lo mtu (65550) ! [ 87.420306][ T6672] loop0: detected capacity change from 0 to 512 [ 87.427465][ T6672] EXT4-fs: Ignoring removed nobh option [ 87.461730][ T6672] EXT4-fs error (device loop0): ext4_do_update_inode:5632: inode #3: comm syz.0.1107: corrupted inode contents [ 87.500484][ T6672] EXT4-fs (loop0): Remounting filesystem read-only [ 87.512942][ T6672] EXT4-fs (loop0): 1 truncate cleaned up [ 87.519279][ T6672] ext4 filesystem being mounted at /228/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 87.562737][ T6685] sch_tbf: burst 4398 is lower than device lo mtu (65550) ! [ 87.602414][ T6691] sch_tbf: burst 4398 is lower than device lo mtu (65550) ! [ 87.647399][ T6697] loop4: detected capacity change from 0 to 1024 [ 87.684043][ T6701] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 87.703181][ T6701] loop0: detected capacity change from 0 to 136 [ 87.716352][ T6701] team0: Unable to change to the same mode the team is in [ 87.735949][ T6702] rdma_rxe: rxe_newlink: failed to add lo [ 87.752438][ T6702] EXT4-fs error (device loop4): ext4_mb_mark_diskspace_used:4193: comm syz.4.1118: Allocating blocks 497-513 which overlap fs metadata [ 87.795626][ T6706] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=6706 comm=syz.0.1121 [ 87.808230][ T6706] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=6706 comm=syz.0.1121 [ 87.883192][ T6712] loop0: detected capacity change from 0 to 512 [ 87.897772][ T6712] ext4 filesystem being mounted at /237/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 87.967117][ T6720] netlink: 5 bytes leftover after parsing attributes in process `syz.0.1127'. [ 87.976461][ T6720] 1ªî{X¹¦: renamed from 30ªî{X¹¦ (while UP) [ 87.984056][ T6720] A link change request failed with some changes committed already. Interface 31ªî{X¹¦ may have been left with an inconsistent configuration, please check. [ 88.068970][ T6726] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 88.089527][ T6726] loop1: detected capacity change from 0 to 136 [ 88.102998][ T6726] team0: Unable to change to the same mode the team is in [ 88.217309][ T6736] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1135'. [ 88.250811][ T6736] lo speed is unknown, defaulting to 1000 [ 88.327629][ T6751] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 88.425203][ T6757] loop2: detected capacity change from 0 to 512 [ 88.457436][ T6757] ext4 filesystem being mounted at /217/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 88.488842][ T6702] EXT4-fs (loop4): pa ffff888106a51b60: logic 16, phys. 129, len 24 [ 88.496994][ T6702] EXT4-fs error (device loop4): ext4_mb_release_inode_pa:5444: group 0, free 0, pa_free 1 [ 88.565110][ T6767] loop4: detected capacity change from 0 to 136 [ 88.576602][ T6767] team0: Unable to change to the same mode the team is in [ 88.594503][ T6769] sch_tbf: burst 4398 is lower than device lo mtu (65550) ! [ 88.681069][ T29] kauditd_printk_skb: 1578 callbacks suppressed [ 88.681087][ T29] audit: type=1326 audit(1763855713.232:5137): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6776 comm="syz.4.1151" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5a1055f749 code=0x7ffc0000 [ 88.711079][ T29] audit: type=1326 audit(1763855713.232:5138): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6776 comm="syz.4.1151" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5a1055f749 code=0x7ffc0000 [ 88.734587][ T29] audit: type=1326 audit(1763855713.232:5139): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6776 comm="syz.4.1151" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f5a1055f749 code=0x7ffc0000 [ 88.758109][ T29] audit: type=1326 audit(1763855713.232:5140): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6776 comm="syz.4.1151" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5a1055f749 code=0x7ffc0000 [ 88.781628][ T29] audit: type=1326 audit(1763855713.232:5141): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6776 comm="syz.4.1151" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f5a1055f749 code=0x7ffc0000 [ 88.805011][ T29] audit: type=1326 audit(1763855713.232:5142): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6776 comm="syz.4.1151" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5a1055f749 code=0x7ffc0000 [ 88.828701][ T29] audit: type=1326 audit(1763855713.232:5143): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6776 comm="syz.4.1151" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f5a1055df90 code=0x7ffc0000 [ 88.852224][ T29] audit: type=1326 audit(1763855713.232:5144): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6776 comm="syz.4.1151" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5a1055f749 code=0x7ffc0000 [ 88.875666][ T29] audit: type=1326 audit(1763855713.232:5145): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6776 comm="syz.4.1151" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f5a1055f749 code=0x7ffc0000 [ 88.899025][ T29] audit: type=1326 audit(1763855713.232:5146): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6776 comm="syz.4.1151" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5a1055f749 code=0x7ffc0000 [ 89.094529][ T6786] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1155'. [ 89.140933][ T6786] lo speed is unknown, defaulting to 1000 [ 89.176396][ T6794] loop4: detected capacity change from 0 to 512 [ 89.196245][ T6794] EXT4-fs: Ignoring removed nobh option [ 89.230709][ T6794] EXT4-fs error (device loop4): ext4_do_update_inode:5632: inode #3: comm syz.4.1158: corrupted inode contents [ 89.243240][ T6794] EXT4-fs (loop4): Remounting filesystem read-only [ 89.257991][ T6794] EXT4-fs (loop4): 1 truncate cleaned up [ 89.266056][ T6794] ext4 filesystem being mounted at /217/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 89.476638][ T6816] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 89.547211][ T6823] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 89.619774][ T6831] 9pnet_fd: Insufficient options for proto=fd [ 89.669427][ T6830] vhci_hcd: default hub control req: 8017 v0006 i0003 l0 [ 90.005921][ T6858] 0ªî{X¹¦: renamed from 31ªî{X¹¦ (while UP) [ 90.251889][ T6869] loop0: detected capacity change from 0 to 512 [ 90.267814][ T6869] ext4 filesystem being mounted at /267/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 90.689384][ T6897] loop1: detected capacity change from 0 to 1024 [ 90.722268][ T6897] EXT4-fs: Ignoring removed mblk_io_submit option [ 90.739980][ T6900] loop4: detected capacity change from 0 to 1024 [ 90.760820][ T6897] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 90.779671][ T6900] EXT4-fs: Ignoring removed mblk_io_submit option [ 90.811741][ T6900] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 90.841230][ T6919] 9pnet_fd: Insufficient options for proto=fd [ 90.861112][ T6921] net_ratelimit: 4 callbacks suppressed [ 90.861127][ T6921] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 90.883947][ T6922] sch_tbf: burst 4398 is lower than device lo mtu (65550) ! [ 90.976248][ T6900] netlink: 'syz.4.1203': attribute type 21 has an invalid length. [ 90.989535][ T6900] __nla_validate_parse: 1 callbacks suppressed [ 90.989572][ T6900] netlink: 132 bytes leftover after parsing attributes in process `syz.4.1203'. [ 91.007162][ T6900] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1203'. [ 91.140351][ T6938] loop4: detected capacity change from 0 to 1024 [ 91.159359][ T6938] EXT4-fs: Ignoring removed mblk_io_submit option [ 91.177172][ T6938] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 91.331283][ T6938] netlink: 'syz.4.1217': attribute type 21 has an invalid length. [ 91.338524][ T6951] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 91.355952][ T6938] netlink: 132 bytes leftover after parsing attributes in process `syz.4.1217'. [ 91.366051][ T6938] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1217'. [ 91.401091][ T6957] netlink: 5 bytes leftover after parsing attributes in process `syz.1.1224'. [ 91.411876][ T6957] 0ªî{X¹¦: renamed from 31ªî{X¹¦ (while UP) [ 91.422334][ T6957] A link change request failed with some changes committed already. Interface 30ªî{X¹¦ may have been left with an inconsistent configuration, please check. [ 91.489366][ T6964] loop0: detected capacity change from 0 to 512 [ 91.496242][ T6964] EXT4-fs: Ignoring removed nobh option [ 91.519323][ T6964] EXT4-fs error (device loop0): ext4_do_update_inode:5632: inode #3: comm syz.0.1227: corrupted inode contents [ 91.564590][ T6966] loop4: detected capacity change from 0 to 1024 [ 91.576680][ T6966] EXT4-fs: Ignoring removed mblk_io_submit option [ 91.588259][ T6966] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 91.597955][ T6964] EXT4-fs (loop0): Remounting filesystem read-only [ 91.608652][ T6964] EXT4-fs (loop0): 1 truncate cleaned up [ 91.617011][ T6974] netlink: 5 bytes leftover after parsing attributes in process `syz.1.1231'. [ 91.619290][ T6964] ext4 filesystem being mounted at /277/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 91.645797][ T6974] 1ªî{X¹¦: renamed from 30ªî{X¹¦ (while UP) [ 91.682527][ T6979] selinux_netlink_send: 8 callbacks suppressed [ 91.682552][ T6979] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=6979 comm=syz.1.1231 [ 91.699195][ T6974] A link change request failed with some changes committed already. Interface 31ªî{X¹¦ may have been left with an inconsistent configuration, please check. [ 91.701374][ T6979] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=6979 comm=syz.1.1231 [ 91.839619][ T6966] netlink: 'syz.4.1228': attribute type 21 has an invalid length. [ 91.874757][ T6966] netlink: 132 bytes leftover after parsing attributes in process `syz.4.1228'. [ 91.887184][ T6966] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1228'. [ 91.990860][ T6995] vhci_hcd: default hub control req: 8017 v0006 i0003 l0 [ 92.015419][ T7006] sch_tbf: burst 4398 is lower than device lo mtu (65550) ! [ 92.063656][ T7013] 9pnet_fd: Insufficient options for proto=fd [ 92.724368][ T7019] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1249'. [ 93.001526][ T7026] loop4: detected capacity change from 0 to 1024 [ 93.040910][ T7026] EXT4-fs: Ignoring removed mblk_io_submit option [ 93.073608][ T7026] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 93.120117][ T7047] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=7047 comm=syz.1.1262 [ 93.132682][ T7047] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=7047 comm=syz.1.1262 [ 93.147800][ T7046] netlink: 5 bytes leftover after parsing attributes in process `syz.3.1261'. [ 93.157047][ T7046] 1ªî{X¹¦: renamed from 30ªî{X¹¦ (while UP) [ 93.165467][ T7046] A link change request failed with some changes committed already. Interface 31ªî{X¹¦ may have been left with an inconsistent configuration, please check. [ 93.182706][ T7051] sch_tbf: burst 4398 is lower than device lo mtu (65550) ! [ 93.183370][ T7046] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=7046 comm=syz.3.1261 [ 93.202608][ T7046] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=7046 comm=syz.3.1261 [ 93.293750][ T7054] lo speed is unknown, defaulting to 1000 [ 93.318392][ T7026] netlink: 'syz.4.1252': attribute type 21 has an invalid length. [ 93.419012][ T7061] vhci_hcd: default hub control req: 8017 v0006 i0003 l0 [ 93.479894][ T7073] loop0: detected capacity change from 0 to 512 [ 93.497102][ T7073] EXT4-fs: Ignoring removed nobh option [ 93.546126][ T7073] EXT4-fs error (device loop0): ext4_do_update_inode:5632: inode #3: comm syz.0.1272: corrupted inode contents [ 93.558747][ T7073] EXT4-fs (loop0): Remounting filesystem read-only [ 93.577052][ T7073] EXT4-fs (loop0): 1 truncate cleaned up [ 93.594785][ T7073] ext4 filesystem being mounted at /289/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 93.667704][ T7054] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 93.710121][ T7082] loop0: detected capacity change from 0 to 1024 [ 93.789387][ T7087] rdma_rxe: rxe_newlink: failed to add lo [ 93.801415][ T7087] EXT4-fs error (device loop0): ext4_mb_mark_diskspace_used:4193: comm syz.0.1274: Allocating blocks 497-513 which overlap fs metadata [ 93.818749][ T29] kauditd_printk_skb: 998 callbacks suppressed [ 93.818766][ T29] audit: type=1326 audit(1763855718.372:6139): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7068 comm="syz.1.1270" exe="/root/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7faf25b8f749 code=0x7ffc0000 [ 93.837823][ T7089] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=7089 comm=syz.4.1276 [ 93.860906][ T7089] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=7089 comm=syz.4.1276 [ 94.063112][ T7098] vhci_hcd: default hub control req: 8017 v0006 i0003 l0 [ 94.064736][ T7107] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 94.090513][ T7107] loop4: detected capacity change from 0 to 136 [ 94.134022][ T7107] team0: Unable to change to the same mode the team is in [ 94.158832][ T7093] loop1: detected capacity change from 0 to 1024 [ 94.178233][ T7109] vhci_hcd: default hub control req: 8017 v0006 i0003 l0 [ 94.191042][ T7093] EXT4-fs: Ignoring removed mblk_io_submit option [ 94.226994][ T7093] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 94.250691][ T7115] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=7115 comm=syz.2.1289 [ 94.263201][ T7115] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=7115 comm=syz.2.1289 [ 94.321389][ T7111] loop3: detected capacity change from 0 to 1024 [ 94.333292][ T7111] EXT4-fs: Ignoring removed mblk_io_submit option [ 94.352719][ T7111] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 94.388393][ T7122] sch_tbf: burst 4398 is lower than device lo mtu (65550) ! [ 94.454325][ T29] audit: type=1326 audit(1763855719.002:6140): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7125 comm="syz.1.1292" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faf25b8f749 code=0x7ffc0000 [ 94.477812][ T29] audit: type=1326 audit(1763855719.002:6141): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7125 comm="syz.1.1292" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faf25b8f749 code=0x7ffc0000 [ 94.501906][ T29] audit: type=1326 audit(1763855719.002:6142): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7125 comm="syz.1.1292" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7faf25b8f749 code=0x7ffc0000 [ 94.525510][ T29] audit: type=1326 audit(1763855719.002:6143): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7125 comm="syz.1.1292" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faf25b8f749 code=0x7ffc0000 [ 94.548964][ T29] audit: type=1326 audit(1763855719.002:6144): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7125 comm="syz.1.1292" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faf25b8f749 code=0x7ffc0000 [ 94.572428][ T29] audit: type=1326 audit(1763855719.002:6145): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7125 comm="syz.1.1292" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7faf25b8f749 code=0x7ffc0000 [ 94.579314][ T7087] EXT4-fs (loop0): pa ffff888106a08770: logic 16, phys. 129, len 24 [ 94.595849][ T29] audit: type=1326 audit(1763855719.002:6146): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7125 comm="syz.1.1292" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faf25b8f749 code=0x7ffc0000 [ 94.603806][ T7087] EXT4-fs error (device loop0): ext4_mb_release_inode_pa:5444: group 0, free 0, pa_free 1 [ 94.627280][ T29] audit: type=1326 audit(1763855719.002:6147): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7125 comm="syz.1.1292" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faf25b8f749 code=0x7ffc0000 [ 94.660726][ T29] audit: type=1326 audit(1763855719.032:6148): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7125 comm="syz.1.1292" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7faf25b8df90 code=0x7ffc0000 [ 94.756432][ T7135] loop0: detected capacity change from 0 to 512 [ 94.808768][ T7135] ext4 filesystem being mounted at /294/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 94.858730][ T7144] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 94.880000][ T7144] loop1: detected capacity change from 0 to 136 [ 94.903284][ T7144] team0: Unable to change to the same mode the team is in [ 94.925060][ T7150] FAULT_INJECTION: forcing a failure. [ 94.925060][ T7150] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 94.938245][ T7150] CPU: 0 UID: 0 PID: 7150 Comm: syz.3.1301 Not tainted syzkaller #0 PREEMPT(voluntary) [ 94.938270][ T7150] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 94.938287][ T7150] Call Trace: [ 94.938354][ T7150] [ 94.938361][ T7150] __dump_stack+0x1d/0x30 [ 94.938384][ T7150] dump_stack_lvl+0xe8/0x140 [ 94.938453][ T7150] dump_stack+0x15/0x1b [ 94.938470][ T7150] should_fail_ex+0x265/0x280 [ 94.938544][ T7150] should_fail+0xb/0x20 [ 94.938559][ T7150] should_fail_usercopy+0x1a/0x20 [ 94.938579][ T7150] _copy_from_user+0x1c/0xb0 [ 94.938665][ T7150] memdup_user+0x5e/0xd0 [ 94.938691][ T7150] strndup_user+0x68/0xb0 [ 94.938720][ T7150] __se_sys_mount+0x4d/0x2e0 [ 94.938744][ T7150] ? fput+0x8f/0xc0 [ 94.938761][ T7150] ? ksys_write+0x192/0x1a0 [ 94.938787][ T7150] __x64_sys_mount+0x67/0x80 [ 94.938836][ T7150] x64_sys_call+0x2b51/0x3000 [ 94.938859][ T7150] do_syscall_64+0xd2/0x200 [ 94.938959][ T7150] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 94.938987][ T7150] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 94.939058][ T7150] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 94.939079][ T7150] RIP: 0033:0x7f0aab86f749 [ 94.939093][ T7150] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 94.939111][ T7150] RSP: 002b:00007f0aaa2d7038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 94.939157][ T7150] RAX: ffffffffffffffda RBX: 00007f0aabac5fa0 RCX: 00007f0aab86f749 [ 94.939169][ T7150] RDX: 0000200000000080 RSI: 0000200000000180 RDI: 0000000000000000 [ 94.939181][ T7150] RBP: 00007f0aaa2d7090 R08: 0000000000000000 R09: 0000000000000000 [ 94.939192][ T7150] R10: 0000000001214040 R11: 0000000000000246 R12: 0000000000000001 [ 94.939204][ T7150] R13: 00007f0aabac6038 R14: 00007f0aabac5fa0 R15: 00007ffd08d77288 [ 94.939222][ T7150] [ 95.213460][ T7161] loop1: detected capacity change from 0 to 1024 [ 95.233339][ T7156] loop2: detected capacity change from 0 to 1024 [ 95.331127][ T7168] rdma_rxe: rxe_newlink: failed to add lo [ 95.359616][ T7168] EXT4-fs error (device loop1): ext4_mb_mark_diskspace_used:4193: comm syz.1.1306: Allocating blocks 497-513 which overlap fs metadata [ 95.399758][ T7172] loop4: detected capacity change from 0 to 512 [ 95.417036][ T7172] ext4 filesystem being mounted at /242/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 95.421437][ T7174] vhci_hcd: default hub control req: 8017 v0006 i0003 l0 [ 95.449789][ T7178] loop3: detected capacity change from 0 to 1024 [ 95.491596][ T7180] loop2: detected capacity change from 0 to 512 [ 95.507586][ T7180] ext4 filesystem being mounted at /238/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 95.535938][ T7187] syz2: rxe_newlink: already configured on lo [ 95.550240][ T7187] EXT4-fs error (device loop3): ext4_mb_mark_diskspace_used:4193: comm syz.3.1311: Allocating blocks 497-513 which overlap fs metadata [ 95.583167][ T7191] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 95.599192][ T7192] sch_tbf: burst 4398 is lower than device lo mtu (65550) ! [ 95.607263][ T7191] loop2: detected capacity change from 0 to 136 [ 95.617647][ T7191] team0: Unable to change to the same mode the team is in [ 95.796286][ T7206] bridge0: entered promiscuous mode [ 95.801636][ T7206] macvtap8: entered allmulticast mode [ 95.807128][ T7206] bridge0: entered allmulticast mode [ 95.813370][ T7206] batman_adv: batadv0: Adding interface: macvtap8 [ 95.819857][ T7206] batman_adv: batadv0: The MTU of interface macvtap8 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 95.846078][ T7206] batman_adv: batadv0: Interface activated: macvtap8 [ 95.853390][ T7200] loop2: detected capacity change from 0 to 1024 [ 95.866154][ T7200] EXT4-fs: Ignoring removed mblk_io_submit option [ 95.877492][ T7200] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 95.920814][ T7207] hub 1-0:1.0: USB hub found [ 95.925733][ T7207] hub 1-0:1.0: 8 ports detected [ 95.962799][ T7200] netlink: 'syz.2.1320': attribute type 21 has an invalid length. [ 96.052250][ T7161] EXT4-fs (loop1): pa ffff888106a087e0: logic 16, phys. 129, len 24 [ 96.060340][ T7161] EXT4-fs error (device loop1): ext4_mb_release_inode_pa:5444: group 0, free 0, pa_free 1 [ 96.128210][ T7217] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 96.156850][ T7217] loop2: detected capacity change from 0 to 136 [ 96.171120][ T7217] team0: Unable to change to the same mode the team is in [ 96.293644][ T7187] EXT4-fs (loop3): pa ffff888106a08850: logic 16, phys. 129, len 24 [ 96.301771][ T7187] EXT4-fs error (device loop3): ext4_mb_release_inode_pa:5444: group 0, free 0, pa_free 1 [ 96.443386][ T7239] mmap: syz.2.1337 (7239) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 96.538462][ T7243] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 96.576479][ T7243] loop2: detected capacity change from 0 to 136 [ 96.636846][ T7243] team0: Unable to change to the same mode the team is in [ 96.693734][ T7257] loop3: detected capacity change from 0 to 512 [ 96.729218][ T7257] ext4 filesystem being mounted at /281/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 96.745401][ T7268] sch_tbf: burst 4398 is lower than device lo mtu (65550) ! [ 96.832701][ T7279] __nla_validate_parse: 6 callbacks suppressed [ 96.832720][ T7279] netlink: 5 bytes leftover after parsing attributes in process `syz.4.1355'. [ 96.859192][ T7279] 1ªî{X¹¦: renamed from 30ªî{X¹¦ (while UP) [ 96.867457][ T7279] A link change request failed with some changes committed already. Interface 31ªî{X¹¦ may have been left with an inconsistent configuration, please check. [ 96.919491][ T7279] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=7279 comm=syz.4.1355 [ 96.932133][ T7279] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=7279 comm=syz.4.1355 [ 96.970810][ T7288] loop2: detected capacity change from 0 to 512 [ 96.982530][ T7288] EXT4-fs: Ignoring removed nobh option [ 97.021953][ T7288] EXT4-fs error (device loop2): ext4_do_update_inode:5632: inode #3: comm syz.2.1358: corrupted inode contents [ 97.026295][ T7296] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 97.039856][ T7288] EXT4-fs (loop2): Remounting filesystem read-only [ 97.057875][ T7296] loop4: detected capacity change from 0 to 136 [ 97.072617][ T7296] team0: Unable to change to the same mode the team is in [ 97.087630][ T7288] EXT4-fs (loop2): 1 truncate cleaned up [ 97.093932][ T7288] ext4 filesystem being mounted at /254/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 97.128721][ T7298] loop3: detected capacity change from 0 to 1024 [ 97.146452][ T7298] EXT4-fs: Ignoring removed mblk_io_submit option [ 97.166705][ T7300] loop2: detected capacity change from 0 to 1024 [ 97.168391][ T7298] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 97.295789][ T7304] loop4: detected capacity change from 0 to 1024 [ 97.308760][ T7304] EXT4-fs: Ignoring removed mblk_io_submit option [ 97.324017][ T7304] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 97.489542][ T7319] netlink: 5 bytes leftover after parsing attributes in process `syz.3.1369'. [ 97.502293][ T7319] 0ªî{X¹¦: renamed from 31ªî{X¹¦ (while UP) [ 97.514811][ T7319] A link change request failed with some changes committed already. Interface 30ªî{X¹¦ may have been left with an inconsistent configuration, please check. [ 97.531191][ T7321] loop4: detected capacity change from 0 to 1024 [ 97.549464][ T7322] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=7322 comm=syz.3.1369 [ 97.561957][ T7322] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=7322 comm=syz.3.1369 [ 97.568904][ T7321] EXT4-fs: Ignoring removed mblk_io_submit option [ 97.630399][ T7321] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 97.744822][ T7343] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1380'. [ 97.745550][ T7321] netlink: 'syz.4.1370': attribute type 21 has an invalid length. [ 97.754790][ T7343] usb usb6: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 97.769319][ T7343] vhci_hcd: invalid port number 96 [ 97.774443][ T7343] vhci_hcd: default hub control req: 0006 v000d i0060 l0 [ 97.807550][ T7321] netlink: 132 bytes leftover after parsing attributes in process `syz.4.1370'. [ 97.816810][ T7321] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1370'. [ 97.844193][ T7341] vhci_hcd: default hub control req: 8017 v0006 i0003 l0 [ 97.912587][ T7358] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 97.942678][ T7358] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 97.989618][ T7356] vhci_hcd: default hub control req: 8017 v0006 i0003 l0 [ 98.002828][ T7358] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1387'. [ 98.114606][ T7358] loop0: detected capacity change from 0 to 2048 [ 98.127250][ T7364] loop4: detected capacity change from 0 to 1024 [ 98.149563][ T7364] EXT4-fs: Ignoring removed mblk_io_submit option [ 98.149626][ T7358] ext4 filesystem being mounted at /306/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 98.190195][ T7358] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 98.221319][ T7364] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 98.228555][ T7358] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 98.267211][ T7358] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1387'. [ 98.341257][ T7397] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1405'. [ 98.364622][ T7397] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1405'. [ 98.425724][ T7391] vhci_hcd: default hub control req: 8017 v0006 i0003 l0 [ 98.497431][ T7412] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 98.534351][ T7412] loop4: detected capacity change from 0 to 136 [ 98.544070][ T7412] team0: Unable to change to the same mode the team is in [ 98.589301][ T7424] loop3: detected capacity change from 0 to 1024 [ 98.697476][ T7438] loop2: detected capacity change from 0 to 512 [ 98.713558][ T7439] syz2: rxe_newlink: already configured on lo [ 98.722447][ T7438] EXT4-fs: Ignoring removed nobh option [ 98.732355][ T7439] EXT4-fs error (device loop3): ext4_mb_mark_diskspace_used:4193: comm syz.3.1417: Allocating blocks 497-513 which overlap fs metadata [ 98.739343][ T7432] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1420'. [ 98.761428][ T7438] EXT4-fs error (device loop2): ext4_do_update_inode:5632: inode #3: comm syz.2.1423: corrupted inode contents [ 98.776521][ T7438] EXT4-fs (loop2): Remounting filesystem read-only [ 98.794915][ T7438] EXT4-fs (loop2): 1 truncate cleaned up [ 98.816167][ T7438] EXT4-fs mount: 94 callbacks suppressed [ 98.816186][ T7438] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 98.836686][ T3313] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 98.885514][ T7438] ext4 filesystem being mounted at /279/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 98.926498][ T3318] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 98.940502][ T7452] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 98.956488][ T29] kauditd_printk_skb: 865 callbacks suppressed [ 98.956506][ T29] audit: type=1400 audit(1763855723.492:7010): avc: denied { bind } for pid=7453 comm="syz.4.1429" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 98.986837][ T7452] loop0: detected capacity change from 0 to 136 [ 99.001021][ T7452] team0: Unable to change to the same mode the team is in [ 99.029427][ T29] audit: type=1326 audit(1763855723.582:7011): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7455 comm="syz.2.1430" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f67e5a1f749 code=0x7ffc0000 [ 99.089880][ T29] audit: type=1326 audit(1763855723.582:7012): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7455 comm="syz.2.1430" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f67e5a1f749 code=0x7ffc0000 [ 99.113413][ T29] audit: type=1326 audit(1763855723.622:7013): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7455 comm="syz.2.1430" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f67e5a1f749 code=0x7ffc0000 [ 99.136993][ T29] audit: type=1326 audit(1763855723.622:7014): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7455 comm="syz.2.1430" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f67e5a1f749 code=0x7ffc0000 [ 99.160493][ T29] audit: type=1326 audit(1763855723.622:7015): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7455 comm="syz.2.1430" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f67e5a1f749 code=0x7ffc0000 [ 99.183927][ T29] audit: type=1326 audit(1763855723.622:7016): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7457 comm=77DEA305FF07 exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6e939af749 code=0x7ffc0000 [ 99.207398][ T29] audit: type=1326 audit(1763855723.622:7017): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7457 comm=77DEA305FF07 exe="/root/syz-executor" sig=0 arch=c000003e syscall=246 compat=0 ip=0x7f6e939af749 code=0x7ffc0000 [ 99.231033][ T29] audit: type=1326 audit(1763855723.622:7018): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7457 comm=77DEA305FF07 exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6e939af749 code=0x7ffc0000 [ 99.254661][ T29] audit: type=1326 audit(1763855723.622:7019): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7457 comm=77DEA305FF07 exe="/root/syz-executor" sig=0 arch=c000003e syscall=25 compat=0 ip=0x7f6e939af749 code=0x7ffc0000 [ 99.479933][ T7424] EXT4-fs (loop3): pa ffff888106a08770: logic 16, phys. 129, len 24 [ 99.488114][ T7424] EXT4-fs error (device loop3): ext4_mb_release_inode_pa:5444: group 0, free 0, pa_free 1 [ 99.525509][ T3324] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 99.578912][ T7484] loop4: detected capacity change from 0 to 512 [ 99.628641][ T7484] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 99.676378][ T7484] ext4 filesystem being mounted at /264/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 99.703167][ T7495] loop2: detected capacity change from 0 to 1024 [ 99.703632][ T7501] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 99.726498][ T7495] EXT4-fs: Ignoring removed mblk_io_submit option [ 99.742814][ T7501] loop1: detected capacity change from 0 to 136 [ 99.749565][ T7495] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 99.760473][ T7484] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 99.810666][ T7501] team0: Unable to change to the same mode the team is in [ 99.837319][ T7495] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 99.969666][ T7495] netlink: 'syz.2.1445': attribute type 21 has an invalid length. [ 100.008961][ T7519] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=7519 comm=syz.4.1455 [ 100.021599][ T7519] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=7519 comm=syz.4.1455 [ 100.062025][ T3318] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 100.082422][ T7521] loop1: detected capacity change from 0 to 512 [ 100.099904][ T7521] EXT4-fs: Ignoring removed nobh option [ 100.108184][ T7525] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 100.128632][ T7525] loop4: detected capacity change from 0 to 136 [ 100.137319][ T7521] EXT4-fs error (device loop1): ext4_do_update_inode:5632: inode #3: comm syz.1.1457: corrupted inode contents [ 100.179925][ T7523] loop3: detected capacity change from 0 to 512 [ 100.187315][ T7521] EXT4-fs (loop1): Remounting filesystem read-only [ 100.196363][ T7521] EXT4-fs (loop1): 1 truncate cleaned up [ 100.204448][ T7521] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 100.217107][ T7521] ext4 filesystem being mounted at /280/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 100.230491][ T7525] team0: Unable to change to the same mode the team is in [ 100.242332][ T7523] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 100.291165][ T7523] ext4 filesystem being mounted at /306/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 100.305860][ T7523] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 100.317438][ T3317] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 100.326686][ T7541] loop0: detected capacity change from 0 to 512 [ 100.333287][ T7541] EXT4-fs: Ignoring removed nobh option [ 100.369789][ T7541] EXT4-fs error (device loop0): ext4_do_update_inode:5632: inode #3: comm syz.0.1464: corrupted inode contents [ 100.369852][ T7545] loop2: detected capacity change from 0 to 1024 [ 100.392807][ T7545] EXT4-fs: Ignoring removed mblk_io_submit option [ 100.407034][ T7545] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 100.425795][ T7541] EXT4-fs (loop0): Remounting filesystem read-only [ 100.448151][ T7553] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=7553 comm=syz.4.1470 [ 100.460670][ T7553] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=7553 comm=syz.4.1470 [ 100.493410][ T7541] EXT4-fs (loop0): 1 truncate cleaned up [ 100.499787][ T7541] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 100.499872][ T7545] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 100.525041][ T7541] ext4 filesystem being mounted at /319/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 100.599040][ T3313] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 100.657799][ T3318] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 100.660683][ T7575] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 100.711007][ T7580] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=7580 comm=syz.4.1481 [ 100.723615][ T7580] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=7580 comm=syz.4.1481 [ 100.740519][ T7575] loop0: detected capacity change from 0 to 136 [ 100.750014][ T7575] team0: Unable to change to the same mode the team is in [ 100.876634][ T7584] vhci_hcd: default hub control req: 8017 v0006 i0003 l0 [ 101.042340][ T7602] loop0: detected capacity change from 0 to 1024 [ 101.058474][ T7602] EXT4-fs: Ignoring removed mblk_io_submit option [ 101.077992][ T7608] loop2: detected capacity change from 0 to 136 [ 101.087500][ T7602] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 101.117254][ T7608] team0: Unable to change to the same mode the team is in [ 101.120839][ T7602] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 101.198411][ T7616] loop3: detected capacity change from 0 to 1024 [ 101.247764][ T7616] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 101.293369][ T3313] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 101.314005][ T3324] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 101.459446][ T7641] net_ratelimit: 1 callbacks suppressed [ 101.459461][ T7641] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 101.495046][ T7641] loop1: detected capacity change from 0 to 136 [ 101.507552][ T7641] team0: Unable to change to the same mode the team is in [ 101.539292][ T7643] loop0: detected capacity change from 0 to 512 [ 101.573193][ T7654] loop1: detected capacity change from 0 to 1024 [ 101.580150][ T7643] EXT4-fs: Ignoring removed oldalloc option [ 101.619863][ T7654] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 101.626870][ T7655] vhci_hcd: default hub control req: 8017 v0006 i0003 l0 [ 101.635939][ T7643] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 101.653898][ T7643] ext4 filesystem being mounted at /328/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 101.711689][ T3317] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 101.864446][ T7662] loop4: detected capacity change from 0 to 1024 [ 101.893743][ T7662] EXT4-fs: Ignoring removed mblk_io_submit option [ 101.936169][ T7662] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 101.977037][ T7681] __nla_validate_parse: 3 callbacks suppressed [ 101.977056][ T7681] netlink: 5 bytes leftover after parsing attributes in process `syz.3.1522'. [ 102.001026][ T7681] 1ªî{X¹¦: renamed from 30ªî{X¹¦ (while UP) [ 102.024698][ T7662] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 102.055631][ T7686] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=7686 comm=syz.3.1522 [ 102.068146][ T7686] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=7686 comm=syz.3.1522 [ 102.091434][ T7681] A link change request failed with some changes committed already. Interface 31ªî{X¹¦ may have been left with an inconsistent configuration, please check. [ 102.107424][ T7674] sch_tbf: burst 4398 is lower than device lo mtu (65550) ! [ 102.135893][ T7687] netlink: 'syz.4.1514': attribute type 21 has an invalid length. [ 102.146297][ T7687] netlink: 132 bytes leftover after parsing attributes in process `syz.4.1514'. [ 102.155437][ T7687] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1514'. [ 102.170458][ T7689] loop1: detected capacity change from 0 to 512 [ 102.178705][ T3315] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 102.205006][ T7689] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 102.235363][ T7689] ext4 filesystem being mounted at /293/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 102.281111][ T7689] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 102.281436][ T7691] vhci_hcd: default hub control req: 8017 v0006 i0003 l0 [ 102.334381][ T3313] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 102.429474][ T7707] sch_tbf: burst 3298 is lower than device lo mtu (65550) ! [ 102.452827][ T7714] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 102.505053][ T7714] loop0: detected capacity change from 0 to 136 [ 102.542882][ T7723] loop3: detected capacity change from 0 to 1024 [ 102.580874][ T7714] team0: Unable to change to the same mode the team is in [ 102.592437][ T7723] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 102.621790][ T7717] vhci_hcd: default hub control req: 8017 v0006 i0003 l0 [ 102.658852][ T7722] vhci_hcd: default hub control req: 8017 v0006 i0003 l0 [ 102.695211][ T3324] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 102.789114][ T7743] loop3: detected capacity change from 0 to 512 [ 102.826438][ T7743] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 102.894589][ T7743] ext4 filesystem being mounted at /328/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 102.907158][ T7743] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 102.918527][ T7758] loop2: detected capacity change from 0 to 1024 [ 102.951051][ T7758] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 102.977116][ T3318] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 102.987984][ T7765] sch_tbf: burst 4398 is lower than device lo mtu (65550) ! [ 103.000762][ T7757] vhci_hcd: default hub control req: 8017 v0006 i0003 l0 [ 103.181260][ T7779] lo speed is unknown, defaulting to 1000 [ 103.228952][ T7786] netlink: 'syz.1.1562': attribute type 12 has an invalid length. [ 103.331254][ T7791] loop3: detected capacity change from 0 to 1024 [ 103.379312][ T7791] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 103.445709][ T3324] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 103.463176][ T7794] vhci_hcd: default hub control req: 8017 v0006 i0003 l0 [ 103.613815][ T7822] loop1: detected capacity change from 0 to 512 [ 103.627202][ T7822] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 103.666579][ T7822] ext4 filesystem being mounted at /305/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 103.679385][ T7822] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 103.894179][ T7850] vhci_hcd: default hub control req: 8017 v0006 i0003 l0 [ 103.947761][ T7857] loop1: detected capacity change from 0 to 512 [ 103.975865][ T7857] EXT4-fs: Ignoring removed nobh option [ 103.984699][ T29] kauditd_printk_skb: 1992 callbacks suppressed [ 103.984713][ T29] audit: type=1326 audit(1763855728.532:9008): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7863 comm="syz.3.1599" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0aab86f749 code=0x7ffc0000 [ 104.022126][ T29] audit: type=1326 audit(1763855728.532:9009): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7863 comm="syz.3.1599" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0aab86f749 code=0x7ffc0000 [ 104.045589][ T29] audit: type=1326 audit(1763855728.532:9010): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7863 comm="syz.3.1599" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f0aab86f749 code=0x7ffc0000 [ 104.068983][ T29] audit: type=1326 audit(1763855728.532:9011): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7863 comm="syz.3.1599" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0aab86f749 code=0x7ffc0000 [ 104.092515][ T29] audit: type=1326 audit(1763855728.532:9012): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7863 comm="syz.3.1599" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0aab86f749 code=0x7ffc0000 [ 104.115952][ T29] audit: type=1326 audit(1763855728.542:9013): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7863 comm="syz.3.1599" exe="/root/syz-executor" sig=0 arch=c000003e syscall=291 compat=0 ip=0x7f0aab86f749 code=0x7ffc0000 [ 104.139400][ T29] audit: type=1326 audit(1763855728.542:9014): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7863 comm="syz.3.1599" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0aab86f749 code=0x7ffc0000 [ 104.140733][ T7870] loop3: detected capacity change from 0 to 1024 [ 104.162854][ T29] audit: type=1326 audit(1763855728.542:9015): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7863 comm="syz.3.1599" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f0aab86df90 code=0x7ffc0000 [ 104.162897][ T29] audit: type=1326 audit(1763855728.562:9016): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7863 comm="syz.3.1599" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0aab86f749 code=0x7ffc0000 [ 104.170804][ T7871] sch_tbf: burst 4398 is lower than device lo mtu (65550) ! [ 104.192608][ T29] audit: type=1326 audit(1763855728.562:9017): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7863 comm="syz.3.1599" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0aab86f749 code=0x7ffc0000 [ 104.239758][ T7857] EXT4-fs error (device loop1): ext4_do_update_inode:5632: inode #3: comm syz.1.1595: corrupted inode contents [ 104.276042][ T7870] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 104.288645][ T7857] EXT4-fs (loop1): Remounting filesystem read-only [ 104.310523][ T3324] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 104.322557][ T7857] EXT4-fs (loop1): 1 truncate cleaned up [ 104.333301][ T7857] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 104.363327][ T7857] ext4 filesystem being mounted at /308/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 104.459494][ T7893] loop0: detected capacity change from 0 to 512 [ 104.466081][ T7893] EXT4-fs: Ignoring removed oldalloc option [ 104.472922][ T3317] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 104.503761][ T7893] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 104.516729][ T7893] ext4 filesystem being mounted at /343/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 104.642552][ T7911] loop2: detected capacity change from 0 to 512 [ 104.649563][ T7911] EXT4-fs: Ignoring removed nobh option [ 104.662846][ T7909] vhci_hcd: default hub control req: 8017 v0006 i0003 l0 [ 104.687535][ T7911] EXT4-fs error (device loop2): ext4_do_update_inode:5632: inode #3: comm syz.2.1616: corrupted inode contents [ 104.724194][ T7911] EXT4-fs (loop2): Remounting filesystem read-only [ 104.747865][ T7911] EXT4-fs (loop2): 1 truncate cleaned up [ 104.768933][ T7921] loop3: detected capacity change from 0 to 512 [ 104.780229][ T7911] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 104.799832][ T7911] ext4 filesystem being mounted at /318/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 104.831107][ T3318] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 104.852972][ T7921] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 104.889700][ T7921] ext4 filesystem being mounted at /349/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 104.911732][ T7934] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 104.938520][ T7921] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 104.950403][ T7934] loop2: detected capacity change from 0 to 136 [ 104.982028][ T7934] team0: Unable to change to the same mode the team is in [ 105.063781][ T7946] loop1: detected capacity change from 0 to 1024 [ 105.104161][ T7944] vhci_hcd: default hub control req: 8017 v0006 i0003 l0 [ 105.111256][ T7942] vhci_hcd: default hub control req: 8017 v0006 i0003 l0 [ 105.119766][ T7946] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 105.176398][ T3317] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 105.270051][ T7960] loop1: detected capacity change from 0 to 512 [ 105.299262][ T7964] lo speed is unknown, defaulting to 1000 [ 105.309233][ T3313] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 105.319660][ T7960] EXT4-fs: Ignoring removed nobh option [ 105.358415][ T7960] EXT4-fs error (device loop1): ext4_do_update_inode:5632: inode #3: comm syz.1.1637: corrupted inode contents [ 105.392539][ T7960] EXT4-fs (loop1): Remounting filesystem read-only [ 105.415442][ T7960] EXT4-fs (loop1): 1 truncate cleaned up [ 105.427499][ T7960] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 105.440183][ T7960] ext4 filesystem being mounted at /316/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 105.459386][ T7971] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 105.497414][ T3317] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 105.532074][ T7971] loop3: detected capacity change from 0 to 136 [ 105.571689][ T7971] team0: Unable to change to the same mode the team is in [ 105.619987][ T7976] loop2: detected capacity change from 0 to 512 [ 105.620132][ T7974] vhci_hcd: default hub control req: 8017 v0006 i0003 l0 [ 105.644993][ T7976] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 105.666748][ T7982] netlink: 'syz.3.1645': attribute type 12 has an invalid length. [ 105.688799][ T7976] ext4 filesystem being mounted at /322/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 105.748802][ T7976] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 105.870115][ T8002] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 105.897538][ T8007] bridge0: entered promiscuous mode [ 105.903007][ T8007] macvtap7: entered allmulticast mode [ 105.908473][ T8007] bridge0: entered allmulticast mode [ 105.930188][ T8002] loop0: detected capacity change from 0 to 136 [ 105.932321][ T8007] batman_adv: batadv0: Adding interface: macvtap7 [ 105.943305][ T8007] batman_adv: batadv0: The MTU of interface macvtap7 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 105.974607][ T8015] netlink: 5 bytes leftover after parsing attributes in process `syz.3.1661'. [ 105.984092][ T8007] batman_adv: batadv0: Interface activated: macvtap7 [ 105.994933][ T8015] 0ªî{X¹¦: renamed from 31ªî{X¹¦ (while UP) [ 106.016880][ T8015] A link change request failed with some changes committed already. Interface 30ªî{X¹¦ may have been left with an inconsistent configuration, please check. [ 106.044122][ T8002] team0: Unable to change to the same mode the team is in [ 106.056017][ T8015] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=8015 comm=syz.3.1661 [ 106.057203][ T8007] hub 1-0:1.0: USB hub found [ 106.068659][ T8015] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=8015 comm=syz.3.1661 [ 106.097359][ T8007] hub 1-0:1.0: 8 ports detected [ 106.209875][ T8032] loop1: detected capacity change from 0 to 512 [ 106.238113][ T8032] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 106.254167][ T8032] ext4 filesystem being mounted at /324/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 106.294900][ T8032] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 106.334549][ T8048] lo speed is unknown, defaulting to 1000 [ 106.388294][ T8056] loop1: detected capacity change from 0 to 512 [ 106.395750][ T8053] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 106.412920][ T8056] EXT4-fs: Ignoring removed nobh option [ 106.423908][ T8053] loop0: detected capacity change from 0 to 136 [ 106.435423][ T8056] EXT4-fs error (device loop1): ext4_do_update_inode:5632: inode #3: comm syz.1.1676: corrupted inode contents [ 106.449524][ T8060] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 106.461738][ T8053] team0: Unable to change to the same mode the team is in [ 106.463204][ T8056] EXT4-fs (loop1): Remounting filesystem read-only [ 106.476466][ T8056] EXT4-fs (loop1): 1 truncate cleaned up [ 106.482771][ T8056] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 106.511859][ T8056] ext4 filesystem being mounted at /325/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 106.566159][ T3317] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 106.577175][ T8065] netlink: 5 bytes leftover after parsing attributes in process `syz.3.1680'. [ 106.600983][ T8065] 1ªî{X¹¦: renamed from 30ªî{X¹¦ (while UP) [ 106.611549][ T8065] A link change request failed with some changes committed already. Interface 31ªî{X¹¦ may have been left with an inconsistent configuration, please check. [ 106.643816][ T8063] vhci_hcd: default hub control req: 8017 v0006 i0003 l0 [ 106.654958][ T8070] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=8070 comm=syz.3.1680 [ 106.667497][ T8070] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=8070 comm=syz.3.1680 [ 106.813243][ T8080] loop2: detected capacity change from 0 to 512 [ 106.824986][ T8069] loop1: detected capacity change from 0 to 1024 [ 106.847129][ T8069] EXT4-fs: Ignoring removed mblk_io_submit option [ 106.864395][ T8069] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 106.885862][ T8080] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 106.915395][ T8080] ext4 filesystem being mounted at /325/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 106.932666][ T8080] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 106.946443][ T8069] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 107.008958][ T8096] vhci_hcd: default hub control req: 8017 v0006 i0003 l0 [ 107.082434][ T3317] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 107.094225][ T8108] netlink: 5 bytes leftover after parsing attributes in process `syz.3.1698'. [ 107.104050][ T8108] 0ªî{X¹¦: renamed from 31ªî{X¹¦ (while UP) [ 107.127153][ T8108] A link change request failed with some changes committed already. Interface 30ªî{X¹¦ may have been left with an inconsistent configuration, please check. [ 107.155564][ T8108] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=8108 comm=syz.3.1698 [ 107.168214][ T8108] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=8108 comm=syz.3.1698 [ 107.286593][ T8123] lo speed is unknown, defaulting to 1000 [ 107.402451][ T8132] macvtap9: entered allmulticast mode [ 107.420575][ T8132] batman_adv: batadv0: Adding interface: macvtap9 [ 107.427061][ T8132] batman_adv: batadv0: The MTU of interface macvtap9 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 107.453027][ T8132] batman_adv: batadv0: Interface activated: macvtap9 [ 107.490165][ T8130] netlink: 'syz.3.1706': attribute type 12 has an invalid length. [ 107.528432][ T8139] loop4: detected capacity change from 0 to 1024 [ 107.539927][ T8143] loop1: detected capacity change from 0 to 512 [ 107.546644][ T8143] EXT4-fs: Ignoring removed nobh option [ 107.553453][ T8139] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 107.569881][ T8137] hub 1-0:1.0: USB hub found [ 107.574734][ T8137] hub 1-0:1.0: 8 ports detected [ 107.581652][ T8143] EXT4-fs error (device loop1): ext4_do_update_inode:5632: inode #3: comm syz.1.1715: corrupted inode contents [ 107.605833][ T8143] EXT4-fs (loop1): Remounting filesystem read-only [ 107.635812][ T8143] EXT4-fs (loop1): 1 truncate cleaned up [ 107.643290][ T3315] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 107.651714][ T8143] ext4 filesystem being mounted at /331/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 107.800943][ T8165] macvtap5: entered allmulticast mode [ 107.808753][ T8165] batman_adv: batadv0: Adding interface: macvtap5 [ 107.815195][ T8165] batman_adv: batadv0: The MTU of interface macvtap5 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 107.842155][ T8165] batman_adv: batadv0: Interface activated: macvtap5 [ 108.021676][ T8182] loop4: detected capacity change from 0 to 1024 [ 108.059764][ T8170] hub 1-0:1.0: USB hub found [ 108.064594][ T8170] hub 1-0:1.0: 8 ports detected [ 108.102448][ T8180] vhci_hcd: default hub control req: 8017 v0006 i0003 l0 [ 108.166013][ T8192] loop2: detected capacity change from 0 to 512 [ 108.183305][ T8192] EXT4-fs: Ignoring removed nobh option [ 108.193071][ T8197] loop4: detected capacity change from 0 to 512 [ 108.223404][ T8197] ext4 filesystem being mounted at /319/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 108.237827][ T8192] EXT4-fs error (device loop2): ext4_do_update_inode:5632: inode #3: comm syz.2.1733: corrupted inode contents [ 108.250257][ T8192] EXT4-fs (loop2): Remounting filesystem read-only [ 108.286979][ T8192] EXT4-fs (loop2): 1 truncate cleaned up [ 108.308764][ T8192] ext4 filesystem being mounted at /335/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 108.483362][ T8227] netlink: 5 bytes leftover after parsing attributes in process `syz.2.1748'. [ 108.493362][ T8227] 1ªî{X¹¦: renamed from 30ªî{X¹¦ (while UP) [ 108.501945][ T8227] 1ªî{X¹¦: entered allmulticast mode [ 108.508153][ T8227] A link change request failed with some changes committed already. Interface 31ªî{X¹¦ may have been left with an inconsistent configuration, please check. [ 108.527065][ T8228] sch_tbf: burst 4398 is lower than device lo mtu (65550) ! [ 108.527641][ T8227] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=8227 comm=syz.2.1748 [ 108.546903][ T8227] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=8227 comm=syz.2.1748 [ 108.555854][ T8214] loop4: detected capacity change from 0 to 1024 [ 108.589621][ T8214] EXT4-fs: Ignoring removed mblk_io_submit option [ 108.626882][ T8214] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 108.753649][ T8243] lo speed is unknown, defaulting to 1000 [ 108.775610][ T8214] netlink: 'syz.4.1742': attribute type 21 has an invalid length. [ 108.790360][ T8247] netlink: 'syz.2.1753': attribute type 12 has an invalid length. [ 108.807898][ T8214] netlink: 132 bytes leftover after parsing attributes in process `syz.4.1742'. [ 108.818153][ T8214] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1742'. [ 108.986620][ T8258] lo speed is unknown, defaulting to 1000 [ 109.074837][ T8267] netlink: 'syz.3.1759': attribute type 12 has an invalid length. [ 109.190176][ T8271] loop2: detected capacity change from 0 to 1024 [ 109.234865][ T8271] EXT4-fs: Ignoring removed mblk_io_submit option [ 109.266805][ T8271] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 109.314051][ T8280] lo speed is unknown, defaulting to 1000 [ 109.345462][ T8283] netlink: 'syz.0.1768': attribute type 12 has an invalid length. [ 109.387075][ T29] kauditd_printk_skb: 1064 callbacks suppressed [ 109.387092][ T29] audit: type=1326 audit(1763855733.942:10070): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8286 comm="syz.1.1770" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faf25b8f749 code=0x7ffc0000 [ 109.425385][ T29] audit: type=1326 audit(1763855733.972:10071): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8286 comm="syz.1.1770" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7faf25b8f749 code=0x7ffc0000 [ 109.449062][ T29] audit: type=1326 audit(1763855733.972:10072): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8286 comm="syz.1.1770" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faf25b8f749 code=0x7ffc0000 [ 109.472616][ T29] audit: type=1326 audit(1763855733.972:10073): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8286 comm="syz.1.1770" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faf25b8f749 code=0x7ffc0000 [ 109.477557][ T8271] netlink: 'syz.2.1765': attribute type 21 has an invalid length. [ 109.496230][ T29] audit: type=1326 audit(1763855733.972:10074): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8286 comm="syz.1.1770" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7faf25b8f749 code=0x7ffc0000 [ 109.496294][ T29] audit: type=1326 audit(1763855733.972:10075): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8286 comm="syz.1.1770" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faf25b8f749 code=0x7ffc0000 [ 109.496326][ T29] audit: type=1326 audit(1763855733.972:10076): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8286 comm="syz.1.1770" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7faf25b8f749 code=0x7ffc0000 [ 109.496367][ T29] audit: type=1326 audit(1763855733.972:10077): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8286 comm="syz.1.1770" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faf25b8f749 code=0x7ffc0000 [ 109.496407][ T29] audit: type=1326 audit(1763855733.972:10078): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8286 comm="syz.1.1770" exe="/root/syz-executor" sig=0 arch=c000003e syscall=293 compat=0 ip=0x7faf25b8f749 code=0x7ffc0000 [ 109.496475][ T29] audit: type=1326 audit(1763855733.972:10079): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8286 comm="syz.1.1770" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faf25b8f749 code=0x7ffc0000 [ 109.609109][ T8289] lo speed is unknown, defaulting to 1000 [ 109.653137][ T8271] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1765'. [ 109.669203][ T8271] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1765'. [ 109.704903][ T8292] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1772'. [ 109.778131][ T8298] netlink: 5 bytes leftover after parsing attributes in process `syz.1.1775'. [ 109.812461][ T8298] 0ªî{X¹¦: renamed from 31ªî{X¹¦ (while UP) [ 109.821463][ T8298] A link change request failed with some changes committed already. Interface 30ªî{X¹¦ may have been left with an inconsistent configuration, please check. [ 109.839844][ T8306] loop0: detected capacity change from 0 to 512 [ 109.855817][ T8306] EXT4-fs: Ignoring removed nobh option [ 109.859958][ T8298] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=8298 comm=syz.1.1775 [ 109.873898][ T8298] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=8298 comm=syz.1.1775 [ 109.906314][ T8311] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=8311 comm=syz.2.1780 [ 109.918866][ T8311] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=8311 comm=syz.2.1780 [ 109.942254][ T8306] EXT4-fs error (device loop0): ext4_do_update_inode:5632: inode #3: comm syz.0.1778: corrupted inode contents [ 109.961291][ T8315] loop3: detected capacity change from 0 to 1024 [ 109.963327][ T8306] EXT4-fs (loop0): Remounting filesystem read-only [ 110.008130][ T8306] EXT4-fs (loop0): 1 truncate cleaned up [ 110.014701][ T8306] ext4 filesystem being mounted at /370/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 110.076266][ T8322] lo speed is unknown, defaulting to 1000 [ 110.098042][ T8328] netlink: 'syz.2.1783': attribute type 12 has an invalid length. [ 110.112611][ T8329] syz2: rxe_newlink: already configured on lo [ 110.133852][ T8329] EXT4-fs error (device loop3): ext4_mb_mark_diskspace_used:4193: comm syz.3.1782: Allocating blocks 497-513 which overlap fs metadata [ 110.207759][ T8331] lo speed is unknown, defaulting to 1000 [ 110.243774][ T8335] netlink: 'syz.1.1787': attribute type 12 has an invalid length. [ 110.368555][ T8343] netlink: 5 bytes leftover after parsing attributes in process `syz.0.1792'. [ 110.381034][ T8343] 1ªî{X¹¦: renamed from 30ªî{X¹¦ (while UP) [ 110.395495][ T8339] loop2: detected capacity change from 0 to 1024 [ 110.397024][ T8343] A link change request failed with some changes committed already. Interface 31ªî{X¹¦ may have been left with an inconsistent configuration, please check. [ 110.426921][ T8339] EXT4-fs: Ignoring removed mblk_io_submit option [ 110.433732][ T8343] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=8343 comm=syz.0.1792 [ 110.433779][ T8343] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=8343 comm=syz.0.1792 [ 110.505143][ T8339] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 110.566575][ T8354] loop1: detected capacity change from 0 to 512 [ 110.573195][ T8354] EXT4-fs: Ignoring removed nobh option [ 110.602733][ T8354] EXT4-fs error (device loop1): ext4_do_update_inode:5632: inode #3: comm syz.1.1796: corrupted inode contents [ 110.632052][ T8354] EXT4-fs (loop1): Remounting filesystem read-only [ 110.671838][ T8354] EXT4-fs (loop1): 1 truncate cleaned up [ 110.680923][ T8354] ext4 filesystem being mounted at /347/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 110.800566][ T8314] EXT4-fs (loop3): pa ffff888106a08930: logic 16, phys. 129, len 24 [ 110.801134][ T8361] vhci_hcd: default hub control req: 8017 v0006 i0003 l0 [ 110.808876][ T8314] EXT4-fs error (device loop3): ext4_mb_release_inode_pa:5444: group 0, free 0, pa_free 1 [ 110.842763][ T8367] loop2: detected capacity change from 0 to 512 [ 110.885709][ T8375] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1804'. [ 110.909461][ T8367] ext4 filesystem being mounted at /352/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 111.169630][ T8393] lo speed is unknown, defaulting to 1000 [ 111.234603][ T8400] netlink: 'syz.3.1812': attribute type 12 has an invalid length. [ 111.293619][ T8391] loop2: detected capacity change from 0 to 1024 [ 111.331040][ T8388] loop1: detected capacity change from 0 to 1024 [ 111.346580][ T8388] EXT4-fs: Ignoring removed mblk_io_submit option [ 111.361478][ T8391] EXT4-fs: Ignoring removed mblk_io_submit option [ 111.390832][ T8412] 0ªî{X¹¦: renamed from 31ªî{X¹¦ (while UP) [ 111.397429][ T8414] loop3: detected capacity change from 0 to 1024 [ 111.406052][ T8412] A link change request failed with some changes committed already. Interface 30ªî{X¹¦ may have been left with an inconsistent configuration, please check. [ 111.407909][ T8388] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 111.450257][ T8391] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 111.500054][ T8420] loop0: detected capacity change from 0 to 1024 [ 111.546648][ T8425] syz2: rxe_newlink: already configured on lo [ 111.571467][ T8425] EXT4-fs error (device loop3): ext4_mb_mark_diskspace_used:4193: comm syz.3.1820: Allocating blocks 497-513 which overlap fs metadata [ 111.586403][ T8420] rdma_rxe: rxe_newlink: failed to add lo [ 111.603057][ T8420] EXT4-fs error (device loop0): ext4_mb_mark_diskspace_used:4193: comm syz.0.1821: Allocating blocks 497-513 which overlap fs metadata [ 111.661385][ T8419] EXT4-fs (loop0): pa ffff888106a51e00: logic 16, phys. 129, len 24 [ 111.669465][ T8419] EXT4-fs error (device loop0): ext4_mb_release_inode_pa:5444: group 0, free 0, pa_free 1 [ 111.937210][ T8453] 0ªî{X¹¦: renamed from 31ªî{X¹¦ (while UP) [ 111.963240][ T8453] A link change request failed with some changes committed already. Interface 30ªî{X¹¦ may have been left with an inconsistent configuration, please check. [ 112.005206][ T8460] loop1: detected capacity change from 0 to 1024 [ 112.031044][ T8462] loop2: detected capacity change from 0 to 512 [ 112.038107][ T8462] EXT4-fs: Ignoring removed nobh option [ 112.067865][ T8462] EXT4-fs error (device loop2): ext4_do_update_inode:5632: inode #3: comm syz.2.1836: corrupted inode contents [ 112.085867][ T8460] rdma_rxe: rxe_newlink: failed to add lo [ 112.106831][ T8460] EXT4-fs error (device loop1): ext4_mb_mark_diskspace_used:4193: comm syz.1.1835: Allocating blocks 497-513 which overlap fs metadata [ 112.149052][ T8462] EXT4-fs (loop2): Remounting filesystem read-only [ 112.156459][ T8462] EXT4-fs (loop2): 1 truncate cleaned up [ 112.172946][ T8460] EXT4-fs (loop1): pa ffff888106a08a10: logic 16, phys. 129, len 24 [ 112.181147][ T8460] EXT4-fs error (device loop1): ext4_mb_release_inode_pa:5444: group 0, free 0, pa_free 1 [ 112.184627][ T8462] ext4 filesystem being mounted at /359/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 112.206127][ T8473] __nla_validate_parse: 3 callbacks suppressed [ 112.206141][ T8473] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1839'. [ 112.262297][ T8425] EXT4-fs (loop3): pa ffff888106a51ee0: logic 16, phys. 129, len 24 [ 112.270400][ T8425] EXT4-fs error (device loop3): ext4_mb_release_inode_pa:5444: group 0, free 0, pa_free 1 [ 112.291096][ T8469] loop4: detected capacity change from 0 to 1024 [ 112.302908][ T8469] EXT4-fs: Ignoring removed mblk_io_submit option [ 112.363648][ T8473] lo speed is unknown, defaulting to 1000 [ 112.397951][ T8469] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 112.543444][ T8494] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 112.621502][ T8473] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 112.782337][ T8511] loop1: detected capacity change from 0 to 512 [ 112.797972][ T8511] ext4 filesystem being mounted at /362/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 112.816360][ T8509] lo speed is unknown, defaulting to 1000 [ 112.833173][ T8507] vhci_hcd: default hub control req: 8017 v0006 i0003 l0 [ 112.850801][ T8514] netlink: 'syz.4.1851': attribute type 12 has an invalid length. [ 112.877061][ T8516] loop1: detected capacity change from 0 to 512 [ 112.887903][ T8518] loop0: detected capacity change from 0 to 512 [ 112.902295][ T8518] EXT4-fs: Ignoring removed nobh option [ 112.909413][ T8516] EXT4-fs: Ignoring removed nobh option [ 112.927066][ T8516] EXT4-fs error (device loop1): ext4_do_update_inode:5632: inode #3: comm syz.1.1854: corrupted inode contents [ 112.948504][ T8516] EXT4-fs (loop1): Remounting filesystem read-only [ 112.955726][ T8518] EXT4-fs error (device loop0): ext4_do_update_inode:5632: inode #3: comm syz.0.1855: corrupted inode contents [ 112.968195][ T8518] EXT4-fs (loop0): Remounting filesystem read-only [ 112.974898][ T8516] EXT4-fs (loop1): 1 truncate cleaned up [ 112.989306][ T8518] EXT4-fs (loop0): 1 truncate cleaned up [ 112.993278][ T8516] ext4 filesystem being mounted at /363/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 113.006327][ T8518] ext4 filesystem being mounted at /391/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 113.239312][ T8540] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1863'. [ 113.269178][ T8540] lo speed is unknown, defaulting to 1000 [ 113.279143][ T8537] loop4: detected capacity change from 0 to 1024 [ 113.324351][ T8537] EXT4-fs: Ignoring removed mblk_io_submit option [ 113.331979][ T8544] loop1: detected capacity change from 0 to 512 [ 113.369957][ T8544] ext4 filesystem being mounted at /366/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 113.413073][ T8537] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 113.440007][ T8546] vhci_hcd: default hub control req: 8017 v0006 i0003 l0 [ 113.579598][ T8562] loop3: detected capacity change from 0 to 1024 [ 113.593900][ T8540] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 113.635108][ T8537] netlink: 'syz.4.1862': attribute type 21 has an invalid length. [ 113.647263][ T8537] netlink: 132 bytes leftover after parsing attributes in process `syz.4.1862'. [ 113.659018][ T8537] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1862'. [ 113.699213][ T8570] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1872'. [ 113.782835][ T8570] lo speed is unknown, defaulting to 1000 [ 113.793755][ T8583] syz2: rxe_newlink: already configured on lo [ 113.811217][ T8583] EXT4-fs error (device loop3): ext4_mb_mark_diskspace_used:4193: comm syz.3.1869: Allocating blocks 497-513 which overlap fs metadata [ 113.879486][ T8585] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 113.938351][ T8589] selinux_netlink_send: 6 callbacks suppressed [ 113.938367][ T8589] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=8589 comm=syz.4.1878 [ 113.957040][ T8589] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=8589 comm=syz.4.1878 [ 114.026097][ T8570] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 114.051369][ T8593] vhci_hcd: default hub control req: 8017 v0006 i0003 l0 [ 114.266260][ T8599] loop1: detected capacity change from 0 to 1024 [ 114.276198][ T8599] EXT4-fs: Ignoring removed mblk_io_submit option [ 114.285707][ T8599] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 114.397110][ T8561] EXT4-fs (loop3): pa ffff888106a08b60: logic 16, phys. 129, len 24 [ 114.405304][ T8561] EXT4-fs error (device loop3): ext4_mb_release_inode_pa:5444: group 0, free 0, pa_free 1 [ 114.416877][ T8605] loop1: detected capacity change from 0 to 512 [ 114.424542][ T8605] EXT4-fs: Ignoring removed oldalloc option [ 114.452904][ T8605] ext4 filesystem being mounted at /373/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 114.461675][ T8608] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1884'. [ 114.504848][ T8612] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1885'. [ 114.526407][ T8612] lo speed is unknown, defaulting to 1000 [ 114.661622][ T8619] loop0: detected capacity change from 0 to 512 [ 114.668374][ T8619] EXT4-fs: Ignoring removed oldalloc option [ 114.676538][ T8622] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=8622 comm=syz.2.1887 [ 114.689026][ T8622] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=8622 comm=syz.2.1887 [ 114.705974][ T8612] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 114.755107][ T8619] ext4 filesystem being mounted at /395/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 114.817375][ T8632] loop2: detected capacity change from 0 to 1024 [ 114.869442][ T8632] rdma_rxe: rxe_newlink: failed to add lo [ 114.886617][ T8632] EXT4-fs error (device loop2): ext4_mb_mark_diskspace_used:4193: comm syz.2.1891: Allocating blocks 497-513 which overlap fs metadata [ 114.951781][ T8632] EXT4-fs (loop2): pa ffff888106a51f50: logic 16, phys. 129, len 24 [ 114.959949][ T8632] EXT4-fs error (device loop2): ext4_mb_release_inode_pa:5444: group 0, free 0, pa_free 1 [ 114.997297][ T29] kauditd_printk_skb: 682 callbacks suppressed [ 114.997315][ T29] audit: type=1326 audit(1763855739.552:10752): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8642 comm="syz.2.1895" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f67e5a1f749 code=0x7ffc0000 [ 115.055603][ T29] audit: type=1326 audit(1763855739.582:10753): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8642 comm="syz.2.1895" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f67e5a1f749 code=0x7ffc0000 [ 115.079233][ T29] audit: type=1326 audit(1763855739.582:10754): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8642 comm="syz.2.1895" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f67e5a1f749 code=0x7ffc0000 [ 115.102824][ T29] audit: type=1326 audit(1763855739.582:10755): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8642 comm="syz.2.1895" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f67e5a1f749 code=0x7ffc0000 [ 115.126359][ T29] audit: type=1326 audit(1763855739.582:10756): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8642 comm="syz.2.1895" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f67e5a1df90 code=0x7ffc0000 [ 115.149953][ T29] audit: type=1326 audit(1763855739.582:10757): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8642 comm="syz.2.1895" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f67e5a1f749 code=0x7ffc0000 [ 115.155177][ T8639] loop4: detected capacity change from 0 to 1024 [ 115.173458][ T29] audit: type=1326 audit(1763855739.582:10758): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8642 comm="syz.2.1895" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f67e5a1f749 code=0x7ffc0000 [ 115.173521][ T29] audit: type=1326 audit(1763855739.582:10759): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8642 comm="syz.2.1895" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f67e5a1f749 code=0x7ffc0000 [ 115.173556][ T29] audit: type=1326 audit(1763855739.582:10760): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8642 comm="syz.2.1895" exe="/root/syz-executor" sig=0 arch=c000003e syscall=83 compat=0 ip=0x7f67e5a1f749 code=0x7ffc0000 [ 115.173617][ T29] audit: type=1326 audit(1763855739.582:10761): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8642 comm="syz.2.1895" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f67e5a1f749 code=0x7ffc0000 [ 115.236810][ T8641] loop3: detected capacity change from 0 to 1024 [ 115.281185][ T8639] EXT4-fs: Ignoring removed mblk_io_submit option [ 115.311615][ T8641] EXT4-fs: Ignoring removed mblk_io_submit option [ 115.321435][ T8639] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 115.342792][ T8641] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 115.498976][ T8641] netlink: 'syz.3.1894': attribute type 21 has an invalid length. [ 115.513191][ T8641] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1894'. [ 115.522996][ T8641] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1894'. [ 115.593334][ T8657] vhci_hcd: default hub control req: 8017 v0006 i0003 l0 [ 115.628098][ T8665] loop1: detected capacity change from 0 to 512 [ 115.651802][ T8671] loop0: detected capacity change from 0 to 1024 [ 115.653881][ T8665] EXT4-fs: Ignoring removed nobh option [ 115.691860][ T8673] vhci_hcd: default hub control req: 8017 v0006 i0003 l0 [ 115.703524][ T8665] EXT4-fs error (device loop1): ext4_do_update_inode:5632: inode #3: comm syz.1.1903: corrupted inode contents [ 115.727174][ T8665] EXT4-fs (loop1): Remounting filesystem read-only [ 115.734388][ T8665] EXT4-fs (loop1): 1 truncate cleaned up [ 115.741031][ T8665] ext4 filesystem being mounted at /377/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 115.824276][ T8683] loop3: detected capacity change from 0 to 1024 [ 115.881350][ T8683] EXT4-fs: Ignoring removed mblk_io_submit option [ 115.917250][ T8683] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 115.972026][ T8685] loop0: detected capacity change from 0 to 1024 [ 115.989108][ T8685] EXT4-fs: Ignoring removed mblk_io_submit option [ 115.999658][ T8697] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=8697 comm=syz.1.1916 [ 116.012219][ T8697] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=8697 comm=syz.1.1916 [ 116.026539][ T8685] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 116.046591][ T8689] loop4: detected capacity change from 0 to 1024 [ 116.062227][ T8689] EXT4-fs: Ignoring removed mblk_io_submit option [ 116.072101][ T8689] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 116.279475][ T8714] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1919'. [ 116.319152][ T8716] loop0: detected capacity change from 0 to 1024 [ 116.335601][ T8689] netlink: 'syz.4.1913': attribute type 21 has an invalid length. [ 116.348856][ T8707] lo speed is unknown, defaulting to 1000 [ 116.400046][ T8718] loop3: detected capacity change from 0 to 512 [ 116.434372][ T8718] ext4 filesystem being mounted at /402/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 116.437107][ T8722] loop0: detected capacity change from 0 to 1024 [ 116.581331][ T8733] rdma_rxe: rxe_newlink: failed to add lo [ 116.592510][ T8733] EXT4-fs error (device loop0): ext4_mb_mark_diskspace_used:4193: comm syz.0.1923: Allocating blocks 497-513 which overlap fs metadata [ 116.630004][ T8739] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=8739 comm=syz.3.1928 [ 116.642636][ T8739] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=8739 comm=syz.3.1928 [ 116.744768][ T8707] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 116.755571][ T8747] loop3: detected capacity change from 0 to 1024 [ 116.910598][ T8754] vhci_hcd: default hub control req: 8017 v0006 i0003 l0 [ 116.999674][ T8770] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=8770 comm=syz.2.1941 [ 117.012200][ T8770] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=8770 comm=syz.2.1941 [ 117.019949][ T8769] loop3: detected capacity change from 0 to 512 [ 117.040196][ T8769] EXT4-fs: Ignoring removed oldalloc option [ 117.088625][ T8769] ext4 filesystem being mounted at /410/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 117.114594][ T8777] lo speed is unknown, defaulting to 1000 [ 117.151635][ T8787] loop2: detected capacity change from 0 to 1024 [ 117.196055][ T8787] rdma_rxe: rxe_newlink: failed to add lo [ 117.206378][ T8787] EXT4-fs error (device loop2): ext4_mb_mark_diskspace_used:4193: comm syz.2.1948: Allocating blocks 497-513 which overlap fs metadata [ 117.232258][ T8777] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 117.257965][ T8787] EXT4-fs (loop2): pa ffff888106a51e00: logic 16, phys. 129, len 24 [ 117.266052][ T8787] EXT4-fs error (device loop2): ext4_mb_release_inode_pa:5444: group 0, free 0, pa_free 1 [ 117.285638][ T8733] EXT4-fs (loop0): pa ffff888106a51e70: logic 16, phys. 129, len 24 [ 117.293686][ T8733] EXT4-fs error (device loop0): ext4_mb_release_inode_pa:5444: group 0, free 0, pa_free 1 [ 117.388916][ T8798] loop2: detected capacity change from 0 to 512 [ 117.391461][ T8794] lo speed is unknown, defaulting to 1000 [ 117.421308][ T8798] ext4 filesystem being mounted at /387/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 117.486080][ T8805] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 117.503650][ T8805] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 117.618442][ T8805] loop2: detected capacity change from 0 to 2048 [ 117.659495][ T8805] ext4 filesystem being mounted at /388/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 117.744280][ T8819] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 117.758675][ T8812] loop1: detected capacity change from 0 to 1024 [ 117.790064][ T8821] loop0: detected capacity change from 0 to 1024 [ 117.796742][ T8819] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 117.811061][ T8812] EXT4-fs: Ignoring removed mblk_io_submit option [ 117.832639][ T8819] __nla_validate_parse: 3 callbacks suppressed [ 117.832657][ T8819] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1953'. [ 117.858475][ T8819] xt_hashlimit: max too large, truncated to 1048576 [ 117.869705][ T8812] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 117.944197][ T8825] vhci_hcd: default hub control req: 8017 v0006 i0003 l0 [ 118.079539][ T8836] sch_tbf: burst 4398 is lower than device lo mtu (65550) ! [ 118.108271][ T8838] loop3: detected capacity change from 0 to 1024 [ 118.163889][ T8838] EXT4-fs error (device loop3): ext4_mb_mark_diskspace_used:4193: comm syz.3.1965: Allocating blocks 449-513 which overlap fs metadata [ 118.180989][ T8837] EXT4-fs (loop3): pa ffff888106a08cb0: logic 48, phys. 177, len 21 [ 118.189187][ T8837] EXT4-fs error (device loop3): ext4_mb_release_inode_pa:5444: group 0, free 0, pa_free 4 [ 118.386121][ T8858] vhci_hcd: default hub control req: 8017 v0006 i0003 l0 [ 118.526751][ T8869] netlink: 'syz.3.1977': attribute type 21 has an invalid length. [ 118.534767][ T8869] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1977'. [ 118.638704][ T2056] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm kworker/u8:6: bg 0: block 345: padding at end of block bitmap is not set [ 118.659214][ T2056] EXT4-fs (loop2): Remounting filesystem read-only [ 118.695151][ T8879] loop1: detected capacity change from 0 to 1024 [ 118.754421][ T8885] loop2: detected capacity change from 0 to 512 [ 118.756437][ T8879] rdma_rxe: rxe_newlink: failed to add lo [ 118.761252][ T8885] EXT4-fs: Ignoring removed nobh option [ 118.785252][ T8885] EXT4-fs error (device loop2): ext4_do_update_inode:5632: inode #3: comm syz.2.1981: corrupted inode contents [ 118.797833][ T8886] loop3: detected capacity change from 0 to 512 [ 118.798876][ T8879] EXT4-fs error (device loop1): ext4_mb_mark_diskspace_used:4193: comm syz.1.1983: Allocating blocks 497-513 which overlap fs metadata [ 118.819348][ T8886] EXT4-fs: Ignoring removed oldalloc option [ 118.845095][ T8886] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 118.852885][ T8878] EXT4-fs (loop1): pa ffff888106a08c40: logic 16, phys. 129, len 24 [ 118.855376][ T8885] EXT4-fs (loop2): Remounting filesystem read-only [ 118.863018][ T8878] EXT4-fs error (device loop1): ext4_mb_release_inode_pa:5444: group 0, free 0, pa_free 1 [ 118.878488][ T8885] EXT4-fs (loop2): 1 truncate cleaned up [ 118.886701][ T8885] ext4 filesystem being mounted at /389/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 118.906619][ T8886] EXT4-fs error (device loop3): ext4_free_branches:1023: inode #16: comm syz.3.1984: invalid indirect mapped block 4294967295 (level 0) [ 118.924092][ T8890] loop0: detected capacity change from 0 to 512 [ 118.954275][ T8890] ext4 filesystem being mounted at /406/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 118.954446][ T8886] EXT4-fs (loop3): Remounting filesystem read-only [ 118.971580][ T8886] EXT4-fs (loop3): 1 orphan inode deleted [ 118.977359][ T8886] EXT4-fs (loop3): 1 truncate cleaned up [ 118.995549][ T8899] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1986'. [ 119.012318][ T8899] openvswitch: netlink: Key 0 has unexpected len 2 expected 0 [ 119.072058][ T8905] netlink: 'syz.4.1990': attribute type 1 has an invalid length. [ 119.145170][ T8905] bridge0: Device is already in use. [ 119.228123][ T8920] loop0: detected capacity change from 0 to 512 [ 119.264037][ T8920] EXT4-fs: Ignoring removed nobh option [ 119.298451][ T8920] EXT4-fs error (device loop0): ext4_do_update_inode:5632: inode #3: comm syz.0.1997: corrupted inode contents [ 119.330676][ T8920] EXT4-fs (loop0): Remounting filesystem read-only [ 119.355455][ T8920] EXT4-fs (loop0): 1 truncate cleaned up [ 119.368294][ T8936] loop1: detected capacity change from 0 to 512 [ 119.371160][ T8928] lo speed is unknown, defaulting to 1000 [ 119.387480][ T8920] ext4 filesystem being mounted at /409/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 119.415820][ T8936] EXT4-fs: Ignoring removed nobh option [ 119.434758][ T8939] netlink: 'syz.3.2002': attribute type 12 has an invalid length. [ 119.458358][ T8936] EXT4-fs error (device loop1): ext4_do_update_inode:5632: inode #3: comm syz.1.2003: corrupted inode contents [ 119.494578][ T8947] netlink: 56 bytes leftover after parsing attributes in process `syz.0.2009'. [ 119.505609][ T8936] EXT4-fs (loop1): Remounting filesystem read-only [ 119.514508][ T8936] EXT4-fs (loop1): 1 truncate cleaned up [ 119.525911][ T8936] ext4 filesystem being mounted at /401/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 119.578542][ T8956] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 119.664646][ T8965] loop0: detected capacity change from 0 to 1024 [ 119.705649][ T8965] EXT4-fs error (device loop0): ext4_mb_mark_diskspace_used:4193: comm syz.0.2016: Allocating blocks 449-513 which overlap fs metadata [ 119.743880][ T8963] EXT4-fs (loop0): pa ffff888106a08d20: logic 48, phys. 177, len 21 [ 119.752044][ T8963] EXT4-fs error (device loop0): ext4_mb_release_inode_pa:5444: group 0, free 0, pa_free 4 [ 119.830142][ T8976] loop4: detected capacity change from 0 to 512 [ 119.873183][ T8976] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.2021: bg 0: block 248: padding at end of block bitmap is not set [ 119.898773][ T8976] EXT4-fs error (device loop4): ext4_acquire_dquot:6945: comm syz.4.2021: Failed to acquire dquot type 1 [ 119.909002][ T8977] vhci_hcd: default hub control req: 8017 v0006 i0003 l0 [ 119.922137][ T8976] EXT4-fs (loop4): 1 truncate cleaned up [ 119.933066][ T8976] ext4 filesystem being mounted at /375/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 119.947866][ T8976] FAULT_INJECTION: forcing a failure. [ 119.947866][ T8976] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 119.960981][ T8976] CPU: 1 UID: 0 PID: 8976 Comm: syz.4.2021 Not tainted syzkaller #0 PREEMPT(voluntary) [ 119.961013][ T8976] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 119.961034][ T8976] Call Trace: [ 119.961083][ T8976] [ 119.961092][ T8976] __dump_stack+0x1d/0x30 [ 119.961121][ T8976] dump_stack_lvl+0xe8/0x140 [ 119.961190][ T8976] dump_stack+0x15/0x1b [ 119.961211][ T8976] should_fail_ex+0x265/0x280 [ 119.961334][ T8976] should_fail+0xb/0x20 [ 119.961381][ T8976] should_fail_usercopy+0x1a/0x20 [ 119.961406][ T8976] _copy_from_user+0x1c/0xb0 [ 119.961500][ T8976] __sys_bpf+0x183/0x7c0 [ 119.961590][ T8976] __x64_sys_bpf+0x41/0x50 [ 119.961657][ T8976] x64_sys_call+0x2aee/0x3000 [ 119.961690][ T8976] do_syscall_64+0xd2/0x200 [ 119.961715][ T8976] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 119.961822][ T8976] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 119.961855][ T8976] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 119.961919][ T8976] RIP: 0033:0x7f5a1055f749 [ 119.961936][ T8976] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 119.961956][ T8976] RSP: 002b:00007f5a0efbf038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 119.962045][ T8976] RAX: ffffffffffffffda RBX: 00007f5a107b5fa0 RCX: 00007f5a1055f749 [ 119.962057][ T8976] RDX: 0000000000000094 RSI: 00002000000000c0 RDI: 0000000000000005 [ 119.962068][ T8976] RBP: 00007f5a0efbf090 R08: 0000000000000000 R09: 0000000000000000 [ 119.962080][ T8976] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 119.962094][ T8976] R13: 00007f5a107b6038 R14: 00007f5a107b5fa0 R15: 00007ffefb2a48e8 [ 119.962119][ T8976] [ 120.136237][ T8984] loop0: detected capacity change from 0 to 512 [ 120.142537][ T29] kauditd_printk_skb: 639 callbacks suppressed [ 120.142553][ T29] audit: type=1326 audit(1763855744.692:11391): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8964 comm="syz.1.2017" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7faf25b865e7 code=0x7ffc0000 [ 120.172314][ T29] audit: type=1326 audit(1763855744.692:11392): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8964 comm="syz.1.2017" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7faf25b2b829 code=0x7ffc0000 [ 120.195783][ T29] audit: type=1326 audit(1763855744.692:11393): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8964 comm="syz.1.2017" exe="/root/syz-executor" sig=0 arch=c000003e syscall=449 compat=0 ip=0x7faf25b8f749 code=0x7ffc0000 [ 120.224662][ T29] audit: type=1326 audit(1763855744.692:11394): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8964 comm="syz.1.2017" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7faf25b865e7 code=0x7ffc0000 [ 120.231993][ T8984] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.2023: bg 0: block 248: padding at end of block bitmap is not set [ 120.248154][ T29] audit: type=1326 audit(1763855744.692:11395): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8964 comm="syz.1.2017" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7faf25b2b829 code=0x7ffc0000 [ 120.285926][ T29] audit: type=1326 audit(1763855744.692:11396): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8964 comm="syz.1.2017" exe="/root/syz-executor" sig=0 arch=c000003e syscall=449 compat=0 ip=0x7faf25b8f749 code=0x7ffc0000 [ 120.309736][ T29] audit: type=1326 audit(1763855744.722:11397): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8964 comm="syz.1.2017" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7faf25b865e7 code=0x7ffc0000 [ 120.330061][ T8984] Quota error (device loop0): write_blk: dquota write failed [ 120.333329][ T29] audit: type=1326 audit(1763855744.722:11398): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8964 comm="syz.1.2017" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7faf25b2b829 code=0x7ffc0000 [ 120.340667][ T8984] Quota error (device loop0): qtree_write_dquot: Error -117 occurred while creating quota [ 120.346937][ T8984] EXT4-fs error (device loop0): ext4_acquire_dquot:6945: comm syz.0.2023: Failed to acquire dquot type 1 [ 120.397188][ T8984] EXT4-fs (loop0): 1 truncate cleaned up [ 120.403831][ T8984] ext4 filesystem being mounted at /414/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 120.465623][ T8999] loop3: detected capacity change from 0 to 512 [ 120.481548][ T2056] EXT4-fs error (device loop0): ext4_release_dquot:6981: comm kworker/u8:6: Failed to release dquot type 1 [ 120.490985][ T8996] lo speed is unknown, defaulting to 1000 [ 120.505347][ T9003] netlink: 'syz.2.2029': attribute type 12 has an invalid length. [ 120.525081][ T8999] ext4 filesystem being mounted at /434/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 120.536764][ T9000] loop4: detected capacity change from 0 to 512 [ 120.549750][ T9000] EXT4-fs: Ignoring removed oldalloc option [ 120.572317][ T9000] ext4 filesystem being mounted at /376/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 120.636833][ T9013] smc: net device hsr0 applied user defined pnetid SYZ2 [ 120.694628][ T9013] smc: net device hsr0 erased user defined pnetid SYZ2 [ 120.729533][ T9013] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 120.766017][ T9013] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 120.963029][ T9033] vhci_hcd: default hub control req: 8017 v0006 i0003 l0 [ 121.060306][ T9037] loop2: detected capacity change from 0 to 512 [ 121.086896][ T9037] ext4 filesystem being mounted at /400/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 121.293631][ T9060] vhci_hcd: default hub control req: 8017 v0006 i0003 l0 [ 121.371936][ T9070] loop2: detected capacity change from 0 to 512 [ 121.383782][ T9072] capability: warning: `syz.4.2055' uses 32-bit capabilities (legacy support in use) [ 121.395642][ T9070] ext4 filesystem being mounted at /402/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 121.444184][ T9079] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 121.488995][ T9084] loop2: detected capacity change from 0 to 512 [ 121.499765][ T9084] EXT4-fs: Ignoring removed nobh option [ 121.517075][ T9084] EXT4-fs error (device loop2): ext4_do_update_inode:5632: inode #3: comm syz.2.2060: corrupted inode contents [ 121.530085][ T9084] EXT4-fs (loop2): Remounting filesystem read-only [ 121.537402][ T9084] EXT4-fs (loop2): 1 truncate cleaned up [ 121.575871][ T9084] ext4 filesystem being mounted at /403/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 121.609566][ T9094] netlink: 960 bytes leftover after parsing attributes in process `syz.1.2065'. [ 121.668322][ T9094] netdev?…q­: renamed from gre0 (while UP) [ 121.706927][ T9094] netdev?…q­: entered allmulticast mode [ 121.712816][ T9094] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2065'. [ 121.721888][ T9094] A link change request failed with some changes committed already. Interface netdev?…q­ may have been left with an inconsistent configuration, please check. [ 124.078475][ T9104] selinux_netlink_send: 2 callbacks suppressed [ 124.078493][ T9104] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=9104 comm=syz.3.2070 [ 124.097223][ T9104] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=9104 comm=syz.3.2070 [ 124.110585][ T9107] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=9107 comm=syz.2.2072 [ 124.123200][ T9107] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=9107 comm=syz.2.2072 [ 124.269702][ T9123] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 124.299149][ T9118] hub 2-0:1.0: USB hub found [ 124.305459][ T9125] loop1: detected capacity change from 0 to 1024 [ 124.312085][ T9118] hub 2-0:1.0: 8 ports detected [ 124.373019][ T9132] loop2: detected capacity change from 0 to 1024 [ 124.379554][ T9131] lo speed is unknown, defaulting to 1000 [ 124.385670][ T9132] EXT4-fs: Ignoring removed orlov option [ 124.392393][ T9132] ext4: Unknown parameter 'obj_type' [ 124.420712][ T9132] 9pnet_fd: Insufficient options for proto=fd [ 124.427697][ T9132] netlink: 56 bytes leftover after parsing attributes in process `syz.2.2081'. [ 124.450367][ T9133] rdma_rxe: rxe_newlink: failed to add lo [ 124.461630][ T9136] EXT4-fs error (device loop1): ext4_mb_mark_diskspace_used:4193: comm syz.1.2079: Allocating blocks 497-513 which overlap fs metadata [ 124.540301][ T9131] netlink: 'syz.0.2080': attribute type 12 has an invalid length. [ 124.571135][ T9139] loop4: detected capacity change from 0 to 1024 [ 124.610827][ T9139] EXT4-fs: Ignoring removed mblk_io_submit option [ 124.653856][ T9139] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 124.686217][ T9153] loop2: detected capacity change from 0 to 512 [ 124.707866][ T9153] ext4 filesystem being mounted at /413/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 124.936453][ T9168] macvlan1: entered promiscuous mode [ 124.942762][ T9168] ipvlan0: entered promiscuous mode [ 124.949238][ T9168] ipvlan0: left promiscuous mode [ 124.955623][ T9168] macvlan1: left promiscuous mode [ 124.986111][ T36] IPVS: starting estimator thread 0... [ 124.991708][ T9169] x_tables: duplicate underflow at hook 2 [ 125.002973][ T9171] vhci_hcd: default hub control req: 8017 v0006 i0003 l0 [ 125.105429][ T9170] IPVS: using max 1920 ests per chain, 96000 per kthread [ 125.143944][ T9125] EXT4-fs (loop1): pa ffff888106a08c40: logic 16, phys. 129, len 24 [ 125.152011][ T9125] EXT4-fs error (device loop1): ext4_mb_release_inode_pa:5444: group 0, free 0, pa_free 1 [ 125.287952][ T9196] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 125.340534][ T9193] loop1: detected capacity change from 0 to 128 [ 125.363072][ T9195] loop2: detected capacity change from 0 to 1024 [ 125.382099][ T9195] EXT4-fs: Ignoring removed mblk_io_submit option [ 125.396011][ T29] kauditd_printk_skb: 758 callbacks suppressed [ 125.396028][ T29] audit: type=1400 audit(1763855749.942:12154): avc: denied { mount } for pid=9191 comm="syz.1.2102" name="/" dev="loop1" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=filesystem permissive=1 [ 125.426981][ T9195] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 125.557495][ T9195] netlink: 'syz.2.2103': attribute type 21 has an invalid length. [ 125.568901][ T9195] netlink: 132 bytes leftover after parsing attributes in process `syz.2.2103'. [ 125.579383][ T9195] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2103'. [ 125.638765][ T9202] netlink: 5 bytes leftover after parsing attributes in process `syz.2.2104'. [ 125.648281][ T9202] 1ªî{X¹¦: renamed from 30ªî{X¹¦ (while UP) [ 125.658789][ T9202] A link change request failed with some changes committed already. Interface 31ªî{X¹¦ may have been left with an inconsistent configuration, please check. [ 125.677767][ T9202] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=9202 comm=syz.2.2104 [ 125.690292][ T9202] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=9202 comm=syz.2.2104 [ 125.776377][ T9206] batman_adv: batadv0: Removing interface: macvtap1 [ 125.783592][ T9206] batman_adv: batadv0: Removing interface: macvtap2 [ 125.790900][ T9206] batman_adv: batadv0: Interface deactivated: macvtap3 [ 125.798090][ T9206] batman_adv: batadv0: Removing interface: macvtap3 [ 125.805612][ T9206] batman_adv: batadv0: Interface deactivated: macvtap4 [ 125.812515][ T9206] batman_adv: batadv0: Removing interface: macvtap4 [ 125.819898][ T9206] batman_adv: batadv0: Interface deactivated: macvtap5 [ 125.826831][ T9206] batman_adv: batadv0: Removing interface: macvtap5 [ 125.846771][ T29] audit: type=1400 audit(1763855750.402:12155): avc: denied { unmount } for pid=3317 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=filesystem permissive=1 [ 125.876144][ T9208] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 125.937960][ T9211] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 126.007844][ T29] audit: type=1326 audit(1763855750.552:12156): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9214 comm="syz.4.2109" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5a1055f749 code=0x7ffc0000 [ 126.007933][ T29] audit: type=1326 audit(1763855750.552:12157): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9214 comm="syz.4.2109" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5a1055f749 code=0x7ffc0000 [ 126.008047][ T29] audit: type=1326 audit(1763855750.562:12158): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9214 comm="syz.4.2109" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f5a1055f749 code=0x7ffc0000 [ 126.008074][ T29] audit: type=1326 audit(1763855750.562:12159): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9214 comm="syz.4.2109" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5a1055f749 code=0x7ffc0000 [ 126.008105][ T29] audit: type=1326 audit(1763855750.562:12160): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9214 comm="syz.4.2109" exe="/root/syz-executor" sig=0 arch=c000003e syscall=291 compat=0 ip=0x7f5a1055f749 code=0x7ffc0000 [ 126.008140][ T29] audit: type=1326 audit(1763855750.562:12161): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9214 comm="syz.4.2109" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5a1055f749 code=0x7ffc0000 [ 126.008195][ T29] audit: type=1326 audit(1763855750.562:12162): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9214 comm="syz.4.2109" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f5a1055df90 code=0x7ffc0000 [ 126.008229][ T29] audit: type=1326 audit(1763855750.562:12163): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9214 comm="syz.4.2109" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5a1055f749 code=0x7ffc0000 [ 126.113754][ T9218] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 126.373456][ T9235] sch_tbf: burst 4398 is lower than device lo mtu (65550) ! [ 126.411005][ T9234] vhci_hcd: default hub control req: 8017 v0006 i0003 l0 [ 126.445082][ T9239] vlan1: entered allmulticast mode [ 126.450337][ T9239] hsr0: entered allmulticast mode [ 126.455519][ T9239] hsr_slave_0: entered allmulticast mode [ 126.461165][ T9239] hsr_slave_1: entered allmulticast mode [ 126.471343][ T9240] sch_tbf: burst 4398 is lower than device lo mtu (65550) ! [ 126.574050][ T9245] lo speed is unknown, defaulting to 1000 [ 126.622204][ T9246] netlink: 'syz.2.2120': attribute type 12 has an invalid length. [ 126.687579][ T9252] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=9252 comm=syz.2.2122 [ 126.700122][ T9252] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=9252 comm=syz.2.2122 [ 127.102595][ T9266] vhci_hcd: default hub control req: 8017 v0006 i0003 l0 [ 127.167775][ T9270] netlink: 5 bytes leftover after parsing attributes in process `syz.1.2130'. [ 127.177057][ T9270] 1ªî{X¹¦: renamed from 30ªî{X¹¦ (while UP) [ 127.185173][ T9270] A link change request failed with some changes committed already. Interface 31ªî{X¹¦ may have been left with an inconsistent configuration, please check. [ 127.204385][ T9270] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=9270 comm=syz.1.2130 [ 127.216856][ T9270] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=9270 comm=syz.1.2130 [ 127.259191][ T9274] netlink: 5 bytes leftover after parsing attributes in process `syz.0.2133'. [ 127.275606][ T9274] 0ªî{X¹¦: renamed from 31ªî{X¹¦ (while UP) [ 127.284411][ T9274] A link change request failed with some changes committed already. Interface 30ªî{X¹¦ may have been left with an inconsistent configuration, please check. [ 127.350499][ T9269] vhci_hcd: default hub control req: 8017 v0006 i0003 l0 [ 127.413414][ T9291] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 127.449056][ T9290] vhci_hcd: default hub control req: 8017 v0006 i0003 l0 [ 127.543288][ T9300] loop2: detected capacity change from 0 to 128 [ 127.576430][ T9298] lo speed is unknown, defaulting to 1000 [ 127.732764][ T9300] ================================================================== [ 127.740887][ T9300] BUG: KCSAN: data-race in __writeback_single_inode / xas_set_mark [ 127.748805][ T9300] [ 127.751151][ T9300] write to 0xffff88811a6a5714 of 4 bytes by task 9303 on cpu 0: [ 127.758803][ T9300] xas_set_mark+0x12b/0x140 [ 127.763320][ T9300] tag_pages_for_writeback+0xc2/0x290 [ 127.768707][ T9300] writeback_iter+0x340/0x820 [ 127.773393][ T9300] mpage_writepages+0x87/0x1250 [ 127.778259][ T9300] fat_writepages+0x24/0x30 [ 127.782777][ T9300] do_writepages+0x1c6/0x310 [ 127.787379][ T9300] file_write_and_wait_range+0x156/0x2c0 [ 127.793029][ T9300] __generic_file_fsync+0x46/0x140 [ 127.798148][ T9300] fat_file_fsync+0x49/0x100 [ 127.802746][ T9300] vfs_fsync_range+0x10d/0x130 [ 127.807524][ T9300] generic_file_write_iter+0x1b8/0x2f0 [ 127.813012][ T9300] iter_file_splice_write+0x666/0xa60 [ 127.818394][ T9300] direct_splice_actor+0x156/0x2a0 [ 127.823515][ T9300] splice_direct_to_actor+0x312/0x680 [ 127.828898][ T9300] do_splice_direct+0xda/0x150 [ 127.833674][ T9300] do_sendfile+0x380/0x650 [ 127.838104][ T9300] __x64_sys_sendfile64+0x105/0x150 [ 127.843319][ T9300] x64_sys_call+0x2bb4/0x3000 [ 127.848006][ T9300] do_syscall_64+0xd2/0x200 [ 127.852518][ T9300] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 127.858417][ T9300] [ 127.860740][ T9300] read to 0xffff88811a6a5714 of 4 bytes by task 9300 on cpu 1: [ 127.868282][ T9300] __writeback_single_inode+0x1f9/0x7c0 [ 127.873835][ T9300] writeback_single_inode+0x16d/0x3f0 [ 127.879236][ T9300] sync_inode_metadata+0x5b/0x90 [ 127.884211][ T9300] __generic_file_fsync+0xf8/0x140 [ 127.889331][ T9300] fat_file_fsync+0x49/0x100 [ 127.893930][ T9300] vfs_fsync_range+0x10d/0x130 [ 127.898711][ T9300] generic_file_write_iter+0x1b8/0x2f0 [ 127.904178][ T9300] iter_file_splice_write+0x666/0xa60 [ 127.909557][ T9300] direct_splice_actor+0x156/0x2a0 [ 127.914679][ T9300] splice_direct_to_actor+0x312/0x680 [ 127.920059][ T9300] do_splice_direct+0xda/0x150 [ 127.924830][ T9300] do_sendfile+0x380/0x650 [ 127.929267][ T9300] __x64_sys_sendfile64+0x105/0x150 [ 127.934481][ T9300] x64_sys_call+0x2bb4/0x3000 [ 127.939271][ T9300] do_syscall_64+0xd2/0x200 [ 127.943779][ T9300] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 127.949677][ T9300] [ 127.951999][ T9300] value changed: 0x02000021 -> 0x04000021 [ 127.957714][ T9300] [ 127.960034][ T9300] Reported by Kernel Concurrency Sanitizer on: [ 127.966182][ T9300] CPU: 1 UID: 0 PID: 9300 Comm: syz.2.2143 Not tainted syzkaller #0 PREEMPT(voluntary) [ 127.975902][ T9300] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 127.985961][ T9300] ================================================================== [ 128.001696][ T9319] vhci_hcd: default hub control req: 8017 v0006 i0003 l0 [ 128.026047][ T9300] syz.2.2143: attempt to access beyond end of device [ 128.026047][ T9300] loop2: rw=2049, sector=128, nr_sectors = 1 limit=128 [ 128.039618][ T9300] Buffer I/O error on dev loop2, logical block 128, lost async page write [ 128.049103][ T9303] syz.2.2143: attempt to access beyond end of device [ 128.049103][ T9303] loop2: rw=2049, sector=128, nr_sectors = 1 limit=128 [ 128.062592][ T9303] Buffer I/O error on dev loop2, logical block 128, lost async page write