last executing test programs: 45.24660286s ago: executing program 2 (id=549): ioprio_set$pid(0x2, 0x0, 0x0) r0 = syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000280)='./file1\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYRES64=0x0, @ANYRES32, @ANYBLOB="b9f93e4d055ce5c5e3cc332e42037be6fd69a7af956e0b506164273ac1df1b3de0bbd1e525b3b6c216d422086911a0142a24b4ed15dc5b3de7a2e63b61db257e846aca826eb5f4bf76f2625bb0f34b5df1bd6d76e881a8e187f0cf88dab3a058121669272fd03131a73e215bebe5d006a598d0edffeb6a3d125da954dd3c08dda220", @ANYRES8, @ANYRESDEC], 0x1, 0x1237, &(0x7f00000006c0)="$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") ioctl$F2FS_IOC_COMPRESS_FILE(r0, 0xf518, 0x0) syz_genetlink_get_family_id$devlink(&(0x7f0000000040), r0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file2\x00', 0x143042, 0x8d) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000340)={0x0, 0x0}) bpf$MAP_CREATE(0x0, 0x0, 0x48) socket$inet(0x2, 0x2, 0x0) writev(0xffffffffffffffff, 0x0, 0x0) r2 = gettid() timer_create(0x1, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)) sendto(0xffffffffffffffff, &(0x7f0000000740)="1200", 0x2, 0x0, 0x0, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000001740), 0x101042, 0x0) ioctl$PPPIOCNEWUNIT(r3, 0xc004743e, &(0x7f0000000300)=0x2) ioctl$PPPIOCSACTIVE(r3, 0x40047459, &(0x7f0000000080)={0xfffffffffffffe43, 0x0}) read(r3, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(0xffffffffffffffff, 0x84, 0xc, &(0x7f00000001c0), 0x4) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(0xffffffffffffffff, 0x84, 0x6d, &(0x7f0000000080), &(0x7f00000000c0)=0x3930) close_range(r0, r1, 0x2) 44.216412695s ago: executing program 2 (id=561): r0 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r0, &(0x7f0000000340)=@nameseq={0x1e, 0x1, 0x3, {0x43}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000100)={0x43, 0x0, 0x3, 0x3}, 0x10) sendmsg$tipc(r0, &(0x7f0000000400)={&(0x7f00000008c0), 0x58, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x20) sendmsg$tipc(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000200)=@name={0x1e, 0x2, 0x1, {{0x2}}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x26040885}, 0x20000040) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000800000001"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b703000000030000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x18) r3 = syz_open_dev$tty20(0xc, 0x4, 0x1) write$binfmt_misc(r3, &(0x7f0000000240), 0xfffffecc) ioctl$TIOCSTI(r3, 0x5412, &(0x7f0000000040)) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000990000000d"], 0x50) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000001780)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r6 = perf_event_open(&(0x7f0000000000)={0x8, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) close(r6) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={0x0, r5, 0x0, 0xfffffffffffffffc}, 0x18) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, 0x0, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000b00)=ANY=[@ANYBLOB="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"], 0x548}, 0x1, 0x0, 0x0, 0x20004000}, 0x0) 42.692568739s ago: executing program 2 (id=568): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000040), r0) sendmsg$NLBL_UNLABEL_C_ACCEPT(r0, &(0x7f0000000300)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000002c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="1c00", @ANYRES16=r1], 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x20004000) r2 = socket(0x10, 0x803, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000f80)=ANY=[@ANYBLOB="0500000004000000080000000b"], 0x48) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x3c}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r5, 0x8933, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000380)={'vcan0\x00'}) getsockname$packet(r2, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000440)=0x14) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'veth1_virt_wifi\x00'}) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000480)='kfree\x00', r6, 0x0, 0x7fffffffffffffff}, 0x18) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'team_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r7, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xffe0, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x1}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newtfilter={0x124, 0x2c, 0xd2b, 0x70bd2b, 0x35dfdbfb, {0x0, 0x0, 0x0, r7, {0xf, 0x3}, {}, {0xfff1, 0xfff2}}, [@filter_kind_options=@f_u32={{0x8}, {0xf8, 0x2, [@TCA_U32_SEL={0xf4, 0x5, {0x10, 0x9, 0xe, 0x10da, 0xa760, 0x0, 0x10, 0xfc, [{0xffff8001, 0xf033, 0x4010000, 0x8000}, {0x40, 0x80000001, 0xfffffffe, 0xffffffff}, {0x2, 0x9, 0x2}, {0x8, 0x80000000, 0x1e0a}, {0xffffffff, 0x9, 0x800, 0x100}, {0x5e3, 0xd, 0x8e, 0x3}, {0x86, 0xffffffff, 0x5, 0x1ad}, {0x3ff, 0xb, 0x3, 0xa6d}, {0x1, 0x5, 0x5127, 0x800}, {0x6, 0x1, 0x2, 0x1}, {0x40, 0x40, 0x3, 0x40000005}, {0x2, 0x8, 0x6, 0x201}, {0x5, 0x406, 0x2, 0x1279}, {0x94b0, 0x81, 0x80000001, 0xfffffffc}]}}]}}]}, 0x124}, 0x1, 0x0, 0x0, 0x48001}, 0x4000) 42.61428161s ago: executing program 2 (id=570): socket$nl_audit(0x10, 0x3, 0x9) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = epoll_create(0x3ff) r1 = epoll_create1(0x80000) r2 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000340)='syz0\x00', 0x200002, 0x0) ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f0000000380)={{0x1, 0x1, 0x18, r2}, './file0\x00'}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x10, 0x2, &(0x7f0000000100)=@raw=[@ldst={0x1, 0x2, 0x4, 0x0, 0x5}, @jmp={0x5, 0x0, 0x9, 0x0, 0x4, 0xfffffffffffffe88}], &(0x7f0000000000)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2, @void, @value}, 0x94) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x1200000, &(0x7f0000000940)={[{@noblock_validity}, {}, {@sysvgroups}, {@norecovery}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@noquota}, {@nobh}, {@noauto_da_alloc}, {@nomblk_io_submit}]}, 0x1, 0x57e, &(0x7f0000001b40)="$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") mount$bind(&(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x101091, 0x0) r4 = getpid() r5 = syz_pidfd_open(r4, 0x0) setns(r5, 0x8020000) mount_setattr(0xffffffffffffff9c, &(0x7f0000000180)='.\x00', 0x9000, &(0x7f0000001dc0)={0x8, 0x70, 0x80000}, 0x20) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r6 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) setsockopt$inet_opts(0xffffffffffffffff, 0x0, 0x4, 0x0, 0x0) write$tun(r3, &(0x7f0000000240)={@val={0x8, 0x800}, @val={0x7, 0x0, 0x0, 0x300, 0x14}, @ipv4=@tcp={{0x5, 0x4, 0x0, 0x3c, 0x3a, 0xfffe, 0x0, 0x0, 0x2f, 0x0, @remote, @broadcast}, {{0xa200, 0x22eb, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}, {"4adcda08f6e83e2aa00e133f88a8349f246e"}}}}, 0x48) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000240)={0xa0000000}) epoll_ctl$EPOLL_CTL_MOD(r0, 0x3, r1, &(0x7f0000000280)={0x2000000}) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={{0x14, 0x10, 0x1, 0x2, 0x0, {0x2}}, [@NFT_MSG_NEWSET={0x14, 0x9, 0xa, 0x401, 0x0, 0x0, {0x3, 0x0, 0xfffe}}], {0x14, 0x10}}, 0x3c}}, 0x0) 42.323523984s ago: executing program 2 (id=573): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000040), &(0x7f0000000080)=0xc) bind$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x1, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x7, 0x1}, 0xe) bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB="19000000040000"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x11, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000200)='kfree\x00', r1}, 0x18) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r2, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x808000, 0x4, 0x20300, 0xfc}, 0x1c) setsockopt$packet_rx_ring(r2, 0x107, 0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) close(0xffffffffffffffff) socket(0x1e, 0x4, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{}, 0x0, &(0x7f0000000080)}, 0x20) r3 = socket$inet_smc(0x2b, 0x1, 0x0) connect$inet(r3, &(0x7f0000000000)={0x2, 0x4001, @remote}, 0x10) r4 = msgget$private(0x0, 0x790) msgsnd(r4, &(0x7f0000000040)=ANY=[@ANYRESDEC], 0x401, 0x0) msgget(0x2, 0xa) r5 = socket(0x10, 0x3, 0x0) r6 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000080)={'vlan0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000540)=@newqdisc={0x78, 0x24, 0x3fe3aa0262d8c783, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x3, 0x0, 0x7ff, 0x1}, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x1e, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0xfffffffc}}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x20008000}, 0x0) 41.372612909s ago: executing program 2 (id=579): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=@base={0x7, 0x4, 0x8, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b703000000e00000850000001b000000b700000000fa000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x18) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000040)={'bridge0\x00', 0x400}) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x2, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='sys_enter\x00', r3}, 0x18) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000640)={{r4}, &(0x7f00000005c0), &(0x7f0000000600)=r5}, 0x20) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000040)='kmem_cache_free\x00', r6}, 0x18) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00'}, 0x10) prctl$PR_SET_NAME(0xf, &(0x7f0000000280)='+}[@\x00') bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000100)={0x0, 0xff00, &(0x7f00000000c0)={&(0x7f0000000140)=@ipv6_newnexthop={0x1c, 0x68, 0x5fb9a818fb7378e9, 0x0, 0x0, {}, [@NHA_BLACKHOLE={0x4}]}, 0x1c}}, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=@newnexthop={0x24, 0x68, 0x1, 0x70bd27, 0x7ffffffc, {}, [@NHA_GROUP={0xc, 0x2, [{0x1, 0x4}]}]}, 0x24}, 0x1, 0x0, 0x0, 0x24008000}, 0x4000) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000280)={0x0, 0xfffffffffffffda3, &(0x7f0000000180)={&(0x7f0000000200)=@delnexthop={0x20, 0x69, 0xb, 0x0, 0x0, {}, [{0x8, 0x1, 0x1}]}, 0x20}}, 0x4000000) 41.361221489s ago: executing program 32 (id=579): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=@base={0x7, 0x4, 0x8, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b703000000e00000850000001b000000b700000000fa000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x18) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000040)={'bridge0\x00', 0x400}) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x2, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='sys_enter\x00', r3}, 0x18) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000640)={{r4}, &(0x7f00000005c0), &(0x7f0000000600)=r5}, 0x20) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000040)='kmem_cache_free\x00', r6}, 0x18) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00'}, 0x10) prctl$PR_SET_NAME(0xf, &(0x7f0000000280)='+}[@\x00') bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000100)={0x0, 0xff00, &(0x7f00000000c0)={&(0x7f0000000140)=@ipv6_newnexthop={0x1c, 0x68, 0x5fb9a818fb7378e9, 0x0, 0x0, {}, [@NHA_BLACKHOLE={0x4}]}, 0x1c}}, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=@newnexthop={0x24, 0x68, 0x1, 0x70bd27, 0x7ffffffc, {}, [@NHA_GROUP={0xc, 0x2, [{0x1, 0x4}]}]}, 0x24}, 0x1, 0x0, 0x0, 0x24008000}, 0x4000) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000280)={0x0, 0xfffffffffffffda3, &(0x7f0000000180)={&(0x7f0000000200)=@delnexthop={0x20, 0x69, 0xb, 0x0, 0x0, {}, [{0x8, 0x1, 0x1}]}, 0x20}}, 0x4000000) 5.132460272s ago: executing program 5 (id=888): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x3000046, &(0x7f0000000080)={[{@delalloc}, {@data_err_abort}, {@discard}, {@dioread_lock}, {@data_err_ignore}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x4007b1}}, {@data_err_ignore}, {@grpquota}, {@dax_inode}, {@user_xattr}, {@bh}, {@dioread_nolock}]}, 0x1, 0x553, &(0x7f0000000a40)="$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") r0 = openat$selinux_create(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000340)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x9, 0x4, 0x7ffc0002}]}) bpf$MAP_CREATE(0x0, 0x0, 0x48) sendmmsg$inet(0xffffffffffffffff, &(0x7f00000017c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x84) preadv(r1, &(0x7f0000000000)=[{&(0x7f0000000080)=""/242, 0xf2}], 0x1, 0x2, 0x2) socket$inet(0x2, 0x2, 0x0) writev(0xffffffffffffffff, &(0x7f0000000300)=[{&(0x7f00000001c0)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000d000000000000060400", 0x32}], 0x1) r2 = gettid() timer_create(0x1, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) ioctl$PPPIOCNEWUNIT(0xffffffffffffffff, 0xc004743e, &(0x7f0000000300)=0x2) ioctl$PPPIOCSACTIVE(0xffffffffffffffff, 0x40047459, &(0x7f0000000080)={0xfffffffffffffe43, 0x0}) read(0xffffffffffffffff, 0x0, 0x0) write$selinux_create(r0, &(0x7f0000000340)=@objname={'system_u:object_r:urandom_device_t:s0', 0x20, 'system_u:system_r:kernel_t:s0', 0x20, 0x10000, 0x20, './file0\x00'}, 0x61) r3 = open(&(0x7f0000000000)='./file1\x00', 0x109042, 0x7a) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=@ipv6_newrule={0x54, 0x20, 0x1, 0x70bd28, 0x25dfdbfe, {0xa, 0x20, 0x20, 0x84, 0x7f, 0x0, 0x0, 0x6, 0x10009}, [@FRA_DST={0x14, 0x1, @mcast1}, @FRA_SRC={0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, @FIB_RULE_POLICY=@FRA_IP_PROTO={0x5, 0x16, 0x87}, @FIB_RULE_POLICY=@FRA_DPORT_RANGE={0x8, 0x18, {0x4e20, 0x4e22}}]}, 0x54}, 0x1, 0x0, 0x0, 0x20008005}, 0x40) r5 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) setsockopt$inet6_tcp_TCP_ULP(r3, 0x6, 0x1f, &(0x7f0000000140), 0x4) sendmsg$netlink(r5, &(0x7f0000000040)={0x0, 0x28, &(0x7f0000000000)=[{&(0x7f00000001c0)=ANY=[@ANYBLOB="d824000028000100020000080000000003"], 0x24d8}], 0x1}, 0x40004) 5.131605262s ago: executing program 0 (id=899): sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) io_uring_setup(0x2d58, &(0x7f0000000380)={0x0, 0x62cc, 0x400, 0x8000002, 0x3f7}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x8, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=@framed={{}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r3}, {}, {0x85, 0x0, 0x0, 0x1b}}]}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x18) syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x800) recvmmsg(r1, &(0x7f00000000c0), 0x1010b, 0x2, 0x0) sendmsg$NFNL_MSG_ACCT_NEW(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, 0x0}, 0x0) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x1, &(0x7f0000000440)={0x5, &(0x7f0000000400)=[{0x2, 0x1, 0x4, 0x9}, {0x101, 0x3, 0x5, 0x7fff}, {0x6, 0x5, 0x6, 0x1}, {0x7fff, 0x7f, 0x3, 0x80000000}, {0xffff, 0x4, 0x5, 0x1}]}) ioctl$TIOCSETD(r5, 0x5423, &(0x7f0000000040)=0x1) ioctl$TCSETS(r5, 0x89f2, &(0x7f00000000c0)={0x2, 0x0, 0x0, 0x7ff, 0x0, "5dee00ffffff004000"}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) 4.985015245s ago: executing program 5 (id=889): mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x810, 0xffffffffffffffff, 0x66960000) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r2) ioctl$IOCTL_GET_NCIDEV_IDX(r1, 0x0, &(0x7f00000000c0)) sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000140)={0x0, 0x31, &(0x7f0000000180)={&(0x7f0000000200)={0x14, r3, 0x10, 0x70bd2c, 0x23b}, 0x14}}, 0x0) write$nci(r1, &(0x7f00000001c0)=ANY=[@ANYBLOB], 0x5) socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ENABLE(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)={0x54, r5, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_BEARER={0x40, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x0, @loopback}}, {0x14, 0x2, @in={0x2, 0x0, @multicast2}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}]}]}, 0x54}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$packet(0x11, 0x2, 0x300) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000003700)={0x77359400}) syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000e40), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ENABLE(r6, &(0x7f00000010c0)={0x0, 0x0, &(0x7f0000001080)={&(0x7f0000000000)={0x6c, r7, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_BEARER={0x58, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x0, 0x0, @loopback}}, {0x20, 0x2, @in6={0xa, 0x0, 0x0, @local}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}]}]}, 0x6c}}, 0x0) r8 = syz_genetlink_get_family_id$nfc(&(0x7f0000001cc0), r0) sendmsg$NFC_CMD_GET_DEVICE(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001d40)=ANY=[@ANYBLOB="14000000", @ANYRES16=r8, @ANYBLOB="4ddf2bbd7000fe05132501000000"], 0x14}, 0x1, 0x0, 0x0, 0xc894}, 0x4000000) ioctl$sock_inet_SIOCSARP(0xffffffffffffffff, 0x8955, &(0x7f0000000240)={{0x2, 0x4e21, @loopback}, {0x306, @broadcast}, 0x8, {0x2, 0x4e23, @initdev={0xac, 0x1e, 0x1, 0x0}}, 'veth1_to_bond\x00'}) 4.576286381s ago: executing program 5 (id=892): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r0, 0x0, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r4}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x5}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) fsmount(0xffffffffffffffff, 0x0, 0x0) syz_clone3(&(0x7f00000007c0)={0x40120000, 0x0, 0x0, 0x0, {0x40}, 0x0, 0x0, 0x0, 0x0}, 0x58) symlink(&(0x7f0000000000)='.\x00', &(0x7f0000000100)='./file0\x00') socket$nl_sock_diag(0x10, 0x3, 0x4) move_pages(0x0, 0x2064, &(0x7f0000000040)=[&(0x7f0000ff9000/0x2000)=nil], &(0x7f0000001180), &(0x7f0000000000), 0x0) 3.97341131s ago: executing program 4 (id=896): r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0x35, &(0x7f0000000000)=0x8000, 0x4) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0xf4, @private1={0xfc, 0x1, '\x00', 0x1}, 0x3}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0xb, &(0x7f0000000040)=0x6, 0x4) recvmmsg(r0, &(0x7f00000002c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)=""/157, 0x9d}, 0x5}], 0x1, 0x2102, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4) close(r1) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e1c, 0x0, @ipv4={'\x00', '\xff\xff', @multicast2}}, 0x1c) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f00000000c0)={0x3, &(0x7f00000003c0)=[{0xf7, 0xe, 0x6, 0x3}, {0x3, 0x4, 0x4, 0x3}, {0x4, 0x3, 0xc, 0x8}]}) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r3 = syz_io_uring_setup(0x5c2, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x4}, &(0x7f00000001c0)=0x0, &(0x7f0000000580)=0x0) fchown(0xffffffffffffffff, 0xffffffffffffffff, 0xee01) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000080)=0xfffffff8, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f00000004c0)=@IORING_OP_TIMEOUT={0xb, 0x18, 0x0, 0x0, 0x4, &(0x7f0000000280)={0x0, 0x989680}, 0x1, 0x40, 0x1}) io_uring_enter(r3, 0x6e2, 0x3900, 0x1, 0x0, 0xe00) rt_sigsuspend(&(0x7f0000000340)={[0x225817d05]}, 0x8) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000500)={&(0x7f0000000280)='netlink_extack\x00'}, 0x10) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@ipv6_newroute={0x30, 0x18, 0x1ef, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfe, 0xb}, [@RTA_GATEWAY={0x14, 0x5, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}]}, 0x30}, 0x1, 0x11}, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x89f1, &(0x7f0000000340)={'veth0_macvtap\x00', &(0x7f00000001c0)=@ethtool_cmd={0x3a, 0x100008, 0x0, 0x8, 0xf, 0x0, 0x3, 0xfc, 0xb8, 0x1, 0xfffffffd, 0x0, 0x0, 0xff, 0x0, 0xffffff03}}) 3.770489803s ago: executing program 0 (id=905): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) socket$nl_route(0x10, 0x3, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2000006, 0x31, 0xffffffffffffffff, 0xd0fb6000) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f00000007c0)='./file1\x00', 0x410c84, &(0x7f0000000080)={[{@nobh}, {@usrjquota}]}, 0x1, 0x77e, &(0x7f0000000a80)="$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") bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={0x0, 0xffffffffffffffff, 0x0, 0x6}, 0x18) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x81}, 0x20000080) socket(0x10, 0x803, 0x0) gettid() timer_create(0x0, 0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, 0x0, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r1 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) bind$nfc_llcp(r1, &(0x7f0000000240)={0x27, 0x0, 0x0, 0x4, 0x0, 0x3, "e88509de7f1939e8abff005597c8ef039a5be42200", 0x13}, 0x60) listen(r1, 0x0) accept4$nfc_llcp(r1, 0x0, 0x0, 0x0) r2 = perf_event_open(&(0x7f00000004c0)={0x2, 0x80, 0xfe, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4, 0x4}, 0x40db, 0x0, 0x4, 0x8, 0xa, 0x100, 0x0, 0x0, 0x0, 0x0, 0x2000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x40082406, &(0x7f0000000000)='cpu<=0||!') r3 = open(&(0x7f00000005c0)='./bus\x00', 0x64842, 0x0) socket(0x15, 0x2, 0xfffffffc) pwritev2(r3, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0x76200}], 0x1, 0x7c00, 0x0, 0x3) 3.575655526s ago: executing program 5 (id=906): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x3000046, &(0x7f0000000080)={[{@delalloc}, {@data_err_abort}, {@discard}, {@dioread_lock}, {@data_err_ignore}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x4007b1}}, {@data_err_ignore}, {@grpquota}, {@dax_inode}, {@user_xattr}, {@bh}, {@dioread_nolock}]}, 0x1, 0x553, &(0x7f0000000a40)="$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") r0 = openat$selinux_create(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000340)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x9, 0x4, 0x7ffc0002}]}) bpf$MAP_CREATE(0x0, 0x0, 0x48) sendmmsg$inet(0xffffffffffffffff, &(0x7f00000017c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x84) preadv(r1, &(0x7f0000000000)=[{&(0x7f0000000080)=""/242, 0xf2}], 0x1, 0x2, 0x2) socket$inet(0x2, 0x2, 0x0) writev(0xffffffffffffffff, &(0x7f0000000300)=[{&(0x7f00000001c0)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000d000000000000060400", 0x32}], 0x1) r2 = gettid() timer_create(0x1, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) ioctl$PPPIOCNEWUNIT(0xffffffffffffffff, 0xc004743e, &(0x7f0000000300)=0x2) ioctl$PPPIOCSACTIVE(0xffffffffffffffff, 0x40047459, &(0x7f0000000080)={0xfffffffffffffe43, 0x0}) read(0xffffffffffffffff, 0x0, 0x0) write$selinux_create(r0, &(0x7f0000000340)=@objname={'system_u:object_r:urandom_device_t:s0', 0x20, 'system_u:system_r:kernel_t:s0', 0x20, 0x10000, 0x20, './file0\x00'}, 0x61) r3 = open(&(0x7f0000000000)='./file1\x00', 0x109042, 0x7a) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=@ipv6_newrule={0x54, 0x20, 0x1, 0x70bd28, 0x25dfdbfe, {0xa, 0x20, 0x20, 0x84, 0x7f, 0x0, 0x0, 0x6, 0x10009}, [@FRA_DST={0x14, 0x1, @mcast1}, @FRA_SRC={0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, @FIB_RULE_POLICY=@FRA_IP_PROTO={0x5, 0x16, 0x87}, @FIB_RULE_POLICY=@FRA_DPORT_RANGE={0x8, 0x18, {0x4e20, 0x4e22}}]}, 0x54}, 0x1, 0x0, 0x0, 0x20008005}, 0x40) r5 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) setsockopt$inet6_tcp_TCP_ULP(r3, 0x6, 0x1f, &(0x7f0000000140), 0x4) sendmsg$netlink(r5, &(0x7f0000000040)={0x0, 0x28, &(0x7f0000000000)=[{&(0x7f00000001c0)=ANY=[@ANYBLOB="d824000028000100020000080000000003"], 0x24d8}], 0x1}, 0x40004) 3.516110687s ago: executing program 5 (id=907): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b70300000000a999850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000a40)=ANY=[@ANYBLOB="040100000101030000000000000000000a00000220000280060003400003000006000340080000000c000280050001002100000058000e8006000340000400000c00028005000100000000000c00028005000100060000002c00018014000300ff02000000000000000000000000000114000400fe8000000000000000000000000000aa06000340000000006c0002800c0002800500010011000000140001800800010064010101080002000a010100060003400004000006000340000300002c000180140003"], 0x104}, 0x1, 0x0, 0x0, 0x840}, 0x804) syz_read_part_table(0x1060, &(0x7f0000000000)="$eJzsz81NwzAABeDnBIeECyOwBhsgBmACJAZgAX6WQeLS5Xqs5KpOpG7Q9vB9Bz/L9rPlcFXzaRjvnkum9pW8Pm7r+48eY4ae9ScZynfyNCVp9736V9ezdU4rW+9l+V36fLfedGjv68ZnSqaknF+tD3n7v9hHAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOCGHQMAAP//BZgNAQ==") bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000400)='kfree\x00', r0}, 0x10) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000100)=ANY=[@ANYBLOB="020300030c00000000000000000000000100090000000000030006006c0000000200000000000000000000000000800002000100000000000002060b00000000030005000000000002000000000000000000000000000000010018"], 0x60}, 0x1, 0x7}, 0x0) r3 = socket$nl_rdma(0x10, 0x3, 0x14) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}, 0x0, 0x0, 0x0, 0x8, 0x0, 0x1}, 0x0, 0xfffffeffffffffff, 0xffffffffffffffff, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r6}, &(0x7f0000000180), &(0x7f00000001c0)=r5}, 0x20) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000010c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x23, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r7}, 0x10) r8 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$UHID_CREATE2(r8, 0x0, 0x8) splice(r3, 0x0, r4, 0x0, 0x2, 0x0) fcntl$setpipe(r4, 0x407, 0x906) ioctl$sock_qrtr_TIOCINQ(r4, 0x541b, 0x0) write$P9_RLCREATE(r4, &(0x7f0000001080)={0x18, 0xf, 0x2, {{0x1, 0x3, 0x1}, 0x80}}, 0x18) 3.443951448s ago: executing program 1 (id=908): socket$qrtr(0x2a, 0x2, 0x0) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000440)={r0}, 0x4) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00'}, 0x10) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSSOFTCAR(r1, 0x5453, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000800)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000800000085000000b600000095"], &(0x7f00000007c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94) add_key$keyring(&(0x7f00000001c0), &(0x7f0000000180)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff) r4 = bpf$MAP_CREATE(0x0, 0x0, 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB, @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r5}, 0x10) bpf$TOKEN_CREATE(0x24, &(0x7f00000002c0)={0x0, r5}, 0x8) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000660000000000"], 0x0, 0x7ff, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f00000004c0)='mm_page_free\x00', r6, 0x0, 0x178}, 0x18) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000480)='kfree\x00', r2}, 0x18) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000340)={'bridge0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=@getchain={0x24, 0x11, 0x1, 0x2000000, 0xfffffffe, {0x0, 0x0, 0x0, r9, {0xe}, {}, {0xfff3}}}, 0x24}}, 0x0) 3.267204651s ago: executing program 3 (id=909): r0 = socket$inet6(0xa, 0x3, 0x5) setsockopt$inet6_int(r0, 0x29, 0x10, &(0x7f0000000000)=0x1, 0x48) sendmmsg(r0, &(0x7f0000001a00)=[{{&(0x7f0000000180)=@l2tp6={0xa, 0x500, 0x80000, @remote, 0x0, 0x3}, 0x80, 0x0}, 0x5b4}], 0x1, 0xb00) r1 = socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f0000000240)={0x2, 0x80, 0x25, 0x3, 0x0, 0x0, 0x0, 0x0, 0x800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x100}, 0x510d, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff7}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@newtaction={0x64, 0x30, 0x1, 0x0, 0x0, {}, [{0x50, 0x1, [@m_vlan={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_VLAN_PARMS={0x1c, 0x2, {{0x5, 0x0, 0x0, 0x80000008, 0x8}, 0x4}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x64}}, 0x0) r2 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCSSOFTCAR(r2, 0x541a, &(0x7f0000000000)=0x81d) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000005c00)={&(0x7f0000000000)=@newtaction={0xa0, 0x30, 0x9, 0x70bd25, 0x0, {}, [{0x8c, 0x1, [@m_bpf={0x88, 0x1, 0x0, 0x0, {{0x8}, {0x60, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_OPS_LEN={0x6, 0x3, 0x7}, @TCA_ACT_BPF_OPS={0x3c, 0x4, [{}, {}, {0x6}, {}, {0x0, 0x0, 0xfe}, {}, {0x3}]}, @TCA_ACT_BPF_PARMS={0x18, 0x2, {0x0, 0x200000}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa0}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000580)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000001000000018110000", @ANYRES32=r3, @ANYRES8=r3], 0x0, 0x0, 0x0, 0x0, 0x0, 0xb, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f00000004c0)='mm_page_free\x00', r5, 0x0, 0x178}, 0x18) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x300000c, 0x50032, 0xffffffffffffffff, 0x0) r6 = gettid() socket$nl_xfrm(0x10, 0x3, 0x6) perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x68, 0x0, 0x0, 0x0, 0x0, 0x1000000, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x1, @perf_config_ext={0x7, 0xfffffffffffffffc}, 0x103200, 0x1, 0x840000, 0x5, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r7 = io_uring_setup(0x4d1c, &(0x7f00000001c0)={0x0, 0x800000, 0x0, 0x400000, 0x137}) close_range(r7, 0xffffffffffffffff, 0x0) process_vm_writev(r6, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0x7ffff000}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xffffff4e}], 0x23a, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) 3.266268691s ago: executing program 1 (id=910): r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, @perf_config_ext={0x0, 0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r1}, &(0x7f0000000180), &(0x7f00000001c0)=r0}, 0x20) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYRESDEC, @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000023"], 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1a"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) syz_mount_image$ext4(0x0, &(0x7f0000000140)='./file0\x00', 0x2000000, 0x0, 0x0, 0x0, &(0x7f0000000000)) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000300)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f0000000600)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r4}}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000500)='percpu_free_percpu\x00', r2}, 0x10) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000500)='percpu_free_percpu\x00', r5}, 0x10) 3.192214602s ago: executing program 3 (id=911): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x0, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = socket$inet6(0xa, 0x3, 0xff) r2 = syz_io_uring_setup(0x5c2, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x4}, &(0x7f0000000300)=0x0, &(0x7f0000000580)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffff8, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f00000004c0)=@IORING_OP_TIMEOUT={0xb, 0x18, 0x0, 0x0, 0x4, &(0x7f0000000280)={0x0, 0x989680}, 0x1, 0x40, 0x1}) io_uring_enter(r2, 0x6e2, 0x3900, 0x1, 0x0, 0xe00) rt_sigsuspend(&(0x7f00000002c0)={[0x225c17d03]}, 0x8) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r6 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0100000004000000e27f000001"], 0x50) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002300000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r8}, 0x10) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000180)={'syzkaller0\x00', 0x7101}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000580)='sched_switch\x00', r5}, 0x10) connect$inet6(r1, &(0x7f0000000200)={0xa, 0x0, 0x0, @empty}, 0x1c) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x41, &(0x7f0000000000)=0x659f, 0x4) write$binfmt_script(r1, &(0x7f00000000c0), 0x28) mount_setattr(r0, &(0x7f00000001c0)='./file0\x00', 0x8000, &(0x7f0000000280)={0x7, 0x74, 0x20000}, 0x20) r9 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000000001000000000000000000851000000600000018000000", @ANYRES32, @ANYBLOB="00000000000100006608000000000000180000000000000000000000000000009500000000000000360a020000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b50a000000000000850000000600000095"], &(0x7f0000000000)='GPL\x00', 0xa, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000a80)='kfree\x00', r9, 0x0, 0xfffffffffffffffd}, 0x18) r10 = openat$selinux_relabel(0xffffffffffffff9c, &(0x7f00000003c0), 0x2, 0x0) write$selinux_access(r10, &(0x7f00000004c0)=ANY=[@ANYBLOB="73797374656d5f753a6f626a6563745f723a7570647077645f657865635f742073797374656d5f753a73797374656d5f723afaffffffffffffff3a73302030"], 0x56) 3.096326823s ago: executing program 4 (id=912): r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r0}, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet_udp(0x2, 0x2, 0x0) r2 = socket$packet(0x11, 0x3, 0x300) r3 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000340)={'veth1_to_bridge\x00', 0x0}) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x20, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x8e7, @void, @value}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r6}, 0x10) setsockopt$XDP_UMEM_REG(0xffffffffffffffff, 0x11b, 0x4, &(0x7f0000000080)={0x0, 0x0, 0xc00, 0x0, 0x1}, 0x20) r7 = socket$nl_route(0x10, 0x3, 0x0) bind$packet(r3, &(0x7f0000000080)={0x11, 0x4, r4, 0x1, 0x6}, 0x14) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x5, &(0x7f00000000c0)=ANY=[@ANYBLOB="180000001400000000000000ff000000850000000e000000850000000700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) io_setup(0x1, 0x0) io_destroy(0x0) io_setup(0x55, &(0x7f0000001400)) io_cancel(0x0, &(0x7f0000001b40)={0x0, 0x0, 0x0, 0x8, 0xc0c, 0xffffffffffffffff, 0x0, 0x0, 0x3c5a}, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r1, 0x81f8943c, &(0x7f0000000b80)) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r2, 0x81f8943c, &(0x7f0000000d80)) sendmsg$nl_route_sched(r7, &(0x7f00000003c0)={0x0, 0x300, &(0x7f00000007c0)={&(0x7f0000000780)=@getchain={0x24, 0x11, 0x1, 0x70bd2c, 0x25dfdbff, {0x0, 0x0, 0x0, r4, {0xd}, {0xfff1, 0xfff2}, {0x0, 0xe}}}, 0x24}}, 0x40000) 2.286434616s ago: executing program 3 (id=913): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bf"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x3f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0x4, &(0x7f0000000200)=@framed={{0x18, 0x2, 0x0, 0x0, 0x7f}, [@call={0x85, 0x0, 0x0, 0x27}]}, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000400)={r1, 0x18000000000002a0, 0xe, 0x0, &(0x7f00000003c0)="b9ff030768442650e04e7a8c09a5", 0x0, 0x0, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r0}, 0x10) openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x1b, 0x10, &(0x7f0000000580)=@framed={{0x18, 0x5}, [@snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r2}, {0x7, 0x0, 0xb, 0x4}, {0x85, 0x0, 0x0, 0x95}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000180)='inet_sk_error_report\x00', r3, 0x0, 0x5}, 0x18) bpf$MAP_CREATE(0x0, &(0x7f0000000480)=@base={0x21, 0x0, 0x0, 0x100000, 0x400, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x2000000, 0x0, 0x200000000000000, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0x1fffffffffffffcd, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020702500000000002020207b0af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007200000095"], 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020097b1af8ff"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x34, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x80000000, @void, @value}, 0x94) r4 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x1403, 0x1, 0x70bd2c, 0x25dfdbfc}, 0x10}, 0x1, 0x0, 0x0, 0x44}, 0x810) sendmsg$RDMA_NLDEV_CMD_SET(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000280)={0x18, 0x1402, 0x1, 0x70bd2c, 0x25dfdbfd, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x18}, 0x1, 0x0, 0x0, 0x4000801}, 0x800) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0xc, 0x0, &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) socket$packet(0x11, 0x2, 0x300) setitimer(0x1, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0x3, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r5 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r5, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) connect$inet(r5, &(0x7f0000000280)={0x2, 0x0, @remote}, 0x10) 2.285508366s ago: executing program 4 (id=914): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000008da4b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000100)='kfree\x00', r0}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, 0x0, &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000040)='./file1\x00', 0x2000c0, &(0x7f00000005c0), 0x1, 0x54e, &(0x7f0000000600)="$eJzs3U1oHOUbAPBnZrPtv23+pgUFlR6KChVKN0k/tHpKr2Kh0IPgpS6bbQjZZEN2U5uQQ3ovYkFR6aXe9OBR8eBBvHj06kXxLIgGhaYHiUx2N/1Isq61ydbO7wezfT+GPu+bmWey7zBDAsitI9lHGvFMRJxPIobu6huIdueR1n6rK0uV2ytLlSTW1i78mkQSEbdWliqd/ZP2vwciYjkino6Ib4oRx9LNcRsLi1PlWq06164PN6dnhxsLi8cnp8sT1YnqzMmXXzl95tTp0ROjD22u1368/s617167ef3Tzw4vV94vJzEWg+2+u+fxMLV+JsUYu6/91E4E66Ok3wPggRTaeV6MiKdiKArtrAcef2t7I9aAnErkP+RU53tAtv7tbLv5/eOXs60FSBZ3tb21egZa9ybif+trk/2/J/esTLL15sHdHCiPpeWrETEyMLD5/E/a59+DG3kYA2RHfX22daA2H/904/oTW1x/Bjv3Tv+lzvVvddP17078wjbXv/M9xvjzzZ8+2jb+1Yhnt4yfbMRPtoifRsRbPca/8caXZ7brW/s44mhsHb8j6X5/ePjSZK060vrcMsZXRw+/2m3++7eJP9Zl/lnbbI/z/+Lbz59b7hL/xee7H/+t4u+LiHd7jH/o1ievb9eXxR/fZv7d4mdtN3uM/9LYkR963BUAAAAAAAAAAPgH0vVn2ZK0tFFO01Kp9Q7vk7E/rdUbzWOX6vMz461n3g5GMe08aTXUqidZfbT9PG6nfuK++smIOBQR7xX2rddLlXptvN+TBwAAAAAAAAAAAAAAAAAAgEfEgfve//+j0Hr/H8gJf/Ib8kv+Q37dm/9J38YB7D6//yG/5D/kl/yH/JL/kF/yH/JL/kN+yX/IL/kPAAAAAAAAAAAAAAAAAAAAAAAAAAA74vy5c9m2dntlqZLVxy8vzE/VLx8frzamStPzlVKlPjdbmqjXJ2rVUqU+/Xf/X61enx2Jmfkrw81qozncWFi8OF2fn2lenJwuT1QvVou7MisAAAAAAAAAAAAAAAAAAAD4bxlc35K0FBHpejlNS6WI/0fEwSgmlyZr1ZGIeCIivi8U92b10X4PGgAAAAAAAAAAAAAAAAAAAB4zjYXFqXKtVp1T2FyIiOVHYBgKCn05+QEAAAAAAAAAAAAAAAAAgF1156Xffo8EAAAAAAAAAAAAAAAAAAAA8iz9OYmIbDs69MLg3T17I2JPslrIynsi4u0bFz64Um4250az9t822psftttP9GsOQC86edrJYwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOCOxsLiVLlWq87tYKHfcwQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAB4EH8FAAD//46R2W8=") bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000006"], 0x48) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x34120, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) set_mempolicy(0x4005, &(0x7f0000000080)=0x7e, 0x9) syz_clone(0x2c9a4080, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="05000000040000009900000001"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r3}, 0x18) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) io_uring_register$IORING_REGISTER_RESTRICTIONS(0xffffffffffffffff, 0xb, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000640)=@newtaction={0x2aa8, 0x30, 0x1, 0x70bd29, 0x25dfdbff, {}, [{0x2a94, 0x1, [@m_pedit={0x2a90, 0x1a, 0x0, 0x0, {{0xa}, {0x2a64, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS_EX={0xe20, 0x4, {{{0x5f7, 0x8b60, 0x5, 0x101, 0x88}, 0x65, 0x6}, [{0xfff, 0x6, 0x3, 0x7, 0x5, 0xa92}, {0x65a, 0x2, 0x0, 0x1, 0x1, 0x1}, {0x7, 0x8, 0x8001, 0x2, 0x1, 0x9}, {0x10, 0x7, 0xfffff000, 0x6f30, 0xf}, {0x7, 0x9, 0x4, 0x1caece98, 0xf, 0xefcf}, {0x48a0, 0xb, 0x200, 0x9, 0x7f, 0x7}, {0x1, 0x7, 0x81, 0x800, 0x4, 0x3}, {0x6, 0x9e, 0x4, 0x400, 0x8}, {0x4, 0x8, 0x3, 0xa, 0x5, 0xa99c}, {0x4, 0xfc, 0x8, 0x7, 0x5}, {0x5, 0x2, 0x7, 0xffffc8e1, 0x35a59efd, 0x400}, {0x6, 0x5, 0x4, 0xfffffff7, 0x1739, 0xffffff00}, {0x6, 0x9, 0x4, 0x7ff, 0x2, 0x7}, {0x7ff, 0xfffffffb, 0x0, 0x8, 0x22e8, 0x80}, {0x1, 0x9, 0xf, 0x7f2b, 0x5, 0x2}, {0x1, 0x6, 0x3, 0xfff, 0xf19, 0x4}, {0x9, 0x80000001, 0x3, 0xa124, 0xb6, 0x2}, {0x401, 0x1, 0x5, 0x8, 0x485, 0x4}, {0x8001, 0x5, 0x0, 0xfffffc00, 0x1, 0x9}, {0x12fb, 0x9, 0x8, 0x10f, 0x0, 0x3}, {0xfffffff8, 0x1, 0x1, 0x2, 0x1, 0x6}, {0x5, 0x8, 0x8, 0x0, 0xfffffffb, 0x9}, {0x0, 0x8, 0x9, 0x6, 0x3, 0x97}, {0x813, 0x5d8, 0x8, 0x8, 0x9, 0x1}, {0x4, 0x9, 0x8, 0x4, 0x2, 0x1}, {0x1, 0x0, 0x7fff, 0xfffffff8, 0x4, 0xfffffff0}, {0xe79, 0x7, 0x7ff, 0x5, 0x0, 0x5}, {0xc2d7, 0x400, 0x6, 0x5, 0x0, 0x2}, {0xfffffffd, 0x2, 0x5, 0xfc, 0xfffffff5, 0xfffffc00}, {0x5, 0xfff, 0x1524, 0x0, 0x7, 0xfff}, {0x6, 0x0, 0x155c, 0x7, 0x7}, {0x2, 0x1, 0xfffffff7, 0x5, 0xfffffff7, 0x7fff}, {0x2, 0x6d48, 0x1, 0x8, 0xf, 0x7}, {0x1, 0x4, 0x7341, 0xd, 0x8936}, {0x1, 0x5, 0x1, 0x3, 0xa0, 0xb285}, {0x7fffffff, 0x0, 0x4, 0xbb, 0x8, 0xfffffff8}, {0x2, 0x5, 0x6, 0x1, 0x9}, {0x8, 0x4, 0x30, 0x200, 0x2, 0x7}, {0x3, 0x3ff, 0xe, 0x0, 0xafbe, 0x3c0a}, {0x80000000, 0x3, 0x1, 0x1, 0x891f, 0x4}, {0x9, 0x80000000, 0x74, 0x9, 0x1, 0x99}, {0x9, 0x1, 0x0, 0x10001, 0x3ff, 0x7fff}, {0x9, 0xffff, 0x5ef7, 0x5, 0x3, 0x6}, {0x5, 0x19, 0x0, 0x0, 0x401, 0x500000}, {0x2, 0x1, 0x9, 0x489a, 0x2, 0xb}, {0x80000000, 0x0, 0x4, 0x4, 0x5, 0x1}, {0x0, 0x4, 0x2, 0x5, 0x3, 0x8f}, {0xffffffff, 0x45, 0xffff, 0x7, 0x5, 0x9}, {0x1, 0x0, 0x401, 0x4, 0xa32, 0x401c}, {0x5, 0x1000, 0xfffffff9, 0x1b00000, 0x0, 0xd7}, {0xbfb1, 0x2, 0x2, 0xcb3, 0x6f8, 0x7}, {0x3, 0xe70, 0xd1d, 0x4, 0x4, 0x5}, {0xc7, 0x5, 0x5, 0x9, 0x3, 0x7}, {0x34, 0x88, 0x1e97d19c, 0x2, 0x8, 0x40}, {0x11a5, 0x1, 0x10000, 0x3, 0x3, 0x1ff}, {0x8, 0x6, 0x5, 0x3, 0x1e3e4ead, 0x80000001}, {0x401, 0x6, 0x1, 0x4, 0x2, 0x4}, {0x9, 0x71cfabe7, 0x5, 0x4, 0x8, 0x9}, {0xa, 0xffff, 0x4, 0xf, 0x80, 0x9}, {0xa17, 0x1, 0x5, 0x7, 0x300000, 0xb9}, {0x5, 0x1, 0x0, 0x3, 0x9, 0x6}, {0x1, 0x2, 0xead, 0x4, 0x4, 0x3}, {0x6, 0xffffffff, 0x9, 0x7, 0xe8, 0xb76}, {0x7, 0xe, 0x2, 0xac, 0x10001, 0x5a4}, {0x1, 0x0, 0x9, 0x3, 0x7ff, 0x100}, {0x9, 0x1, 0xfffffe01, 0x8, 0x8, 0x6}, {0x10000, 0x2, 0x8, 0x0, 0x9, 0x940}, {0x21db, 0x4, 0x40000000, 0xa1, 0x96, 0x7}, {0x581ba20a, 0x9, 0x0, 0x83, 0x4, 0x4}, {0xd, 0xe3, 0x0, 0x19c3, 0x6, 0xffffffff}, {0x7ff, 0xe00000, 0x2, 0x6, 0x5d, 0x6}, {0xfff, 0x0, 0x4, 0xfffffbff, 0x3, 0x2}, {0x9f, 0x5, 0x10, 0x280000, 0x800, 0x4}, {0xf, 0x80000001, 0xffffffb2, 0x2b, 0x5, 0x2}, {0x6, 0x8, 0x7, 0x6e6, 0xe9}, {0x10000, 0xfffffff8, 0xb78, 0x4, 0x4, 0x6}, {0x1, 0xfffffffb, 0x3ff, 0x1, 0xade, 0x7ff}, {0x6, 0x2, 0xfffffff7, 0x7, 0x2, 0x7f}, {0x6, 0xf590, 0x80, 0x1, 0x8001, 0x4}, {0x6, 0x2, 0x480, 0x79, 0x9, 0x6}, {0x1, 0x3d40, 0x7, 0x46d, 0x8, 0xd}, {0x7, 0x2, 0x1, 0x9, 0x84c4, 0x9}, {0x2756, 0x400, 0x4, 0x2, 0x0, 0x1}, {0xffffffff, 0xe, 0x1, 0xa8, 0x2, 0x7fffffff}, {0x2, 0x1, 0x3, 0x3, 0x4, 0x9}, {0x3b7, 0x3, 0x2, 0x7, 0x2, 0x8}, {0x5, 0x8001, 0x81, 0x56, 0x9, 0x7}, {0x1, 0x0, 0x7ff, 0x3, 0x8, 0x3}, {0x2e73, 0x1f, 0xdb72, 0x7c365bee, 0x8, 0x3}, {0x8001, 0x5, 0x6, 0x7, 0x1, 0x9}, {0xffff2508, 0x2, 0x101, 0x100, 0x0, 0x6}, {0x38f5, 0xffff8000, 0x81, 0x9, 0x7, 0x8}, {0x7, 0x9, 0x9, 0x80000001, 0x3ff, 0x101}, {0x413d22a0, 0x1, 0xb65c, 0x7, 0x81, 0x4}, {0xa, 0x95, 0x101, 0x4, 0x0, 0x5}, {0x1ff, 0x20, 0x8, 0x5592, 0x9, 0x100}, {0x4, 0x9, 0x81, 0xfffffff8, 0x7, 0xe86}, {0x3, 0x6, 0xd, 0x1, 0x4, 0x3}, {0xe, 0x9958, 0x81, 0xfffffff0, 0x1, 0x5}, {0x0, 0x7, 0xfffff07c, 0x845, 0xfff}, {0x0, 0xfffffff9, 0x6, 0x8, 0x5, 0x5}, {0x4, 0x7, 0x9, 0x330a, 0x4, 0x8}, {0x30f0a026, 0x8, 0x4, 0x7, 0x6, 0xff}, {0x7, 0x0, 0x3800000, 0x8, 0x4cc0c7e8, 0x3}, {0xb1, 0x2, 0x98, 0x8001, 0x80000001, 0x1}, {0x200, 0x9, 0xfffffffb, 0x7, 0x800, 0x8}, {0x6, 0xe, 0x23, 0xf, 0xd9, 0x5}, {0x400, 0x9, 0x100, 0x8, 0x100}, {0x0, 0x0, 0xe, 0x0, 0x4, 0x7b}, {0x92e, 0x400, 0xffffff01, 0x2d, 0xc07, 0x400}, {0x4, 0x4, 0xc76, 0x7, 0x8, 0x558b}, {0x4, 0x9, 0x2bc, 0xa0, 0x3ff, 0x2}, {0x6, 0x1, 0x5, 0x2, 0x7, 0x7f}, {0x3, 0x49a, 0x2, 0x2, 0x4, 0x10}, {0x2, 0x7, 0x9, 0x5, 0x6}, {0x63f024bb, 0xa0, 0x5, 0x3, 0x8, 0x7b}, {0x1, 0x10001, 0x81, 0x9, 0x5, 0x7}, {0x5, 0x1ff, 0x1, 0x7, 0x8000, 0xa457}, {0xc, 0x9, 0xffffff00, 0x605, 0x0, 0x774}, {0x4, 0x5, 0x8, 0x400, 0x5d85, 0x9}, {0x4, 0x2, 0x10001, 0x7, 0x0, 0x10000}, {0x9, 0x2, 0x9, 0x9, 0x1, 0x79f}, {0x6, 0x8, 0x1, 0x2, 0x0, 0xffff8001}, {0x100, 0x9, 0x4, 0x8, 0x7, 0xd2f}, {0xfffffeff, 0x4, 0x30, 0x2a, 0x6, 0x2}, {0x5, 0x3, 0x0, 0x35, 0x9, 0x9e}, {0x9, 0x5, 0xe2, 0x5, 0x0, 0x1}, {0x4, 0xa, 0x0, 0x3, 0x8}], [{0x3, 0x1}, {0x1, 0x1}, {0x1, 0x1}, {}, {0x1, 0xbd8a62aa819b833a}, {0x0, 0x1}, {}, {0x0, 0x1}, {0x5}, {0x4}, {0x3, 0x1}, {0x2}, {0x0, 0x1}, {0x4}, {0x4}, {0x3, 0x1}, {0x4}, {0x4}, {0x1}, {0x1}, {0x5}, {0x2, 0x1}, {0x4}, {0x5}, {0x1}, {0x1, 0x1}, {0x0, 0x1}, {0x1}, {0x1}, {}, {0x2}, {0x4, 0x1}, {0x2}, {0x1, 0x1}, {0x4}, {0x1}, {0x5}, {0x6, 0x1}, {}, {0x2}, {0x3, 0x1}, {0x3, 0x1}, {0x0, 0x1}, {0x5, 0x1}, {0x4, 0x1}, {0x5}, {0x1, 0x1}, {0x5, 0x1}, {0x3, 0x1}, {0x3, 0x1}, {0x3, 0x1}, {0x1, 0x1}, {0x4}, {0x3, 0x1}, {0x1}, {0x5}, {}, {0x4, 0x1}, {0x5}, {0x1}, {}, {0x1, 0x1}, {0x3, 0x1}, {0x60acfaa94dc96dc1, 0x1}, {0x3, 0x1}, {0x1}, {0x4}, {0x2, 0x1}, {0x4}, {0x3, 0x1}, {0x5, 0x1}, {0x6}, {0x3, 0x1}, {}, {0x4}, {0x5, 0x1}, {0x2, 0x1}, {0x1, 0x1}, {0x5}, {0x4, 0x1}, {0x3, 0x1}, {0x5, 0x1}, {}, {0x1, 0x1}, {0xa}, {0x5, 0x1}, {0x5, 0x1}, {0x4, 0x1}, {0x5}, {0x7}, {0x9293fc9a996600a2, 0x1}, {0x3}, {0x4}, {0x5}, {0x4}, {0x2}, {0x5}, {0x7}, {0x0, 0x1}, {0x5}, {0x0, 0x1}, {0x0, 0x1}, {}, {0x5, 0x1}, {0x3, 0x1}, {0x2}, {0x0, 0x1}, {}, {0x0, 0x1}, {0x1, 0x1}, {0x7}, {}, {0x7}, {0x5}, {0x3}, {0x5, 0x1}, {0x1, 0x1}, {0x3, 0x1}, {0x5}, {0x2}, {}, {0x3, 0x1}, {0x4}, {0x5, 0x1}, {0x1}, {0x3, 0x1}, {0x1}], 0x1}}, @TCA_PEDIT_PARMS={0xe20, 0x2, {{{0x1ff, 0x100, 0x10000000, 0x55, 0x8000}, 0x9, 0x7}, [{0xdd, 0xffff9bcb, 0x0, 0x8, 0x40}, {0x10, 0x400, 0x1, 0x89, 0xe, 0xf}, {0x9, 0xbc, 0x15, 0x3, 0x23b0, 0x4}, {0x3, 0x3, 0x6, 0x80000001, 0x4, 0x236}, {0x4, 0x1, 0xb3, 0x4, 0x2, 0x101}, {0x5, 0x6, 0xfe2a, 0x2, 0x4d8, 0x6}, {0x6, 0x3, 0x2, 0x9, 0x6, 0x8}, {0xfff, 0x9, 0x9, 0x5, 0x3, 0x8001}, {0x0, 0x7, 0xfff, 0x8b9, 0x6, 0x7}, {0x80000001, 0x6, 0xfffff75c, 0x2262, 0x80, 0x4}, {0xfffffffa, 0xa, 0x7f, 0x8, 0x7, 0x2}, {0x8, 0x2, 0x80000001, 0x1, 0x1, 0x1}, {0xffff, 0x9, 0x1, 0xb, 0x2, 0xff}, {0xffffffff, 0x6, 0x3, 0xffffffff, 0x200}, {0x101, 0x5, 0x6, 0x4, 0xfffffffa, 0x7}, {0x0, 0x80, 0x71d3, 0x459, 0x6, 0xfffffffc}, {0x81, 0x3d7, 0x2, 0x9, 0x4, 0x5}, {0xfffffffc, 0x0, 0x6, 0x1000, 0x4, 0x1000}, {0x1, 0xdf7, 0x0, 0x3, 0x80, 0x3}, {0x5, 0xb, 0x47, 0x3, 0x7, 0x9}, {0xb2ac, 0xebe, 0x7df, 0xfffff001, 0x80, 0x539e}, {0x3, 0x10000, 0x7ff, 0xc4, 0x9, 0x7b1a}, {0x6, 0x9, 0x5cb, 0xfffffff9, 0x33c3, 0xfff}, {0x5, 0xffff9448, 0x8001, 0x7, 0x0, 0x471f83e2}, {0x7f7, 0xcba, 0x100, 0x3, 0xd, 0x5}, {0x6, 0x0, 0xffff, 0x3, 0x40, 0x946}, {0xf535, 0x10000, 0x2, 0x7, 0x6, 0x8000}, {0xffffff7b, 0x8, 0x2, 0x90000000, 0xfa, 0x2}, {0x6, 0x3, 0xc, 0x3, 0x5}, {0x2, 0x2, 0x548fb84d, 0xfffffffb, 0x9, 0x2}, {0x4, 0x0, 0x6, 0xe5, 0x80000000, 0x4}, {0xc2, 0x7ff, 0xb, 0x0, 0x4, 0x66}, {0x7, 0x30b, 0xfffffffe, 0x21, 0x5, 0x1}, {0x3f, 0x9, 0xffff, 0xffff, 0x3, 0x1}, {0x0, 0x0, 0xffff, 0x5, 0x5, 0x9ed9}, {0xffffffff, 0x8, 0x9, 0x6, 0x1, 0x2}, {0x8, 0x4, 0x17b3, 0x3, 0x4, 0x2e}, {0x3, 0x6, 0xfa, 0x2, 0x2, 0x6}, {0x2, 0x5, 0x3, 0x9, 0x63c9, 0xf5c}, {0x3, 0xffff, 0xae2c, 0xfffffffc, 0x9, 0x5}, {0x4, 0x3, 0x6, 0x4, 0xd4c, 0x9a}, {0x1, 0x4f, 0x10001, 0x3, 0x9, 0x6}, {0x6, 0x75, 0x8, 0x2, 0x101, 0x7}, {0x0, 0x4f, 0xff, 0x3, 0xc4a6, 0x2}, {0x6, 0x32000000, 0xff, 0x1000, 0x2, 0xffffffff}, {0x0, 0x6, 0x7, 0x6, 0x5, 0x1}, {0x6, 0x9, 0xffff, 0x6, 0x1, 0xb4}, {0x0, 0x1, 0xfbd1, 0x8, 0x5, 0x3}, {0x0, 0x200000, 0x7ff, 0x6, 0x6, 0xfffffffe}, {0x3, 0x8, 0x3, 0x3, 0x8, 0x5}, {0xfffffffb, 0xfff, 0xf, 0x2, 0x1, 0x4}, {0x6, 0x7f, 0x4, 0x4, 0x5, 0x10001}, {0x7, 0x6, 0xffffffff, 0x80000001, 0x400, 0x10001}, {0x100, 0x401, 0x9, 0xfffffffd, 0x4, 0x3}, {0x2, 0xfad, 0xa, 0x2, 0x7f, 0xa}, {0xa, 0x1, 0x7, 0x0, 0x21f, 0x2}, {0x1d2, 0x6, 0xd, 0x6, 0x9, 0x9}, {0x0, 0xfffffffb, 0x1, 0x7ff, 0xb52, 0x3}, {0x80000001, 0x101, 0x5, 0x7, 0x1000, 0xbc78}, {0x6, 0x8, 0x6, 0x3, 0x2, 0x3}, {0x7, 0xd, 0x0, 0xfffffffc, 0x7fff, 0xffff}, {0xca9, 0x7f, 0x5, 0x3, 0x9, 0xffffffff}, {0x4, 0x2, 0x101, 0x8, 0x6, 0xe6}, {0x9, 0xfffffac5, 0x0, 0x7, 0x8, 0x8000}, {0x1, 0x7, 0x1, 0x0, 0xcc, 0xff}, {0x400, 0xc, 0x7, 0x3, 0x100, 0x8}, {0x8001, 0x2e, 0x4, 0x400, 0x3, 0x800}, {0x5, 0x2, 0xe9, 0x7, 0xc}, {0x7ff, 0x5, 0x0, 0x5, 0x800, 0x1ff}, {0x1, 0x3, 0x9, 0x3ff, 0x4026944d, 0x9}, {0x8, 0x1, 0x4, 0x0, 0x8, 0x3}, {0x9, 0x4, 0x10000, 0x1, 0x3, 0x2}, {0x4, 0x7, 0x10000, 0x6, 0x297, 0xff}, {0x0, 0x1000, 0x4, 0x7, 0x10001}, {0x5, 0xbde, 0x5, 0x2cd78ace, 0x3, 0x8}, {0x1, 0xc6, 0x800, 0x5, 0x6, 0x40}, {0x1d47, 0x0, 0x1, 0x5, 0xffffffff, 0x11c}, {0x1, 0x162, 0xc86, 0x4, 0x2, 0x3}, {0x98f, 0x6, 0xecfd, 0x40, 0xf28, 0x7ff}, {0x5, 0x6, 0x5, 0x8, 0x2, 0x401}, {0x6, 0x40, 0x40, 0x9, 0xfffff503, 0x5f0a8000}, {0xf50c, 0x2655, 0x7f, 0x1c, 0x3, 0x9}, {0x0, 0x80, 0x4, 0x6, 0x1e7072c6, 0x1cf000}, {0xfffffff7, 0x5, 0x3ff, 0x9, 0x30}, {0xbbe5, 0x3ff, 0x7, 0x0, 0x400, 0x100}, {0x2, 0x9, 0x4, 0xec, 0x8, 0x80000001}, {0x1, 0x2, 0xd40b8fe7, 0xfb29, 0x2, 0x1d65b554}, {0x3b1b2cfe, 0x4, 0xa6, 0xc0000000, 0x401, 0xfffffff1}, {0x0, 0x7ff, 0x0, 0xffffffc0, 0x7fff800, 0x7}, {0xd, 0x5, 0x6, 0x5, 0x0, 0x10000}, {0x0, 0x6, 0x1, 0x4, 0x4, 0x4}, {0x4, 0xf0, 0x9, 0xfffffffe, 0x5}, {0x8001, 0x2ded, 0x6, 0x6, 0x7, 0x2}, {0x179, 0x2, 0xfffffffe, 0x200, 0x10000, 0x5}, {0x1, 0x1, 0x2, 0xf1e, 0x4, 0xfb6d}, {0x1, 0x6102, 0xd02, 0x5, 0xf5b, 0xf}, {0xf58, 0x3, 0x6, 0xe, 0x9, 0xffff}, {0x0, 0x9, 0x8, 0x0, 0x9}, {0x10, 0x3, 0x4, 0xa, 0xfffffff9, 0x9}, {0x6, 0x62, 0x3f3, 0x80000001, 0x5, 0x4}, {0x4, 0x81, 0x23, 0x2, 0x6, 0xff}, {0xc, 0x10, 0x7, 0x8, 0x4, 0x10001}, {0x4, 0x559ed72d, 0xcac, 0x0, 0x2, 0xffff}, {0x6, 0xe1, 0x100, 0x401, 0x200, 0x9}, {0x3a6f6741, 0xe6a4, 0x9, 0x5, 0x1, 0x4}, {0x8000, 0x6, 0x19, 0x400, 0x2, 0x8}, {0x6469c0e4, 0x0, 0x10000, 0x7, 0x0, 0x5}, {0x0, 0x9, 0x0, 0xfffffeff, 0x0, 0x3}, {0x200, 0x80, 0xa, 0x4, 0x7ca}, {0x5f, 0x3ff, 0x3ff, 0x489733aa, 0xcc, 0x10000}, {0x5, 0xba, 0x6, 0x1, 0x6, 0x10}, {0x1, 0xc, 0x7, 0x1ff, 0x53, 0x3}, {0x6, 0x2, 0xc, 0x2, 0x7f, 0x9}, {0xf0, 0x81, 0xfffffff7, 0x3, 0x3, 0x80000001}, {0xf5b, 0x7e, 0xb, 0x4, 0x9, 0x4}, {0x2f, 0x1, 0xffff491c, 0x9, 0xfffff8ec, 0x6bca}, {0x8001, 0x8, 0x3, 0x6, 0x8, 0xf}, {0x1, 0x7, 0x9, 0x2, 0xfffffffd, 0xffffffff}, {0xffff, 0x400, 0xb, 0x5, 0x8, 0xa}, {0x8001, 0x8, 0xbe, 0x6, 0x9, 0xffff7fff}, {0x5c, 0x0, 0x3b, 0x2, 0x6, 0xff}, {0x0, 0x6, 0x100, 0x1ff, 0x7fffffff, 0x8}, {0x8, 0x0, 0x8, 0xfffffff7, 0x10001, 0x722c}, {0x3f, 0x8, 0x4, 0x1, 0x7f, 0x1000}, {0x7, 0x2, 0x7, 0x8248, 0x64, 0xc}, {0x2, 0x1, 0x4, 0x0, 0x100, 0xc46a}, {0x1b0, 0x4, 0x8bdb, 0x7, 0x5, 0x1}, {0x0, 0x8981864, 0x90000, 0x3, 0x6, 0x2}], [{0x3}, {0x3}, {0x1, 0x1}, {0x5}, {0x0, 0x1}, {0x2, 0x1}, {0x2}, {0x0, 0x1}, {0x5, 0x1}, {0x1, 0x1}, {0x7}, {0x3}, {0x2, 0x1}, {0x1, 0x1}, {0x3}, {0x2, 0x1}, {0x2, 0x1}, {0x1, 0x1}, {0x4, 0x1}, {0x2, 0x1}, {0x5, 0x1}, {0x3, 0x1}, {0x3}, {0x1}, {0x1, 0x1}, {0x3, 0x1}, {0x1}, {0x4}, {0x5, 0x1}, {0x5, 0x1}, {0x2}, {0x0, 0x1}, {0x3}, {0x5, 0x3}, {0x3, 0x1}, {}, {0x5, 0x1}, {0x1, 0x1}, {0x4}, {0x3, 0x3}, {0x4}, {0x3}, {0x2}, {0x4, 0x1}, {0x5, 0x1}, {0x1, 0x1}, {0x4, 0x1}, {0x5}, {0x5, 0x1}, {0x0, 0x1}, {0x0, 0x1}, {0x1}, {0x1}, {0x5, 0x1}, {0x2, 0x1}, {0x5}, {0x1, 0x1}, {0x1}, {0x4, 0x1}, {0x1, 0x1}, {0x3}, {0x0, 0x1}, {0x2}, {0x1, 0x1}, {0x2, 0x1}, {0x4}, {0x1}, {0x2}, {0x4, 0x1}, {0x4, 0x1}, {0x1}, {0x2, 0x1}, {0x4, 0x4a04d0d0d040c9a}, {0x1, 0x1}, {0x3}, {}, {}, {0x4}, {0x5}, {0x0, 0x1}, {0x3}, {0x1, 0x1}, {}, {0x5, 0x1}, {0x3}, {0x0, 0x1}, {}, {}, {0x2, 0x1}, {0x4, 0x1}, {0x0, 0x1}, {0x0, 0x1}, {0x4}, {0x3, 0x1}, {}, {0x2, 0x1}, {0x1, 0x1}, {0x4}, {0x2}, {0x3}, {0x1}, {0x4}, {0x2}, {0x2}, {}, {0x0, 0x1}, {0x1, 0x1}, {0x3}, {0x5}, {0x5, 0x1}, {0x3, 0x1}, {0x1, 0x1}, {}, {0x4, 0x1}, {0x3}, {}, {0x5}, {0x1, 0x1}, {0x4, 0x1}, {0x3}, {0x4, 0x1}, {0x3}, {}, {0x7}, {0x2}, {}, {0x4, 0x1}, {0x5}]}}, @TCA_PEDIT_PARMS={0xe20, 0x2, {{{0x4, 0x7, 0x3, 0x7f}, 0x1, 0x2}, [{0x1, 0x5, 0x4, 0x2, 0x9, 0x3e341d61}, {0x42, 0xfffffffd, 0x8, 0x0, 0xea, 0x68000000}, {0xa8, 0x1d2, 0xe8a, 0x7d, 0x17eb, 0xb0}, {0x2, 0x100, 0x4, 0x7, 0x5}, {0x9103, 0x4, 0x5, 0x0, 0xfffff728, 0xc}, {0x3, 0x401, 0x8c, 0x6, 0x4, 0x369}, {0x4c92, 0x9, 0x2, 0x7, 0xfe07, 0x5}, {0x8f31, 0x6, 0x2, 0x101, 0x0, 0x20000}, {0xffffffff, 0x0, 0x7f, 0xf18, 0x9, 0x7}, {0x4, 0x3, 0x2e, 0x7fffffff, 0x3, 0x7}, {0x0, 0x0, 0xfffffffd, 0xfffff6ff, 0x6, 0x38000}, {0xc6a, 0x0, 0xffffff83, 0xe6ca, 0x9, 0xc}, {0xc, 0x7, 0x2, 0xfffffdfe, 0x8001, 0x8001}, {0x3f8, 0x5d0, 0x40, 0x0, 0x8, 0x7e04}, {0x3ff, 0xfffffffe, 0x8, 0x643, 0x7, 0x4a}, {0x81, 0x6, 0x6, 0x1ff, 0x100, 0x20000000}, {0x3ff, 0x3, 0x200, 0xf33d, 0x9, 0x5}, {0x81, 0x1, 0x7ff, 0xefc8, 0x0, 0x5}, {0x7fffffff, 0x6, 0x2, 0xba4, 0x6, 0x1}, {0x2, 0x38, 0x1, 0x80000001, 0x7fff, 0x1}, {0x7, 0x6, 0x101, 0x4, 0x6, 0xe57}, {0x6, 0x2, 0x401, 0x6, 0x5, 0x1}, {0x7, 0x9, 0x9, 0x2, 0xfffffff9}, {0xf21, 0x7fffffff, 0xfffffffb, 0xc, 0x2, 0x1}, {0x5, 0x1, 0x6, 0x8, 0xffff8000, 0x3}, {0x3, 0x4, 0x7, 0x3, 0x5, 0x8}, {0xffffff01, 0x7, 0x3, 0x7, 0xfff, 0x6}, {0x81, 0x6, 0x3, 0x2, 0x9, 0x3}, {0x2, 0x8, 0xda, 0x6, 0x7, 0x3}, {0x6, 0x8, 0xf86, 0x10, 0x3f, 0x7}, {0x7fffffff, 0x0, 0x81, 0x200, 0x1, 0x604}, {0x7fff, 0x0, 0x80000001, 0x68f7e38f, 0x2, 0x6}, {0xf46, 0xe, 0x6, 0x0, 0xae, 0xff}, {0xfffffffb, 0x80, 0x3, 0x9c, 0x6, 0x4}, {0x3, 0x3, 0x3, 0x3, 0x9, 0xffffffff}, {0xc, 0x4dd0, 0x8001, 0x3, 0x0, 0x5}, {0x1, 0xffffffff, 0x2, 0xe, 0xac, 0x2}, {0x3a5b, 0x5, 0x5, 0x5, 0x7f, 0x7}, {0x1, 0x9, 0x7fffffff, 0x0, 0x2, 0x7}, {0x8, 0x7ff, 0x1, 0x7ff, 0x7dbd, 0x4ec0}, {0x7, 0x1, 0xffffffff, 0x0, 0x40, 0x5}, {0x1, 0x0, 0x6094, 0x0, 0x3}, {0xfff, 0x5, 0x80, 0x8, 0x7, 0x1}, {0x6, 0x8001, 0x1, 0x100, 0xf8ab, 0x6}, {0x4a, 0x5, 0x0, 0x8d7e, 0x1, 0x400}, {0xf, 0x7f, 0x1, 0x7fffffff, 0xc, 0x101}, {0xff, 0x81, 0x7, 0x4, 0x917, 0x6}, {0x6, 0x1fe00000, 0x3, 0x4, 0x3, 0xa0000000}, {0xa77d, 0xfffffff9, 0x8}, {0x403, 0x5, 0x1, 0x2, 0x8, 0x10001}, {0xd, 0x401, 0xf, 0x7f, 0x15e4, 0x9}, {0xfffffffc, 0x5, 0x5, 0xfffffca9, 0x90, 0x3}, {0xf4, 0x2, 0x4, 0x4, 0x2, 0x8a4a}, {0x3, 0x6, 0x4, 0x8, 0x7, 0x1}, {0x1ff, 0x6, 0x7fffffff, 0x60, 0x3, 0xe}, {0x7, 0x993b, 0x400, 0x10000, 0x3, 0xe}, {0x7, 0x6, 0x1, 0xfff, 0xffffffff, 0x3ffc}, {0x7, 0x10000, 0x2, 0x80000000, 0x0, 0xffff}, {0xffffffff, 0xf, 0x5, 0x4, 0xd5, 0x9}, {0x7ff, 0xae96, 0x3, 0x6, 0x3, 0x1}, {0x4, 0x2, 0x8, 0x5, 0xf424, 0x5}, {0x9, 0x5, 0xade7, 0x9, 0x2, 0x5}, {0x6, 0x4, 0x1, 0xb1e, 0x0, 0x2}, {0x6, 0xd, 0x1, 0x80, 0x5, 0xc75}, {0xf, 0x9, 0x1, 0x3e989c97, 0xfffffffe, 0x5}, {0x200, 0xdc, 0x5, 0x8000, 0x1000, 0x5}, {0x2, 0x200, 0x7, 0x8, 0x1ff, 0x3}, {0xc0, 0x1, 0x5, 0x52, 0x7, 0xfffffff8}, {0xff, 0x2, 0x10001, 0x0, 0x2, 0xffffff00}, {0x4, 0xed, 0xfffffff9, 0x1307, 0x2, 0x1}, {0x0, 0x0, 0xb, 0x6, 0x6, 0x80000000}, {0xb623, 0x10000, 0x1, 0x8, 0x6, 0x8}, {0x4, 0x9, 0xe7, 0x2, 0x40, 0x401}, {0x4, 0x8001, 0x5, 0x97c, 0xfffffffe, 0x7}, {0x0, 0x2, 0x4, 0x7, 0x80000001, 0xfffffff7}, {0x1, 0x8, 0x4, 0x865, 0x2, 0x7}, {0x6, 0x3, 0x5d, 0x8e816326, 0xc, 0x6}, {0x5, 0xee6c, 0x2, 0x5, 0x40, 0x101}, {0x2, 0xfffffff9, 0xd, 0x66, 0x5, 0x9}, {0x4, 0xfffffff8, 0x3, 0x6, 0x4, 0x5}, {0x1, 0xdd, 0x6, 0x9, 0x80000001, 0x8818518a}, {0x7, 0x1, 0xff, 0x7fff, 0x8, 0x6}, {0x9, 0x9d, 0x2, 0x9, 0x7b7fb9f0, 0x9}, {0x30, 0x7, 0x3, 0x100000, 0x8, 0xfffffe01}, {0xfffffffe, 0x6, 0x40, 0x0, 0xfffff5a2, 0x401}, {0x1, 0x100, 0x5, 0x3, 0x7, 0x7}, {0x1, 0x800, 0x3, 0x40, 0x5, 0xc}, {0x3, 0x3ff, 0x4, 0x7, 0x9, 0xd}, {0x1, 0x401, 0x9, 0x2, 0x7, 0x6}, {0x3, 0x7, 0x3, 0x1, 0x10001, 0x9}, {0x2, 0x7fff, 0x9, 0x9, 0xb}, {0x7, 0x7, 0x2, 0x0, 0x5, 0x1}, {0x9, 0x8, 0x7, 0x6, 0x7, 0x5}, {0x9, 0x7, 0x1, 0x2, 0x1, 0x80}, {0x9, 0x7f, 0x5, 0x5, 0xeb, 0x5}, {0x3, 0x1, 0x8000, 0x5, 0x8, 0x3}, {0x1, 0x5a1c, 0x8001, 0x7ebe, 0x4cf72505, 0xcd}, {0x0, 0x6, 0x6, 0x5, 0x1ff0, 0x10001}, {0xe, 0x1, 0x3, 0x2, 0x9, 0x100}, {0x5, 0x7ff, 0x3, 0x80, 0x200, 0x4}, {0x4, 0x6, 0x1ff, 0x3ff, 0x20000000, 0x8}, {0x31b, 0x8001, 0xe, 0x1, 0x3, 0x8}, {0x6, 0x2, 0x5, 0xb, 0x1, 0x8}, {0xf, 0x6, 0x98a, 0x3, 0x1, 0x3}, {0x5276, 0x366, 0x5, 0x44, 0x0, 0x5cd0}, {0x80000001, 0x8, 0x2, 0x24c, 0x7, 0x1000}, {0x1, 0x2, 0x6, 0x2, 0x5}, {0x5, 0x5, 0x80, 0x1, 0x5, 0x401}, {0x1, 0x5cf, 0xa, 0x2, 0x3, 0x8}, {0x800, 0x4, 0x2, 0x1, 0xc0, 0xfffffffa}, {0x7, 0x3ff, 0x200, 0x0, 0x2, 0x5}, {0xffffffff, 0x7, 0xf, 0x0, 0x8, 0x3}, {0x3, 0xb2b2, 0x194f9bf4, 0x87a4, 0xaab7, 0x7}, {0x7, 0x9, 0xa8e, 0x7, 0x60670000, 0x7}, {0x40, 0x10000, 0x4, 0x2, 0x0, 0x1}, {0x5, 0x9, 0xffffff7f, 0x7, 0x3}, {0x8e5, 0x1, 0xa, 0x28, 0x9, 0x80000001}, {0x3, 0x80000001, 0xe225, 0xd, 0x8, 0x9}, {0x29d, 0x401, 0xffffffff, 0xfff, 0xfded, 0x8}, {0xfffffbff, 0xe, 0x0, 0xffffff81, 0x8, 0xfffffffe}, {0xed6, 0x3, 0x5, 0x259c, 0x9, 0x3}, {0xfffffbff, 0x7f, 0x400, 0xfffffff9, 0x0, 0x1}, {0x0, 0x7ff, 0x40, 0xcd, 0x6, 0x8}, {0x6, 0x6, 0x1, 0x9, 0x61, 0xffffffff}, {0x6, 0x8, 0x0, 0x4, 0x5, 0x6}, {0x8000, 0xff, 0x516, 0x0, 0x2371, 0xffff}, {0x8, 0x1, 0x6, 0x9, 0x101, 0x86}, {0x5, 0x8, 0x186, 0x1, 0x101, 0x80000000}], [{0x4}, {0x2, 0x1}, {0x4, 0x1}, {0x1}, {0x0, 0x1}, {0x1}, {0x4}, {0x3}, {0x1}, {0x2}, {0x5, 0x1}, {0x0, 0x1}, {0x7}, {0x0, 0x1}, {0x3}, {0x1}, {0x1}, {0x5, 0x1}, {0x3}, {0x2, 0x1}, {0x4}, {0x3, 0x1}, {0x3, 0x1}, {0x0, 0x1}, {0x2}, {0x3, 0x1}, {0x4}, {0x2}, {0x3}, {0x5, 0x1}, {0x4}, {0x0, 0x1}, {0x0, 0x1}, {0x3}, {}, {0x1}, {0x4}, {0x4}, {0x2}, {0x2, 0x1}, {0x4}, {0x4, 0x1}, {0x4, 0x1}, {0x4, 0x1}, {0x3, 0x1}, {0x0, 0x1}, {0x2}, {}, {0x1}, {0x5, 0x1}, {0x2, 0x1}, {0x1, 0x1}, {0x3}, {0x2, 0x1}, {0x0, 0x1}, {0x4, 0x1}, {0x2}, {0x3, 0xd171415e8ad05f3d}, {0x3, 0x1}, {0x3}, {0x2}, {0x3}, {}, {0x4, 0x1}, {0x1, 0x1}, {0x4, 0x1}, {0x2, 0x1}, {0x5}, {0x2, 0x1}, {0x2}, {0x2}, {0x0, 0x1}, {0x3}, {0x3}, {0x4, 0x1}, {}, {0x1, 0x1}, {0x2}, {0x5, 0x1}, {0x0, 0x1}, {0x4}, {0x3, 0x3}, {0x6}, {0x4}, {0x1}, {0x5}, {0x1}, {0x2}, {0x1, 0x1}, {0x3}, {0x3, 0x1}, {0x2}, {0x3, 0x1}, {0x3, 0x1}, {0x1, 0x1}, {0x1}, {0x5, 0x1}, {0x5}, {0x5, 0x1}, {0x5}, {0x2}, {0x5, 0x1}, {0x2}, {0x1}, {0x1}, {0x2, 0x1}, {0x5}, {0x3, 0x1}, {0x2}, {}, {0x3}, {0x0, 0x1}, {}, {0x5, 0x1}, {0x5, 0x1}, {0x4}, {0x4}, {}, {0x1, 0x1}, {}, {0x1, 0x1}, {0x4}, {}, {}, {0x3}, {0x4, 0x1}, {0x5}, {0x4, 0x1}], 0x1}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x1}}}}]}]}, 0x2aa8}, 0x1, 0x0, 0x0, 0x4c804}, 0x4091) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000014c0)=ANY=[@ANYBLOB="301000003b0007010100000000000000017c00000400fc8018100180"], 0x1030}}, 0x4c000) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_PAUSE_SET(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000cc0)={&(0x7f00000007c0)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100030010651fbe347b2c2b00000c00018008000100", @ANYRES16=r1], 0x20}}, 0x0) 2.285113016s ago: executing program 1 (id=923): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000000)={0x1, &(0x7f0000000040)=[{0x6, 0x80, 0x5, 0x7fff0003}]}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r1, 0xc0502100, &(0x7f0000000400)) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={0x0}, 0x18) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) r3 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'ip6_vti0\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f0000000240)={'ip6gre0\x00', &(0x7f0000000180)={'syztnl1\x00', r4, 0x4, 0x8, 0x0, 0x1a14, 0x4, @dev={0xfe, 0x80, '\x00', 0x3b}, @mcast2, 0x700, 0x40, 0x7fff, 0x6}}) munmap(&(0x7f0000001000/0x3000)=nil, 0x3000) r5 = socket(0x2, 0x80805, 0x0) r6 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r6, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r6, 0x1, 0x8, &(0x7f0000000000), 0x4) r7 = getpid() setsockopt$inet_tcp_TLS_TX(r5, 0x6, 0x1, &(0x7f0000000240)=@gcm_128={{0x304}, "517b5ba89696f61f", "e470a88259ccea3c7f6ed98656a66cf3", "3da6fa0b", "e961904a106a0fd0"}, 0x28) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140), r6) sendmsg$DEVLINK_CMD_RELOAD(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x3c, r9, 0x1, 0x70bd26, 0x0, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r7}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4040010}, 0x0) capset(&(0x7f0000000100)={0x20071026}, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x81, 0xfffffffb}) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x15, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x79, 0x10, 0x8}, [@ldst={0x3, 0x0, 0x3, 0xa, 0x0, 0xff00}], {0x95, 0x0, 0x74}}, &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_reuseport, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) 2.284743176s ago: executing program 0 (id=915): r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$unix(0x1, 0x2, 0x0) getsockopt$SO_COOKIE(r2, 0x1, 0x39, &(0x7f0000002580), &(0x7f00000025c0)=0x8) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000ff0f000007"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x36, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffd8, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r4}, &(0x7f0000000000), &(0x7f0000000040)=r5}, 0x20) r6 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000200), 0x50602, 0x0) kcmp$KCMP_EPOLL_TFD(0x0, 0x0, 0x7, r6, 0x0) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, 0x0, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r7}, 0x10) geteuid() sendmsg$nl_generic(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000a00)={0x1c, 0x3e, 0x107, 0xfffffffc, 0x25dfdbf6, {0x1, 0x7c}, [@nested={0x8, 0x3, 0x0, 0x1, [@nested={0x4, 0x8a}]}]}, 0x1c}, 0x1, 0x0, 0x0, 0x488c0}, 0xc000) clock_adjtime(0xffffffd3, &(0x7f0000000340)={0x8, 0x0, 0xe38, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x4000000000000, 0x0, 0x0, 0x0, 0x0, 0x9}) r8 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'netdevsim0\x00', 0x0}) r10 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmsg$nl_route(r8, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)=ANY=[@ANYBLOB="90000000100003058285d2f1e2e4f74d000007", @ANYRES32=0x0, @ANYBLOB="996e06004d4c0700540012800800010068737200480002800500030008000000050003000500000005000300fd00000008000200", @ANYRES32=r10, @ANYBLOB="08000100", @ANYRES32=r9], 0x90}, 0x1, 0x0, 0x0, 0x26041004}, 0x80) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000001900)={0x2, {0xc, 0x4, 0x0, 0x101, 0x8}}) 2.240781826s ago: executing program 0 (id=916): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x40, 0x1, 0x0, 0x0, 0x0, 0x5, 0x24044, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x1100, 0x5dd9, 0x0, 0x5, 0x0, 0x8, 0xfffb, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xf, 0xffffffffffffffff, 0x0) setsockopt$IP_VS_SO_SET_STARTDAEMON(0xffffffffffffffff, 0x0, 0x48b, 0x0, 0x0) getresuid(&(0x7f0000000000)=0x0, &(0x7f0000000080), &(0x7f00000000c0)) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000180)='./bus\x00', 0xb00000, &(0x7f0000000280)={[{@max_batch_time={'max_batch_time', 0x3d, 0x358}}, {@resuid}, {@acl}], [{@subj_user={'subj_user', 0x3d, 'rootcontext'}}, {@euid_lt={'euid<', 0xffffffffffffffff}}, {@fowner_gt={'fowner>', 0xee01}}, {@uid_lt={'uid<', r0}}, {@fowner_lt={'fowner<', r0}}, {@euid_lt={'euid<', r0}}, {@audit}, {@subj_type}]}, 0x3, 0x44b, &(0x7f00000004c0)="$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") r1 = open(&(0x7f0000000240)='./bus\x00', 0x145142, 0x83) socket(0x1a, 0x1, 0x7ff) prctl$PR_SET_SECCOMP(0x16, 0x0, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x79, 0x4, 0x0, 0x7ffc1ff8}]}) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x8, 0x0, 0x7ffc0002}]}) r2 = semget$private(0x0, 0x6, 0x3b9) semtimedop(r2, &(0x7f0000000040)=[{0x0, 0x1}], 0x1, 0x0) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) pipe(&(0x7f0000000280)={0xffffffffffffffff}) pipe(0x0) splice(r4, 0x0, 0xffffffffffffffff, 0x0, 0x80, 0x4) semop(r2, &(0x7f0000000180)=[{}, {}], 0x2) seccomp$SECCOMP_SET_MODE_FILTER(0x1, 0x1, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) mq_unlink(0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x1b, &(0x7f0000002140)={0x1, &(0x7f00000000c0)=[{0x6}]}) sendfile(r1, r1, 0x0, 0x800000009) lsm_list_modules(&(0x7f0000000000)=[0x0, 0x0], &(0x7f0000000100)=0x10, 0x0) 2.087927339s ago: executing program 4 (id=917): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r0, 0x0, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r4}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x5}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) fsmount(0xffffffffffffffff, 0x0, 0x0) syz_clone3(&(0x7f00000007c0)={0x40120000, 0x0, 0x0, 0x0, {0x40}, 0x0, 0x0, 0x0, 0x0}, 0x58) symlink(&(0x7f0000000000)='.\x00', &(0x7f0000000100)='./file0\x00') socket$nl_sock_diag(0x10, 0x3, 0x4) move_pages(0x0, 0x2064, &(0x7f0000000040)=[&(0x7f0000ff9000/0x2000)=nil], &(0x7f0000001180), &(0x7f0000000000), 0x0) 2.086915379s ago: executing program 3 (id=918): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x3000046, &(0x7f0000000080)={[{@delalloc}, {@data_err_abort}, {@discard}, {@dioread_lock}, {@data_err_ignore}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x4007b1}}, {@data_err_ignore}, {@grpquota}, {@dax_inode}, {@user_xattr}, {@bh}, {@dioread_nolock}]}, 0x1, 0x553, &(0x7f0000000a40)="$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") r0 = openat$selinux_create(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000340)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x9, 0x4, 0x7ffc0002}]}) bpf$MAP_CREATE(0x0, 0x0, 0x48) sendmmsg$inet(0xffffffffffffffff, &(0x7f00000017c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x84) preadv(r1, &(0x7f0000000000)=[{&(0x7f0000000080)=""/242, 0xf2}], 0x1, 0x2, 0x2) socket$inet(0x2, 0x2, 0x0) writev(0xffffffffffffffff, &(0x7f0000000300)=[{&(0x7f00000001c0)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000d000000000000060400", 0x32}], 0x1) r2 = gettid() timer_create(0x1, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) ioctl$PPPIOCNEWUNIT(0xffffffffffffffff, 0xc004743e, &(0x7f0000000300)=0x2) ioctl$PPPIOCSACTIVE(0xffffffffffffffff, 0x40047459, &(0x7f0000000080)={0xfffffffffffffe43, 0x0}) read(0xffffffffffffffff, 0x0, 0x0) write$selinux_create(r0, &(0x7f0000000340)=@objname={'system_u:object_r:urandom_device_t:s0', 0x20, 'system_u:system_r:kernel_t:s0', 0x20, 0x10000, 0x20, './file0\x00'}, 0x61) r3 = open(&(0x7f0000000000)='./file1\x00', 0x109042, 0x7a) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=@ipv6_newrule={0x54, 0x20, 0x1, 0x70bd28, 0x25dfdbfe, {0xa, 0x20, 0x20, 0x84, 0x7f, 0x0, 0x0, 0x6, 0x10009}, [@FRA_DST={0x14, 0x1, @mcast1}, @FRA_SRC={0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, @FIB_RULE_POLICY=@FRA_IP_PROTO={0x5, 0x16, 0x87}, @FIB_RULE_POLICY=@FRA_DPORT_RANGE={0x8, 0x18, {0x4e20, 0x4e22}}]}, 0x54}, 0x1, 0x0, 0x0, 0x20008005}, 0x40) r5 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) setsockopt$inet6_tcp_TCP_ULP(r3, 0x6, 0x1f, &(0x7f0000000140), 0x4) sendmsg$netlink(r5, &(0x7f0000000040)={0x0, 0x28, &(0x7f0000000000)=[{&(0x7f00000001c0)=ANY=[@ANYBLOB="d824000028000100020000080000000003"], 0x24d8}], 0x1}, 0x40004) 1.39486138s ago: executing program 0 (id=919): bpf$PROG_LOAD(0x5, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0xfe, 0x0, 0x7ffc0002}]}) r0 = memfd_create(&(0x7f0000000380)='+\x8b\x8a\xa9\x16\x11\x91J\xbc+ \x18\x17\xc2:}\xa3\x9bO\xdd\xdf\xdf\x92\xd5\xed\xb4\x17\xe5\xd6\x9a\xb2\xd8\x9ba\xde\xb2.F\xc0\x99}|\xaf\xd3\x1d\x84[*_\x9f\x9d\xb0rYP\x1b\x9f \xe0\x9cgq\x103\x89\x11\x87\xe3>B\x04\x00\x00\x00W\xd3\xec\xfb\xdf?\xa2\x90+\xa4!\xb2\xf2\xff\x90\a\xc3\x12\xc4;\xffh\xf1x=\xb9c\xce\x03h\xdap\x88U\x1788\x82\xd7\xfd\x83\x00Sx\x91%\x99_\xfe\xd4c\x83\x86\x0f\xa4a-\xaf\x9e\xd9\xef\xe0)]\x00F\xfa\x03\xbc4\xc4\x9a\v\x03\x8b\xa4\xf3\x8f\xf4\"\'\xd3\a9\x14H}j&~\xe9\x16\x83o\xbd\xab\xcd[\xbd\xcb\x04\xfc\xe7\xe3\x9e?\x12\xf0\xf4\x83M3\xd88\x92?@\v\xe6\xd1\xd2\xe4\xde\xdaUeJ\x9fR\xd1`\xfa\xc8\v\xed\xfd\x0e\xc8\x89W\x847\x88\x82\x94\x14\xe33\xb7H\xc8b\xd6@3F#\xb7\x04C\x8dm\t\x16a\x0fI\xf4\xfe\xf8\x06j\x19Pz&\xb8\x0f\x98`W\xdb\xc6\"81A\xa4\x8bT\xf1\xcb\xab\xa3\t\xef\xdf&\x0e\xad\x03\x123.\xc2V\xaa\xd5\xf8\xde\x8aV\xa4p{\xcez\xa2\x92\xdb8*wLO\f\x97X\x05\x9a\xc2\xe8\x85\x9d\xcb\xc8\xf0\xc4\x01\x03\xe3?\x9f1\xf4\xfb\xa5y`KB\xdf\xae#\x94C\a\x04\xea\xccG\xf2\b\x8f\xf7\xb1\xe96\x90\xf5P\xa4\'\xce\xe3\xa24\x196\xc5Q\xa1K\x95\xd6\xfal\xe9\xd1\\\r&\xb2c\xb3\x8d\xa7\xb7\xa8\x03S\xbd\xdd\b{\xae\f\x10\xc2\xbb\xd0\xdd*\xa3\xb4\fJ\x00X\xab`N; LF\xa5L\xee\xdf\x7f\x80p\xf6o\x1c\xbdXR\xf2\xa0\x00a\xa1\xe1B\x93Xn\xaf\xfc\x05?\xab\xac\x91x\xa8#\xe1\xbeQ\xa3X\x9b\xb9)\xd3\n\xf7(3!\x18\b\xc0\xaampRl\xfdQ\x03\x8c\xd5\xe4\\\xed\x9a\xd1?\xd21\xc8\x90\x1dl|\xd1\x14\xbc3\xe0\x1e\x0e\xe6\x88Y\x99K\x93\x1c@_P\x8c\xc7\x9eZ\xb74KT:\x8a\xdbJ#w\x18\x14\x00\x93\x86\xa5wo\xf6M\xe7D\xf4*\xe3X\x1d\x19\x83\xa7w\xc7+7\x89s\xed\x8a\xd7O\xdd\rhh`\xc0\xa8$\x06pu\xa0\xd0L\x0ez@I\xb8\x83\xb2f\x93j\a0I\xc8l\xe5\x9b\x06\xb5\xac`d\xa3\xcf/\x14\x10\xab\xab\t\xec\xc1c\fA\xaf\x14\xef\xbap@*7\x86\xdf\',\x03Y\xb1$\xf0\xb5}\xf0\x82%)9`\x8f\x04\x85m\x80\xd2\xcf@\x06}\xea\xe7w`\xa5\x11\x9f\x9b\x9e\x8f\xb7cb\x1a\xe1\xcf\x87\x1c\\\xf5\xc21\xf7\x82C*\xd5;\x00\x00\x00\x00\x03\xba\xe3\xdc\x92\'\x8e\xd5\x7fG\xfd.\x91\x89T\x99t\xd4d,\xd5\x92O\xf1\xafT!Y\x8e\\\xac\xf7\x11R\x05p\x1a\"\r\xe9\xe5\x8b&\x0f\x8c\xfb\xef\xf8\xd5\x18\xde\xeb\xe5\x19\xdd\xebQ8\xc5iS+\x06D\x16\xfe\xf5.\xe5\v\x89\xb0\"\xa3M\xe9\x81\x11P\xdb\xc4\xc2y\x14\x04\x06\xf6\f\xb0\xecz\x8d`\xb5\x9b\xb43\xcc1\xa7\x9e\xa8\xb5\'\xc6MAe\x0f\xd1\xfcG\xc2/\xe8\xe9t\xcaQ\xf1\fI\x1chM\xc1\x92\xe3\xc3\x01M\xc8/\xefJ\xcb\xd0]\f\xff\xf5\x92\xce\x97Z\xea\xe8\x99\xfa\x96\xce\xa7\x02\xad\xa2\xce\x955\xeaNg\x02\xcd\xfd\x1a}.\xd3\"x\x89/8H\xc2\x93B\na)\x86\xa9U\xa0\xb7\x18\xfb\xe9\xd1\x97|\xd4yfW\xdf\x91\x18\xeb\x8e]\x9dn,\x96\xf6\x88\xac\xbd\b<\x11\xccm0 \xafc\xcdZ\x1eWz\x80*\"D\xf1\xfa\xeb\xac\x87\xe9\x00\x00\x00\x00\x00\xfb\xc3#Q \xefK,\r\xa2\x05\r\xbf\x97l\n\xf8\xf7\xa2{\xcd\xff^n,bjt\xa6,\x1a(\xf3', 0x4) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001000000"], 0x0, 0x7, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[], 0x48) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xf, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000007000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000000b7030000001f00008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000010000008500000085000000b70000000000000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x1, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000200)='fdb_delete\x00', r3}, 0x18) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa20000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000cc0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x8, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r4 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x121602, 0x0) ioctl$TIOCSETD(r4, 0x5423, &(0x7f00000003c0)=0x1) r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r5, @ANYBLOB="0000000000000000b704000008000000850000007800000095"], 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x400000, @void, @value}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kfree\x00', r6}, 0x10) ioctl$TIOCVHANGUP(r4, 0x5437, 0x2) capset(&(0x7f0000000000)={0x19980330}, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x2}) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r7, 0x8924, &(0x7f0000000000)={'bridge_slave_0\x00', @random="010000201000"}) lseek(r0, 0x100000, 0x3) 1.394511109s ago: executing program 1 (id=920): socket$qrtr(0x2a, 0x2, 0x0) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000440)={r0}, 0x4) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00'}, 0x10) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSSOFTCAR(r1, 0x5453, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000800)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000800000085000000b600000095"], &(0x7f00000007c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94) add_key$keyring(&(0x7f00000001c0), &(0x7f0000000180)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff) r4 = bpf$MAP_CREATE(0x0, 0x0, 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB, @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r5}, 0x10) bpf$TOKEN_CREATE(0x24, &(0x7f00000002c0)={0x0, r5}, 0x8) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000660000000000"], 0x0, 0x7ff, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f00000004c0)='mm_page_free\x00', r6, 0x0, 0x178}, 0x18) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000480)='kfree\x00', r2}, 0x18) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000340)={'bridge0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=@getchain={0x24, 0x11, 0x1, 0x2000000, 0xfffffffe, {0x0, 0x0, 0x0, r9, {0xe}, {}, {0xfff3}}}, 0x24}}, 0x0) 1.393106769s ago: executing program 3 (id=930): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000000)={0x1, &(0x7f0000000040)=[{0x6, 0x80, 0x5, 0x7fff0003}]}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r1, 0xc0502100, &(0x7f0000000400)) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={0x0}, 0x18) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) r3 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'ip6_vti0\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f0000000240)={'ip6gre0\x00', &(0x7f0000000180)={'syztnl1\x00', r4, 0x4, 0x8, 0x0, 0x1a14, 0x4, @dev={0xfe, 0x80, '\x00', 0x3b}, @mcast2, 0x700, 0x40, 0x7fff, 0x6}}) munmap(&(0x7f0000001000/0x3000)=nil, 0x3000) r5 = socket(0x2, 0x80805, 0x0) r6 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r6, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r6, 0x1, 0x8, &(0x7f0000000000), 0x4) r7 = getpid() setsockopt$inet_tcp_TLS_TX(r5, 0x6, 0x1, &(0x7f0000000240)=@gcm_128={{0x304}, "517b5ba89696f61f", "e470a88259ccea3c7f6ed98656a66cf3", "3da6fa0b", "e961904a106a0fd0"}, 0x28) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140), r6) sendmsg$DEVLINK_CMD_RELOAD(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x3c, r9, 0x1, 0x70bd26, 0x0, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r7}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4040010}, 0x0) capset(&(0x7f0000000100)={0x20071026}, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x81, 0xfffffffb}) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x15, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x79, 0x10, 0x8}, [@ldst={0x3, 0x0, 0x3, 0xa, 0x0, 0xff00}], {0x95, 0x0, 0x74}}, &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_reuseport, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) 1.310634181s ago: executing program 0 (id=921): bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="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"], &(0x7f0000000280)='GPL\x00', 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x2e, 0x10, &(0x7f0000000000), 0xfffffffffffffd00, 0x0, 0xffffffffffffffff, 0xffffffffffffffb9, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) r0 = socket$inet6(0xa, 0x1, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x11, 0x8, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x1f) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000003c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x308, 0x130, 0x12, 0x60a, 0x600, 0x202, 0x238, 0x2e8, 0x2e8, 0x238, 0x2c0, 0x4, 0x0, {[{{@ipv6={@ipv4={'\x00', '\xff\xff', @dev}, @mcast2, [0x4000000], [0x4000000], 'veth1_to_bond\x00', 'xfrm0\x00'}, 0x0, 0x108, 0x130, 0x0, {}, [@common=@unspec=@statistic={{0x38}}, @common=@inet=@socket2={{0x28}}]}, @common=@inet=@SET1={0x28, 'SET\x00', 0x1, {{0xffffffffffffffff}, {0xffffffffffffffff, 0xf9}}}}, {{@ipv6={@private2, @loopback, [], [], 'vxcan1\x00', 'geneve0\x00'}, 0x0, 0xa8, 0x108}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv4=@empty}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x368) r2 = openat$binfmt(0xffffffffffffff9c, 0x0, 0x41, 0x1ff) write$binfmt_elf64(r2, &(0x7f00000002c0)=ANY=[@ANYBLOB="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"/1819], 0x71b) syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000200)='./file1\x00', 0x4010, &(0x7f0000000d80)=ANY=[@ANYBLOB="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", @ANYRES8], 0x1, 0x11ee, &(0x7f0000002480)="$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") r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='blkio.bfq.io_service_bytes\x00', 0x275a, 0x0) write$cgroup_int(r3, &(0x7f0000000000)=0x10000000000000, 0xffffff6a) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, 0x0) r4 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1022, 0x3b8}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000001200)={0x1, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x2, 0x0, 0x0, 0x40f00, 0x2, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffd, @void, @value}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000300)={{r5}, &(0x7f0000000180), &(0x7f00000001c0)=r4}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000940)={&(0x7f0000000040)='sys_enter\x00', r6, 0x0, 0x8}, 0x18) setsockopt$packet_add_memb(r3, 0x107, 0x1, &(0x7f0000000a80)={0x0, 0x1, 0x6, @random="10d75daa2475"}, 0x10) syz_clone3(&(0x7f00000006c0)={0x102102180, 0x0, 0x0, 0x0, {0x40}, 0x0, 0x0, 0x0, 0x0}, 0x58) lsetxattr$security_selinux(&(0x7f00000001c0)='./cgroup.cpu/cgroup.procs\x00', &(0x7f0000000200), &(0x7f0000000240)='system_u:object_r:net_conf_t:s0\x00', 0x20, 0x1) 1.309916911s ago: executing program 1 (id=933): socket$qrtr(0x2a, 0x2, 0x0) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000440)={r0}, 0x4) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00'}, 0x10) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSSOFTCAR(r1, 0x5453, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000800)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000800000085000000b600000095"], &(0x7f00000007c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94) add_key$keyring(&(0x7f00000001c0), &(0x7f0000000180)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff) r4 = bpf$MAP_CREATE(0x0, 0x0, 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB, @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r5}, 0x10) bpf$TOKEN_CREATE(0x24, &(0x7f00000002c0)={0x0, r5}, 0x8) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000660000000000"], 0x0, 0x7ff, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f00000004c0)='mm_page_free\x00', r6, 0x0, 0x178}, 0x18) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000480)='kfree\x00', r2}, 0x18) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000340)={'bridge0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=@getchain={0x24, 0x11, 0x1, 0x2000000, 0xfffffffe, {0x0, 0x0, 0x0, r9, {0xe}, {}, {0xfff3}}}, 0x24}}, 0x0) 1.190805563s ago: executing program 4 (id=922): r0 = syz_open_dev$usbfs(&(0x7f0000000480), 0x77, 0x41341) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000014c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000040)='sched_switch\x00', r3, 0x0, 0x415}, 0x18) unshare(0x64000600) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x4000) unshare(0x2040400) r6 = fsopen(&(0x7f0000000440)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r6, 0x6, 0x0, 0x0, 0x0) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000040)) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000000)=@usbdevfs_connect) 1.189698243s ago: executing program 1 (id=935): openat$snapshot(0xffffffffffffff9c, &(0x7f00000000c0), 0x401, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x20, 0x12504, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x4, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x2000002, 0x6031, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000ceb000/0x2000)=nil, 0x2000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0xc01, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) r3 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$inet6_mreq(r3, 0x29, 0x1b, &(0x7f0000000100)={@ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x14}}}, 0x14) setsockopt$inet6_mreq(r3, 0x29, 0x1b, &(0x7f0000000000)={@dev}, 0x14) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000300)={'veth0_to_batadv\x00', 0x0}) setsockopt$inet6_mreq(r3, 0x29, 0x1c, &(0x7f00000001c0)={@remote, r4}, 0x14) ioctl$TUNSETQUEUE(r1, 0x400454d9, &(0x7f0000000200)={'caif0\x00', 0x400}) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETQUEUE(r5, 0x400454d9, &(0x7f00000001c0)={'ipvlan1\x00', 0x400}) r6 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) process_vm_writev(r6, &(0x7f0000001c80)=[{&(0x7f0000001bc0)=""/156, 0x9c}], 0x1, &(0x7f0000001d80)=[{&(0x7f0000001cc0)=""/116, 0x20001c34}], 0x1, 0x0) 87.447019ms ago: executing program 5 (id=924): r0 = epoll_create1(0x0) r1 = socket$unix(0x1, 0x1, 0x0) bind$unix(r1, &(0x7f0000000200)=@file={0x1, './file0\x00'}, 0x6e) r2 = dup(r0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000000400)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r0}}) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000080)) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000000000000000000ea04850000005000000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='sched_switch\x00', r3}, 0x10) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=@newqdisc={0x54, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0xffe0}, {0x3}, {0xe, 0xd}}, [@TCA_RATE={0x6, 0x5, {0x9, 0x1}}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1a, {0x0, 0x0, 0x491, 0x0, 0x0, 0x0, 0x8, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x80}, 0x4000c00) timer_create(0x4, &(0x7f00000000c0)={0x0, 0x8, 0x1, @thr={&(0x7f0000000080)="31036a483c612dca3a660e60efb73c9a298cc2ce2da76ffa2c0e90584398ce7a5e20ff88664aedac8955d06db34bdfecccd0d8ec5c642ecb9897956945fb", &(0x7f00000004c0)="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"}}, &(0x7f00000001c0)) syz_open_dev$tty1(0xc, 0x4, 0x1) bpf$OBJ_PIN_PROG(0x6, 0x0, 0x0) r5 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x36, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x4, @perf_config_ext={0x5, 0x47f9833d}, 0x0, 0x10000, 0xfffffff9, 0x1, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$SCSI_IOCTL_SEND_COMMAND(r5, 0x1, &(0x7f00000003c0)={0x0, 0xfff, 0x3}) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000ed074479000000000000000018000000", @ANYRES32=0xffffffffffffffff, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x4, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000040)='sched_switch\x00', r7, 0x0, 0x2000000005}, 0x18) sendmsg$nl_route(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000240)=ANY=[@ANYRES32=r8, @ANYRES32=0x0, @ANYBLOB, @ANYRES32], 0x48}}, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) socket$nl_netfilter(0x10, 0x3, 0xc) 87.044619ms ago: executing program 3 (id=925): r0 = bpf$MAP_CREATE(0x0, 0x0, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b70300000000a999850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000400)='kfree\x00', r1}, 0x10) syz_mount_image$msdos(&(0x7f0000000200), &(0x7f0000000180)='./file1\x00', 0xa0c416, &(0x7f0000000840)=ANY=[@ANYBLOB="646f747300000000732c646d6173a594e5e0d4ee303030303032fd33a1ddfe6717c3d234e02f30303030302c6e6f646f74732cb7f973636172642c6e66733d6e6f73", @ANYRES32, @ANYBLOB="2c646f733178666c6f70707900000000000000003030ffffffff3030303030313737373737373737f9909fdfd4291a9ccfbbdb0556c0f39fdb37372c004c0f1208ec0c34b7df4ba1b5e6b76697434de7574db9bcaef6a61212c3f260bebc0300000013e1119b83f1cf9f686b3dc422c2ddbcefe94e5c255b5e8c90613e6b598b3b7a2c05de53dab7acab1c2e7b6a547f8120c12a14b06f0100b8adb87fa67ab868940868fee39f0796736ccd4adf62186a216263c1322da47b156792f49bf9e904cf364616ba0d1bf1348f2e73a5e9f22d64b99da29b77f44729d2d624e275c0a7bd51391746002809f9ccbc48c93edf96a9ac580d0821f5c4caa4780ac2b7947ff520b17e3de63455fc5162ed9dd00f909ec0444bed000000000000004ad30ac1bb683b06c4204677147fda0e2825b3b223782ddc9a5762d74fff010000388aa6508249ce2e877f2aade7d70e1b416e393b5ff1dc520161835eef3edf52baf0b32a7d5fb1aa093fc52621", @ANYRES8=r2, @ANYRESHEX], 0x5, 0x29b, &(0x7f0000000480)="$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") r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000840)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000006"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000600)={{r4}, &(0x7f0000000580), &(0x7f00000005c0)=r5}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r5}, 0x10) r6 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r6, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c) syz_emit_ethernet(0xbe, &(0x7f0000000000)={@local, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "7b4b143b7461fd777b1c012bd14efb9f49fcdb8f080c26a04883ad5c8c82b8af", "584cbf2649a50f2dbc43efa8698dfa871c51852e4451b57d037ad3c045942824251d7d17b5191584cdd4fbe40a27424d", "bcfd56f1373669caaa2f19935e6996c7096ffe4f3a4745a8f762b964", {"9a3bfbc1f39cb307b3472eb9cdb042d2", "643fcbb2c5a57df67d544af6e8dafe09"}}}}}}}, 0x0) recvmmsg(r6, &(0x7f00000057c0)=[{{0x0, 0x0, 0x0}, 0xa1}], 0x1, 0x101, 0x0) syz_open_dev$sg(&(0x7f00000002c0), 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x5, 0x4, &(0x7f0000000040)=ANY=[@ANYRESDEC=r3], &(0x7f0000001b80)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x41, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000600)='fsi_master_acf_cmd_same_addr\x00', r3, 0x0, 0x87}, 0x18) r7 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_INIT(r7, 0x29, 0xc8, &(0x7f0000000340), 0x4) setsockopt$MRT6_ADD_MIF(r7, 0x29, 0xca, &(0x7f00000000c0)={0x4, 0x1, 0x78, 0x0, 0xfffffff8}, 0xc) fcntl$dupfd(r3, 0x406, r0) r8 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r8, 0x560a, &(0x7f0000000080)={0x0, 0x0, 0x4, 0x4, 0x4}) 0s ago: executing program 4 (id=926): pipe2(&(0x7f0000000040), 0x0) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) r2 = syz_open_dev$usbfs(&(0x7f0000000180), 0x204, 0x2581) fcntl$dupfd(r2, 0x0, r2) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={0x0, 0x0, 0x5a, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x28) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000000)="d8000000210081044e81f782db44b90402000000000000000000000510000c0003", 0x21}], 0x1}, 0x0) r3 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r3, &(0x7f0000000000)=ANY=[], 0x33fe0) ioctl$USBDEVFS_REAPURBNDELAY(r2, 0x4004550c, &(0x7f0000000040)) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$int_in(r1, 0x5452, &(0x7f0000000080)=0x1494) fcntl$setstatus(r1, 0x4, 0x0) setsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000000380)={{{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in6=@rand_addr=' \x01\x00', 0x0, 0x0, 0x0, 0x0, 0xa}, {0x0, 0x0, 0x0, 0x10001}, {0x0, 0x800000000002, 0x1}, 0x1000000}, {{@in, 0x4d4, 0x6c}, 0x0, @in6=@ipv4={'\x00', '\xff\xff', @multicast1}, 0xffffffff}}, 0xe8) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="1801000001ffffeb00000000eb658e0d850000007b00000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x18) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0xb}]}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$lock(r6, 0x6, &(0x7f0000002000)={0x1, 0x0, 0x200, 0x2}) close_range(r5, 0xffffffffffffffff, 0x0) kernel console output (not intermixed with test programs): known, defaulting to 1000 [ 80.648410][ T5219] __nla_validate_parse: 2 callbacks suppressed [ 80.648426][ T5219] netlink: 32 bytes leftover after parsing attributes in process `syz.1.395'. [ 80.705166][ T5220] netlink: 'syz.3.396': attribute type 10 has an invalid length. [ 80.713007][ T5220] netlink: 40 bytes leftover after parsing attributes in process `syz.3.396'. [ 80.721979][ T5220] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.730800][ T5220] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.756596][ T5220] team0: Failed to send port change of device geneve1 via netlink (err -105) [ 80.775800][ T5220] team0: Failed to send options change via netlink (err -105) [ 80.783310][ T5220] team0: Port device geneve1 added [ 80.809399][ T5218] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 80.869536][ T5218] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 80.934270][ T5218] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.946414][ T5218] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.962192][ T5218] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.981644][ T5218] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.045579][ T5228] loop3: detected capacity change from 0 to 512 [ 81.094500][ T5228] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 81.123625][ T5228] ext4 filesystem being mounted at /75/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 81.175282][ T5228] netlink: '+}[@': attribute type 12 has an invalid length. [ 81.205736][ T3310] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 81.611072][ T5248] lo speed is unknown, defaulting to 1000 [ 81.699819][ T5248] loop2: detected capacity change from 0 to 512 [ 81.721940][ T5248] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 81.761675][ T5248] EXT4-fs (loop2): 1 truncate cleaned up [ 81.768250][ T5248] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 81.914050][ T5252] netlink: 'syz.1.405': attribute type 10 has an invalid length. [ 81.921883][ T5252] netlink: 40 bytes leftover after parsing attributes in process `syz.1.405'. [ 81.979105][ T5252] dummy0: entered promiscuous mode [ 82.013971][ T5252] bond0: (slave dummy0): Releasing backup interface [ 82.039036][ T5252] bridge0: port 2(dummy0) entered blocking state [ 82.045504][ T5252] bridge0: port 2(dummy0) entered disabled state [ 82.052700][ T5252] dummy0: entered allmulticast mode [ 82.331304][ T3316] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 82.414029][ T5257] lo speed is unknown, defaulting to 1000 [ 82.595302][ T5265] smc: net device bond0 applied user defined pnetid SYZ0 [ 82.607010][ T5265] smc: net device bond0 erased user defined pnetid SYZ0 [ 82.628270][ T5265] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=5265 comm=syz.2.407 [ 82.667003][ T5270] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 82.675727][ T29] kauditd_printk_skb: 225 callbacks suppressed [ 82.675740][ T29] audit: type=1326 audit(1750358464.764:3331): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5269 comm="syz.2.409" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f932d87e929 code=0x7ffc0000 [ 82.706343][ T29] audit: type=1326 audit(1750358464.764:3332): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5269 comm="syz.2.409" exe="/root/syz-executor" sig=0 arch=c000003e syscall=55 compat=0 ip=0x7f932d87e929 code=0x7ffc0000 [ 82.711167][ T5272] netlink: 'syz.4.411': attribute type 10 has an invalid length. [ 82.729552][ T29] audit: type=1326 audit(1750358464.764:3333): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5269 comm="syz.2.409" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f932d87e929 code=0x7ffc0000 [ 82.729580][ T29] audit: type=1326 audit(1750358464.764:3334): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5269 comm="syz.2.409" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f932d87e929 code=0x7ffc0000 [ 82.737276][ T5272] netlink: 40 bytes leftover after parsing attributes in process `syz.4.411'. [ 82.760549][ T29] audit: type=1326 audit(1750358464.764:3335): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5269 comm="syz.2.409" exe="/root/syz-executor" sig=0 arch=c000003e syscall=72 compat=0 ip=0x7f932d87e929 code=0x7ffc0000 [ 82.816032][ T29] audit: type=1326 audit(1750358464.764:3336): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5269 comm="syz.2.409" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f932d87e929 code=0x7ffc0000 [ 82.839417][ T29] audit: type=1326 audit(1750358464.764:3337): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5269 comm="syz.2.409" exe="/root/syz-executor" sig=0 arch=c000003e syscall=276 compat=0 ip=0x7f932d87e929 code=0x7ffc0000 [ 82.840407][ T5267] netlink: 'syz.3.410': attribute type 39 has an invalid length. [ 82.862732][ T29] audit: type=1326 audit(1750358464.764:3338): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5269 comm="syz.2.409" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f932d87e929 code=0x7ffc0000 [ 82.893813][ T29] audit: type=1326 audit(1750358464.764:3339): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5269 comm="syz.2.409" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f932d87e929 code=0x7ffc0000 [ 82.935130][ T5272] team0: Failed to send port change of device geneve1 via netlink (err -105) [ 82.956924][ T5272] team0: Failed to send options change via netlink (err -105) [ 82.964433][ T5272] team0: Port device geneve1 added [ 82.999646][ T5275] IPVS: stopping master sync thread 5278 ... [ 83.006629][ T5270] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 83.039820][ T5277] loop0: detected capacity change from 0 to 2048 [ 83.059542][ T5277] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 83.143754][ T5270] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 83.167118][ T5286] random: crng reseeded on system resumption [ 83.177738][ T5286] Restarting kernel threads ... [ 83.182903][ T5286] Done restarting kernel threads. [ 83.191146][ T5286] netlink: 3 bytes leftover after parsing attributes in process `syz.2.415'. [ 83.200411][ T5286] 0ªX¹¦À: renamed from caif0 [ 83.206372][ T5286] 0ªX¹¦À: entered allmulticast mode [ 83.211689][ T5286] net_ratelimit: 41 callbacks suppressed [ 83.211700][ T5286] A link change request failed with some changes committed already. Interface 60ªX¹¦À may have been left with an inconsistent configuration, please check. [ 83.280328][ T5270] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 83.305765][ T5291] loop2: detected capacity change from 0 to 2048 [ 83.312395][ T5291] ext2: Unknown parameter 'smackfstransmute' [ 83.383264][ T5270] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.411091][ T5270] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.430951][ T5270] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.461333][ T5270] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.831840][ T1884] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm kworker/u8:7: bg 0: block 234: padding at end of block bitmap is not set [ 83.852678][ T1884] EXT4-fs (loop0): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 3 with error 117 [ 83.864979][ T1884] EXT4-fs (loop0): This should not happen!! Data will be lost [ 83.864979][ T1884] [ 83.885431][ T5296] IPVS: stopping master sync thread 5299 ... [ 83.886465][ T5299] IPVS: sync thread started: state = MASTER, mcast_ifn = veth0_virt_wifi, syncid = 33554432, id = 0 [ 83.908716][ T3308] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 83.960954][ T5301] loop3: detected capacity change from 0 to 512 [ 84.031270][ T5280] loop1: detected capacity change from 0 to 764 [ 84.041821][ T5301] EXT4-fs (loop3): revision level too high, forcing read-only mode [ 84.107432][ T5301] EXT4-fs (loop3): orphan cleanup on readonly fs [ 84.170423][ T5301] Quota error (device loop3): v2_read_file_info: Block with free entry 1 out of range (1, 6). [ 84.211622][ T5301] EXT4-fs warning (device loop3): ext4_enable_quotas:7168: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 84.257918][ T5301] EXT4-fs (loop3): Cannot turn on quotas: error -117 [ 84.278163][ T5301] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.419: bg 0: block 40: padding at end of block bitmap is not set [ 84.332740][ T5309] netlink: 32 bytes leftover after parsing attributes in process `syz.2.420'. [ 84.455943][ T5301] EXT4-fs error (device loop3) in ext4_mb_clear_bb:6548: Corrupt filesystem [ 84.465953][ T5301] EXT4-fs (loop3): 1 truncate cleaned up [ 84.579027][ T5298] Set syz1 is full, maxelem 65536 reached [ 84.622220][ T5301] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 84.745913][ T5316] lo speed is unknown, defaulting to 1000 [ 85.403211][ T5318] lo speed is unknown, defaulting to 1000 [ 85.453380][ T5315] loop4: detected capacity change from 0 to 512 [ 85.537950][ T5315] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 85.661572][ T5315] EXT4-fs (loop4): 1 truncate cleaned up [ 85.667759][ T5315] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 86.001152][ T3314] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 86.043005][ T3310] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 86.105756][ T5328] loop4: detected capacity change from 0 to 1024 [ 86.139300][ T5328] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 86.264946][ T5326] lo speed is unknown, defaulting to 1000 [ 86.509176][ T5340] loop2: detected capacity change from 0 to 4096 [ 86.520275][ T5340] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 86.588387][ T5340] usb usb8: usbfs: interface 0 claimed by hub while 'syz.2.427' sets config #0 [ 86.618658][ T3316] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 86.724925][ T5347] loop2: detected capacity change from 0 to 512 [ 86.739322][ T5347] EXT4-fs warning (device loop2): ext4_enable_quotas:7168: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 86.754380][ T5347] EXT4-fs (loop2): mount failed [ 86.867348][ T5356] netlink: 'syz.1.442': attribute type 10 has an invalid length. [ 86.875719][ T5356] veth0_vlan: entered allmulticast mode [ 86.918369][ T5359] loop1: detected capacity change from 0 to 2048 [ 86.924968][ T5359] ext2: Unknown parameter 'smackfstransmute' [ 87.061990][ T5360] lo speed is unknown, defaulting to 1000 [ 87.393571][ T5364] lo speed is unknown, defaulting to 1000 [ 88.338167][ T3421] usb usb2-port1: attempt power cycle [ 90.158004][ T3421] usb usb2-port1: unable to enumerate USB device [ 92.008093][ T3576] usb usb2-port1: attempt power cycle [ 93.828104][ T3576] usb usb2-port1: unable to enumerate USB device [ 93.835670][ T3314] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 93.854138][ T5373] 9pnet_fd: Insufficient options for proto=fd [ 93.867968][ T5375] SET target dimension over the limit! [ 93.904794][ T5375] loop1: detected capacity change from 0 to 8192 [ 93.977043][ T5373] loop0: detected capacity change from 0 to 512 [ 94.000118][ T5373] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 94.041132][ T5373] ext4 filesystem being mounted at /90/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 94.097875][ T5386] lo speed is unknown, defaulting to 1000 [ 94.506789][ T3308] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 94.986901][ T5394] netlink: 32 bytes leftover after parsing attributes in process `syz.0.439'. [ 95.757377][ T5412] lo speed is unknown, defaulting to 1000 [ 95.765465][ T5413] lo speed is unknown, defaulting to 1000 [ 95.887955][ T5409] loop3: detected capacity change from 0 to 512 [ 95.902118][ T5415] loop4: detected capacity change from 0 to 512 [ 95.912482][ T5415] SELinux: security_context_str_to_sid (user_u) failed with errno=-22 [ 95.922049][ T5409] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 95.997896][ T5409] EXT4-fs (loop3): 1 truncate cleaned up [ 96.004656][ T5409] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 96.163981][ T5415] binfmt_misc: register: failed to install interpreter file ./file2 [ 96.300537][ T29] kauditd_printk_skb: 269 callbacks suppressed [ 96.300553][ T29] audit: type=1326 audit(1750358478.384:3608): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5421 comm="syz.1.444" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f90701ee929 code=0x7ffc0000 [ 96.330303][ T29] audit: type=1326 audit(1750358478.384:3609): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5421 comm="syz.1.444" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f90701ee929 code=0x7ffc0000 [ 96.353790][ T29] audit: type=1326 audit(1750358478.384:3610): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5421 comm="syz.1.444" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7f90701ee929 code=0x7ffc0000 [ 96.377268][ T29] audit: type=1326 audit(1750358478.384:3611): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5421 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f90701ee929 code=0x7ffc0000 [ 96.400153][ T29] audit: type=1326 audit(1750358478.384:3612): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5421 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f90701ee929 code=0x7ffc0000 [ 96.423026][ T29] audit: type=1326 audit(1750358478.384:3613): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5421 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f90701ee929 code=0x7ffc0000 [ 96.445898][ T29] audit: type=1326 audit(1750358478.384:3614): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5421 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f90701ee929 code=0x7ffc0000 [ 96.448284][ T5422] loop1: detected capacity change from 0 to 512 [ 96.468864][ T29] audit: type=1326 audit(1750358478.384:3615): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5421 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=459 compat=0 ip=0x7f90701ee929 code=0x7ffc0000 [ 96.497959][ T29] audit: type=1326 audit(1750358478.384:3616): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5421 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f90701ee929 code=0x7ffc0000 [ 96.520899][ T29] audit: type=1326 audit(1750358478.384:3617): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5421 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f90701ee929 code=0x7ffc0000 [ 96.569452][ T3310] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 96.584905][ T5422] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 96.611155][ T5422] ext4 filesystem being mounted at /89/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 96.651391][ T5435] netlink: 9 bytes leftover after parsing attributes in process `syz.2.448'. [ 96.677877][ T5435] 0·: renamed from hsr_slave_1 (while UP) [ 96.709169][ T5435] 0·: entered allmulticast mode [ 96.714677][ T5435] A link change request failed with some changes committed already. Interface c0· may have been left with an inconsistent configuration, please check. [ 96.730081][ T5422] netlink: '+}[@': attribute type 12 has an invalid length. [ 96.752404][ T5438] ALSA: seq fatal error: cannot create timer (-22) [ 96.788412][ T3320] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 96.826337][ T5434] loop4: detected capacity change from 0 to 512 [ 96.841106][ T5442] loop2: detected capacity change from 0 to 164 [ 96.848606][ T5442] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 96.858332][ T5442] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 96.867493][ T5442] Symlink component flag not implemented [ 96.873196][ T5442] Symlink component flag not implemented [ 96.879936][ T5442] Symlink component flag not implemented (7) [ 96.885952][ T5442] Symlink component flag not implemented (116) [ 96.893156][ T5442] netlink: 4 bytes leftover after parsing attributes in process `syz.2.453'. [ 96.903861][ T5434] EXT4-fs (loop4): Cannot turn on journaled quota: type 1: error -13 [ 96.912364][ T5434] EXT4-fs error (device loop4): ext4_orphan_get:1393: inode #13: comm syz.4.449: iget: bad i_size value: 12154757448730 [ 96.925911][ T5434] EXT4-fs error (device loop4): ext4_orphan_get:1398: comm syz.4.449: couldn't read orphan inode 13 (err -117) [ 96.951787][ T5434] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 97.031861][ T5434] EXT4-fs warning (device loop4): ext4_lookup:1799: Inconsistent encryption contexts: 2/12 [ 97.057614][ T5434] netlink: 'syz.4.449': attribute type 10 has an invalid length. [ 97.065569][ T5434] netlink: 40 bytes leftover after parsing attributes in process `syz.4.449'. [ 97.105295][ T5452] loop0: detected capacity change from 0 to 512 [ 97.123062][ T5452] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 97.339919][ T5454] pim6reg: entered allmulticast mode [ 97.345555][ T5455] pim6reg: left allmulticast mode [ 97.369001][ T5454] loop2: detected capacity change from 0 to 512 [ 97.377242][ T5454] EXT4-fs: Ignoring removed bh option [ 97.383392][ T5454] EXT4-fs (loop2): feature flags set on rev 0 fs, running e2fsck is recommended [ 97.396290][ T5452] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 97.409817][ T5452] ext4 filesystem being mounted at /92/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 97.440585][ T3414] kernel write not supported for file /272/loginuid (pid: 3414 comm: kworker/0:4) [ 97.492343][ T3308] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 97.511585][ T5461] netlink: 'syz.2.458': attribute type 13 has an invalid length. [ 97.529564][ T5461] gretap0: refused to change device tx_queue_len [ 97.535915][ T5461] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 97.553365][ T3314] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 97.564989][ T5461] netlink: 12 bytes leftover after parsing attributes in process `syz.2.458'. [ 97.577461][ T5463] netlink: 4 bytes leftover after parsing attributes in process `syz.0.457'. [ 97.594050][ T5463] netlink: 4 bytes leftover after parsing attributes in process `syz.0.457'. [ 97.605305][ T5465] netlink: 8 bytes leftover after parsing attributes in process `syz.4.459'. [ 97.611299][ T5463] netlink: 4 bytes leftover after parsing attributes in process `syz.0.457'. [ 97.623192][ T5465] loop4: detected capacity change from 0 to 1024 [ 97.623297][ T5463] netlink: 4 bytes leftover after parsing attributes in process `syz.0.457'. [ 97.649977][ T5467] lo speed is unknown, defaulting to 1000 [ 97.662905][ T5465] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 97.756715][ T3314] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 97.777405][ T5474] loop3: detected capacity change from 0 to 8192 [ 97.811932][ T5472] loop2: detected capacity change from 0 to 1024 [ 97.819084][ T5474] loop3: p2 p3 p4 [ 97.820939][ T5463] vhci_hcd: invalid port number 96 [ 97.823385][ T5474] loop3: p2 start 2936012800 is beyond EOD, [ 97.827903][ T5463] vhci_hcd: default hub control req: 0000 vfffc i0060 l0 [ 97.833718][ T5472] EXT4-fs (loop2): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 97.833902][ T5474] truncated [ 97.833908][ T5474] loop3: p3 start 1912602624 is beyond EOD, truncated [ 97.833925][ T5474] loop3: p4 size 656640 extends beyond EOD, truncated [ 97.870264][ T5472] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 97.908162][ T5472] JBD2: no valid journal superblock found [ 97.914703][ T5472] EXT4-fs (loop2): Could not load journal inode [ 97.965734][ T5487] netlink: 'syz.4.465': attribute type 10 has an invalid length. [ 97.981892][ T5472] SELinux: security_context_str_to_sid (Ð-šXܘ7.H\¹ÿ %ºu@) failed with errno=-22 [ 97.990286][ T5487] loop4: detected capacity change from 0 to 512 [ 98.039773][ T5487] EXT4-fs warning (device loop4): ext4_enable_quotas:7168: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 98.057559][ T5487] EXT4-fs (loop4): mount failed [ 98.069980][ T5503] loop2: detected capacity change from 0 to 512 [ 98.077024][ T5503] journal_path: Lookup failure for './file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa' [ 98.096448][ T5503] EXT4-fs: error: could not find journal device path [ 98.114004][ T5505] loop4: detected capacity change from 0 to 764 [ 98.121592][ T5505] rock: directory entry would overflow storage [ 98.127728][ T5505] rock: sig=0x4654, size=5, remaining=4 [ 98.136267][ T5505] tipc: Started in network mode [ 98.141312][ T5505] tipc: Node identity 4, cluster identity 4711 [ 98.147478][ T5505] tipc: Node number set to 4 [ 98.174607][ T5510] loop2: detected capacity change from 0 to 2048 [ 98.190862][ T5512] random: crng reseeded on system resumption [ 98.270806][ T5514] xt_hashlimit: max too large, truncated to 1048576 [ 98.361409][ T5521] loop0: detected capacity change from 0 to 128 [ 98.389534][ T5521] bio_check_eod: 114 callbacks suppressed [ 98.389548][ T5521] syz.0.471: attempt to access beyond end of device [ 98.389548][ T5521] loop0: rw=0, sector=121, nr_sectors = 120 limit=128 [ 98.577491][ T5523] lo speed is unknown, defaulting to 1000 [ 99.127627][ T5533] netlink: 'syz.1.476': attribute type 4 has an invalid length. [ 99.149437][ T12] kworker/u8:0: attempt to access beyond end of device [ 99.149437][ T12] loop0: rw=1, sector=241, nr_sectors = 800 limit=128 [ 99.493807][ T5537] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(8) [ 99.500341][ T5537] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 99.507887][ T5537] vhci_hcd vhci_hcd.0: Device attached [ 99.571178][ T5542] loop4: detected capacity change from 0 to 512 [ 99.610836][ T5542] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 99.640239][ T5539] vhci_hcd: connection closed [ 99.640758][ T12] vhci_hcd: stop threads [ 99.649724][ T12] vhci_hcd: release socket [ 99.654215][ T12] vhci_hcd: disconnect device [ 99.664870][ T5542] ext4 filesystem being mounted at /92/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 99.688084][ T3392] vhci_hcd: vhci_device speed not set [ 99.734938][ T3314] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 100.360364][ T5555] lo speed is unknown, defaulting to 1000 [ 100.486947][ T3414] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 100.494478][ T3414] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 100.501887][ T3414] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 100.873382][ T5558] lo speed is unknown, defaulting to 1000 [ 100.936298][ T5562] loop3: detected capacity change from 0 to 512 [ 100.948286][ T3414] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 100.955805][ T3414] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 100.963220][ T3414] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 100.970743][ T3414] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 100.978147][ T3414] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 100.985537][ T3414] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 100.988505][ T5562] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 100.993002][ T3414] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 101.012758][ T3414] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 101.020184][ T3414] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 101.027651][ T3414] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 101.036073][ T5562] ext4 filesystem being mounted at /87/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 101.050869][ T3414] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 101.058390][ T3414] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 101.065816][ T3414] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 101.073204][ T3414] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 101.080673][ T3414] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 101.088090][ T3414] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 101.095608][ T3414] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 101.103101][ T3414] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 101.110582][ T3414] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 101.118033][ T3414] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 101.125436][ T3414] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 101.132877][ T3414] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 101.140306][ T3414] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 101.147783][ T3414] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 101.155199][ T3414] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 101.192936][ T5572] xt_connbytes: Forcing CT accounting to be enabled [ 101.208039][ T5572] Cannot find set identified by id 0 to match [ 101.243575][ T3310] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 101.247889][ T5574] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(7) [ 101.259017][ T5574] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 101.266665][ T5574] vhci_hcd vhci_hcd.0: Device attached [ 101.289807][ T5580] raw_sendmsg: syz.1.487 forgot to set AF_INET. Fix it! [ 101.308958][ T29] kauditd_printk_skb: 501 callbacks suppressed [ 101.308971][ T29] audit: type=1326 audit(1750358483.404:4118): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5578 comm="syz.1.487" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f90701ee929 code=0x7ffc0000 [ 101.341582][ T29] audit: type=1326 audit(1750358483.404:4119): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5578 comm="syz.1.487" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f90701ee929 code=0x7ffc0000 [ 101.344669][ T3414] hid-generic 0000:0000:0000.0001: hidraw0: HID v0.00 Device [syz0] on syz1 [ 101.364942][ T29] audit: type=1326 audit(1750358483.404:4120): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5578 comm="syz.1.487" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f90701ee929 code=0x7ffc0000 [ 101.398198][ T29] audit: type=1326 audit(1750358483.404:4121): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5578 comm="syz.1.487" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f90701ee929 code=0x7ffc0000 [ 101.398288][ T29] audit: type=1326 audit(1750358483.404:4122): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5578 comm="syz.1.487" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f90701ee929 code=0x7ffc0000 [ 101.398312][ T29] audit: type=1326 audit(1750358483.404:4123): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5578 comm="syz.1.487" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f90701ee929 code=0x7ffc0000 [ 101.398334][ T29] audit: type=1326 audit(1750358483.414:4124): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5578 comm="syz.1.487" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f90701ee929 code=0x7ffc0000 [ 101.398418][ T29] audit: type=1326 audit(1750358483.414:4125): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5578 comm="syz.1.487" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f90701ee929 code=0x7ffc0000 [ 101.398439][ T29] audit: type=1326 audit(1750358483.414:4126): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5578 comm="syz.1.487" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f90701ee929 code=0x7ffc0000 [ 101.398475][ T29] audit: type=1326 audit(1750358483.414:4127): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5578 comm="syz.1.487" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f90701ee929 code=0x7ffc0000 [ 101.421761][ T5575] usbip_core: unknown command [ 101.421769][ T5575] vhci_hcd: unknown pdu 0 [ 101.421776][ T5575] usbip_core: unknown command [ 101.431727][ T51] vhci_hcd: stop threads [ 101.453501][ T3397] vhci_hcd: vhci_device speed not set [ 101.476695][ T51] vhci_hcd: release socket [ 101.597450][ T51] vhci_hcd: disconnect device [ 101.605962][ T5590] loop4: detected capacity change from 0 to 128 [ 101.633137][ T5594] loop0: detected capacity change from 0 to 512 [ 101.647577][ T5590] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 101.698225][ T5590] ext4 filesystem being mounted at /95/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 101.715448][ T3397] usb 5-1: new low-speed USB device number 2 using vhci_hcd [ 101.736719][ T3397] usb 5-1: enqueue for inactive port 0 [ 101.738375][ T5594] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 101.750030][ T3397] usb 5-1: enqueue for inactive port 0 [ 101.756009][ T5594] ext4 filesystem being mounted at /100/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 101.766667][ T3397] usb 5-1: enqueue for inactive port 0 [ 101.867946][ T3397] vhci_hcd: vhci_device speed not set [ 102.006151][ T3314] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 102.085688][ T5603] SELinux: security policydb version 18 (MLS) not backwards compatible [ 102.094203][ T5603] SELinux: failed to load policy [ 102.262108][ T5614] usb usb1: usbfs: process 5614 (syz.1.495) did not claim interface 0 before use [ 102.282510][ T5614] loop1: detected capacity change from 0 to 512 [ 102.313111][ T5612] netlink: 'syz.3.496': attribute type 13 has an invalid length. [ 102.322383][ T5614] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 102.353496][ T5612] netdevsim netdevsim3 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 102.361904][ T5612] netdevsim netdevsim3 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 102.370283][ T5612] netdevsim netdevsim3 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 102.378676][ T5612] netdevsim netdevsim3 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 102.388640][ T5614] ext4 filesystem being mounted at /98/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 102.401571][ T5615] program syz.3.496 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 102.518918][ T3320] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 102.528768][ T3308] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 102.548834][ T5625] xt_hashlimit: size too large, truncated to 1048576 [ 103.024358][ T5635] __nla_validate_parse: 11 callbacks suppressed [ 103.024370][ T5635] netlink: 4 bytes leftover after parsing attributes in process `syz.1.501'. [ 103.063753][ T5645] netlink: 8 bytes leftover after parsing attributes in process `syz.1.504'. [ 103.074302][ T5645] netlink: 8 bytes leftover after parsing attributes in process `syz.1.504'. [ 103.105568][ T5648] loop1: detected capacity change from 0 to 512 [ 103.129116][ T5649] semctl(GETNCNT/GETZCNT) is since 3.16 Single Unix Specification compliant. [ 103.129116][ T5649] The task syz.2.503 (5649) triggered the difference, watch for misbehavior. [ 103.147165][ T5648] EXT4-fs (loop1): too many log groups per flexible block group [ 103.154909][ T5648] EXT4-fs (loop1): failed to initialize mballoc (-12) [ 103.155029][ T5649] loop2: detected capacity change from 0 to 512 [ 103.177229][ T5648] EXT4-fs (loop1): mount failed [ 103.182709][ T5649] EXT4-fs (loop2): feature flags set on rev 0 fs, running e2fsck is recommended [ 103.191795][ T5649] EXT4-fs (loop2): mounting ext2 file system using the ext4 subsystem [ 103.211226][ T5649] EXT4-fs (loop2): warning: checktime reached, running e2fsck is recommended [ 103.223350][ T5649] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a042c01c, mo2=0002] [ 103.231867][ T5649] System zones: 0-2, 18-18, 34-34 [ 103.237307][ T5649] EXT4-fs error (device loop2): ext4_orphan_get:1393: inode #15: comm syz.2.503: iget: bad i_size value: 360287970189639680 [ 103.251198][ T5649] EXT4-fs error (device loop2): ext4_orphan_get:1398: comm syz.2.503: couldn't read orphan inode 15 (err -117) [ 103.263972][ T5649] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 103.368435][ T5654] loop4: detected capacity change from 0 to 1024 [ 103.376103][ T5654] EXT4-fs: Ignoring removed orlov option [ 103.381972][ T5654] EXT4-fs: Ignoring removed nomblk_io_submit option [ 103.499348][ T5654] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 103.635844][ T3314] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 103.700672][ T5692] loop4: detected capacity change from 0 to 512 [ 103.708610][ T5692] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 103.725083][ T5692] EXT4-fs (loop4): 1 truncate cleaned up [ 103.732096][ T5692] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 103.745350][ T5692] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 103.764144][ T5708] loop0: detected capacity change from 0 to 1024 [ 103.777514][ T5708] loop0: detected capacity change from 0 to 512 [ 103.784606][ T5708] journal_path: Lookup failure for './file0/../file0/file0' [ 103.791954][ T5708] EXT4-fs: error: could not find journal device path [ 103.859074][ T3316] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 104.536213][ T5787] netlink: 'syz.1.516': attribute type 1 has an invalid length. [ 104.544075][ T5787] netlink: 224 bytes leftover after parsing attributes in process `syz.1.516'. [ 104.554209][ T5789] serio: Serial port ptm0 [ 104.625602][ T5795] loop3: detected capacity change from 0 to 2048 [ 104.632886][ T5795] EXT4-fs: Ignoring removed nobh option [ 104.649423][ T5795] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 104.814799][ T5805] loop2: detected capacity change from 0 to 2048 [ 104.821949][ T5805] EXT4-fs: Ignoring removed mblk_io_submit option [ 105.127398][ T5805] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 105.154182][ T5805] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.521: bg 0: block 234: padding at end of block bitmap is not set [ 105.168653][ T5805] EXT4-fs (loop2): Remounting filesystem read-only [ 105.198193][ T3316] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 105.258939][ T5814] netlink: 4 bytes leftover after parsing attributes in process `wg1'. [ 105.271379][ T5814] team0 (unregistering): Port device geneve1 removed [ 105.338022][ T5812] loop2: detected capacity change from 0 to 32768 [ 105.362124][ T5817] netlink: 96 bytes leftover after parsing attributes in process `syz.4.525'. [ 105.376776][ T5819] loop0: detected capacity change from 0 to 1024 [ 105.383479][ T5819] EXT4-fs: Ignoring removed oldalloc option [ 105.389867][ T5812] loop2: p1 p2 p3 < > [ 105.393970][ T5812] loop2: p1 size 242222080 extends beyond EOD, truncated [ 105.398043][ T5819] EXT4-fs (loop0): stripe (3) is not aligned with cluster size (16), stripe is disabled [ 105.401511][ T5812] loop2: p2 start 4294967295 is beyond EOD, truncated [ 105.489854][ T5819] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 105.509717][ T3310] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 105.536273][ T5824] netlink: 209836 bytes leftover after parsing attributes in process `syz.1.528'. [ 105.581604][ T5830] loop2: detected capacity change from 0 to 1024 [ 105.602656][ T5830] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 105.750500][ T5830] EXT4-fs error (device loop2): ext4_mb_mark_diskspace_used:4113: comm syz.2.527: Allocating blocks 497-513 which overlap fs metadata [ 105.847507][ T5827] EXT4-fs (loop2): pa ffff88810077a700: logic 128, phys. 273, len 15 [ 105.855733][ T5827] EXT4-fs error (device loop2): ext4_mb_release_inode_pa:5364: group 0, free 0, pa_free 1 [ 105.887690][ T3316] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 105.906960][ T5840] loop1: detected capacity change from 0 to 1024 [ 105.929920][ T5842] ipvlan2: entered promiscuous mode [ 105.936597][ T5840] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 105.948784][ T5842] bridge0: port 1(ipvlan2) entered blocking state [ 105.955202][ T5842] bridge0: port 1(ipvlan2) entered disabled state [ 105.961979][ T5842] ipvlan2: entered allmulticast mode [ 105.967283][ T5842] bridge0: entered allmulticast mode [ 105.972970][ T5842] ipvlan2: left allmulticast mode [ 105.978046][ T5842] bridge0: left allmulticast mode [ 105.988711][ T5845] netlink: 8 bytes leftover after parsing attributes in process `syz.2.531'. [ 105.998378][ T5845] netlink: 8 bytes leftover after parsing attributes in process `syz.2.531'. [ 106.007760][ T5845] netlink: 8 bytes leftover after parsing attributes in process `syz.2.531'. [ 106.216434][ T5847] lo speed is unknown, defaulting to 1000 [ 106.260214][ T5848] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4278190105 free clusters [ 106.294614][ T3308] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 106.301418][ T5848] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 106.315782][ T5848] EXT4-fs (loop1): This should not happen!! Data will be lost [ 106.315782][ T5848] [ 106.325467][ T5848] EXT4-fs (loop1): Total free blocks count 0 [ 106.331473][ T5848] EXT4-fs (loop1): Free/Dirty block details [ 106.337390][ T5848] EXT4-fs (loop1): free_blocks=68451041280 [ 106.343222][ T5848] EXT4-fs (loop1): dirty_blocks=16 [ 106.348422][ T5848] EXT4-fs (loop1): Block reservation details [ 106.354436][ T5848] EXT4-fs (loop1): i_reserved_data_blocks=1 [ 106.397567][ T5847] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 21 with max blocks 43 with error 28 [ 106.612906][ T5862] lo speed is unknown, defaulting to 1000 [ 106.814182][ T5862] loop0: detected capacity change from 0 to 512 [ 106.842163][ T5862] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 106.885243][ T5851] xt_TPROXY: Can be used only with -p tcp or -p udp [ 106.963132][ T5862] EXT4-fs (loop0): 1 truncate cleaned up [ 106.970296][ T5862] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 107.809632][ T5866] loop2: detected capacity change from 0 to 128 [ 107.849793][ T5866] syz.2.533: attempt to access beyond end of device [ 107.849793][ T5866] loop2: rw=0, sector=121, nr_sectors = 120 limit=128 [ 107.866822][ T5868] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(8) [ 107.873411][ T5868] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 107.881004][ T5868] vhci_hcd vhci_hcd.0: Device attached [ 108.127878][ T9] usb 7-1: new low-speed USB device number 3 using vhci_hcd [ 108.157308][ T5868] __nla_validate_parse: 3 callbacks suppressed [ 108.157323][ T5868] netlink: 4 bytes leftover after parsing attributes in process `syz.3.536'. [ 108.199034][ T5869] vhci_hcd: connection reset by peer [ 108.208046][ T57] vhci_hcd: stop threads [ 108.212356][ T57] vhci_hcd: release socket [ 108.216832][ T57] vhci_hcd: disconnect device [ 108.381681][ T3308] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 108.415836][ T12] kworker/u8:0: attempt to access beyond end of device [ 108.415836][ T12] loop2: rw=1, sector=241, nr_sectors = 800 limit=128 [ 108.745220][ T3392] IPVS: starting estimator thread 0... [ 108.768595][ T5878] loop4: detected capacity change from 0 to 512 [ 108.797877][ T29] kauditd_printk_skb: 637 callbacks suppressed [ 108.797891][ T29] audit: type=1326 audit(1750358490.874:4765): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5879 comm="syz.0.537" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6740f0e929 code=0x7ffc0000 [ 108.827485][ T29] audit: type=1326 audit(1750358490.874:4766): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5879 comm="syz.0.537" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6740f0e929 code=0x7ffc0000 [ 108.850861][ T29] audit: type=1326 audit(1750358490.874:4767): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5879 comm="syz.0.537" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f6740f0e929 code=0x7ffc0000 [ 108.874288][ T29] audit: type=1326 audit(1750358490.874:4768): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5879 comm="syz.0.537" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6740f0e929 code=0x7ffc0000 [ 108.897586][ T29] audit: type=1326 audit(1750358490.874:4769): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5879 comm="syz.0.537" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6740f0e929 code=0x7ffc0000 [ 108.920950][ T29] audit: type=1326 audit(1750358490.874:4770): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5879 comm="syz.0.537" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f6740f0e929 code=0x7ffc0000 [ 108.944244][ T29] audit: type=1326 audit(1750358490.884:4771): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5879 comm="syz.0.537" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6740f0e929 code=0x7ffc0000 [ 108.945180][ T5876] IPVS: using max 2400 ests per chain, 120000 per kthread [ 108.967622][ T29] audit: type=1326 audit(1750358490.884:4772): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5879 comm="syz.0.537" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6740f0e929 code=0x7ffc0000 [ 108.975840][ T5880] loop0: detected capacity change from 0 to 512 [ 108.998001][ T29] audit: type=1326 audit(1750358490.884:4773): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5879 comm="syz.0.537" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f6740f0e929 code=0x7ffc0000 [ 108.998027][ T29] audit: type=1326 audit(1750358490.884:4774): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5879 comm="syz.0.537" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6740f0e929 code=0x7ffc0000 [ 109.006309][ T5880] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 109.052414][ T5878] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 109.074414][ T5878] ext4 filesystem being mounted at /108/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 109.100632][ T5880] EXT4-fs (loop0): 1 truncate cleaned up [ 109.106744][ T5880] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 109.120560][ T5880] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 109.175939][ T5889] loop0: detected capacity change from 0 to 128 [ 109.184335][ T5889] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 109.197425][ T5889] ext4 filesystem being mounted at /108/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 109.587313][ T5900] lo speed is unknown, defaulting to 1000 [ 109.736382][ T5902] lo speed is unknown, defaulting to 1000 [ 109.787455][ T5902] lo speed is unknown, defaulting to 1000 [ 109.812618][ T5898] loop3: detected capacity change from 0 to 8192 [ 109.909225][ T3314] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 109.919825][ T5902] lo speed is unknown, defaulting to 1000 [ 109.963355][ T5906] netlink: 4 bytes leftover after parsing attributes in process `syz.1.546'. [ 109.998671][ T5902] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 110.020376][ T5908] loop1: detected capacity change from 0 to 512 [ 110.027249][ T5908] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 110.048829][ T5908] EXT4-fs error (device loop1): ext4_find_inline_data_nolock:169: inode #17: comm syz.1.546: inline data xattr refers to an external xattr inode [ 110.059496][ T5906] dummy0: left allmulticast mode [ 110.069116][ T5906] bridge0: port 2(dummy0) entered disabled state [ 110.076004][ T5906] bridge_slave_0: left allmulticast mode [ 110.081737][ T5906] bridge_slave_0: left promiscuous mode [ 110.087474][ T5906] bridge0: port 1(bridge_slave_0) entered disabled state [ 110.120716][ T5908] EXT4-fs error (device loop1): ext4_orphan_get:1398: comm syz.1.546: couldn't read orphan inode 17 (err -117) [ 110.133714][ T5908] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 110.338176][ T5902] lo speed is unknown, defaulting to 1000 [ 110.426289][ T5912] loop2: detected capacity change from 0 to 164 [ 110.470349][ T5910] lo speed is unknown, defaulting to 1000 [ 110.511776][ T5910] lo speed is unknown, defaulting to 1000 [ 110.532768][ T5902] lo speed is unknown, defaulting to 1000 [ 110.559384][ T5902] lo speed is unknown, defaulting to 1000 [ 110.565611][ T3320] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 110.584344][ T5902] lo speed is unknown, defaulting to 1000 [ 110.594840][ T5902] lo speed is unknown, defaulting to 1000 [ 110.614847][ T5919] loop1: detected capacity change from 0 to 2048 [ 110.649729][ T5919] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000900 r/w without journal. Quota mode: none. [ 110.680562][ T5921] loop2: detected capacity change from 0 to 8192 [ 110.709130][ T5921] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 110.764461][ T5928] batadv_slave_0: entered promiscuous mode [ 110.770883][ T5928] netlink: 4 bytes leftover after parsing attributes in process `syz.3.552'. [ 110.780995][ T5928] batadv_slave_0 (unregistering): left promiscuous mode [ 110.788569][ T5928] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 110.821575][ T5926] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 110.851091][ T5926] EXT4-fs (loop1): Delayed block allocation failed for inode 18 at logical offset 310 with max blocks 80 with error 28 [ 110.863595][ T5926] EXT4-fs (loop1): This should not happen!! Data will be lost [ 110.863595][ T5926] [ 110.873284][ T5926] EXT4-fs (loop1): Total free blocks count 0 [ 110.879350][ T5926] EXT4-fs (loop1): Free/Dirty block details [ 110.885277][ T5926] EXT4-fs (loop1): free_blocks=2415919104 [ 110.891146][ T5926] EXT4-fs (loop1): dirty_blocks=400 [ 110.896369][ T5926] EXT4-fs (loop1): Block reservation details [ 110.902375][ T5926] EXT4-fs (loop1): i_reserved_data_blocks=25 [ 110.922752][ T5935] netlink: 14593 bytes leftover after parsing attributes in process `syz.4.554'. [ 110.935924][ T5935] netlink: 'syz.4.554': attribute type 4 has an invalid length. [ 110.943681][ T5935] netlink: 17 bytes leftover after parsing attributes in process `syz.4.554'. [ 110.957580][ T3308] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 111.046087][ T5940] loop0: detected capacity change from 0 to 512 [ 111.070767][ T5940] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 111.085180][ T5940] ext4 filesystem being mounted at /109/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 111.193584][ T5946] lo speed is unknown, defaulting to 1000 [ 111.200915][ T5946] lo speed is unknown, defaulting to 1000 [ 111.325043][ T5948] netlink: 48 bytes leftover after parsing attributes in process `syz.4.558'. [ 111.414798][ T5950] xt_hashlimit: max too large, truncated to 1048576 [ 111.508614][ T5769] EXT4-fs (loop1): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 2 with error 28 [ 111.511990][ T5951] loop4: detected capacity change from 0 to 512 [ 111.539171][ T5951] EXT4-fs (loop4): orphan cleanup on readonly fs [ 111.548760][ T5951] EXT4-fs error (device loop4): ext4_orphan_get:1419: comm syz.4.559: bad orphan inode 13 [ 111.550377][ T5954] netlink: 8 bytes leftover after parsing attributes in process `syz.1.560'. [ 111.558789][ T5951] ext4_test_bit(bit=12, block=18) = 1 [ 111.558804][ T5951] is_bad_inode(inode)=0 [ 111.558854][ T5951] NEXT_ORPHAN(inode)=2130706432 [ 111.558863][ T5951] max_ino=32 [ 111.558869][ T5951] i_nlink=1 [ 111.559334][ T5951] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 111.632666][ T5951] EXT4-fs (loop4): warning: mounting fs with errors, running e2fsck is recommended [ 111.698533][ T5951] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.559: bg 0: block 248: padding at end of block bitmap is not set [ 111.698843][ T5951] EXT4-fs error (device loop4): ext4_acquire_dquot:6933: comm syz.4.559: Failed to acquire dquot type 1 [ 111.713281][ T5951] EXT4-fs warning (device loop4): ext4_enable_quotas:7168: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 111.770292][ T5961] lo speed is unknown, defaulting to 1000 [ 111.771213][ T5961] lo speed is unknown, defaulting to 1000 [ 111.987646][ T3308] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 112.151965][ T5970] lo speed is unknown, defaulting to 1000 [ 112.158747][ T5970] lo speed is unknown, defaulting to 1000 [ 112.800540][ T5951] syz.4.559 (5951) used greatest stack depth: 9256 bytes left [ 112.804731][ T3314] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 112.931579][ T5974] geneve0: entered allmulticast mode [ 112.945101][ T5983] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 112.945221][ T5983] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 113.163774][ T5991] loop2: detected capacity change from 0 to 1024 [ 113.187927][ T9] usb 7-1: enqueue for inactive port 0 [ 113.194948][ T5991] EXT4-fs: Ignoring removed nobh option [ 113.200651][ T5991] EXT4-fs: Ignoring removed nomblk_io_submit option [ 113.218180][ T9] usb 7-1: enqueue for inactive port 0 [ 113.252179][ T5991] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 113.288498][ T9] vhci_hcd: vhci_device speed not set [ 113.305239][ T5991] syzkaller1: entered promiscuous mode [ 113.310818][ T5991] syzkaller1: entered allmulticast mode [ 113.342005][ T5998] loop0: detected capacity change from 0 to 256 [ 113.351493][ T5998] FAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 113.369254][ T5998] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 113.377953][ T5998] FAT-fs (loop0): Filesystem has been set read-only [ 113.432516][ T3316] EXT4-fs error (device loop2): ext4_ext_check_inode:523: inode #11: comm syz-executor: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 0(0) [ 113.453594][ T3316] EXT4-fs error (device loop2): ext4_ext_check_inode:523: inode #11: comm syz-executor: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 0(0) [ 113.525171][ T4915] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 113.816393][ T29] kauditd_printk_skb: 381 callbacks suppressed [ 113.816408][ T29] audit: type=1326 audit(1750359008.901:5154): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5993 comm="syz.1.571" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f90701e58e7 code=0x7ffc0000 [ 113.860899][ T6006] loop0: detected capacity change from 0 to 2048 [ 113.870949][ T29] audit: type=1326 audit(1750359008.941:5155): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5993 comm="syz.1.571" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f907018ab19 code=0x7ffc0000 [ 113.894224][ T29] audit: type=1326 audit(1750359008.941:5156): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5993 comm="syz.1.571" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f90701e58e7 code=0x7ffc0000 [ 113.917589][ T29] audit: type=1326 audit(1750359008.941:5157): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5993 comm="syz.1.571" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f907018ab19 code=0x7ffc0000 [ 113.940819][ T29] audit: type=1326 audit(1750359008.941:5158): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5993 comm="syz.1.571" exe="/root/syz-executor" sig=0 arch=c000003e syscall=276 compat=0 ip=0x7f90701ee929 code=0x7ffc0000 [ 113.964178][ T29] audit: type=1400 audit(1750359008.941:5159): avc: denied { create } for pid=6005 comm="syz.0.575" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=tipc_socket permissive=1 [ 113.984235][ T29] audit: type=1326 audit(1750359008.941:5160): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5993 comm="syz.1.571" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f90701e58e7 code=0x7ffc0000 [ 114.007444][ T29] audit: type=1326 audit(1750359008.941:5161): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5993 comm="syz.1.571" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f907018ab19 code=0x7ffc0000 [ 114.030680][ T29] audit: type=1326 audit(1750359008.941:5162): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5993 comm="syz.1.571" exe="/root/syz-executor" sig=0 arch=c000003e syscall=276 compat=0 ip=0x7f90701ee929 code=0x7ffc0000 [ 114.054118][ T29] audit: type=1326 audit(1750359008.951:5163): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5993 comm="syz.1.571" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f90701e58e7 code=0x7ffc0000 [ 114.086112][ T6006] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 114.099170][ T6006] ext4 filesystem being mounted at /116/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 114.144231][ T6013] loop1: detected capacity change from 0 to 8192 [ 114.344828][ T1768] netdevsim netdevsim2 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 114.355238][ T1768] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 114.373816][ T6018] 9pnet_fd: Insufficient options for proto=fd [ 114.431772][ T1768] netdevsim netdevsim2 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 114.442094][ T1768] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 114.540299][ T1768] netdevsim netdevsim2 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 114.550767][ T1768] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 114.621015][ T1768] netdevsim netdevsim2 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 114.631359][ T1768] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 114.656631][ T6029] netlink: 'syz.1.581': attribute type 1 has an invalid length. [ 114.673507][ T6021] lo speed is unknown, defaulting to 1000 [ 114.681068][ T6021] lo speed is unknown, defaulting to 1000 [ 114.726816][ T6029] 8021q: adding VLAN 0 to HW filter on device bond1 [ 114.831132][ T1768] bond0 (unregistering): Released all slaves [ 114.854934][ T6029] bond1: (slave gretap1): making interface the new active one [ 114.863414][ T6029] bond1: (slave gretap1): Enslaving as an active interface with an up link [ 114.887955][ T1768] tipc: Left network mode [ 114.951525][ T1768] hsr_slave_0: left promiscuous mode [ 114.957230][ T1768] 0·: left promiscuous mode [ 114.964407][ T1768] veth1_macvtap: left promiscuous mode [ 114.970031][ T1768] veth0_macvtap: left promiscuous mode [ 114.975817][ T1768] veth1_vlan: left promiscuous mode [ 114.981989][ T1768] veth0_vlan: left promiscuous mode [ 115.022729][ T3308] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 115.192640][ T6021] chnl_net:caif_netlink_parms(): no params data found [ 115.282601][ T6045] openvswitch: netlink: Message has 6 unknown bytes. [ 115.322480][ T6046] lo speed is unknown, defaulting to 1000 [ 115.330511][ T6046] lo speed is unknown, defaulting to 1000 [ 115.543788][ T6056] program syz.3.587 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 115.562560][ T6056] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 115.599111][ T6054] siw: device registration error -23 [ 115.605122][ T6021] bridge0: port 1(bridge_slave_0) entered blocking state [ 115.612242][ T6021] bridge0: port 1(bridge_slave_0) entered disabled state [ 115.619477][ T6021] bridge_slave_0: entered allmulticast mode [ 115.625845][ T6021] bridge_slave_0: entered promiscuous mode [ 115.632666][ T6021] bridge0: port 2(bridge_slave_1) entered blocking state [ 115.639964][ T6021] bridge0: port 2(bridge_slave_1) entered disabled state [ 115.647204][ T6021] bridge_slave_1: entered allmulticast mode [ 115.653938][ T6021] bridge_slave_1: entered promiscuous mode [ 115.669878][ T6059] loop3: detected capacity change from 0 to 512 [ 115.718298][ T6059] EXT4-fs: Ignoring removed mblk_io_submit option [ 115.749043][ T6021] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 115.758250][ T6059] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 115.772421][ T6021] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 115.797912][ T6059] EXT4-fs (loop3): 1 truncate cleaned up [ 115.799128][ T1768] IPVS: stop unused estimator thread 0... [ 115.804073][ T6021] team0: Port device team_slave_0 added [ 115.815393][ T6059] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 115.828877][ T6021] team0: Port device team_slave_1 added [ 115.856962][ T6021] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 115.863995][ T6021] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 115.890002][ T6021] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 115.912296][ T3310] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 115.926720][ T6021] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 115.933703][ T6021] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 115.959683][ T6021] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 115.985854][ T6062] netlink: 132 bytes leftover after parsing attributes in process `syz.3.589'. [ 116.005861][ T6062] random: crng reseeded on system resumption [ 116.021821][ T6021] hsr_slave_0: entered promiscuous mode [ 116.033009][ T6021] hsr_slave_1: entered promiscuous mode [ 116.042126][ T6066] netlink: 'syz.4.591': attribute type 1 has an invalid length. [ 116.049876][ T6066] netlink: 224 bytes leftover after parsing attributes in process `syz.4.591'. [ 116.059175][ T6021] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 116.066731][ T6021] Cannot create hsr debugfs directory [ 116.106423][ T6073] 9pnet_fd: Insufficient options for proto=fd [ 116.125822][ T6072] loop4: detected capacity change from 0 to 512 [ 116.127223][ T6073] siw: device registration error -23 [ 116.144952][ T6072] EXT4-fs (loop4): mounting ext3 file system using the ext4 subsystem [ 116.166542][ T6072] EXT4-fs (loop4): invalid journal inode [ 116.172321][ T6072] EXT4-fs (loop4): can't get journal size [ 116.186891][ T6072] EXT4-fs (loop4): 1 truncate cleaned up [ 116.198584][ T6021] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 116.205709][ T6072] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 116.220033][ T6021] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 116.241233][ T6021] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 116.260180][ T6021] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 116.315612][ T6021] 8021q: adding VLAN 0 to HW filter on device bond0 [ 116.330504][ T6021] 8021q: adding VLAN 0 to HW filter on device team0 [ 116.339819][ T5767] bridge0: port 1(bridge_slave_0) entered blocking state [ 116.346882][ T5767] bridge0: port 1(bridge_slave_0) entered forwarding state [ 116.357446][ T1768] bridge0: port 2(bridge_slave_1) entered blocking state [ 116.364532][ T1768] bridge0: port 2(bridge_slave_1) entered forwarding state [ 116.459749][ T6090] loop0: detected capacity change from 0 to 512 [ 116.474756][ T6021] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 116.512352][ T6090] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 116.548768][ T6090] ext4 filesystem being mounted at /120/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 116.582283][ T3314] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 116.757154][ T6021] veth0_vlan: entered promiscuous mode [ 116.774796][ T6021] veth1_vlan: entered promiscuous mode [ 116.956963][ T3308] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 117.050338][ T6116] netlink: 4 bytes leftover after parsing attributes in process `syz.0.599'. [ 117.221590][ T6113] lo speed is unknown, defaulting to 1000 [ 117.228276][ T6113] lo speed is unknown, defaulting to 1000 [ 117.299747][ T6021] veth0_macvtap: entered promiscuous mode [ 117.301288][ T6119] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 117.319319][ T6119] Cannot find set identified by id 0 to match [ 117.327457][ T6021] veth1_macvtap: entered promiscuous mode [ 117.346733][ T6021] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 117.357343][ T6021] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 117.366496][ T6021] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 117.375237][ T6021] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 117.383945][ T6021] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 117.392658][ T6021] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 117.561562][ T6132] loop1: detected capacity change from 0 to 512 [ 117.568918][ T6132] EXT4-fs: Ignoring removed mblk_io_submit option [ 117.575648][ T6132] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 117.586913][ T6132] EXT4-fs (loop1): 1 truncate cleaned up [ 117.594286][ T6132] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 117.636812][ T3320] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 117.660733][ T6138] netlink: 48 bytes leftover after parsing attributes in process `'. [ 117.901324][ T6144] netlink: 'syz.0.605': attribute type 1 has an invalid length. [ 117.909118][ T6144] netlink: 224 bytes leftover after parsing attributes in process `syz.0.605'. [ 118.027805][ T6153] loop0: detected capacity change from 0 to 2048 [ 118.069075][ T6153] loop0: p1 < > p4 [ 118.074181][ T6153] loop0: p4 size 8388608 extends beyond EOD, truncated [ 118.232571][ T6159] xt_hashlimit: size too large, truncated to 1048576 [ 118.467380][ T6165] loop3: detected capacity change from 0 to 512 [ 118.508024][ T6165] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(13) [ 118.514644][ T6165] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 118.522642][ T6165] vhci_hcd vhci_hcd.0: Device attached [ 118.551099][ T6172] vhci_hcd: connection closed [ 118.551724][ T5767] vhci_hcd: stop threads [ 118.560688][ T5767] vhci_hcd: release socket [ 118.565104][ T5767] vhci_hcd: disconnect device [ 118.823381][ T6177] netlink: 8 bytes leftover after parsing attributes in process `syz.1.615'. [ 119.189095][ T6188] 9pnet_fd: Insufficient options for proto=fd [ 119.248376][ T6184] netdevsim netdevsim4 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 119.256819][ T6184] netdevsim netdevsim4 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 119.265277][ T6184] netdevsim netdevsim4 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 119.273669][ T6184] netdevsim netdevsim4 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 119.417972][ T6184] geneve0: entered allmulticast mode [ 119.703332][ T6199] loop0: detected capacity change from 0 to 2048 [ 119.716685][ T29] kauditd_printk_skb: 374 callbacks suppressed [ 119.716699][ T29] audit: type=1326 audit(1750359014.801:5538): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6198 comm="syz.4.621" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f48ddd0e929 code=0x7ffc0000 [ 119.746390][ T29] audit: type=1326 audit(1750359014.801:5539): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6198 comm="syz.4.621" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f48ddd0e929 code=0x7ffc0000 [ 119.769743][ T29] audit: type=1326 audit(1750359014.801:5540): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6198 comm="syz.4.621" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f48ddd0e929 code=0x7ffc0000 [ 119.793152][ T29] audit: type=1326 audit(1750359014.801:5541): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6198 comm="syz.4.621" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f48ddd0e929 code=0x7ffc0000 [ 119.816488][ T29] audit: type=1326 audit(1750359014.801:5542): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6198 comm="syz.4.621" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f48ddd0e929 code=0x7ffc0000 [ 119.839869][ T29] audit: type=1326 audit(1750359014.801:5543): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6198 comm="syz.4.621" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f48ddd0e929 code=0x7ffc0000 [ 119.863219][ T29] audit: type=1326 audit(1750359014.801:5544): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6198 comm="syz.4.621" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f48ddd0e929 code=0x7ffc0000 [ 119.886516][ T29] audit: type=1326 audit(1750359014.801:5545): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6198 comm="syz.4.621" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f48ddd0e929 code=0x7ffc0000 [ 119.909838][ T29] audit: type=1326 audit(1750359014.801:5546): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6198 comm="syz.4.621" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f48ddd0e929 code=0x7ffc0000 [ 119.933133][ T29] audit: type=1326 audit(1750359014.801:5547): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6198 comm="syz.4.621" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f48ddd0e929 code=0x7ffc0000 [ 119.978966][ T6199] Alternate GPT is invalid, using primary GPT. [ 119.985253][ T6199] loop0: p1 p2 p3 [ 120.017751][ T6200] loop4: detected capacity change from 0 to 512 [ 120.049611][ T6200] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 120.087393][ T6207] lo speed is unknown, defaulting to 1000 [ 120.100221][ T6200] ext4 filesystem being mounted at /123/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 120.133083][ T6207] lo speed is unknown, defaulting to 1000 [ 120.357675][ T6215] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.625'. [ 120.389892][ T6217] netlink: 24 bytes leftover after parsing attributes in process `wg1'. [ 120.401108][ T3314] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 120.417980][ T6215] netlink: zone id is out of range [ 120.423856][ T6217] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=6217 comm=wg1 [ 120.461849][ T6218] SELinux: Context system_u:object_r:net_conf_t:s0 is not valid (left unmapped). [ 120.637113][ T6215] netlink: zone id is out of range [ 120.643007][ T6215] netlink: zone id is out of range [ 120.648169][ T6215] netlink: zone id is out of range [ 120.653301][ T6215] netlink: zone id is out of range [ 120.658436][ T6215] netlink: zone id is out of range [ 120.663558][ T6215] netlink: zone id is out of range [ 120.668701][ T6215] netlink: zone id is out of range [ 120.673816][ T6215] netlink: zone id is out of range [ 120.679025][ T6215] netlink: zone id is out of range [ 120.708513][ T6228] loop4: detected capacity change from 0 to 164 [ 120.763935][ T6229] lo speed is unknown, defaulting to 1000 [ 120.771433][ T6229] lo speed is unknown, defaulting to 1000 [ 121.066552][ T6234] loop0: detected capacity change from 0 to 1024 [ 121.103337][ T6236] netlink: 48 bytes leftover after parsing attributes in process `'. [ 121.120200][ T6234] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 121.142857][ T6242] ipvlan2: entered promiscuous mode [ 121.148678][ T6242] bridge0: port 4(ipvlan2) entered blocking state [ 121.155156][ T6242] bridge0: port 4(ipvlan2) entered disabled state [ 121.162075][ T6242] ipvlan2: entered allmulticast mode [ 121.165056][ T6240] netlink: 112 bytes leftover after parsing attributes in process `syz.1.644'. [ 121.167369][ T6242] bridge0: entered allmulticast mode [ 121.182179][ T6242] ipvlan2: left allmulticast mode [ 121.187233][ T6242] bridge0: left allmulticast mode [ 121.203570][ T6246] netlink: 8 bytes leftover after parsing attributes in process `syz.3.632'. [ 121.220778][ T6246] netlink: 8 bytes leftover after parsing attributes in process `syz.3.632'. [ 121.231059][ T6246] netlink: 8 bytes leftover after parsing attributes in process `syz.3.632'. [ 121.236080][ T6234] EXT4-fs error (device loop0): ext4_mb_mark_diskspace_used:4113: comm syz.0.641: Allocating blocks 497-513 which overlap fs metadata [ 121.240561][ T6246] netlink: 8 bytes leftover after parsing attributes in process `syz.3.632'. [ 121.292955][ T6233] EXT4-fs (loop0): pa ffff88810077a690: logic 128, phys. 273, len 15 [ 121.301073][ T6233] EXT4-fs error (device loop0): ext4_mb_release_inode_pa:5364: group 0, free 0, pa_free 1 [ 121.334216][ T3308] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 121.490803][ T6253] geneve0: entered allmulticast mode [ 121.840758][ T6277] loop1: detected capacity change from 0 to 128 [ 121.864700][ T6277] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 121.865094][ T6277] ext4 filesystem being mounted at /132/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 122.059527][ T6283] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=6283 comm=syz.0.646 [ 122.144898][ T6284] lo speed is unknown, defaulting to 1000 [ 122.146450][ T6284] lo speed is unknown, defaulting to 1000 [ 122.527602][ T6288] netlink: 48 bytes leftover after parsing attributes in process `'. [ 122.572809][ T6290] netlink: 112 bytes leftover after parsing attributes in process `syz.1.648'. [ 122.630835][ T6299] loop4: detected capacity change from 0 to 1024 [ 122.701358][ T6299] EXT4-fs error (device loop4): ext4_mb_mark_diskspace_used:4113: comm syz.4.650: Allocating blocks 497-513 which overlap fs metadata [ 122.728933][ T6297] EXT4-fs (loop4): pa ffff8881067c8310: logic 128, phys. 273, len 15 [ 122.737075][ T6297] EXT4-fs error (device loop4): ext4_mb_release_inode_pa:5364: group 0, free 0, pa_free 1 [ 122.770635][ T6312] ipvlan2: entered promiscuous mode [ 122.777005][ T6312] bridge0: port 3(ipvlan2) entered blocking state [ 122.783735][ T6312] bridge0: port 3(ipvlan2) entered disabled state [ 122.792170][ T6312] ipvlan2: entered allmulticast mode [ 122.797652][ T6312] bridge0: entered allmulticast mode [ 122.822994][ T6312] ipvlan2: left allmulticast mode [ 122.828121][ T6312] bridge0: left allmulticast mode [ 122.860639][ T6316] netlink: 8 bytes leftover after parsing attributes in process `syz.5.651'. [ 122.891990][ T6312] netlink: 8 bytes leftover after parsing attributes in process `syz.5.651'. [ 122.959988][ T6328] loop1: detected capacity change from 0 to 512 [ 122.960510][ T6330] loop5: detected capacity change from 0 to 164 [ 122.976768][ T6330] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 123.012298][ T6326] geneve0: entered allmulticast mode [ 123.069911][ T6338] loop3: detected capacity change from 0 to 128 [ 123.080247][ T6338] ext4 filesystem being mounted at /124/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 124.154202][ T6361] netlink: 'syz.1.666': attribute type 10 has an invalid length. [ 124.910855][ T6370] smc: net device bond0 applied user defined pnetid SYZ0 [ 124.918474][ T6370] smc: net device bond0 erased user defined pnetid SYZ0 [ 124.995877][ T6374] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=6374 comm=syz.5.668 [ 125.039757][ T6375] syzkaller1: entered promiscuous mode [ 125.045283][ T6375] syzkaller1: entered allmulticast mode [ 125.070517][ T6365] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=63 sclass=netlink_route_socket pid=6365 comm=syz.4.669 [ 125.083042][ T6365] netlink: 'syz.4.669': attribute type 27 has an invalid length. [ 125.096109][ T6365] erspan0: left promiscuous mode [ 125.101135][ T6365] erspan0: left allmulticast mode [ 125.119425][ T6365] 0ªX¹¦À: left allmulticast mode [ 125.153420][ T6365] 0·: left allmulticast mode [ 125.164250][ T6365] geneve0: left allmulticast mode [ 125.170888][ T6365] syzkaller1: left promiscuous mode [ 125.176091][ T6365] syzkaller1: left allmulticast mode [ 125.212183][ T6383] lo speed is unknown, defaulting to 1000 [ 125.227381][ T6387] SELinux: policydb magic number 0x0 does not match expected magic number 0xf97cff8c [ 125.238821][ T6387] SELinux: failed to load policy [ 125.252905][ T6383] lo speed is unknown, defaulting to 1000 [ 125.273412][ T6387] can0: slcan on ttyS3. [ 125.378036][ T6387] can0 (unregistered): slcan off ttyS3. [ 125.450550][ T6393] lo speed is unknown, defaulting to 1000 [ 125.458524][ T6393] lo speed is unknown, defaulting to 1000 [ 125.588497][ T6393] hub 9-0:1.0: USB hub found [ 125.593363][ T6393] hub 9-0:1.0: 8 ports detected [ 125.836514][ T29] kauditd_printk_skb: 968 callbacks suppressed [ 125.836530][ T29] audit: type=1326 audit(1750359020.921:6516): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6394 comm="syz.3.674" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fb9d5f7e929 code=0x0 [ 125.874461][ T6397] macvtap0: entered promiscuous mode [ 125.879886][ T6397] batadv0: entered promiscuous mode [ 125.885227][ T6397] macvtap0: entered allmulticast mode [ 125.890634][ T6397] batadv0: entered allmulticast mode [ 125.896783][ T6397] 8021q: adding VLAN 0 to HW filter on device macvtap0 [ 125.909060][ T6397] batadv0: left allmulticast mode [ 125.914093][ T6397] batadv0: left promiscuous mode [ 125.961277][ T6400] lo speed is unknown, defaulting to 1000 [ 125.967806][ T6400] lo speed is unknown, defaulting to 1000 [ 126.143898][ T6408] program syz.0.677 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 126.161600][ T6408] loop0: detected capacity change from 0 to 1024 [ 126.193544][ T6408] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 49 with max blocks 4 with error 28 [ 126.206028][ T6408] EXT4-fs (loop0): This should not happen!! Data will be lost [ 126.206028][ T6408] [ 126.215696][ T6408] EXT4-fs (loop0): Total free blocks count 0 [ 126.221723][ T6408] EXT4-fs (loop0): Free/Dirty block details [ 126.227618][ T6408] EXT4-fs (loop0): free_blocks=0 [ 126.232577][ T6408] EXT4-fs (loop0): dirty_blocks=0 [ 126.237636][ T6408] EXT4-fs (loop0): Block reservation details [ 126.243697][ T6408] EXT4-fs (loop0): i_reserved_data_blocks=0 [ 126.321740][ T6415] loop0: detected capacity change from 0 to 512 [ 126.328866][ T6415] ext4: Unknown parameter 'hash' [ 126.681063][ T6417] loop3: detected capacity change from 0 to 1024 [ 126.699490][ T6417] ext4 filesystem being mounted at /128/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 126.824115][ T6427] net_ratelimit: 8 callbacks suppressed [ 126.824137][ T6427] netlink: zone id is out of range [ 126.834949][ T6427] netlink: zone id is out of range [ 126.840108][ T6427] netlink: zone id is out of range [ 126.845246][ T6427] netlink: zone id is out of range [ 126.857918][ T6427] netlink: zone id is out of range [ 126.863041][ T6427] netlink: zone id is out of range [ 126.887103][ T6427] netlink: zone id is out of range [ 126.897895][ T6427] netlink: zone id is out of range [ 126.903022][ T6427] netlink: zone id is out of range [ 126.908261][ T6427] netlink: zone id is out of range [ 126.988622][ T29] audit: type=1326 audit(1750359022.081:6517): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6430 comm="syz.1.687" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f90701ee929 code=0x7ffc0000 [ 127.012000][ T29] audit: type=1326 audit(1750359022.081:6518): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6430 comm="syz.1.687" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f90701ee929 code=0x7ffc0000 [ 127.035695][ T29] audit: type=1326 audit(1750359022.101:6519): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6430 comm="syz.1.687" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7f90701ee929 code=0x7ffc0000 [ 127.059095][ T29] audit: type=1326 audit(1750359022.101:6520): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6430 comm="syz.1.687" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f90701ee929 code=0x7ffc0000 [ 127.082435][ T29] audit: type=1326 audit(1750359022.101:6521): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6430 comm="syz.1.687" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f90701ee929 code=0x7ffc0000 [ 127.105795][ T29] audit: type=1326 audit(1750359022.101:6522): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6430 comm="syz.1.687" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f90701ee929 code=0x7ffc0000 [ 127.129168][ T29] audit: type=1326 audit(1750359022.101:6523): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6430 comm="syz.1.687" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f90701ee929 code=0x7ffc0000 [ 127.130394][ T9] usb usb2-port1: attempt power cycle [ 127.152512][ T29] audit: type=1326 audit(1750359022.111:6524): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6430 comm="syz.1.687" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f90701ee929 code=0x7ffc0000 [ 127.181370][ T29] audit: type=1326 audit(1750359022.111:6525): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6430 comm="syz.1.687" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f90701ee929 code=0x7ffc0000 [ 127.255029][ T6434] loop3: detected capacity change from 0 to 512 [ 127.262981][ T6431] loop1: detected capacity change from 0 to 128 [ 127.280094][ T6434] ext4 filesystem being mounted at /130/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 127.315711][ T6434] EXT4-fs error (device loop3): ext4_readdir:264: inode #2: block 3: comm syz.3.689: path (unknown): bad entry in directory: directory entry overrun - offset=0, inode=2, rec_len=2060, size=2048 fake=1 [ 127.335748][ T6434] EXT4-fs (loop3): Remounting filesystem read-only [ 127.351862][ T6434] __nla_validate_parse: 15 callbacks suppressed [ 127.351875][ T6434] netlink: 4 bytes leftover after parsing attributes in process `syz.3.689'. [ 127.358108][ T6438] netlink: 9412 bytes leftover after parsing attributes in process `syz.0.690'. [ 127.404621][ T6444] loop1: detected capacity change from 0 to 512 [ 127.411087][ T6444] EXT4-fs: Ignoring removed mblk_io_submit option [ 127.417868][ T6444] EXT4-fs (loop1): mounting ext3 file system using the ext4 subsystem [ 127.426612][ T6444] EXT4-fs (loop1): can't mount with data_err=abort, fs mounted w/o journal [ 127.467657][ T3310] EXT4-fs unmount: 10 callbacks suppressed [ 127.467670][ T3310] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 128.519843][ T6474] netlink: 14 bytes leftover after parsing attributes in process `syz.1.711'. [ 128.528101][ T6476] (unnamed net_device) (uninitialized): Removing last ns target with arp_interval on [ 128.557009][ T6476] bond_slave_1: entered promiscuous mode [ 128.563105][ T6476] netlink: 4 bytes leftover after parsing attributes in process `syz.0.700'. [ 128.574974][ T6476] bond_slave_1 (unregistering): left promiscuous mode [ 128.613331][ T6474] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 128.698312][ T6474] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 128.711394][ T6474] bond0 (unregistering): Released all slaves [ 129.019499][ T6485] netlink: 4 bytes leftover after parsing attributes in process `syz.1.703'. [ 129.022154][ T6487] loop4: detected capacity change from 0 to 1024 [ 129.035364][ T6485] xt_CONNSECMARK: invalid mode: 0 [ 129.040789][ T6487] EXT4-fs: quotafile must be on filesystem root [ 129.118724][ T6492] usb usb8: usbfs: interface 0 claimed by hub while 'syz.1.706' sets config #0 [ 129.168129][ T9] usb usb2-port1: unable to enumerate USB device [ 129.213124][ T9] kernel write not supported for file /466/loginuid (pid: 9 comm: kworker/0:0) [ 129.299927][ T6503] loop4: detected capacity change from 0 to 128 [ 129.351471][ T6506] netlink: 'syz.5.713': attribute type 13 has an invalid length. [ 129.390334][ T6506] gretap0: refused to change device tx_queue_len [ 129.405696][ T6506] netlink: 12 bytes leftover after parsing attributes in process `syz.5.713'. [ 129.747410][ T6524] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=6524 comm=syz.5.718 [ 130.751545][ T6540] netlink: 8 bytes leftover after parsing attributes in process `syz.3.719'. [ 130.898526][ T6544] lo speed is unknown, defaulting to 1000 [ 130.905601][ T6544] lo speed is unknown, defaulting to 1000 [ 131.291562][ T29] kauditd_printk_skb: 405 callbacks suppressed [ 131.297766][ T29] audit: type=1326 audit(1750359026.381:6931): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6543 comm="syz.1.722" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f90701ee929 code=0x7ffc0000 [ 131.321239][ T29] audit: type=1326 audit(1750359026.381:6932): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6543 comm="syz.1.722" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f90701ee929 code=0x7ffc0000 [ 131.367206][ T29] audit: type=1326 audit(1750359026.381:6933): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6543 comm="syz.1.722" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f90701ee929 code=0x7ffc0000 [ 131.390665][ T29] audit: type=1326 audit(1750359026.381:6934): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6543 comm="syz.1.722" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f90701ee929 code=0x7ffc0000 [ 131.414070][ T29] audit: type=1326 audit(1750359026.381:6935): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6543 comm="syz.1.722" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f90701ee929 code=0x7ffc0000 [ 131.437487][ T29] audit: type=1326 audit(1750359026.381:6936): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6543 comm="syz.1.722" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f90701ee929 code=0x7ffc0000 [ 131.460978][ T29] audit: type=1326 audit(1750359026.381:6937): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6543 comm="syz.1.722" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f90701ee929 code=0x7ffc0000 [ 131.465095][ T3397] IPVS: starting estimator thread 0... [ 131.484296][ T29] audit: type=1326 audit(1750359026.381:6938): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6543 comm="syz.1.722" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f90701ee929 code=0x7ffc0000 [ 131.484322][ T29] audit: type=1326 audit(1750359026.381:6939): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6543 comm="syz.1.722" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f90701ee929 code=0x7ffc0000 [ 131.484343][ T29] audit: type=1326 audit(1750359026.381:6940): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6543 comm="syz.1.722" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f90701ee929 code=0x7ffc0000 [ 131.879105][ T6548] IPVS: using max 2640 ests per chain, 132000 per kthread [ 132.677744][ T6569] netlink: 209836 bytes leftover after parsing attributes in process `syz.5.730'. [ 132.688688][ T6574] netlink: 8 bytes leftover after parsing attributes in process `syz.0.729'. [ 132.698300][ T6574] netlink: 8 bytes leftover after parsing attributes in process `syz.0.729'. [ 132.707489][ T6574] netlink: 8 bytes leftover after parsing attributes in process `syz.0.729'. [ 132.717558][ T6574] netlink: 8 bytes leftover after parsing attributes in process `syz.0.729'. [ 132.755722][ T6585] loop3: detected capacity change from 0 to 1024 [ 132.760734][ T6583] lo speed is unknown, defaulting to 1000 [ 132.762566][ T6585] EXT4-fs: Ignoring removed orlov option [ 132.769375][ T6583] lo speed is unknown, defaulting to 1000 [ 132.789213][ T6589] loop6: detected capacity change from 0 to 7 [ 132.789254][ T6585] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 132.977293][ T6602] loop5: detected capacity change from 0 to 512 [ 133.062795][ T6602] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 133.075779][ T6602] ext4 filesystem being mounted at /24/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 133.112632][ T6602] netlink: '+}[@': attribute type 12 has an invalid length. [ 133.176213][ T3310] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 133.228264][ T6021] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 133.305547][ T6612] loop3: detected capacity change from 0 to 512 [ 133.320431][ T6612] loop3: detected capacity change from 0 to 128 [ 133.678049][ T6621] lo speed is unknown, defaulting to 1000 [ 133.685432][ T6621] lo speed is unknown, defaulting to 1000 [ 133.942054][ T6625] vlan0: entered promiscuous mode [ 133.947614][ T6625] vlan0: entered allmulticast mode [ 133.952776][ T6625] 0·: entered allmulticast mode [ 133.961158][ T6625] netlink: 4 bytes leftover after parsing attributes in process `syz.4.742'. [ 134.035096][ T6614] syz.3.740: attempt to access beyond end of device [ 134.035096][ T6614] loop3: rw=2049, sector=129, nr_sectors = 8 limit=128 [ 134.048652][ T6614] syz.3.740: attempt to access beyond end of device [ 134.048652][ T6614] loop3: rw=2049, sector=145, nr_sectors = 8 limit=128 [ 134.062047][ T6614] syz.3.740: attempt to access beyond end of device [ 134.062047][ T6614] loop3: rw=2049, sector=161, nr_sectors = 8 limit=128 [ 134.062162][ T6617] SELinux: security_context_str_to_sid (Ð-šXܘ7.H\¹ÿ %ºu@) failed with errno=-22 [ 134.075412][ T6614] syz.3.740: attempt to access beyond end of device [ 134.075412][ T6614] loop3: rw=2049, sector=177, nr_sectors = 8 limit=128 [ 134.075455][ T6614] syz.3.740: attempt to access beyond end of device [ 134.075455][ T6614] loop3: rw=2049, sector=193, nr_sectors = 8 limit=128 [ 134.075493][ T6614] syz.3.740: attempt to access beyond end of device [ 134.075493][ T6614] loop3: rw=2049, sector=209, nr_sectors = 8 limit=128 [ 134.075535][ T6614] syz.3.740: attempt to access beyond end of device [ 134.075535][ T6614] loop3: rw=2049, sector=225, nr_sectors = 8 limit=128 [ 134.075579][ T6614] syz.3.740: attempt to access beyond end of device [ 134.075579][ T6614] loop3: rw=2049, sector=241, nr_sectors = 8 limit=128 [ 134.075617][ T6614] syz.3.740: attempt to access beyond end of device [ 134.075617][ T6614] loop3: rw=2049, sector=257, nr_sectors = 8 limit=128 [ 134.075718][ T6614] syz.3.740: attempt to access beyond end of device [ 134.075718][ T6614] loop3: rw=2049, sector=273, nr_sectors = 8 limit=128 [ 134.244403][ T6631] loop3: detected capacity change from 0 to 1024 [ 134.259504][ T6633] netlink: 8 bytes leftover after parsing attributes in process `syz.4.745'. [ 134.272556][ T6633] netlink: 8 bytes leftover after parsing attributes in process `syz.4.745'. [ 134.293324][ T6631] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 134.323762][ T6644] loop5: detected capacity change from 0 to 128 [ 134.349303][ T6644] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 134.375598][ T6643] loop4: detected capacity change from 0 to 512 [ 134.414071][ T6644] ext4 filesystem being mounted at /26/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 134.431161][ T6643] EXT4-fs (loop4): too many log groups per flexible block group [ 134.438898][ T6643] EXT4-fs (loop4): failed to initialize mballoc (-12) [ 134.467341][ T6631] EXT4-fs error (device loop3): ext4_mb_mark_diskspace_used:4113: comm syz.3.743: Allocating blocks 497-513 which overlap fs metadata [ 134.507954][ T6643] EXT4-fs (loop4): mount failed [ 134.535309][ T6630] EXT4-fs (loop3): pa ffff88810077a8c0: logic 128, phys. 273, len 15 [ 134.543495][ T6630] EXT4-fs error (device loop3): ext4_mb_release_inode_pa:5364: group 0, free 0, pa_free 1 [ 134.612383][ T3310] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 134.635115][ T6629] SELinux: security_context_str_to_sid (Ð-šXܘ7.H\¹ÿ %ºu@) failed with errno=-22 [ 134.717817][ T6657] netlink: 209836 bytes leftover after parsing attributes in process `syz.4.748'. [ 134.727613][ T6655] netlink: 112 bytes leftover after parsing attributes in process `syz.1.749'. [ 134.736963][ T6653] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 134.882529][ T6675] vlan0: entered promiscuous mode [ 134.883832][ T6021] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 134.887639][ T6675] hsr_slave_1: entered promiscuous mode [ 134.902391][ T6675] vlan0: entered allmulticast mode [ 134.907531][ T6675] hsr_slave_1: entered allmulticast mode [ 135.106817][ T6690] lo speed is unknown, defaulting to 1000 [ 135.129422][ T6692] SELinux: security policydb version 18 (MLS) not backwards compatible [ 135.137706][ T6692] SELinux: failed to load policy [ 135.249645][ T6693] vhci_hcd: invalid port number 96 [ 135.254831][ T6693] vhci_hcd: default hub control req: 0000 vfffc i0060 l0 [ 135.308441][ T6698] lo speed is unknown, defaulting to 1000 [ 135.315586][ T6698] lo speed is unknown, defaulting to 1000 [ 135.476893][ T6690] lo speed is unknown, defaulting to 1000 [ 135.683593][ T6708] IPVS: Error connecting to the multicast addr [ 135.744733][ T6704] loop5: detected capacity change from 0 to 1024 [ 135.755811][ T6704] EXT4-fs (loop5): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 135.767310][ T6704] EXT4-fs (loop5): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 135.784329][ T6704] JBD2: no valid journal superblock found [ 135.790668][ T6704] EXT4-fs (loop5): Could not load journal inode [ 135.829705][ T6704] SELinux: security_context_str_to_sid (Ð-šXܘ7.H\¹ÿ %ºu@) failed with errno=-22 [ 135.938052][ T6732] loop3: detected capacity change from 0 to 128 [ 136.006149][ T6732] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 136.024382][ T6732] ext4 filesystem being mounted at /143/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 136.195591][ T6750] loop5: detected capacity change from 0 to 512 [ 136.278707][ T6754] loop4: detected capacity change from 0 to 1024 [ 136.285898][ T6754] EXT4-fs: Ignoring removed nobh option [ 136.291496][ T6754] EXT4-fs: Ignoring removed bh option [ 136.311761][ T6750] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 136.359807][ T6750] ext4 filesystem being mounted at /30/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 136.401456][ T6754] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 136.599895][ T6021] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 136.658469][ T29] kauditd_printk_skb: 632 callbacks suppressed [ 136.658482][ T29] audit: type=1326 audit(1750359031.751:7573): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6761 comm="syz.5.773" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa30bfce929 code=0x7ffc0000 [ 136.680035][ T6762] loop5: detected capacity change from 0 to 1024 [ 136.693290][ T29] audit: type=1326 audit(1750359031.751:7574): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6761 comm="syz.5.773" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa30bfce929 code=0x7ffc0000 [ 136.717887][ T29] audit: type=1326 audit(1750359031.751:7575): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6761 comm="syz.5.773" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa30bfce929 code=0x7ffc0000 [ 136.717914][ T29] audit: type=1326 audit(1750359031.751:7576): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6761 comm="syz.5.773" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa30bfce929 code=0x7ffc0000 [ 136.717966][ T29] audit: type=1326 audit(1750359031.751:7577): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6761 comm="syz.5.773" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa30bfce929 code=0x7ffc0000 [ 136.717991][ T29] audit: type=1326 audit(1750359031.751:7578): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6761 comm="syz.5.773" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa30bfce929 code=0x7ffc0000 [ 136.718016][ T29] audit: type=1326 audit(1750359031.751:7579): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6761 comm="syz.5.773" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa30bfce929 code=0x7ffc0000 [ 136.718082][ T29] audit: type=1326 audit(1750359031.751:7580): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6761 comm="syz.5.773" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fa30bfce929 code=0x7ffc0000 [ 136.718108][ T29] audit: type=1326 audit(1750359031.751:7581): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6761 comm="syz.5.773" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa30bfce929 code=0x7ffc0000 [ 136.718133][ T29] audit: type=1326 audit(1750359031.751:7582): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6761 comm="syz.5.773" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7fa30bfce929 code=0x7ffc0000 [ 136.743008][ T3310] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 136.785675][ T6762] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 136.848937][ T6746] EXT4-fs error (device loop4): ext4_mb_mark_diskspace_used:4113: comm syz.4.770: Allocating blocks 497-513 which overlap fs metadata [ 136.875009][ T6762] EXT4-fs error (device loop5): ext4_mb_mark_diskspace_used:4113: comm syz.5.773: Allocating blocks 497-513 which overlap fs metadata [ 137.024451][ T6767] dummy0: left allmulticast mode [ 137.030274][ T6767] dummy0: left promiscuous mode [ 137.035254][ T6767] bridge0: port 3(dummy0) entered disabled state [ 137.065190][ T6761] EXT4-fs (loop5): pa ffff88810077aa10: logic 128, phys. 273, len 15 [ 137.073407][ T6761] EXT4-fs error (device loop5): ext4_mb_release_inode_pa:5364: group 0, free 0, pa_free 1 [ 137.095304][ T6767] bridge_slave_1: left allmulticast mode [ 137.101070][ T6767] bridge_slave_1: left promiscuous mode [ 137.106762][ T6767] bridge0: port 2(bridge_slave_1) entered disabled state [ 137.115440][ T6021] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 137.136453][ T6767] bridge_slave_0: left allmulticast mode [ 137.142187][ T6767] bridge_slave_0: left promiscuous mode [ 137.148043][ T6767] bridge0: port 1(bridge_slave_0) entered disabled state [ 137.162856][ T6773] netlink: 'syz.1.775': attribute type 15 has an invalid length. [ 137.163035][ T6754] EXT4-fs (loop4): pa ffff8881067c8380: logic 560, phys. 433, len 5 [ 137.178621][ T6754] EXT4-fs error (device loop4): ext4_mb_release_inode_pa:5364: group 0, free 0, pa_free 1 [ 137.210755][ T6777] SELinux: security policydb version 18 (MLS) not backwards compatible [ 137.211765][ T3314] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 137.219271][ T6777] SELinux: failed to load policy [ 137.241296][ T6773] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 137.249596][ T6773] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 137.257826][ T6773] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 137.266094][ T6773] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 137.274405][ T6773] vxlan0: entered promiscuous mode [ 137.611522][ T6795] lo speed is unknown, defaulting to 1000 [ 137.619377][ T6795] lo speed is unknown, defaulting to 1000 [ 138.243633][ T6789] __nla_validate_parse: 22 callbacks suppressed [ 138.243651][ T6789] netlink: 4 bytes leftover after parsing attributes in process `syz.3.783'. [ 138.470196][ T6789] netlink: 4 bytes leftover after parsing attributes in process `syz.3.783'. [ 138.528533][ T6802] lo speed is unknown, defaulting to 1000 [ 138.548943][ T6802] lo speed is unknown, defaulting to 1000 [ 138.567238][ T6806] loop4: detected capacity change from 0 to 128 [ 138.593411][ T6806] FAT-fs (loop4): error, invalid FAT chain (i_pos 548, last_block 8) [ 138.602150][ T6806] FAT-fs (loop4): Filesystem has been set read-only [ 138.615771][ T6808] loop5: detected capacity change from 0 to 764 [ 138.623818][ T6808] rock: directory entry would overflow storage [ 138.630021][ T6808] rock: sig=0x4654, size=5, remaining=4 [ 138.637520][ T6806] FAT-fs (loop4): error, corrupted file size (i_pos 548, 522) [ 138.654147][ T6806] SELinux: syz.4.786 (6806) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 138.682985][ T6809] vhci_hcd: invalid port number 96 [ 138.688157][ T6809] vhci_hcd: default hub control req: 0000 vfffc i0060 l0 [ 138.724184][ T6808] tipc: Started in network mode [ 138.729122][ T6808] tipc: Node identity 4, cluster identity 4711 [ 138.735315][ T6808] tipc: Node number set to 4 [ 138.761191][ T6789] netlink: 20 bytes leftover after parsing attributes in process `syz.3.783'. [ 138.785984][ T6806] wireguard0: entered promiscuous mode [ 138.791855][ T6806] wireguard0: entered allmulticast mode [ 139.336440][ T6830] loop4: detected capacity change from 0 to 128 [ 139.376541][ T6830] bio_check_eod: 104 callbacks suppressed [ 139.376558][ T6830] syz.4.791: attempt to access beyond end of device [ 139.376558][ T6830] loop4: rw=0, sector=121, nr_sectors = 120 limit=128 [ 139.554951][ T6837] netlink: 4 bytes leftover after parsing attributes in process `syz.0.793'. [ 139.777806][ T6850] netlink: 9 bytes leftover after parsing attributes in process `syz.3.798'. [ 139.794332][ T6850] ALSA: seq fatal error: cannot create timer (-22) [ 139.892200][ T6852] lo speed is unknown, defaulting to 1000 [ 139.898872][ T6852] lo speed is unknown, defaulting to 1000 [ 140.066724][ T6854] lo speed is unknown, defaulting to 1000 [ 140.073800][ T6854] lo speed is unknown, defaulting to 1000 [ 140.247031][ T6856] hub 9-0:1.0: USB hub found [ 140.303961][ T6856] hub 9-0:1.0: 8 ports detected [ 140.369435][ T57] kworker/u8:4: attempt to access beyond end of device [ 140.369435][ T57] loop4: rw=1, sector=241, nr_sectors = 800 limit=128 [ 140.862701][ T6862] lo speed is unknown, defaulting to 1000 [ 140.869120][ T6862] lo speed is unknown, defaulting to 1000 [ 141.349683][ T6870] netlink: 28 bytes leftover after parsing attributes in process `syz.5.801'. [ 141.358618][ T6870] netlink: 28 bytes leftover after parsing attributes in process `syz.5.801'. [ 141.388936][ T6865] netlink: 'syz.4.799': attribute type 13 has an invalid length. [ 141.539233][ T6865] program syz.4.799 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 141.622769][ T6876] 9pnet_fd: Insufficient options for proto=fd [ 141.630091][ T6876] siw: device registration error -23 [ 141.671556][ T29] kauditd_printk_skb: 343 callbacks suppressed [ 141.671636][ T29] audit: type=1326 audit(1750359036.761:7926): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6869 comm="syz.5.801" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fa30bfc58e7 code=0x7ffc0000 [ 141.770003][ T29] audit: type=1326 audit(1750359036.791:7927): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6869 comm="syz.5.801" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fa30bf6ab19 code=0x7ffc0000 [ 141.793286][ T29] audit: type=1326 audit(1750359036.791:7928): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6869 comm="syz.5.801" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fa30bfc58e7 code=0x7ffc0000 [ 141.816532][ T29] audit: type=1326 audit(1750359036.791:7929): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6869 comm="syz.5.801" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fa30bf6ab19 code=0x7ffc0000 [ 141.839812][ T29] audit: type=1326 audit(1750359036.791:7930): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6869 comm="syz.5.801" exe="/root/syz-executor" sig=0 arch=c000003e syscall=19 compat=0 ip=0x7fa30bfce929 code=0x7ffc0000 [ 141.863036][ T29] audit: type=1326 audit(1750359036.801:7931): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6869 comm="syz.5.801" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fa30bfc58e7 code=0x7ffc0000 [ 141.886277][ T29] audit: type=1326 audit(1750359036.801:7932): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6869 comm="syz.5.801" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fa30bf6ab19 code=0x7ffc0000 [ 141.909476][ T29] audit: type=1326 audit(1750359036.801:7933): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6869 comm="syz.5.801" exe="/root/syz-executor" sig=0 arch=c000003e syscall=19 compat=0 ip=0x7fa30bfce929 code=0x7ffc0000 [ 141.932721][ T29] audit: type=1326 audit(1750359036.811:7934): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6869 comm="syz.5.801" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fa30bfc58e7 code=0x7ffc0000 [ 141.956034][ T29] audit: type=1326 audit(1750359036.811:7935): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6869 comm="syz.5.801" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fa30bf6ab19 code=0x7ffc0000 [ 142.096418][ T6883] loop4: detected capacity change from 0 to 512 [ 142.100473][ T6882] serio: Serial port ptm1 [ 142.103496][ T6883] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 142.119554][ T6883] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 142.132626][ T6883] ext4 filesystem being mounted at /155/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 142.477706][ T6894] netlink: 'syz.0.807': attribute type 13 has an invalid length. [ 142.506129][ T6894] gretap0: refused to change device tx_queue_len [ 142.512540][ T6894] net_ratelimit: 42 callbacks suppressed [ 142.512552][ T6894] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 142.565761][ T6894] netlink: 12 bytes leftover after parsing attributes in process `syz.0.807'. [ 142.599133][ T6902] netlink: 4 bytes leftover after parsing attributes in process `syz.5.808'. [ 142.608295][ T6902] bridge_slave_1: left allmulticast mode [ 142.613950][ T6902] bridge_slave_1: left promiscuous mode [ 142.619839][ T6902] bridge0: port 2(bridge_slave_1) entered disabled state [ 142.629626][ T6902] bridge_slave_0: left allmulticast mode [ 142.635290][ T6902] bridge_slave_0: left promiscuous mode [ 142.640983][ T6902] bridge0: port 1(bridge_slave_0) entered disabled state [ 142.649629][ T3314] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 142.659394][ T3576] IPVS: starting estimator thread 0... [ 142.693553][ T6909] loop4: detected capacity change from 0 to 2048 [ 142.709202][ T6909] EXT4-fs (loop4): failed to initialize system zone (-117) [ 142.716526][ T6909] EXT4-fs (loop4): mount failed [ 142.732111][ T6909] loop4: detected capacity change from 0 to 256 [ 142.747076][ T6909] FAT-fs (loop4): codepage cp860 not found [ 142.757918][ T6904] IPVS: using max 2640 ests per chain, 132000 per kthread [ 142.778258][ T6914] netlink: 4 bytes leftover after parsing attributes in process `syz.3.814'. [ 142.827004][ T6917] netlink: 'syz.5.813': attribute type 6 has an invalid length. [ 142.839547][ T6917] loop5: detected capacity change from 0 to 1024 [ 142.887200][ T6921] bond0 (unregistering): (slave dummy0): Releasing backup interface [ 142.899110][ T6921] bond0 (unregistering): Released all slaves [ 142.926847][ T6922] lo speed is unknown, defaulting to 1000 [ 142.944044][ T6922] lo speed is unknown, defaulting to 1000 [ 142.952583][ T6927] loop5: detected capacity change from 0 to 1024 [ 142.989674][ T6927] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 143.003984][ T6927] ext4 filesystem being mounted at /41/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 143.104201][ T6944] loop4: detected capacity change from 0 to 512 [ 143.134347][ T6944] ext4: Unknown parameter 'hash' [ 143.148733][ T6946] netlink: zone id is out of range [ 143.153876][ T6946] netlink: zone id is out of range [ 143.193330][ T6946] netlink: zone id is out of range [ 143.198603][ T6946] netlink: zone id is out of range [ 143.203724][ T6946] netlink: zone id is out of range [ 143.209849][ T6946] netlink: zone id is out of range [ 143.214992][ T6946] netlink: zone id is out of range [ 143.215014][ T6946] netlink: zone id is out of range [ 143.215041][ T6946] netlink: zone id is out of range [ 143.270016][ T6021] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 143.306089][ T6959] netlink: 'syz.1.825': attribute type 13 has an invalid length. [ 143.314341][ T6959] gretap0: refused to change device tx_queue_len [ 143.325499][ T6959] __nla_validate_parse: 11 callbacks suppressed [ 143.325511][ T6959] netlink: 12 bytes leftover after parsing attributes in process `syz.1.825'. [ 143.343709][ T6963] SELinux: security policydb version 18 (MLS) not backwards compatible [ 143.353367][ T6963] SELinux: failed to load policy [ 143.362182][ T9] IPVS: starting estimator thread 0... [ 143.457995][ T6965] IPVS: using max 2640 ests per chain, 132000 per kthread [ 143.481256][ T6972] netlink: 12 bytes leftover after parsing attributes in process `syz.4.829'. [ 143.490195][ T6972] netlink: 28 bytes leftover after parsing attributes in process `syz.4.829'. [ 143.499055][ T6972] netlink: 12 bytes leftover after parsing attributes in process `syz.4.829'. [ 143.508238][ T6972] netlink: 28 bytes leftover after parsing attributes in process `syz.4.829'. [ 143.518112][ T6972] netlink: 'syz.4.829': attribute type 6 has an invalid length. [ 143.655709][ T6976] lo speed is unknown, defaulting to 1000 [ 143.662713][ T6976] lo speed is unknown, defaulting to 1000 [ 144.258010][ T6989] netlink: 4 bytes leftover after parsing attributes in process `syz.4.834'. [ 144.278176][ T6989] netlink: 4 bytes leftover after parsing attributes in process `syz.4.834'. [ 144.323280][ T6989] netlink: 4 bytes leftover after parsing attributes in process `syz.4.834'. [ 144.336391][ T6994] lo speed is unknown, defaulting to 1000 [ 144.337249][ T6989] netlink: 4 bytes leftover after parsing attributes in process `syz.4.834'. [ 144.348190][ T6994] lo speed is unknown, defaulting to 1000 [ 144.352698][ T6989] netlink: 4 bytes leftover after parsing attributes in process `syz.4.834'. [ 144.474933][ T7000] loop5: detected capacity change from 0 to 512 [ 144.488374][ T7000] ext4: Unknown parameter 'hash' [ 144.584519][ T7008] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 144.595574][ T7008] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 144.604866][ T7008] bond0 (unregistering): Released all slaves [ 144.778986][ T7014] lo speed is unknown, defaulting to 1000 [ 144.785903][ T7014] lo speed is unknown, defaulting to 1000 [ 145.599396][ T7033] netlink: 'syz.1.846': attribute type 6 has an invalid length. [ 145.650367][ T7036] serio: Serial port ptm0 [ 146.102672][ T7029] lo speed is unknown, defaulting to 1000 [ 146.182878][ T7029] lo speed is unknown, defaulting to 1000 [ 146.679576][ T29] kauditd_printk_skb: 567 callbacks suppressed [ 146.679593][ T29] audit: type=1326 audit(1750359041.771:8503): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7047 comm="syz.0.862" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f6740f058e7 code=0x7ffc0000 [ 146.716834][ T29] audit: type=1326 audit(1750359041.771:8504): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7047 comm="syz.0.862" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f6740eaab19 code=0x7ffc0000 [ 146.740172][ T29] audit: type=1326 audit(1750359041.771:8505): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7047 comm="syz.0.862" exe="/root/syz-executor" sig=0 arch=c000003e syscall=276 compat=0 ip=0x7f6740f0e929 code=0x7ffc0000 [ 146.763489][ T29] audit: type=1326 audit(1750359041.771:8506): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7047 comm="syz.0.862" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f6740f058e7 code=0x7ffc0000 [ 146.786716][ T29] audit: type=1326 audit(1750359041.771:8507): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7047 comm="syz.0.862" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f6740eaab19 code=0x7ffc0000 [ 146.810137][ T29] audit: type=1326 audit(1750359041.771:8508): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7047 comm="syz.0.862" exe="/root/syz-executor" sig=0 arch=c000003e syscall=276 compat=0 ip=0x7f6740f0e929 code=0x7ffc0000 [ 146.833678][ T29] audit: type=1326 audit(1750359041.771:8509): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7047 comm="syz.0.862" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f6740f058e7 code=0x7ffc0000 [ 146.857052][ T29] audit: type=1326 audit(1750359041.771:8510): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7047 comm="syz.0.862" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f6740eaab19 code=0x7ffc0000 [ 146.880374][ T29] audit: type=1326 audit(1750359041.771:8511): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7047 comm="syz.0.862" exe="/root/syz-executor" sig=0 arch=c000003e syscall=276 compat=0 ip=0x7f6740f0e929 code=0x7ffc0000 [ 146.903781][ T29] audit: type=1326 audit(1750359041.771:8512): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7047 comm="syz.0.862" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f6740f058e7 code=0x7ffc0000 [ 147.265729][ T7135] tipc: Enabled bearer , priority 10 [ 147.274608][ T7135] tipc: Enabling of bearer rejected, failed to enable media [ 147.341505][ T7153] can0: slcan on ttyS3. [ 147.348929][ T7153] netlink: 'syz.0.858': attribute type 13 has an invalid length. [ 147.459781][ T7153] 8021q: adding VLAN 0 to HW filter on device $Hÿ [ 147.485751][ T7153] 8021q: adding VLAN 0 to HW filter on device team0 [ 147.588060][ T7153] net_ratelimit: 94 callbacks suppressed [ 147.588069][ T7153] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 147.610052][ T3392] lo speed is unknown, defaulting to 1000 [ 147.615819][ T3392] syz2: Port: 1 Link ACTIVE [ 147.792227][ T7172] netlink: zone id is out of range [ 147.881160][ T7172] netlink: zone id is out of range [ 147.954464][ T7172] netlink: zone id is out of range [ 148.002739][ T7172] netlink: zone id is out of range [ 148.042537][ T7172] netlink: zone id is out of range [ 148.278594][ T7172] netlink: zone id is out of range [ 148.328675][ T7137] can0 (unregistered): slcan off ttyS3. [ 148.355809][ T7172] netlink: zone id is out of range [ 148.400605][ T7172] netlink: zone id is out of range [ 148.429388][ T7172] netlink: zone id is out of range [ 148.574400][ T7196] lo speed is unknown, defaulting to 1000 [ 148.581631][ T7196] lo speed is unknown, defaulting to 1000 [ 148.613837][ T7199] netlink: 'syz.4.868': attribute type 1 has an invalid length. [ 148.621541][ T7199] __nla_validate_parse: 9 callbacks suppressed [ 148.621569][ T7199] netlink: 224 bytes leftover after parsing attributes in process `syz.4.868'. [ 148.648560][ T7198] netlink: 4 bytes leftover after parsing attributes in process `syz.5.870'. [ 148.657471][ T7198] netlink: 4 bytes leftover after parsing attributes in process `syz.5.870'. [ 148.690387][ T7198] netlink: 4 bytes leftover after parsing attributes in process `syz.5.870'. [ 148.699540][ T7198] netlink: 4 bytes leftover after parsing attributes in process `syz.5.870'. [ 148.708055][ T7202] lo speed is unknown, defaulting to 1000 [ 148.719399][ T7202] lo speed is unknown, defaulting to 1000 [ 148.735545][ T7206] netlink: 28 bytes leftover after parsing attributes in process `syz.4.871'. [ 148.744535][ T7206] netlink: 28 bytes leftover after parsing attributes in process `syz.4.871'. [ 148.755808][ T7198] netlink: 4 bytes leftover after parsing attributes in process `syz.5.870'. [ 148.766250][ T7198] netlink: 4 bytes leftover after parsing attributes in process `syz.5.870'. [ 148.814389][ T7211] netlink: 209836 bytes leftover after parsing attributes in process `syz.1.872'. [ 149.128051][ T7221] tipc: Enabled bearer , priority 10 [ 149.136830][ T7221] tipc: Enabling of bearer rejected, failed to enable media [ 149.415586][ T7236] loop0: detected capacity change from 0 to 1024 [ 149.430127][ T9] kernel write not supported for file /521/loginuid (pid: 9 comm: kworker/0:0) [ 149.448273][ T7236] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 149.465259][ T7236] ext4 filesystem being mounted at /185/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 150.013280][ T3308] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 150.083869][ T7253] hub 9-0:1.0: USB hub found [ 150.088659][ T7253] hub 9-0:1.0: 8 ports detected [ 150.152592][ T7257] loop0: detected capacity change from 0 to 512 [ 150.172079][ T7258] SET target dimension over the limit! [ 150.180388][ T7257] EXT4-fs error (device loop0): ext4_ext_check_inode:523: inode #3: comm syz.0.886: pblk 24 bad header/extent: invalid extent entries - magic f30a, entries 3, max 4(4), depth 0(0) [ 150.239140][ T7257] EXT4-fs error (device loop0): ext4_quota_enable:7127: comm syz.0.886: Bad quota inode: 3, type: 0 [ 150.268517][ T7257] EXT4-fs warning (device loop0): ext4_enable_quotas:7168: Failed to enable quota tracking (type=0, err=-117, ino=3). Please run e2fsck to fix. [ 150.283299][ T7257] EXT4-fs (loop0): mount failed [ 150.404119][ T7266] netlink: 'syz.0.886': attribute type 1 has an invalid length. [ 150.778724][ T7285] tipc: Enabled bearer , priority 10 [ 150.864256][ T7285] tipc: Enabling of bearer rejected, failed to enable media [ 150.918147][ T7297] netlink: 'syz.3.900': attribute type 1 has an invalid length. [ 151.431528][ T7314] lo speed is unknown, defaulting to 1000 [ 151.438160][ T7314] lo speed is unknown, defaulting to 1000 [ 151.833024][ T29] kauditd_printk_skb: 891 callbacks suppressed [ 151.833040][ T29] audit: type=1326 audit(1750359046.921:9404): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7316 comm="syz.4.896" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f48ddd0e929 code=0x7ffc0000 [ 151.874859][ T29] audit: type=1326 audit(1750359046.931:9405): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7316 comm="syz.4.896" exe="/root/syz-executor" sig=0 arch=c000003e syscall=425 compat=0 ip=0x7f48ddd0e929 code=0x7ffc0000 [ 151.898267][ T29] audit: type=1326 audit(1750359046.931:9406): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7316 comm="syz.4.896" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f48ddd0e963 code=0x7ffc0000 [ 151.921542][ T29] audit: type=1326 audit(1750359046.931:9407): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7316 comm="syz.4.896" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f48ddd0e963 code=0x7ffc0000 [ 151.944716][ T29] audit: type=1326 audit(1750359046.931:9408): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7316 comm="syz.4.896" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f48ddd0e929 code=0x7ffc0000 [ 151.968079][ T29] audit: type=1326 audit(1750359046.931:9409): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7316 comm="syz.4.896" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f48ddd0e929 code=0x7ffc0000 [ 151.991430][ T29] audit: type=1326 audit(1750359046.931:9410): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7316 comm="syz.4.896" exe="/root/syz-executor" sig=0 arch=c000003e syscall=93 compat=0 ip=0x7f48ddd0e929 code=0x7ffc0000 [ 152.003321][ T7325] loop0: detected capacity change from 0 to 2048 [ 152.014638][ T29] audit: type=1326 audit(1750359046.931:9411): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7316 comm="syz.4.896" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f48ddd0e929 code=0x7ffc0000 [ 152.022557][ T7325] EXT4-fs: Ignoring removed nobh option [ 152.044233][ T29] audit: type=1326 audit(1750359046.931:9412): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7316 comm="syz.4.896" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f48ddd0e929 code=0x7ffc0000 [ 152.044322][ T29] audit: type=1326 audit(1750359046.931:9413): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7316 comm="syz.4.896" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f48ddd0e929 code=0x7ffc0000 [ 152.107087][ T7327] SET target dimension over the limit! [ 152.200218][ T7325] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 152.876964][ T3308] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 153.520536][ T7378] loop0: detected capacity change from 0 to 512 [ 153.536353][ T7379] netdevsim netdevsim1 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 153.573211][ T7380] net_ratelimit: 144 callbacks suppressed [ 153.573223][ T7380] netlink: zone id is out of range [ 153.585287][ T7380] netlink: zone id is out of range [ 153.590542][ T7380] netlink: zone id is out of range [ 153.591270][ T7379] netdevsim netdevsim1 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 153.595857][ T7380] netlink: zone id is out of range [ 153.610644][ T7380] netlink: zone id is out of range [ 153.615887][ T7380] netlink: zone id is out of range [ 153.621050][ T7380] netlink: zone id is out of range [ 153.626254][ T7380] netlink: zone id is out of range [ 153.631393][ T7380] netlink: zone id is out of range [ 153.636597][ T7380] netlink: zone id is out of range [ 153.686422][ T7386] __nla_validate_parse: 16 callbacks suppressed [ 153.686436][ T7386] netlink: 9412 bytes leftover after parsing attributes in process `syz.3.918'. [ 153.703747][ T7379] netdevsim netdevsim1 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 153.773178][ T7379] netdevsim netdevsim1 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 153.891996][ T7390] lo speed is unknown, defaulting to 1000 [ 153.898647][ T7390] lo speed is unknown, defaulting to 1000 [ 154.015358][ T7379] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 154.030639][ T7379] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 154.044564][ T7379] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 154.058952][ T7379] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 154.383976][ T7393] netlink: 4 bytes leftover after parsing attributes in process `syz.1.920'. [ 154.455873][ T7403] SET target dimension over the limit! [ 154.468418][ T7405] netlink: 4 bytes leftover after parsing attributes in process `syz.1.933'. [ 154.496793][ T7403] loop0: detected capacity change from 0 to 8192 [ 154.569645][ T7411] random: crng reseeded on system resumption [ 154.812344][ T7417] lo speed is unknown, defaulting to 1000 [ 154.819442][ T7417] lo speed is unknown, defaulting to 1000 [ 154.971490][ T7417] hub 9-0:1.0: USB hub found [ 154.976480][ T7417] hub 9-0:1.0: 8 ports detected [ 155.737401][ T7422] netlink: 'syz.5.924': attribute type 13 has an invalid length. [ 155.753752][ T7424] pim6reg: entered allmulticast mode [ 155.764887][ T7403] ================================================================== [ 155.772971][ T7403] BUG: KCSAN: data-race in __xa_clear_mark / xas_find_marked [ 155.772993][ T7403] [ 155.772997][ T7403] read-write to 0xffff88811902a908 of 8 bytes by interrupt on cpu 1: [ 155.773014][ T7403] __xa_clear_mark+0xf5/0x1e0 [ 155.773034][ T7403] __folio_end_writeback+0x177/0x470 [ 155.773059][ T7403] folio_end_writeback+0x71/0x3d0 [ 155.773085][ T7403] mpage_write_end_io+0x274/0x390 [ 155.773104][ T7403] bio_endio+0x377/0x410 [ 155.773128][ T7403] blk_update_request+0x336/0x730 [ 155.773151][ T7403] blk_mq_end_request+0x26/0x50 [ 155.773179][ T7403] lo_complete_rq+0x98/0x140 [ 155.773207][ T7403] blk_done_softirq+0x74/0xb0 [ 155.773226][ T7403] handle_softirqs+0xba/0x290 [ 155.773245][ T7403] run_ksoftirqd+0x1c/0x30 [ 155.773268][ T7403] smpboot_thread_fn+0x32b/0x530 [ 155.773299][ T7403] kthread+0x486/0x510 [ 155.773314][ T7403] ret_from_fork+0xdd/0x150 [ 155.773330][ T7403] ret_from_fork_asm+0x1a/0x30 [ 155.773354][ T7403] [ 155.773359][ T7403] read to 0xffff88811902a908 of 8 bytes by task 7403 on cpu 0: [ 155.773376][ T7403] xas_find_marked+0x218/0x620 [ 155.773392][ T7403] find_get_entry+0x5d/0x380 [ 155.773418][ T7403] filemap_get_folios_tag+0x13b/0x210 [ 155.773451][ T7403] file_write_and_wait_range+0x1ea/0x2c0 [ 155.773477][ T7403] __generic_file_fsync+0x46/0x140 [ 155.773503][ T7403] fat_file_fsync+0x49/0x100 [ 155.773523][ T7403] vfs_fsync_range+0x10d/0x130 [ 155.773537][ T7403] generic_file_write_iter+0x1b8/0x2f0 [ 155.773559][ T7403] vfs_write+0x4a0/0x8e0 [ 155.773589][ T7403] ksys_write+0xda/0x1a0 [ 155.773605][ T7403] __x64_sys_write+0x40/0x50 [ 155.773621][ T7403] x64_sys_call+0x2cdd/0x2fb0 [ 155.773639][ T7403] do_syscall_64+0xd2/0x200 [ 155.773656][ T7403] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 155.773678][ T7403] [ 155.773682][ T7403] value changed: 0x000000001fffffff -> 0x000000001ffffffc [ 155.773693][ T7403] [ 155.773697][ T7403] Reported by Kernel Concurrency Sanitizer on: [ 155.773716][ T7403] CPU: 0 UID: 0 PID: 7403 Comm: syz.0.921 Not tainted 6.16.0-rc2-syzkaller-00087-g24770983ccfe #0 PREEMPT(voluntary) [ 155.773740][ T7403] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 155.773751][ T7403] ================================================================== [ 155.799826][ T7426] netlink: 'syz.4.926': attribute type 12 has an invalid length. [ 155.899012][ T7423] program syz.5.924 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 155.899139][ T7426] netlink: 172 bytes leftover after parsing attributes in process `syz.4.926'. [ 156.045821][ T7422] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 156.055628][ T7422] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 156.085926][ T7422] netdevsim netdevsim5 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 156.095038][ T7422] netdevsim netdevsim5 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 156.104035][ T7422] netdevsim netdevsim5 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 156.112996][ T7422] netdevsim netdevsim5 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 156.513001][ T7419] pim6reg: left allmulticast mode