last executing test programs: 4m15.443519143s ago: executing program 4 (id=74): r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x9, 0x690bb, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x3, 0x6, 0x2, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x1) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x100a0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1, @perf_bp={0x0}, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2ef}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x4, 0x510, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_bp={0x0}, 0x0, 0x10000, 0x0, 0x3, 0x8, 0xcdb0, 0x0, 0x0, 0x0, 0x0, 0x2000000020000006}, 0x0, 0xffffffffffffffff, r0, 0x2) socket$inet_tcp(0x2, 0x1, 0x0) close(0x3) r1 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r1, &(0x7f0000000200)={0x2, 0x4e24, @remote}, 0x10) 4m15.302410331s ago: executing program 4 (id=76): perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x63, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}, 0x0, 0x0, 0x800000, 0x6, 0x2, 0xcb, 0xffff, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xfff7ffffffffffff, 0xffffffffffffffff, 0x8) socket$rxrpc(0x21, 0x2, 0xa) bpf$MAP_CREATE(0x0, 0x0, 0x50) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="58000000020605000000000000000000000000000900020073797a3100000000050005000a000000050001000600000013000300686173683a6e65742c696661636500000c0007800800124005000000050004"], 0x58}, 0x1, 0x0, 0x0, 0x1}, 0x880) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x300000f, 0x20c44fb6edc09a38, 0xffffffffffffffff, 0x0) 4m13.42652115s ago: executing program 4 (id=84): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0xfdffa000) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$IP6T_SO_GET_INFO(r0, 0x29, 0x40, 0x0, &(0x7f0000000040)) unshare(0x6070200) prctl$PR_GET_THP_DISABLE(0x2a) prctl$PR_GET_THP_DISABLE(0x2a) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000000)=@filter={'filter\x00', 0x4, 0x4, 0x400, 0xffffffff, 0x398, 0xe8, 0x398, 0xfeffffff, 0xffffffff, 0x468, 0x468, 0x468, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@dev={0xfe, 0x80, '\x00', 0x29}, @private2, [0xffffffff, 0xff000000, 0xff, 0xffffff00], [0xffffff00, 0xffffffff, 0xff000000, 0xffffffff], 'hsr0\x00', 'sit0\x00', {}, {}, 0x87, 0x3, 0x4, 0x5}, 0x2f2, 0xa8, 0xe8}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00', 0x0, 0x5, {0x7}}}}, {{@ipv6={@private2, @empty, [0xff], [0x0, 0x0, 0xff000000], 'sit0\x00', 'batadv_slave_1\x00', {}, {}, 0x0, 0x0, 0x6}, 0x0, 0x138, 0x178, 0x0, {}, [@common=@srh1={{0x90}, {0x2, 0xe, 0x6, 0x5, 0x9, @remote, @local, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, [0x0, 0xff, 0xffffff00, 0xffffff00], [0xff, 0xffffff00, 0xff, 0xffffff00], [0x0, 0xffffffff, 0x0, 0xff], 0x1010, 0x11}}]}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00', 0x0, 0x1, {0x2000010}}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @REJECT={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x460) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, @perf_config_ext={0x4, 0x100}, 0x6000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r2) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) r4 = syz_open_dev$usbfs(&(0x7f0000000480), 0x77, 0x141341) ioctl$sock_inet_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f00000000c0)={0x0, {0x2, 0x4e23, @empty}, {0x2, 0x4e22, @loopback}, {0x2, 0x4e24, @multicast1}, 0x8, 0x0, 0x0, 0x0, 0x8, 0x0, 0x8, 0x6, 0x4}) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) ioctl$USBDEVFS_CONTROL(r4, 0xc0185500, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x4) 4m12.602821328s ago: executing program 4 (id=94): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="58000000020605000000000000000000000000000900020073797a3100000000050005000a000000050001000600000013000300686173683a6e65742c696661636500000c0007800800124005000000050004"], 0x58}, 0x1, 0x0, 0x0, 0x1}, 0x880) 4m11.493495483s ago: executing program 4 (id=103): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000340)=0x6) openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x90) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000001680)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{r5}, &(0x7f0000000200), &(0x7f0000000240)}, 0x20) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000bc0)=ANY=[@ANYBLOB="1808000000000000000000000000000018120000", @ANYRES32=r5, @ANYBLOB="0000000000000000b703000000000000850000000c000000b7000000000000001801000000082c2500000000002120207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000700000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r3, 0x1, 0x32, &(0x7f00000000c0)=r6, 0x4) sendmsg$inet(r4, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) 4m10.090143735s ago: executing program 4 (id=110): perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x3, 0x1d459d, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0x183, 0x1e}, 0x6025, 0x4005, 0xb, 0x0, 0x1, 0x1, 0xb, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$lock(0xffffffffffffffff, 0x6, 0x0) fcntl$setstatus(0xffffffffffffffff, 0x403, 0x26c00) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x9400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x2, @perf_config_ext={0x9, 0x7}, 0x100, 0xa88, 0x8406, 0x5, 0x0, 0x3c, 0xffff, 0x0, 0x0, 0x0, 0x46}, 0x0, 0xffbfffffffffffff, 0xffffffffffffffff, 0x1) r0 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000540)=0x2, 0x4) connect$inet(r0, &(0x7f0000000040)={0x2, 0x4e23, @remote}, 0x10) setsockopt$ARPT_SO_SET_ADD_COUNTERS(r0, 0x0, 0x61, &(0x7f0000000080)={'filter\x00', 0x4}, 0x68) cachestat(0xffffffffffffffff, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x2, 0xc3072, 0xffffffffffffffff, 0x200000) r1 = socket(0xa, 0x2, 0x0) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20, 0xfffffffd, @mcast2={0xff, 0x5}, 0x1ff}, 0x1c) 4m9.915314785s ago: executing program 32 (id=110): perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x3, 0x1d459d, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0x183, 0x1e}, 0x6025, 0x4005, 0xb, 0x0, 0x1, 0x1, 0xb, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$lock(0xffffffffffffffff, 0x6, 0x0) fcntl$setstatus(0xffffffffffffffff, 0x403, 0x26c00) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x9400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x2, @perf_config_ext={0x9, 0x7}, 0x100, 0xa88, 0x8406, 0x5, 0x0, 0x3c, 0xffff, 0x0, 0x0, 0x0, 0x46}, 0x0, 0xffbfffffffffffff, 0xffffffffffffffff, 0x1) r0 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000540)=0x2, 0x4) connect$inet(r0, &(0x7f0000000040)={0x2, 0x4e23, @remote}, 0x10) setsockopt$ARPT_SO_SET_ADD_COUNTERS(r0, 0x0, 0x61, &(0x7f0000000080)={'filter\x00', 0x4}, 0x68) cachestat(0xffffffffffffffff, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x2, 0xc3072, 0xffffffffffffffff, 0x200000) r1 = socket(0xa, 0x2, 0x0) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20, 0xfffffffd, @mcast2={0xff, 0x5}, 0x1ff}, 0x1c) 3m11.096621765s ago: executing program 2 (id=719): mkdirat(0xffffffffffffff9c, &(0x7f0000000540)='./file7\x00', 0x1c0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x2c, r1, 0x1, 0x0, 0x0, {0x10}, [@ETHTOOL_A_COALESCE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'lo\x00'}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x880}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000080)={0x10, 0x2, &(0x7f0000000040)=ANY=[@ANYBLOB="91104d000000000095"], &(0x7f0000000000)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) mknodat(0xffffffffffffff9c, &(0x7f0000000600)='./file7\x00', 0x81c0, 0x0) socketpair$unix(0x1, 0x4, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x1, 0x6, 0xf, 0x8, 0x41}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r3}, &(0x7f0000000180), &(0x7f00000001c0)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x7, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe5}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x3a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r4}, 0xc) bind$unix(r2, &(0x7f0000000040)=@abs={0x1, 0x0, 0x4e21}, 0x6e) 3m11.02621486s ago: executing program 2 (id=720): sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20000010}, 0x4008040) r0 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r0, &(0x7f0000000400)={0x18, 0x0, {0x2, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xa}, 'lo\x00'}}, 0x1e) sendmsg$ETHTOOL_MSG_TSINFO_GET(0xffffffffffffffff, 0x0, 0x0) sendmmsg(r0, 0x0, 0x0, 0x0) 3m10.992143391s ago: executing program 2 (id=722): r0 = syz_io_uring_setup(0x1ec3, &(0x7f0000000080)={0x0, 0x6a5f, 0x0, 0x1, 0x386}, &(0x7f0000000000), &(0x7f0000000140)) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6}]}) symlinkat(0x0, 0xffffffffffffff9c, 0x0) io_uring_register$IORING_UNREGISTER_RING_FDS(r0, 0x24, &(0x7f00000034c0)=[{0x0, 0x0, 0x0, 0x0, 0x0}], 0x1) 3m10.125173032s ago: executing program 2 (id=739): socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, 0x0, 0x4) r0 = syz_open_procfs(0xffffffffffffffff, 0x0) lseek(r0, 0x1000000, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x8, 0x441e, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x4}, 0x0, 0x10000, 0x8, 0x1, 0x8, 0x2020005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000001c0)='./file2\x00', 0x404, &(0x7f0000000300)={[{@init_itable_val}, {@jqfmt_vfsold}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x6a}}, {@jqfmt_vfsold}, {@minixdf}, {@quota}]}, 0x3, 0x442, &(0x7f0000001180)="$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") mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27ffff7, 0x4012011, 0xffffffffffffffff, 0x0) copy_file_range(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x863, 0x0) r1 = getpid() r2 = syz_pidfd_open(r1, 0x0) setns(r2, 0x24020000) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount$bind(&(0x7f0000000200)='.\x00', &(0x7f00000004c0)='./file0\x00', 0x0, 0x2125099, 0x0) mount$bind(&(0x7f0000000040)='.\x00', &(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x2a05404, 0x0) open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) umount2(0x0, 0x2) unlinkat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x200) 3m9.81451718s ago: executing program 2 (id=746): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000002080)=@newtaction={0xe68, 0x30, 0x25, 0x0, 0x0, {}, [{0xe54, 0x1, [@m_pedit={0xe50, 0x1, 0x0, 0x0, {{0xa}, {0xe24, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS_EX={0xe20, 0x4, {{{}, 0x2}, [{0x0, 0x0, 0xffffffff}, {}, {}, {}, {}, {0x0, 0x5, 0x0, 0x0, 0x0, 0x20000000}, {}, {}, {0x8, 0x0, 0x0, 0x3}, {0x0, 0x0, 0x0, 0x20000}, {}, {}, {0x0, 0x9}, {0x1}, {0x0, 0x0, 0x0, 0x0, 0xfffffffe}, {}, {}, {0x0, 0x7}, {0x0, 0x0, 0x0, 0xfffffffd}, {}, {0x0, 0x2}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, {0xfffffffc}, {0xfffffffe}, {}, {0x81}, {}, {0x0, 0x10000}, {}, {0x0, 0x0, 0x0, 0x4}, {}, {}, {}, {}, {0x0, 0x1}, {0x7}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, {}, {0x0, 0x0, 0x0, 0x0, 0x80}, {}, {0x0, 0x800000}, {}, {}, {}, {0x0, 0x0, 0x2, 0x8}, {0x4, 0x4000000, 0x0, 0x8000}, {}, {0x0, 0x80000000}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x4}, {}, {}, {0x0, 0x3}, {}, {}, {0x0, 0x3}, {0x0, 0x0, 0x0, 0x4}, {0x0, 0x0, 0x0, 0x2, 0xfffffffd}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x100000}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x3}, {}, {}, {0x3}, {}, {}, {}, {}, {0xfffffffd}, {}, {}, {0x0, 0x0, 0x1, 0x0, 0x747}, {0x8}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x9}, {}, {}, {}, {0x0, 0x200}, {}, {}, {}, {0xfffffffd}, {}, {}, {}, {0x0, 0x0, 0x0, 0x6}, {0x0, 0x6, 0x0, 0x0, 0x2}, {}, {}, {}, {}, {}, {}, {0x0, 0x5}], [{0x2}, {}, {0x4, 0x1}, {}, {}, {}, {}, {0x2}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x5}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x5}, {0x0, 0x1}]}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xe68}}, 0x0) r1 = openat2$dir(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)={0x102, 0x124, 0x2}, 0x18) r2 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_USER_TTY(r2, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="900000006404020027bd7000fedbdf2530fdb1a8bcf8c892ddaf51e7dff74387b9489db4595fdc96a66712cfd97c9163aa6cd9ed0bcf7ebf2f742abc058a008c4e70f623730a43dcb05db1ab0fbee5c6eaca6eff0cab60f25c6b1e327a3c6b2e35274db548c8b9a555a63c447756e84eedbf8eba516881beb8c236fe0a845b58699c9522ee88d7f5b99c4d3f22570000fa444760286562275e0cb2bf3ed3d658ffabbfddca0d45354ae66bc0d0bedb9aa4b007d6a54c0ce9eaf125871cff7851114ff85ccc6b86eaa5a40876a031fa0edc4e0ddaab16fc3ac30b9baf85ee1aa3da0d78256943e2fd6bfa315e522cd25ba5d973a84ac4088e7c35c0adef55206b8fdc01208639a0f700e181cded2539c78f836c9f6e1b158ad18d5c0efe56fb6ae7b7160371f94f3c4dc038c001cb2111ab421c95be6e021eef15781f72dc0a4b041a99"], 0x90}, 0x1, 0x0, 0x0, 0x20004000}, 0x890) mknodat(r1, &(0x7f00000000c0)='./file0\x00', 0x800, 0x7) 3m9.64986434s ago: executing program 1 (id=751): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'dvmrp1\x00', 0x7101}) ioctl$TUNGETVNETBE(r0, 0x800454df, &(0x7f0000000140)=0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, 0x0, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) r1 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_tcp_buf(r1, 0x6, 0x23, &(0x7f0000000040)=""/36, &(0x7f0000000200)=0x3b) r2 = socket$nl_route(0x10, 0x3, 0x0) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f0000000080)=0x0, &(0x7f00000000c0)=0x4) sendmsg$nl_route_sched(r2, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000100)={&(0x7f0000004000)=@newchain={0x5238, 0x64, 0x200, 0x70bd25, 0x25dfdbff, {0x0, 0x0, 0x0, r3, {0x10, 0x8}, {0x5, 0xfff2}, {0x69e3af2c88af29ce, 0xc}}, [@TCA_CHAIN={0x8, 0xb, 0x699}, @filter_kind_options=@f_flower={{0xb}, {0x2c, 0x2, [@TCA_FLOWER_KEY_ARP_SIP_MASK={0x8, 0x3a, 0xffffffff}, @TCA_FLOWER_KEY_IPV4_SRC_MASK={0x8, 0xb, 0xffffff00}, @TCA_FLOWER_KEY_FLAGS_MASK={0x8, 0x30, 0x8e}, @TCA_FLOWER_KEY_IP_PROTO={0x5, 0x9, 0x21}, @TCA_FLOWER_KEY_ICMPV6_CODE_MASK={0x5}]}}, @filter_kind_options=@f_flow={{0x9}, {0x51c8, 0x2, [@TCA_FLOW_PERTURB={0x8, 0xc, 0x8}, @TCA_FLOW_KEYS={0x8, 0x1, 0x6fb0}, @TCA_FLOW_XOR={0x8, 0x7, 0x4}, @TCA_FLOW_ACT={0x688, 0x9, 0x0, 0x1, [@m_tunnel_key={0x84, 0xc, 0x0, 0x0, {{0xf}, {0x4c, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_ENC_IPV4_DST={0x8, 0x4, @multicast2}, @TCA_TUNNEL_KEY_ENC_IPV4_SRC={0x8, 0x3, @private=0xa010102}, @TCA_TUNNEL_KEY_ENC_DST_PORT={0x6, 0x9, 0x4e23}, @TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{0xffffffff, 0xa994, 0x10000000, 0x7, 0x3}, 0x2}}, @TCA_TUNNEL_KEY_ENC_IPV6_DST={0x14, 0x6, @dev={0xfe, 0x80, '\x00', 0x22}}]}, {0x9, 0x6, "f6983f96f1"}, {0xc}, {0xc, 0x8, {0x2, 0x2}}}}, @m_gact={0x148, 0x17, 0x0, 0x0, {{0x9}, {0x28, 0x2, 0x0, 0x1, [@TCA_GACT_PROB={0xc, 0x3, {0x2, 0x2668}}, @TCA_GACT_PARMS={0x18, 0x2, {0x6, 0x87, 0x0, 0xd390}}]}, {0xf7, 0x6, "c59d13ac7299e5f4c427bd8204b2f7f087a4ee01588b00040250732c7761f74259bf498772a0501f4c75f42d5f038e712daf72f81d5c60e7f826a6d3a8b6bc3f24c0ad79f88a4b7df6c98921122bf748c6e09c28ffe8b18b5ec42371efaf2ad8bb2a635b695a23f24190500ab76a038c65e4b70b65b623dba5d8ed777921b001d25f3d23119b5e810cc113a683c097996f83a5a77679f9bebb572a9d250145bc8701cbe509dcf3c5eca2a14f796a8bf0a3d2f6e6a20ec848327a35792749cc24e8531e33c9475701bda05fbbb6abae56a9117c88234c9e6c69fcc879b083bcb3935b9e37038cf14b9e321cf1732149f084d877"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x2, 0x1}}}}, @m_skbmod={0x148, 0x1c, 0x0, 0x0, {{0xb}, {0x6c, 0x2, 0x0, 0x1, [@TCA_SKBMOD_PARMS={0x24, 0x2, {{0x9, 0x333529c, 0x7, 0x7, 0x3}}}, @TCA_SKBMOD_SMAC={0xa, 0x4, @broadcast}, @TCA_SKBMOD_DMAC={0xa, 0x3, @local}, @TCA_SKBMOD_SMAC={0xa, 0x4, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xd}}, @TCA_SKBMOD_SMAC={0xa, 0x4, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x33}}, @TCA_SKBMOD_SMAC={0xa}, @TCA_SKBMOD_ETYPE={0x6, 0x5, 0xfffd}]}, {0xb2, 0x6, "7eebcd3bd5dfbfdc828a82297fa503daa6bdb3b340b02eed460eb0a9e127d8009be194f5a6e45ae0978df457c217cb7e8832b9b2637bc582030841b308bfaa2c2cc1d263b24e5a458e403537b4fd68bca572690b9bc16971b4897cc3ee8d19e4de035b041929710e4d2f416bbfc826182ed3029171e662ec9fb6c06665c43d7d09a378553130319bfc7637417dc1c9a940bd12818e55aeab0d99949fe815e6a0c18434c82591600ddedd14e219c3"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x2}}}}, @m_bpf={0x124, 0x1b, 0x0, 0x0, {{0x8}, {0x10, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_NAME={0xc, 0x6, './file0\x00'}]}, {0xee, 0x6, "d0f3a809ef0d9867eee64b24971d94d03bca5ee13096634c559dbceda6e2679ebb9a77efa8a7a492a1e38b9cfe014238fc210af080d17046d4c66ba876b326aad8a8cad8645e5f0505e5550e329cc1f04fc11d3abec01883c46acd7f52e7e8bf4d19bfe285d204af4adcd3fe5c17ed7d59484f5beac867850f8f5b5902e0372e24396887d7a0352df8291b6e2d954efa26749bbbec04d075520bdb72539071aca608738c86af83d8f27d7afd55844f946b0bc519ca67e01dcd373a0304541f161cc234b4530abd4cad79a94d14a1397c4ce6a6b5bf578e265a38b11b8b2dd19b472b1768eefea8c400fa"}, {0xc}, {0xc, 0x8, {0x0, 0x3}}}}, @m_xt={0x24c, 0x1b, 0x0, 0x0, {{0x7}, {0x140, 0x2, 0x0, 0x1, [@TCA_IPT_TABLE={0x24, 0x1, 'mangle\x00'}, @TCA_IPT_HOOK={0x8, 0x2, 0x2}, @TCA_IPT_TABLE={0x24, 0x1, 'nat\x00'}, @TCA_IPT_HOOK={0x8, 0x2, 0x2}, @TCA_IPT_TARG={0xe3, 0x6, {0x4, 'nat\x00', 0x0, 0x9, "5019afe0d2662816e8563c229f82377eaa64dadcd96e60719f40842a9cb080e79a17fdfe4c2a02a87b1ac5c0bd489f1090e10f4b126923b9342bd4dd84fc05bb89a6bd3d401a431fbd83d8cdd05e765bd225b566b39fb84882e78b40d7bf8b95b98649687381be3dd0ecb88ea1abb88dd1e204aadc19935665c166d7eab79a43e2a53b140dbee3925a2097419a9ebb41ed37000c6995719277fef5302b625091f15519c731e1acc070c2bcab6ba1e132431c3fc759396c1eee"}}]}, {0xe8, 0x6, "cabf74bdcc0b4db0fcf4c8d5d02a9feb59f40ef8c482a1b22dd7cbf4246748be41d65067b5874eceee23ea6238ec8bce0a773c77b8fb7daa3640d426ab2b175d53b670eb82e3b8be10b43a57d03678898be30ec102fc8b633df4f80f46659f1d66fe51cc8115050340230fc69ab1c31f963908efcdfb73ee4fe1316833fcc6bb698ada2477c783be3a102aecb698c7acd967da78ffda5ca381eea64d22465e1a203e74483972bdf7cdc35e3f34d7791312cf98c35e4926c2e07b14e8a38cf0bcf51c6d31b4bac9845deb8245184de93d091ad6cff9c3b408ac2b73b3ed2e2cee93407499"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x3, 0x2}}}}]}, @TCA_FLOW_BASECLASS={0x8, 0x3, {0xe, 0xfff3}}, @TCA_FLOW_DIVISOR={0x8, 0x8, 0x2}, @TCA_FLOW_DIVISOR={0x8, 0x8, 0x8000}, @TCA_FLOW_ACT={0x4b04, 0x9, 0x0, 0x1, [@m_pedit={0x1da0, 0x2, 0x0, 0x0, {{0xa}, {0x1ca4, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS_EX={0xe68, 0x4, {{{0xb7f7, 0x6, 0x10000000, 0xe, 0x1}, 0x9, 0x4, [{0x8, 0x4863, 0xa6f, 0x16, 0x27, 0x6}, {0x81, 0x1, 0xf834, 0x0, 0x1acd, 0x8001}, {0x10001, 0x6a30, 0x6, 0x5, 0xfffffffe, 0xd84}]}, [{0x9, 0x0, 0x5, 0x2, 0x101}, {0xdd, 0x9, 0x4, 0x10000, 0xd, 0x4}, {0x100, 0x1, 0x5, 0xe65, 0xa, 0x3}, {0x0, 0xfffffff8, 0x1, 0x2, 0x10000}, {0x401, 0x1, 0x9, 0xf32, 0x3, 0xd}, {0x9, 0x1, 0x200, 0x1fd, 0x9, 0x9c}, {0xd353, 0x4e46, 0x4fb7dcd9, 0x8dc4, 0x400, 0x5}, {0x0, 0x5, 0x81, 0x6, 0xfffffff7, 0xb}, {0x2, 0x6a6e, 0x1, 0x8, 0x8}, {0x2, 0x2, 0xee, 0x10, 0x2, 0x8}, {0x7, 0x80000001, 0x664, 0x0, 0x7, 0x5}, {0x1, 0x2, 0x3, 0x8, 0xff, 0x80}, {0x5, 0x1000, 0x1, 0xfffffff9, 0x8, 0x1}, {0xea, 0x400, 0x8, 0x6, 0x6, 0x4}, {0xe01, 0x5, 0x1, 0x10, 0x8, 0x2}, {0x4, 0x47, 0x9, 0x3, 0x55f7, 0x3}, {0x2, 0x3, 0x9, 0x2, 0xe39, 0x1}, {0x4, 0x26f, 0x8, 0x8, 0x3ff, 0x9}, {0x8, 0x0, 0x7, 0xb5ff, 0x3, 0x2}, {0x6, 0x8, 0x5b6, 0x4, 0xffff, 0x40}, {0x3, 0x3, 0x3, 0xfffffff4, 0x3, 0x10}, {0x0, 0x3, 0x400, 0x101, 0x0, 0x6}, {0x1, 0xfffffffd, 0xe34b, 0x0, 0xfffffff7, 0x3}, {0x443, 0x3, 0x35, 0x5, 0x6, 0x2}, {0x7, 0x81, 0x8, 0x0, 0x0, 0x4009014c}, {0xffff9d8f, 0xfffffffd, 0x9, 0x1a5, 0x820, 0x10000}, {0x0, 0x857, 0x3, 0x9e9d, 0x5, 0x80000000}, {0x6, 0x9, 0x6, 0x100, 0x1, 0x7cd}, {0x5, 0x10001, 0x6, 0x2400, 0x2, 0x5}, {0x9eb5, 0x4, 0x8, 0xffffffff, 0x47ad, 0x3}, {0x3ff, 0x2, 0x9, 0x8, 0xff, 0xc}, {0x9, 0xffff, 0x4, 0x7fffffff, 0x1cafab34}, {0xf, 0x7, 0x6, 0xa, 0x3, 0xd}, {0x9, 0x7, 0xe8f, 0x81, 0x6, 0xfa}, {0x200, 0x9, 0x9, 0xbf6f, 0x7, 0x7}, {0xcd, 0x401, 0x80000001, 0x1, 0x2c7fcac9, 0x5}, {0x7fffffff, 0x2, 0x7fff, 0x4, 0x4, 0x401}, {0x5, 0x1, 0x7, 0x6, 0xc, 0xd}, {0x2, 0x3, 0xfffffffa, 0x9, 0x4, 0x95f0}, {0x7, 0xfffffffb, 0x269, 0x6f79802, 0x6, 0xf2}, {0x6, 0x4, 0x3, 0xd020, 0x80000001, 0x9}, {0x9f, 0xa0, 0xf, 0x2, 0x80000000, 0x3ff}, {0x4, 0x7, 0x101, 0x40, 0x1000, 0xfffffffa}, {0x7, 0x6, 0x9, 0x7ff, 0x54, 0x7}, {0x6, 0x10000, 0x8, 0x4, 0x0, 0xfff}, {0xc19, 0x6, 0x2, 0x4, 0x0, 0x6}, {0x400, 0x8, 0x0, 0x0, 0x7, 0x1c}, {0x2, 0x1, 0x1, 0x0, 0x2}, {0xc7c4, 0x8, 0x4e5, 0x6, 0x0, 0x7fffffff}, {0x7, 0x7fff, 0x3, 0x2, 0x409a, 0x3}, {0x9, 0xe, 0x5, 0x9, 0x5, 0x2}, {0x7, 0x2, 0x400, 0x4, 0x2, 0x5d2}, {0x5, 0x3, 0xffffffff, 0xa3, 0x7, 0x5}, {0x99, 0x3, 0xe2d, 0x1, 0x8, 0x9}, {0x8, 0x40, 0x81, 0xf97, 0x80000001, 0x1}, {0x1, 0x3, 0x0, 0x8, 0x0, 0x6}, {0x8, 0x436182b7, 0x0, 0xc0, 0x3, 0x1ff}, {0x101, 0x5, 0x1, 0x8ca1, 0x8, 0xb19}, {0x9, 0x9, 0x2, 0x3, 0x2, 0x6}, {0x7, 0x4, 0x7, 0xf11, 0x6, 0xd}, {0x7, 0x0, 0x9, 0xffff, 0x0, 0x8000}, {0x7f, 0x3a3, 0x6, 0x8, 0x865c, 0x5}, {0xa7f, 0x2, 0x5, 0x400, 0x10, 0x4}, {0xfffffc00, 0xd, 0x8000, 0x6, 0x53, 0x3eee}, {0xb, 0x2, 0x2, 0xf5, 0xe, 0xd7b}, {0xdc2e, 0x9, 0x3, 0x4, 0x3, 0x7}, {0xc, 0x5, 0x4, 0x9, 0xfffffffe, 0x3}, {0x5, 0xb8d, 0x7ea, 0x0, 0x3, 0xe}, {0x3, 0x8, 0x5, 0x2, 0x60000000, 0xf2ef}, {0x5, 0x2, 0x6, 0x7018, 0x3, 0x5}, {0x7, 0x6, 0x8, 0xd, 0xf739, 0x1}, {0x8, 0x6, 0xdb, 0x8c2d, 0x51c, 0x2}, {0x5, 0xb6, 0xfff, 0x7, 0x8b6b, 0x8}, {0x2e, 0x9, 0x7, 0x100, 0x8e9c, 0x7}, {0x8e, 0x5, 0x0, 0x7, 0x32, 0x1}, {0x2, 0x6, 0x31c, 0x3, 0x6, 0x2}, {0x0, 0x1, 0x3, 0x7, 0x8, 0x77}, {0xc, 0x40, 0x7, 0x8, 0x39, 0x7fffffff}, {0xffffffc0, 0x6, 0x6, 0x4, 0x2, 0x4b3}, {0x0, 0x2, 0x6, 0x8, 0x2, 0xb}, {0x2, 0x6, 0x2, 0x7, 0xa}, {0xfffffbff, 0xc, 0x7, 0x7, 0xd, 0xdd}, {0x8c, 0x10000, 0x7c8b, 0x80000000, 0x2, 0x5}, {0x2, 0x8, 0xffffffff, 0x8000, 0x68, 0x8}, {0x4, 0x8001, 0x8, 0x454, 0x8, 0x2}, {0x9, 0x4, 0x6, 0xdf, 0x80000000, 0x3db8}, {0x4, 0x2, 0xdbd, 0x101, 0x8, 0x1}, {0xc40, 0x3, 0x7, 0x8, 0x0, 0xfffffffc}, {0x3, 0x5, 0xb, 0xc, 0x4, 0x8001}, {0x9, 0xf8, 0x2, 0x8, 0xffffff01}, {0x3, 0x101, 0x2, 0x3, 0x5, 0x7}, {0x200000, 0x0, 0x8, 0xffffff7f, 0x9, 0x2}, {0x6, 0x7, 0xffc0000, 0x9, 0x6, 0x8000}, {0xec7a, 0x995, 0x80, 0x800, 0x4289, 0x7fff}, {0x2, 0x5, 0x1693f85d, 0x100, 0x2}, {0x10000, 0x1, 0x4, 0x2, 0x2, 0xfffffff9}, {0x8, 0x101, 0x5, 0x7, 0x4, 0x400}, {0x10, 0x0, 0x3, 0x10000, 0x4d0, 0x5c}, {0x2, 0x8, 0x8, 0x5855, 0x9, 0x7}, {0xc54, 0xffffffa1, 0x5, 0x5, 0x8a, 0x56}, {0x6, 0x251b, 0x4, 0x4, 0x400, 0x7}, {0x7cd2517e, 0x8000, 0x9, 0x8, 0x8}, {0xc, 0x889, 0x5, 0x4, 0x3, 0x101}, {0x8, 0x1, 0xffff0000, 0x7, 0x7fffffff, 0x9}, {0x2, 0x0, 0x3, 0x4, 0x10, 0x4}, {0xffffff09, 0x7, 0x1, 0x814, 0xff}, {0x7, 0x1, 0x2, 0xfffffff9, 0xff, 0x1}, {0x3, 0xfffffff8, 0x8001, 0x1, 0x7, 0xfffffffa}, {0x8, 0x9, 0x8, 0x0, 0x2, 0x6}, {0x9, 0x7, 0x9, 0x7, 0x12, 0x3}, {0xfffffffc, 0x6, 0x2, 0x7ff, 0x6, 0xffffffff}, {0xa18b, 0x40, 0x7fff, 0x8001, 0xe8, 0xc}, {0xf, 0xfffff801, 0x6, 0x6, 0x8, 0x3ff}, {0x2, 0x0, 0x934, 0x3, 0x8, 0x7}, {0x5, 0xd, 0x9, 0xa31f, 0x6, 0x2}, {0x0, 0x2, 0x8, 0x7fffffff, 0x1, 0x8}, {0x7de, 0x8, 0x8, 0x81, 0x5, 0x200}, {0x9, 0x3, 0x8, 0x5, 0x1fc, 0x6}, {0xfffffffb, 0x3, 0x6d46, 0x81, 0x3ff, 0x8}, {0x4, 0x8000, 0x7fff, 0x7fff, 0x2, 0x46b}, {0x6, 0xce28, 0x0, 0x4, 0xe8, 0xffffc3b4}, {0x9, 0x2, 0x10, 0x6, 0xff}, {0x7fffffff, 0x0, 0x401, 0x7, 0x1ff, 0x200}, {0xff, 0x4, 0x2, 0x1, 0x101, 0x5}, {0xcc9, 0x8, 0xc8, 0xffffffff, 0x7, 0xa8e1}, {0xfffff781, 0x7e, 0xffffffff, 0xfffffff7, 0x1b4a7cee, 0x6}, {0x4, 0x5, 0x85d, 0x4, 0xde2, 0x3ff}, {0x2, 0x0, 0x80000000, 0x3, 0xa41, 0x4}], [{0x0, 0x1}, {0x1, 0x1}, {0x5, 0x1}, {0x3, 0x1}, {0x5}, {0x5}, {0x2, 0x1}, {0x2, 0x1}, {0x4, 0x1}, {}, {0x3, 0x1}, {0x2, 0x1}, {0x1, 0x1}, {0x6, 0x1}, {0x4}, {0x3, 0x1}, {0x2}, {0x1}, {}, {0x2}, {0x3, 0x1}, {0x3, 0x5e19d4ef184591e9}, {0x3}, {0x4, 0x1}, {0x2, 0x1}, {0x3}, {0x3, 0x1}, {0x2}, {0x1, 0x1}, {0x1}, {0x1, 0x1}, {}, {}, {0x3, 0x1}, {0x1, 0x1}, {0x3}, {0x0, 0x1}, {0x1}, {0x1}, {0x2}, {0x2, 0x1}, {0x3}, {0x3, 0x1}, {0x2}, {0x4, 0x1}, {0x6, 0x1}, {0x2}, {0x3, 0x1}, {}, {0x3, 0x1}, {0x0, 0x1}, {0x5}, {}, {0x3}, {0x3, 0x1}, {0x1}, {0x3, 0x1}, {}, {0x2, 0xf04b735b2ea8f8d5}, {0x4, 0x1}, {0x0, 0x1}, {0x6}, {0x4, 0x1}, {0x1}, {0x5, 0x1}, {0x3}, {0x3}, {}, {0x4}, {}, {0x5}, {0x5}, {0x5, 0x1}, {0x2}, {0x3}, {0x5, 0x1}, {0x0, 0x1}, {}, {0x4}, {0x5, 0x1}, {0x6}, {0x3}, {}, {0x1}, {0x1}, {0x1, 0x1}, {0x0, 0x1}, {0x4, 0x1}, {0x2}, {0x2}, {0x3}, {0x6, 0x1}, {0x3}, {0x5, 0x1}, {0x1}, {0x1, 0x1}, {}, {0x4, 0x1}, {0x1}, {0x1, 0x1}, {0x0, 0x1}, {}, {0x2}, {0x0, 0x1}, {0x4, 0x1}, {0x3}, {0x3, 0x1}, {0x3}, {0x3, 0x1}, {0x3}, {0x4}, {0x1, 0x1}, {0x5}, {0x2, 0x1}, {0x0, 0x1}, {0x3}, {0x5, 0x1}, {0x0, 0x1}, {}, {0x3, 0x1}, {0x3}, {0x3, 0x1}, {0x5, 0x1}, {0x3}, {0x5}, {0x3, 0x1}, {0x0, 0x1}, {0x1, 0x1}], 0x1}}, @TCA_PEDIT_PARMS={0xe38, 0x2, {{{0x9, 0x7, 0x1, 0x0, 0x1}, 0x2, 0x4, [{0x5, 0xe6, 0xfffffff3, 0x8, 0x4, 0x4}]}, [{0x1, 0x5, 0x8, 0x10, 0x5, 0x8}, {0x9d8, 0x8, 0x8, 0x2, 0x7c, 0xfd7f}, {0x7, 0xffffffff, 0x6, 0x3, 0xffffffff, 0xe}, {0x1, 0xffffffff, 0x2, 0x7, 0x10000, 0x2}, {0x4, 0xfff, 0xc3, 0xa, 0x2, 0x5}, {0x7f, 0xc9b, 0xb, 0xa, 0x2, 0x3}, {0xf1, 0x6, 0x3b, 0xfffffffe, 0x5, 0x3}, {0xc81, 0xa3, 0x7, 0x9, 0x4, 0x701}, {0x4, 0x0, 0x400, 0x8, 0xfffffffa, 0x3ff}, {0xf, 0xf8, 0x1, 0x6}, {0x5, 0x2, 0xf8, 0x4, 0x9, 0x3}, {0x101, 0x80000000, 0x200, 0xa, 0x4, 0x80000000}, {0x3, 0x88c0000, 0x3, 0x8, 0x5, 0x2}, {0x1cdb, 0x5, 0x765, 0x3, 0xef, 0xc}, {0x0, 0x5, 0x8, 0x784, 0x81, 0x1ff}, {0x9, 0xf, 0x8, 0x7, 0x6, 0x5}, {0x3, 0x401, 0x44, 0x2, 0x3, 0x9823}, {0x5, 0x9, 0x0, 0x5, 0xae0, 0x800}, {0x80000001, 0x83, 0xfff, 0x3, 0x0, 0x100}, {0xfffffffb, 0x7, 0xe, 0x202, 0x4, 0xff}, {0x41, 0x81, 0x7, 0xd5a11ed, 0x800}, {0xfff, 0xdfd8, 0x5, 0xd6, 0xb, 0x8}, {0x0, 0x544b, 0x5, 0x8, 0xffff8be1, 0x80000001}, {0x1, 0x8, 0x1ff, 0x7fffffff, 0x0, 0x3}, {0x7fff, 0xa3f, 0x2, 0x6, 0xc89f, 0x861}, {0x5, 0x7, 0x20000, 0x9, 0x80000001, 0xcaf7}, {0x0, 0x3, 0x9, 0x7f, 0x200, 0x9}, {0x2, 0x200, 0x8, 0xc2c4, 0x98d7, 0x1000}, {0x9, 0x3, 0x101, 0x3ff, 0x1, 0x6}, {0x80, 0xe, 0xa, 0x8, 0x4, 0x5}, {0x1ff, 0x38000000, 0x3, 0x0, 0x5, 0x8001}, {0x6, 0x7fffffff, 0x7fff, 0x3, 0xfffffc01, 0xf}, {0x5, 0x8, 0x3, 0x1, 0x3, 0x5}, {0x6, 0x4, 0x3, 0x10001, 0x2336, 0x2}, {0xff, 0x3, 0x9, 0x800, 0x0, 0x7}, {0xd3d7, 0x8, 0x5, 0x9, 0x44c0, 0x7}, {0x1, 0x8, 0x6, 0x3, 0xfa, 0x5}, {0x2, 0x101, 0x6, 0x2, 0x9, 0x7}, {0x7, 0x0, 0x5a16aeb5, 0x8, 0x5, 0xced}, {0xfffffffe, 0x4, 0x8, 0x8, 0xce22, 0x2}, {0x7e62, 0x40, 0x8, 0x3, 0x2a82, 0x6}, {0xd3c, 0xffffffff, 0x7, 0xc, 0x0, 0xb0}, {0x4, 0xffffffaa, 0x3, 0x7fffffff, 0xffff, 0xfffffff7}, {0x0, 0x0, 0x9, 0x80000000, 0x1}, {0x400, 0x2, 0x1, 0x7, 0x8, 0x9}, {0x8001, 0x83a, 0x10001, 0x8, 0x401, 0x2}, {0x8, 0x1000, 0xfff, 0x3, 0x0, 0x5}, {0x4, 0xffff, 0x2, 0xfff, 0xfffffff8, 0x9}, {0x7, 0x200000, 0x5a7, 0x3, 0x9, 0x9}, {0x8, 0x7, 0x8, 0x4, 0x5, 0xfe2c}, {0x1000, 0x2, 0x1, 0x5f30, 0x4, 0x10}, {0x10, 0x336d9413, 0x4, 0x9, 0x4, 0xffff}, {0x592b, 0x7, 0x3, 0x2, 0x80000001, 0x7}, {0x8, 0x4, 0x7, 0x9, 0x4, 0x9}, {0x2, 0x7, 0x0, 0x5, 0x3, 0xfffffff9}, {0x9, 0x8, 0x1, 0x1, 0xc3, 0x5}, {0x0, 0xfff, 0x8, 0xffffffff, 0x4, 0x6}, {0xb5effd55, 0x7, 0x1000, 0x5, 0xfffffeff, 0x4}, {0xede9, 0x3, 0x4, 0x8ac2, 0x6, 0xc2f9}, {0x1, 0x7, 0xfffffff5, 0xb3, 0x6b, 0xe2}, {0x2, 0x7, 0xb53, 0x9, 0x200, 0x10000}, {0x5d4, 0x0, 0x4, 0xe43, 0x800, 0x7}, {0x8, 0x9, 0x3, 0x5, 0x5, 0x3}, {0x3, 0x2, 0x7ff, 0x7, 0x5, 0x10}, {0x0, 0xff, 0x5ce, 0xffff, 0xffffff40, 0x10}, {0x9, 0x8, 0x7, 0x7f, 0xe16, 0x7}, {0x8001, 0x2, 0x1, 0xf, 0x8, 0x9}, {0x4, 0x8, 0x0, 0x2, 0xf, 0x9}, {0xc, 0xff, 0x6, 0x31, 0x0, 0x6}, {0xceca, 0x1c6d6f64, 0xffff, 0x0, 0x10000, 0x8}, {0x3, 0x8, 0x4, 0x0, 0x8, 0x8}, {0x81, 0x1, 0x1, 0xfffffffe, 0x7, 0x1ff}, {0x2, 0x2, 0xac50, 0x4, 0xfff, 0x4}, {0xae9, 0x4, 0x9, 0x9, 0x3, 0x6}, {0x7ff, 0x0, 0x7, 0x2, 0x4, 0xfffffffa}, {0x3, 0x8, 0x2, 0x4, 0x1840, 0x4}, {0x1, 0x3958, 0x8, 0x3, 0x200, 0x8}, {0x3, 0x6, 0x0, 0x1, 0x2, 0x77dd}, {0x0, 0x200, 0xf, 0x4, 0xfffffffc, 0x7}, {0x0, 0x9, 0x100, 0x73ef9254, 0x5, 0x8}, {0x0, 0x400, 0x400, 0x6, 0xdd2, 0x7fff}, {0x7fff, 0x7303, 0x2, 0x8, 0xb7, 0x4}, {0x7, 0x5, 0xed, 0x7f, 0x6, 0x3}, {0x2, 0x2, 0x8, 0x1, 0x6, 0x5}, {0x6, 0x9e28, 0x1, 0x4, 0x81, 0x6}, {0x100, 0x9, 0x7, 0x0, 0xc, 0x70}, {0x5, 0x3, 0x1, 0x2}, {0x2, 0x0, 0x5, 0xc0000000, 0x3, 0xec73}, {0xd, 0x1, 0xffffffff, 0xfffffff9, 0x1, 0x81}, {0x401, 0x10001, 0x6, 0xd29, 0x8, 0x6}, {0x2, 0x53, 0x74c, 0x5, 0x9e, 0x2}, {0x0, 0xea, 0x39e, 0xa83, 0x2, 0x1}, {0x101, 0x3, 0x8, 0x9fa, 0x7, 0x9}, {0x0, 0x1, 0xfffff78e, 0x7, 0x7da2780e, 0x2}, {0x9, 0x6, 0x5, 0x2, 0x4, 0x8}, {0xffff, 0xae4, 0xedbd, 0x80000001, 0x0, 0x5}, {0x6d, 0x4, 0x8, 0x9, 0x5, 0xffffffff}, {0xffff7fff, 0x4, 0x3, 0x4, 0x1e87b732}, {0x2, 0x5, 0x8, 0x6, 0x7fff, 0x8}, {0xc, 0xf7d0, 0x0, 0x1, 0x8, 0x7}, {0x1, 0x3, 0x7, 0x9, 0x0, 0x4}, {0x3ff, 0xd1fd, 0x7ff, 0x5, 0x7}, {0x8, 0x5, 0x4, 0x0, 0x4}, {0x23, 0x7ff, 0x6, 0x4ee, 0x4, 0x9af}, {0x6, 0x5, 0x800, 0xcb, 0x7, 0xb9d}, {0x8000, 0x1, 0x1, 0xbd9, 0x10000, 0x8000}, {0x0, 0x80, 0x9, 0x9, 0x2, 0xd}, {0x7, 0x7, 0x5, 0x5, 0x8}, {0xb3c7, 0x4, 0xbc4, 0x100, 0x0, 0x4}, {0x0, 0x800, 0x1, 0x6, 0x400, 0x10001}, {0x2, 0x5, 0x6, 0x0, 0x7, 0xd}, {0x8, 0x4, 0x4, 0x8, 0x4, 0xd02}, {0x63f, 0x7f, 0x4, 0x8, 0x4, 0x100}, {0x10001, 0x5, 0x9886, 0x3, 0x4, 0x3}, {0x3, 0xfffff73d, 0x3, 0x3, 0xffff311c, 0xd}, {0x5, 0xf, 0x3, 0x5, 0x563bf681, 0x2}, {0x7, 0x5, 0x7, 0x2, 0x0, 0x3}, {0x2, 0x7b, 0x21, 0x4, 0x101, 0x80000001}, {0x2, 0x43be, 0x9ff8, 0x7fffffff, 0x5, 0x5}, {0x1, 0x6, 0x4, 0x80000000, 0xa, 0x800}, {0xffff, 0x2, 0x2585, 0xfa3, 0xb800, 0x200}, {0x7ff, 0x7, 0x5, 0x9, 0x1000, 0x2}, {0x9, 0xfffffc00, 0xf, 0x401, 0x3, 0x1}, {0x7, 0x1, 0x7, 0x5, 0x40, 0x8}, {0x4, 0x1ff, 0xe139, 0x8, 0x2, 0x9}, {0x7, 0x3, 0x1, 0x0, 0x7fff, 0x7}, {0x4, 0x5, 0x7, 0x8, 0x7, 0xfffffe00}, {0xe1c5, 0xf51, 0x8, 0x5, 0xfffffffe, 0x10}], [{0x3, 0x1}, {0x1, 0x1}, {}, {0x3, 0x1}, {0x1}, {0x4}, {0x4, 0x1}, {0x5}, {0x5}, {0x1, 0x1}, {0x7, 0x1}, {0x0, 0x1}, {0x0, 0x1}, {0x4, 0x1}, {0x4}, {0x5}, {0x4, 0x1}, {0x5, 0x1}, {0x2}, {0x2d64b51f36c7784d}, {0x1, 0x1}, {0x4}, {}, {0x2, 0x1}, {0x5, 0x1}, {0x1, 0x1}, {0x5, 0x1}, {0x0, 0x1}, {0x1, 0x1}, {0xa, 0x1}, {0x9d278e0bb3a8bb1a}, {0x5, 0x1}, {0x2, 0x1}, {0x6, 0x1}, {0x4, 0x1}, {0x3, 0x1}, {0x3, 0x1}, {0x0, 0x1}, {0x1, 0x1}, {0x1, 0x1}, {0x1, 0x1}, {0x3}, {0x5}, {0x1, 0x1}, {0x3}, {0x1, 0x1}, {0x4, 0x1}, {0x4, 0x1}, {0x1, 0x3}, {0x2}, {0x1}, {0x0, 0x1}, {0x3}, {0x41a7c18d05d622d, 0x1}, {0x3}, {0x2}, {0x2, 0x1}, {0x4}, {0x5}, {0x3, 0x1}, {0x4, 0x1}, {0x2, 0x1}, {0x3}, {0x4, 0x25f84cada0c6bc13}, {0x2, 0x1}, {0x4, 0x1}, {0x1}, {0x4}, {0x3}, {0x1, 0x1}, {0x5, 0x1}, {0x3, 0x68d3f4beabcf86}, {0x3}, {0x0, 0x1}, {0x2, 0x1}, {0x0, 0x1}, {0x5, 0x1}, {0x4, 0x1}, {0x2, 0x1}, {0x1, 0x1}, {0x5, 0x1}, {0x0, 0x1}, {0x3, 0x1}, {0x0, 0x1}, {0x7, 0x1}, {0x4}, {0x3, 0x1}, {0x4, 0x1}, {0x2, 0x1}, {}, {0x4}, {0x4}, {0x5, 0x1}, {0x1, 0x1}, {0x1}, {0x5}, {0x3, 0x1}, {0x5, 0x1}, {0x1}, {0x3, 0x3}, {}, {0x1, 0x1}, {0x2}, {0x1}, {0x3}, {0x3, 0x1}, {0x2}, {0x3}, {0x3, 0x1}, {0x1, 0x1}, {0x2}, {0x1}, {0x1}, {0x0, 0x1}, {0x0, 0x1}, {0x2}, {0x0, 0x1}, {0x1}, {0x5, 0x1}, {0x4}, {0x5, 0x1}, {0x1, 0x1}, {0x3}, {0x5, 0x1c980ef08f9078f1}, {0x5, 0x1}, {0x2, 0x1}, {0x5, 0x85dc7ae5e8a52074}, {0x2, 0x1}]}}]}, {0xd3, 0x6, "74b41b4189ae8ee549ce2c93ba81abe58ec28ce945b903167904500b77bfe4c186ff477f5f5833b940277b44212ac20790ab76b9392f09aea0ab77d47a2eda743d59f93b7383ae7182ebb44882c7ef8eb8a24f2a39121867ab0dc43df9b6b44cc3763e47784ad277ccfbc5c2d541fa934873c88805f8138498526fd7c044ae399fb62132fcb5c26b22734c92e763f3361cc677f6b80b7f2ec92e32fbddb98f2e9439f2dd97227c297e114fe0f5dc015c22bc80bcf9cb82be595842822e9dd7561c64757a28338123d09048c343b8cd"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x2, 0x3}}}}, @m_pedit={0x2cec, 0x7, 0x0, 0x0, {{0xa}, {0x2cb0, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS_EX={0xe50, 0x4, {{{0x80000001, 0xc, 0x5, 0xe48, 0x7}, 0x5, 0x84, [{0x7, 0x8b, 0x0, 0x80, 0x5, 0x3}, {0x4, 0x7b587822, 0x3, 0x0, 0x3, 0x1}]}, [{0x6, 0x1, 0x10f, 0xf3a, 0x1, 0x8b}, {0x8, 0x5, 0x7, 0x8, 0x10001, 0x3fc000}, {0xff, 0x80000001, 0x5, 0x10001, 0x100, 0x7fffffff}, {0x8001, 0x9, 0x3, 0x5, 0xd, 0x43248d0f}, {0x101, 0x2, 0xbf5e, 0x9, 0x5, 0xf}, {0x7, 0x80000000, 0x9, 0x0, 0x1, 0xfffffffa}, {0x17a, 0x5, 0x800, 0x1, 0x7, 0xffff8001}, {0xd2, 0x80000000, 0x1, 0x3, 0x4, 0x1000}, {0x10001, 0x6, 0x7ff, 0x4d3b, 0x6, 0x56f}, {0x10, 0xcb8, 0x0, 0x9, 0x2, 0x5}, {0x100, 0x10000, 0x5, 0x2, 0x7, 0xef1}, {0x4, 0x4, 0x1ed7, 0x1, 0x8001, 0xc}, {0xfffffe01, 0x5a, 0x67, 0x5, 0x2, 0x101}, {0xfffffffa, 0xba, 0x401, 0x6, 0x9, 0x4d}, {0x8, 0xd, 0x8, 0x68d8, 0x9, 0x100}, {0x9f, 0x5e66, 0xfffffe00, 0x714, 0x4, 0x8}, {0x4, 0x7, 0x40, 0x7f, 0x4, 0x4000000}, {0x1, 0x0, 0x9, 0x4, 0xff, 0x4}, {0x3, 0x10001, 0x3, 0x16, 0x2, 0xfffffffd}, {0x3, 0xe47b, 0xffff, 0xd, 0x401, 0x7}, {0x0, 0x1, 0x2, 0x2, 0x80000000}, {0x40, 0x9, 0x20, 0xfffffff9, 0x5, 0x7fff}, {0x9, 0xc, 0x8, 0x3, 0xd69, 0x4}, {0x7bc9, 0x2, 0x401, 0x1, 0x6, 0x9}, {0x1, 0x0, 0x0, 0x3ff, 0x100000, 0x7ff}, {0x8000, 0x4, 0x1, 0x16000, 0xcfc, 0x5}, {0xf, 0x9, 0x2, 0x8, 0x3, 0x8e20}, {0x80000001, 0x3, 0x8, 0x4, 0x80000001, 0xda68}, {0xfffffffe, 0x0, 0x6, 0x3ff, 0x2, 0x70}, {0x4, 0x1cc45f98, 0xd0, 0x3, 0x2, 0x1}, {0x8, 0x9, 0x2, 0x6e, 0x101}, {0x8, 0x6, 0xfffff941, 0x7, 0x70000000, 0x1}, {0x6, 0xab, 0x8, 0x5, 0x39f5, 0x9}, {0x2000, 0x100, 0x8a3, 0xd, 0xd6e89d8, 0x4}, {0x2, 0x3, 0x1, 0x8014, 0xd}, {0xfffffff3, 0x8000, 0x9, 0x7b07, 0xc6c, 0x1}, {0x7, 0x9, 0x4a0, 0x0, 0x2, 0x5}, {0x80000000, 0x1ff, 0x200, 0x5, 0x3, 0xfffffff2}, {0xe, 0x6, 0x5, 0x9, 0xffff, 0x6}, {0xffffffff, 0x51b7, 0x9a, 0x2, 0x7}, {0xff, 0x2, 0x200, 0x7fffffff, 0x9ca, 0x7}, {0xf, 0x0, 0x0, 0xfffffff1, 0x5e, 0x7}, {0x0, 0xe, 0x80, 0xba, 0x3, 0x400}, {0x1, 0x200, 0xf4af, 0x3a8, 0x4, 0x8}, {0x10001, 0x800, 0xda62, 0x40, 0x80000001, 0x5}, {0x3, 0x532, 0x7fff, 0x200, 0xe53, 0xcf2}, {0x4, 0x200, 0xfffffc00, 0x6, 0x0, 0x7ff}, {0xa5, 0x9, 0x0, 0x7ff, 0x2, 0xfffffbff}, {0xcfe, 0x5, 0x7fffffff, 0x800, 0x1, 0x9}, {0x6, 0x5, 0x80000001, 0x6, 0x7, 0x491b}, {0x6, 0xfffffffe, 0x1, 0x3, 0xfff, 0x1}, {0x9, 0xfff, 0x5, 0x2, 0x7, 0x7fffffff}, {0xc0000, 0x10001, 0xeed, 0x53, 0xc1, 0x6}, {0x1, 0x395f, 0x400, 0x200, 0x993b, 0x9}, {0xffff8000, 0x8, 0x10001, 0x3, 0x800, 0xffffffff}, {0x0, 0xb, 0xc, 0x8, 0x9, 0x80}, {0x5, 0x7fe, 0xe0000000, 0x9, 0x8}, {0x5, 0x2, 0x3, 0x6, 0xb1a8, 0x200}, {0x6, 0x7, 0x91, 0x72a, 0x401, 0x5a30}, {0x80000001, 0x80, 0x8, 0x8000, 0x1, 0x100}, {0x3, 0x1, 0xc, 0x1, 0x6, 0x4}, {0x6, 0x1, 0x36, 0x9, 0x9dcf}, {0x1, 0x5, 0xfffffffe, 0x81, 0xd, 0x9}, {0x1, 0x5, 0x401, 0x5000, 0x40, 0x1}, {0x10001, 0xf7a, 0x0, 0x9, 0x82ea, 0x7}, {0x3, 0x1, 0x8, 0xfe2, 0x5, 0x8cf2}, {0x2, 0x9, 0x5, 0x0, 0x7, 0x4}, {0x2, 0x657, 0x3, 0xa42c, 0x7ff, 0xff}, {0x9, 0x1, 0xaf0, 0x5013, 0x7af3, 0x6000000}, {0x3, 0x8, 0x0, 0x3, 0x3, 0x605003e9}, {0xfffffff8, 0x4, 0x6, 0x9, 0x3b0, 0x7fff}, {0x4, 0x7, 0x6, 0x4, 0x400, 0x38}, {0x5, 0x7e, 0x3, 0x2, 0x100, 0x6}, {0x8, 0x21e292f, 0x3, 0x0, 0x7, 0x800}, {0x1, 0x4, 0x9, 0x3, 0x4, 0x1000}, {0x7fffffff, 0x3, 0x7, 0xfff, 0x80000001, 0x5}, {0x200, 0x101, 0x9, 0x6, 0x6532527d, 0xc790}, {0xd34, 0x2008000, 0x5, 0xff, 0x81, 0x1ff}, {0x8, 0x7, 0x4ddf, 0x6, 0x4, 0x8}, {0x2, 0x8, 0x4, 0x8f, 0x0, 0x5}, {0x8, 0x7, 0x0, 0x6, 0xe, 0x37}, {0x8, 0x8, 0xe35, 0xbb0, 0x6, 0xb}, {0xc, 0xfffffff0, 0x9, 0x1, 0x80, 0x7}, {0x0, 0xfff, 0x6, 0x5, 0x1640, 0x1}, {0x7, 0x6, 0xfffffffa, 0xfffffff8, 0x2400, 0xa}, {0x100, 0x4, 0xffff, 0x80, 0x3, 0x5}, {0x0, 0x80000, 0x8, 0x7, 0x8001, 0xfffffff0}, {0x9, 0x1, 0x3, 0x5, 0x7, 0x81}, {0x7, 0x7, 0x100, 0x3, 0x8, 0xfffffffc}, {0x4, 0x80000000, 0x0, 0x307, 0x2, 0x1}, {0x6, 0x400, 0x1ff, 0x7648, 0x3, 0x7}, {0xd9, 0x4, 0x9, 0x4, 0x81, 0x94}, {0x5e7e, 0x9, 0x2, 0x6, 0xc0}, {0x1000, 0x2, 0x10e7, 0x10000, 0x54, 0x4}, {0x4, 0x2, 0x4, 0xb, 0x4604, 0x1}, {0xcd, 0x80000001, 0x5, 0xffff, 0xb, 0xffffff47}, {0x2, 0x5, 0x6, 0x9, 0xff, 0x6}, {0xd556, 0x0, 0x7, 0x3, 0x9, 0xaae2}, {0x5, 0x0, 0x0, 0x8, 0x3, 0x8a46}, {0x6d, 0x8, 0x80000000, 0x4, 0x10000, 0xffff}, {0x101, 0x5, 0x2, 0x9, 0xffff, 0x80000000}, {0x8001, 0xc, 0x1, 0xfffffffd, 0x0, 0x1}, {0x2, 0x2826f289, 0x6, 0x75, 0x264, 0x4}, {0x5, 0x3, 0x8, 0x8001, 0x6, 0x5}, {0x4, 0x7, 0xad, 0x6, 0xe, 0x101}, {0xff, 0x48, 0x9, 0x959, 0x5, 0x6}, {0x1, 0x7, 0x3ff, 0x9, 0x7, 0x2}, {0x2, 0x1, 0x3, 0xfffff001, 0x9c2f, 0x9}, {0x4, 0x1, 0x4, 0x1, 0x2, 0x6}, {0x8, 0x0, 0x2, 0x6, 0x7, 0x3}, {0x1000, 0xfffffff9, 0x0, 0xfffffffd, 0x0, 0x8f4}, {0x5, 0xb3, 0x5, 0x7, 0xff, 0x4}, {0x101, 0x9, 0x6, 0x0, 0x6, 0xfffffff7}, {0xc6, 0x1d, 0x2, 0x6, 0x1, 0x9}, {0x5, 0x9f2, 0x3, 0x8, 0x3b, 0x7}, {0x7, 0x101, 0x1ff, 0x100, 0x1000, 0xfffffffa}, {0x7, 0x1, 0x8000, 0x660, 0x6, 0x7}, {0x1f0a, 0x2, 0x4, 0x6, 0x6}, {0x0, 0x4, 0x0, 0x3, 0x3, 0x80}, {0x80000001, 0xef, 0x2, 0x6, 0x8aad1555, 0xf7b6}, {0x9, 0x9b07, 0x7fffffff, 0x3, 0xfffffff9, 0x6}, {0xffff32d9, 0x3, 0xe3f, 0x401, 0x9, 0xce}, {0x6, 0x58, 0x9b36, 0x7, 0x7, 0x1}, {0x0, 0x4f, 0x1, 0x3, 0x97, 0x80000001}, {0x10001, 0x0, 0x7, 0xb1, 0x5, 0x4}, {0x9, 0xcf73, 0xfffffffd, 0xd384, 0xfe6, 0x2}, {0x81, 0x8, 0x10000, 0x3ff, 0x1, 0xffffffff}, {0x80000001, 0x5, 0x8001, 0x7fff, 0x6, 0x10000}], [{0x3}, {}, {}, {0x5, 0x1}, {0xffda6cc85e63f242, 0x1}, {0x4, 0x1}, {0x0, 0x1}, {0x2, 0x1}, {0x5}, {0x1}, {0x0, 0x1}, {0x3, 0x1}, {0x2}, {0x4, 0x1}, {0x1, 0x1}, {0x1, 0x1}, {0x3}, {}, {0x0, 0x1}, {0x0, 0x3}, {}, {}, {0x0, 0x1}, {}, {0x0, 0x1}, {0x4}, {0x5}, {0x4, 0x3}, {0x2, 0x1}, {0x1, 0x1}, {0x3}, {0x4, 0x1}, {0x4}, {0x1, 0x1}, {0x5}, {0x5}, {0x5}, {}, {0x4}, {0x1, 0x1}, {0xa028e81b6ef00037}, {0x3, 0x1}, {0x2}, {0x5, 0x1}, {0x1, 0x1}, {0x1, 0x1}, {0x4, 0x1}, {0x2, 0x1}, {0x4}, {0x3}, {0x0, 0x1}, {0x1}, {}, {0x4}, {0x4}, {0x1}, {0x1, 0x1}, {0x3}, {}, {0x0, 0x1}, {0x0, 0x1}, {0x2}, {}, {0x1, 0x1}, {0x2, 0x1}, {0x4}, {0x0, 0x1}, {0x4}, {0x3}, {0x4, 0x1}, {0x1, 0x1}, {0x1, 0x1}, {0x0, 0x1}, {0x4}, {0x2, 0x1}, {0x2, 0x1}, {0x4}, {0x3, 0x1}, {0x2}, {0x1, 0x1}, {0x5, 0x1}, {0x0, 0x1}, {0x1, 0x1}, {0x3}, {0x2}, {0x7}, {0x0, 0x1}, {0x4, 0x1}, {0x5, 0x1}, {0x2, 0x1}, {0x5, 0x1}, {0x2}, {0x0, 0x1}, {0x3, 0x1}, {}, {0x2}, {0x3, 0x1}, {0x4}, {0x0, 0x1}, {0x3, 0x1}, {0x2, 0x1}, {0x4}, {0x5, 0x2089c88d1e63af7d}, {0x1}, {0x4, 0x1}, {0x1}, {}, {0x5, 0x1}, {0x1}, {0x5, 0x1}, {0x4}, {0x4}, {0x4}, {0x1}, {0x1}, {0x0, 0x5c39c3d5e9be892c}, {0xf3d357a2c1e46a3c}, {0x3}, {0x5, 0x1}, {0x5}, {0x5}, {0x5}, {0x3, 0x1}, {}, {0x4, 0x1}, {0x1}, {0x3}], 0x1}}, @TCA_PEDIT_KEYS_EX={0x114, 0x5, 0x0, 0x1, [{0x24, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x2}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x3}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}]}, {0x24, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x1}]}, {0x24, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x1}, @TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x1}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}]}, {0x3c, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x5}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x4}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x3}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_HTYPE={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x4}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}]}, {0x1c, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x2}, @TCA_PEDIT_KEY_EX_CMD={0x6}]}, {0x2c, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x5}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x4}, @TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}]}, {0x14, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x1}]}, {0xc, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}]}]}, @TCA_PEDIT_PARMS={0xf10, 0x2, {{{0xa49, 0x7c4, 0x8, 0xffff, 0x6}, 0xc1, 0x4, [{0x7ff, 0x9, 0x700c, 0x7, 0xf, 0x7}, {0xc, 0xdd, 0x80, 0x6, 0xff}, {0x10, 0x7, 0x1de3860, 0x9, 0x9d0, 0x3}, {0x3, 0x790, 0x2, 0x8, 0x4, 0x3}, {0x2, 0x0, 0x1000, 0x4, 0xf, 0x2}, {0x6, 0x7ff, 0x0, 0x7, 0x9}, {0x6aca, 0x6973, 0x1ff, 0x6, 0x98b06b2, 0x6}, {0xffffffff, 0x5, 0x9, 0x5, 0x6, 0x4}, {0x10000, 0xffff50b8, 0x0, 0x54, 0x80000001, 0x401}, {0x3, 0x40, 0x8, 0x8, 0xbcd, 0x3ff}]}, [{0x8c1b, 0x5, 0x3, 0x0, 0x0, 0xffff}, {0x7fff, 0x8, 0xe10, 0x9, 0xfffffffd, 0x200}, {0x1, 0x40, 0x7fffffff, 0x6, 0x6, 0xffffffff}, {0x1, 0x101, 0x0, 0x0, 0x8, 0x9}, {0xffffffff, 0x5, 0xaa, 0x1, 0x8, 0x5}, {0x3, 0x1, 0xe8346f64, 0xfff, 0x7, 0x1}, {0xe, 0x3, 0x9, 0x10, 0x1e3, 0x5}, {0x6, 0x81a878e9, 0x8, 0x5, 0x8, 0x4}, {0x2, 0x7ff, 0x6, 0x0, 0xfffffff6, 0x3}, {0x6, 0x7fff, 0x38, 0x0, 0x2, 0x1}, {0x3, 0xffff, 0x9, 0x0, 0x10001, 0x5}, {0x2, 0x8000, 0x1, 0x7, 0x7fff, 0x2}, {0x54, 0x9278, 0x5, 0x8, 0x6c9, 0xf99}, {0x8, 0x6, 0x6, 0x8001, 0x9, 0x4e}, {0xffff, 0x366, 0x9, 0x5, 0x3, 0x8}, {0xb, 0x9, 0x0, 0x0, 0xa7, 0x7}, {0x0, 0x200, 0x5, 0xffffff81, 0x8, 0x81}, {0xce3, 0x8, 0x2528, 0x33bbd57f, 0x3, 0x7}, {0x5, 0xf, 0x9, 0x7fffffff, 0x5, 0x2}, {0x8, 0x10, 0x131, 0x80000001, 0x4, 0x4}, {0xffff, 0x3, 0xfffffffd, 0x3e6, 0x6, 0xac}, {0x1, 0xb87, 0x10000, 0xc8, 0x1, 0x8}, {0x3, 0x0, 0xffffff81, 0x3c, 0x80000000, 0xc3}, {0x6, 0x2, 0x1, 0x5, 0x101, 0x3}, {0xdf63, 0x4, 0x6, 0x4, 0x0, 0x3}, {0xfffffffb, 0x23, 0x9, 0x9, 0x1}, {0x3, 0x401, 0x5, 0x2, 0x5, 0x3}, {0x6, 0x8, 0x8, 0xe, 0x8, 0x7f}, {0x2, 0xdd, 0x2, 0x7, 0x8, 0x52}, {0x7, 0xc4, 0x8001, 0x9, 0x8, 0x9}, {0x0, 0x5, 0x1, 0x8, 0xc, 0x6}, {0x7, 0x3, 0x80000000, 0x10001, 0x7fff, 0x8}, {0x5b, 0xfffffff0, 0x1646, 0x8, 0x7, 0x9}, {0x7ff, 0x6, 0x3, 0x3f, 0xe, 0xffff}, {0x1, 0x6, 0x86f7, 0x9}, {0xfffffffb, 0x8, 0x6, 0x96, 0x40, 0x6}, {0xcf1d, 0x3, 0x3, 0xe, 0xcd1, 0x6}, {0x5dc0, 0x8d4d, 0x2, 0x5, 0xf, 0x40000000}, {0x4, 0x6, 0x5, 0x20000, 0xbb98905, 0x8}, {0xc6, 0x100, 0x3, 0x7, 0x2, 0x200}, {0x81, 0x0, 0x0, 0x9, 0xffffffff, 0x1000}, {0x8000, 0x9, 0x1, 0x7fff, 0x40, 0x5}, {0x6, 0x9, 0xfffffff7, 0xffffffff, 0x3, 0x4d07b3c}, {0xffffffff, 0x2, 0x7, 0x5, 0x7fff, 0x16bb}, {0x6, 0x4, 0x8, 0x3, 0x5, 0xe}, {0x6, 0x317fce13, 0x4, 0x9, 0x4, 0x5}, {0x1, 0x8001, 0x8, 0x0, 0x1ff, 0x1}, {0x6, 0x7, 0x5, 0x685, 0x2, 0x4}, {0x9550, 0x4, 0x0, 0xfffffffc, 0x1ff, 0x2}, {0x2, 0x6, 0x1, 0x6, 0x7, 0x2}, {0x4, 0x2, 0x3, 0xff, 0x5b6, 0x2}, {0x8, 0x5, 0x8, 0x3c, 0x3, 0x7199}, {0x7f, 0xffffff00, 0x2, 0x4, 0x5, 0xb5}, {0x8, 0x4, 0x3ff, 0x6, 0x5, 0xfc5}, {0x7264, 0x3, 0x5, 0x2, 0x0, 0x9}, {0x8000, 0x7, 0xfffffff1, 0x4, 0x3, 0x2}, {0x2, 0x6b5a2d24, 0xd332, 0x3, 0x80000001, 0xe}, {0x7fffffff, 0x1, 0x9, 0x85f, 0x36, 0x9}, {0x3ff, 0x7, 0x5, 0x3, 0x400, 0x2}, {0x6, 0xffffff7f, 0x3c0, 0x1ff, 0x6, 0xd3}, {0x81, 0xb2, 0x9, 0x7ff, 0x8cb8, 0xff}, {0x4, 0x9, 0x8, 0x9, 0x8000}, {0x0, 0x9, 0xc, 0x4, 0xb3, 0x7}, {0x4, 0x3, 0x7, 0x8, 0xffffff80, 0xb}, {0x1, 0x1, 0x7, 0x7, 0x7, 0x9}, {0x2, 0x8c25, 0x98b0, 0x7, 0xfffffff7, 0xfffffffa}, {0x8, 0x7, 0x28a0, 0xa, 0xffffffc0}, {0xffff, 0x100, 0x200, 0x2, 0x8000, 0x5}, {0x8, 0x7, 0x7, 0xbd, 0xccee, 0x2}, {0x7, 0x8001, 0xc, 0x5, 0x8000, 0x100}, {0x81, 0x0, 0x6, 0x5, 0x2}, {0x2, 0x6, 0x1, 0x8, 0x744f, 0x8}, {0x6, 0xefaf2b7, 0x9, 0x0, 0x5, 0xf}, {0x6, 0x9, 0x4, 0x4, 0x0, 0x2}, {0x0, 0xc4, 0x4, 0x1, 0x4, 0x5}, {0x3ed00, 0x3, 0x7, 0x1000, 0x1, 0x364}, {0x3, 0x7, 0x7, 0x41, 0x6, 0x8}, {0x80000001, 0x5, 0x8001, 0x0, 0x9, 0x8}, {0x9, 0x5, 0x8, 0x6, 0x5, 0x3}, {0xe90, 0x6, 0x10000, 0x86, 0x80000000, 0x7d}, {0x4, 0x100, 0x900, 0x9, 0x1, 0x9}, {0x9, 0x0, 0x8, 0xc89, 0x0, 0x4c}, {0x342, 0x1, 0x8, 0x5, 0xa5, 0x3e592c3b}, {0x0, 0x9, 0xfffffffe, 0x7, 0x1, 0x400000}, {0x8, 0x80000000, 0xff, 0x67, 0x4, 0x1}, {0x8, 0x4, 0x5, 0x5, 0x120000, 0x5}, {0x19f, 0x7, 0x1, 0xd3e3, 0x5, 0x401}, {0x4518, 0x9, 0x8, 0x9, 0x8, 0xe}, {0x2, 0x1, 0x40, 0xffff1950, 0x0, 0x9}, {0x7, 0x54b7dc5d, 0xda, 0x0, 0xbb000000, 0x600}, {0x1, 0x401, 0x6, 0x5, 0x7, 0x224c}, {0x0, 0x7, 0x3, 0xa, 0x8, 0x770}, {0x8, 0x1c12, 0x6, 0x9, 0x53, 0x7}, {0xffff0000, 0x400, 0x0, 0x8, 0x800}, {0x5, 0x6, 0x5, 0xffffff78, 0x0, 0xfffffffc}, {0x5, 0xbb22, 0xee8f, 0x1, 0x81, 0x9}, {0x7, 0x7, 0xa7, 0xaa9, 0x80000001, 0xaf2}, {0x8, 0x5, 0x3, 0x4, 0x9, 0x1}, {0x2, 0x3, 0x1000, 0x1, 0x8, 0xf}, {0x8, 0x1ca, 0x1000, 0x2, 0x8fa, 0x4}, {0xe9, 0x5, 0x8, 0x2, 0x4, 0x10000}, {0x7, 0xcb, 0xfffffff8, 0x1, 0x8001, 0x5}, {0xfffffff3, 0x10, 0xfffffff7, 0xf, 0x5, 0x5}, {0xe7, 0x9, 0x7, 0xffff, 0x10}, {0x3, 0x38000, 0x5, 0x1, 0x2, 0x2}, {0xffffffff, 0x2, 0x2, 0x4, 0xfffffff0, 0x3}, {0x7, 0x9, 0x8, 0x7, 0x8, 0x101}, {0xfffffeff, 0x3, 0xffff, 0x100, 0x90000, 0x80000001}, {0x7, 0x0, 0x3b9bac68, 0x78, 0x800, 0x4}, {0x5, 0x7f, 0x1ff, 0x7, 0x40, 0x4}, {0x9, 0x7, 0xa4, 0x995b, 0x3, 0x5}, {0x4, 0xb000, 0x2, 0xe, 0x81, 0x4}, {0x5e2, 0x1, 0x1, 0x800, 0x1}, {0x0, 0xc67, 0x7fffffff, 0xe2bf, 0x1, 0x1}, {0x3, 0x2f, 0x6, 0x1, 0x156, 0x3}, {0x5, 0x1, 0x9, 0x7, 0x7, 0xfffffffc}, {0x8, 0x9, 0x6d16, 0xfff, 0x8000, 0xc}, {0x93a, 0x1, 0x2, 0x7, 0x0, 0xfffff4f2}, {0x6, 0x2, 0x7, 0xa61, 0x9d4, 0x9}, {0x2, 0x80000000, 0xb5a6, 0x1, 0xd325, 0xce1}, {0x8, 0x7, 0x1, 0x2, 0xff, 0x6}, {0x2, 0xf, 0x8, 0x2, 0x1, 0x1}, {0x8, 0x3, 0x7fffffff, 0x0, 0x1000, 0x5}, {0x9, 0xb, 0x5, 0x6, 0x6, 0x9}, {0x7, 0x7, 0x2, 0x8, 0x7, 0x7ff}, {0x1, 0x2, 0x2, 0x9, 0x8, 0x6e3}, {0x5, 0x800, 0xcde, 0xc2, 0x3ff, 0x8}, {0x3, 0x36, 0x5, 0x4, 0x5e, 0xd}], [{0x3, 0x1}, {0x1}, {0x1, 0x1}, {0x3, 0x1}, {0x2, 0x1}, {0x4, 0x1}, {0x4}, {0x0, 0x1}, {0x4}, {0x2}, {0x1}, {0x5}, {0x3, 0x1}, {}, {0x4, 0x1}, {0x5, 0x1}, {0x3}, {}, {0x4}, {0x0, 0x1}, {0x3}, {0x4}, {0x6}, {0x3, 0x1}, {}, {}, {0x4, 0x1}, {0x0, 0x1}, {0x4, 0x1}, {0x6, 0x1}, {0x1}, {0x4}, {}, {0x5}, {0x2, 0x1}, {0x4}, {0x5, 0x1}, {0x25da3bdd90d1103d, 0x1}, {0x2}, {0x5, 0x1}, {0x2}, {0x2, 0x1}, {}, {0x2, 0x1}, {0x5, 0x1}, {0x1, 0x1}, {0x4, 0x1}, {0x3, 0x1}, {0x5}, {0x4}, {0x0, 0x1}, {0x0, 0x1}, {0x4}, {0x5, 0x1}, {0x5}, {0x0, 0x1}, {}, {}, {0x5, 0x1}, {0x4}, {0x5, 0x1}, {0x4}, {0x0, 0x1}, {0x0, 0x1}, {0x0, 0x1}, {0x3, 0x1}, {0x0, 0x1}, {}, {0x0, 0x1}, {0x4}, {0x3}, {0x1}, {0x3}, {}, {0x5, 0x1}, {0x5}, {0x2, 0x1}, {0x3}, {0x0, 0x1}, {0x0, 0x1}, {0x1}, {0x2}, {0x3, 0x1}, {0x1}, {0x2}, {}, {0x3, 0x1}, {0x3}, {0x0, 0x1}, {0x0, 0x1}, {0x4, 0x1}, {0x4}, {0x4}, {0x2}, {0x0, 0x1}, {0x5}, {0x2}, {0x4, 0x2}, {}, {0x3}, {0x2}, {0x2}, {0x1, 0x1}, {0x4}, {}, {0x0, 0x1}, {0x2}, {0x1}, {0x4}, {0x5, 0x1}, {0x1, 0x1}, {0x0, 0x1}, {0x5}, {0x5, 0x1}, {0x1}, {0x5}, {0x0, 0x1}, {0x4, 0x1}, {0x4}, {0x1}, {0x3}, {0x3, 0x1}, {0x2}, {0x1}, {0x4}, {0x0, 0x1}, {0x3, 0x1}, {0x1, 0x1}], 0x1}}, @TCA_PEDIT_PARMS={0xe38, 0x2, {{{0x4, 0x2, 0x4, 0x89, 0xfffffff9}, 0x1, 0xfb, [{0x6, 0x6b05, 0x1, 0x6, 0x3, 0x9}]}, [{0x7f, 0x3, 0x0, 0x3, 0x7, 0x4}, {0x7e8, 0x3, 0x4, 0x7fffffff, 0x8000, 0x3}, {0x7, 0x3, 0x6, 0x8, 0x1, 0xe19}, {0x6, 0x7fffffff, 0x1, 0x7, 0x9, 0x7}, {0x10, 0x1, 0x9, 0x8, 0x80000001, 0x5}, {0x78c90eea, 0x2, 0x185e054c, 0x3, 0x8, 0x2}, {0x8, 0x81, 0x8, 0x9, 0xffff, 0x4}, {0x3, 0xe, 0x1, 0x7, 0x0, 0x4}, {0x8, 0x1, 0x6, 0xa828, 0x5, 0x4}, {0xb, 0x1ff, 0x4, 0x6, 0xff, 0xfffffffc}, {0x4, 0x100, 0x7fffffff, 0x8, 0x7fffffff, 0x2}, {0x4830, 0x40, 0x8, 0x0, 0x1, 0x4}, {0x84, 0xfffffff7, 0x8, 0xff, 0x400, 0xc}, {0x9, 0x2, 0x753, 0x3c0000, 0x8, 0x6}, {0x7fffffff, 0x2, 0x7f, 0xe, 0x6, 0x80000000}, {0xc, 0x100, 0x1000, 0x1, 0x4, 0x8}, {0x8001, 0x7, 0x2, 0x45, 0x4, 0x5}, {0xa, 0xffffffff, 0x10001, 0xad, 0x40, 0x80000001}, {0x8, 0x2, 0x6, 0xc43, 0x1}, {0x6, 0x9, 0x8, 0xf, 0xe30e, 0x484}, {0x1, 0x7, 0x6, 0x80, 0xf, 0x4}, {0x2, 0x7, 0x15, 0x400, 0x7, 0xf}, {0x5123, 0x9f, 0x6, 0x7, 0x0, 0x9}, {0x6, 0x8, 0x5, 0x4, 0x5, 0x7ff}, {0x4, 0x80000001, 0x1, 0x0, 0x1, 0xfffffff7}, {0x5, 0x0, 0x4, 0x1, 0xfffffffa, 0x7}, {0x3, 0x9, 0x895, 0x0, 0x2, 0x9a93}, {0xfffeffff, 0x9, 0x2, 0x698e, 0x4, 0x2}, {0x6, 0x3, 0x10001, 0x0, 0x10, 0x8}, {0x7, 0x3, 0x0, 0x5, 0x5, 0x9}, {0x7, 0x8, 0x3c, 0x2, 0x1356, 0x2}, {0x7fffffff, 0x0, 0x2800000, 0x8000, 0x5, 0x9}, {0xca, 0x8, 0xfff, 0xf, 0x1, 0x9}, {0x400, 0x5, 0x8001, 0x3, 0x400}, {0x3, 0x3, 0x3, 0x4, 0x5, 0x9}, {0xffffffff, 0x0, 0x80000001, 0xc25, 0x5, 0x1}, {0x82b4, 0xcde, 0x7, 0x2, 0x0, 0x3}, {0x100, 0x7ff, 0xdce5a5d, 0x81, 0x7, 0x22a6c77d}, {0xfffffc01, 0x9, 0x2fbd, 0x2, 0x400, 0x5}, {0x6, 0x8, 0x1, 0x6, 0x1, 0x6}, {0x79, 0x4, 0x3, 0x0, 0x4, 0x3e1}, {0x401, 0x7fff, 0xe69, 0x3, 0x4, 0x1}, {0x1, 0x7, 0x0, 0xfa9, 0x0, 0x1e0}, {0x1, 0x8, 0xfffffe01, 0xfffffffe, 0x7e4, 0x8}, {0x9, 0x0, 0xc00, 0xeec0, 0x4, 0x9}, {0x7fff, 0x4, 0x9, 0x10001, 0x7, 0x7}, {0x2, 0x5, 0x7, 0x2, 0x8, 0xfffffff9}, {0x10001, 0x88, 0x3, 0xffffff1b, 0x8, 0x7}, {0x8, 0xff, 0x2, 0x3, 0x4, 0x5}, {0xf16b, 0xe0a1, 0x2, 0x7, 0x101, 0x401}, {0xf9, 0x1, 0x2, 0x80000000, 0xfffffff9, 0x4}, {0x10001, 0x5, 0x80000000, 0x8, 0x0, 0x25}, {0x7, 0x8, 0xd, 0xf, 0x8, 0x286}, {0x9, 0xfffffffe, 0x3, 0x8, 0x9, 0x6}, {0x4, 0xd888, 0x6, 0x8, 0xbe83}, {0x5, 0xcd4d, 0x10, 0x0, 0x608, 0x2}, {0xffffffff, 0x5, 0xa204, 0x59, 0x0, 0x7}, {0x4, 0x4, 0x8000, 0x9, 0x5, 0x4}, {0xdd, 0xa, 0x1, 0x3, 0x8, 0xfffffffd}, {0xb67, 0x0, 0x2, 0x944, 0x8, 0x5}, {0x1, 0x6, 0x507, 0x1, 0x0, 0x5657}, {0x81, 0xfffffff1, 0x7, 0xffff, 0x4, 0x4}, {0x1, 0x9, 0x7, 0x8, 0x2, 0x2}, {0x2, 0x4, 0x2, 0x9, 0x8000, 0x5}, {0xa6, 0x2a9, 0xfffffc01, 0x5, 0x5, 0xffffffff}, {0x7, 0x10000, 0x5, 0x7, 0x4, 0x10}, {0x2, 0xf65, 0x4, 0x8, 0xf, 0x2}, {0xb, 0x3ff, 0xffff, 0x4, 0x0, 0xa4f}, {0x200, 0x10000, 0x6, 0xf, 0x6, 0x1}, {0x80, 0x0, 0x1, 0x8, 0x2, 0x2}, {0x40, 0xfffffffd, 0x100, 0x81, 0x4, 0xffffffff}, {0x5, 0x9, 0xfffffffb, 0x4, 0x2a, 0x8}, {0x5, 0x6d81, 0x80000000, 0x10, 0x6, 0x3}, {0x0, 0x0, 0x4, 0xffffcb05, 0x1, 0x8}, {0x40, 0x0, 0x0, 0x0, 0x40, 0x2}, {0x1ff, 0x8, 0x8, 0x3f, 0x5}, {0x6f0af5e7, 0xfd60, 0x0, 0xfa, 0x7, 0xa323}, {0x3, 0x8, 0x4, 0x8, 0x0, 0x1}, {0x6, 0x3827c59e, 0x0, 0x3, 0x24f3, 0x3}, {0x80000000, 0x101, 0x200, 0x0, 0x9, 0xf4e3}, {0x5, 0x401, 0x8, 0x5, 0x7ff, 0x8}, {0x400, 0x3, 0x40, 0x6, 0x400, 0x1ff}, {0x7, 0xc0000000, 0x9, 0x9, 0xfff, 0x7fff}, {0x9, 0x9, 0x2, 0x2, 0x5, 0x7}, {0x8, 0x5, 0x760, 0x7f, 0x3, 0xec3}, {0x7b54, 0x0, 0x0, 0x0, 0x7ea, 0x7}, {0x3, 0x8, 0x9, 0x8, 0x0, 0x8}, {0x3, 0x0, 0x33c, 0x1, 0xeb, 0xfff}, {0x5, 0xf5, 0x0, 0xfffffffd, 0x4, 0x100000}, {0x8c, 0x9e, 0x3, 0x804, 0x0, 0x67}, {0x6, 0x40000, 0x9a7, 0x8, 0x401, 0x3ff}, {0x3, 0x20, 0x7, 0x7, 0x8, 0x3}, {0x3, 0x2, 0x4, 0x4, 0x7, 0x7}, {0x800, 0x2, 0x4, 0x3, 0xa, 0x5}, {0x2, 0x8, 0xffff, 0x66e, 0x8, 0x2}, {0x91e1, 0x2, 0xfff, 0x0, 0x4, 0x9c}, {0x4, 0x1, 0x6, 0x400, 0x6, 0x4}, {0x5, 0x10000, 0x5, 0x2, 0x6, 0x1000}, {0x4, 0x6, 0x3, 0xa, 0x2, 0xa2a}, {0x1000, 0x6, 0xfffffff9, 0x3, 0x80000001, 0x28}, {0x8e, 0x3, 0x1, 0x6, 0x3, 0x1}, {0x5, 0x1, 0xc, 0x7ff, 0x9f, 0xfff}, {0x9, 0xfc, 0x7, 0x5, 0x3678, 0xd7f}, {0x2, 0x4, 0xe, 0x6, 0x40}, {0x0, 0x3, 0xffff0000, 0x6, 0x401}, {0xe0e, 0xc000, 0x3, 0x5, 0x10001, 0x1}, {0x10001, 0x20, 0xff, 0x9, 0x7ff, 0x200}, {0x4, 0x5, 0x100, 0x149, 0xffff0001, 0x8000000}, {0xdf41, 0x9, 0xba4, 0x10001, 0x100, 0x1}, {0x2, 0x80000000, 0x7, 0x8, 0x80, 0x989}, {0x1, 0x9, 0x30f, 0xe9, 0x9, 0x200}, {0x0, 0x8000, 0x1, 0x9, 0x4, 0xff}, {0xd, 0x1, 0xc8291a3, 0x7, 0x3}, {0x5, 0x1, 0x8000, 0x6, 0xffff9d8e, 0x8}, {0x81, 0x1, 0xeb1, 0x9, 0x2, 0x7fff}, {0x937, 0x4, 0x7, 0x9, 0x180d, 0x2}, {0x10001, 0x1, 0x7, 0x9, 0x6254, 0x6}, {0x85bb, 0x9, 0x6, 0xfffffeaa, 0x7fff, 0x2}, {0x4, 0x8, 0x9, 0x10001, 0x90, 0x8}, {0xc, 0x4, 0x0, 0x8, 0x400, 0x8}, {0x8, 0x3, 0x0, 0x1, 0x100, 0x3}, {0x8, 0x3, 0xe, 0x9f3, 0x5, 0x1ff07fbf}, {0x3ff, 0x9, 0x10001, 0x9, 0x4}, {0x10001, 0x74595c53, 0x1, 0xb, 0x3edef270, 0x5}, {0x4, 0x7, 0x0, 0x5, 0xd0f, 0xfff}, {0xfae0, 0x0, 0x0, 0x9, 0x96, 0x6}, {0xd024, 0x2, 0xfff, 0x40, 0xfffffffb, 0x4}, {0x0, 0x0, 0xfff80000, 0xffffffd1, 0x8, 0x54e}], [{0x2, 0x1}, {0x3, 0x1}, {0x0, 0x1}, {0x5}, {}, {0x4}, {}, {0x2, 0x1}, {0x4}, {0x4, 0x1}, {0x1, 0x1}, {0x3, 0x1}, {0x1}, {0x3, 0x7369135d734d62fb}, {0x3, 0x1}, {0x2}, {0x5}, {0x3}, {0x5}, {0x1, 0x1}, {0x3, 0x1}, {0x2, 0x1}, {0x5}, {0x1, 0x1}, {0x5}, {0x3, 0x1}, {0x5, 0x1}, {0x0, 0x1}, {0x2}, {0x1, 0x1}, {0x3}, {0x5, 0x1}, {0x4}, {0x5}, {0x2, 0x1}, {0x3, 0x1}, {0x3}, {0x1, 0x1}, {0x3, 0x1}, {0x4, 0x1}, {0x1}, {}, {0x4}, {0x2}, {0x3}, {0x2, 0x1}, {0x5}, {0x4}, {0x4}, {0x3, 0x1}, {0x4, 0x1}, {0x2, 0x1}, {0x3}, {0x4, 0x1}, {}, {0x2}, {0x4}, {0x5, 0x1}, {0x5, 0x1}, {0x5, 0x1}, {0x3}, {0x3}, {0x4, 0x1}, {0x4}, {0x3}, {0x0, 0x1}, {0x6, 0x1}, {0x4}, {0x5}, {0x4}, {0x1}, {0x4, 0x1}, {0x5, 0x1}, {0x5, 0x1}, {0x1}, {0x2, 0x1}, {0x5}, {0x1}, {0x3, 0x1}, {0x4}, {0x1, 0x1}, {}, {0x5, 0x1}, {0x5, 0x1}, {0x3, 0x1}, {0x4}, {0x5, 0x1}, {0x2}, {0x2}, {0x2, 0x1}, {}, {0x1, 0x1}, {0x0, 0x1}, {0x1, 0x1}, {0x0, 0x1}, {}, {0x2, 0x1}, {0x3}, {0x1}, {}, {0x0, 0x1}, {0x2, 0x1}, {0x2}, {0x1, 0x1}, {0x4, 0x1}, {0x5}, {0x3, 0x1}, {0x1}, {0x5}, {0x1, 0x1}, {0x2, 0x1}, {0x1}, {0x4}, {0x4}, {0x5}, {}, {0x3, 0x1}, {0x3}, {0x4}, {0x0, 0x1}, {0x1, 0x1}, {0x3}, {0x4, 0x1}, {0x4}, {0x0, 0x1}, {0x1, 0x1}, {0x3, 0x1}, {0x1, 0x1}]}}]}, {0x12, 0x6, "b83ca675d0a6dfc790fcb99d1302"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x2}}}}, @m_sample={0x74, 0x5, 0x0, 0x0, {{0xb}, {0x2c, 0x2, 0x0, 0x1, [@TCA_SAMPLE_TRUNC_SIZE={0x8, 0x4, 0x5cf}, @TCA_SAMPLE_PARMS={0x18, 0x2, {0x3, 0x5, 0x1, 0xff, 0x275b59f3}}, @TCA_SAMPLE_TRUNC_SIZE={0x8, 0x4, 0x8c0}]}, {0x20, 0x6, "87b3a222fa0d00345cf7dab86dcb3cf02f4526d3143f051e89cf6fe0"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x2}}}}]}, @TCA_FLOW_KEYS={0x8, 0x1, 0x861e}]}}]}, 0x5238}, 0x1, 0x0, 0x0, 0x8000}, 0x4000) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000710421000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) 3m9.479991579s ago: executing program 1 (id=752): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x85, 0x7, 0x7ffc0001}]}) perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40008, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x1, @perf_config_ext={0x9, 0xc64}, 0x10014, 0x0, 0x800000, 0x0, 0x4, 0x2, 0x6, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_int(r0, 0x0, 0x6, &(0x7f0000000180)=0x80000001, 0x4) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff8000/0x1000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ff8000/0x1000)=nil, &(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff8000/0x2000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0, 0xfffffffffffffe84}, 0x68) setsockopt$inet_int(r0, 0x0, 0xc, &(0x7f0000000140)=0x6, 0x4) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) syz_emit_ethernet(0x2e, &(0x7f0000000200)=ANY=[@ANYBLOB="ffffffffffff0180c20000030800450000200000000000119078000000002bc1fe250b6119fa86d4ea0700014e24000c907801000000d4a30759"], 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r1 = io_uring_setup(0x4955, &(0x7f0000000280)={0x0, 0x36c, 0x20, 0x1, 0x3be}) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x12, 0x3, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x80000000, 0x9f69a7a086f70ae8, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x24, &(0x7f0000000000)=0xa, 0x4) socket$inet_udp(0x2, 0x2, 0x0) io_uring_enter(r1, 0x2219, 0x1c9, 0x16, 0x0, 0x0) socket$igmp6(0xa, 0x3, 0x2) r2 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r2, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/74, 0x328000, 0x1000}, 0x1c) 3m9.479536469s ago: executing program 2 (id=753): sendto(0xffffffffffffffff, &(0x7f00000023c0)="287d1a4a0c67c15f736dafd53bafaa0641512cea0991fdc52bd66b1f42849037bef0854db06a707864543ad51c3d", 0x2e, 0x4040, &(0x7f0000002400)=@caif=@dgm={0x25, 0x3f214474, 0x40}, 0x80) 3m9.47891483s ago: executing program 1 (id=754): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x85, 0x7, 0x7ffc0001}]}) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x72, 0x0, 0x7fff0000}]}) close_range(r0, 0xffffffffffffffff, 0x0) syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x10012, r0, 0x0) perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40008, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x1, @perf_config_ext={0x9, 0xc64}, 0x10014, 0x0, 0x800000, 0x0, 0x4, 0x2, 0x6, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) r1 = socket$igmp6(0xa, 0x3, 0x2) ioctl$sock_inet6_SIOCADDRT(r1, 0x890b, &(0x7f00000016c0)={@mcast1, @empty, @dev={0xfe, 0x80, '\x00', 0x16}, 0x2, 0x6, 0x8, 0x100, 0x6, 0x100000}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f00000001c0)={0x0, 0x0}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x16, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="b4000000000000080f1000000000000063000000000000009500050000000000d1449c003b097606b153e6dc6de837ae96a815df705fef53cf0ff5e7bdc3bd95cfc0d4800fae421c84b7988e61ed7df452e4b7e139044387aa"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0x33, &(0x7f000000cf3d)=""/186, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x3a) bpf$ENABLE_STATS(0x20, 0x0, 0x0) brk(0x200000ffc000) 3m9.447195442s ago: executing program 33 (id=753): sendto(0xffffffffffffffff, &(0x7f00000023c0)="287d1a4a0c67c15f736dafd53bafaa0641512cea0991fdc52bd66b1f42849037bef0854db06a707864543ad51c3d", 0x2e, 0x4040, &(0x7f0000002400)=@caif=@dgm={0x25, 0x3f214474, 0x40}, 0x80) 3m9.402518084s ago: executing program 1 (id=756): socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, 0x0, 0x4) r0 = syz_open_procfs(0xffffffffffffffff, 0x0) lseek(r0, 0x1000000, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x8, 0x441e, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x4}, 0x0, 0x10000, 0x8, 0x1, 0x8, 0x2020005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000001c0)='./file2\x00', 0x404, &(0x7f0000000300)={[{@init_itable_val}, {@jqfmt_vfsold}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x6a}}, {@jqfmt_vfsold}, {@minixdf}, {@quota}]}, 0x3, 0x442, &(0x7f0000001180)="$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") mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27ffff7, 0x4012011, 0xffffffffffffffff, 0x0) copy_file_range(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x863, 0x0) r1 = getpid() r2 = syz_pidfd_open(r1, 0x0) setns(r2, 0x24020000) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount$bind(&(0x7f0000000200)='.\x00', &(0x7f00000004c0)='./file0\x00', 0x0, 0x2125099, 0x0) mount$bind(&(0x7f0000000040)='.\x00', &(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x2a05404, 0x0) open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) umount2(0x0, 0x2) unlinkat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x200) 3m9.30486404s ago: executing program 1 (id=757): socket$nl_route(0x10, 0x3, 0x0) r0 = socket(0x200000000000011, 0x2, 0x0) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f00000002c0)={0x0, @in6={{0xa, 0x4e21, 0x6, @dev={0xfe, 0x80, '\x00', 0x12}, 0x7}}, 0x2, 0x8000, 0x58, 0x8, 0xba, 0x7, 0x3}, &(0x7f0000000240)=0x9c) 3m9.030196716s ago: executing program 1 (id=759): r0 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_PORT_GET(r1, &(0x7f0000000340)={0x0, 0xfc, &(0x7f0000000300)={&(0x7f0000000240)={0x14, r0, 0x1, 0x0, 0x0, {0x54}}, 0x14}, 0x1, 0x0, 0x0, 0x8001}, 0x0) 3m9.014489297s ago: executing program 34 (id=759): r0 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_PORT_GET(r1, &(0x7f0000000340)={0x0, 0xfc, &(0x7f0000000300)={&(0x7f0000000240)={0x14, r0, 0x1, 0x0, 0x0, {0x54}}, 0x14}, 0x1, 0x0, 0x0, 0x8001}, 0x0) 1m54.36457367s ago: executing program 7 (id=1801): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000340)=ANY=[@ANYBLOB], 0xb0}, 0x1, 0x0, 0x0, 0x850}, 0x4040080) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x200000, &(0x7f00000001c0), 0x3, 0x56a, &(0x7f00000003c0)="$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") r1 = socket(0x2, 0x80805, 0x0) setsockopt$IP_VS_SO_SET_ADD(r1, 0x0, 0x482, &(0x7f0000000040)={0x84, @rand_addr=0x64010101, 0x4e22, 0x3, 'dh\x00', 0x1, 0x80005, 0x6f}, 0x2c) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket(0x18, 0x80005, 0x1) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x20) r2 = io_uring_setup(0x21dd, &(0x7f00000001c0)={0x0, 0x1fffff, 0x0, 0x2, 0x381}) io_uring_register$IORING_REGISTER_FILES_UPDATE2(r2, 0xd, &(0x7f0000000140)={0x7, 0x0, 0x0, 0x0}, 0x20) io_uring_register$IORING_REGISTER_FILES_UPDATE2(r2, 0xe, &(0x7f0000001180)={0x0, 0x0, &(0x7f0000000040)=[{0x0, 0xffffffff00000005}], &(0x7f0000000180)=[0xffffffff, 0x7fffffff, 0x2, 0x6, 0x101, 0x1], 0x7}, 0x20) setxattr$trusted_overlay_upper(&(0x7f0000000380)='./file1\x00', &(0x7f0000000100), &(0x7f0000001400)=ANY=[], 0x835, 0x0) socket$nl_generic(0x10, 0x3, 0x10) setxattr$trusted_overlay_upper(&(0x7f0000000000)='./file1\x00', &(0x7f00000000c0), &(0x7f0000000240)=ANY=[@ANYBLOB="00fb24010caa0000000000000000000000000000004b63bfa269c3078b68ada79cfe20fca101cc5a0befd84e234da0e91f8574049bd20085228f3c76b490b0ef143bc2bdaad70034b80ecfb36029fb1b2269f082eb956933331e1b369b1e9e38fa1693d95441ad5d14a13fdc394183b9d1e118e1932da53588eea0ebd87c972ec586c4907e955fe97c5bb20a379e6b2d26edb54e225d1c1c1dac931fc76e2d5024d8aa0105556e8e135078e4350518f6a5d04e5ccc6f229e774c7e8f10a58c31d85d7b9874f72d942a695ac3714324a7a52c7f141a8705f16ebf938b3877b92983860fec206cd436"], 0x24, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, &(0x7f0000000180)=[@window={0x3, 0x7, 0x7}, @sack_perm, @window={0x3, 0x8, 0x200}, @sack_perm, @sack_perm], 0x5) 1m54.042079409s ago: executing program 7 (id=1805): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x5, 0x7, 0x4932, 0x7f, 0x1, 0x1}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000340), 0xca, r0}, 0x38) 1m53.758618885s ago: executing program 7 (id=1810): socket$nl_route(0x10, 0x3, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f00000000c0)={'batadv_slave_0\x00', 0x0}) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="d8000000580081044e81f782db44b904021d080009000300e8fe55a1180015000600142603600e120900210000000401a8001600a40001", 0x37}], 0x1}, 0x0) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000380)={&(0x7f0000000040)="b64b6779e728a585fc6d831c9c111ee3bf867c7fa20663508d961b5b0bc1d4eded804b84c8ee0b5e7b55af44aa8bf4a16c4d4aaf896a13f650a3b4f737945a9a179a6ceb93adadb8dd841258d0f04b02868cd415ab9bc48b055a8b3f92b143cb16138c216513a045af2101e7e3c507bedee404330f1171812cdaeed17a0e89dd4863a4e6808ca6b7046c38f33b9a0417e1c8fae7a9e1b4c8161b02", 0x0, 0x0, 0x0}, 0x38) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.time\x00', 0x26e1, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00@\x00\x00', @ANYRES32=r2], 0x48) r3 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r3, &(0x7f0000000000)=ANY=[@ANYBLOB="3640000048009125745c7388641f9c0e0a"], 0xfe33) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000001940)=@newtaction={0xf18, 0x30, 0xb, 0x0, 0x0, {}, [{0xf04, 0x1, [@m_gact={0x48, 0x1, 0x0, 0x0, {{0x9}, {0x1c, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0x0, 0x0, 0x0, 0x0, 0x80006}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x3}}}}, @m_pedit={0xeb8, 0x2, 0x0, 0x0, {{0xa}, {0xe8c, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS_EX={0xe20, 0x4, {{{0x5, 0xa, 0x4, 0x1, 0x2000000}, 0x5, 0x1}, [{0x9, 0x80000001, 0x1, 0x630, 0x8, 0x1}, {0xdf, 0x4, 0x5, 0x5, 0x10, 0xe}, {0x1, 0x85a, 0x5, 0xe6db, 0x3, 0xfffffffc}, {0x6, 0x400, 0x9321, 0x9, 0x6, 0x7}, {0x5, 0x5, 0xffffffc0, 0x0, 0x3}, {0xe, 0xf5, 0x3, 0x9, 0xffffbff8, 0x3}, {0x0, 0x7, 0xfff, 0x2, 0x9163ef6c, 0x40080003}, {0x3, 0x3, 0x80, 0x0, 0xacc8, 0x2}, {0x8001, 0xffb, 0x9, 0xffff, 0xfffffffe, 0x81}, {0x8, 0xfff, 0x6, 0xeb84, 0x8, 0x30c4}, {0x7, 0x9, 0xfffffffc, 0x100, 0x4, 0x1000000}, {0x8004, 0x80000001, 0xfffffeff, 0xdf, 0x4, 0x5}, {0x0, 0x80000001, 0x9, 0x7, 0x1000, 0x7}, {0x5, 0x2, 0xfffffffc, 0x9, 0x474, 0x594}, {0x7fffffff, 0x1, 0x8, 0xfffffff9, 0x6, 0xffffffff}, {0x24, 0x5, 0xf, 0x6, 0x6, 0x8000003}, {0xbb, 0x5, 0x2, 0x310, 0xf}, {0x9b7d, 0x52fc, 0x6, 0x40000003, 0x48, 0x9}, {0xbd, 0x8, 0x10, 0xe4d, 0x7f, 0x3}, {0x8, 0x8, 0x9, 0x27, 0x2, 0x5}, {0x4, 0x1000, 0x5, 0x6, 0x93e, 0x6}, {0x1, 0x7, 0x0, 0x1, 0xff, 0x3}, {0xb, 0x7f, 0xfffff417, 0x1, 0x3ff, 0x9}, {0x4, 0x8, 0x7, 0xb, 0x8, 0x80004d}, {0x34db, 0x3, 0x3, 0x3ff, 0x1, 0x400}, {0x1, 0xcb1d, 0x8, 0x1, 0x0, 0x4}, {0x5, 0x3, 0x7, 0x8, 0x3, 0x984}, {0x2, 0xffffffff, 0x3, 0x2, 0x9, 0x40}, {0x7, 0x281, 0x7fffffff, 0x381, 0x3, 0x8}, {0x5, 0x4, 0x1, 0x8, 0x4, 0x2f}, {0x6, 0x3, 0x4, 0xd1a1, 0x9, 0x7}, {0x5, 0x3, 0x8, 0x4, 0x16, 0x2}, {0x8001, 0x87, 0x6, 0x1, 0x3, 0x4}, {0x6, 0x9e4, 0x8b7f, 0x11, 0x3, 0x7}, {0x7, 0x1, 0x800, 0x70f, 0x8001, 0x3}, {0x4, 0x10, 0x6, 0x1, 0x4, 0x22ff}, {0x5, 0x10001, 0x9, 0x0, 0x10001, 0x7}, {0xf85, 0x2e, 0x100, 0x3, 0x100, 0xe60c}, {0x2, 0x5, 0x1, 0xe000000, 0xcb06}, {0x4e2, 0x6ae, 0x2, 0x100, 0x5, 0xd}, {0x1, 0xcad, 0xa5, 0x2, 0x4d800, 0x6}, {0x20, 0x7f, 0x33, 0x2, 0x400, 0x4}, {0x4, 0x62e, 0xb, 0x219c, 0x0, 0x5}, {0x0, 0x4, 0x0, 0x1, 0x1, 0x1}, {0x7f, 0x945a, 0x0, 0x0, 0x8, 0x3}, {0xda1, 0x893, 0x2, 0x9, 0xfffffa2e, 0x6}, {0x1, 0xfffffff3, 0x7fffffff, 0x2, 0x0, 0x1}, {0x2, 0x8, 0x10000002, 0xe, 0x2, 0x2}, {0x6, 0x100, 0xe, 0x10000, 0x5, 0x7}, {0x0, 0x6, 0x7, 0x4, 0xc, 0x800}, {0x8, 0x10000, 0x1, 0x1, 0x7}, {0x7d5, 0x2, 0x4, 0x800, 0x1}, {0x1, 0x5, 0x6, 0x2, 0x8, 0xc}, {0x2, 0x1, 0x3, 0xc, 0x1, 0x2c3}, {0x1000, 0x3, 0xbc, 0x8001, 0xfa, 0x8}, {0x2, 0x3, 0x87c, 0x50e, 0x55ac, 0xa5e2}, {0x0, 0x196680, 0xffffff91, 0x100, 0x3, 0x7}, {0x4, 0x4, 0x2, 0x1, 0x0, 0xe}, {0xfffffff5, 0x8, 0x7023, 0x8, 0x5, 0x851}, {0x3, 0x78, 0x7, 0xa, 0x5dec4cac, 0x6}, {0x4, 0x9, 0x3a, 0x2, 0x8, 0x602}, {0x4, 0x7fffffff, 0x8, 0x8, 0x8, 0xff}, {0x6, 0xfffffff1, 0x2f2c, 0x400, 0x6, 0x6}, {0x10001, 0x81, 0x40, 0x2, 0x89, 0x2}, {0x2, 0x8550, 0x4c, 0x3, 0xfffffffa, 0x736d}, {0x7f, 0x199, 0x5, 0x9, 0x7, 0x2}, {0x7, 0x1, 0x8, 0x7, 0x2, 0x7}, {0x9, 0x3f1, 0x4, 0x5, 0x5, 0x8}, {0x100, 0x3ff, 0x0, 0x7f53, 0x7, 0x1}, {0x3ff, 0xc, 0x6, 0x1, 0x4, 0x4}, {0x9, 0x381, 0xfff, 0x5d7c, 0x0, 0x8001}, {0x8, 0x0, 0x7, 0xfffffffb, 0x3ee, 0x4}, {0xbfffffe, 0x6, 0x101, 0x5, 0x400, 0x8000400}, {0x7fff, 0xb3, 0x2, 0x10000, 0x6, 0x14}, {0x0, 0x1, 0x4c90, 0x4, 0x2000007f, 0x8}, {0x5, 0x25b, 0x0, 0x3, 0x2, 0x2}, {0x29dbdf0, 0xd, 0xfffffffd, 0x7, 0x6, 0x3}, {0x7, 0x1, 0xa, 0x8, 0x5, 0x7}, {0x473, 0x8, 0x2, 0x400, 0x4000000, 0x69b3d6e6}, {0x1, 0xb7bb, 0x22800000, 0x3, 0x10, 0x5}, {0x7f, 0x8, 0x6, 0xffffffff, 0x3, 0x8}, {0xfffffff7, 0x5, 0xa, 0x40, 0x863, 0x2}, {0xb, 0x9, 0xc, 0x3c1, 0x6e, 0x40}, {0x6, 0xd, 0x6, 0xfb0000, 0x1, 0x7}, {0xe0, 0x100, 0x1, 0xb, 0x8, 0x7}, {0xfff, 0x21, 0x0, 0x38, 0x0, 0x9}, {0x82, 0x10, 0x401, 0x0, 0x4, 0xef}, {0x7, 0x2, 0x200, 0x8, 0x9, 0x2}, {0x9, 0x5, 0xa33f, 0x101, 0x2, 0x10001}, {0x1, 0x4, 0x800004, 0x10001, 0x2, 0xce}, {0x4, 0x8, 0x8, 0x3, 0xf, 0x9}, {0x8000006, 0x5, 0x8, 0xffffffff, 0x405b9, 0x6}, {0x9, 0x0, 0x9, 0x2, 0x9}, {0x0, 0x2, 0xb, 0x7fffffff, 0xfc0, 0x7f1b4893}, {0x4, 0xd, 0x3, 0x4, 0x7, 0x7}, {0x4, 0x61c5, 0xe, 0x3, 0x3dcb, 0x9}, {0x200, 0x0, 0xe8, 0x1, 0x800000d4, 0x1}, {0xc651, 0x5f83, 0x2, 0x1, 0xd, 0x8}, {0xfff, 0x5, 0x1, 0x0, 0x49, 0x5}, {0x5, 0x3, 0x7, 0x97fd, 0xef, 0x202}, {0x2, 0xa, 0x1000, 0xfffffffe, 0x6, 0xe0}, {0x800, 0x4c, 0x7, 0x0, 0xfffffff7, 0x9}, {0x6, 0xffff, 0xffff8001, 0xa, 0xae36, 0x36b6800}, {0xcfb7, 0x0, 0x101, 0x2, 0x1, 0xae82}, {0x6, 0x800, 0xec3d, 0xffffffff, 0xea5, 0x3}, {0x9, 0x5, 0x2, 0x0, 0x0, 0xdc}, {0x6, 0x6, 0x0, 0x1e9, 0x6, 0x1}, {0x3, 0x7, 0x7, 0x3, 0x400, 0x81}, {0x970, 0x100, 0xb2eb, 0x2, 0x3, 0x9}, {0x3, 0x6, 0x8, 0x7, 0xd, 0x474c}, {0xf, 0x101, 0x9a, 0x1000, 0x2, 0xfffffffc}, {0x3, 0x98e, 0x1a5e666b, 0x10, 0x7, 0x9}, {0xfffffffb, 0x3, 0x3, 0x2ee8000, 0x8}, {0x3, 0x2, 0x2, 0x3, 0x3, 0x2}, {0x7, 0x4, 0x1, 0x7, 0x101, 0xef}, {0x70a0, 0x9, 0x425b597f, 0x1, 0x2, 0x7}, {0x6, 0xc000000, 0x402, 0x4, 0x8, 0x5}, {0x3, 0x6, 0x7, 0xfffffff9, 0x0, 0xffffffff}, {0x7, 0x9, 0x8, 0x0, 0x9, 0xd6}, {0x24, 0x10001, 0x6, 0x1, 0x39d6}, {0x401, 0x7d8, 0x9, 0x8000, 0xffff, 0x7}, {0x6, 0x92e4, 0x130, 0x0, 0x4, 0x9}, {0x0, 0x7fff, 0x7, 0x8081, 0x8, 0x5}, {0x7e, 0x800, 0xfffffff9, 0xa, 0x4b64, 0x80000001}, {0x2ad78a25, 0x202, 0x6, 0x6, 0x4, 0x8}, {0x2, 0x9, 0x0, 0x8a7, 0x129, 0xc}, {0x7, 0x2, 0x8, 0x3, 0xe01, 0xfffffff9}, {0x4a3, 0x0, 0x3, 0x514c, 0xf8a, 0x19}], [{0x1}, {0x4, 0x1}, {}, {0x1}, {0x3}, {0x0, 0x1}, {0x3, 0x1}, {0x1, 0x1}, {0x0, 0x1}, {0x5, 0x1}, {0x3}, {0x0, 0x1}, {}, {0x5}, {0x1}, {0x2}, {0x0, 0x1}, {0x1, 0x1}, {0x0, 0x1}, {0x4}, {}, {0x1, 0x1}, {0x5, 0x1}, {0x5}, {0x3}, {0x5, 0x1}, {}, {0x0, 0x1}, {0x3}, {0x2, 0x1}, {0x4}, {0x5}, {0x5, 0x1}, {0x3, 0x1}, {}, {0x1}, {0x0, 0x1}, {0x5, 0x1}, {0x4}, {0x1}, {0x1, 0x1}, {0x4}, {0x1}, {0x3, 0x1}, {0x1}, {0x3}, {0x2, 0x1}, {0x5}, {0x3}, {0x3}, {0x0, 0x1}, {0x2, 0x1}, {0x4}, {0x5, 0x1}, {0x2}, {0x3, 0x1}, {0x5, 0x1}, {0x1}, {0x1}, {0x3}, {0x4, 0x1}, {0x2, 0x1}, {}, {0x2, 0x1}, {0x4}, {0x5}, {0x1, 0x1}, {}, {0x3}, {0x2, 0x1}, {0x5, 0x1}, {0x4, 0x1}, {0x4}, {0x0, 0x1}, {0x2}, {0x5}, {0x9, 0x1}, {0x2, 0x1}, {0x2, 0x1}, {}, {0x3, 0x1}, {}, {0x1, 0x1}, {0x2}, {0x1}, {0x2, 0x1}, {0x6, 0x1}, {0x2, 0x1}, {0x5, 0x1}, {0x3}, {0x3, 0x1}, {0x1}, {0x2, 0x1}, {0x2}, {0x5}, {0x3, 0x1}, {0x2, 0x1}, {0x0, 0x1}, {0x2}, {0x3}, {0x1, 0x1}, {0x4, 0x1}, {0x5}, {0x4}, {0x2, 0x1}, {0x3, 0x1}, {0x4}, {0x1}, {0x5, 0x1}, {0x4, 0x1}, {0x3}, {0x3, 0x1}, {0x0, 0x1}, {0x5}, {0x3, 0x1}, {0x4}, {0x5, 0x1}, {0x3}, {0x5, 0x1}, {0x3}, {0x4}, {0x5, 0x1}, {0x3, 0x1}, {0x4}, {0x1, 0x1}, {0x4}, {0x6, 0x1}, {0x5, 0x1}]}}, @TCA_PEDIT_KEYS_EX={0x68, 0x5, 0x0, 0x1, [{0x14, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x2}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}]}, {0x14, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x4}]}, {0x14, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x1}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}]}, {0x14, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x4}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}]}, {0x14, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x1}, @TCA_PEDIT_KEY_EX_CMD={0x6}]}]}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xf18}}, 0x0) ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, &(0x7f0000000440)={@ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x29}}, @rand_addr=' \x01\x00', @local, 0x4, 0x5, 0x0, 0x1534a1bca631fc4, 0x6, 0x20c202a1, r1}) 1m53.440064455s ago: executing program 7 (id=1813): syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000180)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x12, &(0x7f0000000500)=ANY=[@ANYBLOB="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", @ANYRESOCT, @ANYRESDEC], 0x23, 0x35d, &(0x7f00000012c0)="$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") r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000005c0)=@raw={'raw\x00', 0x8, 0x3, 0x548, 0x1c0, 0xffffffff, 0xffffffff, 0x1c0, 0xffffffff, 0x478, 0xffffffff, 0xffffffff, 0x478, 0xffffffff, 0x7fffffe, 0x0, {[{{@ipv6={@loopback, @remote, [0xff000000, 0xff, 0xff000000], [0xffffff00, 0xffffffff, 0xff, 0xffffffff], 'netpci0\x00', 'vxcan1\x00', {0xff}, {}, 0x32, 0x1, 0x0, 0x40}, 0x0, 0x1a0, 0x1c0, 0x60030000, {0x0, 0xff000000}, [@common=@inet=@recent0={{0xf8}, {0x9, 0x0, 0x24, 0x1, 'syz1\x00'}}]}, @unspec=@TRACE={0x20}}, {{@uncond, 0x0, 0x298, 0x2b8, 0x0, {}, [@common=@inet=@recent0={{0xf8}, {0x0, 0x1f, 0x1, 0x1, 'syz0\x00'}}, @common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x8, 0x0, 'syz1\x00'}}]}, @unspec=@NOTRACK={0x20}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x5a8) getpriority(0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x24009, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x400000, 0x8, 0x0, 0xed7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f00000022c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x4a) bpf$PROG_BIND_MAP(0xa, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0xc010) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r3 = getpid() sched_setscheduler(r3, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r0, &(0x7f0000000040), 0x0, 0x8080) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) shmat(0x0, &(0x7f0000ffc000/0x2000)=nil, 0x4000) shmdt(0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a05000000000000000000010000000900010073797a300000000040000000030a010100000000000000000100000009000300040000000000000014000480080002400000000008000140000000000900010073797a300000000060000000060a010400000000000000000100000038000480240001800b00010072656a65637400001400028008000140000000000500020000000000100001800a000100726564697200000008000b40000000000900010073797a300000000014000000110001"], 0xe8}}, 0x0) perf_event_open$cgroup(&(0x7f00000003c0)={0x2, 0x80, 0x16, 0x1, 0x3, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0xffffffffffffffff, 0x1000000000000, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r5 = socket$kcm(0x10, 0x1, 0x0) sendmsg$kcm(r5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000001300)={r1, 0x18000000000002a0, 0xf, 0x0, &(0x7f0000000000)="b9ff03076844268cb8be14f088470f", 0x0, 0x20000005, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) socket$kcm(0x10, 0x2, 0x0) r6 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r6) 1m52.919921975s ago: executing program 7 (id=1829): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=@ipv4_delroute={0x24, 0x19, 0x901, 0x0, 0x0, {0x2, 0x18, 0x0, 0x0, 0xfe, 0x4, 0xfd}, [@RTA_DST={0x8, 0x1, @dev}]}, 0x24}, 0x1, 0x0, 0x0, 0x20044010}, 0x0) 1m51.754819862s ago: executing program 7 (id=1844): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'tunl0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=@newqdisc={0x150, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffc, {0x0, 0x0, 0x0, r1, {0x0, 0x1}, {0xffff, 0xffff}, {0x16}}, [@qdisc_kind_options=@q_red={{0x8}, {0x124, 0x2, [@TCA_RED_STAB={0x104, 0x2, "09000000000020008f29d158039b90627d7b60f0d5ca47f33eed46409b7c8722ce020df6b24c2e6ac7b97dc04d01be2092874115214b1ebb764511f69cd1e9f6263346363d2c639c76000067af25166c2f0f85f36aa8867406119c010400002e31dea98204000000d560eae59ea49ef95d73202a6e3b5e1eb38244e694e7410d33bc92794ad27031f2a19698b5142ddf36e2a876a4fc871207bf12a84f1d4d132f5bb7edcf2d08d677e6a7268e106b6ced3c7f53df24092ddb9e0fac6a1153c3fc88bfd1404fef22cf3e825a6e19c6a48a5444eabb459ac3ec9a278df4011773d2f2e6529ed0ad424b47ec67522477f979360b76d1008000"}, @TCA_RED_PARMS={0x14, 0x1, {0x3f26, 0x7, 0x81, 0xc, 0xb, 0x14, 0x5}}, @TCA_RED_MAX_P={0x8}]}}]}, 0x150}}, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000003200)=@newsa={0x138, 0x10, 0x1, 0xfffffffe, 0x100, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x1, 0x714, 0x4e23, 0x5, 0x0, 0x0, 0x0, 0x3a}, {@in6=@mcast2, 0x4d4, 0x6c}, @in=@loopback, {0x0, 0x192, 0x6, 0xffff, 0x8251c, 0x2, 0xfffffffffffffff8}, {0xffffffffffffffff, 0x0, 0x1f, 0xfffffffffffffffe}, {0x2, 0xfffffffc}, 0x70bd2a, 0x3504, 0x2, 0x1, 0x0, 0x20}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}]}, 0x138}, 0x1, 0x0, 0x0, 0x8801}, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000003c0)=@newsa={0x148, 0x1a, 0x1, 0xfffffffe, 0x100, {{@in=@multicast2, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x1, 0x71c, 0x4e23, 0x5, 0xa, 0x0, 0x20, 0x3a}, {@in6=@mcast2, 0x4d4, 0x6c}, @in=@broadcast, {0xfe, 0x1000000000000192, 0x9ba3, 0xffff, 0x8251c, 0x5, 0xffffffffffffff7c}, {0xffffffffffffffff, 0x0, 0x1f, 0xfffffffffffffffe}, {0xfffffffa, 0x3ff}, 0x80, 0x3505, 0x2, 0x1, 0x3, 0x20}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}, @XFRMA_IF_ID={0x8, 0x1f, 0x1}, @XFRMA_SET_MARK={0x8, 0x1d, 0x2}]}, 0x148}}, 0x844) r4 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x6, 0xb801b, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x147b7e, 0x0, @perf_bp={0x0, 0x4}, 0xb093, 0x800000, 0x43a1bd76, 0x2, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x200b}, 0x0, 0x4000000000, 0xffffffffffffffff, 0x8) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, 0xffffffffffffffff) fsopen(&(0x7f0000000140)='qnx4\x00', 0x1) 1m51.754586532s ago: executing program 35 (id=1844): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'tunl0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=@newqdisc={0x150, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffc, {0x0, 0x0, 0x0, r1, {0x0, 0x1}, {0xffff, 0xffff}, {0x16}}, [@qdisc_kind_options=@q_red={{0x8}, {0x124, 0x2, [@TCA_RED_STAB={0x104, 0x2, "09000000000020008f29d158039b90627d7b60f0d5ca47f33eed46409b7c8722ce020df6b24c2e6ac7b97dc04d01be2092874115214b1ebb764511f69cd1e9f6263346363d2c639c76000067af25166c2f0f85f36aa8867406119c010400002e31dea98204000000d560eae59ea49ef95d73202a6e3b5e1eb38244e694e7410d33bc92794ad27031f2a19698b5142ddf36e2a876a4fc871207bf12a84f1d4d132f5bb7edcf2d08d677e6a7268e106b6ced3c7f53df24092ddb9e0fac6a1153c3fc88bfd1404fef22cf3e825a6e19c6a48a5444eabb459ac3ec9a278df4011773d2f2e6529ed0ad424b47ec67522477f979360b76d1008000"}, @TCA_RED_PARMS={0x14, 0x1, {0x3f26, 0x7, 0x81, 0xc, 0xb, 0x14, 0x5}}, @TCA_RED_MAX_P={0x8}]}}]}, 0x150}}, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000003200)=@newsa={0x138, 0x10, 0x1, 0xfffffffe, 0x100, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x1, 0x714, 0x4e23, 0x5, 0x0, 0x0, 0x0, 0x3a}, {@in6=@mcast2, 0x4d4, 0x6c}, @in=@loopback, {0x0, 0x192, 0x6, 0xffff, 0x8251c, 0x2, 0xfffffffffffffff8}, {0xffffffffffffffff, 0x0, 0x1f, 0xfffffffffffffffe}, {0x2, 0xfffffffc}, 0x70bd2a, 0x3504, 0x2, 0x1, 0x0, 0x20}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}]}, 0x138}, 0x1, 0x0, 0x0, 0x8801}, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000003c0)=@newsa={0x148, 0x1a, 0x1, 0xfffffffe, 0x100, {{@in=@multicast2, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x1, 0x71c, 0x4e23, 0x5, 0xa, 0x0, 0x20, 0x3a}, {@in6=@mcast2, 0x4d4, 0x6c}, @in=@broadcast, {0xfe, 0x1000000000000192, 0x9ba3, 0xffff, 0x8251c, 0x5, 0xffffffffffffff7c}, {0xffffffffffffffff, 0x0, 0x1f, 0xfffffffffffffffe}, {0xfffffffa, 0x3ff}, 0x80, 0x3505, 0x2, 0x1, 0x3, 0x20}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}, @XFRMA_IF_ID={0x8, 0x1f, 0x1}, @XFRMA_SET_MARK={0x8, 0x1d, 0x2}]}, 0x148}}, 0x844) r4 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x6, 0xb801b, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x147b7e, 0x0, @perf_bp={0x0, 0x4}, 0xb093, 0x800000, 0x43a1bd76, 0x2, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x200b}, 0x0, 0x4000000000, 0xffffffffffffffff, 0x8) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, 0xffffffffffffffff) fsopen(&(0x7f0000000140)='qnx4\x00', 0x1) 1.137370824s ago: executing program 0 (id=3303): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f0000000340)={&(0x7f0000000000)=""/59, 0x304000, 0x800, 0x0, 0x3}, 0x20) 968.938144ms ago: executing program 3 (id=3309): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_DEL_SEC_DEVKEY(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000023c0)={&(0x7f0000002180)={0x14, 0x0, 0x304, 0x70bd28, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x40480c1}, 0x0) syz_genetlink_get_family_id$nfc(&(0x7f0000002500), r1) r2 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000002580), r1) sendmsg$NLBL_CALIPSO_C_LIST(r0, &(0x7f0000000fc0)={0x0, 0x0, &(0x7f0000000f80)={&(0x7f0000000f00)={0x1c, r2, 0x1, 0x70bd2c, 0x25dfdbfd, {}, [@NLBL_CALIPSO_A_DOI={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x44815}, 0x0) 916.325727ms ago: executing program 3 (id=3310): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000018105e04da0700000000000109022400010000000009040000090300000009210000000122220009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000080)={0x0, 0x22, 0x25, {[@global=@item_012={0x0, 0x1, 0x6}, @global=@item_4={0x3, 0x1, 0x1, "3f459e96"}, @local=@item_4={0x3, 0x2, 0x3, "53743f02"}, @global=@item_4={0x3, 0x1, 0x0, "9e128b3d"}, @main=@item_4={0x3, 0x0, 0xb, "112c7b5a"}, @main=@item_4={0x3, 0x0, 0x8, '\"\x00'}, @global=@item_4={0x3, 0x1, 0xb, "7748e5e6"}, @local=@item_4={0x3, 0x2, 0x0, "00000400"}, @local=@item_012={0x0, 0x2, 0x4}]}}, 0x0}, 0x0) 882.421899ms ago: executing program 5 (id=3311): keyctl$set_reqkey_keyring(0xe, 0x4) request_key(&(0x7f0000000100)='logon\x00', &(0x7f0000001ffb)={'syz', 0x3}, &(0x7f0000000200)='R\x10rust\xe3c*sgrVdn:Dd', 0x0) 802.178323ms ago: executing program 0 (id=3312): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r2) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) ioctl$SIOCSIFHWADDR(r2, 0x8943, &(0x7f0000002280)={'syzkaller0\x00', @random="001300"}) 801.634313ms ago: executing program 5 (id=3313): sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000cc0)={0x12c, 0x0, 0x2, 0x301, 0x0, 0x0, {0x7, 0x0, 0x2}, [@CTA_EXPECT_NAT={0x58, 0xa, 0x0, 0x1, [@CTA_EXPECT_NAT_DIR={0x8}, @CTA_EXPECT_NAT_DIR={0x8}, @CTA_EXPECT_NAT_DIR={0x8}, @CTA_EXPECT_NAT_TUPLE={0x34, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x1}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x3a}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x88}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x11}}]}, @CTA_EXPECT_NAT_DIR={0x8, 0x1, 0x1, 0x0, 0x1}]}, @CTA_EXPECT_NAT={0xa0, 0xa, 0x0, 0x1, [@CTA_EXPECT_NAT_DIR={0x8}, @CTA_EXPECT_NAT_TUPLE={0x58, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x21}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x8, 0x2, @empty}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x6}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x21}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x28}}}}]}, @CTA_EXPECT_NAT_DIR={0x8}, @CTA_EXPECT_NAT_TUPLE={0x34, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @remote}, {0x8, 0x2, @private=0xa010100}}}, @CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x88}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}]}]}, @CTA_EXPECT_HELP_NAME={0xe, 0x6, 'sip-20000\x00'}, @CTA_EXPECT_HELP_NAME={0xe, 0x6, 'snmp_trap\x00'}]}, 0x12c}, 0x1, 0x0, 0x0, 0x40010}, 0x4008000) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x321}, {&(0x7f0000000280)=""/85, 0x21}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000580)=""/106, 0x659}, {&(0x7f0000000980)=""/73, 0xd}, {&(0x7f0000000200)=""/77, 0x69}, {&(0x7f00000007c0)=""/141, 0xc4}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41}, 0x5}], 0x4000000000003b4, 0x2000, &(0x7f0000003700)={0x77359400}) 801.316213ms ago: executing program 5 (id=3314): r0 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) close(r0) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000300)='ns/net\x00') r1 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000005c0)={r1, 0x0, 0x24, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xa) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000340), 0x8) r2 = bpf$LINK_GET_FD_BY_ID(0x1e, 0x0, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000180)={r2, 0x0, 0x0}, 0x10) 788.960774ms ago: executing program 5 (id=3315): r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000540)=ANY=[@ANYBLOB="120100009f187620ef170372362e010203010902240001000010000904bc00029e8833000905020200020200000905820220"], 0x0) syz_usb_control_io$rtl8150(r0, 0x0, 0x0) sendmsg$NFNL_MSG_COMPAT_GET(0xffffffffffffffff, 0x0, 0x10) sendto(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000002640)={0x44, &(0x7f0000000000)=ANY=[@ANYBLOB="400e02"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000a80)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000840)={0x40, 0xb, 0x2, "e302"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f00000008c0)={0x34, &(0x7f0000000680)={0x40, 0xc, 0x2, 'a^'}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000500)={0x2c, &(0x7f00000000c0)=ANY=[@ANYBLOB="401602"], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000cc0)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000980)={0x40, 0x9, 0x1, 0x7}, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000b80)={0x40, 0x19, 0x2}, &(0x7f0000000bc0)={0x40, 0x1a, 0x2, 0x401}, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r0, 0x0, 0x0) 756.831776ms ago: executing program 0 (id=3316): sendmsg$key(0xffffffffffffffff, 0x0, 0x40408c0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_STRSET_GET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000540)={0x34, r1, 0x705, 0x70bd2b, 0x25dfdbff, {}, [@ETHTOOL_A_STRSET_STRINGSETS={0x1c, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x8}]}, {0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}]}]}, @ETHTOOL_A_STRSET_COUNTS_ONLY={0x4}]}, 0x34}, 0x1, 0x0, 0x0, 0x80}, 0x0) 697.982819ms ago: executing program 0 (id=3317): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_DEL_SEC_DEVKEY(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000023c0)={&(0x7f0000002180)={0x14, 0x0, 0x304, 0x70bd28, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x40480c1}, 0x0) syz_genetlink_get_family_id$nfc(&(0x7f0000002500), r1) r2 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000002580), r1) sendmsg$NLBL_CALIPSO_C_LIST(r0, &(0x7f0000000fc0)={0x0, 0x0, &(0x7f0000000f80)={&(0x7f0000000f00)={0x14, r2, 0x1, 0x70bd2c, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x44815}, 0x0) 697.516369ms ago: executing program 0 (id=3318): socket$netlink(0x10, 0x3, 0x0) r0 = syz_usb_connect(0x0, 0x36, 0x0, 0x0) r1 = socket(0x10, 0x3, 0x9) sendmsg$NFT_BATCH(r1, 0x0, 0x40000) syz_usb_control_io$rtl8150(r0, 0x0, 0x0) write$tun(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) r2 = syz_open_dev$usbfs(&(0x7f0000000080), 0x75, 0x10b701) ioctl$USBDEVFS_CLAIM_PORT(r2, 0x80045518, &(0x7f0000000040)=0x1) ioctl$USBDEVFS_CLAIM_PORT(r2, 0x80045518, &(0x7f0000000000)=0x1) mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x2, 0x5) 654.105352ms ago: executing program 8 (id=3321): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup(r1) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) write$tun(r0, &(0x7f0000000b40)={@val={0xa, 0x88a8}, @void, @eth={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, @random="2833b1656532", @void, {@ipv6={0x86dd, @icmpv6={0x9, 0x6, "4f9206", 0x32, 0x3a, 0x1, @remote, @mcast2, {[], @dest_unreach={0x1, 0x3, 0x0, 0x3, '\x00', {0xb, 0x6, "f93b4d", 0x6, 0x2b, 0x0, @mcast2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], "65f8"}}}}}}}}, 0x6c) 601.471235ms ago: executing program 8 (id=3322): sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000001}, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2, 0x0, @empty}, 0x1c) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000300)={@in6={{0xa, 0x0, 0x6, @remote, 0x2}}, 0x0, 0x0, 0x6, 0x0, "3f114438efdaca16d374b49a365be44d5e860ea3ba676c0b5047b80e2c3535d5bd9db3c8572560f4d1be5cd41f7716082ee3589f099942e6f1c395ddb8160381baadf27900"}, 0xd8) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000100)={@in6={{0xa, 0x0, 0x20000000, @remote}}, 0x0, 0x0, 0x0, 0x0, "ddfd3b7ed7c6a1c172a987ae5ce3cafd64c9a736831a5912d606798fb75c9981c4b3ac0e06891ff18bc5543ed57215a3c45f9154dfa319e52a15a2b9acf80c07fb1a854dad742eef6187f2304844c296"}, 0xd8) sendto$inet6(r0, 0x0, 0x0, 0x20004002, &(0x7f0000b63fe4)={0xa, 0x2, 0x80000000}, 0x1c) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000040)='./file1\x00', 0x3000046, &(0x7f00000004c0)={[{@delalloc}, {@data_err_abort}, {@barrier_val={'barrier', 0x3d, 0x2}}, {@usrquota}, {@data_err_ignore}, {@nobarrier}, {@oldalloc}, {@grpquota}, {@noload}, {@user_xattr}, {@bh}, {@dioread_nolock}]}, 0x1, 0x553, &(0x7f0000001080)="$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") r1 = openat(0xffffffffffffff9c, &(0x7f0000000e80)='./bus\x00', 0x1c1002, 0x0) write(r1, &(0x7f00000001c0)="f1", 0x1) sendfile(r1, 0xffffffffffffffff, 0x0, 0x7ffff000) 600.985405ms ago: executing program 8 (id=3323): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x56a, 0x3, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x3, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x0, 0xc, 0x40}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000001980)={0x24, 0x0, 0x0, &(0x7f0000001900)={0x0, 0x22, 0x5, {[@local=@item_4={0x3, 0x2, 0x1, "8a23378b"}]}}, 0x0}, 0x0) 314.182532ms ago: executing program 3 (id=3324): r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) ioctl$SNAPSHOT_CREATE_IMAGE(r0, 0x40043311, 0x0) 305.439462ms ago: executing program 3 (id=3325): r0 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) close(r0) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000300)='ns/net\x00') r1 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000005c0)={r1, 0x0, 0x24, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xa) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000340)={0x0, 0x0}, 0x8) bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000380)=r2, 0x4) bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0) 287.079284ms ago: executing program 3 (id=3326): r0 = fsopen(&(0x7f0000000080)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x7) r2 = openat$cgroup(r1, &(0x7f00000000c0)='syz0\x00', 0x200002, 0x0) openat$cgroup_ro(r2, &(0x7f0000000040)='cgroup.stat\x00', 0x275a, 0x0) 222.101517ms ago: executing program 3 (id=3327): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000240)={0xa, 0x4e23, 0xa4e4, @remote, 0x3}, 0x1c) r1 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$sock_linger(r1, 0x1, 0x3c, &(0x7f0000000100)={0x200000000000001}, 0x8) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x4e20, 0xffff, @ipv4={'\x00', '\xff\xff', @local}, 0x80000000}, 0x1c) sendmmsg$inet6(r1, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4000000) ioctl$sock_SIOCGSKNS(r1, 0x894c, &(0x7f00000002c0)=0x7) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r3, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000001740)=[{&(0x7f0000000280)='>', 0x22fe0}], 0x1}, 0x0) recvmsg$unix(r2, &(0x7f0000000480)={0x0, 0x0, 0x0}, 0x2) setsockopt$inet6_IPV6_RTHDRDSTOPTS(r0, 0x29, 0x37, &(0x7f0000000040)={0x1d}, 0x8) sendmmsg(r0, &(0x7f0000004c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4010) socket$netlink(0x10, 0x3, 0xe) openat$thread_pidfd(0xffffffffffffff9c, &(0x7f0000002040), 0x410281, 0x0) syz_clone(0x4000000, &(0x7f0000000a40), 0x0, 0x0, &(0x7f0000000b80), 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x17, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18020000ffffffff00000000000000001801000011646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000006000000850000007d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r4, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x3800, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 221.641727ms ago: executing program 5 (id=3328): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000480)={0x73622a85, 0x0, 0x2}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000640)={0x58, 0x0, &(0x7f0000000540)=[@decrefs={0x400c6314}, @transaction_sg={0x40486311, {0x1000, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40}, @register_looper], 0x0, 0x0, 0x0}) 221.425037ms ago: executing program 5 (id=3329): openat$sysfs(0xffffffffffffff9c, 0x0, 0x900, 0x11) r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x40, 0x1b96, 0xc, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x50, 0x10, [{{0x9, 0x4, 0x0, 0x3, 0x41, 0x3, 0x0, 0x1, 0x0, {0x9, 0x21, 0xb, 0x8, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x40, 0x7, 0x6, 0x20}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000001c0)={0xff7f, 0x0, 0x0, &(0x7f0000000000)={0x0, 0x22, 0x5}, 0x0}, 0x0) 207.580518ms ago: executing program 6 (id=3330): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r0, 0x29, 0x46, 0x0, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20004045, &(0x7f00000000c0)={0xa, 0x4e21, 0x200, @loopback}, 0x1c) 189.831159ms ago: executing program 6 (id=3331): ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYRES32], 0x48) perf_event_open(&(0x7f00000004c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x22a0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000cc0)={0x0, 0x0, 0x0}, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = openat$cgroup_subtree(r1, &(0x7f0000000200), 0x2, 0x0) write$cgroup_subtree(r2, &(0x7f0000000080)={[{0x2b, 'cpu'}]}, 0x5) openat$cgroup_int(r0, &(0x7f0000000180)='cpu.weight\x00', 0x2, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_int(r3, &(0x7f0000000180)='cpu.weight\x00', 0x2, 0x0) write$cgroup_subtree(r2, &(0x7f00000001c0)={[{0x2d, 'cpu'}]}, 0x5) 121.818483ms ago: executing program 0 (id=3332): sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000001}, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2, 0x0, @empty}, 0x1c) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000300)={@in6={{0xa, 0x0, 0x6, @remote, 0x2}}, 0x0, 0x0, 0x6, 0x0, "3f114438efdaca16d374b49a365be44d5e860ea3ba676c0b5047b80e2c3535d5bd9db3c8572560f4d1be5cd41f7716082ee3589f099942e6f1c395ddb8160381baadf27900"}, 0xd8) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000100)={@in6={{0xa, 0x0, 0x20000000, @remote}}, 0x0, 0x0, 0x0, 0x0, "ddfd3b7ed7c6a1c172a987ae5ce3cafd64c9a736831a5912d606798fb75c9981c4b3ac0e06891ff18bc5543ed57215a3c45f9154dfa319e52a15a2b9acf80c07fb1a854dad742eef6187f2304844c296"}, 0xd8) sendto$inet6(r0, 0x0, 0x0, 0x20004002, &(0x7f0000b63fe4)={0xa, 0x2, 0x80000000}, 0x1c) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000040)='./file1\x00', 0x3000046, &(0x7f00000004c0)={[{@delalloc}, {@data_err_abort}, {@barrier_val={'barrier', 0x3d, 0x2}}, {@usrquota}, {@data_err_ignore}, {@nobarrier}, {@oldalloc}, {@grpquota}, {@noload}, {@user_xattr}, {@bh}, {@dioread_nolock}]}, 0x1, 0x553, &(0x7f0000001080)="$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") r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', 0x1c1840, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000e80)='./bus\x00', 0x1c1002, 0x0) write(r3, &(0x7f00000001c0)="f1", 0x1) sendfile(r3, r1, 0x0, 0x40001) sendfile(r3, r2, 0x0, 0x7ffff000) 121.526653ms ago: executing program 6 (id=3333): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NFC_CMD_GET_TARGET(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x0, 0x4}, 0x14}}, 0x0) syz_genetlink_get_family_id$nfc(&(0x7f0000000140), r0) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000300), r0) sendmsg$NL802154_CMD_NEW_INTERFACE(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000004c0)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="87002dbd7000000000001e0000"], 0x28}, 0x1, 0x0, 0x0, 0x4040065}, 0x4024044) 121.347543ms ago: executing program 6 (id=3334): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x1c1842, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x4801}) close(0xffffffffffffffff) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller0\x00', 0x1}) 97.415835ms ago: executing program 6 (id=3335): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup(r1) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000100)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) write$tun(r0, &(0x7f0000000200)={@void, @void, @eth={@broadcast, @remote, @val={@void}, {@ipv4={0x800, @udp={{0x5, 0x4, 0x2, 0x15, 0x82d, 0x65, 0x0, 0x82, 0x11, 0x0, @rand_addr=0x64010102, @multicast1}, {0x4e22, 0x4e23, 0x819, 0x0, @wg=@data={0x4, 0x1, 0x3, "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"}}}}}}}, 0x83f) 78.930836ms ago: executing program 8 (id=3336): r0 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) close(r0) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000300)='ns/net\x00') r1 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000005c0)={r1, 0x0, 0x24, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xa) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000340)={0x0, 0x0}, 0x8) bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000380)=r2, 0x4) bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0) 6.07114ms ago: executing program 8 (id=3337): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup(r1) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) write$tun(r0, &(0x7f0000000440)={@void, @void, @eth={@multicast, @remote, @val={@val={0x88a8, 0x0, 0x1, 0x4}}, {@ipv4={0x800, @generic={{0x5, 0x4, 0x1, 0x4, 0x14, 0x68, 0x2000, 0x9, 0x88, 0x0, @rand_addr=0x64010100, @broadcast}}}}}}, 0x2a) 5.81634ms ago: executing program 6 (id=3338): vmsplice(0xffffffffffffffff, &(0x7f00000066c0)=[{0x0}, {&(0x7f00000064c0)}], 0x2, 0x0) r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000000000406c256d0000000200000109022400010000000009040000010300000009210000000122050009058103"], 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x21, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000000)={0x24, 0x0, 0x0, &(0x7f0000000100)={0x0, 0x22, 0x5, {[@main=@item_4={0x3, 0x0, 0x8, 'a#\bY'}]}}, 0x0}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000240)={0x24, 0x0, &(0x7f00000002c0)={0x0, 0x3, 0x4, @string={0x4, 0x3, '>\a'}}, 0x0, 0x0}, 0x0) 0s ago: executing program 8 (id=3339): r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x77, 0x29, 0x4, 0x20, 0x424, 0x9901, 0xc257, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x10, 0x0, [{{0x9, 0x4, 0x43, 0x0, 0x2, 0x31, 0x7d, 0x55, 0x0, [], [{{0x9, 0x5, 0x2, 0x2, 0x200, 0x2}}, {{0x9, 0x5, 0x82, 0x2, 0x200}}]}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000400)={0x44, &(0x7f0000000200)=ANY=[@ANYBLOB="401504"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) socket$inet_icmp(0x2, 0x2, 0x1) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000780)={0x84, &(0x7f0000000300)={0x0, 0x16, 0x4, "94c161ee"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f00000002c0)={0x1c, &(0x7f0000000140)={0x0, 0xf, 0x4, "c7a13997"}, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) kernel console output (not intermixed with test programs): miscuous mode [ 187.833338][T10245] veth0_macvtap: entered promiscuous mode [ 187.849069][ T6528] netdevsim netdevsim3 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 187.857329][ T6528] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 20000 - 0 [ 187.865718][ T6528] netdevsim netdevsim3 eth3: set [1, 1] type 2 family 0 port 6081 - 0 [ 187.875373][T10245] veth1_macvtap: entered promiscuous mode [ 187.905549][T10245] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 187.923657][T10443] netlink: 44 bytes leftover after parsing attributes in process `syz.0.1879'. [ 188.007619][T10452] sctp: [Deprecated]: syz.6.1881 (pid 10452) Use of int in maxseg socket option. [ 188.007619][T10452] Use struct sctp_assoc_value instead [ 188.022335][T10245] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 188.038471][ T52] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 188.065415][T10448] siw: device registration error -23 [ 188.067282][ T52] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 188.089795][T10448] loop3: detected capacity change from 0 to 128 [ 188.101819][ T6525] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 188.111111][ T6525] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 188.124374][T10448] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 188.230778][T10448] ext4 filesystem being mounted at /373/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 188.364149][T10448] EXT4-fs warning (device loop3): verify_group_input:137: Cannot add at group 5 (only 1 groups) [ 188.388161][T10452] sctp: [Deprecated]: syz.6.1881 (pid 10452) Use of int in max_burst socket option. [ 188.388161][T10452] Use struct sctp_assoc_value instead [ 188.446853][ T3317] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 188.562318][T10475] loop3: detected capacity change from 0 to 1024 [ 188.569776][T10477] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1884'. [ 188.593836][T10477] macvtap0: entered promiscuous mode [ 188.632886][T10475] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 188.636339][T10477] macvtap0: left promiscuous mode [ 188.704449][ T3317] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 189.049127][ T29] kauditd_printk_skb: 668 callbacks suppressed [ 189.049148][ T29] audit: type=1400 audit(1769431342.458:9462): avc: denied { create } for pid=10500 comm="syz.0.1893" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 189.417104][T10514] siw: device registration error -23 [ 189.440463][T10514] loop8: detected capacity change from 0 to 128 [ 189.449706][T10514] EXT4-fs (loop8): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 189.469547][T10514] ext4 filesystem being mounted at /1/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 189.523388][T10514] EXT4-fs warning (device loop8): verify_group_input:137: Cannot add at group 5 (only 1 groups) [ 189.650154][T10245] EXT4-fs (loop8): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 189.712378][T10534] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth0_to_bond, syncid = 0, id = 0 [ 189.772549][T10537] netlink: 28 bytes leftover after parsing attributes in process `syz.8.1906'. [ 189.928034][T10538] sctp: [Deprecated]: syz.5.1905 (pid 10538) Use of int in max_burst socket option deprecated. [ 189.928034][T10538] Use struct sctp_assoc_value instead [ 190.050758][ T29] audit: type=1326 audit(1769431343.458:9463): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10552 comm="syz.8.1912" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fca28e5aeb9 code=0x7ffc0000 [ 190.074453][ T29] audit: type=1326 audit(1769431343.458:9464): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10552 comm="syz.8.1912" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fca28e5aeb9 code=0x7ffc0000 [ 190.224349][ T29] audit: type=1326 audit(1769431343.458:9465): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10552 comm="syz.8.1912" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fca28e5aeb9 code=0x7ffc0000 [ 190.247973][ T29] audit: type=1326 audit(1769431343.468:9466): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10552 comm="syz.8.1912" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fca28e5aeb9 code=0x7ffc0000 [ 190.271548][ T29] audit: type=1326 audit(1769431343.548:9467): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10552 comm="syz.8.1912" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7fca28e5aeb9 code=0x7ffc0000 [ 190.295278][ T29] audit: type=1326 audit(1769431343.548:9468): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10552 comm="syz.8.1912" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fca28e5aeb9 code=0x7ffc0000 [ 190.318916][ T29] audit: type=1326 audit(1769431343.548:9469): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10552 comm="syz.8.1912" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fca28e5aeb9 code=0x7ffc0000 [ 190.342710][ T29] audit: type=1326 audit(1769431343.548:9470): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10552 comm="syz.8.1912" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fca28e5aeb9 code=0x7ffc0000 [ 190.366253][ T29] audit: type=1326 audit(1769431343.548:9471): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10552 comm="syz.8.1912" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fca28e5aeb9 code=0x7ffc0000 [ 190.783120][T10563] sctp: [Deprecated]: syz.8.1915 (pid 10563) Use of int in maxseg socket option. [ 190.783120][T10563] Use struct sctp_assoc_value instead [ 190.977905][T10563] sctp: [Deprecated]: syz.8.1915 (pid 10563) Use of int in max_burst socket option. [ 190.977905][T10563] Use struct sctp_assoc_value instead [ 192.149951][T10628] sctp: [Deprecated]: syz.0.1933 (pid 10628) Use of int in max_burst socket option deprecated. [ 192.149951][T10628] Use struct sctp_assoc_value instead [ 192.508849][T10634] sctp: [Deprecated]: syz.5.1936 (pid 10634) Use of int in maxseg socket option. [ 192.508849][T10634] Use struct sctp_assoc_value instead [ 192.650120][T10634] sctp: [Deprecated]: syz.5.1936 (pid 10634) Use of int in max_burst socket option. [ 192.650120][T10634] Use struct sctp_assoc_value instead [ 193.112490][T10662] xt_CT: You must specify a L4 protocol and not use inversions on it [ 193.587169][T10666] loop3: detected capacity change from 0 to 512 [ 193.598185][T10666] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended [ 193.607414][T10666] EXT4-fs (loop3): mounting ext2 file system using the ext4 subsystem [ 193.624049][T10666] EXT4-fs (loop3): warning: mounting unchecked fs, running e2fsck is recommended [ 193.633685][T10666] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a002e01c, mo2=0006] [ 193.646052][T10666] System zones: 0-2, 18-18, 34-35 [ 193.652131][T10666] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 193.677935][ T3317] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 193.701723][T10632] loop8: detected capacity change from 0 to 2048 [ 193.823403][T10632] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 193.838864][T10632] ext4 filesystem being mounted at /12/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 193.957115][T10632] EXT4-fs error (device loop8): ext4_xattr_block_get:597: inode #15: comm syz.8.1935: corrupted xattr block 128: overlapping e_value [ 193.977989][T10632] EXT4-fs (loop8): Remounting filesystem read-only [ 193.985037][T10632] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop8 ino=15 [ 193.996029][T10632] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop8 ino=15 [ 194.007323][T10632] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop8 ino=15 [ 194.007877][T10690] netlink: 256 bytes leftover after parsing attributes in process `syz.8.1935'. [ 194.007898][T10690] netlink: 68 bytes leftover after parsing attributes in process `syz.8.1935'. [ 194.046238][T10689] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1952'. [ 194.079617][T10245] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 194.230993][T10703] sctp: [Deprecated]: syz.8.1953 (pid 10703) Use of int in max_burst socket option deprecated. [ 194.230993][T10703] Use struct sctp_assoc_value instead [ 194.257044][T10703] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 194.321583][T10703] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 194.371018][T10703] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 194.422351][T10703] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 194.466150][ T52] netdevsim netdevsim8 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 194.478116][ T52] netdevsim netdevsim8 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 194.501634][ T52] netdevsim netdevsim8 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 194.510518][ T52] netdevsim netdevsim8 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 194.583316][T10713] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1957'. [ 194.610728][T10713] 8021q: adding VLAN 0 to HW filter on device bond5 [ 194.629091][T10718] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 194.646033][T10708] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1957'. [ 194.668313][T10708] netlink: 72 bytes leftover after parsing attributes in process `syz.0.1957'. [ 194.771075][ T29] kauditd_printk_skb: 452 callbacks suppressed [ 194.771095][ T29] audit: type=1326 audit(1769431348.178:9924): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10682 comm="syz.3.1950" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f61ebecaeb9 code=0x7ffc0000 [ 194.800979][ T29] audit: type=1326 audit(1769431348.178:9925): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10682 comm="syz.3.1950" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f61ebecaeb9 code=0x7ffc0000 [ 194.908404][T10726] loop3: detected capacity change from 0 to 1024 [ 194.988593][T10726] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 195.027300][ T29] audit: type=1326 audit(1769431348.428:9926): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10733 comm="syz.8.1965" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fca28e5aeb9 code=0x7ffc0000 [ 195.043456][T10734] sctp: [Deprecated]: syz.8.1965 (pid 10734) Use of int in maxseg socket option. [ 195.043456][T10734] Use struct sctp_assoc_value instead [ 195.067415][ T29] audit: type=1326 audit(1769431348.428:9928): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10733 comm="syz.8.1965" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fca28e5aeb9 code=0x7ffc0000 [ 195.091216][ T29] audit: type=1326 audit(1769431348.428:9929): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10733 comm="syz.8.1965" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fca28e5aeb9 code=0x7ffc0000 [ 195.114758][ T29] audit: type=1326 audit(1769431348.428:9927): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10733 comm="syz.8.1965" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fca28e5aeb9 code=0x7ffc0000 [ 195.138401][ T29] audit: type=1326 audit(1769431348.428:9930): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10733 comm="syz.8.1965" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7fca28e5aeb9 code=0x7ffc0000 [ 195.162039][ T29] audit: type=1326 audit(1769431348.428:9931): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10733 comm="syz.8.1965" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fca28e5aeb9 code=0x7ffc0000 [ 195.185663][ T29] audit: type=1326 audit(1769431348.428:9932): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10733 comm="syz.8.1965" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fca28e5aeb9 code=0x7ffc0000 [ 195.209253][ T29] audit: type=1326 audit(1769431348.428:9933): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10733 comm="syz.8.1965" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fca28e5aeb9 code=0x7ffc0000 [ 195.269635][ T3317] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 195.300306][T10734] sctp: [Deprecated]: syz.8.1965 (pid 10734) Use of int in max_burst socket option. [ 195.300306][T10734] Use struct sctp_assoc_value instead [ 195.360898][T10744] IPVS: stopping backup sync thread 8866 ... [ 195.393311][T10746] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=239 sclass=netlink_route_socket pid=10746 comm=syz.8.1970 [ 195.443431][T10751] sctp: [Deprecated]: syz.6.1972 (pid 10751) Use of int in maxseg socket option. [ 195.443431][T10751] Use struct sctp_assoc_value instead [ 195.485037][T10757] sctp: [Deprecated]: syz.0.1966 (pid 10757) Use of int in max_burst socket option deprecated. [ 195.485037][T10757] Use struct sctp_assoc_value instead [ 195.621431][T10751] sctp: [Deprecated]: syz.6.1972 (pid 10751) Use of int in max_burst socket option. [ 195.621431][T10751] Use struct sctp_assoc_value instead [ 195.893864][T10776] sctp: [Deprecated]: syz.6.1980 (pid 10776) Use of int in maxseg socket option. [ 195.893864][T10776] Use struct sctp_assoc_value instead [ 195.919619][T10780] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1981'. [ 195.949261][T10780] vlan2: entered allmulticast mode [ 196.002888][T10776] sctp: [Deprecated]: syz.6.1980 (pid 10776) Use of int in max_burst socket option. [ 196.002888][T10776] Use struct sctp_assoc_value instead [ 196.193152][T10789] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1984'. [ 198.031972][T10863] netlink: 28 bytes leftover after parsing attributes in process `syz.8.2010'. [ 198.060782][T10860] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=10860 comm=syz.0.2011 [ 198.510787][T10899] IPVS: stopping backup sync thread 9671 ... [ 198.574820][T10887] netlink: 'syz.8.2015': attribute type 21 has an invalid length. [ 198.653915][T10887] netlink: 132 bytes leftover after parsing attributes in process `syz.8.2015'. [ 198.858842][T10925] siw: device registration error -23 [ 198.890235][T10925] loop3: detected capacity change from 0 to 128 [ 198.907099][T10936] loop8: detected capacity change from 0 to 256 [ 198.932472][T10925] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 198.988921][T10925] ext4 filesystem being mounted at /397/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 199.038099][T10925] EXT4-fs warning (device loop3): verify_group_input:137: Cannot add at group 5 (only 1 groups) [ 199.300648][ T3317] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 199.342424][T10936] FAT-fs (loop8): Directory bread(block 64) failed [ 199.377458][T10936] FAT-fs (loop8): Directory bread(block 65) failed [ 199.449394][T10936] FAT-fs (loop8): Directory bread(block 66) failed [ 199.493953][T10936] FAT-fs (loop8): Directory bread(block 67) failed [ 199.550568][T10936] FAT-fs (loop8): Directory bread(block 68) failed [ 199.574318][T10936] FAT-fs (loop8): Directory bread(block 69) failed [ 199.604544][T10936] FAT-fs (loop8): Directory bread(block 70) failed [ 199.634691][T10936] FAT-fs (loop8): Directory bread(block 71) failed [ 199.654163][T10936] FAT-fs (loop8): Directory bread(block 72) failed [ 199.672526][T10936] FAT-fs (loop8): Directory bread(block 73) failed [ 199.753183][T10936] FAT-fs (loop8): error, fat_bmap_cluster: request beyond EOF (i_pos 899) [ 199.761872][T10936] FAT-fs (loop8): Filesystem has been set read-only [ 199.788262][T10936] syz.8.2026: attempt to access beyond end of device [ 199.788262][T10936] loop8: rw=524288, sector=1736, nr_sectors = 32 limit=256 [ 199.885246][T10936] FAT-fs (loop8): error, fat_bmap_cluster: request beyond EOF (i_pos 899) [ 199.888380][T10977] syz.8.2026: attempt to access beyond end of device [ 199.888380][T10977] loop8: rw=8388608, sector=1736, nr_sectors = 8 limit=256 [ 199.920615][T10936] FAT-fs (loop8): error, fat_bmap_cluster: request beyond EOF (i_pos 899) [ 199.947853][T10935] syz.8.2026: attempt to access beyond end of device [ 199.947853][T10935] loop8: rw=8388608, sector=1736, nr_sectors = 8 limit=256 [ 199.982896][T10936] syz.8.2026: attempt to access beyond end of device [ 199.982896][T10936] loop8: rw=8388608, sector=1736, nr_sectors = 8 limit=256 [ 200.017188][T10935] syz.8.2026: attempt to access beyond end of device [ 200.017188][T10935] loop8: rw=8388608, sector=1736, nr_sectors = 8 limit=256 [ 200.031105][T10977] syz.8.2026: attempt to access beyond end of device [ 200.031105][T10977] loop8: rw=8388608, sector=1736, nr_sectors = 8 limit=256 [ 200.057768][T10935] syz.8.2026: attempt to access beyond end of device [ 200.057768][T10935] loop8: rw=8388608, sector=1736, nr_sectors = 8 limit=256 [ 200.081285][T10936] syz.8.2026: attempt to access beyond end of device [ 200.081285][T10936] loop8: rw=8388608, sector=1736, nr_sectors = 8 limit=256 [ 200.099914][ T29] kauditd_printk_skb: 935 callbacks suppressed [ 200.099988][ T29] audit: type=1326 audit(1769431353.508:10869): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10978 comm="syz.6.2031" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1724baaeb9 code=0x7ffc0000 [ 200.129833][T10977] syz.8.2026: attempt to access beyond end of device [ 200.129833][T10977] loop8: rw=8388608, sector=1736, nr_sectors = 8 limit=256 [ 200.129936][T10977] syz.8.2026: attempt to access beyond end of device [ 200.129936][T10977] loop8: rw=8388608, sector=1736, nr_sectors = 8 limit=256 [ 200.158171][ T29] audit: type=1326 audit(1769431353.508:10870): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10978 comm="syz.6.2031" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f1724baaeb9 code=0x7ffc0000 [ 200.181871][ T29] audit: type=1326 audit(1769431353.508:10871): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10978 comm="syz.6.2031" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1724baaeb9 code=0x7ffc0000 [ 200.205475][ T29] audit: type=1326 audit(1769431353.508:10872): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10978 comm="syz.6.2031" exe="/root/syz-executor" sig=0 arch=c000003e syscall=201 compat=0 ip=0x7f1724baaeb9 code=0x7ffc0000 [ 200.229162][ T29] audit: type=1326 audit(1769431353.508:10873): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10978 comm="syz.6.2031" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1724baaeb9 code=0x7ffc0000 [ 200.252906][ T29] audit: type=1326 audit(1769431353.508:10874): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10978 comm="syz.6.2031" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1724baaeb9 code=0x7ffc0000 [ 200.369760][T10989] loop3: detected capacity change from 0 to 512 [ 200.391469][ T29] audit: type=1326 audit(1769431353.718:10875): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10982 comm="syz.8.2033" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fca28e5aeb9 code=0x7ffc0000 [ 200.415194][ T29] audit: type=1326 audit(1769431353.718:10876): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10982 comm="syz.8.2033" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fca28e5aeb9 code=0x7ffc0000 [ 200.415940][T10989] vfat: Bad value for 'allow_utime' [ 200.438973][ T29] audit: type=1326 audit(1769431353.718:10877): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10982 comm="syz.8.2033" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fca28e5aeb9 code=0x7ffc0000 [ 200.468028][ T29] audit: type=1326 audit(1769431353.728:10878): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10982 comm="syz.8.2033" exe="/root/syz-executor" sig=0 arch=c000003e syscall=125 compat=0 ip=0x7fca28e5aeb9 code=0x7ffc0000 [ 200.527948][T10989] program syz.3.2035 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 200.625764][T11000] loop3: detected capacity change from 0 to 1024 [ 200.639302][T11000] EXT4-fs: Ignoring removed bh option [ 200.660848][T11004] loop8: detected capacity change from 0 to 1764 [ 200.670419][T11004] iso9660: Unknown parameter 'overrEQl ?iderockperm' [ 200.684406][T11001] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=11001 comm=syz.6.2040 [ 200.698024][T11000] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 200.726762][T11001] __nla_validate_parse: 1 callbacks suppressed [ 200.726780][T11001] netlink: 28 bytes leftover after parsing attributes in process `syz.6.2040'. [ 200.742188][T11001] netlink: 28 bytes leftover after parsing attributes in process `syz.6.2040'. [ 200.814836][T11009] pimreg: entered allmulticast mode [ 201.031836][T11021] netlink: 60 bytes leftover after parsing attributes in process `syz.5.2042'. [ 201.041191][T11021] unsupported nlmsg_type 40 [ 201.156784][T11023] netlink: 20 bytes leftover after parsing attributes in process `syz.5.2042'. [ 201.211489][T11024] siw: device registration error -23 [ 201.380851][ T3317] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 201.547504][T11023] pimreg: left allmulticast mode [ 201.598659][T11028] netlink: 28 bytes leftover after parsing attributes in process `syz.6.2048'. [ 201.607729][T11028] netlink: 28 bytes leftover after parsing attributes in process `syz.6.2048'. [ 201.698402][T11033] futex_wake_op: syz.0.2046 tries to shift op by 36; fix this program [ 201.772353][T11042] loop8: detected capacity change from 0 to 1024 [ 201.815197][T11042] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 201.864525][T11042] netlink: 4 bytes leftover after parsing attributes in process `syz.8.2053'. [ 201.917619][T11042] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 201.968911][T11042] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 202.012979][T11055] loop3: detected capacity change from 0 to 128 [ 202.065623][T11055] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 202.086716][T11063] siw: device registration error -23 [ 202.179822][T10245] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 202.223539][T11068] netlink: 116376 bytes leftover after parsing attributes in process `syz.0.2063'. [ 202.234268][T11055] ext4 filesystem being mounted at /403/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 202.272668][T11055] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 202.297040][T11055] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 205.019208][ T3317] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 213.423943][ T29] kauditd_printk_skb: 113 callbacks suppressed [ 213.423987][ T29] audit: type=1326 audit(1769431366.828:10992): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11100 comm="syz.3.2074" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f61ebecaeb9 code=0x7ffc0000 [ 213.455636][ T29] audit: type=1326 audit(1769431366.858:10993): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11100 comm="syz.3.2074" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f61ebecaeb9 code=0x7ffc0000 [ 213.479388][ T29] audit: type=1326 audit(1769431366.858:10994): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11100 comm="syz.3.2074" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f61ebecaeb9 code=0x7ffc0000 [ 213.503040][ T29] audit: type=1326 audit(1769431366.858:10995): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11100 comm="syz.3.2074" exe="/root/syz-executor" sig=0 arch=c000003e syscall=271 compat=0 ip=0x7f61ebecaeb9 code=0x7ffc0000 [ 213.562662][ T29] audit: type=1326 audit(1769431366.948:10996): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11100 comm="syz.3.2074" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f61ebecaeb9 code=0x7ffc0000 [ 213.586388][ T29] audit: type=1326 audit(1769431366.948:10997): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11100 comm="syz.3.2074" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f61ebecaeb9 code=0x7ffc0000 [ 213.610253][ T29] audit: type=1326 audit(1769431366.948:10998): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11100 comm="syz.3.2074" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f61ebecaeb9 code=0x7ffc0000 [ 213.633998][ T29] audit: type=1326 audit(1769431366.948:10999): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11100 comm="syz.3.2074" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f61ebecaeb9 code=0x7ffc0000 [ 213.657789][ T29] audit: type=1326 audit(1769431366.948:11000): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11100 comm="syz.3.2074" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f61ebecaeb9 code=0x7ffc0000 [ 213.697596][T11112] sctp: [Deprecated]: syz.3.2077 (pid 11112) Use of int in maxseg socket option. [ 213.697596][T11112] Use struct sctp_assoc_value instead [ 213.724235][ T6750] IPVS: starting estimator thread 0... [ 213.742300][ T29] audit: type=1326 audit(1769431367.048:11001): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11110 comm="syz.3.2077" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f61ebecaeb9 code=0x7ffc0000 [ 213.794381][T11119] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2078'. [ 213.821972][T11116] IPVS: using max 2208 ests per chain, 110400 per kthread [ 213.848068][T11112] sctp: [Deprecated]: syz.3.2077 (pid 11112) Use of int in max_burst socket option. [ 213.848068][T11112] Use struct sctp_assoc_value instead [ 213.952927][T11128] netlink: 16 bytes leftover after parsing attributes in process `syz.6.2082'. [ 213.962021][T11128] netlink: 40 bytes leftover after parsing attributes in process `syz.6.2082'. [ 214.039768][T11118] geneve2: entered promiscuous mode [ 214.046128][T11118] geneve2: entered allmulticast mode [ 214.203024][T11128] bond6: down delay (128) is not a multiple of miimon (7), value rounded to 126 ms [ 214.212708][T11128] bond6: peer notification delay (3) is not a multiple of miimon (7), value rounded to 0 ms [ 214.222977][T11128] bond6: entered allmulticast mode [ 214.228779][ T52] netdevsim netdevsim8 eth0: set [1, 1] type 2 family 0 port 20000 - 0 [ 214.238061][ T52] netdevsim netdevsim8 eth1: set [1, 1] type 2 family 0 port 20000 - 0 [ 214.275931][ T52] netdevsim netdevsim8 eth2: set [1, 1] type 2 family 0 port 20000 - 0 [ 214.308325][ T52] netdevsim netdevsim8 eth3: set [1, 1] type 2 family 0 port 20000 - 0 [ 214.402362][T11142] sctp: [Deprecated]: syz.3.2084 (pid 11142) Use of int in max_burst socket option deprecated. [ 214.402362][T11142] Use struct sctp_assoc_value instead [ 214.421444][T11142] netdevsim netdevsim3 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 214.431300][T11142] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 214.441283][T11142] netdevsim netdevsim3 eth3 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 214.489355][T11142] netdevsim netdevsim3 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 214.499229][T11142] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 214.509943][T11142] netdevsim netdevsim3 eth2 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 214.549384][T11142] netdevsim netdevsim3 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 214.559345][T11142] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 214.569432][T11142] netdevsim netdevsim3 eth1 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 214.619663][T11142] netdevsim netdevsim3 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 214.629640][T11142] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 214.639597][T11142] netdevsim netdevsim3 eth0 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 214.696301][ T52] netdevsim netdevsim3 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 214.704645][ T52] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 20000 - 0 [ 214.713047][ T52] netdevsim netdevsim3 eth0: set [1, 1] type 2 family 0 port 6081 - 0 [ 214.837860][T11159] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2092'. [ 214.842509][ T52] netdevsim netdevsim3 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 214.846768][T11159] netlink: 'syz.5.2092': attribute type 26 has an invalid length. [ 214.846784][T11159] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2092'. [ 214.855081][ T52] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 20000 - 0 [ 214.880258][ T52] netdevsim netdevsim3 eth1: set [1, 1] type 2 family 0 port 6081 - 0 [ 214.904516][T11159] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2092'. [ 214.913502][T11159] netlink: 'syz.5.2092': attribute type 26 has an invalid length. [ 214.921506][T11159] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2092'. [ 214.971470][T11161] IPVS: stopping backup sync thread 9077 ... [ 215.002247][ T52] netdevsim netdevsim3 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 215.010562][ T52] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 20000 - 0 [ 215.018969][ T52] netdevsim netdevsim3 eth2: set [1, 1] type 2 family 0 port 6081 - 0 [ 215.049351][ T52] netdevsim netdevsim3 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 215.057833][ T52] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 20000 - 0 [ 215.066161][ T52] netdevsim netdevsim3 eth3: set [1, 1] type 2 family 0 port 6081 - 0 [ 215.893474][T11203] futex_wake_op: syz.0.2108 tries to shift op by 36; fix this program [ 218.056412][T11293] can0: slcan on ttyS3. [ 218.090065][T11302] netlink: 'syz.5.2146': attribute type 4 has an invalid length. [ 218.097945][T11302] netlink: 152 bytes leftover after parsing attributes in process `syz.5.2146'. [ 218.140835][T11305] macvlan2: entered promiscuous mode [ 218.190930][T11293] netlink: 56 bytes leftover after parsing attributes in process `syz.8.2143'. [ 218.192331][T11302] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 218.347625][T11316] can0 (unregistered): slcan off ttyS3. [ 218.371318][T11316] Falling back ldisc for ttyS3. [ 218.537471][ T29] kauditd_printk_skb: 335 callbacks suppressed [ 218.537489][ T29] audit: type=1326 audit(1769431371.918:11337): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11283 comm="syz.3.2140" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f61ebe8b78e code=0x7ffc0000 [ 218.567587][ T29] audit: type=1326 audit(1769431371.918:11338): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11283 comm="syz.3.2140" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f61ebe8b78e code=0x7ffc0000 [ 218.591590][ T29] audit: type=1326 audit(1769431371.918:11339): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11283 comm="syz.3.2140" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f61ebe8b78e code=0x7ffc0000 [ 218.615275][ T29] audit: type=1326 audit(1769431371.928:11340): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11283 comm="syz.3.2140" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f61ebe8b78e code=0x7ffc0000 [ 218.638963][ T29] audit: type=1326 audit(1769431371.928:11341): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11283 comm="syz.3.2140" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f61ebe8b78e code=0x7ffc0000 [ 218.662568][ T29] audit: type=1326 audit(1769431371.928:11342): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11283 comm="syz.3.2140" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f61ebe8b78e code=0x7ffc0000 [ 218.686487][ T29] audit: type=1326 audit(1769431371.928:11343): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11283 comm="syz.3.2140" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f61ebe8b78e code=0x7ffc0000 [ 218.710395][ T29] audit: type=1326 audit(1769431371.928:11344): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11283 comm="syz.3.2140" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f61ebe8b78e code=0x7ffc0000 [ 218.734023][ T29] audit: type=1326 audit(1769431371.928:11345): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11283 comm="syz.3.2140" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f61ebe8b78e code=0x7ffc0000 [ 218.757713][ T29] audit: type=1326 audit(1769431371.928:11346): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11283 comm="syz.3.2140" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f61ebe8b78e code=0x7ffc0000 [ 231.486473][ T29] kauditd_printk_skb: 10 callbacks suppressed [ 231.486492][ T29] audit: type=1326 audit(1769431384.888:11357): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11338 comm="syz.8.2149" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fca28e5aeb9 code=0x7ffc0000 [ 231.516274][ T29] audit: type=1326 audit(1769431384.888:11358): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11338 comm="syz.8.2149" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fca28e5aeb9 code=0x7ffc0000 [ 231.539941][ T29] audit: type=1326 audit(1769431384.888:11359): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11338 comm="syz.8.2149" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fca28e5aeb9 code=0x7ffc0000 [ 231.563652][ T29] audit: type=1326 audit(1769431384.888:11360): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11338 comm="syz.8.2149" exe="/root/syz-executor" sig=0 arch=c000003e syscall=425 compat=0 ip=0x7fca28e5aeb9 code=0x7ffc0000 [ 231.587406][ T29] audit: type=1326 audit(1769431384.888:11361): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11338 comm="syz.8.2149" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7fca28e5ac22 code=0x7ffc0000 [ 231.610944][ T29] audit: type=1326 audit(1769431384.888:11362): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11338 comm="syz.8.2149" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7fca28e5ac22 code=0x7ffc0000 [ 231.634389][ T29] audit: type=1326 audit(1769431384.888:11363): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11338 comm="syz.8.2149" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fca28e5aeb9 code=0x7ffc0000 [ 231.663139][ T29] audit: type=1326 audit(1769431384.958:11364): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11338 comm="syz.8.2149" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fca28e5aeb9 code=0x7ffc0000 [ 231.687060][ T29] audit: type=1326 audit(1769431384.958:11365): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11338 comm="syz.8.2149" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fca28e5aeb9 code=0x7ffc0000 [ 231.710838][ T29] audit: type=1326 audit(1769431384.958:11366): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11338 comm="syz.8.2149" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fca28e5aeb9 code=0x7ffc0000 [ 231.837094][T11354] Cannot find del_set index 4 as target [ 231.896266][T11361] netlink: 'syz.0.2155': attribute type 1 has an invalid length. [ 231.975677][T11368] bond6: (slave ip6gre1): The slave device specified does not support setting the MAC address [ 231.986023][T11368] bond6: (slave ip6gre1): Setting fail_over_mac to active for active-backup mode [ 232.000421][T11369] SELinux: Context system_u:object_r:cron_spool_t:s0 is not valid (left unmapped). [ 232.027944][T11366] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=11366 comm=syz.3.2158 [ 232.064406][T11368] bond6: (slave ip6gre1): making interface the new active one [ 232.080641][T11366] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2158'. [ 232.089798][T11366] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2158'. [ 232.108019][T11368] bond6: (slave ip6gre1): Enslaving as an active interface with an up link [ 232.116762][T11361] bond6: option fail_over_mac: unable to set because the bond device has slaves [ 232.150437][T11377] vlan2: entered allmulticast mode [ 232.155623][T11377] macvlan0: entered allmulticast mode [ 232.161121][T11377] veth1_vlan: entered allmulticast mode [ 232.336723][T11389] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2164'. [ 232.599660][T11398] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2166'. [ 232.666135][T11403] Cannot find del_set index 4 as target [ 232.673883][T11398] netlink: 52 bytes leftover after parsing attributes in process `syz.0.2166'. [ 232.815113][T11409] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=11409 comm=syz.6.2170 [ 232.885143][T11415] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=11415 comm=syz.3.2173 [ 232.906120][T11415] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2173'. [ 232.915233][T11415] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2173'. [ 232.928573][T11419] netlink: 132 bytes leftover after parsing attributes in process `syz.0.2174'. [ 233.015391][T11424] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=1025 sclass=netlink_xfrm_socket pid=11424 comm=syz.5.2176 [ 233.386051][T11444] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2184'. [ 233.395332][T11444] netlink: 'syz.3.2184': attribute type 26 has an invalid length. [ 233.403271][T11444] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2184'. [ 233.418524][T11444] netlink: 'syz.3.2184': attribute type 26 has an invalid length. [ 233.472403][T11446] lo speed is unknown, defaulting to 1000 [ 233.521880][T11446] lo speed is unknown, defaulting to 1000 [ 234.368236][T11514] lo speed is unknown, defaulting to 1000 [ 234.531851][T11514] lo speed is unknown, defaulting to 1000 [ 235.687313][T11616] lo speed is unknown, defaulting to 1000 [ 235.825352][T11616] lo speed is unknown, defaulting to 1000 [ 235.906351][T11631] lo speed is unknown, defaulting to 1000 [ 236.055273][T11631] lo speed is unknown, defaulting to 1000 [ 236.463494][T11680] syzkaller0: entered allmulticast mode [ 236.519284][ T29] kauditd_printk_skb: 395 callbacks suppressed [ 236.519304][ T29] audit: type=1400 audit(1769431389.928:11762): avc: denied { create } for pid=11690 comm="syz.6.2292" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=appletalk_socket permissive=1 [ 236.569198][T11686] lo speed is unknown, defaulting to 1000 [ 236.689638][T11711] lo: entered allmulticast mode [ 236.700488][T11711] lo: entered promiscuous mode [ 236.705398][T11711] lo: left allmulticast mode [ 236.735706][T11686] lo speed is unknown, defaulting to 1000 [ 236.878991][T11723] bridge0: port 1(bridge_slave_0) entered disabled state [ 236.964042][T11723] bridge0: port 1(bridge_slave_0) entered blocking state [ 236.971313][T11723] bridge0: port 1(bridge_slave_0) entered forwarding state [ 237.369929][T11766] syz_tun: refused to change device tx_queue_len [ 238.621694][T11833] wg2: entered promiscuous mode [ 238.626690][T11833] wg2: entered allmulticast mode [ 239.014405][T11845] lo speed is unknown, defaulting to 1000 [ 239.126574][T11845] lo speed is unknown, defaulting to 1000 [ 239.395707][T11859] sit0: entered allmulticast mode [ 239.408812][T11865] sit0: entered promiscuous mode [ 239.478458][T11831] lo speed is unknown, defaulting to 1000 [ 239.587666][T11831] lo speed is unknown, defaulting to 1000 [ 239.670519][T11881] wg2: entered promiscuous mode [ 239.675555][T11881] wg2: entered allmulticast mode [ 241.158041][ T29] audit: type=1400 audit(1769431394.568:11763): avc: denied { create } for pid=11982 comm="syz.5.2415" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_iscsi_socket permissive=1 [ 241.914097][ T29] audit: type=1400 audit(1769431395.318:11764): avc: denied { create } for pid=12053 comm="syz.3.2445" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=decnet_socket permissive=1 [ 242.559881][T12092] bridge0: port 2(bridge_slave_1) entered disabled state [ 242.569980][T12092] bridge0: port 1(bridge_slave_0) entered disabled state [ 242.752158][T12092] bridge0: entered allmulticast mode [ 242.810446][T12089] bridge_slave_1: left allmulticast mode [ 242.816192][T12089] bridge_slave_1: left promiscuous mode [ 242.821980][T12089] bridge0: port 2(bridge_slave_1) entered disabled state [ 242.862105][T12089] bridge_slave_0: left promiscuous mode [ 242.867941][T12089] bridge0: port 1(bridge_slave_0) entered disabled state [ 243.564970][T12140] ------------[ cut here ]------------ [ 243.570718][T12140] verifier bug: REG INVARIANTS VIOLATION (false_reg1): range bounds violation u64=[0x4000000, 0x0] s64=[0x4000000, 0x0] u32=[0x4000000, 0x0] s32=[0x4000000, 0x0] var_off=(0x0, 0x0) [ 243.588776][T12140] WARNING: kernel/bpf/verifier.c:2748 at reg_bounds_sanity_check+0x15b/0x660, CPU#1: syz.5.2480/12140 [ 243.599997][T12140] Modules linked in: [ 243.604067][T12140] CPU: 1 UID: 0 PID: 12140 Comm: syz.5.2480 Not tainted syzkaller #0 PREEMPT(voluntary) [ 243.613966][T12140] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 243.624179][T12140] RIP: 0010:reg_bounds_sanity_check+0x27d/0x660 [ 243.630573][T12140] Code: 24 78 4c 8b 44 24 70 4c 8b 4c 24 60 41 ff 74 24 20 41 55 53 ff 74 24 68 ff 74 24 78 ff b4 24 90 00 00 00 ff b4 24 b0 00 00 00 <67> 48 0f b9 3a 48 83 c4 38 4c 8b ac 24 98 00 00 00 49 8d 85 80 08 [ 243.651039][T12140] RSP: 0018:ffffc9000cdff388 EFLAGS: 00010246 [ 243.657289][T12140] RAX: ffff88811ab16d90 RBX: 0000000000000000 RCX: 0000000004000000 [ 243.665382][T12140] RDX: ffffffff867f0650 RSI: ffffffff867c51e1 RDI: ffffffff86fb96f0 [ 243.673471][T12140] RBP: ffff888119df02e0 R08: 0000000000000000 R09: 0000000004000000 [ 243.681558][T12140] R10: 00000000000000d0 R11: 0000000000000002 R12: ffff888119df02a0 [ 243.689642][T12140] R13: 0000000000000000 R14: ffff888119df02ec R15: ffff888119df02d8 [ 243.697781][T12140] FS: 00007f4f021c76c0(0000) GS:ffff8882aec57000(0000) knlGS:0000000000000000 [ 243.706799][T12140] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 243.713613][T12140] CR2: 0000200000001020 CR3: 0000000116c20000 CR4: 00000000003506f0 [ 243.721685][T12140] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 243.729908][T12140] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000600 [ 243.738147][T12140] Call Trace: [ 243.741572][T12140] [ 243.744636][T12140] reg_set_min_max+0x21c/0x260 [ 243.749623][T12140] check_cond_jmp_op+0x1367/0x1a80 [ 243.755035][T12140] do_check+0x440c/0x9060 [ 243.759611][T12140] do_check_common+0xd0f/0x1630 [ 243.764579][T12140] bpf_check+0x2f6d/0xc7e0 [ 243.769226][T12140] ? __alloc_frozen_pages_noprof+0x18a/0x350 [ 243.775363][T12140] ? alloc_pages_bulk_noprof+0x4a1/0x520 [ 243.781160][T12140] ? __vmap_pages_range_noflush+0xb9c/0xcc0 [ 243.787190][T12140] ? try_charge_memcg+0x215/0xa10 [ 243.792396][T12140] ? _find_next_zero_bit+0x29/0xa0 [ 243.797689][T12140] ? pcpu_block_update_hint_alloc+0x640/0x660 [ 243.803849][T12140] ? pcpu_block_update_hint_alloc+0x640/0x660 [ 243.810099][T12140] ? css_rstat_updated+0xbb/0x280 [ 243.815274][T12140] ? sysvec_apic_timer_interrupt+0x44/0x80 [ 243.821237][T12140] ? mod_memcg_state+0x182/0x260 [ 243.826342][T12140] ? __rcu_read_unlock+0x4e/0x70 [ 243.831449][T12140] ? pcpu_memcg_post_alloc_hook+0xec/0x170 [ 243.837533][T12140] ? pcpu_alloc_noprof+0xb08/0x1010 [ 243.842881][T12140] ? should_fail_ex+0x30/0x280 [ 243.847772][T12140] ? __kmalloc_noprof+0x2a3/0x580 [ 243.852873][T12140] ? security_bpf_prog_load+0x60/0x140 [ 243.858619][T12140] ? selinux_bpf_prog_load+0xac/0xd0 [ 243.864065][T12140] ? security_bpf_prog_load+0x9e/0x140 [ 243.869715][T12140] bpf_prog_load+0xf76/0x1140 [ 243.874485][T12140] ? security_bpf+0x2b/0x90 [ 243.879094][T12140] __sys_bpf+0x469/0x7b0 [ 243.883526][T12140] __x64_sys_bpf+0x41/0x50 [ 243.888060][T12140] x64_sys_call+0x28e1/0x3000 [ 243.892876][T12140] do_syscall_64+0xc0/0x2a0 [ 243.897561][T12140] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 243.903638][T12140] RIP: 0033:0x7f4f0376aeb9 [ 243.908271][T12140] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 243.928093][T12140] RSP: 002b:00007f4f021c7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 243.936639][T12140] RAX: ffffffffffffffda RBX: 00007f4f039e5fa0 RCX: 00007f4f0376aeb9 [ 243.944796][T12140] RDX: 0000000000000048 RSI: 00002000000054c0 RDI: 0000000000000005 [ 243.952952][T12140] RBP: 00007f4f037d8c1f R08: 0000000000000000 R09: 0000000000000000 [ 243.961110][T12140] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 243.969205][T12140] R13: 00007f4f039e6038 R14: 00007f4f039e5fa0 R15: 00007fff139c21f8 [ 243.977475][T12140] [ 243.980626][T12140] ---[ end trace 0000000000000000 ]--- [ 244.303344][T12168] syzkaller0: entered promiscuous mode [ 244.308925][T12168] syzkaller0: entered allmulticast mode [ 244.402564][T12177] bridge0: port 2(bridge_slave_1) entered disabled state [ 244.410027][T12177] bridge0: port 1(bridge_slave_0) entered disabled state [ 244.437079][T12177] bridge0: entered allmulticast mode [ 244.481291][T12177] bridge_slave_1: left allmulticast mode [ 244.487136][T12177] bridge_slave_1: left promiscuous mode [ 244.493606][T12177] bridge0: port 2(bridge_slave_1) entered disabled state [ 244.551121][T12177] bridge_slave_0: left allmulticast mode [ 244.556986][T12177] bridge_slave_0: left promiscuous mode [ 244.563144][T12177] bridge0: port 1(bridge_slave_0) entered disabled state [ 244.627910][T12177] bridge0 (unregistering): left promiscuous mode [ 244.828359][T12166] lo speed is unknown, defaulting to 1000 [ 245.246984][T12166] lo speed is unknown, defaulting to 1000 [ 245.719513][ T29] audit: type=1400 audit(1769431399.128:11765): avc: denied { create } for pid=12253 comm="syz.5.2524" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=atmpvc_socket permissive=1 [ 245.808106][T12251] lo speed is unknown, defaulting to 1000 [ 246.070838][T12251] lo speed is unknown, defaulting to 1000 [ 246.502057][T12313] lo speed is unknown, defaulting to 1000 [ 246.602037][T12313] lo speed is unknown, defaulting to 1000 [ 246.909640][T12330] cgroup: fork rejected by pids controller in /syz8 [ 247.100332][T12324] lo speed is unknown, defaulting to 1000 [ 247.790479][T12373] veth0_vlan: left promiscuous mode [ 247.797005][T12373] veth0_vlan: entered promiscuous mode [ 247.806197][T12324] lo speed is unknown, defaulting to 1000 [ 247.906724][T12363] lo speed is unknown, defaulting to 1000 [ 248.011351][T12387] sit0: entered allmulticast mode [ 248.402610][T12374] lo speed is unknown, defaulting to 1000 [ 248.408571][T12363] lo speed is unknown, defaulting to 1000 [ 248.480853][T12399] lo speed is unknown, defaulting to 1000 [ 248.497359][T12374] lo speed is unknown, defaulting to 1000 [ 248.539278][T12399] lo speed is unknown, defaulting to 1000 [ 248.846539][ T6526] netdevsim netdevsim8 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 248.856469][ T6526] netdevsim netdevsim8 eth3 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 248.948194][ T6526] netdevsim netdevsim8 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 248.958282][ T6526] netdevsim netdevsim8 eth2 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 249.073589][ T6526] netdevsim netdevsim8 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 249.083512][ T6526] netdevsim netdevsim8 eth1 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 249.168255][ T6526] netdevsim netdevsim8 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 249.178226][ T6526] netdevsim netdevsim8 eth0 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 249.211894][T12374] chnl_net:caif_netlink_parms(): no params data found [ 249.321555][ T29] audit: type=1400 audit(1769431402.728:11766): avc: denied { setopt } for pid=12439 comm="syz.6.2595" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 249.439109][T12374] bridge0: port 1(bridge_slave_0) entered blocking state [ 249.446308][T12374] bridge0: port 1(bridge_slave_0) entered disabled state [ 249.484027][T12374] bridge_slave_0: entered allmulticast mode [ 249.500105][T12374] bridge_slave_0: entered promiscuous mode [ 249.524036][T12374] bridge0: port 2(bridge_slave_1) entered blocking state [ 249.531347][T12374] bridge0: port 2(bridge_slave_1) entered disabled state [ 249.568752][T12374] bridge_slave_1: entered allmulticast mode [ 249.581884][T12374] bridge_slave_1: entered promiscuous mode [ 249.620360][ T6526] bridge_slave_1: left allmulticast mode [ 249.626119][ T6526] bridge_slave_1: left promiscuous mode [ 249.631956][ T6526] bridge0: port 2(bridge_slave_1) entered disabled state [ 249.662429][ T6526] bridge_slave_0: left allmulticast mode [ 249.668224][ T6526] bridge_slave_0: left promiscuous mode [ 249.674000][ T6526] bridge0: port 1(bridge_slave_0) entered disabled state [ 250.049775][ T6526] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 250.060096][ T6526] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 250.069868][ T6526] bond0 (unregistering): Released all slaves [ 250.084597][T12374] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 250.123954][ T6526] IPVS: stopping backup sync thread 10534 ... [ 250.152532][T12374] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 250.201307][T12374] team0: Port device team_slave_0 added [ 250.210667][T12374] team0: Port device team_slave_1 added [ 250.274847][T12374] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 250.281915][T12374] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 250.307897][T12374] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 250.319702][T12374] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 250.326750][T12374] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 250.352744][T12374] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 250.363832][T12453] lo speed is unknown, defaulting to 1000 [ 250.374691][ T6526] hsr_slave_0: left promiscuous mode [ 250.390107][ T6526] hsr_slave_1: left promiscuous mode [ 250.402336][ T6526] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 250.409793][ T6526] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 250.441390][ T6526] veth1_macvtap: left promiscuous mode [ 250.446908][ T6526] veth0_macvtap: left promiscuous mode [ 250.452999][ T6526] veth1_vlan: left allmulticast mode [ 250.458376][ T6526] veth1_vlan: left promiscuous mode [ 250.463645][ T6526] veth0_vlan: left promiscuous mode [ 250.583800][ T6526] team0 (unregistering): Port device team_slave_1 removed [ 250.596589][ T6526] team0 (unregistering): Port device team_slave_0 removed [ 250.681761][T12374] hsr_slave_0: entered promiscuous mode [ 250.698501][T12374] hsr_slave_1: entered promiscuous mode [ 250.704565][T12374] debugfs: 'hsr0' already exists in 'hsr' [ 250.710383][T12374] Cannot create hsr debugfs directory [ 251.001255][ T6526] IPVS: stop unused estimator thread 0... [ 251.203778][T12374] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 251.216421][T12374] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 251.235881][T12374] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 251.267684][T12374] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 251.432676][T12374] 8021q: adding VLAN 0 to HW filter on device bond0 [ 251.467746][T12374] 8021q: adding VLAN 0 to HW filter on device team0 [ 251.495947][ T6528] bridge0: port 1(bridge_slave_0) entered blocking state [ 251.503076][ T6528] bridge0: port 1(bridge_slave_0) entered forwarding state [ 251.553019][ T6525] bridge0: port 2(bridge_slave_1) entered blocking state [ 251.560119][ T6525] bridge0: port 2(bridge_slave_1) entered forwarding state [ 251.740179][T12374] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 251.878759][T12453] lo speed is unknown, defaulting to 1000 [ 251.902062][T12558] lo speed is unknown, defaulting to 1000 [ 251.984265][T12558] lo speed is unknown, defaulting to 1000 [ 251.988111][T12550] lo speed is unknown, defaulting to 1000 [ 252.010137][T12374] veth0_vlan: entered promiscuous mode [ 252.027303][T12374] veth1_vlan: entered promiscuous mode [ 252.073650][T12374] veth0_macvtap: entered promiscuous mode [ 252.087039][T12374] veth1_macvtap: entered promiscuous mode [ 252.118205][T12374] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 252.141765][T12374] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 252.157633][ T6525] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 252.166478][ T6525] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 252.182885][ T6525] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 252.200406][ T6525] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 252.738625][T12619] netlink: 'syz.5.2639': attribute type 4 has an invalid length. [ 252.828920][ T29] audit: type=1400 audit(1769431406.208:11767): avc: denied { connect } for pid=12622 comm="syz.5.2641" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 253.107729][T12569] lo speed is unknown, defaulting to 1000 [ 253.138728][T12550] lo speed is unknown, defaulting to 1000 [ 253.324093][T12614] lo speed is unknown, defaulting to 1000 [ 253.330834][T12569] lo speed is unknown, defaulting to 1000 [ 253.764838][T12614] lo speed is unknown, defaulting to 1000 [ 255.309318][T12672] loop8: detected capacity change from 0 to 1024 [ 255.333933][T12672] EXT4-fs: Ignoring removed bh option [ 255.370374][T12672] EXT4-fs (loop8): stripe (5) is not aligned with cluster size (16), stripe is disabled [ 256.141787][T12672] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 256.169293][T12672] EXT4-fs error (device loop8): ext4_check_all_de:659: inode #12: block 7: comm syz.8.2661: bad entry in directory: rec_len is too small for name_len - offset=16, inode=14, rec_len=40, size=108 fake=0 [ 256.195946][T12672] EXT4-fs (loop8): Remounting filesystem read-only [ 256.249851][T12374] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 256.352960][T12697] __nla_validate_parse: 2 callbacks suppressed [ 256.352979][T12697] netlink: 12 bytes leftover after parsing attributes in process `syz.8.2665'. [ 257.668338][T12733] loop8: detected capacity change from 0 to 512 [ 257.688574][T12733] EXT4-fs error (device loop8): ext4_orphan_get:1417: comm syz.8.2683: bad orphan inode 15 [ 257.717689][T12733] ext4_test_bit(bit=14, block=18) = 1 [ 257.723253][T12733] is_bad_inode(inode)=0 [ 257.727486][T12733] NEXT_ORPHAN(inode)=1023 [ 257.731886][T12733] max_ino=32 [ 257.735177][T12733] i_nlink=0 [ 257.757928][T12733] EXT4-fs error (device loop8): ext4_xattr_delete_inode:2972: inode #15: comm syz.8.2683: corrupted xattr block 19: invalid header [ 257.777253][T12733] EXT4-fs warning (device loop8): ext4_evict_inode:273: xattr delete (err -117) [ 257.786945][T12733] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0009-000000000000 r/w without journal. Quota mode: none. [ 257.799722][T12733] ext4 filesystem being mounted at /11/éq‰Y’3aK supports timestamps until 2038-01-19 (0x7fffffff) [ 257.825835][T12374] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0009-000000000000. [ 258.032764][T12753] netlink: 36 bytes leftover after parsing attributes in process `syz.8.2691'. [ 258.125683][T12760] loop8: detected capacity change from 0 to 512 [ 258.135582][T12760] vfat: Bad value for 'time_offset' [ 258.336744][T12769] loop8: detected capacity change from 0 to 164 [ 258.343616][T12769] iso9660: Bad value for 'block' [ 258.422590][T12775] loop8: detected capacity change from 0 to 512 [ 258.430492][T12775] EXT4-fs: Ignoring removed bh option [ 258.459824][T12775] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 258.472588][T12775] ext4 filesystem being mounted at /20/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 258.512999][ T29] audit: type=1400 audit(1769431411.918:11768): avc: denied { append } for pid=12774 comm="syz.8.2701" path="/20/bus/memory.events" dev="loop8" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 258.629938][T12374] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 258.751919][T12793] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2702'. [ 259.057670][ T29] audit: type=1400 audit(1769431412.428:11769): avc: denied { watch watch_reads } for pid=12804 comm="syz.0.2712" path="/" dev="ramfs" ino=32394 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=dir permissive=1 [ 259.080303][ T29] audit: type=1400 audit(1769431412.438:11770): avc: denied { execute } for pid=12804 comm="syz.0.2712" name="file0" dev="ramfs" ino=32395 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=file permissive=1 [ 259.102607][ T29] audit: type=1400 audit(1769431412.438:11771): avc: denied { execute_no_trans } for pid=12804 comm="syz.0.2712" path="/file0" dev="ramfs" ino=32395 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=file permissive=1 [ 259.208859][ T29] audit: type=1400 audit(1769431412.618:11772): avc: denied { unmount } for pid=12374 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=filesystem permissive=1 [ 259.285778][T12825] loop8: detected capacity change from 0 to 512 [ 259.294294][T12825] EXT4-fs (loop8): feature flags set on rev 0 fs, running e2fsck is recommended [ 259.313804][T12825] EXT4-fs warning (device loop8): ext4_update_dynamic_rev:1137: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 259.329248][T12825] EXT4-fs error (device loop8): ext4_validate_block_bitmap:441: comm syz.8.2718: bg 0: block 248: padding at end of block bitmap is not set [ 259.344805][T12825] Quota error (device loop8): write_blk: dquota write failed [ 259.352281][T12825] Quota error (device loop8): qtree_write_dquot: Error -117 occurred while creating quota [ 259.362729][T12825] EXT4-fs error (device loop8): ext4_acquire_dquot:6986: comm syz.8.2718: Failed to acquire dquot type 1 [ 259.390126][T12825] EXT4-fs (loop8): 1 truncate cleaned up [ 259.396591][T12825] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0008-000000000000 r/w without journal. Quota mode: writeback. [ 259.486948][T12825] EXT4-fs (loop8): shut down requested (1) [ 259.506153][T12374] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0008-000000000000. [ 259.517660][ T29] audit: type=1400 audit(1769431412.908:11773): avc: denied { read } for pid=2982 comm="syslogd" name="log" dev="sda1" ino=2010 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 [ 259.539843][ T29] audit: type=1400 audit(1769431412.908:11774): avc: denied { search } for pid=2982 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 259.561639][ T29] audit: type=1400 audit(1769431412.908:11775): avc: denied { search } for pid=2982 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 259.613890][T12843] loop8: detected capacity change from 0 to 512 [ 259.626505][T12843] EXT4-fs error (device loop8): ext4_orphan_get:1391: inode #15: comm syz.8.2725: inode has both inline data and extents flags [ 259.642713][T12843] EXT4-fs error (device loop8): ext4_orphan_get:1396: comm syz.8.2725: couldn't read orphan inode 15 (err -117) [ 259.658405][T12843] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 259.821790][T12374] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 259.956989][T12855] loop3: detected capacity change from 0 to 128 [ 260.018643][T12855] EXT4-fs: test_dummy_encryption option not supported [ 260.181615][T12863] sch_tbf: burst 19872 is lower than device lo mtu (11337746) ! [ 260.200687][T12866] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2736'. [ 260.439956][T12897] loop3: detected capacity change from 0 to 256 [ 260.446651][T12897] vfat: Bad value for 'fmask' [ 260.528121][T12909] loop8: detected capacity change from 0 to 1024 [ 260.554113][T12909] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 260.582977][T12915] loop3: detected capacity change from 0 to 1024 [ 260.594473][T12915] EXT4-fs: Ignoring removed orlov option [ 260.617920][T12915] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 260.635318][T12374] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 260.667730][ T3317] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 260.961163][T12946] loop3: detected capacity change from 0 to 512 [ 261.050289][T12946] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 261.121712][T12946] ext4 filesystem being mounted at /527/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 261.295422][ T3317] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 261.690157][T12990] netlink: 'syz.5.2784': attribute type 4 has an invalid length. [ 261.711518][ T1035] lo speed is unknown, defaulting to 1000 [ 261.717320][ T1035] syz2: Port: 1 Link DOWN [ 261.723188][T12990] netlink: 'syz.5.2784': attribute type 4 has an invalid length. [ 261.743103][ T3406] lo speed is unknown, defaulting to 1000 [ 261.749141][ T3406] syz2: Port: 1 Link ACTIVE [ 261.755993][ T3406] lo speed is unknown, defaulting to 1000 [ 261.761840][ T3406] syz2: Port: 1 Link DOWN [ 264.085066][ T6525] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 264.095647][ T6525] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 264.462567][T13038] loop3: detected capacity change from 0 to 512 [ 264.508807][T13038] EXT4-fs: test_dummy_encryption option not supported [ 264.582447][ T6525] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 264.592915][ T6525] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 264.707542][ T29] kauditd_printk_skb: 13 callbacks suppressed [ 264.707571][ T29] audit: type=1400 audit(1769431418.088:11789): avc: denied { relabelfrom } for pid=13040 comm="syz.8.2802" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 264.733762][ T29] audit: type=1400 audit(1769431418.088:11790): avc: denied { relabelto } for pid=13040 comm="syz.8.2802" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 264.837009][T13043] loop8: detected capacity change from 0 to 512 [ 264.958536][T13043] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode [ 264.973767][T13043] EXT4-fs error (device loop8): ext4_iget_extra_inode:5073: inode #15: comm syz.8.2802: corrupted in-inode xattr: invalid ea_ino [ 264.988188][ T6525] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 264.998575][ T6525] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 265.017660][T13043] EXT4-fs (loop8): Remounting filesystem read-only [ 265.024696][T13043] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 265.097252][ T6525] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 265.107741][ T6525] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 265.147111][T13068] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2809'. [ 265.174510][T12374] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 265.186828][T13024] lo speed is unknown, defaulting to 1000 [ 265.227314][T13078] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 265.236022][T13078] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 265.272093][T13068] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2809'. [ 265.630716][ T6525] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 265.641058][ T6525] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 265.652118][ T6525] bond0 (unregistering): Released all slaves [ 265.660332][ T6525] bond1 (unregistering): Released all slaves [ 265.670548][ T6525] bond2 (unregistering): (slave veth3): Releasing active interface [ 265.678525][ T6525] batadv1: entered promiscuous mode [ 265.685112][ T6525] bond2 (unregistering): (slave batadv1): Releasing active interface [ 265.694999][ T6525] bond2 (unregistering): Released all slaves [ 265.706201][ T6525] bond3 (unregistering): Released all slaves [ 265.716043][ T6525] bond4 (unregistering): Released all slaves [ 265.725349][ T6525] bond5 (unregistering): Released all slaves [ 265.735044][ T6525] bond6 (unregistering): Released all slaves [ 265.744537][ T6525] bond7 (unregistering): Released all slaves [ 265.754107][T13024] lo speed is unknown, defaulting to 1000 [ 265.833710][T13098] loop3: detected capacity change from 0 to 512 [ 265.898218][T13098] EXT4-fs (loop3): revision level too high, forcing read-only mode [ 265.906183][T13098] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e040e018, mo2=0002] [ 265.994301][T13098] System zones: 0-1, 15-15, 18-18, 34-34 [ 266.014343][T13107] loop8: detected capacity change from 0 to 512 [ 266.041531][T13098] EXT4-fs (loop3): orphan cleanup on readonly fs [ 266.062989][T13098] Quota error (device loop3): v2_read_header: Failed header read: expected=8 got=0 [ 266.089205][T13107] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 266.132276][T13098] EXT4-fs warning (device loop3): ext4_enable_quotas:7221: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 266.147020][T13098] EXT4-fs (loop3): Cannot turn on quotas: error -22 [ 266.197974][T13098] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.2822: bg 0: block 40: padding at end of block bitmap is not set [ 266.215957][T13098] EXT4-fs error (device loop3) in ext4_mb_clear_bb:6689: Corrupt filesystem [ 266.227530][T13098] EXT4-fs (loop3): 1 truncate cleaned up [ 266.239941][T13098] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 266.260472][T12374] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 266.282110][ T6525] hsr_slave_0: left promiscuous mode [ 266.290888][ T6525] hsr_slave_1: left promiscuous mode [ 266.297073][ T6525] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 266.304687][ T6525] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 266.320321][ T6525] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 266.327777][ T6525] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 266.336894][ T3317] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 266.352726][ T6525] batman_adv: batadv0: Removing interface: macvtap1 [ 266.387861][ T6525] batman_adv: batadv0: Removing interface: macvtap2 [ 266.395010][ T6525] batman_adv: batadv0: Removing interface: macvtap3 [ 266.405671][T13127] loop8: detected capacity change from 0 to 1024 [ 266.413471][T13127] EXT4-fs: Ignoring removed oldalloc option [ 266.417617][ T6525] batman_adv: batadv0: Removing interface: macvtap4 [ 266.419835][T13127] EXT4-fs: Ignoring removed bh option [ 266.444882][ T6525] batman_adv: batadv0: Removing interface: macvtap5 [ 266.458206][ T29] audit: type=1400 audit(1769431419.858:11791): avc: denied { bind } for pid=13130 comm="syz.0.2831" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 266.478896][ T29] audit: type=1400 audit(1769431419.858:11792): avc: denied { setopt } for pid=13130 comm="syz.0.2831" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 266.508054][ T6525] batman_adv: batadv0: Removing interface: macvtap6 [ 266.515789][ T6525] batman_adv: batadv0: Removing interface: macvtap7 [ 266.532573][ T6525] dummy0: left allmulticast mode [ 266.542238][T13127] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 266.550174][ T6525] batadv0: left promiscuous mode [ 266.567629][ T6525] veth1_macvtap: left promiscuous mode [ 266.573276][ T6525] veth0_macvtap: left promiscuous mode [ 266.579027][ T6525] veth1_vlan: left promiscuous mode [ 266.584322][ T6525] veth0_vlan: left promiscuous mode [ 266.686644][ T6525] team0 (unregistering): Port device team_slave_1 removed [ 266.698559][ T6525] team0 (unregistering): Port device team_slave_0 removed [ 266.734471][ T6544] smc: removing ib device syz1 [ 266.785667][T13147] netlink: 51 bytes leftover after parsing attributes in process `syz.6.2837'. [ 266.829546][T13150] loop3: detected capacity change from 0 to 512 [ 266.841648][T13024] chnl_net:caif_netlink_parms(): no params data found [ 266.873745][T13150] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 266.943916][ T3317] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 267.017988][T13024] bridge0: port 1(bridge_slave_0) entered blocking state [ 267.025114][T13024] bridge0: port 1(bridge_slave_0) entered disabled state [ 267.043178][T13024] bridge_slave_0: entered allmulticast mode [ 267.049906][T13024] bridge_slave_0: entered promiscuous mode [ 267.072950][T13168] loop3: detected capacity change from 0 to 512 [ 267.084788][T13024] bridge0: port 2(bridge_slave_1) entered blocking state [ 267.091955][T13024] bridge0: port 2(bridge_slave_1) entered disabled state [ 267.133629][T13168] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 267.164772][T13024] bridge_slave_1: entered allmulticast mode [ 267.177556][T13168] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 267.200559][T13024] bridge_slave_1: entered promiscuous mode [ 267.227229][T13168] ext4 filesystem being mounted at /543/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 267.265220][T13024] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 267.275813][T12374] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 267.306871][ T3317] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 267.307716][T13024] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 267.377680][ T6525] IPVS: stop unused estimator thread 0... [ 267.387000][T13024] team0: Port device team_slave_0 added [ 267.398803][T13024] team0: Port device team_slave_1 added [ 267.433888][T13024] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 267.440914][T13024] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 267.467424][T13024] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 267.479695][T13024] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 267.486673][T13024] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 267.512646][T13024] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 267.540128][T13196] A link change request failed with some changes committed already. Interface veth1_to_bond may have been left with an inconsistent configuration, please check. [ 267.586490][T13024] hsr_slave_0: entered promiscuous mode [ 267.606109][T13024] hsr_slave_1: entered promiscuous mode [ 267.630547][T13024] debugfs: 'hsr0' already exists in 'hsr' [ 267.636326][T13024] Cannot create hsr debugfs directory [ 268.619769][T13024] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 268.849572][T13024] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 268.917620][T13024] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 268.956036][T13024] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 269.094469][T13024] 8021q: adding VLAN 0 to HW filter on device bond0 [ 269.139223][T13330] loop3: detected capacity change from 0 to 512 [ 269.155191][T13330] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 269.165440][T13024] 8021q: adding VLAN 0 to HW filter on device team0 [ 269.190314][ T6522] bridge0: port 1(bridge_slave_0) entered blocking state [ 269.197453][ T6522] bridge0: port 1(bridge_slave_0) entered forwarding state [ 269.219792][ T6522] bridge0: port 2(bridge_slave_1) entered blocking state [ 269.227036][ T6522] bridge0: port 2(bridge_slave_1) entered forwarding state [ 269.233371][T13330] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 269.256004][T13336] loop8: detected capacity change from 0 to 128 [ 269.271097][T13330] ext4 filesystem being mounted at /553/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 269.292669][T13336] EXT4-fs: test_dummy_encryption option not supported [ 269.327804][T13330] Quota error (device loop3): do_check_range: Getting dqdh_next_free 4294967294 out of range 0-6 [ 269.390595][T13330] Quota error (device loop3): qtree_write_dquot: Error -117 occurred while creating quota [ 269.430186][T13330] EXT4-fs error (device loop3): ext4_acquire_dquot:6986: comm syz.3.2869: Failed to acquire dquot type 0 [ 269.466309][T13024] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 269.520067][ T3317] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 269.586012][T13382] loop8: detected capacity change from 0 to 512 [ 269.644932][T13382] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 269.668699][T13382] ext4 filesystem being mounted at /59/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 269.711139][T12374] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 270.009939][T13413] loop8: detected capacity change from 0 to 1024 [ 270.321264][T13413] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 270.351387][T13413] EXT4-fs error (device loop8): ext4_mb_mark_diskspace_used:4215: comm syz.8.2885: Allocating blocks 497-513 which overlap fs metadata [ 270.363549][T13024] veth0_vlan: entered promiscuous mode [ 270.379816][T13024] veth1_vlan: entered promiscuous mode [ 270.390216][T13413] EXT4-fs error (device loop8): ext4_mb_mark_diskspace_used:4215: comm syz.8.2885: Allocating blocks 497-513 which overlap fs metadata [ 270.412202][T13024] veth0_macvtap: entered promiscuous mode [ 270.420844][T13024] veth1_macvtap: entered promiscuous mode [ 270.438132][T13024] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 270.451365][T13024] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 270.468193][ T6537] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 270.477791][T13413] EXT4-fs (loop8): Delayed block allocation failed for inode 15 at logical offset 63 with max blocks 1 with error 117 [ 270.490244][T13413] EXT4-fs (loop8): This should not happen!! Data will be lost [ 270.490244][T13413] [ 270.514189][ T6537] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 270.536463][T12374] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 270.544787][ T6537] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 270.557183][T13425] 9p: Bad value for 'wfdno' [ 270.570079][ T6537] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 270.922621][T13473] loop8: detected capacity change from 0 to 512 [ 270.931699][T13473] EXT4-fs (loop8): blocks per group (95) and clusters per group (32768) inconsistent [ 271.028991][T13478] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 271.039015][T13480] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2901'. [ 271.054211][T13478] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 271.066047][T13479] loop5: detected capacity change from 0 to 4096 [ 271.084770][T13479] EXT4-fs: Ignoring removed mblk_io_submit option [ 271.091356][T13479] EXT4-fs: test_dummy_encryption option not supported [ 271.307024][T13443] chnl_net:caif_netlink_parms(): no params data found [ 271.418287][T13443] bridge0: port 1(bridge_slave_0) entered blocking state [ 271.425464][T13443] bridge0: port 1(bridge_slave_0) entered disabled state [ 271.433398][T13443] bridge_slave_0: entered allmulticast mode [ 271.470657][ T29] audit: type=1400 audit(1769431424.778:11793): avc: denied { write } for pid=13487 comm="syz.5.2909" name="event1" dev="devtmpfs" ino=243 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 271.494183][ T29] audit: type=1400 audit(1769431424.778:11794): avc: denied { ioctl } for pid=13487 comm="syz.5.2909" path="/dev/input/event1" dev="devtmpfs" ino=243 ioctlcmd=0x4583 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 271.528234][T13443] bridge_slave_0: entered promiscuous mode [ 271.536588][T13443] bridge0: port 2(bridge_slave_1) entered blocking state [ 271.543712][T13443] bridge0: port 2(bridge_slave_1) entered disabled state [ 271.553925][T13443] bridge_slave_1: entered allmulticast mode [ 271.562683][T13443] bridge_slave_1: entered promiscuous mode [ 271.613105][T13443] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 271.628587][T13497] loop5: detected capacity change from 0 to 128 [ 271.651264][T13443] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 271.670230][T13497] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 271.703680][T13443] team0: Port device team_slave_0 added [ 271.710776][T13443] team0: Port device team_slave_1 added [ 271.727284][T13497] ext4 filesystem being mounted at /9/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 271.746506][T13443] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 271.753569][T13443] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 271.779559][T13443] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 271.829242][T13024] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 271.838489][T13443] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 271.845444][T13443] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 271.866358][T13505] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2915'. [ 271.871464][T13443] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 271.925157][ T29] audit: type=1400 audit(1769431425.328:11795): avc: denied { validate_trans } for pid=13506 comm="syz.8.2917" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 271.966415][T13443] hsr_slave_0: entered promiscuous mode [ 271.979275][T13443] hsr_slave_1: entered promiscuous mode [ 271.985220][T13443] debugfs: 'hsr0' already exists in 'hsr' [ 271.991034][T13443] Cannot create hsr debugfs directory [ 272.070076][T13518] loop8: detected capacity change from 0 to 512 [ 272.113198][T13514] SELinux: ebitmap: truncated map [ 272.123278][T13518] EXT4-fs: Ignoring removed orlov option [ 272.134051][T13514] SELinux: failed to load policy [ 272.149253][T13518] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 272.167718][T13518] ext4 filesystem being mounted at /71/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 272.191170][T12374] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 273.250841][T13533] loop3: detected capacity change from 0 to 512 [ 273.262646][T13533] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 273.295726][T13533] EXT4-fs (loop3): 1 truncate cleaned up [ 273.308371][T13533] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 273.482002][T13540] loop8: detected capacity change from 0 to 512 [ 273.488712][T13540] EXT4-fs: Ignoring removed oldalloc option [ 273.500310][T13540] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode [ 273.537781][T13540] EXT4-fs (loop8): 1 truncate cleaned up [ 273.543874][T13540] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 273.669039][T13443] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 273.705582][T13443] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 273.803387][T13443] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 273.853869][T13443] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 273.861933][ T3317] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 273.957658][T12374] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 273.979540][ T29] audit: type=1400 audit(1769431427.388:11796): avc: denied { nlmsg_read } for pid=13549 comm="syz.3.2931" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 274.149785][T13443] 8021q: adding VLAN 0 to HW filter on device bond0 [ 274.193680][T13443] 8021q: adding VLAN 0 to HW filter on device team0 [ 274.274200][ T6548] bridge0: port 1(bridge_slave_0) entered blocking state [ 274.281398][ T6548] bridge0: port 1(bridge_slave_0) entered forwarding state [ 274.438724][ T6548] bridge0: port 2(bridge_slave_1) entered blocking state [ 274.445920][ T6548] bridge0: port 2(bridge_slave_1) entered forwarding state [ 274.649692][T13443] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 274.988349][T13443] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 275.137961][T13596] loop8: detected capacity change from 0 to 2048 [ 275.147827][T13596] EXT4-fs: Ignoring removed i_version option [ 275.230693][T13596] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 275.250554][T13596] ext4 filesystem being mounted at /76/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 275.305080][T13609] loop3: detected capacity change from 0 to 128 [ 275.328765][T13609] FAT-fs (loop3): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 275.429308][ T29] audit: type=1400 audit(1769431428.818:11797): avc: denied { setcheckreqprot } for pid=13595 comm="syz.8.2946" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 275.481335][T13443] veth0_vlan: entered promiscuous mode [ 275.573616][T13443] veth1_vlan: entered promiscuous mode [ 275.776101][T13443] veth0_macvtap: entered promiscuous mode [ 275.809152][T13443] veth1_macvtap: entered promiscuous mode [ 275.864207][T13443] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 275.897923][T13443] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 275.971554][ T6522] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 276.014568][T13621] loop3: detected capacity change from 0 to 512 [ 276.026504][T12374] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 276.038453][ T6522] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 276.047617][T13621] EXT4-fs: Ignoring removed oldalloc option [ 276.048091][ T6524] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 276.073323][ T6524] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 276.100218][T13624] loop5: detected capacity change from 0 to 512 [ 276.107036][T13624] EXT4-fs: Ignoring removed nomblk_io_submit option [ 276.130688][T13626] loop8: detected capacity change from 0 to 256 [ 276.155398][T13621] EXT4-fs error (device loop3): ext4_xattr_inode_iget:437: comm syz.3.2952: Parent and EA inode have the same ino 15 [ 276.168569][T13624] EXT4-fs (loop5): filesystem is read-only [ 276.176103][T13621] EXT4-fs error (device loop3): ext4_xattr_inode_iget:437: comm syz.3.2952: Parent and EA inode have the same ino 15 [ 276.189554][T13624] EXT4-fs (loop5): ext4_check_descriptors: Block bitmap for group 0 overlaps block group descriptors [ 276.201698][T13621] EXT4-fs (loop3): 1 orphan inode deleted [ 276.202358][T13626] FAT-fs (loop8): Directory bread(block 64) failed [ 276.208678][T13621] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 276.226413][T13626] FAT-fs (loop8): Directory bread(block 65) failed [ 276.233137][T13626] FAT-fs (loop8): Directory bread(block 66) failed [ 276.240040][T13626] FAT-fs (loop8): Directory bread(block 67) failed [ 276.249057][T13626] FAT-fs (loop8): Directory bread(block 68) failed [ 276.255635][T13626] FAT-fs (loop8): Directory bread(block 69) failed [ 276.265403][T13624] EXT4-fs (loop5): filesystem is read-only [ 276.271352][T13624] EXT4-fs (loop5): orphan cleanup on readonly fs [ 276.283021][ T29] audit: type=1400 audit(1769431429.688:11798): avc: denied { map } for pid=13620 comm="syz.3.2952" path="/573/file0/file1" dev="loop3" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 276.324864][ T3317] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 276.338073][T13624] EXT4-fs error (device loop5): ext4_orphan_get:1391: inode #16: comm syz.5.2954: iget: bad i_size value: 648518346341360424 [ 276.351440][T13626] FAT-fs (loop8): Directory bread(block 70) failed [ 276.372874][T13626] FAT-fs (loop8): Directory bread(block 71) failed [ 276.400205][ T29] audit: type=1400 audit(1769431429.808:11799): avc: denied { wake_alarm } for pid=13633 comm="syz.3.2956" capability=35 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 276.400852][T13624] EXT4-fs (loop5): Remounting filesystem read-only [ 276.430226][T13626] FAT-fs (loop8): Directory bread(block 72) failed [ 276.436773][T13626] FAT-fs (loop8): Directory bread(block 73) failed [ 276.458015][T13624] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 276.511355][ T29] audit: type=1400 audit(1769431429.918:11800): avc: denied { mounton } for pid=13625 comm="syz.8.2953" path="/77/file1/file0" dev="loop8" ino=211 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=file permissive=1 [ 276.551421][T13024] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 276.584472][T13643] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 276.732337][T13643] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 276.740457][T13641] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 276.792738][ T29] audit: type=1400 audit(1769431430.188:11801): avc: denied { accept } for pid=13650 comm="syz.8.2963" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 276.826629][T13641] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 276.897651][T13653] loop8: detected capacity change from 0 to 128 [ 276.949040][T13653] EXT4-fs (loop8): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 277.024390][T13653] ext4 filesystem being mounted at /81/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 277.114247][T12374] EXT4-fs (loop8): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 277.183966][T13657] loop8: detected capacity change from 0 to 1024 [ 277.203476][T13657] EXT4-fs: Ignoring removed nomblk_io_submit option [ 277.231258][T13657] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e855c01c, mo2=0003] [ 277.247503][T13657] System zones: 0-1, 3-36 [ 277.254055][T13657] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 277.288083][T12374] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 277.468135][T13662] loop5: detected capacity change from 0 to 512 [ 277.479629][T13662] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a846e01c, mo2=0002] [ 277.508753][T13662] System zones: 1-12 [ 277.526780][T13662] EXT4-fs error (device loop5): dx_probe:791: inode #2: comm syz.5.2968: Directory hole found for htree index block 0 [ 277.576988][T13662] EXT4-fs (loop5): Cannot turn on journaled quota: type 0: error -117 [ 277.587526][T13662] EXT4-fs error (device loop5): dx_probe:791: inode #2: comm syz.5.2968: Directory hole found for htree index block 0 [ 277.607413][T13662] EXT4-fs (loop5): Cannot turn on journaled quota: type 1: error -117 [ 277.615893][T13679] loop0: detected capacity change from 0 to 512 [ 277.623204][T13662] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 277.659578][T13662] EXT4-fs error (device loop5): dx_probe:791: inode #2: comm syz.5.2968: Directory hole found for htree index block 0 [ 277.695634][T13679] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 277.709267][T13679] ext4 filesystem being mounted at /4/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 277.709602][T13685] loop8: detected capacity change from 0 to 128 [ 277.776015][T13685] EXT4-fs (loop8): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 277.800156][T13685] ext4 filesystem being mounted at /85/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 277.808199][T13024] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 277.822097][T13443] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 277.859433][ T29] audit: type=1400 audit(1769431431.268:11802): avc: denied { add_name } for pid=13682 comm="syz.8.2974" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 277.865365][T13685] EXT4-fs (loop8): shut down requested (2) [ 277.971178][T13698] loop5: detected capacity change from 0 to 1024 [ 277.986195][ T29] audit: type=1400 audit(1769431431.388:11803): avc: denied { read } for pid=13682 comm="syz.8.2974" name="file0" dev="loop8" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=lnk_file permissive=1 [ 278.013419][T13698] EXT4-fs: Ignoring removed oldalloc option [ 278.019565][T13698] EXT4-fs: Ignoring removed bh option [ 278.095762][T12374] EXT4-fs (loop8): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 278.131448][T13698] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 278.353509][T13718] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 278.384176][T13720] netlink: 220 bytes leftover after parsing attributes in process `syz.6.2989'. [ 278.399842][T13718] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 278.716735][T13024] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 278.784783][T13752] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 278.793349][T13752] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 279.803007][T13767] loop0: detected capacity change from 0 to 512 [ 279.829553][T13767] EXT4-fs (loop0): 1 truncate cleaned up [ 279.846092][T13767] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 280.050714][T13771] TCP: TCP_TX_DELAY enabled [ 280.123364][T13767] EXT4-fs error (device loop0): ext4_free_branches:1023: inode #13: comm syz.0.3004: invalid indirect mapped block 234881024 (level 0) [ 280.170808][T13774] FAT-fs (loop5): Invalid FSINFO signature: 0x41615200, 0x61417272 (sector = 1) [ 280.228284][T13767] EXT4-fs (loop0): Remounting filesystem read-only [ 280.524655][T13443] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 280.592546][T13779] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 280.612398][T13779] EXT4-fs (loop0): shut down requested (1) [ 280.710369][T13788] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop0 ino=15 [ 280.722608][T13788] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop0 ino=15 [ 280.737216][T13790] EXT4-fs: Ignoring removed nomblk_io_submit option [ 280.750892][T13788] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop0 ino=15 [ 280.779772][T13790] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e855c01c, mo2=0003] [ 280.799249][T13790] System zones: 0-1, 3-36 [ 280.804530][T13443] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 280.876585][T13799] IPv6: NLM_F_REPLACE set, but no existing node found! [ 280.954417][ T29] audit: type=1400 audit(1769431434.358:11804): avc: denied { write } for pid=13792 comm="syz.3.3014" name="001" dev="devtmpfs" ino=168 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 280.983493][T13803] hub 8-0:1.0: USB hub found [ 280.988406][T13803] hub 8-0:1.0: 8 ports detected [ 281.063591][T13806] set_capacity_and_notify: 4 callbacks suppressed [ 281.063614][T13806] loop5: detected capacity change from 0 to 1024 [ 281.151843][T13806] EXT4-fs: Ignoring removed nomblk_io_submit option [ 281.231443][T13802] bio_check_eod: 12 callbacks suppressed [ 281.231463][T13802] syz.8.3017: attempt to access beyond end of device [ 281.231463][T13802] loop8: rw=2049, sector=145, nr_sectors = 8 limit=128 [ 281.295204][T13802] syz.8.3017: attempt to access beyond end of device [ 281.295204][T13802] loop8: rw=2049, sector=161, nr_sectors = 8 limit=128 [ 281.316822][T13802] syz.8.3017: attempt to access beyond end of device [ 281.316822][T13802] loop8: rw=2049, sector=177, nr_sectors = 8 limit=128 [ 281.331835][T13802] syz.8.3017: attempt to access beyond end of device [ 281.331835][T13802] loop8: rw=2049, sector=193, nr_sectors = 8 limit=128 [ 281.345853][T13802] syz.8.3017: attempt to access beyond end of device [ 281.345853][T13802] loop8: rw=2049, sector=209, nr_sectors = 8 limit=128 [ 281.360057][T13802] syz.8.3017: attempt to access beyond end of device [ 281.360057][T13802] loop8: rw=2049, sector=225, nr_sectors = 8 limit=128 [ 281.373900][T13802] syz.8.3017: attempt to access beyond end of device [ 281.373900][T13802] loop8: rw=2049, sector=241, nr_sectors = 8 limit=128 [ 281.388098][T13802] syz.8.3017: attempt to access beyond end of device [ 281.388098][T13802] loop8: rw=2049, sector=257, nr_sectors = 8 limit=128 [ 281.471211][T13802] syz.8.3017: attempt to access beyond end of device [ 281.471211][T13802] loop8: rw=2049, sector=273, nr_sectors = 8 limit=128 [ 281.510884][T13802] syz.8.3017: attempt to access beyond end of device [ 281.510884][T13802] loop8: rw=2049, sector=289, nr_sectors = 8 limit=128 [ 281.527244][ T29] audit: type=1400 audit(1769431434.938:11805): avc: denied { getopt } for pid=13818 comm="syz.5.3020" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 281.688920][T13834] loop5: detected capacity change from 0 to 128 [ 281.706716][ T29] audit: type=1400 audit(1769431435.108:11806): avc: denied { create } for pid=13835 comm="syz.3.3030" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=udp_socket permissive=1 [ 281.737662][T13834] ext4 filesystem being mounted at /34/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 281.808951][T13846] loop0: detected capacity change from 0 to 128 [ 281.862674][T13846] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 281.969082][ T29] audit: type=1400 audit(1769431435.378:11807): avc: denied { mount } for pid=13856 comm="syz.0.3037" name="/" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 281.991346][ T29] audit: type=1400 audit(1769431435.378:11808): avc: denied { watch } for pid=13856 comm="syz.0.3037" path="/" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=dir permissive=1 [ 282.129822][T13861] loop0: detected capacity change from 0 to 1024 [ 282.199948][T13861] ext4 filesystem being mounted at /19/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 282.259541][T13861] EXT4-fs error (device loop0): ext4_lookup:1785: inode #15: comm syz.0.3039: inode has both inline data and extents flags [ 282.276120][T13861] EXT4-fs error (device loop0): ext4_lookup:1785: inode #15: comm syz.0.3039: inode has both inline data and extents flags [ 282.567313][T13875] loop5: detected capacity change from 0 to 1024 [ 282.602738][T13875] ext4 filesystem being mounted at /36/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 282.617567][T13875] EXT4-fs error (device loop5): ext4_map_blocks:825: inode #15: block 3: comm syz.5.3044: lblock 3 mapped to illegal pblock 3 (length 2) [ 282.632571][T13875] EXT4-fs error (device loop5): ext4_map_blocks:825: inode #15: comm syz.5.3044: lblock 0 mapped to illegal pblock 0 (length 3) [ 282.646712][T13875] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 3 with error 117 [ 282.659071][T13875] EXT4-fs (loop5): This should not happen!! Data will be lost [ 282.659071][T13875] [ 282.670508][T13875] EXT4-fs error (device loop5): ext4_map_blocks:825: inode #15: block 4: comm syz.5.3044: lblock 4 mapped to illegal pblock 4 (length 1) [ 282.689270][T13875] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 4 with max blocks 1 with error 117 [ 282.701672][T13875] EXT4-fs (loop5): This should not happen!! Data will be lost [ 282.701672][T13875] [ 282.720102][T13884] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3047'. [ 282.736025][ T6524] EXT4-fs error (device loop5): ext4_validate_block_bitmap:441: comm kworker/u8:39: bg 0: block 112: padding at end of block bitmap is not set [ 282.751291][ T6524] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 8 with max blocks 1 with error 28 [ 282.763644][ T6524] EXT4-fs (loop5): This should not happen!! Data will be lost [ 282.763644][ T6524] [ 282.773359][ T6524] EXT4-fs (loop5): Total free blocks count 0 [ 282.779614][ T6524] EXT4-fs (loop5): Free/Dirty block details [ 282.785554][ T6524] EXT4-fs (loop5): free_blocks=0 [ 282.790544][ T6524] EXT4-fs (loop5): dirty_blocks=0 [ 282.805593][T13886] loop0: detected capacity change from 0 to 512 [ 282.830491][T13886] EXT4-fs error (device loop0): ext4_ext_check_inode:523: inode #16: comm syz.0.3049: pblk 0 bad header/extent: too large eh_max - magic f30a, entries 1, max 2052(4), depth 0(0) [ 282.854847][T13886] EXT4-fs error (device loop0): ext4_orphan_get:1396: comm syz.0.3049: couldn't read orphan inode 16 (err -117) [ 282.886870][T13886] ext4 filesystem being mounted at /24/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 282.899860][T13886] EXT4-fs error (device loop0): ext4_lookup:1785: inode #15: comm syz.0.3049: iget: bad i_size value: 360287970189639690 [ 282.914942][T13886] EXT4-fs error (device loop0): ext4_lookup:1785: inode #15: comm syz.0.3049: iget: bad i_size value: 360287970189639690 [ 283.018703][T13906] loop5: detected capacity change from 0 to 4096 [ 283.029141][T13910] loop3: detected capacity change from 0 to 128 [ 283.064914][T13910] ext4 filesystem being mounted at /587/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 283.127822][T13920] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 283.138701][T13920] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 283.182608][T13929] netlink: 56 bytes leftover after parsing attributes in process `syz.5.3067'. [ 283.266406][T13941] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 283.275061][T13941] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 283.296397][T13943] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3074'. [ 283.305432][T13943] netlink: 132 bytes leftover after parsing attributes in process `syz.5.3074'. [ 283.334480][T13946] netlink: 'syz.5.3075': attribute type 2 has an invalid length. [ 283.342328][T13946] netlink: 'syz.5.3075': attribute type 1 has an invalid length. [ 283.401721][T13952] loop5: detected capacity change from 0 to 512 [ 283.410270][T13952] EXT4-fs (loop5): feature flags set on rev 0 fs, running e2fsck is recommended [ 283.439150][T13952] EXT4-fs error (device loop5): ext4_orphan_get:1391: inode #17: comm syz.5.3078: inode has both inline data and extents flags [ 283.452780][T13952] EXT4-fs error (device loop5): ext4_orphan_get:1396: comm syz.5.3078: couldn't read orphan inode 17 (err -117) [ 283.468085][T13952] EXT4-fs error (device loop5): ext4_validate_block_bitmap:441: comm syz.5.3078: bg 0: block 65: padding at end of block bitmap is not set [ 283.482685][T13952] Quota error (device loop5): write_blk: dquota write failed [ 283.485700][T13941] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 283.491288][T13952] Quota error (device loop5): qtree_write_dquot: Error -117 occurred while creating quota [ 283.503321][T13941] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 283.509072][T13952] EXT4-fs error (device loop5): ext4_acquire_dquot:6986: comm syz.5.3078: Failed to acquire dquot type 0 [ 283.521241][T13955] Quota error (device loop5): write_blk: dquota write failed [ 283.536239][T13955] Quota error (device loop5): qtree_write_dquot: Error -28 occurred while creating quota [ 283.546288][T13955] EXT4-fs error (device loop5): ext4_acquire_dquot:6986: comm syz.5.3078: Failed to acquire dquot type 0 [ 283.726629][T13971] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 283.747537][T13971] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 283.779749][T13977] /dev/loop6: Can't lookup blockdev [ 283.785161][T13979] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 283.794311][T13979] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 284.166599][T14002] loop3: detected capacity change from 0 to 1024 [ 284.175417][T14002] EXT4-fs: Ignoring removed oldalloc option [ 284.181438][T14002] EXT4-fs: Ignoring removed bh option [ 284.340674][T14020] EXT4-fs: Ignoring removed bh option [ 284.351511][T14020] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 284.877108][T14020] ext4 filesystem being mounted at /31/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 284.892336][T14020] EXT4-fs error (device loop0): ext4_lookup:1785: inode #12: comm syz.0.3108: iget: bad i_size value: 2533274857506816 [ 285.022047][T14054] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 285.058254][T14054] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 285.081665][T14063] ext4 filesystem being mounted at /596/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 285.207198][T14063] EXT4-fs (loop3): shut down requested (0) [ 285.207660][ T29] audit: type=1400 audit(1769431438.608:11809): avc: denied { ioctl } for pid=14061 comm="syz.3.3125" path="/596/mnt/blkio.bfq.io_queued" dev="loop3" ino=13 ioctlcmd=0x587d scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 285.348584][T14094] EXT4-fs (loop3): shut down requested (1) [ 285.364994][T14094] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop3 ino=12 [ 285.374211][T14094] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop3 ino=12 [ 285.383686][T14094] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop3 ino=12 [ 285.393923][T14094] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop3 ino=12 [ 285.403994][T14094] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop3 ino=12 [ 286.055305][T14113] EXT4-fs: Ignoring removed i_version option [ 286.070528][T14113] ext4 filesystem being mounted at /33/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 286.927984][ T29] audit: type=1400 audit(1769431440.298:11810): avc: denied { map } for pid=14133 comm="syz.5.3153" path="/dev/loop5" dev="devtmpfs" ino=105 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 288.850230][T13443] EXT4-fs unmount: 27 callbacks suppressed [ 288.850249][T13443] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 288.906514][T14152] set_capacity_and_notify: 5 callbacks suppressed [ 288.906530][T14152] loop5: detected capacity change from 0 to 1024 [ 288.922335][T14114] chnl_net:caif_netlink_parms(): no params data found [ 288.955834][T14152] EXT4-fs: Ignoring removed oldalloc option [ 288.961895][T14152] EXT4-fs: Ignoring removed bh option [ 289.492143][T14152] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 289.523759][T14114] bridge0: port 1(bridge_slave_0) entered blocking state [ 289.530934][T14114] bridge0: port 1(bridge_slave_0) entered disabled state [ 289.602208][T14114] bridge_slave_0: entered allmulticast mode [ 289.627096][T14114] bridge_slave_0: entered promiscuous mode [ 289.651225][T14114] bridge0: port 2(bridge_slave_1) entered blocking state [ 289.658371][T14114] bridge0: port 2(bridge_slave_1) entered disabled state [ 289.674502][T14114] bridge_slave_1: entered allmulticast mode [ 289.681192][T14114] bridge_slave_1: entered promiscuous mode [ 289.708789][T14114] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 289.725555][T14114] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 289.757254][T14114] team0: Port device team_slave_0 added [ 289.764031][T14114] team0: Port device team_slave_1 added [ 289.782741][T14114] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 289.789872][T14114] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 289.815883][T14114] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 289.830880][T14114] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 289.837925][T14114] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 289.863954][T14114] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 289.866585][T13024] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 289.961518][ T29] audit: type=1400 audit(1769431443.368:11811): avc: denied { audit_read } for pid=14196 comm="syz.5.3169" capability=37 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 290.005262][T14114] hsr_slave_0: entered promiscuous mode [ 290.020890][T14114] hsr_slave_1: entered promiscuous mode [ 290.031716][T14114] debugfs: 'hsr0' already exists in 'hsr' [ 290.037600][T14114] Cannot create hsr debugfs directory [ 290.049279][T14204] usb usb8: usbfs: process 14204 (syz.0.3171) did not claim interface 0 before use [ 290.165962][ T29] audit: type=1400 audit(290.158:11812): avc: denied { map } for pid=14221 comm="syz.5.3180" path="/dev/usbmon0" dev="devtmpfs" ino=141 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 290.223040][ T29] audit: type=1400 audit(290.168:11813): avc: denied { ioctl } for pid=14221 comm="syz.5.3180" path="/dev/usbmon0" dev="devtmpfs" ino=141 ioctlcmd=0x9204 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 290.249168][T14114] netdevsim netdevsim3 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 290.258984][T14114] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 290.269008][T14114] netdevsim netdevsim3 eth3 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 290.294593][T14233] loop0: detected capacity change from 0 to 1024 [ 290.315079][T14237] loop5: detected capacity change from 0 to 1024 [ 290.319688][T14233] EXT4-fs: Ignoring removed oldalloc option [ 290.327674][T14233] EXT4-fs: Ignoring removed bh option [ 290.328332][T14237] EXT4-fs: inline encryption not supported [ 290.339045][T14237] EXT4-fs: Ignoring removed orlov option [ 290.348123][T14114] netdevsim netdevsim3 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 290.358551][T14114] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 290.365291][T14237] EXT4-fs (loop5): stripe (2) is not aligned with cluster size (16), stripe is disabled [ 290.369095][T14114] netdevsim netdevsim3 eth2 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 290.390271][T14233] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 290.442783][T14237] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e840c018, mo2=0002] [ 290.453411][T14114] netdevsim netdevsim3 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 290.463232][T14114] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 290.473121][T14114] netdevsim netdevsim3 eth1 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 290.484071][T14237] System zones: 0-1, 3-12 [ 290.492585][T14237] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 290.508862][T13443] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 290.545160][T13024] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 290.659833][T14114] netdevsim netdevsim3 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 290.669688][T14114] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 290.679639][T14114] netdevsim netdevsim3 eth0 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 290.825912][T14114] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 290.837833][ T29] audit: type=1326 audit(290.778:11814): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14250 comm="syz.0.3192" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f6b525daeb9 code=0x0 [ 290.861664][T14114] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 290.871782][T14114] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 290.881877][T14114] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 290.959569][T14114] 8021q: adding VLAN 0 to HW filter on device bond0 [ 290.979769][T14114] 8021q: adding VLAN 0 to HW filter on device team0 [ 290.990452][ T6537] bridge0: port 1(bridge_slave_0) entered blocking state [ 290.997560][ T6537] bridge0: port 1(bridge_slave_0) entered forwarding state [ 291.011265][ T6548] bridge0: port 2(bridge_slave_1) entered blocking state [ 291.018372][ T6548] bridge0: port 2(bridge_slave_1) entered forwarding state [ 291.061991][T14114] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 291.072638][T14114] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 291.442625][T14114] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 291.752783][T14281] netlink: 44 bytes leftover after parsing attributes in process `syz.5.3199'. [ 291.845596][T14285] netlink: 52 bytes leftover after parsing attributes in process `syz.5.3199'. [ 292.013025][T14286] loop0: detected capacity change from 0 to 8192 [ 292.022585][T14299] syz_tun: entered allmulticast mode [ 292.032711][T14295] syz_tun: left allmulticast mode [ 292.051470][T14114] veth0_vlan: entered promiscuous mode [ 292.066423][T14114] veth1_vlan: entered promiscuous mode [ 292.086913][T14114] veth0_macvtap: entered promiscuous mode [ 292.096173][T14114] veth1_macvtap: entered promiscuous mode [ 292.115407][T14114] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 292.146674][T14114] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 292.168830][T14305] loop5: detected capacity change from 0 to 512 [ 292.178951][ T6539] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 292.188109][T14305] EXT4-fs: Ignoring removed nomblk_io_submit option [ 292.196123][ T6539] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 292.210282][T14305] EXT4-fs (loop5): mounting ext3 file system using the ext4 subsystem [ 292.220583][ T6539] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 292.230071][T14305] EXT4-fs (loop5): orphan cleanup on readonly fs [ 292.236581][T14305] EXT4-fs (loop5): Cannot turn on journaled quota: type 0: error -2 [ 292.246918][ T6539] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 292.254690][T14305] EXT4-fs (loop5): Cannot turn on journaled quota: type 1: error -2 [ 292.269312][T14305] EXT4-fs (loop5): 1 truncate cleaned up [ 292.289642][T14305] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 292.327657][T13024] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 292.361761][T14316] loop0: detected capacity change from 0 to 2048 [ 292.382038][T14316] EXT4-fs: Ignoring removed i_version option [ 292.401380][T14316] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 292.528332][T14338] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3217'. [ 292.770808][T14349] loop3: detected capacity change from 0 to 512 [ 292.878378][T14349] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.3224: bg 0: block 393: padding at end of block bitmap is not set [ 292.919912][T14349] EXT4-fs error (device loop3) in ext4_mb_clear_bb:6689: Corrupt filesystem [ 292.937138][T14349] EXT4-fs (loop3): 2 truncates cleaned up [ 292.948107][T14349] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 293.145153][T14114] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 293.176305][T13443] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 293.235444][T14361] loop0: detected capacity change from 0 to 512 [ 293.251317][T14361] EXT4-fs (loop0): feature flags set on rev 0 fs, running e2fsck is recommended [ 293.300196][T14361] EXT4-fs error (device loop0): ext4_orphan_get:1391: inode #15: comm syz.0.3228: inode has both inline data and extents flags [ 293.332469][T14361] EXT4-fs error (device loop0): ext4_orphan_get:1396: comm syz.0.3228: couldn't read orphan inode 15 (err -117) [ 293.351459][T14361] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 293.416484][T14361] EXT4-fs (loop0): re-mounted 00000000-0000-0000-0000-000000000000. [ 293.443662][T14380] netlink: 'syz.3.3237': attribute type 12 has an invalid length. [ 293.452282][T14380] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 293.460869][T14380] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 293.469604][T14380] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 293.478163][T14380] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 293.484438][T13443] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 293.490409][T14380] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 293.503628][T14380] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 293.981060][T14402] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 293.988312][T14402] IPv6: NLM_F_CREATE should be set when creating new route [ 294.021057][T14402] bridge0: port 2(bridge_slave_1) entered disabled state [ 294.028559][T14402] bridge0: port 1(bridge_slave_0) entered disabled state [ 294.053023][T14404] loop3: detected capacity change from 0 to 512 [ 294.103177][T14404] EXT4-fs (loop3): mounting ext2 file system using the ext4 subsystem [ 294.130540][T14404] EXT4-fs (loop3): orphan cleanup on readonly fs [ 294.137835][T14402] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 294.162116][T14404] EXT4-fs error (device loop3): ext4_orphan_get:1417: comm syz.3.3245: bad orphan inode 15 [ 294.174032][T14402] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 294.174055][T14404] ext4_test_bit(bit=14, block=18) = 1 [ 294.174087][T14404] is_bad_inode(inode)=0 [ 294.174096][T14404] NEXT_ORPHAN(inode)=1023 [ 294.174112][T14404] max_ino=32 [ 294.174121][T14404] i_nlink=0 [ 294.203646][T14404] EXT4-fs error (device loop3): ext4_xattr_delete_inode:2972: inode #15: comm syz.3.3245: corrupted xattr block 19: e_value size too large [ 294.219749][T14404] EXT4-fs warning (device loop3): ext4_evict_inode:273: xattr delete (err -117) [ 294.229527][T14404] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0009-000000000000 ro without journal. Quota mode: none. [ 294.244395][ T29] audit: type=1400 audit(294.238:11815): avc: denied { append } for pid=14403 comm="syz.3.3245" name="nvram" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 294.244856][T14404] EXT4-fs error (device loop3): ext4_lookup:1789: inode #2: comm syz.3.3245: deleted inode referenced: 15 [ 294.298069][T14114] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0009-000000000000. [ 294.307303][ T6539] netdevsim netdevsim8 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 294.326457][ T6539] netdevsim netdevsim8 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 294.352471][T14417] loop5: detected capacity change from 0 to 512 [ 294.359024][ T6539] netdevsim netdevsim8 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 294.381955][T14421] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 294.391216][T14417] EXT4-fs (loop5): feature flags set on rev 0 fs, running e2fsck is recommended [ 294.400563][T14417] EXT4-fs (loop5): blocks per group (42) and clusters per group (32768) inconsistent [ 294.410321][ T6539] netdevsim netdevsim8 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 294.423374][T14421] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 294.449494][T14421] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3250'. [ 294.458637][T14421] netlink: 36 bytes leftover after parsing attributes in process `syz.3.3250'. [ 294.573811][T14435] SELinux: policydb version -725775909 does not match my version range 15-35 [ 294.583987][T14435] SELinux: failed to load policy [ 294.643280][T14440] loop0: detected capacity change from 0 to 4096 [ 294.651337][T14440] EXT4-fs: test_dummy_encryption option not supported [ 294.975054][T14465] loop0: detected capacity change from 0 to 512 [ 295.007013][T14465] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 295.016962][T14465] EXT4-fs (loop0): SIPHASH is not a valid default hash value [ 295.085210][T14469] loop3: detected capacity change from 0 to 512 [ 295.115162][T14469] EXT4-fs (loop3): blocks per group (255) and clusters per group (8192) inconsistent [ 295.250360][ T29] audit: type=1400 audit(295.248:11816): avc: denied { map } for pid=14476 comm="syz.6.3277" path="socket:[38561]" dev="sockfs" ino=38561 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tcp_socket permissive=1 [ 295.276129][T14469] loop3: detected capacity change from 0 to 512 [ 295.331807][T14481] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 295.344026][T14481] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 295.370680][T14485] cgroup: Unknown subsys name 'cpuset' [ 295.415922][T14491] netlink: 24 bytes leftover after parsing attributes in process `syz.8.3284'. [ 295.634345][T14502] loop5: detected capacity change from 0 to 512 [ 295.758219][T14528] SELinux: ebitmap: empty map [ 295.763145][T14528] SELinux: failed to load policy [ 295.869089][ T29] audit: type=1326 audit(295.868:11817): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14543 comm="syz.6.3306" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f1724baaeb9 code=0x0 [ 295.932608][T14549] loop5: detected capacity change from 0 to 1024 [ 295.940487][T14549] EXT4-fs: Ignoring removed oldalloc option [ 295.946488][T14549] EXT4-fs: Ignoring removed bh option [ 295.970889][T14549] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 296.017934][T14557] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 296.032678][T14557] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 296.043968][T13024] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 296.143554][T14567] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 296.152294][T14567] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 296.219288][ T29] audit: type=1400 audit(296.218:11818): avc: denied { append } for pid=14572 comm="syz.0.3318" name="001" dev="devtmpfs" ino=165 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 296.578739][T14587] random: crng reseeded on system resumption [ 296.586840][ T29] audit: type=1400 audit(296.578:11819): avc: denied { ioctl } for pid=14586 comm="syz.3.3324" path="/dev/snapshot" dev="devtmpfs" ino=90 ioctlcmd=0x3311 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 296.695352][T14597] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 296.704809][T14597] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 296.770501][T14604] loop0: detected capacity change from 0 to 1024 [ 296.779252][T14604] EXT4-fs: Ignoring removed oldalloc option [ 296.785227][T14604] EXT4-fs: Ignoring removed bh option [ 296.799633][T14604] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 297.181098][T14623] ================================================================== [ 297.189254][T14623] BUG: KCSAN: data-race in __xa_set_mark / xas_find_marked [ 297.196511][T14623] [ 297.198899][T14623] write to 0xffff888109a5ee9c of 4 bytes by task 14604 on cpu 0: [ 297.206643][T14623] __xa_set_mark+0x172/0x1a0 [ 297.211282][T14623] __folio_mark_dirty+0x383/0x490 [ 297.216358][T14623] mark_buffer_dirty+0x11e/0x200 [ 297.221333][T14623] block_write_end+0x12d/0x210 [ 297.226149][T14623] ext4_write_end+0x133/0x730 [ 297.230852][T14623] ext4_da_write_end+0x65/0x800 [ 297.235745][T14623] generic_perform_write+0x311/0x490 [ 297.241076][T14623] ext4_buffered_write_iter+0x1ee/0x3c0 [ 297.246650][T14623] ext4_file_write_iter+0x380/0xf70 [ 297.251906][T14623] iter_file_splice_write+0x6bc/0xa80 [ 297.257294][T14623] direct_splice_actor+0x156/0x2a0 [ 297.262430][T14623] splice_direct_to_actor+0x311/0x670 [ 297.267904][T14623] do_splice_direct+0x119/0x1a0 [ 297.272789][T14623] do_sendfile+0x382/0x650 [ 297.277235][T14623] __x64_sys_sendfile64+0x105/0x150 [ 297.282455][T14623] x64_sys_call+0x2db1/0x3000 [ 297.287160][T14623] do_syscall_64+0xc0/0x2a0 [ 297.291697][T14623] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 297.297622][T14623] [ 297.299961][T14623] read to 0xffff888109a5ee9c of 4 bytes by task 14623 on cpu 1: [ 297.307628][T14623] xas_find_marked+0x5d7/0x620 [ 297.312421][T14623] filemap_get_folios_tag+0xfa/0x510 [ 297.317763][T14623] file_write_and_wait_range+0x20c/0x2f0 [ 297.323414][T14623] generic_buffers_fsync_noflush+0x45/0x130 [ 297.329327][T14623] ext4_sync_file+0x1aa/0x680 [ 297.334040][T14623] vfs_fsync_range+0x10d/0x130 [ 297.338923][T14623] ext4_buffered_write_iter+0x34f/0x3c0 [ 297.344507][T14623] ext4_file_write_iter+0x380/0xf70 [ 297.349738][T14623] iter_file_splice_write+0x6bc/0xa80 [ 297.355134][T14623] direct_splice_actor+0x156/0x2a0 [ 297.360269][T14623] splice_direct_to_actor+0x311/0x670 [ 297.365663][T14623] do_splice_direct+0x119/0x1a0 [ 297.370533][T14623] do_sendfile+0x382/0x650 [ 297.374978][T14623] __x64_sys_sendfile64+0x105/0x150 [ 297.380292][T14623] x64_sys_call+0x2db1/0x3000 [ 297.384999][T14623] do_syscall_64+0xc0/0x2a0 [ 297.389537][T14623] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 297.395457][T14623] [ 297.397790][T14623] value changed: 0x04000021 -> 0x0e000021 [ 297.403520][T14623] [ 297.405857][T14623] Reported by Kernel Concurrency Sanitizer on: [ 297.412024][T14623] CPU: 1 UID: 0 PID: 14623 Comm: syz.0.3332 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 297.423509][T14623] Tainted: [W]=WARN SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 297.427324][T14623] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 297.437405][T14623] ================================================================== [ 297.445965][ T29] audit: type=1400 audit(297.228:11820): avc: denied { write } for pid=3298 comm="syz-executor" path="pipe:[1917]" dev="pipefs" ino=1917 scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:sshd_t tclass=fifo_file permissive=1 [ 297.795511][ T6524] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 297.854165][T14604] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 297.870761][ T6524] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 297.910377][ T6524] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 297.970057][ T6524] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 298.068114][ T6524] bridge_slave_1: left allmulticast mode [ 298.073852][ T6524] bridge_slave_1: left promiscuous mode [ 298.079586][ T6524] bridge0: port 2(bridge_slave_1) entered disabled state [ 298.087972][ T6524] bridge_slave_0: left allmulticast mode [ 298.093751][ T6524] bridge_slave_0: left promiscuous mode [ 298.099546][ T6524] bridge0: port 1(bridge_slave_0) entered disabled state [ 298.200582][ T6524] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 298.210574][ T6524] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 298.220176][ T6524] bond0 (unregistering): Released all slaves [ 298.279362][ T6524] hsr_slave_0: left promiscuous mode [ 298.286314][ T6524] hsr_slave_1: left promiscuous mode [ 298.292078][ T6524] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 298.299519][ T6524] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 298.307248][ T6524] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 298.314753][ T6524] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 298.327579][ T6524] veth1_macvtap: left promiscuous mode [ 298.333182][ T6524] veth0_macvtap: left promiscuous mode [ 298.338960][ T6524] veth1_vlan: left promiscuous mode [ 298.344308][ T6524] veth0_vlan: left promiscuous mode [ 298.426720][ T6524] team0 (unregistering): Port device team_slave_1 removed [ 298.437955][ T6524] team0 (unregistering): Port device team_slave_0 removed [ 298.732138][ T6524] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 298.791491][ T6524] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 298.840228][ T6524] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 298.890566][ T6524] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 298.971149][ T6524] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 299.032398][ T6524] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 299.084975][ T6524] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 299.121323][ T6524] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 299.198490][ T6524] bridge_slave_1: left allmulticast mode [ 299.204177][ T6524] bridge_slave_1: left promiscuous mode [ 299.210065][ T6524] bridge0: port 2(bridge_slave_1) entered disabled state [ 299.218577][ T6524] bridge_slave_0: left allmulticast mode [ 299.224252][ T6524] bridge_slave_0: left promiscuous mode [ 299.230085][ T6524] bridge0: port 1(bridge_slave_0) entered disabled state [ 299.240067][ T6524] bridge_slave_1: left allmulticast mode [ 299.245744][ T6524] bridge_slave_1: left promiscuous mode [ 299.251512][ T6524] bridge0: port 2(bridge_slave_1) entered disabled state [ 299.259665][ T6524] bridge_slave_0: left allmulticast mode [ 299.265346][ T6524] bridge_slave_0: left promiscuous mode [ 299.271142][ T6524] bridge0: port 1(bridge_slave_0) entered disabled state [ 299.371599][ T6524] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 299.381575][ T6524] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 299.391316][ T6524] bond0 (unregistering): Released all slaves [ 299.460750][ T6524] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 299.470928][ T6524] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 299.480943][ T6524] bond0 (unregistering): Released all slaves [ 299.569939][ T6524] hsr_slave_0: left promiscuous mode [ 299.575654][ T6524] hsr_slave_1: left promiscuous mode [ 299.581511][ T6524] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 299.588951][ T6524] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 299.596965][ T6524] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 299.604473][ T6524] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 299.614746][ T6524] hsr_slave_0: left promiscuous mode [ 299.620581][ T6524] hsr_slave_1: left promiscuous mode [ 299.626348][ T6524] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 299.633784][ T6524] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 299.641792][ T6524] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 299.649241][ T6524] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 299.663568][ T6524] veth1_macvtap: left promiscuous mode [ 299.669172][ T6524] veth0_macvtap: left promiscuous mode [ 299.674709][ T6524] veth1_vlan: left promiscuous mode [ 299.680040][ T6524] veth0_vlan: left promiscuous mode [ 299.685860][ T6524] veth1_macvtap: left promiscuous mode [ 299.691412][ T6524] veth0_macvtap: left promiscuous mode [ 299.696914][ T6524] veth1_vlan: left promiscuous mode [ 299.702503][ T6524] veth0_vlan: left promiscuous mode [ 299.812957][ T6524] team0 (unregistering): Port device team_slave_1 removed [ 299.823300][ T6524] team0 (unregistering): Port device team_slave_0 removed [ 299.885263][ T6524] team0 (unregistering): Port device team_slave_1 removed [ 299.896217][ T6524] team0 (unregistering): Port device team_slave_0 removed