last executing test programs: 4.677648409s ago: executing program 2 (id=757): signalfd(0xffffffffffffffff, &(0x7f0000000000)={[0xd6]}, 0x8) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xb, &(0x7f0000000b80)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b703000000000000850000007200000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r0}, 0x10) r2 = socket$kcm(0x10, 0x2, 0x0) recvmsg(r2, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x0) write$cgroup_subtree(r2, &(0x7f0000000000)=ANY=[@ANYBLOB="364000002600913e"], 0xfe33) bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x48) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000000f80)={0xfffffffffffffffe, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}], 0x6, "a9e805acbd5e1a"}) ioctl$BTRFS_IOC_TREE_SEARCH(r0, 0xd0009411, &(0x7f0000001f80)={{0x0, 0x7, 0x3ff, 0x1, 0x100000000, 0x4, 0x0, 0x6e, 0x7, 0x1, 0x4, 0x0, 0x7, 0x2, 0x8}}) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r1, 0xd000943e, &(0x7f0000002f80)={r3, r4, "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", "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"}) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2, 0x42031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000bc0000/0x400000)=nil, 0x400000, 0x9) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0) 4.504790531s ago: executing program 2 (id=759): perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kmem_cache_free\x00', 0xffffffffffffffff, 0x0, 0x1}, 0x18) set_mempolicy(0x4005, &(0x7f0000000080)=0x7e, 0x9) syz_clone(0x2c9a4080, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = syz_io_uring_setup(0x1725, &(0x7f0000000100)={0x0, 0x1b2f, 0x800, 0x1, 0x333}, &(0x7f0000000400)=0x0, &(0x7f0000000200)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000240)=0xfffffc04, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_SENDMSG={0x9, 0x1c, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000800)={0x0, 0x0, &(0x7f00000005c0)=[{0x0}, {0x0}], 0x2}, 0x0, 0x4080}) io_uring_enter(r0, 0x47f6, 0x0, 0x0, 0x0, 0x0) 4.306285574s ago: executing program 1 (id=760): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) semget$private(0x0, 0x6, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000f67fe4)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4f23, 0x6, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x200000b}, 0x1c) syz_emit_ethernet(0x3a, &(0x7f0000002100)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x17}, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x2c, 0x0, 0x0, 0x0, 0x11, 0x0, @empty=0x18, @multicast1}, {0x0, 0x4e20, 0x18, 0x0, @wg=@data}}}}}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f0000000200), r1) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x14, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x230, 0x0, 0x0, 0x40f00, 0x38, '\x00', 0x0, @lirc_mode2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r3}, 0x10) r4 = socket$inet(0xa, 0x801, 0x84) connect$inet(r4, &(0x7f0000000340)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r4, 0x8) r5 = accept4(r4, 0x0, 0x0, 0x0) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x1) sendmmsg$unix(r5, &(0x7f0000002a40)=[{{0x0, 0x0, &(0x7f0000000800)=[{&(0x7f0000000440)="be", 0x1}], 0x1, 0x0, 0x0, 0x8000}}], 0x1, 0x4000045) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r5, 0x84, 0x7b, 0x0, 0x0) 4.172382755s ago: executing program 1 (id=762): ftruncate(0xffffffffffffffff, 0x312762fb) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000180)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x2000000}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='sched_switch\x00', r4}, 0x10) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000005"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x9, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000580)='GPL\x00', 0xa, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r6 = shmat(0x0, &(0x7f0000ffa000/0x3000)=nil, 0x4000) bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x15, 0x2a, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000f0030000000000006000000018120000", @ANYRES32=r5, @ANYBLOB="0000000000000000b703000000000000850000000c000000b70000000000000018000000000000800000000080000000186a0000030000000000000006000000b7080000000000007b8af8ff00000000b7080000010000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70500000800000085000000a500000018110000", @ANYRES32=r6, @ANYBLOB="0001000000000000b7020000000000008500000086000000180100002020692500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000f8ffffff8500000006000000186900000100000000000000ffffff7f18140000", @ANYRES32=r5, @ANYBLOB="0000000000000000851000000000000095eeff0000000000"], &(0x7f00000005c0)='syzkaller\x00', 0xe, 0x0, &(0x7f0000000800), 0x41000, 0x21, '\x00', 0x0, @sk_reuseport=0x28, 0xffffffffffffffff, 0x8, &(0x7f00000004c0)={0x103, 0x4}, 0x8, 0x10, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x7, 0x0, &(0x7f0000000940)=[{0x5, 0x4, 0xb, 0x9}, {0x5, 0x2, 0xf, 0x4}, {0x2, 0x4, 0x0, 0xc}, {0x4, 0x4, 0x7, 0x11}, {0x1, 0x4, 0x0, 0x7}, {0x0, 0x4, 0xf, 0xc}, {0x5, 0x5, 0xb, 0xc}], 0x10, 0x3fb, @void, @value}, 0x94) r7 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000380), 0x101040) ioctl$SNDRV_TIMER_IOCTL_SELECT(r7, 0x40345410, &(0x7f0000000300)={{0x0, 0x2}}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, &(0x7f00000003c0)={0x9c9, 0x0, 0x0, 'queue1\x00', 0x200000}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(0xffffffffffffffff, 0x40605346, &(0x7f0000000280)={0x0, 0x0, {0x3}}) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r7, 0x40505412, &(0x7f00000000c0)={0x2, 0x2, 0x44, 0x0, 0xd}) keyctl$chown(0x4, 0x0, 0xee00, 0xffffffffffffffff) creat(&(0x7f00000000c0)='./file0\x00', 0x1f4) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) syz_clone(0x640c7000, 0x0, 0x0, 0x0, 0x0, 0x0) 3.618848133s ago: executing program 2 (id=764): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000ae00"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ffd, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kfree\x00', r0}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b40500000000000061108a000000000007000000000000009500000000000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x3c) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000001000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000003200)=ANY=[@ANYBLOB="1e0000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x59dc6d71776a1654, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) socket$igmp6(0xa, 0x3, 0x2) r3 = socket(0x10, 0x803, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'team_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xffe0, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x1}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000600)=@newtfilter={0x74, 0x2c, 0xd2b, 0x70bd2b, 0x25dfdbfb, {0x0, 0x0, 0x0, r5, {0xf}, {}, {0x7, 0xfff3}}, [@filter_kind_options=@f_u32={{0x8}, {0x48, 0x2, [@TCA_U32_SEL={0x44, 0x5, {0x1, 0x1, 0x3, 0x1, 0x4, 0x2, 0x6, 0x7ffffffa, [{0x200, 0x500, 0x3, 0x6}, {0x6783, 0x2, 0x8001, 0x10}, {0x0, 0x53, 0xa9, 0x1}]}}]}}]}, 0x74}}, 0x24040084) 3.581253863s ago: executing program 2 (id=766): r0 = socket$inet6(0xa, 0x3, 0xff) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000cc0)=ANY=[@ANYRES32, @ANYRES32=r0, @ANYBLOB="e547302b5619762f9ae5059f12238dc7cac69b8cb3d9206dcaa14c74c36929b670df9d66e4c6d5cf5d759b56515e86898a", @ANYRES8=r0, @ANYBLOB="8518b338dd9cef04d0c1611c659597e07a10c2bd494822facbb508b9dd91d01376d8fad2f97330142e4e1f279793687d2bc5c2a6cc3d49c07e8cb6050b1ec330f7ec2010d88ba89f18d0d34d86eb121be653b3878ddadbfe08434a34df2b45b96b4883f6924249f150c5d70c9fb0408ab9227d512d3a89738ccf47082d3aa401a1855b6907", @ANYRES8=r0, @ANYRES64=r0, @ANYRESDEC=r0, @ANYRESDEC=0x0], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000fc007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001000000850000002300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_BIND_MAP(0xa, &(0x7f0000001a00)={r2}, 0xc) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r4 = socket(0x400000000010, 0x3, 0x0) socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x1}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000002580)=@gettfilter={0x2c, 0x2e, 0x200, 0x70bd28, 0x25dfdbff, {0x0, 0x0, 0x0, r5, {0xa, 0xa}, {0x0, 0xfff1}, {0xe, 0x7}}, [{0x8, 0xb, 0x6}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000094}, 0x4044040) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000200), 0xffffffffffffffff) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="0200000004000000040003000100000080000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000100"/28], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000006c0)=ANY=[@ANYBLOB="18000000000000000000000095980000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f0ffffffb702000005000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) setsockopt$inet6_int(r0, 0x29, 0x16, &(0x7f00000001c0)=0x7f, 0x4) close(r0) 3.360904636s ago: executing program 4 (id=768): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000300)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = socket(0x10, 0x3, 0x4) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20004004}, 0x4080) openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = socket$xdp(0x2c, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x400000000000004) setsockopt$XDP_RX_RING(r1, 0x11b, 0x2, &(0x7f00000004c0)=0x1000000, 0x4) writev(r2, &(0x7f0000000000)=[{&(0x7f0000000200)="480000001400190d7ebdeb75fd0d8c562c84d8c033ed7a80ffe0090f000000000000a2bc5603ca00000f7f89000000200000004a2471083ec6991778581acb6c0101ff00", 0x44}], 0x1) syz_genetlink_get_family_id$fou(&(0x7f0000000340), r2) syz_genetlink_get_family_id$ipvs(&(0x7f0000000280), r2) 3.317754446s ago: executing program 1 (id=769): perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x66, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x5}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffd, 0x0, 0x0, 0x0, 0x8}, 0x0, 0x0, 0xffffffffffffffff, 0x9) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, &(0x7f0000000140)={0x6}, 0x10) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[], 0x28}}, 0x0) syz_io_uring_setup(0x109, &(0x7f0000000140)={0x0, 0x114d7, 0x2, 0x1, 0x85}, &(0x7f00000004c0)=0x0, &(0x7f0000000200)=0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000b40)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000021007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='kfree\x00', r4, 0x0, 0x4000006}, 0x18) bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB="07000000040000001800000042a0000000000000", @ANYRES32, @ANYBLOB="0001000000007d800eae00001400000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000001800"], 0x48) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffff9c, 0x0, &(0x7f0000000480)='./file0\x00', 0x0, 0x29c780}) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000002e00)=@newtaction={0x5c, 0x30, 0xffff, 0xffffffff, 0x25dfdbfc, {}, [{0x48, 0x1, [@m_police={0x44, 0x1, 0x0, 0x0, {{0xb}, {0x18, 0x2, 0x0, 0x1, [[@TCA_POLICE_RESULT={0x8, 0x5, 0x3}, @TCA_POLICE_RATE64={0xc, 0x8, 0x700}]]}, {0x4}, {0xc, 0xb, {0x0, 0x1}}, {0xc, 0xa, {0x0, 0x2}}}}]}]}, 0x5c}}, 0x0) socket(0x1e, 0x4, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newtaction={0x60, 0x30, 0x871a15abc695f83d, 0x0, 0x25dfdbfc, {}, [{0x4c, 0x1, [@m_sample={0x48, 0x1, 0x0, 0x0, {{0xb}, {0x1c, 0x2, 0x0, 0x1, [@TCA_SAMPLE_PARMS={0x18, 0x2, {0x9, 0x9, 0x0, 0x0, 0x1}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x2, 0x3}}}}]}]}, 0x60}, 0x1, 0x0, 0x0, 0x4}, 0x0) r6 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x800) ioctl$SG_GET_VERSION_NUM(r6, 0x2284, &(0x7f0000000080)) 3.295075866s ago: executing program 2 (id=770): bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x15, 0xc, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000edff0000000000000000850000000f00000018010000646c012500000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000800000850000000600000095"], 0x0, 0x4000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={0x0, r0}, 0x18) r1 = syz_open_dev$tty20(0xc, 0x4, 0x1) write$binfmt_misc(r1, &(0x7f0000000240), 0xfffffecc) unshare(0x60480) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000050000000900010073797a300000000078000000030a01030000000000000000050000000900010073797a300000000008000540000000001c0008800c00024000000000000000000c00014000000000000000000900030073797a3200000000280004800800024000000000140003007465616d5f736c6176655f30000000000800014000000001"], 0xd4}}, 0x0) r4 = socket$caif_stream(0x25, 0x1, 0x5) prctl$PR_SET_MM(0x23, 0x8, &(0x7f0000001000/0x3000)=nil) munmap(&(0x7f0000002000/0x2000)=nil, 0x2000) r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='cmdline\x00') preadv(r5, &(0x7f0000000d00)=[{&(0x7f0000001b80)=""/4096, 0x1000}], 0x1, 0x2, 0x200) r6 = msgget$private(0x0, 0x0) msgctl$IPC_RMID(r6, 0x0) unshare(0x8000080) setsockopt(r4, 0x7, 0x7f, &(0x7f0000001cc0)="c5e6a4d3", 0x4) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000040)=0x3) unshare(0x10000000) 3.05317842s ago: executing program 4 (id=772): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100000000001c000000000000ea04850000007b00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x10) bpf$OBJ_GET_MAP(0x7, &(0x7f00000000c0)=@generic={&(0x7f0000000000)='./file0\x00', 0x0, 0x10}, 0x18) sendmsg$MPTCP_PM_CMD_SUBFLOW_DESTROY(0xffffffffffffffff, &(0x7f0000000a40)={0x0, 0x0, &(0x7f0000000a00)={&(0x7f0000000900)={0x1c, 0x0, 0x1, 0x70bd2a, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_ADDR_REMOTE={0x4}, @MPTCP_PM_ATTR_ADDR={0x4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20024000}, 0x6000010) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000030000000000000000000400b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x5, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/power/resume', 0x169a82, 0x109) sendfile(r1, r1, 0x0, 0xb) 3.05247937s ago: executing program 1 (id=782): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000080)={0x1, &(0x7f0000000000)=[{0x20, 0x0, 0x0, 0xffffffff}]}) r0 = io_uring_setup(0x3eae, &(0x7f0000000080)={0x0, 0x6d33, 0x2, 0x0, 0x4000000}) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000001740), 0x101042, 0x0) ioctl$PPPIOCNEWUNIT(r2, 0xc004743e, &(0x7f0000000040)) ioctl$PPPIOCSACTIVE(r2, 0x40047459, &(0x7f0000000080)={0xfffffffffffffe43, 0x0}) read(r2, 0x0, 0x5d) read(r2, 0x0, 0x0) write$ppp(r2, &(0x7f0000000200)="bc72", 0x2) setsockopt$inet_tcp_int(r1, 0x6, 0x2c, &(0x7f0000000000)=0x6, 0x4) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$l2tp(0x0, 0xffffffffffffffff) bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="0d00000002000000040000000240000005000000", @ANYRES32, @ANYBLOB="0000000000000000000000000000000000000000b3f5eb9d3faa0727e2d226c9c3e06caa69f8e3b29899a736d5219ff98cafbc1f3c9e1ebcabc5576d699c4b7034d9067efcaf03daf2a547cf673c1c7f569f925348af14483a670e3c67248db20164163bf8324d82d86e80fc861c8c200b204ea4c8c3425278a0301cc5ae36e0fcfa16a14c6f9956d3e8665d0b6e24956bae4f12b8a7faa505598b56eaef1c076a05d3bae4bb9731b7b25344a20f818babb297897e7d16c260d0d9d8982c324721e65c5162050e1e67d156fa505cf2f924ce99128e1bc288fd11b77b5074687555225a65057804ebc46d989d66ffa091", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\b\x00'/28], 0x48) 3.00401754s ago: executing program 4 (id=773): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000180)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x2000000}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="19000000040000000800"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='sched_switch\x00', r4}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00'}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x15, 0x2a, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000f0030000000000006000000018120000", @ANYRES32, @ANYBLOB="0000000000000000b703000000000000850000000c000000b70000000000000018000000000000800000000080000000186a0000030000000000000006000000b7080000000000007b8af8ff00000000b7080000010000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70500000800000085000000a500000018110000", @ANYRES32, @ANYBLOB="0001000000000000b7020000000000008500000086000000180100002020692500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000f8ffffff8500000006000000186900000100000000000000ffffff7f18140000", @ANYRES32, @ANYBLOB="0000000000000000851000000000000095eeff0000000000"], &(0x7f00000005c0)='syzkaller\x00', 0xe, 0x0, &(0x7f0000000800), 0x41000, 0x21, '\x00', 0x0, @sk_reuseport=0x28, 0xffffffffffffffff, 0x8, &(0x7f00000004c0)={0x103, 0x4}, 0x8, 0x10, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x7, 0x0, &(0x7f0000000940)=[{0x5, 0x4, 0xb, 0x9}, {0x5, 0x2, 0xf, 0x4}, {0x2, 0x4, 0x0, 0xc}, {0x4, 0x4, 0x7, 0x11}, {0x1, 0x4, 0x0, 0x7}, {0x0, 0x4, 0xf, 0xc}, {0x5, 0x5, 0xb, 0xc}], 0x10, 0x3fb, @void, @value}, 0x94) ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, &(0x7f0000000300)={{0x0, 0x2}}) r5 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000600), 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r5, 0xc08c5332, &(0x7f00000003c0)={0x9c9, 0x0, 0x0, 'queue1\x00', 0x200000}) 2.422494838s ago: executing program 2 (id=774): perf_event_open(&(0x7f0000000140)={0x5, 0x80, 0x40, 0x1, 0x0, 0x0, 0x0, 0x9, 0x40404, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x3, 0x800000000003}, 0x1100, 0x4, 0x0, 0x5, 0x0, 0x8, 0xfffb, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x2, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000f8009a5c1000009059cc5a7e26aa125bea00000000000000"], &(0x7f00000003c0)='GPL\x00', 0x1, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x7fff, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kmem_cache_free\x00', r2, 0x0, 0x1}, 0x18) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) set_mempolicy(0x4005, &(0x7f0000000080)=0x7e, 0x9) syz_clone(0x2c9a4080, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc) bpf$PROG_LOAD(0x5, 0x0, 0x0) r4 = syz_io_uring_setup(0x1725, &(0x7f0000000100)={0x0, 0x1b2f, 0x800, 0x1, 0x333}, &(0x7f0000000400)=0x0, &(0x7f0000000200)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000240)=0xfffffc04, 0x0, 0x4) syz_io_uring_submit(r5, r6, &(0x7f0000000180)=@IORING_OP_SENDMSG={0x9, 0x1c, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000800)={0x0, 0x0, &(0x7f00000005c0)=[{0x0}, {0x0}], 0x2}, 0x0, 0x4080}) io_uring_enter(r4, 0x47f6, 0x0, 0x0, 0x0, 0x0) execveat$binfmt(0xffffffffffffffff, 0x0, 0x0, 0x0, 0xc7e9c013810671ad) write$cgroup_devices(r3, 0x0, 0xffdd) recvmsg(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000006c0)=""/178, 0xb2}, {&(0x7f00000009c0)=""/239, 0xef}, {&(0x7f0000000ac0)=""/204, 0xcc}, {&(0x7f0000000840)=""/179, 0xb3}], 0x4, &(0x7f0000000380)=""/8, 0x8}, 0x40000040) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x11, 0x1f, &(0x7f0000000240)=ANY=[], 0x0, 0x10000000, 0x0, 0x0, 0x41100, 0x10, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x68, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000300)='kfree\x00', r7, 0x0, 0x8}, 0x18) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000002080)=@newtaction={0xe80, 0x30, 0x70f60fceed317383, 0x0, 0xfffffffe, {}, [{0xe6c, 0x1, [@m_pedit={0xe68, 0x1, 0x0, 0x0, {{0xa}, {0xe3c, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS={0xe38, 0x2, {{{0xc, 0xb, 0x4, 0xdf2f, 0xb651}, 0x7, 0x8, [{0x8, 0x4e62, 0x1fb, 0xfffffffb, 0x0, 0x1ff}]}, [{0xfffffffd, 0x0, 0x8, 0xda2, 0x401, 0x2}, {0x1, 0x4, 0x1ff, 0x0, 0x15, 0x6}, {0x8, 0x91962e17, 0x6, 0x10, 0x5, 0x6}, {0x800, 0x5e, 0xc0000, 0xe, 0x9, 0x7}, {0xfffffffb, 0x134, 0x724, 0x6, 0xfffffffd, 0x40}, {0x2, 0x3, 0x9, 0x3, 0x8e9, 0x200}, {0x6e0, 0xb, 0x9, 0x6, 0x8, 0x2}, {0x2, 0x0, 0x401, 0x1, 0x8}, {0x1, 0x0, 0x9, 0x9, 0x7fffffff, 0x911}, {0x401, 0x0, 0x3, 0x0, 0x6, 0x80}, {0x3, 0x8f, 0x3, 0x5, 0x5e7, 0x80000000}, {0x1, 0x6, 0x39, 0x10, 0x32fe51c2, 0x4}, {0xa4c, 0x9, 0x81, 0xfffffffe, 0x3ff, 0x200}, {0x7, 0x8, 0x0, 0x4, 0x8, 0x2}, {0x6, 0x92a, 0x5, 0x4, 0x4, 0xe}, {0xbdd, 0x5, 0x6, 0x0, 0x9, 0x4}, {0x5, 0x0, 0xd, 0x7fffffff, 0x3, 0x417}, {0x1, 0xfffffff7, 0x8, 0x54, 0x4, 0x1}, {0x7fffffff, 0x6d93, 0x9, 0x6, 0xff, 0x3dc1171a}, {0x1, 0x2, 0x25dd, 0xfffffff7, 0x1ff, 0x59}, {0x8, 0x8, 0x2, 0x1, 0x500000}, {0xaeea, 0x9, 0x943, 0xfffffffa, 0x9, 0x1}, {0x2dd9, 0xfffffff4, 0x7f, 0x80000001, 0x7, 0x3ba}, {0x8, 0x9, 0x10001, 0x0, 0xfffffff7, 0x80}, {0x7fff, 0x81, 0x9, 0xfffffffe, 0x9, 0xff}, {0xe4fe, 0x1, 0x2, 0xf, 0x10, 0x6}, {0xfffffffd, 0xff, 0x0, 0x43, 0x7ff, 0x9}, {0x1ba, 0x2, 0xffffffff, 0x1, 0xc5e7, 0x6}, {0x7, 0x8b, 0x9, 0x7, 0x3}, {0xe, 0x6, 0x3ff, 0x5, 0x8, 0xb}, {0xffffffff, 0x5, 0x0, 0xb6f2, 0xfffffffd, 0x80000000}, {0x9a635267, 0x5, 0x3fe0000, 0x15c, 0x4, 0x1}, {0x3, 0xe7a3, 0x2, 0x1, 0x6, 0x9}, {0x5, 0x9, 0x5, 0x4, 0x6, 0x8}, {0x7, 0x1, 0xfffff904, 0x0, 0x6, 0x6}, {0x5, 0x40, 0x4, 0x200, 0xfff, 0x3cde}, {0x8000, 0x2, 0x8, 0x8, 0xf0, 0x8}, {0xfffffffc, 0x2, 0x4, 0x5, 0x1781, 0xc59}, {0x0, 0xff, 0x2, 0x7, 0x4, 0x100}, {0x6, 0x4, 0x4, 0x0, 0x38b9, 0x5}, {0x6aaf, 0xffffff00, 0x1, 0x0, 0x8, 0x9}, {0x6a18, 0x3, 0x6, 0xfffffffd, 0x7a, 0xb6c}, {0x22d8, 0x1, 0x7628, 0x5, 0x4, 0x7}, {0x8, 0x5, 0x6, 0x6, 0x2, 0x7}, {0x5, 0x8, 0x8, 0x8, 0x4, 0x200}, {0x200, 0x3e, 0x800, 0x1, 0x4, 0x100}, {0x6, 0x800, 0x100, 0x1, 0x5, 0x8}, {0x400, 0xf, 0x7, 0x3ff, 0x7}, {0x1, 0x5dc, 0x7f, 0x400, 0x10001}, {0x8, 0x7, 0xa, 0x7, 0x7, 0x7}, {0x81, 0x6, 0x0, 0x80000001, 0x8, 0xac9b}, {0x7, 0x2, 0x0, 0x5, 0xc, 0x7}, {0x0, 0x1, 0x7543e718, 0x1, 0x3, 0x3}, {0x6, 0xfffff801, 0x120b, 0x3, 0x1, 0x4}, {0x5, 0x10, 0x7, 0x7fffffff, 0x0, 0x8000}, {0x8, 0x0, 0x1cd, 0xfffffffa, 0x200, 0x1}, {0x1, 0x2, 0x1c0000, 0x200, 0x800, 0x3}, {0x1be, 0x5, 0x4, 0x4, 0xd1, 0x6}, {0xb, 0x1, 0x200, 0xc1, 0x393, 0x6}, {0x9, 0x5, 0x33, 0x2, 0x80000001, 0xdeaa}, {0x65800000, 0x8, 0x12, 0x4, 0xb917, 0x9}, {0x3, 0x4, 0x84, 0x7, 0x1, 0x4}, {0x9f, 0x80, 0x6, 0x1, 0x3, 0x7f}, {0x3, 0x7f, 0x7ff, 0x5, 0xc, 0xd}, {0x200, 0x4, 0x400, 0x9, 0x10000, 0x89}, {0xffffffff, 0x6e7, 0x200, 0x2, 0x9c, 0x6}, {0x7, 0x101, 0x7, 0x3, 0x0, 0x8}, {0x40, 0x100, 0x1, 0x1, 0x15, 0x8}, {0x40, 0x80000001, 0x3ff, 0x6, 0x4a74, 0x6}, {0x6, 0xf90, 0x5, 0x1, 0x8, 0x9}, {0x101, 0x593, 0x6, 0x2, 0x4, 0xffff}, {0x2, 0x8, 0x401, 0x7f, 0x8, 0x6}, {0xfffffffc, 0x0, 0x5, 0x5b1e1c01, 0x9}, {0xfffffffa, 0x7fffffff, 0x9, 0x0, 0x0, 0x1}, {0xd, 0xf9c, 0xffffffff, 0x3333, 0x1, 0x5}, {0x9, 0x100, 0x9, 0x5f4, 0x306, 0xb7}, {0x5, 0x10001, 0x1, 0x7f, 0x1, 0xfff}, {0x7ff, 0x3, 0xffff3955, 0xb24, 0xfffffffd, 0x5}, {0x6, 0x5, 0x6, 0x101ff, 0x2, 0x5}, {0x1ff, 0x1, 0xfffffff8, 0x0, 0xf424, 0x1e9}, {0x1, 0x9, 0x400, 0x0, 0x8, 0xc}, {0x0, 0x9, 0x10, 0x400, 0x742c, 0x85}, {0x101, 0x2, 0x11, 0x8, 0x6, 0xd794}, {0x1, 0xb5d2, 0x6, 0x0, 0x6}, {0x8f, 0x5, 0x8, 0x9, 0x7, 0x2}, {0x0, 0x2, 0x9, 0x9d3e, 0x6, 0x6}, {0x47b9, 0x81, 0x5, 0xffffffff, 0x5, 0x9}, {0xa78, 0x9, 0x0, 0x6, 0x2, 0x4}, {0x42, 0x1, 0x9, 0x10001, 0x0, 0x7f}, {0x8, 0x8, 0x3, 0x1, 0x9000000, 0xa}, {0x7, 0x4, 0x200, 0x8, 0x1ff, 0x9}, {0xc, 0x16, 0x4, 0x43, 0x245, 0x1}, {0x45, 0x8, 0xffffffff, 0x4, 0x4, 0x80000000}, {0x7, 0x1, 0x8000, 0x6374ac70, 0x4, 0x10}, {0x7, 0x800, 0x6, 0x82, 0x7, 0xc8e}, {0x8, 0xffff, 0x0, 0x7, 0x28f0, 0x10}, {0x8d2e, 0x6, 0x2, 0x0, 0x2, 0x4}, {0xa806, 0x10, 0x7, 0x1, 0x3ff, 0x8ffa}, {0x3, 0xfff, 0x5, 0x800, 0xa, 0xf7a}, {0x3, 0x8, 0x2a, 0x7, 0x1, 0x7}, {0x9, 0x2, 0x3, 0xbd, 0x7ff, 0x8}, {0x1d14, 0xd, 0x6, 0x2, 0x0, 0x100}, {0x1, 0x8001, 0x5, 0x7, 0x8000, 0x1}, {0x1, 0x8, 0x0, 0x5, 0x7f, 0x7ff}, {0xa0, 0xffff8001, 0x8, 0x999d, 0x5857, 0x7fff}, {0x6d, 0x6, 0x81, 0x40a, 0x2, 0xe}, {0x5c84020b, 0x7fff, 0x8, 0x7fffffff, 0x7ff, 0x40}, {0x35d, 0x8, 0x1, 0x6, 0x4, 0x1}, {0x4, 0x1, 0x3ff, 0x25d, 0x22, 0x1}, {0x2, 0x3, 0x3, 0x1ff, 0x0, 0xe72a}, {0x3, 0x100, 0xe927, 0xdf, 0x0, 0x8}, {0x4766, 0x80000000, 0x5, 0x8, 0x3, 0x6}, {0x4, 0x6, 0xc, 0x8, 0x1, 0x80}, {0xd, 0xfffffff1, 0xfffffff8, 0x5, 0x852, 0x80000001}, {0xf, 0x101, 0x7, 0x2a, 0x2, 0x7fff}, {0x4, 0x9, 0x702c6ae0, 0x10001, 0x2, 0x2}, {0x1, 0x10, 0x9, 0x7, 0x10001, 0x1}, {0x3, 0x0, 0xba58, 0x4, 0x1, 0xf}, {0x0, 0x1000, 0x7, 0x0, 0xe5e, 0x7}, {0x6, 0x1, 0x6, 0x6, 0x2, 0x2}, {0x400, 0x2, 0x2, 0x6, 0x6, 0x3}, {0xfff, 0x1, 0x0, 0x3, 0x8, 0xb54}, {0x4, 0x7, 0x2, 0x8, 0x1, 0x76fe}, {0x7fff, 0xe75c, 0x8, 0x76, 0x1, 0xa}, {0x3, 0x5, 0x17, 0x70, 0x40, 0x9}, {0x32, 0x800, 0x0, 0x7, 0x9, 0x86}, {0xf2, 0x0, 0x0, 0x6, 0x60, 0x800}, {0x8, 0xa9, 0x2, 0xe, 0x811, 0x7}], [{0x4}, {0x2, 0x1}, {0x0, 0x1}, {0x2, 0x1}, {0x74da411c989fe199, 0x1}, {0x3}, {0x2, 0x1}, {0x1}, {0x2, 0x1}, {0x2, 0x1}, {}, {0x4}, {0x1}, {0x4, 0x1}, {0x5, 0x1}, {0x5}, {0x4, 0x1}, {0x4, 0x1}, {0x3, 0x1}, {0x1}, {0x0, 0x1}, {0x0, 0x1}, {0x1, 0x1}, {0x4}, {0x5}, {0x3}, {}, {0x1}, {}, {0x1, 0x1}, {0x3, 0x1}, {0x0, 0x1}, {0x3, 0x1}, {0x4}, {0x5, 0x1}, {}, {0x4}, {0x1}, {0xbf156330ad1a2b02, 0x1}, {0x1, 0x1}, {0x5}, {0x3}, {0x1, 0x1}, {}, {0x4}, {0x1}, {0x1}, {0x1, 0x1}, {0x4, 0x7b1c6bcde52d0700}, {0x4, 0x1}, {0x3, 0x1}, {0x2}, {0x2, 0x1}, {0x3}, {0x5, 0x1}, {0x3}, {0x5}, {0x2, 0x1}, {0x5}, {0xd, 0x1}, {0x5}, {0x3}, {0x4}, {0x2, 0x1}, {0x2, 0x2}, {0x6, 0x1}, {0x5, 0x1}, {0x5, 0x1}, {0x5}, {0x0, 0x1}, {0x1}, {0x2, 0x23f82aa145049d92}, {0x4, 0x1}, {}, {}, {0x2f275eda4bd558a9}, {0x2, 0x1}, {0x4}, {}, {0x2}, {0x3, 0x1}, {0x4, 0xdb28de0ef1f4d93e}, {0x0, 0x1}, {0x2, 0x1}, {0x5, 0x1}, {0x2}, {0x5}, {0x4}, {0x3}, {0x4}, {0x1}, {0x0, 0x1}, {0x1}, {0x0, 0x1}, {0x3}, {0x4, 0x2}, {0x5, 0x1}, {0x5}, {0x5, 0x1}, {0x5}, {0x3}, {0x5, 0x1}, {0x5, 0x1}, {0x5, 0x1}, {0x3, 0x1}, {0x0, 0x1}, {0x1, 0x1}, {}, {0x0, 0x1}, {0x1}, {0x2}, {0x4, 0x1}, {0x5}, {0x5}, {0x3}, {0x5}, {0x1, 0x1}, {0x5}, {}, {0x0, 0x1}, {0x3, 0x1}, {0x5}, {0x1, 0x1}, {0x5, 0x1}, {0x3, 0x1}, {0x1, 0x1}, {0x5}, {0x5}]}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xe80}}, 0x0) syz_read_part_table(0x106d, &(0x7f0000001080)="$eJzsz7FNw0AYBeB3trFNR0VD44qaGdiBFiExiBENDSPQ0rAIG7AAI6SOLjpFyQhJiu8r7p6eTvfrD2d2M+UlQ0peP/okJbW8JXVbpyRdUoav9uy2HUvmtPo6ufp/f75v3WNfxvwefhv3V5+7tZaWNnN3HNXSw3dZaq1rks+/p5+TrwsAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAF2gXAAD//wCmE1Q=") setsockopt$sock_attach_bpf(r1, 0x1, 0x21, &(0x7f0000000040), 0x4) mmap$xdp(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x9a4b7d9fabcf294e, 0x20010, 0xffffffffffffffff, 0x0) sendmmsg(r0, &(0x7f0000004b00)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x4, 0x200040d1) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x7c}}, 0x0) socket$inet_udp(0x2, 0x2, 0x0) r9 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000100), 0x20082, 0x0) ioctl$TIOCGETD(r9, 0x5424, &(0x7f00000000c0)) 2.342730519s ago: executing program 3 (id=775): perf_event_open(&(0x7f0000000140)={0x5, 0x80, 0x40, 0x1, 0x0, 0x0, 0x0, 0x9, 0x40404, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x3, 0x800000000003}, 0x1100, 0x4, 0x0, 0x5, 0x0, 0x8, 0xfffb, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) socketpair$tipc(0x1e, 0x1, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kmem_cache_free\x00', 0xffffffffffffffff, 0x0, 0x1}, 0x18) set_mempolicy(0x4005, &(0x7f0000000080)=0x7e, 0x9) syz_clone(0x2c9a4080, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = syz_io_uring_setup(0x1725, &(0x7f0000000100)={0x0, 0x1b2f, 0x800, 0x1, 0x333}, &(0x7f0000000400)=0x0, &(0x7f0000000200)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000240)=0xfffffc04, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_SENDMSG={0x9, 0x1c, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000800)={0x0, 0x0, &(0x7f00000005c0)=[{0x0}, {0x0}], 0x2}, 0x0, 0x4080}) io_uring_enter(r0, 0x47f6, 0x0, 0x0, 0x0, 0x0) 2.221409281s ago: executing program 0 (id=776): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100000000001c000000000000ea04850000007b00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x10) bpf$OBJ_GET_MAP(0x7, &(0x7f00000000c0)=@generic={&(0x7f0000000000)='./file0\x00', 0x0, 0x10}, 0x18) sendmsg$MPTCP_PM_CMD_SUBFLOW_DESTROY(0xffffffffffffffff, &(0x7f0000000a40)={0x0, 0x0, &(0x7f0000000a00)={&(0x7f0000000900)={0x1c, 0x0, 0x1, 0x70bd2a, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_ADDR_REMOTE={0x4}, @MPTCP_PM_ATTR_ADDR={0x4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20024000}, 0x6000010) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000030000000000000000000400b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32, @ANYBLOB="0000000000000000b705000008"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x5, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/power/resume', 0x169a82, 0x109) sendfile(r1, r1, 0x0, 0xb) 2.111591452s ago: executing program 0 (id=777): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(0x0, r0) sendmsg$TIPC_NL_NET_SET(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000380)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000fdffffff0f000000300007800800010005000000"], 0x44}, 0x1, 0x0, 0x0, 0x44}, 0x0) 2.110691722s ago: executing program 4 (id=778): perf_event_open(&(0x7f0000000140)={0x5, 0x80, 0x40, 0x1, 0x0, 0x0, 0x0, 0x9, 0x40404, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x3, 0x800000000003}, 0x1100, 0x4, 0x0, 0x5, 0x0, 0x8, 0xfffb, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x2, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000f8009a5c1000009059cc5a7e26aa125bea00000000000000"], &(0x7f00000003c0)='GPL\x00', 0x1, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x7fff, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kmem_cache_free\x00', r2, 0x0, 0x1}, 0x18) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) set_mempolicy(0x4005, &(0x7f0000000080)=0x7e, 0x9) syz_clone(0x2c9a4080, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc) bpf$PROG_LOAD(0x5, 0x0, 0x0) r4 = syz_io_uring_setup(0x1725, &(0x7f0000000100)={0x0, 0x1b2f, 0x800, 0x1, 0x333}, &(0x7f0000000400)=0x0, &(0x7f0000000200)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000240)=0xfffffc04, 0x0, 0x4) syz_io_uring_submit(r5, r6, &(0x7f0000000180)=@IORING_OP_SENDMSG={0x9, 0x1c, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000800)={0x0, 0x0, &(0x7f00000005c0)=[{0x0}, {0x0}], 0x2}, 0x0, 0x4080}) io_uring_enter(r4, 0x47f6, 0x0, 0x0, 0x0, 0x0) execveat$binfmt(0xffffffffffffffff, 0x0, 0x0, 0x0, 0xc7e9c013810671ad) write$cgroup_devices(r3, 0x0, 0xffdd) recvmsg(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000006c0)=""/178, 0xb2}, {&(0x7f00000009c0)=""/239, 0xef}, {&(0x7f0000000ac0)=""/204, 0xcc}, {&(0x7f0000000840)=""/179, 0xb3}], 0x4, &(0x7f0000000380)=""/8, 0x8}, 0x40000040) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x11, 0x1f, &(0x7f0000000240)=ANY=[], 0x0, 0x10000000, 0x0, 0x0, 0x41100, 0x10, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x68, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000300)='kfree\x00', r7, 0x0, 0x8}, 0x18) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000002080)=@newtaction={0xe80, 0x30, 0x70f60fceed317383, 0x0, 0xfffffffe, {}, [{0xe6c, 0x1, [@m_pedit={0xe68, 0x1, 0x0, 0x0, {{0xa}, {0xe3c, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS={0xe38, 0x2, {{{0xc, 0xb, 0x4, 0xdf2f, 0xb651}, 0x7, 0x8, [{0x8, 0x4e62, 0x1fb, 0xfffffffb, 0x0, 0x1ff}]}, [{0xfffffffd, 0x0, 0x8, 0xda2, 0x401, 0x2}, {0x1, 0x4, 0x1ff, 0x0, 0x15, 0x6}, {0x8, 0x91962e17, 0x6, 0x10, 0x5, 0x6}, {0x800, 0x5e, 0xc0000, 0xe, 0x9, 0x7}, {0xfffffffb, 0x134, 0x724, 0x6, 0xfffffffd, 0x40}, {0x2, 0x3, 0x9, 0x3, 0x8e9, 0x200}, {0x6e0, 0xb, 0x9, 0x6, 0x8, 0x2}, {0x2, 0x0, 0x401, 0x1, 0x8}, {0x1, 0x0, 0x9, 0x9, 0x7fffffff, 0x911}, {0x401, 0x0, 0x3, 0x0, 0x6, 0x80}, {0x3, 0x8f, 0x3, 0x5, 0x5e7, 0x80000000}, {0x1, 0x6, 0x39, 0x10, 0x32fe51c2, 0x4}, {0xa4c, 0x9, 0x81, 0xfffffffe, 0x3ff, 0x200}, {0x7, 0x8, 0x0, 0x4, 0x8, 0x2}, {0x6, 0x92a, 0x5, 0x4, 0x4, 0xe}, {0xbdd, 0x5, 0x6, 0x0, 0x9, 0x4}, {0x5, 0x0, 0xd, 0x7fffffff, 0x3, 0x417}, {0x1, 0xfffffff7, 0x8, 0x54, 0x4, 0x1}, {0x7fffffff, 0x6d93, 0x9, 0x6, 0xff, 0x3dc1171a}, {0x1, 0x2, 0x25dd, 0xfffffff7, 0x1ff, 0x59}, {0x8, 0x8, 0x2, 0x1, 0x500000}, {0xaeea, 0x9, 0x943, 0xfffffffa, 0x9, 0x1}, {0x2dd9, 0xfffffff4, 0x7f, 0x80000001, 0x7, 0x3ba}, {0x8, 0x9, 0x10001, 0x0, 0xfffffff7, 0x80}, {0x7fff, 0x81, 0x9, 0xfffffffe, 0x9, 0xff}, {0xe4fe, 0x1, 0x2, 0xf, 0x10, 0x6}, {0xfffffffd, 0xff, 0x0, 0x43, 0x7ff, 0x9}, {0x1ba, 0x2, 0xffffffff, 0x1, 0xc5e7, 0x6}, {0x7, 0x8b, 0x9, 0x7, 0x3}, {0xe, 0x6, 0x3ff, 0x5, 0x8, 0xb}, {0xffffffff, 0x5, 0x0, 0xb6f2, 0xfffffffd, 0x80000000}, {0x9a635267, 0x5, 0x3fe0000, 0x15c, 0x4, 0x1}, {0x3, 0xe7a3, 0x2, 0x1, 0x6, 0x9}, {0x5, 0x9, 0x5, 0x4, 0x6, 0x8}, {0x7, 0x1, 0xfffff904, 0x0, 0x6, 0x6}, {0x5, 0x40, 0x4, 0x200, 0xfff, 0x3cde}, {0x8000, 0x2, 0x8, 0x8, 0xf0, 0x8}, {0xfffffffc, 0x2, 0x4, 0x5, 0x1781, 0xc59}, {0x0, 0xff, 0x2, 0x7, 0x4, 0x100}, {0x6, 0x4, 0x4, 0x0, 0x38b9, 0x5}, {0x6aaf, 0xffffff00, 0x1, 0x0, 0x8, 0x9}, {0x6a18, 0x3, 0x6, 0xfffffffd, 0x7a, 0xb6c}, {0x22d8, 0x1, 0x7628, 0x5, 0x4, 0x7}, {0x8, 0x5, 0x6, 0x6, 0x2, 0x7}, {0x5, 0x8, 0x8, 0x8, 0x4, 0x200}, {0x200, 0x3e, 0x800, 0x1, 0x4, 0x100}, {0x6, 0x800, 0x100, 0x1, 0x5, 0x8}, {0x400, 0xf, 0x7, 0x3ff, 0x7}, {0x1, 0x5dc, 0x7f, 0x400, 0x10001}, {0x8, 0x7, 0xa, 0x7, 0x7, 0x7}, {0x81, 0x6, 0x0, 0x80000001, 0x8, 0xac9b}, {0x7, 0x2, 0x0, 0x5, 0xc, 0x7}, {0x0, 0x1, 0x7543e718, 0x1, 0x3, 0x3}, {0x6, 0xfffff801, 0x120b, 0x3, 0x1, 0x4}, {0x5, 0x10, 0x7, 0x7fffffff, 0x0, 0x8000}, {0x8, 0x0, 0x1cd, 0xfffffffa, 0x200, 0x1}, {0x1, 0x2, 0x1c0000, 0x200, 0x800, 0x3}, {0x1be, 0x5, 0x4, 0x4, 0xd1, 0x6}, {0xb, 0x1, 0x200, 0xc1, 0x393, 0x6}, {0x9, 0x5, 0x33, 0x2, 0x80000001, 0xdeaa}, {0x65800000, 0x8, 0x12, 0x4, 0xb917, 0x9}, {0x3, 0x4, 0x84, 0x7, 0x1, 0x4}, {0x9f, 0x80, 0x6, 0x1, 0x3, 0x7f}, {0x3, 0x7f, 0x7ff, 0x5, 0xc, 0xd}, {0x200, 0x4, 0x400, 0x9, 0x10000, 0x89}, {0xffffffff, 0x6e7, 0x200, 0x2, 0x9c, 0x6}, {0x7, 0x101, 0x7, 0x3, 0x0, 0x8}, {0x40, 0x100, 0x1, 0x1, 0x15, 0x8}, {0x40, 0x80000001, 0x3ff, 0x6, 0x4a74, 0x6}, {0x6, 0xf90, 0x5, 0x1, 0x8, 0x9}, {0x101, 0x593, 0x6, 0x2, 0x4, 0xffff}, {0x2, 0x8, 0x401, 0x7f, 0x8, 0x6}, {0xfffffffc, 0x0, 0x5, 0x5b1e1c01, 0x9}, {0xfffffffa, 0x7fffffff, 0x9, 0x0, 0x0, 0x1}, {0xd, 0xf9c, 0xffffffff, 0x3333, 0x1, 0x5}, {0x9, 0x100, 0x9, 0x5f4, 0x306, 0xb7}, {0x5, 0x10001, 0x1, 0x7f, 0x1, 0xfff}, {0x7ff, 0x3, 0xffff3955, 0xb24, 0xfffffffd, 0x5}, {0x6, 0x5, 0x6, 0x101ff, 0x2, 0x5}, {0x1ff, 0x1, 0xfffffff8, 0x0, 0xf424, 0x1e9}, {0x1, 0x9, 0x400, 0x0, 0x8, 0xc}, {0x0, 0x9, 0x10, 0x400, 0x742c, 0x85}, {0x101, 0x2, 0x11, 0x8, 0x6, 0xd794}, {0x1, 0xb5d2, 0x6, 0x0, 0x6}, {0x8f, 0x5, 0x8, 0x9, 0x7, 0x2}, {0x0, 0x2, 0x9, 0x9d3e, 0x6, 0x6}, {0x47b9, 0x81, 0x5, 0xffffffff, 0x5, 0x9}, {0xa78, 0x9, 0x0, 0x6, 0x2, 0x4}, {0x42, 0x1, 0x9, 0x10001, 0x0, 0x7f}, {0x8, 0x8, 0x3, 0x1, 0x9000000, 0xa}, {0x7, 0x4, 0x200, 0x8, 0x1ff, 0x9}, {0xc, 0x16, 0x4, 0x43, 0x245, 0x1}, {0x45, 0x8, 0xffffffff, 0x4, 0x4, 0x80000000}, {0x7, 0x1, 0x8000, 0x6374ac70, 0x4, 0x10}, {0x7, 0x800, 0x6, 0x82, 0x7, 0xc8e}, {0x8, 0xffff, 0x0, 0x7, 0x28f0, 0x10}, {0x8d2e, 0x6, 0x2, 0x0, 0x2, 0x4}, {0xa806, 0x10, 0x7, 0x1, 0x3ff, 0x8ffa}, {0x3, 0xfff, 0x5, 0x800, 0xa, 0xf7a}, {0x3, 0x8, 0x2a, 0x7, 0x1, 0x7}, {0x9, 0x2, 0x3, 0xbd, 0x7ff, 0x8}, {0x1d14, 0xd, 0x6, 0x2, 0x0, 0x100}, {0x1, 0x8001, 0x5, 0x7, 0x8000, 0x1}, {0x1, 0x8, 0x0, 0x5, 0x7f, 0x7ff}, {0xa0, 0xffff8001, 0x8, 0x999d, 0x5857, 0x7fff}, {0x6d, 0x6, 0x81, 0x40a, 0x2, 0xe}, {0x5c84020b, 0x7fff, 0x8, 0x7fffffff, 0x7ff, 0x40}, {0x35d, 0x8, 0x1, 0x6, 0x4, 0x1}, {0x4, 0x1, 0x3ff, 0x25d, 0x22, 0x1}, {0x2, 0x3, 0x3, 0x1ff, 0x0, 0xe72a}, {0x3, 0x100, 0xe927, 0xdf, 0x0, 0x8}, {0x4766, 0x80000000, 0x5, 0x8, 0x3, 0x6}, {0x4, 0x6, 0xc, 0x8, 0x1, 0x80}, {0xd, 0xfffffff1, 0xfffffff8, 0x5, 0x852, 0x80000001}, {0xf, 0x101, 0x7, 0x2a, 0x2, 0x7fff}, {0x4, 0x9, 0x702c6ae0, 0x10001, 0x2, 0x2}, {0x1, 0x10, 0x9, 0x7, 0x10001, 0x1}, {0x3, 0x0, 0xba58, 0x4, 0x1, 0xf}, {0x0, 0x1000, 0x7, 0x0, 0xe5e, 0x7}, {0x6, 0x1, 0x6, 0x6, 0x2, 0x2}, {0x400, 0x2, 0x2, 0x6, 0x6, 0x3}, {0xfff, 0x1, 0x0, 0x3, 0x8, 0xb54}, {0x4, 0x7, 0x2, 0x8, 0x1, 0x76fe}, {0x7fff, 0xe75c, 0x8, 0x76, 0x1, 0xa}, {0x3, 0x5, 0x17, 0x70, 0x40, 0x9}, {0x32, 0x800, 0x0, 0x7, 0x9, 0x86}, {0xf2, 0x0, 0x0, 0x6, 0x60, 0x800}, {0x8, 0xa9, 0x2, 0xe, 0x811, 0x7}], [{0x4}, {0x2, 0x1}, {0x0, 0x1}, {0x2, 0x1}, {0x74da411c989fe199, 0x1}, {0x3}, {0x2, 0x1}, {0x1}, {0x2, 0x1}, {0x2, 0x1}, {}, {0x4}, {0x1}, {0x4, 0x1}, {0x5, 0x1}, {0x5}, {0x4, 0x1}, {0x4, 0x1}, {0x3, 0x1}, {0x1}, {0x0, 0x1}, {0x0, 0x1}, {0x1, 0x1}, {0x4}, {0x5}, {0x3}, {}, {0x1}, {}, {0x1, 0x1}, {0x3, 0x1}, {0x0, 0x1}, {0x3, 0x1}, {0x4}, {0x5, 0x1}, {}, {0x4}, {0x1}, {0xbf156330ad1a2b02, 0x1}, {0x1, 0x1}, {0x5}, {0x3}, {0x1, 0x1}, {}, {0x4}, {0x1}, {0x1}, {0x1, 0x1}, {0x4, 0x7b1c6bcde52d0700}, {0x4, 0x1}, {0x3, 0x1}, {0x2}, {0x2, 0x1}, {0x3}, {0x5, 0x1}, {0x3}, {0x5}, {0x2, 0x1}, {0x5}, {0xd, 0x1}, {0x5}, {0x3}, {0x4}, {0x2, 0x1}, {0x2, 0x2}, {0x6, 0x1}, {0x5, 0x1}, {0x5, 0x1}, {0x5}, {0x0, 0x1}, {0x1}, {0x2, 0x23f82aa145049d92}, {0x4, 0x1}, {}, {}, {0x2f275eda4bd558a9}, {0x2, 0x1}, {0x4}, {}, {0x2}, {0x3, 0x1}, {0x4, 0xdb28de0ef1f4d93e}, {0x0, 0x1}, {0x2, 0x1}, {0x5, 0x1}, {0x2}, {0x5}, {0x4}, {0x3}, {0x4}, {0x1}, {0x0, 0x1}, {0x1}, {0x0, 0x1}, {0x3}, {0x4, 0x2}, {0x5, 0x1}, {0x5}, {0x5, 0x1}, {0x5}, {0x3}, {0x5, 0x1}, {0x5, 0x1}, {0x5, 0x1}, {0x3, 0x1}, {0x0, 0x1}, {0x1, 0x1}, {}, {0x0, 0x1}, {0x1}, {0x2}, {0x4, 0x1}, {0x5}, {0x5}, {0x3}, {0x5}, {0x1, 0x1}, {0x5}, {}, {0x0, 0x1}, {0x3, 0x1}, {0x5}, {0x1, 0x1}, {0x5, 0x1}, {0x3, 0x1}, {0x1, 0x1}, {0x5}, {0x5}]}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xe80}}, 0x0) syz_read_part_table(0x106d, &(0x7f0000001080)="$eJzsz7FNw0AYBeB3trFNR0VD44qaGdiBFiExiBENDSPQ0rAIG7AAI6SOLjpFyQhJiu8r7p6eTvfrD2d2M+UlQ0peP/okJbW8JXVbpyRdUoav9uy2HUvmtPo6ufp/f75v3WNfxvwefhv3V5+7tZaWNnN3HNXSw3dZaq1rks+/p5+TrwsAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAF2gXAAD//wCmE1Q=") r9 = dup2(r1, r0) mmap$xdp(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x9a4b7d9fabcf294e, 0x20010, r9, 0x0) sendmmsg(r0, &(0x7f0000004b00)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x4, 0x200040d1) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x7c}}, 0x0) socket$inet_udp(0x2, 0x2, 0x0) r10 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000100), 0x20082, 0x0) ioctl$TIOCGETD(r10, 0x5424, &(0x7f00000000c0)) 2.093890822s ago: executing program 1 (id=779): ftruncate(0xffffffffffffffff, 0x312762fb) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000180)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x2000000}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="19000000040000"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='sched_switch\x00', r4}, 0x10) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000005"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x9, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000580)='GPL\x00', 0xa, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r6 = shmat(0x0, &(0x7f0000ffa000/0x3000)=nil, 0x4000) bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x15, 0x2a, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000f0030000000000006000000018120000", @ANYRES32=r5, @ANYBLOB="0000000000000000b703000000000000850000000c000000b70000000000000018000000000000800000000080000000186a0000030000000000000006000000b7080000000000007b8af8ff00000000b7080000010000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70500000800000085000000a500000018110000", @ANYRES32=r6, @ANYBLOB="0001000000000000b7020000000000008500000086000000180100002020692500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000f8ffffff8500000006000000186900000100000000000000ffffff7f18140000", @ANYRES32=r5, @ANYBLOB="0000000000000000851000000000000095eeff0000000000"], &(0x7f00000005c0)='syzkaller\x00', 0xe, 0x0, &(0x7f0000000800), 0x41000, 0x21, '\x00', 0x0, @sk_reuseport=0x28, 0xffffffffffffffff, 0x8, &(0x7f00000004c0)={0x103, 0x4}, 0x8, 0x10, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x7, 0x0, &(0x7f0000000940)=[{0x5, 0x4, 0xb, 0x9}, {0x5, 0x2, 0xf, 0x4}, {0x2, 0x4, 0x0, 0xc}, {0x4, 0x4, 0x7, 0x11}, {0x1, 0x4, 0x0, 0x7}, {0x0, 0x4, 0xf, 0xc}, {0x5, 0x5, 0xb, 0xc}], 0x10, 0x3fb, @void, @value}, 0x94) r7 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000380), 0x101040) ioctl$SNDRV_TIMER_IOCTL_SELECT(r7, 0x40345410, &(0x7f0000000300)={{0x0, 0x2}}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, &(0x7f00000003c0)={0x9c9, 0x0, 0x0, 'queue1\x00', 0x200000}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(0xffffffffffffffff, 0x40605346, &(0x7f0000000280)={0x0, 0x0, {0x3}}) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r7, 0x40505412, &(0x7f00000000c0)={0x2, 0x2, 0x44, 0x0, 0xd}) keyctl$chown(0x4, 0x0, 0xee00, 0xffffffffffffffff) creat(&(0x7f00000000c0)='./file0\x00', 0x1f4) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) syz_clone(0x640c7000, 0x0, 0x0, 0x0, 0x0, 0x0) 1.999565334s ago: executing program 0 (id=780): r0 = socket$inet6(0xa, 0x3, 0xff) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000cc0)=ANY=[@ANYRES32, @ANYRES32=r0, @ANYBLOB="e547302b5619762f9ae5059f12238dc7cac69b8cb3d9206dcaa14c74c36929b670df9d66e4c6d5cf5d759b56515e86898a", @ANYRES8=r0, @ANYBLOB="8518b338dd9cef04d0c1611c659597e07a10c2bd494822facbb508b9dd91d01376d8fad2f97330142e4e1f279793687d2bc5c2a6cc3d49c07e8cb6050b1ec330f7ec2010d88ba89f18d0d34d86eb121be653b3878ddadbfe08434a34df2b45b96b4883f6924249f150c5d70c9fb0408ab9227d512d3a89738ccf47082d3aa401a1855b6907", @ANYRES8=r0, @ANYRES64=r0, @ANYRESDEC=r0, @ANYRESDEC=0x0], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000fc007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001000000850000002300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_BIND_MAP(0xa, &(0x7f0000001a00)={r2}, 0xc) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r4 = socket(0x400000000010, 0x3, 0x0) socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x1}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000002580)=@gettfilter={0x2c, 0x2e, 0x200, 0x70bd28, 0x25dfdbff, {0x0, 0x0, 0x0, r5, {0xa, 0xa}, {0x0, 0xfff1}, {0xe, 0x7}}, [{0x8, 0xb, 0x6}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000094}, 0x4044040) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000200), 0xffffffffffffffff) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="0200000004000000040003000100000080000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000100"/28], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000006c0)=ANY=[@ANYBLOB="18000000000000000000000095980000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f0ffffffb702000005000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) setsockopt$inet6_int(r0, 0x29, 0x16, &(0x7f00000001c0)=0x7f, 0x4) close(r0) 1.695541507s ago: executing program 3 (id=781): r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000990000000d"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000004c0)=ANY=[@ANYBLOB="2c00000014000100fffffffbffdbdf250a00a100", @ANYRES32=r4, @ANYBLOB="1400010000000000000000000000000000000001"], 0x2c}}, 0x24005040) 1.636510208s ago: executing program 0 (id=783): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000300)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = socket(0x10, 0x3, 0x4) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20004004}, 0x4080) openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = socket$xdp(0x2c, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x400000000000004) setsockopt$XDP_RX_RING(r1, 0x11b, 0x2, &(0x7f00000004c0)=0x1000000, 0x4) writev(r2, &(0x7f0000000000)=[{&(0x7f0000000200)="480000001400190d7ebdeb75fd0d8c562c84d8c033ed7a80ffe0090f000000000000a2bc5603ca00000f7f89000000200000004a2471083ec6991778581acb6c0101ff00", 0x44}], 0x1) syz_genetlink_get_family_id$fou(&(0x7f0000000340), r2) syz_genetlink_get_family_id$ipvs(&(0x7f0000000280), r2) 1.50507093s ago: executing program 3 (id=784): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x0, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000e00)={&(0x7f0000000980)='sys_exit\x00', r0}, 0x10) r1 = socket$kcm(0x10, 0x2, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0100000004000000ff0f000007"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000940)={&(0x7f0000000640)='console\x00', r3}, 0x10) sendmsg$inet(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000680)="5c00000013006bcd9e3fe3dceb48aa31086b8703110000001fa1ff0000000000040014020d000a00000000009ee517d34460bc24eab556a705251e6182949a3651f60a84c9f5d1938037e786a6d00d00000000000000bb5a00f69853", 0x5c}], 0x1, 0x0, 0x0, 0x1f000801}, 0x0) 1.331076192s ago: executing program 3 (id=785): perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x66, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x5}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffd, 0x0, 0x0, 0x0, 0x8}, 0x0, 0x0, 0xffffffffffffffff, 0x9) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, &(0x7f0000000140)={0x6}, 0x10) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[], 0x28}}, 0x0) syz_io_uring_setup(0x109, &(0x7f0000000140)={0x0, 0x114d7, 0x2, 0x1, 0x85}, &(0x7f00000004c0)=0x0, &(0x7f0000000200)=0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000b40)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000021007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='kfree\x00', r4, 0x0, 0x4000006}, 0x18) bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB="07000000040000001800000042a0000000000000", @ANYRES32, @ANYBLOB="0001000000007d800eae00001400000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000001800"], 0x48) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffff9c, 0x0, &(0x7f0000000480)='./file0\x00', 0x0, 0x29c780}) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000002e00)=@newtaction={0x5c, 0x30, 0xffff, 0xffffffff, 0x25dfdbfc, {}, [{0x48, 0x1, [@m_police={0x44, 0x1, 0x0, 0x0, {{0xb}, {0x18, 0x2, 0x0, 0x1, [[@TCA_POLICE_RESULT={0x8, 0x5, 0x3}, @TCA_POLICE_RATE64={0xc, 0x8, 0x700}]]}, {0x4}, {0xc, 0xb, {0x0, 0x1}}, {0xc, 0xa, {0x0, 0x2}}}}]}]}, 0x5c}}, 0x0) socket(0x1e, 0x4, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newtaction={0x60, 0x30, 0x871a15abc695f83d, 0x0, 0x25dfdbfc, {}, [{0x4c, 0x1, [@m_sample={0x48, 0x1, 0x0, 0x0, {{0xb}, {0x1c, 0x2, 0x0, 0x1, [@TCA_SAMPLE_PARMS={0x18, 0x2, {0x9, 0x9, 0x0, 0x0, 0x1}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x2, 0x3}}}}]}]}, 0x60}, 0x1, 0x0, 0x0, 0x4}, 0x0) r6 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x3, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000030000000000000000000400b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r6, @ANYBLOB="0000000000000000b705000008000000850000006900000095"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x5, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r7 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x800) ioctl$SG_GET_VERSION_NUM(r7, 0x2284, &(0x7f0000000080)) 1.201050184s ago: executing program 1 (id=786): r0 = openat$selinux_relabel(0xffffffffffffff9c, &(0x7f0000000480), 0x2, 0x0) ftruncate(r0, 0x312762fb) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x2000000}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="19000000040000"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='sched_switch\x00', r4}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000005"], 0x50) ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, &(0x7f0000000300)={{0x0, 0x2}}) r5 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000600), 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r5, 0xc08c5332, &(0x7f00000003c0)={0x9c9, 0x0, 0x0, 'queue1\x00', 0x200000}) 1.076016606s ago: executing program 3 (id=787): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x0, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) r0 = socket$kcm(0x10, 0x2, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0100000004000000ff0f000007"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000940)={&(0x7f0000000640)='console\x00', r2}, 0x10) sendmsg$inet(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000680)="5c00000013006bcd9e3fe3dceb48aa31086b8703110000001fa1ff0000000000040014020d000a00000000009ee517d34460bc24eab556a705251e6182949a3651f60a84c9f5d1938037e786a6d00d00000000000000bb5a00f69853", 0x5c}], 0x1, 0x0, 0x0, 0x1f000801}, 0x0) 971.787207ms ago: executing program 3 (id=788): perf_event_open(&(0x7f0000000140)={0x5, 0x80, 0x40, 0x1, 0x0, 0x0, 0x0, 0x9, 0x40404, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x3, 0x800000000003}, 0x1100, 0x4, 0x0, 0x5, 0x0, 0x8, 0xfffb, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x2, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000f8009a5c1000009059cc5a7e26aa125bea00000000000000"], &(0x7f00000003c0)='GPL\x00', 0x1, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x7fff, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kmem_cache_free\x00', r2, 0x0, 0x1}, 0x18) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) set_mempolicy(0x4005, &(0x7f0000000080)=0x7e, 0x9) syz_clone(0x2c9a4080, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc) bpf$PROG_LOAD(0x5, 0x0, 0x0) r4 = syz_io_uring_setup(0x1725, &(0x7f0000000100)={0x0, 0x1b2f, 0x800, 0x1, 0x333}, &(0x7f0000000400)=0x0, &(0x7f0000000200)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000240)=0xfffffc04, 0x0, 0x4) syz_io_uring_submit(r5, r6, &(0x7f0000000180)=@IORING_OP_SENDMSG={0x9, 0x1c, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000800)={0x0, 0x0, &(0x7f00000005c0)=[{0x0}, {0x0}], 0x2}, 0x0, 0x4080}) io_uring_enter(r4, 0x47f6, 0x0, 0x0, 0x0, 0x0) execveat$binfmt(0xffffffffffffffff, 0x0, 0x0, 0x0, 0xc7e9c013810671ad) write$cgroup_devices(r3, 0x0, 0xffdd) recvmsg(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000006c0)=""/178, 0xb2}, {&(0x7f00000009c0)=""/239, 0xef}, {&(0x7f0000000ac0)=""/204, 0xcc}, {&(0x7f0000000840)=""/179, 0xb3}], 0x4, &(0x7f0000000380)=""/8, 0x8}, 0x40000040) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x11, 0x1f, &(0x7f0000000240)=ANY=[], 0x0, 0x10000000, 0x0, 0x0, 0x41100, 0x10, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x68, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000300)='kfree\x00', r7, 0x0, 0x8}, 0x18) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000002080)=@newtaction={0xe80, 0x30, 0x70f60fceed317383, 0x0, 0xfffffffe, {}, [{0xe6c, 0x1, [@m_pedit={0xe68, 0x1, 0x0, 0x0, {{0xa}, {0xe3c, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS={0xe38, 0x2, {{{0xc, 0xb, 0x4, 0xdf2f, 0xb651}, 0x7, 0x8, [{0x8, 0x4e62, 0x1fb, 0xfffffffb, 0x0, 0x1ff}]}, [{0xfffffffd, 0x0, 0x8, 0xda2, 0x401, 0x2}, {0x1, 0x4, 0x1ff, 0x0, 0x15, 0x6}, {0x8, 0x91962e17, 0x6, 0x10, 0x5, 0x6}, {0x800, 0x5e, 0xc0000, 0xe, 0x9, 0x7}, {0xfffffffb, 0x134, 0x724, 0x6, 0xfffffffd, 0x40}, {0x2, 0x3, 0x9, 0x3, 0x8e9, 0x200}, {0x6e0, 0xb, 0x9, 0x6, 0x8, 0x2}, {0x2, 0x0, 0x401, 0x1, 0x8}, {0x1, 0x0, 0x9, 0x9, 0x7fffffff, 0x911}, {0x401, 0x0, 0x3, 0x0, 0x6, 0x80}, {0x3, 0x8f, 0x3, 0x5, 0x5e7, 0x80000000}, {0x1, 0x6, 0x39, 0x10, 0x32fe51c2, 0x4}, {0xa4c, 0x9, 0x81, 0xfffffffe, 0x3ff, 0x200}, {0x7, 0x8, 0x0, 0x4, 0x8, 0x2}, {0x6, 0x92a, 0x5, 0x4, 0x4, 0xe}, {0xbdd, 0x5, 0x6, 0x0, 0x9, 0x4}, {0x5, 0x0, 0xd, 0x7fffffff, 0x3, 0x417}, {0x1, 0xfffffff7, 0x8, 0x54, 0x4, 0x1}, {0x7fffffff, 0x6d93, 0x9, 0x6, 0xff, 0x3dc1171a}, {0x1, 0x2, 0x25dd, 0xfffffff7, 0x1ff, 0x59}, {0x8, 0x8, 0x2, 0x1, 0x500000}, {0xaeea, 0x9, 0x943, 0xfffffffa, 0x9, 0x1}, {0x2dd9, 0xfffffff4, 0x7f, 0x80000001, 0x7, 0x3ba}, {0x8, 0x9, 0x10001, 0x0, 0xfffffff7, 0x80}, {0x7fff, 0x81, 0x9, 0xfffffffe, 0x9, 0xff}, {0xe4fe, 0x1, 0x2, 0xf, 0x10, 0x6}, {0xfffffffd, 0xff, 0x0, 0x43, 0x7ff, 0x9}, {0x1ba, 0x2, 0xffffffff, 0x1, 0xc5e7, 0x6}, {0x7, 0x8b, 0x9, 0x7, 0x3}, {0xe, 0x6, 0x3ff, 0x5, 0x8, 0xb}, {0xffffffff, 0x5, 0x0, 0xb6f2, 0xfffffffd, 0x80000000}, {0x9a635267, 0x5, 0x3fe0000, 0x15c, 0x4, 0x1}, {0x3, 0xe7a3, 0x2, 0x1, 0x6, 0x9}, {0x5, 0x9, 0x5, 0x4, 0x6, 0x8}, {0x7, 0x1, 0xfffff904, 0x0, 0x6, 0x6}, {0x5, 0x40, 0x4, 0x200, 0xfff, 0x3cde}, {0x8000, 0x2, 0x8, 0x8, 0xf0, 0x8}, {0xfffffffc, 0x2, 0x4, 0x5, 0x1781, 0xc59}, {0x0, 0xff, 0x2, 0x7, 0x4, 0x100}, {0x6, 0x4, 0x4, 0x0, 0x38b9, 0x5}, {0x6aaf, 0xffffff00, 0x1, 0x0, 0x8, 0x9}, {0x6a18, 0x3, 0x6, 0xfffffffd, 0x7a, 0xb6c}, {0x22d8, 0x1, 0x7628, 0x5, 0x4, 0x7}, {0x8, 0x5, 0x6, 0x6, 0x2, 0x7}, {0x5, 0x8, 0x8, 0x8, 0x4, 0x200}, {0x200, 0x3e, 0x800, 0x1, 0x4, 0x100}, {0x6, 0x800, 0x100, 0x1, 0x5, 0x8}, {0x400, 0xf, 0x7, 0x3ff, 0x7}, {0x1, 0x5dc, 0x7f, 0x400, 0x10001}, {0x8, 0x7, 0xa, 0x7, 0x7, 0x7}, {0x81, 0x6, 0x0, 0x80000001, 0x8, 0xac9b}, {0x7, 0x2, 0x0, 0x5, 0xc, 0x7}, {0x0, 0x1, 0x7543e718, 0x1, 0x3, 0x3}, {0x6, 0xfffff801, 0x120b, 0x3, 0x1, 0x4}, {0x5, 0x10, 0x7, 0x7fffffff, 0x0, 0x8000}, {0x8, 0x0, 0x1cd, 0xfffffffa, 0x200, 0x1}, {0x1, 0x2, 0x1c0000, 0x200, 0x800, 0x3}, {0x1be, 0x5, 0x4, 0x4, 0xd1, 0x6}, {0xb, 0x1, 0x200, 0xc1, 0x393, 0x6}, {0x9, 0x5, 0x33, 0x2, 0x80000001, 0xdeaa}, {0x65800000, 0x8, 0x12, 0x4, 0xb917, 0x9}, {0x3, 0x4, 0x84, 0x7, 0x1, 0x4}, {0x9f, 0x80, 0x6, 0x1, 0x3, 0x7f}, {0x3, 0x7f, 0x7ff, 0x5, 0xc, 0xd}, {0x200, 0x4, 0x400, 0x9, 0x10000, 0x89}, {0xffffffff, 0x6e7, 0x200, 0x2, 0x9c, 0x6}, {0x7, 0x101, 0x7, 0x3, 0x0, 0x8}, {0x40, 0x100, 0x1, 0x1, 0x15, 0x8}, {0x40, 0x80000001, 0x3ff, 0x6, 0x4a74, 0x6}, {0x6, 0xf90, 0x5, 0x1, 0x8, 0x9}, {0x101, 0x593, 0x6, 0x2, 0x4, 0xffff}, {0x2, 0x8, 0x401, 0x7f, 0x8, 0x6}, {0xfffffffc, 0x0, 0x5, 0x5b1e1c01, 0x9}, {0xfffffffa, 0x7fffffff, 0x9, 0x0, 0x0, 0x1}, {0xd, 0xf9c, 0xffffffff, 0x3333, 0x1, 0x5}, {0x9, 0x100, 0x9, 0x5f4, 0x306, 0xb7}, {0x5, 0x10001, 0x1, 0x7f, 0x1, 0xfff}, {0x7ff, 0x3, 0xffff3955, 0xb24, 0xfffffffd, 0x5}, {0x6, 0x5, 0x6, 0x101ff, 0x2, 0x5}, {0x1ff, 0x1, 0xfffffff8, 0x0, 0xf424, 0x1e9}, {0x1, 0x9, 0x400, 0x0, 0x8, 0xc}, {0x0, 0x9, 0x10, 0x400, 0x742c, 0x85}, {0x101, 0x2, 0x11, 0x8, 0x6, 0xd794}, {0x1, 0xb5d2, 0x6, 0x0, 0x6}, {0x8f, 0x5, 0x8, 0x9, 0x7, 0x2}, {0x0, 0x2, 0x9, 0x9d3e, 0x6, 0x6}, {0x47b9, 0x81, 0x5, 0xffffffff, 0x5, 0x9}, {0xa78, 0x9, 0x0, 0x6, 0x2, 0x4}, {0x42, 0x1, 0x9, 0x10001, 0x0, 0x7f}, {0x8, 0x8, 0x3, 0x1, 0x9000000, 0xa}, {0x7, 0x4, 0x200, 0x8, 0x1ff, 0x9}, {0xc, 0x16, 0x4, 0x43, 0x245, 0x1}, {0x45, 0x8, 0xffffffff, 0x4, 0x4, 0x80000000}, {0x7, 0x1, 0x8000, 0x6374ac70, 0x4, 0x10}, {0x7, 0x800, 0x6, 0x82, 0x7, 0xc8e}, {0x8, 0xffff, 0x0, 0x7, 0x28f0, 0x10}, {0x8d2e, 0x6, 0x2, 0x0, 0x2, 0x4}, {0xa806, 0x10, 0x7, 0x1, 0x3ff, 0x8ffa}, {0x3, 0xfff, 0x5, 0x800, 0xa, 0xf7a}, {0x3, 0x8, 0x2a, 0x7, 0x1, 0x7}, {0x9, 0x2, 0x3, 0xbd, 0x7ff, 0x8}, {0x1d14, 0xd, 0x6, 0x2, 0x0, 0x100}, {0x1, 0x8001, 0x5, 0x7, 0x8000, 0x1}, {0x1, 0x8, 0x0, 0x5, 0x7f, 0x7ff}, {0xa0, 0xffff8001, 0x8, 0x999d, 0x5857, 0x7fff}, {0x6d, 0x6, 0x81, 0x40a, 0x2, 0xe}, {0x5c84020b, 0x7fff, 0x8, 0x7fffffff, 0x7ff, 0x40}, {0x35d, 0x8, 0x1, 0x6, 0x4, 0x1}, {0x4, 0x1, 0x3ff, 0x25d, 0x22, 0x1}, {0x2, 0x3, 0x3, 0x1ff, 0x0, 0xe72a}, {0x3, 0x100, 0xe927, 0xdf, 0x0, 0x8}, {0x4766, 0x80000000, 0x5, 0x8, 0x3, 0x6}, {0x4, 0x6, 0xc, 0x8, 0x1, 0x80}, {0xd, 0xfffffff1, 0xfffffff8, 0x5, 0x852, 0x80000001}, {0xf, 0x101, 0x7, 0x2a, 0x2, 0x7fff}, {0x4, 0x9, 0x702c6ae0, 0x10001, 0x2, 0x2}, {0x1, 0x10, 0x9, 0x7, 0x10001, 0x1}, {0x3, 0x0, 0xba58, 0x4, 0x1, 0xf}, {0x0, 0x1000, 0x7, 0x0, 0xe5e, 0x7}, {0x6, 0x1, 0x6, 0x6, 0x2, 0x2}, {0x400, 0x2, 0x2, 0x6, 0x6, 0x3}, {0xfff, 0x1, 0x0, 0x3, 0x8, 0xb54}, {0x4, 0x7, 0x2, 0x8, 0x1, 0x76fe}, {0x7fff, 0xe75c, 0x8, 0x76, 0x1, 0xa}, {0x3, 0x5, 0x17, 0x70, 0x40, 0x9}, {0x32, 0x800, 0x0, 0x7, 0x9, 0x86}, {0xf2, 0x0, 0x0, 0x6, 0x60, 0x800}, {0x8, 0xa9, 0x2, 0xe, 0x811, 0x7}], [{0x4}, {0x2, 0x1}, {0x0, 0x1}, {0x2, 0x1}, {0x74da411c989fe199, 0x1}, {0x3}, {0x2, 0x1}, {0x1}, {0x2, 0x1}, {0x2, 0x1}, {}, {0x4}, {0x1}, {0x4, 0x1}, {0x5, 0x1}, {0x5}, {0x4, 0x1}, {0x4, 0x1}, {0x3, 0x1}, {0x1}, {0x0, 0x1}, {0x0, 0x1}, {0x1, 0x1}, {0x4}, {0x5}, {0x3}, {}, {0x1}, {}, {0x1, 0x1}, {0x3, 0x1}, {0x0, 0x1}, {0x3, 0x1}, {0x4}, {0x5, 0x1}, {}, {0x4}, {0x1}, {0xbf156330ad1a2b02, 0x1}, {0x1, 0x1}, {0x5}, {0x3}, {0x1, 0x1}, {}, {0x4}, {0x1}, {0x1}, {0x1, 0x1}, {0x4, 0x7b1c6bcde52d0700}, {0x4, 0x1}, {0x3, 0x1}, {0x2}, {0x2, 0x1}, {0x3}, {0x5, 0x1}, {0x3}, {0x5}, {0x2, 0x1}, {0x5}, {0xd, 0x1}, {0x5}, {0x3}, {0x4}, {0x2, 0x1}, {0x2, 0x2}, {0x6, 0x1}, {0x5, 0x1}, {0x5, 0x1}, {0x5}, {0x0, 0x1}, {0x1}, {0x2, 0x23f82aa145049d92}, {0x4, 0x1}, {}, {}, {0x2f275eda4bd558a9}, {0x2, 0x1}, {0x4}, {}, {0x2}, {0x3, 0x1}, {0x4, 0xdb28de0ef1f4d93e}, {0x0, 0x1}, {0x2, 0x1}, {0x5, 0x1}, {0x2}, {0x5}, {0x4}, {0x3}, {0x4}, {0x1}, {0x0, 0x1}, {0x1}, {0x0, 0x1}, {0x3}, {0x4, 0x2}, {0x5, 0x1}, {0x5}, {0x5, 0x1}, {0x5}, {0x3}, {0x5, 0x1}, {0x5, 0x1}, {0x5, 0x1}, {0x3, 0x1}, {0x0, 0x1}, {0x1, 0x1}, {}, {0x0, 0x1}, {0x1}, {0x2}, {0x4, 0x1}, {0x5}, {0x5}, {0x3}, {0x5}, {0x1, 0x1}, {0x5}, {}, {0x0, 0x1}, {0x3, 0x1}, {0x5}, {0x1, 0x1}, {0x5, 0x1}, {0x3, 0x1}, {0x1, 0x1}, {0x5}, {0x5}]}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xe80}}, 0x0) syz_read_part_table(0x106d, &(0x7f0000001080)="$eJzsz7FNw0AYBeB3trFNR0VD44qaGdiBFiExiBENDSPQ0rAIG7AAI6SOLjpFyQhJiu8r7p6eTvfrD2d2M+UlQ0peP/okJbW8JXVbpyRdUoav9uy2HUvmtPo6ufp/f75v3WNfxvwefhv3V5+7tZaWNnN3HNXSw3dZaq1rks+/p5+TrwsAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAF2gXAAD//wCmE1Q=") setsockopt$sock_attach_bpf(r1, 0x1, 0x21, &(0x7f0000000040), 0x4) mmap$xdp(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x9a4b7d9fabcf294e, 0x20010, 0xffffffffffffffff, 0x0) sendmmsg(r0, &(0x7f0000004b00)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x4, 0x200040d1) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000940)=[{{&(0x7f0000000140)={0x2, 0x4e23, @local}, 0x10, &(0x7f0000000240)=[{&(0x7f0000000540)="000000a4b357", 0x6}], 0x1}}, {{0x0, 0x0, &(0x7f0000000900)=[{&(0x7f0000002600)="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", 0x5dd}], 0x1}}], 0x2, 0x4000) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x7c}}, 0x0) socket$inet_udp(0x2, 0x2, 0x0) r9 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000100), 0x20082, 0x0) ioctl$TIOCGETD(r9, 0x5424, &(0x7f00000000c0)) 936.444157ms ago: executing program 4 (id=789): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100000000001c000000000000ea04850000007b00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x10) bpf$OBJ_GET_MAP(0x7, &(0x7f00000000c0)=@generic={&(0x7f0000000000)='./file0\x00', 0x0, 0x10}, 0x18) sendmsg$MPTCP_PM_CMD_SUBFLOW_DESTROY(0xffffffffffffffff, &(0x7f0000000a40)={0x0, 0x0, &(0x7f0000000a00)={&(0x7f0000000900)={0x1c, 0x0, 0x1, 0x70bd2a, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_ADDR_REMOTE={0x4}, @MPTCP_PM_ATTR_ADDR={0x4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20024000}, 0x6000010) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000030000000000000000000400b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32, @ANYBLOB="0000000000000000b705000008"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x5, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/power/resume', 0x169a82, 0x109) sendfile(r1, r1, 0x0, 0xb) 901.656168ms ago: executing program 0 (id=790): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000180)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x2000000}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="190000000400000008000000"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='sched_switch\x00', r4}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00'}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x15, 0x2a, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000f0030000000000006000000018120000", @ANYRES32, @ANYBLOB="0000000000000000b703000000000000850000000c000000b70000000000000018000000000000800000000080000000186a0000030000000000000006000000b7080000000000007b8af8ff00000000b7080000010000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70500000800000085000000a500000018110000", @ANYRES32, @ANYBLOB="0001000000000000b7020000000000008500000086000000180100002020692500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000f8ffffff8500000006000000186900000100000000000000ffffff7f18140000", @ANYRES32, @ANYBLOB="0000000000000000851000000000000095eeff0000000000"], &(0x7f00000005c0)='syzkaller\x00', 0xe, 0x0, &(0x7f0000000800), 0x41000, 0x21, '\x00', 0x0, @sk_reuseport=0x28, 0xffffffffffffffff, 0x8, &(0x7f00000004c0)={0x103, 0x4}, 0x8, 0x10, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x7, 0x0, &(0x7f0000000940)=[{0x5, 0x4, 0xb, 0x9}, {0x5, 0x2, 0xf, 0x4}, {0x2, 0x4, 0x0, 0xc}, {0x4, 0x4, 0x7, 0x11}, {0x1, 0x4, 0x0, 0x7}, {0x0, 0x4, 0xf, 0xc}, {0x5, 0x5, 0xb, 0xc}], 0x10, 0x3fb, @void, @value}, 0x94) ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, &(0x7f0000000300)={{0x0, 0x2}}) r5 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000600), 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r5, 0xc08c5332, &(0x7f00000003c0)={0x9c9, 0x0, 0x0, 'queue1\x00', 0x200000}) 453.861794ms ago: executing program 4 (id=791): sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$packet(0x11, 0x2, 0x300) sched_setaffinity(0x0, 0x0, 0x0) socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000400)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000500000002"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x10) getpeername$packet(r0, 0x0, &(0x7f0000000040)) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) bpf$MAP_CREATE(0x0, 0x0, 0x48) gettid() bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000400)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) readv(r3, &(0x7f0000001340)=[{&(0x7f0000000580)=""/148, 0x94}], 0x1) readv(r3, &(0x7f0000001240)=[{&(0x7f0000000040)=""/73, 0x49}], 0x1) 0s ago: executing program 0 (id=792): perf_event_open(&(0x7f0000000140)={0x5, 0x80, 0x40, 0x1, 0x0, 0x0, 0x0, 0x9, 0x40404, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x3, 0x800000000003}, 0x1100, 0x4, 0x0, 0x5, 0x0, 0x8, 0xfffb, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) socketpair$tipc(0x1e, 0x1, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kmem_cache_free\x00', 0xffffffffffffffff, 0x0, 0x1}, 0x18) set_mempolicy(0x4005, &(0x7f0000000080)=0x7e, 0x9) syz_clone(0x2c9a4080, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = syz_io_uring_setup(0x1725, &(0x7f0000000100)={0x0, 0x1b2f, 0x800, 0x1, 0x333}, &(0x7f0000000400)=0x0, &(0x7f0000000200)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000240)=0xfffffc04, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_SENDMSG={0x9, 0x1c, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000800)={0x0, 0x0, &(0x7f00000005c0)=[{0x0}, {0x0}], 0x2}, 0x0, 0x4080}) io_uring_enter(r0, 0x47f6, 0x0, 0x0, 0x0, 0x0) kernel console output (not intermixed with test programs): s mode [ 30.147377][ T3325] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 30.154927][ T3325] Cannot create hsr debugfs directory [ 30.168061][ T3323] hsr_slave_0: entered promiscuous mode [ 30.174192][ T3323] hsr_slave_1: entered promiscuous mode [ 30.180271][ T3323] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 30.187838][ T3323] Cannot create hsr debugfs directory [ 30.262761][ T3318] hsr_slave_0: entered promiscuous mode [ 30.268896][ T3318] hsr_slave_1: entered promiscuous mode [ 30.274901][ T3318] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 30.282697][ T3318] Cannot create hsr debugfs directory [ 30.363502][ T3317] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 30.372322][ T3317] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 30.397873][ T3317] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 30.418925][ T3317] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 30.439930][ T3327] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 30.451532][ T3327] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 30.460910][ T3327] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 30.472573][ T3327] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 30.496414][ T3325] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 30.509022][ T3325] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 30.518156][ T3325] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 30.527737][ T3325] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 30.563559][ T3323] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 30.573861][ T3323] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 30.591291][ T3323] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 30.608887][ T3323] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 30.634858][ T3318] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 30.650830][ T3317] 8021q: adding VLAN 0 to HW filter on device bond0 [ 30.658112][ T3318] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 30.668214][ T3318] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 30.677415][ T3318] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 30.692231][ T3317] 8021q: adding VLAN 0 to HW filter on device team0 [ 30.713451][ T3327] 8021q: adding VLAN 0 to HW filter on device bond0 [ 30.729956][ T51] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.737178][ T51] bridge0: port 1(bridge_slave_0) entered forwarding state [ 30.745950][ T51] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.753057][ T51] bridge0: port 2(bridge_slave_1) entered forwarding state [ 30.776362][ T3327] 8021q: adding VLAN 0 to HW filter on device team0 [ 30.793774][ T1402] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.800866][ T1402] bridge0: port 1(bridge_slave_0) entered forwarding state [ 30.824702][ T3325] 8021q: adding VLAN 0 to HW filter on device bond0 [ 30.842612][ T1402] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.849724][ T1402] bridge0: port 2(bridge_slave_1) entered forwarding state [ 30.869703][ T3323] 8021q: adding VLAN 0 to HW filter on device bond0 [ 30.880004][ T3325] 8021q: adding VLAN 0 to HW filter on device team0 [ 30.904015][ T1402] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.911165][ T1402] bridge0: port 1(bridge_slave_0) entered forwarding state [ 30.926345][ T3323] 8021q: adding VLAN 0 to HW filter on device team0 [ 30.934976][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.942135][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 30.965059][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.972165][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 30.981125][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.988303][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 31.010536][ T3317] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 31.043790][ T3325] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 31.054312][ T3325] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 31.080817][ T3318] 8021q: adding VLAN 0 to HW filter on device bond0 [ 31.094177][ T3318] 8021q: adding VLAN 0 to HW filter on device team0 [ 31.110909][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.118127][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 31.133498][ T1402] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.140689][ T1402] bridge0: port 2(bridge_slave_1) entered forwarding state [ 31.155327][ T3327] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 31.165636][ T3323] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 31.187483][ T3318] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 31.198078][ T3318] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 31.242982][ T3317] veth0_vlan: entered promiscuous mode [ 31.260527][ T3325] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 31.287590][ T3317] veth1_vlan: entered promiscuous mode [ 31.315293][ T3317] veth0_macvtap: entered promiscuous mode [ 31.348569][ T3317] veth1_macvtap: entered promiscuous mode [ 31.363188][ T3318] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 31.379364][ T3323] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 31.403259][ T3317] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 31.411138][ T3327] veth0_vlan: entered promiscuous mode [ 31.432953][ T3317] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 31.451199][ T3317] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.460058][ T3317] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.468860][ T3317] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.477709][ T3317] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.498891][ T3327] veth1_vlan: entered promiscuous mode [ 31.575613][ T3327] veth0_macvtap: entered promiscuous mode [ 31.585810][ T3318] veth0_vlan: entered promiscuous mode [ 31.596084][ T3318] veth1_vlan: entered promiscuous mode [ 31.604834][ T3327] veth1_macvtap: entered promiscuous mode [ 31.623654][ T3325] veth0_vlan: entered promiscuous mode [ 31.631183][ T3317] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 31.633924][ T3327] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 31.656378][ T3325] veth1_vlan: entered promiscuous mode [ 31.678822][ T3323] veth0_vlan: entered promiscuous mode [ 31.687422][ T3327] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 31.701368][ T3325] veth0_macvtap: entered promiscuous mode [ 31.711907][ T3323] veth1_vlan: entered promiscuous mode [ 31.724238][ T3327] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.731229][ T3455] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1'. [ 31.733177][ T3327] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.750408][ T3327] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.750589][ T3455] loop0: detected capacity change from 0 to 512 [ 31.759257][ T3327] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.776852][ T3318] veth0_macvtap: entered promiscuous mode [ 31.781925][ T3455] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 31.791001][ T3323] veth0_macvtap: entered promiscuous mode [ 31.795698][ T3455] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 31.802947][ T3323] veth1_macvtap: entered promiscuous mode [ 31.819266][ T3325] veth1_macvtap: entered promiscuous mode [ 31.832659][ T3455] EXT4-fs warning (device loop0): ext4_expand_extra_isize_ea:2848: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 31.832956][ T3318] veth1_macvtap: entered promiscuous mode [ 31.847560][ T3455] EXT4-fs (loop0): 1 truncate cleaned up [ 31.862746][ T3455] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 31.865694][ T3323] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 31.886943][ T3325] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 31.896291][ T3318] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 31.908955][ T3323] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 31.924482][ T3325] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 31.932606][ T3455] EXT4-fs error (device loop0): mb_free_blocks:1948: group 0, inode 15: block 33:freeing already freed block (bit 32); block bitmap corrupt. [ 31.934542][ T3318] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 31.955920][ T3325] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.964800][ T3325] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.973586][ T3325] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.982516][ T3325] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.002262][ T3323] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.011335][ T3323] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.020189][ T3323] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.028967][ T3323] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.045980][ T3318] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.054864][ T3318] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.056697][ T29] kauditd_printk_skb: 33 callbacks suppressed [ 32.056716][ T29] audit: type=1400 audit(1749015088.014:105): avc: denied { allowed } for pid=3454 comm="syz.0.1" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 32.063712][ T3318] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.097424][ T3318] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.110508][ T29] audit: type=1400 audit(1749015088.074:106): avc: denied { create } for pid=3454 comm="syz.0.1" anonclass=[io_uring] scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 32.131610][ T29] audit: type=1400 audit(1749015088.074:107): avc: denied { map } for pid=3454 comm="syz.0.1" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=4308 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 32.155380][ T29] audit: type=1400 audit(1749015088.074:108): avc: denied { read write } for pid=3454 comm="syz.0.1" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=4308 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 32.263907][ T29] audit: type=1400 audit(1749015088.224:109): avc: denied { kexec_image_load } for pid=3461 comm="syz.2.3" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=system permissive=1 [ 32.303783][ T3463] loop2: detected capacity change from 0 to 256 [ 32.325293][ T29] audit: type=1400 audit(1749015088.224:110): avc: denied { create } for pid=3461 comm="syz.2.3" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 32.345863][ T29] audit: type=1400 audit(1749015088.224:111): avc: denied { write } for pid=3461 comm="syz.2.3" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 32.349314][ T3463] msdos: Unknown parameter '€' [ 32.366158][ T29] audit: type=1400 audit(1749015088.224:112): avc: denied { map_create } for pid=3461 comm="syz.2.3" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 32.389942][ T29] audit: type=1400 audit(1749015088.224:113): avc: denied { open } for pid=3461 comm="syz.2.3" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 32.408960][ T29] audit: type=1400 audit(1749015088.224:114): avc: denied { kernel } for pid=3461 comm="syz.2.3" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 32.505227][ T3463] IPVS: stopping master sync thread 3470 ... [ 32.505234][ T3470] IPVS: sync thread started: state = MASTER, mcast_ifn = veth0_virt_wifi, syncid = 33554432, id = 0 [ 32.529020][ T3317] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 32.645975][ T3478] loop3: detected capacity change from 0 to 1024 [ 32.656288][ T3478] EXT4-fs: Ignoring removed nomblk_io_submit option [ 32.704398][ T3478] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 32.717391][ T3482] loop0: detected capacity change from 0 to 256 [ 32.908971][ T3496] netlink: 8 bytes leftover after parsing attributes in process `syz.4.12'. [ 32.937057][ T3482] syz.0.6: attempt to access beyond end of device [ 32.937057][ T3482] loop0: rw=2049, sector=256, nr_sectors = 12 limit=256 [ 32.938680][ T3499] netlink: 8 bytes leftover after parsing attributes in process `syz.2.13'. [ 33.051585][ T3496] syz.4.12 (3496) used greatest stack depth: 10192 bytes left [ 33.068560][ T3506] netlink: 8 bytes leftover after parsing attributes in process `syz.2.17'. [ 33.073306][ T3502] hub 8-0:1.0: USB hub found [ 33.095898][ T3502] hub 8-0:1.0: 8 ports detected [ 33.101449][ T3509] netlink: 8 bytes leftover after parsing attributes in process `syz.4.18'. [ 33.279290][ T3523] netlink: 8 bytes leftover after parsing attributes in process `syz.4.24'. [ 33.279476][ T3520] GUP no longer grows the stack in syz.2.19 (3520): 200000004000-200000008000 (200000002000) [ 33.279550][ T3520] CPU: 0 UID: 0 PID: 3520 Comm: syz.2.19 Not tainted 6.15.0-syzkaller-11796-g5abc7438f1e9 #0 PREEMPT(voluntary) [ 33.279580][ T3520] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 33.279595][ T3520] Call Trace: [ 33.279601][ T3520] [ 33.279610][ T3520] __dump_stack+0x1d/0x30 [ 33.279636][ T3520] dump_stack_lvl+0xe8/0x140 [ 33.279660][ T3520] dump_stack+0x15/0x1b [ 33.279737][ T3520] __get_user_pages+0x199d/0x1fb0 [ 33.279774][ T3520] ? __rcu_read_unlock+0x4f/0x70 [ 33.279804][ T3520] get_user_pages_remote+0x1dc/0x7a0 [ 33.279918][ T3520] __access_remote_vm+0x156/0x560 [ 33.279952][ T3520] access_remote_vm+0x32/0x40 [ 33.279981][ T3520] proc_pid_cmdline_read+0x30f/0x6a0 [ 33.280008][ T3520] ? __pfx_proc_pid_cmdline_read+0x10/0x10 [ 33.280058][ T3520] vfs_readv+0x3fb/0x690 [ 33.280093][ T3520] ? restore_fpregs_from_fpstate+0x61/0x120 [ 33.280122][ T3520] __x64_sys_preadv+0xfd/0x1c0 [ 33.280182][ T3520] x64_sys_call+0x1503/0x2fb0 [ 33.280243][ T3520] do_syscall_64+0xd2/0x200 [ 33.280271][ T3520] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 33.280363][ T3520] ? clear_bhb_loop+0x40/0x90 [ 33.280389][ T3520] ? clear_bhb_loop+0x40/0x90 [ 33.280417][ T3520] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 33.280443][ T3520] RIP: 0033:0x7f749c89e969 [ 33.280467][ T3520] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 33.280522][ T3520] RSP: 002b:00007f749aee6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000127 [ 33.280566][ T3520] RAX: ffffffffffffffda RBX: 00007f749cac6080 RCX: 00007f749c89e969 [ 33.280581][ T3520] RDX: 0000000000000001 RSI: 0000200000000d00 RDI: 0000000000000008 [ 33.280593][ T3520] RBP: 00007f749c920ab1 R08: 0000000000000200 R09: 0000000000000000 [ 33.280604][ T3520] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000000000000 [ 33.280618][ T3520] R13: 0000000000000000 R14: 00007f749cac6080 R15: 00007ffc7d0ace38 [ 33.280641][ T3520] [ 33.366801][ T3318] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 33.367964][ T3527] tipc: Enabling of bearer rejected, failed to enable media [ 33.461576][ T3531] netlink: 8 bytes leftover after parsing attributes in process `syz.3.26'. [ 33.610779][ T3540] netlink: 8 bytes leftover after parsing attributes in process `syz.3.30'. [ 33.643509][ T3542] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 33.702201][ T3542] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 33.731855][ T3542] loop1: detected capacity change from 0 to 512 [ 33.750506][ T3547] tipc: Enabling of bearer rejected, failed to enable media [ 33.764013][ T3549] netlink: 4 bytes leftover after parsing attributes in process `syz.3.34'. [ 33.798626][ T3542] EXT4-fs warning (device loop1): ext4_enable_quotas:7168: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 33.852416][ T3542] EXT4-fs (loop1): mount failed [ 33.872510][ T3542] netlink: 32 bytes leftover after parsing attributes in process `syz.1.31'. [ 33.883025][ T3395] IPVS: starting estimator thread 0... [ 33.953094][ T3568] capability: warning: `syz.2.40' uses deprecated v2 capabilities in a way that may be insecure [ 33.976821][ T3559] IPVS: using max 2304 ests per chain, 115200 per kthread [ 34.128554][ T3587] ip6gretap0: entered allmulticast mode [ 34.173050][ T3584] loop3: detected capacity change from 0 to 8192 [ 34.338601][ T3308] loop3: p2 p3 p4 [ 34.384403][ T3308] loop3: p2 start 452985600 is beyond EOD, truncated [ 34.391286][ T3308] loop3: p3 size 33554432 extends beyond EOD, truncated [ 34.416425][ T3308] loop3: p4 start 8388607 is beyond EOD, truncated [ 34.429561][ T3584] loop3: p2 p3 p4 [ 34.433517][ T3584] loop3: p2 start 452985600 is beyond EOD, truncated [ 34.440452][ T3584] loop3: p3 size 33554432 extends beyond EOD, truncated [ 34.455411][ T3584] loop3: p4 start 8388607 is beyond EOD, truncated [ 34.752114][ T3308] udevd[3308]: inotify_add_watch(7, /dev/loop3p3, 10) failed: No such file or directory [ 35.054485][ T3632] SELinux: Context system_u:object_r:fsadm_exec_t:s0 is not valid (left unmapped). [ 35.062078][ T3396] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 35.082282][ T3632] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 35.095552][ T3396] hid-generic 0000:0000:0000.0001: hidraw0: HID v0.00 Device [syz1] on syz0 [ 35.132697][ T3636] loop4: detected capacity change from 0 to 512 [ 35.173265][ T3636] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 35.186229][ T3636] ext4 filesystem being mounted at /16/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 35.211502][ T3636] EXT4-fs (loop4): shut down requested (0) [ 35.214030][ T3632] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 35.309951][ T3632] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 35.311910][ T3649] syz.2.61 uses obsolete (PF_INET,SOCK_PACKET) [ 35.379655][ T3632] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 35.407889][ T3649] bond1: entered promiscuous mode [ 35.413087][ T3649] bond1: entered allmulticast mode [ 35.420857][ T3649] 8021q: adding VLAN 0 to HW filter on device bond1 [ 35.422723][ T3640] loop3: detected capacity change from 0 to 8192 [ 35.431214][ T3649] bond1 (unregistering): Released all slaves [ 35.462588][ T3653] loop2: detected capacity change from 0 to 1024 [ 35.483734][ T3632] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 35.490191][ T3632] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 35.508099][ T3632] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 35.556994][ T3632] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 35.656343][ T3654] loop1: detected capacity change from 0 to 8192 [ 35.711186][ T3325] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 35.819574][ T3662] loop3: detected capacity change from 0 to 512 [ 35.836777][ T3662] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 35.870527][ T3666] ip6gretap0: entered allmulticast mode [ 35.910152][ T3654] SELinux: policydb magic number 0x6572666b does not match expected magic number 0xf97cff8c [ 35.910263][ T3654] SELinux: failed to load policy [ 35.912917][ T3667] netlink: 'syz.4.66': attribute type 27 has an invalid length. [ 35.930385][ T3662] EXT4-fs (loop3): 1 truncate cleaned up [ 35.930815][ T3662] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 35.951465][ T3667] ip6gretap0: left allmulticast mode [ 35.951678][ T3667] bridge0: port 2(bridge_slave_1) entered disabled state [ 35.951861][ T3667] bridge0: port 1(bridge_slave_0) entered disabled state [ 35.973693][ T3662] EXT4-fs error (device loop3): mb_free_blocks:1948: group 0, inode 15: block 33:freeing already freed block (bit 32); block bitmap corrupt. [ 36.077217][ T3667] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 36.079868][ T3667] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 36.199361][ T3667] netdevsim netdevsim4 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 36.199460][ T3667] netdevsim netdevsim4 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 36.199499][ T3667] netdevsim netdevsim4 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 36.199570][ T3667] netdevsim netdevsim4 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 36.237722][ T3672] 8021q: adding VLAN 0 to HW filter on device bond0 [ 36.239172][ T3672] 8021q: adding VLAN 0 to HW filter on device team0 [ 36.241932][ T3672] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 36.628935][ T3318] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 36.982359][ T3721] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=3721 comm=syz.2.75 [ 37.403113][ T3724] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=3724 comm=syz.2.75 [ 37.773348][ T3739] __nla_validate_parse: 17 callbacks suppressed [ 37.773370][ T3739] netlink: 8 bytes leftover after parsing attributes in process `syz.3.83'. [ 37.835254][ T3742] netlink: 8 bytes leftover after parsing attributes in process `syz.2.84'. [ 38.032329][ T3751] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=3751 comm=syz.2.86 [ 38.203903][ T3754] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=3754 comm=syz.2.86 [ 38.269331][ T3756] ip6gretap0: entered allmulticast mode [ 38.526745][ T29] kauditd_printk_skb: 366 callbacks suppressed [ 38.526974][ T29] audit: type=1326 audit(1749015094.484:480): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3762 comm="syz.0.89" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f30c82ee969 code=0x7ffc0000 [ 38.556609][ T29] audit: type=1326 audit(1749015094.484:481): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3762 comm="syz.0.89" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f30c82ee969 code=0x7ffc0000 [ 38.580164][ T29] audit: type=1326 audit(1749015094.484:482): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3762 comm="syz.0.89" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f30c82ee969 code=0x7ffc0000 [ 38.603406][ T29] audit: type=1326 audit(1749015094.484:483): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3762 comm="syz.0.89" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f30c82ee969 code=0x7ffc0000 [ 38.641499][ T29] audit: type=1326 audit(1749015094.544:484): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3762 comm="syz.0.89" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f30c82ee969 code=0x7ffc0000 [ 38.664857][ T29] audit: type=1326 audit(1749015094.544:485): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3762 comm="syz.0.89" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f30c82ee969 code=0x7ffc0000 [ 38.688071][ T29] audit: type=1326 audit(1749015094.544:486): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3762 comm="syz.0.89" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f30c82ee969 code=0x7ffc0000 [ 38.711451][ T29] audit: type=1326 audit(1749015094.544:487): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3762 comm="syz.0.89" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f30c82ee969 code=0x7ffc0000 [ 38.734736][ T29] audit: type=1326 audit(1749015094.544:488): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3762 comm="syz.0.89" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f30c82ee969 code=0x7ffc0000 [ 38.758014][ T29] audit: type=1326 audit(1749015094.544:489): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3762 comm="syz.0.89" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f30c82ee969 code=0x7ffc0000 [ 38.782136][ T3775] netlink: 4 bytes leftover after parsing attributes in process `syz.1.91'. [ 38.854885][ T3781] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 38.864798][ T3781] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 38.885513][ T3781] loop3: detected capacity change from 0 to 512 [ 38.917612][ T3781] EXT4-fs warning (device loop3): ext4_enable_quotas:7168: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 38.939500][ T3781] EXT4-fs (loop3): mount failed [ 38.962553][ T3781] netlink: 32 bytes leftover after parsing attributes in process `syz.3.94'. [ 38.973642][ T3395] IPVS: starting estimator thread 0... [ 39.001057][ T3791] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=3791 comm=syz.0.95 [ 39.024055][ T3792] netlink: 4 bytes leftover after parsing attributes in process `syz.4.96'. [ 39.049071][ T3783] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=3783 comm=syz.0.95 [ 39.066745][ T3790] IPVS: using max 2208 ests per chain, 110400 per kthread [ 39.218979][ T3796] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=3796 comm=syz.0.97 [ 39.255901][ T3794] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=3794 comm=syz.0.97 [ 39.813094][ T3817] netlink: 'syz.2.101': attribute type 27 has an invalid length. [ 39.989359][ T3830] netlink: 4 bytes leftover after parsing attributes in process `syz.2.101'. [ 39.990384][ T3817] ip6gretap0: left allmulticast mode [ 39.998239][ T3830] netlink: 4 bytes leftover after parsing attributes in process `syz.2.101'. [ 40.013738][ T3817] bridge0: port 2(bridge_slave_1) entered disabled state [ 40.021034][ T3817] bridge0: port 1(bridge_slave_0) entered disabled state [ 40.032927][ T3830] netlink: 4 bytes leftover after parsing attributes in process `syz.2.101'. [ 40.060001][ T3830] netlink: 4 bytes leftover after parsing attributes in process `syz.2.101'. [ 40.068920][ T3830] netlink: 4 bytes leftover after parsing attributes in process `syz.2.101'. [ 40.105398][ T3817] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 40.115974][ T3817] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 40.147018][ T3817] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 40.156053][ T3817] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 40.165186][ T3817] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 40.174281][ T3817] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 40.208718][ T3826] 8021q: adding VLAN 0 to HW filter on device bond0 [ 40.218110][ T3826] 8021q: adding VLAN 0 to HW filter on device team0 [ 40.230199][ T3826] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 41.638728][ T3896] loop4: detected capacity change from 0 to 512 [ 41.645889][ T3896] EXT4-fs: dax option not supported [ 41.736747][ T3909] netlink: 'syz.4.125': attribute type 27 has an invalid length. [ 41.776102][ T3909] 8021q: adding VLAN 0 to HW filter on device bond0 [ 41.795919][ T3909] 8021q: adding VLAN 0 to HW filter on device team0 [ 41.822310][ T3909] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 41.853576][ T3921] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=3921 comm=syz.1.129 [ 41.934973][ T3923] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=3923 comm=syz.1.129 [ 42.878189][ T3958] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=3958 comm=syz.4.142 [ 42.930801][ T3960] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=3960 comm=syz.4.142 [ 43.033172][ T3962] netlink: 'syz.0.143': attribute type 27 has an invalid length. [ 43.123922][ T3962] bridge0: port 2(bridge_slave_1) entered disabled state [ 43.124069][ T3962] bridge0: port 1(bridge_slave_0) entered disabled state [ 43.195664][ T3970] __nla_validate_parse: 16 callbacks suppressed [ 43.195680][ T3970] netlink: 4 bytes leftover after parsing attributes in process `syz.0.143'. [ 43.195696][ T3970] netlink: 4 bytes leftover after parsing attributes in process `syz.0.143'. [ 43.195795][ T3970] netlink: 4 bytes leftover after parsing attributes in process `syz.0.143'. [ 43.220739][ T3970] netlink: 4 bytes leftover after parsing attributes in process `syz.0.143'. [ 43.220769][ T3970] netlink: 4 bytes leftover after parsing attributes in process `syz.0.143'. [ 43.220858][ T3970] netlink: 4 bytes leftover after parsing attributes in process `syz.0.143'. [ 43.263827][ T3962] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 43.266048][ T3962] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 43.271098][ T3976] netlink: 'syz.2.146': attribute type 27 has an invalid length. [ 43.281135][ T3970] netlink: 4 bytes leftover after parsing attributes in process `syz.0.143'. [ 43.281163][ T3970] netlink: 4 bytes leftover after parsing attributes in process `syz.0.143'. [ 43.281251][ T3970] netlink: 4 bytes leftover after parsing attributes in process `syz.0.143'. [ 43.287618][ T3962] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 43.287709][ T3962] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 43.287752][ T3962] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 43.287852][ T3962] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 43.379274][ T3982] netlink: 4 bytes leftover after parsing attributes in process `syz.2.146'. [ 43.423168][ T3967] 8021q: adding VLAN 0 to HW filter on device bond0 [ 43.426854][ T3967] 8021q: adding VLAN 0 to HW filter on device team0 [ 43.463959][ T3967] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 43.514249][ T3979] 8021q: adding VLAN 0 to HW filter on device bond0 [ 43.515934][ T3979] 8021q: adding VLAN 0 to HW filter on device team0 [ 43.640777][ T3979] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 43.720004][ T29] kauditd_printk_skb: 212 callbacks suppressed [ 43.720022][ T29] audit: type=1326 audit(1749015099.684:701): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3996 comm="syz.0.150" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f30c82ee969 code=0x7ffc0000 [ 43.763369][ T29] audit: type=1326 audit(1749015099.714:702): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3996 comm="syz.0.150" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f30c82ee969 code=0x7ffc0000 [ 43.834825][ T29] audit: type=1326 audit(1749015099.754:703): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3996 comm="syz.0.150" exe="/root/syz-executor" sig=0 arch=c000003e syscall=172 compat=0 ip=0x7f30c82ee969 code=0x7ffc0000 [ 43.858849][ T29] audit: type=1326 audit(1749015099.754:704): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3996 comm="syz.0.150" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f30c82ee969 code=0x7ffc0000 [ 43.946593][ T29] audit: type=1326 audit(1749015099.904:705): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3998 comm="syz.4.151" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f518d21e969 code=0x7ffc0000 [ 43.970018][ T29] audit: type=1326 audit(1749015099.904:706): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3998 comm="syz.4.151" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f518d21e969 code=0x7ffc0000 [ 43.993315][ T29] audit: type=1326 audit(1749015099.904:707): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3998 comm="syz.4.151" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f518d21e969 code=0x7ffc0000 [ 44.016607][ T29] audit: type=1326 audit(1749015099.904:708): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3998 comm="syz.4.151" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f518d21e969 code=0x7ffc0000 [ 44.040115][ T29] audit: type=1326 audit(1749015099.904:709): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3998 comm="syz.4.151" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f518d21e969 code=0x7ffc0000 [ 44.063370][ T29] audit: type=1326 audit(1749015099.904:710): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3998 comm="syz.4.151" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f518d21e969 code=0x7ffc0000 [ 44.292532][ T4021] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=4021 comm=syz.3.157 [ 44.348998][ T4025] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=4025 comm=syz.3.157 [ 44.885019][ T4041] mmap: syz.3.166 (4041) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 46.510798][ T4122] netlink: 'syz.2.191': attribute type 4 has an invalid length. [ 46.567116][ T4122] netlink: 'syz.2.191': attribute type 4 has an invalid length. [ 46.613731][ T4124] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=4124 comm=syz.4.190 [ 46.673645][ T4128] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=4128 comm=syz.4.190 [ 46.689739][ T4126] netlink: 'syz.2.193': attribute type 27 has an invalid length. [ 46.783779][ T4130] 8021q: adding VLAN 0 to HW filter on device bond0 [ 46.785265][ T4130] 8021q: adding VLAN 0 to HW filter on device team0 [ 46.816363][ T4130] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 46.817825][ T4133] ip6gretap0: entered allmulticast mode [ 47.279973][ T4167] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=4167 comm=syz.0.203 [ 47.293190][ T4167] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=4167 comm=syz.0.203 [ 48.009978][ T4182] loop4: detected capacity change from 0 to 8192 [ 48.017866][ T4188] netlink: 'syz.1.210': attribute type 10 has an invalid length. [ 48.025835][ T4188] dummy0: entered promiscuous mode [ 48.058228][ T3941] loop4: p2 p3 p4 [ 48.063327][ T4186] loop2: detected capacity change from 0 to 4096 [ 48.070600][ T4186] ext4: Unknown parameter 'smackfsdef' [ 48.076046][ T3941] loop4: p2 start 452985600 is beyond EOD, truncated [ 48.083862][ T3941] loop4: p3 size 33554432 extends beyond EOD, truncated [ 48.117546][ T3941] loop4: p4 start 8388607 is beyond EOD, truncated [ 48.153497][ T4186] binfmt_misc: register: failed to install interpreter file ./file2 [ 48.154492][ T4182] loop4: p2 p3 p4 [ 48.190500][ T4186] loop2: detected capacity change from 0 to 1024 [ 48.202213][ T4182] loop4: p2 start 452985600 is beyond EOD, truncated [ 48.209052][ T4182] loop4: p3 size 33554432 extends beyond EOD, truncated [ 48.239817][ T4182] loop4: p4 start 8388607 is beyond EOD, truncated [ 48.280811][ T3009] loop4: p2 p3 p4 [ 48.285025][ T4186] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 48.303176][ T3009] loop4: p2 start 452985600 is beyond EOD, truncated [ 48.310106][ T3009] loop4: p3 size 33554432 extends beyond EOD, truncated [ 48.351289][ T3009] loop4: p4 start 8388607 is beyond EOD, truncated [ 48.436283][ T3327] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 48.537781][ T4207] ip6gretap0: entered allmulticast mode [ 48.757886][ T3941] udevd[3941]: inotify_add_watch(7, /dev/loop4p3, 10) failed: No such file or directory [ 48.798366][ T4224] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 48.809770][ T4224] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 48.883323][ T4224] loop1: detected capacity change from 0 to 512 [ 48.924012][ T4225] __nla_validate_parse: 21 callbacks suppressed [ 48.924027][ T4225] netlink: 12 bytes leftover after parsing attributes in process `syz.4.220'. [ 48.942754][ T4224] __quota_error: 53 callbacks suppressed [ 48.942773][ T4224] Quota error (device loop1): v2_read_file_info: Free block number 1 out of range (1, 6). [ 48.959965][ T4224] EXT4-fs warning (device loop1): ext4_enable_quotas:7168: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 48.978967][ T4224] EXT4-fs (loop1): mount failed [ 49.086671][ T29] audit: type=1326 audit(1749015105.044:764): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4233 comm="syz.4.222" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f518d21e969 code=0x7ffc0000 [ 49.109993][ T29] audit: type=1326 audit(1749015105.044:765): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4233 comm="syz.4.222" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f518d21e969 code=0x7ffc0000 [ 49.133503][ T29] audit: type=1326 audit(1749015105.044:766): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4233 comm="syz.4.222" exe="/root/syz-executor" sig=0 arch=c000003e syscall=172 compat=0 ip=0x7f518d21e969 code=0x7ffc0000 [ 49.156755][ T29] audit: type=1326 audit(1749015105.044:767): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4233 comm="syz.4.222" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f518d21e969 code=0x7ffc0000 [ 49.180008][ T29] audit: type=1326 audit(1749015105.044:768): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4233 comm="syz.4.222" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f518d21e969 code=0x7ffc0000 [ 49.348812][ T29] audit: type=1326 audit(1749015105.304:769): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4242 comm="syz.3.225" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4abedae969 code=0x7ffc0000 [ 49.372310][ T29] audit: type=1326 audit(1749015105.304:770): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4242 comm="syz.3.225" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f4abedae969 code=0x7ffc0000 [ 49.396115][ T29] audit: type=1326 audit(1749015105.304:771): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4242 comm="syz.3.225" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4abedae969 code=0x7ffc0000 [ 49.419657][ T29] audit: type=1326 audit(1749015105.304:772): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4242 comm="syz.3.225" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f4abedae969 code=0x7ffc0000 [ 49.495809][ T4238] loop4: detected capacity change from 0 to 8192 [ 49.504379][ T4249] usb usb1: usbfs: process 4249 (syz.3.227) did not claim interface 0 before use [ 49.531958][ T3941] loop4: p2 p3 p4 [ 49.535795][ T3941] loop4: p2 start 452985600 is beyond EOD, truncated [ 49.542709][ T3941] loop4: p3 size 33554432 extends beyond EOD, truncated [ 49.550528][ T3941] loop4: p4 start 8388607 is beyond EOD, truncated [ 49.558332][ T4253] FAULT_INJECTION: forcing a failure. [ 49.558332][ T4253] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 49.571491][ T4253] CPU: 0 UID: 0 PID: 4253 Comm: syz.3.228 Not tainted 6.15.0-syzkaller-11796-g5abc7438f1e9 #0 PREEMPT(voluntary) [ 49.571523][ T4253] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 49.571539][ T4253] Call Trace: [ 49.571546][ T4253] [ 49.571596][ T4253] __dump_stack+0x1d/0x30 [ 49.571617][ T4253] dump_stack_lvl+0xe8/0x140 [ 49.571662][ T4253] dump_stack+0x15/0x1b [ 49.571682][ T4253] should_fail_ex+0x265/0x280 [ 49.571726][ T4253] should_fail+0xb/0x20 [ 49.571746][ T4253] should_fail_usercopy+0x1a/0x20 [ 49.571768][ T4253] _copy_from_user+0x1c/0xb0 [ 49.571793][ T4253] proc_submiturb+0x43/0xa0 [ 49.571819][ T4253] usbdev_ioctl+0xcc2/0x1710 [ 49.571982][ T4253] ? __pfx_usbdev_ioctl+0x10/0x10 [ 49.572014][ T4253] __se_sys_ioctl+0xcb/0x140 [ 49.572069][ T4253] __x64_sys_ioctl+0x43/0x50 [ 49.572099][ T4253] x64_sys_call+0x19a8/0x2fb0 [ 49.572268][ T4253] do_syscall_64+0xd2/0x200 [ 49.572306][ T4253] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 49.572367][ T4253] ? clear_bhb_loop+0x40/0x90 [ 49.572473][ T4253] ? clear_bhb_loop+0x40/0x90 [ 49.572502][ T4253] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 49.572530][ T4253] RIP: 0033:0x7f4abedae969 [ 49.572574][ T4253] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 49.572666][ T4253] RSP: 002b:00007f4abd417038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 49.572689][ T4253] RAX: ffffffffffffffda RBX: 00007f4abefd5fa0 RCX: 00007f4abedae969 [ 49.572703][ T4253] RDX: 0000200000000400 RSI: 000000008038550a RDI: 0000000000000005 [ 49.572756][ T4253] RBP: 00007f4abd417090 R08: 0000000000000000 R09: 0000000000000000 [ 49.572767][ T4253] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 49.572781][ T4253] R13: 0000000000000000 R14: 00007f4abefd5fa0 R15: 00007ffe79466bf8 [ 49.572803][ T4253] [ 49.574578][ T4238] loop4: p2 p3 p4 [ 49.769419][ T4238] loop4: p2 start 452985600 is beyond EOD, truncated [ 49.776146][ T4238] loop4: p3 size 33554432 extends beyond EOD, truncated [ 49.784035][ T4238] loop4: p4 start 8388607 is beyond EOD, truncated [ 49.784409][ T4260] netlink: 12 bytes leftover after parsing attributes in process `syz.3.231'. [ 49.859933][ T4258] loop2: detected capacity change from 0 to 8192 [ 49.927924][ T3308] loop2: p2 p3 p4 [ 49.928003][ T3308] loop2: p2 start 452985600 is beyond EOD, truncated [ 49.928024][ T3308] loop2: p3 size 33554432 extends beyond EOD, truncated [ 49.929648][ T3308] loop2: p4 start 8388607 is beyond EOD, truncated [ 50.100907][ T4273] netlink: 28 bytes leftover after parsing attributes in process `syz.4.236'. [ 50.316720][ T4279] netlink: 4 bytes leftover after parsing attributes in process `syz.0.237'. [ 50.379289][ T4258] loop2: p2 p3 p4 [ 50.379392][ T4258] loop2: p2 start 452985600 is beyond EOD, truncated [ 50.379413][ T4258] loop2: p3 size 33554432 extends beyond EOD, truncated [ 50.380189][ T4258] loop2: p4 start 8388607 is beyond EOD, truncated [ 50.490418][ T3941] udevd[3941]: inotify_add_watch(7, /dev/loop4p3, 10) failed: No such file or directory [ 50.504261][ T4292] ip6gretap0: entered allmulticast mode [ 50.601581][ T3941] udevd[3941]: inotify_add_watch(7, /dev/loop2p3, 10) failed: No such file or directory [ 50.898646][ T4329] netlink: 'syz.3.241': attribute type 27 has an invalid length. [ 50.931512][ T4329] ip6gretap0: left allmulticast mode [ 50.937281][ T4329] bridge0: port 2(bridge_slave_1) entered disabled state [ 50.944530][ T4329] bridge0: port 1(bridge_slave_0) entered disabled state [ 51.008029][ T4329] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 51.019922][ T4329] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 51.029108][ T4332] netlink: 4 bytes leftover after parsing attributes in process `syz.3.241'. [ 51.037986][ T4332] netlink: 4 bytes leftover after parsing attributes in process `syz.3.241'. [ 51.054481][ T4332] netlink: 4 bytes leftover after parsing attributes in process `syz.3.241'. [ 51.082024][ T4329] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 51.091125][ T4329] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 51.100072][ T4329] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 51.109011][ T4329] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 51.121367][ T4332] netlink: 4 bytes leftover after parsing attributes in process `syz.3.241'. [ 51.130601][ T4332] netlink: 4 bytes leftover after parsing attributes in process `syz.3.241'. [ 51.158765][ T4332] netlink: 4 bytes leftover after parsing attributes in process `syz.3.241'. [ 51.208406][ T4330] 8021q: adding VLAN 0 to HW filter on device bond0 [ 51.218428][ T4330] 8021q: adding VLAN 0 to HW filter on device team0 [ 51.229351][ T4330] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 51.373982][ T4343] netlink: 'syz.4.244': attribute type 10 has an invalid length. [ 51.402643][ T4343] dummy0: entered promiscuous mode [ 51.531881][ T4355] loop1: detected capacity change from 0 to 8192 [ 51.848012][ T4361] loop3: detected capacity change from 0 to 8192 [ 51.867125][ T3941] loop1: p2 p3 p4 [ 51.876815][ T3941] loop1: p2 start 452985600 is beyond EOD, truncated [ 51.883606][ T3941] loop1: p3 size 33554432 extends beyond EOD, truncated [ 51.995494][ T3941] loop1: p4 start 8388607 is beyond EOD, truncated [ 52.017139][ T4362] loop4: detected capacity change from 0 to 8192 [ 52.324741][ T4361] loop3: p2 p3 p4 [ 52.324849][ T4361] loop3: p2 start 452985600 is beyond EOD, truncated [ 52.324872][ T4361] loop3: p3 size 33554432 extends beyond EOD, truncated [ 52.325391][ T4355] loop1: p2 p3 p4 [ 52.325465][ T4355] loop1: p2 start 452985600 is beyond EOD, truncated [ 52.325481][ T4355] loop1: p3 size 33554432 extends beyond EOD, truncated [ 52.326487][ T4361] loop3: p4 start 8388607 is beyond EOD, truncated [ 52.331266][ T4355] loop1: p4 start 8388607 is beyond EOD, truncated [ 52.340104][ T4362] loop4: p2 p3 p4 [ 52.340267][ T4362] loop4: p2 start 452985600 is beyond EOD, truncated [ 52.340290][ T4362] loop4: p3 size 33554432 extends beyond EOD, truncated [ 52.340673][ T4362] loop4: p4 start 8388607 is beyond EOD, truncated [ 52.501279][ T3308] udevd[3308]: inotify_add_watch(7, /dev/loop4p3, 10) failed: No such file or directory [ 52.616245][ T4379] loop1: detected capacity change from 0 to 512 [ 52.704943][ T4379] EXT4-fs warning (device loop1): ext4_enable_quotas:7168: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 52.706834][ T4386] ip6gretap0: entered allmulticast mode [ 52.744335][ T4379] EXT4-fs (loop1): mount failed [ 52.791939][ T4394] netlink: 'syz.0.259': attribute type 10 has an invalid length. [ 52.810538][ T4394] dummy0: entered promiscuous mode [ 52.822561][ T4396] vhci_hcd: invalid port number 15 [ 52.827949][ T4396] vhci_hcd: USB_PORT_FEAT_LINK_STATE req not supported for USB 2.0 roothub [ 52.903658][ T4408] usb usb1: usbfs: process 4408 (syz.1.260) did not claim interface 0 before use [ 53.338828][ T4395] syz.1.260 (4395) used greatest stack depth: 9688 bytes left [ 53.722904][ T4443] loop1: detected capacity change from 0 to 1024 [ 53.725353][ T4443] ======================================================= [ 53.725353][ T4443] WARNING: The mand mount option has been deprecated and [ 53.725353][ T4443] and is ignored by this kernel. Remove the mand [ 53.725353][ T4443] option from the mount to silence this warning. [ 53.725353][ T4443] ======================================================= [ 53.806492][ T4443] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 53.809504][ T4443] EXT4-fs (loop1): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 53.810170][ T4443] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e840e02c, mo2=0000] [ 53.810203][ T4443] System zones: 0-1, 3-12 [ 53.815888][ T4443] EXT4-fs error (device loop1): ext4_map_blocks:816: inode #3: block 1: comm syz.1.274: lblock 1 mapped to illegal pblock 1 (length 1) [ 53.830534][ T4448] loop4: detected capacity change from 0 to 1024 [ 53.848030][ T4443] EXT4-fs (loop1): Remounting filesystem read-only [ 53.870806][ T4443] EXT4-fs (loop1): 1 orphan inode deleted [ 53.871138][ T4443] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 53.871673][ T4443] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 53.894514][ T4448] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 53.951710][ T29] kauditd_printk_skb: 73 callbacks suppressed [ 53.951725][ T29] audit: type=1326 audit(1749015109.914:843): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4442 comm="syz.1.274" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7fd3d975e969 code=0x7ffc0000 [ 53.951755][ T29] audit: type=1326 audit(1749015109.914:844): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4442 comm="syz.1.274" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd3d975e969 code=0x7ffc0000 [ 53.951852][ T29] audit: type=1326 audit(1749015109.914:845): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4442 comm="syz.1.274" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd3d975e969 code=0x7ffc0000 [ 53.951988][ T29] audit: type=1326 audit(1749015109.914:846): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4442 comm="syz.1.274" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd3d975e969 code=0x7ffc0000 [ 53.983102][ C0] hrtimer: interrupt took 47337 ns [ 54.004944][ T29] audit: type=1326 audit(1749015109.914:847): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4442 comm="syz.1.274" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd3d975e969 code=0x7ffc0000 [ 54.104561][ T29] audit: type=1326 audit(1749015109.924:848): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4442 comm="syz.1.274" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd3d975e969 code=0x7ffc0000 [ 54.104597][ T29] audit: type=1326 audit(1749015109.994:849): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4442 comm="syz.1.274" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd3d975e969 code=0x7ffc0000 [ 54.104755][ T29] audit: type=1326 audit(1749015109.994:850): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4442 comm="syz.1.274" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd3d975e969 code=0x7ffc0000 [ 54.104787][ T29] audit: type=1326 audit(1749015109.994:851): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4442 comm="syz.1.274" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd3d975e969 code=0x7ffc0000 [ 54.104831][ T29] audit: type=1326 audit(1749015109.994:852): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4442 comm="syz.1.274" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd3d975e969 code=0x7ffc0000 [ 54.155791][ T4460] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 54.228551][ T4448] EXT4-fs error (device loop4): ext4_mb_mark_diskspace_used:4113: comm syz.4.276: Allocating blocks 497-513 which overlap fs metadata [ 54.281190][ T4447] EXT4-fs (loop4): pa ffff88810699e690: logic 128, phys. 273, len 15 [ 54.281225][ T4447] EXT4-fs error (device loop4): ext4_mb_release_inode_pa:5364: group 0, free 0, pa_free 1 [ 54.302920][ T4465] ip6gretap0: entered allmulticast mode [ 54.379239][ T3325] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 54.480364][ T4490] syz.3.286 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 54.813686][ T4499] loop3: detected capacity change from 0 to 8192 [ 54.867771][ T3941] loop3: p2 p3 p4 [ 54.871615][ T3941] loop3: p2 start 452985600 is beyond EOD, truncated [ 54.878445][ T3941] loop3: p3 size 33554432 extends beyond EOD, truncated [ 54.887960][ T3941] loop3: p4 start 8388607 is beyond EOD, truncated [ 54.896822][ T4499] loop3: p2 p3 p4 [ 54.900633][ T4499] loop3: p2 start 452985600 is beyond EOD, truncated [ 54.907474][ T4499] loop3: p3 size 33554432 extends beyond EOD, truncated [ 54.918862][ T4499] loop3: p4 start 8388607 is beyond EOD, truncated [ 55.053791][ T4497] loop4: detected capacity change from 0 to 8192 [ 55.087989][ T3308] loop4: p2 p3 p4 [ 55.096900][ T3308] loop4: p2 start 452985600 is beyond EOD, truncated [ 55.103690][ T3308] loop4: p3 size 33554432 extends beyond EOD, truncated [ 55.111391][ T3308] loop4: p4 start 8388607 is beyond EOD, truncated [ 55.120789][ T4497] loop4: p2 p3 p4 [ 55.128548][ T4497] loop4: p2 start 452985600 is beyond EOD, truncated [ 55.135359][ T4497] loop4: p3 size 33554432 extends beyond EOD, truncated [ 55.144047][ T4497] loop4: p4 start 8388607 is beyond EOD, truncated [ 55.250020][ T4510] __nla_validate_parse: 7 callbacks suppressed [ 55.250036][ T4510] netlink: 16402 bytes leftover after parsing attributes in process `syz.1.292'. [ 55.316845][ T4504] netlink: 16402 bytes leftover after parsing attributes in process `syz.1.292'. [ 55.347641][ T4506] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 55.354946][ T4512] netlink: 'syz.2.294': attribute type 12 has an invalid length. [ 55.362799][ T4512] netlink: 'syz.2.294': attribute type 29 has an invalid length. [ 55.370665][ T4512] netlink: 148 bytes leftover after parsing attributes in process `syz.2.294'. [ 55.379793][ T4512] netlink: 'syz.2.294': attribute type 1 has an invalid length. [ 55.387507][ T4512] netlink: 47 bytes leftover after parsing attributes in process `syz.2.294'. [ 55.410231][ T4506] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 55.446116][ T4512] Zero length message leads to an empty skb [ 55.684088][ T4538] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=4538 comm=syz.4.300 [ 55.741614][ T4539] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=4539 comm=syz.4.300 [ 55.826836][ T4531] loop3: detected capacity change from 0 to 8192 [ 55.831865][ T4542] netlink: 'syz.2.304': attribute type 10 has an invalid length. [ 55.831889][ T4542] netlink: 40 bytes leftover after parsing attributes in process `syz.2.304'. [ 55.831915][ T4542] dummy0: entered promiscuous mode [ 55.867812][ T4531] loop3: p2 p3 p4 [ 55.867928][ T4531] loop3: p2 start 452985600 is beyond EOD, truncated [ 55.867949][ T4531] loop3: p3 size 33554432 extends beyond EOD, truncated [ 55.875479][ T4531] loop3: p4 start 8388607 is beyond EOD, truncated [ 56.029564][ T4549] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=4549 comm=syz.0.303 [ 56.083481][ T4551] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=4551 comm=syz.0.303 [ 56.189040][ T4556] netlink: 'syz.3.307': attribute type 27 has an invalid length. [ 56.220461][ T4556] ip6gretap0: left allmulticast mode [ 56.282627][ T4556] 8021q: adding VLAN 0 to HW filter on device bond0 [ 56.283170][ T4557] loop4: detected capacity change from 0 to 8192 [ 56.284057][ T4556] 8021q: adding VLAN 0 to HW filter on device team0 [ 56.363905][ T4557] loop4: p2 p3 p4 [ 56.364026][ T4557] loop4: p2 start 452985600 is beyond EOD, truncated [ 56.364049][ T4557] loop4: p3 size 33554432 extends beyond EOD, truncated [ 56.377681][ T4556] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 56.387395][ T4557] loop4: p4 start 8388607 is beyond EOD, truncated [ 56.388988][ T3009] loop4: p2 p3 p4 [ 56.389039][ T3009] loop4: p2 start 452985600 is beyond EOD, truncated [ 56.389059][ T3009] loop4: p3 size 33554432 extends beyond EOD, truncated [ 56.389493][ T3009] loop4: p4 start 8388607 is beyond EOD, truncated [ 56.425865][ T4548] loop2: detected capacity change from 0 to 8192 [ 56.429274][ T4556] netlink: 4 bytes leftover after parsing attributes in process `syz.3.307'. [ 56.429303][ T4556] netlink: 4 bytes leftover after parsing attributes in process `syz.3.307'. [ 56.429344][ T4556] netlink: 4 bytes leftover after parsing attributes in process `syz.3.307'. [ 56.463977][ T4556] netlink: 4 bytes leftover after parsing attributes in process `syz.3.307'. [ 56.464050][ T4556] netlink: 4 bytes leftover after parsing attributes in process `syz.3.307'. [ 56.878173][ T4548] loop2: p2 p3 p4 [ 56.878320][ T4548] loop2: p2 start 452985600 is beyond EOD, truncated [ 56.878395][ T4548] loop2: p3 size 33554432 extends beyond EOD, truncated [ 56.880833][ T4548] loop2: p4 start 8388607 is beyond EOD, truncated [ 57.263002][ T4599] loop4: detected capacity change from 0 to 1024 [ 57.320766][ T4610] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=4610 comm=syz.2.317 [ 57.384023][ T4618] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=4618 comm=syz.2.317 [ 58.086456][ T4626] loop0: detected capacity change from 0 to 8192 [ 58.149765][ T4626] loop0: p2 p3 p4 [ 58.149913][ T4626] loop0: p2 start 452985600 is beyond EOD, truncated [ 58.150003][ T4626] loop0: p3 size 33554432 extends beyond EOD, truncated [ 58.153213][ T4626] loop0: p4 start 8388607 is beyond EOD, truncated [ 58.299311][ T4648] loop4: detected capacity change from 0 to 764 [ 58.383508][ T4650] netlink: 'syz.1.337': attribute type 10 has an invalid length. [ 58.427006][ T4654] loop4: detected capacity change from 0 to 1024 [ 58.436782][ T4654] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 58.437158][ T4654] EXT4-fs (loop4): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 58.438776][ T4654] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c840e02c, mo2=0000] [ 58.444700][ T4654] EXT4-fs error (device loop4): ext4_map_blocks:780: inode #3: block 2: comm syz.4.338: lblock 2 mapped to illegal pblock 2 (length 1) [ 58.444842][ T4654] EXT4-fs (loop4): Remounting filesystem read-only [ 58.444902][ T4654] EXT4-fs (loop4): 1 orphan inode deleted [ 58.445431][ T4654] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 58.445955][ T4654] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 58.590645][ T4666] ip6gretap0: entered allmulticast mode [ 59.029908][ T29] kauditd_printk_skb: 162 callbacks suppressed [ 59.029925][ T29] audit: type=1326 audit(1749015114.994:1013): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4688 comm="syz.2.348" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f749c89e969 code=0x7ffc0000 [ 59.029977][ T29] audit: type=1326 audit(1749015114.994:1014): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4688 comm="syz.2.348" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f749c89e969 code=0x7ffc0000 [ 59.030119][ T29] audit: type=1326 audit(1749015114.994:1015): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4688 comm="syz.2.348" exe="/root/syz-executor" sig=0 arch=c000003e syscall=272 compat=0 ip=0x7f749c89e969 code=0x7ffc0000 [ 59.038836][ T29] audit: type=1326 audit(1749015114.994:1016): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4688 comm="syz.2.348" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f749c89e969 code=0x7ffc0000 [ 59.038873][ T29] audit: type=1326 audit(1749015114.994:1017): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4688 comm="syz.2.348" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f749c89e969 code=0x7ffc0000 [ 59.038968][ T29] audit: type=1326 audit(1749015114.994:1018): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4688 comm="syz.2.348" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f749c89e969 code=0x7ffc0000 [ 59.039010][ T29] audit: type=1326 audit(1749015114.994:1019): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4688 comm="syz.2.348" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f749c89e969 code=0x7ffc0000 [ 59.039039][ T29] audit: type=1326 audit(1749015114.994:1020): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4688 comm="syz.2.348" exe="/root/syz-executor" sig=0 arch=c000003e syscall=272 compat=0 ip=0x7f749c89e969 code=0x7ffc0000 [ 59.039098][ T29] audit: type=1326 audit(1749015114.994:1021): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4688 comm="syz.2.348" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f749c89e969 code=0x7ffc0000 [ 59.039131][ T29] audit: type=1326 audit(1749015114.994:1022): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4688 comm="syz.2.348" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f749c89e969 code=0x7ffc0000 [ 59.974689][ T4720] loop3: detected capacity change from 0 to 1024 [ 60.003850][ T4720] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 60.031906][ T4720] EXT4-fs (loop3): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 60.062789][ T4720] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e840e02c, mo2=0000] [ 60.082749][ T4720] System zones: 0-1, 3-12 [ 60.094340][ T4720] EXT4-fs error (device loop3): ext4_map_blocks:816: inode #3: block 1: comm syz.3.358: lblock 1 mapped to illegal pblock 1 (length 1) [ 60.112534][ T4720] EXT4-fs (loop3): Remounting filesystem read-only [ 60.126740][ T4720] EXT4-fs (loop3): 1 orphan inode deleted [ 60.132921][ T4720] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 60.146252][ T4720] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 60.218038][ T4731] netlink: 'syz.3.361': attribute type 10 has an invalid length. [ 60.225906][ T4731] dummy0: entered promiscuous mode [ 60.264544][ T4733] loop3: detected capacity change from 0 to 128 [ 60.847987][ T4752] __nla_validate_parse: 14 callbacks suppressed [ 60.848050][ T4752] netlink: 8 bytes leftover after parsing attributes in process `syz.4.369'. [ 60.932194][ T4760] loop0: detected capacity change from 0 to 1024 [ 60.999101][ T4760] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 61.084133][ T4757] loop2: detected capacity change from 0 to 8192 [ 61.090808][ T4760] EXT4-fs (loop0): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 61.111961][ T4760] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e840e02c, mo2=0000] [ 61.127043][ T4760] System zones: 0-1, 3-12 [ 61.132467][ T4760] EXT4-fs error (device loop0): ext4_map_blocks:816: inode #3: block 1: comm syz.0.372: lblock 1 mapped to illegal pblock 1 (length 1) [ 61.236191][ T3941] loop2: p2 p3 p4 [ 61.240590][ T3941] loop2: p2 start 452985600 is beyond EOD, truncated [ 61.247489][ T3941] loop2: p3 size 33554432 extends beyond EOD, truncated [ 61.280400][ T4766] loop3: detected capacity change from 0 to 8192 [ 61.419341][ T4760] EXT4-fs (loop0): Remounting filesystem read-only [ 61.436766][ T4760] EXT4-fs (loop0): 1 orphan inode deleted [ 61.446368][ T4760] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 61.618573][ T4760] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 61.630785][ T3308] loop3: p2 p3 p4 [ 61.634706][ T3308] loop3: p2 start 452985600 is beyond EOD, truncated [ 61.641466][ T3308] loop3: p3 size 33554432 extends beyond EOD, truncated [ 61.646160][ T3941] loop2: p4 start 8388607 is beyond EOD, truncated [ 61.669941][ T3308] loop3: p4 start 8388607 is beyond EOD, truncated [ 61.696473][ T4766] loop3: p2 p3 p4 [ 61.723171][ T4766] loop3: p2 start 452985600 is beyond EOD, truncated [ 61.730028][ T4766] loop3: p3 size 33554432 extends beyond EOD, truncated [ 61.733411][ T4757] loop2: p2 p3 p4 [ 61.812537][ T4766] loop3: p4 start 8388607 is beyond EOD, truncated [ 61.846936][ T4757] loop2: p2 start 452985600 is beyond EOD, truncated [ 61.853689][ T4757] loop2: p3 size 33554432 extends beyond EOD, truncated [ 61.867211][ T4777] FAULT_INJECTION: forcing a failure. [ 61.867211][ T4777] name failslab, interval 1, probability 0, space 0, times 0 [ 61.879913][ T4777] CPU: 1 UID: 0 PID: 4777 Comm: syz.4.376 Not tainted 6.15.0-syzkaller-11796-g5abc7438f1e9 #0 PREEMPT(voluntary) [ 61.880027][ T4777] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 61.880042][ T4777] Call Trace: [ 61.880049][ T4777] [ 61.880058][ T4777] __dump_stack+0x1d/0x30 [ 61.880090][ T4777] dump_stack_lvl+0xe8/0x140 [ 61.880114][ T4777] dump_stack+0x15/0x1b [ 61.880134][ T4777] should_fail_ex+0x265/0x280 [ 61.880157][ T4777] should_failslab+0x8c/0xb0 [ 61.880247][ T4777] kmem_cache_alloc_noprof+0x50/0x310 [ 61.880283][ T4777] ? audit_log_start+0x365/0x6c0 [ 61.880359][ T4777] audit_log_start+0x365/0x6c0 [ 61.880397][ T4777] audit_seccomp+0x48/0x100 [ 61.880430][ T4777] ? __seccomp_filter+0x68c/0x10d0 [ 61.880519][ T4777] __seccomp_filter+0x69d/0x10d0 [ 61.880586][ T4777] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 61.880652][ T4777] ? vfs_write+0x75e/0x8e0 [ 61.880674][ T4777] ? __rcu_read_unlock+0x4f/0x70 [ 61.880768][ T4777] ? __fget_files+0x184/0x1c0 [ 61.880801][ T4777] __secure_computing+0x82/0x150 [ 61.880843][ T4777] syscall_trace_enter+0xcf/0x1e0 [ 61.880876][ T4777] do_syscall_64+0xac/0x200 [ 61.880914][ T4777] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 61.880947][ T4777] ? clear_bhb_loop+0x40/0x90 [ 61.880983][ T4777] ? clear_bhb_loop+0x40/0x90 [ 61.881010][ T4777] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 61.881085][ T4777] RIP: 0033:0x7f518d21e969 [ 61.881104][ T4777] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 61.881207][ T4777] RSP: 002b:00007f518b887038 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 61.881225][ T4777] RAX: ffffffffffffffda RBX: 00007f518d445fa0 RCX: 00007f518d21e969 [ 61.881237][ T4777] RDX: 000000000001fffc RSI: 0000200000000180 RDI: 0000000000000004 [ 61.881249][ T4777] RBP: 00007f518b887090 R08: 0000200000000140 R09: 0000000000000014 [ 61.881265][ T4777] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 61.881349][ T4777] R13: 0000000000000000 R14: 00007f518d445fa0 R15: 00007ffc254bac68 [ 61.881367][ T4777] [ 62.122189][ T4757] loop2: p4 start 8388607 is beyond EOD, truncated [ 62.178997][ T3308] udevd[3308]: inotify_add_watch(7, /dev/loop3p3, 10) failed: No such file or directory [ 62.298786][ T4790] netlink: 14 bytes leftover after parsing attributes in process `syz.0.380'. [ 62.322281][ T3308] udevd[3308]: inotify_add_watch(7, /dev/loop3p3, 10) failed: No such file or directory [ 62.341408][ T4790] hub 9-0:1.0: USB hub found [ 62.356191][ T4790] hub 9-0:1.0: 8 ports detected [ 62.689151][ T4770] loop1: detected capacity change from 0 to 8192 [ 62.730893][ T4770] loop1: p2 p3 p4 [ 62.731114][ T4770] loop1: p2 start 452985600 is beyond EOD, truncated [ 62.731155][ T4770] loop1: p3 size 33554432 extends beyond EOD, truncated [ 62.735594][ T4770] loop1: p4 start 8388607 is beyond EOD, truncated [ 63.252005][ T4812] loop4: detected capacity change from 0 to 1024 [ 63.278429][ T4812] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 63.327496][ T4812] EXT4-fs (loop4): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 63.331051][ T4812] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e840e02c, mo2=0000] [ 63.331153][ T4812] System zones: 0-1, 3-12 [ 63.338503][ T4812] EXT4-fs error (device loop4): ext4_map_blocks:816: inode #3: block 1: comm syz.4.388: lblock 1 mapped to illegal pblock 1 (length 1) [ 63.379811][ T4812] EXT4-fs (loop4): Remounting filesystem read-only [ 63.386439][ T4812] EXT4-fs (loop4): 1 orphan inode deleted [ 63.397627][ T4816] netlink: 28 bytes leftover after parsing attributes in process `syz.2.390'. [ 63.438252][ T4812] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 63.527909][ T3325] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 63.684822][ T4843] netlink: 'syz.3.395': attribute type 10 has an invalid length. [ 63.693105][ T4843] netlink: 40 bytes leftover after parsing attributes in process `syz.3.395'. [ 63.755897][ T4819] loop1: detected capacity change from 0 to 8192 [ 63.804455][ T4819] loop1: p2 p3 p4 [ 63.808510][ T4819] loop1: p2 start 452985600 is beyond EOD, truncated [ 63.815263][ T4819] loop1: p3 size 33554432 extends beyond EOD, truncated [ 63.837533][ T4819] loop1: p4 start 8388607 is beyond EOD, truncated [ 64.077925][ T3941] udevd[3941]: inotify_add_watch(7, /dev/loop1p3, 10) failed: No such file or directory [ 64.532352][ T29] kauditd_printk_skb: 420 callbacks suppressed [ 64.532369][ T29] audit: type=1326 audit(1749015120.494:1435): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4883 comm="syz.0.403" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f30c82ee969 code=0x7ffc0000 [ 64.533116][ T29] audit: type=1326 audit(1749015120.494:1436): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4883 comm="syz.0.403" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f30c82ee969 code=0x7ffc0000 [ 64.533433][ T29] audit: type=1326 audit(1749015120.494:1437): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4883 comm="syz.0.403" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f30c82ee969 code=0x7ffc0000 [ 64.634965][ T29] audit: type=1326 audit(1749015120.524:1438): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4883 comm="syz.0.403" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f30c82ee969 code=0x7ffc0000 [ 64.634997][ T29] audit: type=1326 audit(1749015120.524:1439): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4883 comm="syz.0.403" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f30c82ee969 code=0x7ffc0000 [ 64.635080][ T29] audit: type=1326 audit(1749015120.524:1440): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4883 comm="syz.0.403" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f30c82ee969 code=0x7ffc0000 [ 64.705202][ T29] audit: type=1326 audit(1749015120.524:1441): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4883 comm="syz.0.403" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f30c82ee969 code=0x7ffc0000 [ 64.705252][ T29] audit: type=1326 audit(1749015120.524:1442): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4883 comm="syz.0.403" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f30c82ee969 code=0x7ffc0000 [ 64.752210][ T29] audit: type=1326 audit(1749015120.524:1443): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4883 comm="syz.0.403" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f30c82ee969 code=0x7ffc0000 [ 64.775733][ T29] audit: type=1326 audit(1749015120.524:1444): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4883 comm="syz.0.403" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f30c82ee969 code=0x7ffc0000 [ 64.776812][ T4884] capability: warning: `syz.0.403' uses 32-bit capabilities (legacy support in use) [ 64.833599][ T4892] netlink: 28 bytes leftover after parsing attributes in process `syz.0.405'. [ 64.945700][ T4899] loop3: detected capacity change from 0 to 1024 [ 64.948395][ T4899] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 64.948668][ T4899] EXT4-fs (loop3): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 64.950778][ T4899] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c840e02c, mo2=0000] [ 64.953283][ T4899] EXT4-fs error (device loop3): ext4_map_blocks:780: inode #3: block 2: comm syz.3.408: lblock 2 mapped to illegal pblock 2 (length 1) [ 64.953688][ T4899] EXT4-fs (loop3): Remounting filesystem read-only [ 64.953749][ T4899] EXT4-fs (loop3): 1 orphan inode deleted [ 64.954165][ T4899] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 64.962006][ T4899] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 65.202384][ T4907] netlink: 'syz.0.410': attribute type 27 has an invalid length. [ 65.255748][ T4907] ip6gretap0: left allmulticast mode [ 65.305843][ T4907] dummy0: left promiscuous mode [ 65.334418][ T4913] 8021q: adding VLAN 0 to HW filter on device bond0 [ 65.355364][ T4913] 8021q: adding VLAN 0 to HW filter on device team0 [ 65.368480][ T4907] netlink: 4 bytes leftover after parsing attributes in process `syz.0.410'. [ 65.377547][ T4907] netlink: 4 bytes leftover after parsing attributes in process `syz.0.410'. [ 65.388432][ T4913] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 65.404488][ T4907] netlink: 4 bytes leftover after parsing attributes in process `syz.0.410'. [ 65.406428][ T4919] netlink: 16402 bytes leftover after parsing attributes in process `syz.4.411'. [ 65.439016][ T4915] netlink: 16402 bytes leftover after parsing attributes in process `syz.4.411'. [ 65.542004][ T4938] netlink: 'syz.4.414': attribute type 27 has an invalid length. [ 65.567178][ T4938] ip6gretap0: left allmulticast mode [ 65.575146][ T4938] dummy0: left promiscuous mode [ 65.602159][ T4938] 8021q: adding VLAN 0 to HW filter on device bond0 [ 65.611924][ T4938] 8021q: adding VLAN 0 to HW filter on device team0 [ 65.622812][ T4938] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 65.865144][ T4940] loop1: detected capacity change from 0 to 8192 [ 65.908210][ T4940] loop1: p2 p3 p4 [ 65.912186][ T4940] loop1: p2 start 452985600 is beyond EOD, truncated [ 65.919005][ T4940] loop1: p3 size 33554432 extends beyond EOD, truncated [ 65.926526][ T4940] loop1: p4 start 8388607 is beyond EOD, truncated [ 66.057169][ T4951] __nla_validate_parse: 6 callbacks suppressed [ 66.057184][ T4951] netlink: 28 bytes leftover after parsing attributes in process `syz.1.418'. [ 66.265565][ T4959] loop1: detected capacity change from 0 to 8192 [ 66.330275][ T4959] loop1: p2 p3 p4 [ 66.330393][ T4959] loop1: p2 start 452985600 is beyond EOD, truncated [ 66.330411][ T4959] loop1: p3 size 33554432 extends beyond EOD, truncated [ 66.334467][ T4959] loop1: p4 start 8388607 is beyond EOD, truncated [ 66.469140][ T4963] loop2: detected capacity change from 0 to 8192 [ 66.803164][ T3308] loop2: p2 p3 p4 [ 66.803277][ T3308] loop2: p2 start 452985600 is beyond EOD, truncated [ 66.803293][ T3308] loop2: p3 size 33554432 extends beyond EOD, truncated [ 66.806146][ T3308] loop2: p4 start 8388607 is beyond EOD, truncated [ 66.809013][ T4963] loop2: p2 p3 p4 [ 66.809068][ T4963] loop2: p2 start 452985600 is beyond EOD, truncated [ 66.809084][ T4963] loop2: p3 size 33554432 extends beyond EOD, truncated [ 66.809715][ T4963] loop2: p4 start 8388607 is beyond EOD, truncated [ 66.952089][ T4975] netlink: 16402 bytes leftover after parsing attributes in process `syz.0.425'. [ 66.952832][ T4973] netlink: 16402 bytes leftover after parsing attributes in process `syz.0.425'. [ 67.033613][ T4982] netlink: 'syz.0.428': attribute type 10 has an invalid length. [ 67.033678][ T4982] netlink: 40 bytes leftover after parsing attributes in process `syz.0.428'. [ 67.033701][ T4982] dummy0: entered promiscuous mode [ 67.130981][ T4988] ip6gretap0: entered allmulticast mode [ 67.140133][ T4993] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=4993 comm=syz.2.427 [ 67.182202][ T4995] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=4995 comm=syz.2.427 [ 67.341211][ T4986] loop0: detected capacity change from 0 to 8192 [ 67.386984][ T3941] loop0: p2 p3 p4 [ 67.390911][ T3941] loop0: p2 start 452985600 is beyond EOD, truncated [ 67.397743][ T3941] loop0: p3 size 33554432 extends beyond EOD, truncated [ 67.405322][ T3941] loop0: p4 start 8388607 is beyond EOD, truncated [ 67.412939][ T4986] loop0: p2 p3 p4 [ 67.416978][ T4986] loop0: p2 start 452985600 is beyond EOD, truncated [ 67.423790][ T4986] loop0: p3 size 33554432 extends beyond EOD, truncated [ 67.431375][ T4986] loop0: p4 start 8388607 is beyond EOD, truncated [ 67.850708][ T5015] loop0: detected capacity change from 0 to 8192 [ 67.893917][ T5015] loop0: p2 p3 p4 [ 67.894011][ T5015] loop0: p2 start 452985600 is beyond EOD, truncated [ 67.894031][ T5015] loop0: p3 size 33554432 extends beyond EOD, truncated [ 67.899652][ T5015] loop0: p4 start 8388607 is beyond EOD, truncated [ 68.723016][ T5046] netlink: 'syz.2.441': attribute type 10 has an invalid length. [ 68.723036][ T5046] netlink: 40 bytes leftover after parsing attributes in process `syz.2.441'. [ 69.539632][ T29] kauditd_printk_skb: 350 callbacks suppressed [ 69.539649][ T29] audit: type=1326 audit(1749015125.504:1793): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5055 comm="syz.3.445" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f4abeda5927 code=0x7ffc0000 [ 69.591332][ T29] audit: type=1326 audit(1749015125.534:1794): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5055 comm="syz.3.445" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f4abed4ab39 code=0x7ffc0000 [ 69.614754][ T29] audit: type=1326 audit(1749015125.534:1795): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5055 comm="syz.3.445" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f4abeda5927 code=0x7ffc0000 [ 69.638115][ T29] audit: type=1326 audit(1749015125.534:1796): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5055 comm="syz.3.445" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f4abed4ab39 code=0x7ffc0000 [ 69.661628][ T29] audit: type=1326 audit(1749015125.534:1797): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5055 comm="syz.3.445" exe="/root/syz-executor" sig=0 arch=c000003e syscall=19 compat=0 ip=0x7f4abedae969 code=0x7ffc0000 [ 69.684958][ T29] audit: type=1326 audit(1749015125.544:1798): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5055 comm="syz.3.445" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f4abeda5927 code=0x7ffc0000 [ 69.708274][ T29] audit: type=1326 audit(1749015125.544:1799): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5055 comm="syz.3.445" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f4abed4ab39 code=0x7ffc0000 [ 69.731867][ T29] audit: type=1326 audit(1749015125.544:1800): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5055 comm="syz.3.445" exe="/root/syz-executor" sig=0 arch=c000003e syscall=19 compat=0 ip=0x7f4abedae969 code=0x7ffc0000 [ 69.755158][ T29] audit: type=1326 audit(1749015125.554:1801): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5055 comm="syz.3.445" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f4abeda5927 code=0x7ffc0000 [ 69.778440][ T29] audit: type=1326 audit(1749015125.554:1802): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5055 comm="syz.3.445" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f4abed4ab39 code=0x7ffc0000 [ 70.225539][ T5092] loop3: detected capacity change from 0 to 8192 [ 70.770428][ T3941] loop3: p2 p3 p4 [ 70.770542][ T3941] loop3: p2 start 452985600 is beyond EOD, truncated [ 70.770559][ T3941] loop3: p3 size 33554432 extends beyond EOD, truncated [ 70.788323][ T3941] loop3: p4 start 8388607 is beyond EOD, truncated [ 70.805537][ T5092] loop3: p2 p3 p4 [ 70.805617][ T5092] loop3: p2 start 452985600 is beyond EOD, truncated [ 70.805635][ T5092] loop3: p3 size 33554432 extends beyond EOD, truncated [ 70.806282][ T5092] loop3: p4 start 8388607 is beyond EOD, truncated [ 70.961038][ T5112] loop2: detected capacity change from 0 to 1024 [ 70.973820][ T5110] netlink: 'syz.4.459': attribute type 27 has an invalid length. [ 70.988433][ T5112] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 71.016598][ T3941] udevd[3941]: inotify_add_watch(7, /dev/loop3p3, 10) failed: No such file or directory [ 71.030277][ T5112] EXT4-fs (loop2): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 71.049200][ T5110] ip6gretap0: left allmulticast mode [ 71.069046][ T5112] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e840e02c, mo2=0000] [ 71.077576][ T5112] System zones: 0-1, 3-12 [ 71.093487][ T5113] 8021q: adding VLAN 0 to HW filter on device bond0 [ 71.109660][ T5112] EXT4-fs error (device loop2): ext4_map_blocks:816: inode #3: block 1: comm syz.2.461: lblock 1 mapped to illegal pblock 1 (length 1) [ 71.110182][ T5113] 8021q: adding VLAN 0 to HW filter on device team0 [ 71.133501][ T5110] netlink: 4 bytes leftover after parsing attributes in process `syz.4.459'. [ 71.142518][ T5110] netlink: 4 bytes leftover after parsing attributes in process `syz.4.459'. [ 71.155621][ T5113] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 71.166269][ T5110] netlink: 4 bytes leftover after parsing attributes in process `syz.4.459'. [ 71.188408][ T5112] EXT4-fs (loop2): Remounting filesystem read-only [ 71.195107][ T5112] EXT4-fs (loop2): 1 orphan inode deleted [ 71.195931][ T5110] netlink: 4 bytes leftover after parsing attributes in process `syz.4.459'. [ 71.203734][ T5112] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 71.210014][ T5110] netlink: 4 bytes leftover after parsing attributes in process `syz.4.459'. [ 71.214749][ T5110] netlink: 4 bytes leftover after parsing attributes in process `syz.4.459'. [ 71.258486][ T3327] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 71.265466][ T5110] netlink: 4 bytes leftover after parsing attributes in process `syz.4.459'. [ 71.276514][ T5110] netlink: 4 bytes leftover after parsing attributes in process `syz.4.459'. [ 71.285498][ T5110] netlink: 4 bytes leftover after parsing attributes in process `syz.4.459'. [ 71.339709][ T5132] netlink: 8 bytes leftover after parsing attributes in process `syz.4.466'. [ 71.436503][ T5144] netlink: 'syz.2.480': attribute type 10 has an invalid length. [ 71.602082][ T5150] netlink: 'syz.0.472': attribute type 10 has an invalid length. [ 71.602208][ T5147] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=5147 comm=syz.4.470 [ 71.661142][ T5143] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=5143 comm=syz.4.470 [ 71.925360][ T5163] netlink: 'syz.0.476': attribute type 27 has an invalid length. [ 71.947856][ T5163] dummy0: left promiscuous mode [ 71.975841][ T5163] 8021q: adding VLAN 0 to HW filter on device bond0 [ 71.984237][ T5163] 8021q: adding VLAN 0 to HW filter on device team0 [ 71.994397][ T5163] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 72.067123][ T5176] loop3: detected capacity change from 0 to 1024 [ 72.093001][ T5176] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 72.111460][ T5176] EXT4-fs (loop3): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 72.126086][ T5176] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e840e02c, mo2=0000] [ 72.136424][ T5176] System zones: 0-1, 3-12 [ 72.149258][ T5176] EXT4-fs error (device loop3): ext4_map_blocks:816: inode #3: block 1: comm syz.3.481: lblock 1 mapped to illegal pblock 1 (length 1) [ 72.184753][ T5176] EXT4-fs (loop3): Remounting filesystem read-only [ 72.191812][ T5176] EXT4-fs (loop3): 1 orphan inode deleted [ 72.201923][ T5190] netlink: 'syz.0.485': attribute type 10 has an invalid length. [ 72.202274][ T5176] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 72.209884][ T5190] dummy0: entered promiscuous mode [ 72.253731][ T3318] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 72.430591][ T5216] netlink: 'syz.1.494': attribute type 27 has an invalid length. [ 72.583460][ T5216] ip6gretap0: left allmulticast mode [ 72.594042][ T5216] bridge0: port 2(bridge_slave_1) entered disabled state [ 72.601430][ T5216] bridge0: port 1(bridge_slave_0) entered disabled state [ 72.629447][ T5216] dummy0: left promiscuous mode [ 72.673483][ T5216] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 72.688567][ T5216] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 72.735308][ T5216] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 72.744457][ T5216] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 72.753491][ T5216] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 72.762799][ T5216] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 72.809656][ T5224] 8021q: adding VLAN 0 to HW filter on device bond0 [ 72.818963][ T5224] 8021q: adding VLAN 0 to HW filter on device team0 [ 72.829136][ T5224] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 72.913706][ T5243] loop2: detected capacity change from 0 to 1024 [ 72.924420][ T5243] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 72.948550][ T5243] EXT4-fs (loop2): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 72.962364][ T5243] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e840e02c, mo2=0000] [ 72.971478][ T5243] System zones: 0-1, 3-12 [ 72.978769][ T5243] EXT4-fs error (device loop2): ext4_map_blocks:816: inode #3: block 1: comm syz.2.498: lblock 1 mapped to illegal pblock 1 (length 1) [ 72.995664][ T5243] EXT4-fs (loop2): Remounting filesystem read-only [ 73.002856][ T5243] EXT4-fs (loop2): 1 orphan inode deleted [ 73.010880][ T5243] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 73.065803][ T3327] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 73.133403][ T5256] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=5256 comm=syz.4.501 [ 73.150032][ T5256] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=5256 comm=syz.4.501 [ 73.289495][ T5260] netlink: 'syz.0.504': attribute type 10 has an invalid length. [ 73.689135][ T5296] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=5296 comm=syz.0.518 [ 73.767219][ T5296] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=5296 comm=syz.0.518 [ 74.288182][ T5321] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=5321 comm=syz.0.526 [ 74.346622][ T5322] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=5322 comm=syz.0.526 [ 74.562190][ T29] kauditd_printk_skb: 1054 callbacks suppressed [ 74.562205][ T29] audit: type=1326 audit(1749015130.524:2851): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5336 comm="syz.4.534" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f518d21e969 code=0x7ffc0000 [ 74.599307][ T5340] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=5340 comm=syz.0.533 [ 74.633024][ T5340] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=5340 comm=syz.0.533 [ 74.645837][ T29] audit: type=1326 audit(1749015130.554:2852): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5336 comm="syz.4.534" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f518d21e969 code=0x7ffc0000 [ 74.650043][ T5342] netlink: 'syz.3.535': attribute type 27 has an invalid length. [ 74.669301][ T29] audit: type=1326 audit(1749015130.564:2853): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5336 comm="syz.4.534" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f518d21e969 code=0x7ffc0000 [ 74.669339][ T29] audit: type=1326 audit(1749015130.564:2854): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5336 comm="syz.4.534" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f518d21e969 code=0x7ffc0000 [ 74.723883][ T29] audit: type=1326 audit(1749015130.564:2855): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5336 comm="syz.4.534" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f518d21e969 code=0x7ffc0000 [ 74.747388][ T29] audit: type=1326 audit(1749015130.564:2856): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5336 comm="syz.4.534" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f518d21e969 code=0x7ffc0000 [ 74.770816][ T29] audit: type=1326 audit(1749015130.564:2857): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5336 comm="syz.4.534" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f518d21e969 code=0x7ffc0000 [ 74.794233][ T29] audit: type=1326 audit(1749015130.564:2858): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5336 comm="syz.4.534" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f518d21e969 code=0x7ffc0000 [ 74.817610][ T29] audit: type=1326 audit(1749015130.564:2859): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5336 comm="syz.4.534" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f518d21e969 code=0x7ffc0000 [ 74.841829][ T29] audit: type=1326 audit(1749015130.644:2860): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5336 comm="syz.4.534" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f518d21e969 code=0x7ffc0000 [ 74.872579][ T5342] ip6gretap0: left allmulticast mode [ 74.946242][ T5342] dummy0: left promiscuous mode [ 75.037233][ T5343] 8021q: adding VLAN 0 to HW filter on device bond0 [ 75.060191][ T5343] 8021q: adding VLAN 0 to HW filter on device team0 [ 75.071519][ T5343] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 75.261071][ T5361] loop1: detected capacity change from 0 to 8192 [ 75.718818][ T3941] loop1: p2 p3 p4 [ 75.723213][ T3941] loop1: p2 start 452985600 is beyond EOD, truncated [ 75.729980][ T3941] loop1: p3 size 33554432 extends beyond EOD, truncated [ 75.762693][ T3941] loop1: p4 start 8388607 is beyond EOD, truncated [ 75.846228][ T5361] loop1: p2 p3 p4 [ 75.870769][ T5361] loop1: p2 start 452985600 is beyond EOD, truncated [ 75.877674][ T5361] loop1: p3 size 33554432 extends beyond EOD, truncated [ 75.980942][ T5361] loop1: p4 start 8388607 is beyond EOD, truncated [ 76.042282][ T5379] netlink: 'syz.2.544': attribute type 27 has an invalid length. [ 76.084177][ T5379] ip6gretap0: left allmulticast mode [ 76.116426][ T5379] dummy0: left promiscuous mode [ 76.194607][ T5374] loop3: detected capacity change from 0 to 8192 [ 76.215615][ T5379] __nla_validate_parse: 40 callbacks suppressed [ 76.215663][ T5379] netlink: 4 bytes leftover after parsing attributes in process `syz.2.544'. [ 76.230870][ T5379] netlink: 4 bytes leftover after parsing attributes in process `syz.2.544'. [ 76.285281][ T3308] loop3: p2 p3 p4 [ 76.291608][ T3308] loop3: p2 start 452985600 is beyond EOD, truncated [ 76.298483][ T3308] loop3: p3 size 33554432 extends beyond EOD, truncated [ 76.305623][ T5379] netlink: 4 bytes leftover after parsing attributes in process `syz.2.544'. [ 76.330189][ T5380] 8021q: adding VLAN 0 to HW filter on device bond0 [ 76.349201][ T3308] loop3: p4 start 8388607 is beyond EOD, truncated [ 76.384554][ T5374] loop3: p2 p3 p4 [ 76.403306][ T5374] loop3: p2 start 452985600 is beyond EOD, truncated [ 76.410339][ T5374] loop3: p3 size 33554432 extends beyond EOD, truncated [ 76.421887][ T5379] netlink: 4 bytes leftover after parsing attributes in process `syz.2.544'. [ 76.430808][ T5379] netlink: 4 bytes leftover after parsing attributes in process `syz.2.544'. [ 76.434581][ T5380] 8021q: adding VLAN 0 to HW filter on device team0 [ 76.475538][ T5379] netlink: 4 bytes leftover after parsing attributes in process `syz.2.544'. [ 76.478609][ T5374] loop3: p4 start 8388607 is beyond EOD, truncated [ 76.512955][ T5391] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=5391 comm=syz.4.547 [ 76.540082][ T5380] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 76.627076][ T5393] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=5393 comm=syz.4.547 [ 76.662132][ T5379] netlink: 4 bytes leftover after parsing attributes in process `syz.2.544'. [ 76.671009][ T5379] netlink: 4 bytes leftover after parsing attributes in process `syz.2.544'. [ 76.757911][ T5379] netlink: 4 bytes leftover after parsing attributes in process `syz.2.544'. [ 77.135619][ T5410] netlink: 16402 bytes leftover after parsing attributes in process `syz.3.550'. [ 77.258450][ T5401] loop2: detected capacity change from 0 to 8192 [ 77.339750][ T5401] loop2: p2 p3 p4 [ 77.346341][ T5401] loop2: p2 start 452985600 is beyond EOD, truncated [ 77.353144][ T5401] loop2: p3 size 33554432 extends beyond EOD, truncated [ 77.363650][ T5401] loop2: p4 start 8388607 is beyond EOD, truncated [ 77.815502][ T3941] udevd[3941]: inotify_add_watch(7, /dev/loop2p3, 10) failed: No such file or directory [ 77.922484][ T5424] loop3: detected capacity change from 0 to 8192 [ 78.233130][ T3308] loop3: p2 p3 p4 [ 78.246046][ T3308] loop3: p2 start 452985600 is beyond EOD, truncated [ 78.252836][ T3308] loop3: p3 size 33554432 extends beyond EOD, truncated [ 78.283977][ T3308] loop3: p4 start 8388607 is beyond EOD, truncated [ 78.388928][ T5438] loop4: detected capacity change from 0 to 8192 [ 78.422833][ T5424] loop3: p2 p3 p4 [ 78.443058][ T5424] loop3: p2 start 452985600 is beyond EOD, truncated [ 78.449922][ T5424] loop3: p3 size 33554432 extends beyond EOD, truncated [ 78.481362][ T3941] loop4: p2 p3 p4 [ 78.489029][ T3941] loop4: p2 start 452985600 is beyond EOD, truncated [ 78.495946][ T3941] loop4: p3 size 33554432 extends beyond EOD, truncated [ 78.529777][ T3941] loop4: p4 start 8388607 is beyond EOD, truncated [ 78.554917][ T5438] loop4: p2 p3 p4 [ 78.589524][ T5438] loop4: p2 start 452985600 is beyond EOD, truncated [ 78.596274][ T5438] loop4: p3 size 33554432 extends beyond EOD, truncated [ 78.613561][ T5424] loop3: p4 start 8388607 is beyond EOD, truncated [ 78.656372][ T5438] loop4: p4 start 8388607 is beyond EOD, truncated [ 78.949110][ T5445] netlink: 'syz.2.565': attribute type 27 has an invalid length. [ 79.391581][ T5461] loop0: detected capacity change from 0 to 8192 [ 79.426712][ T5469] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 79.438529][ T5469] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 79.468036][ T3941] loop0: p2 p3 p4 [ 79.472517][ T3941] loop0: p2 start 452985600 is beyond EOD, truncated [ 79.479346][ T3941] loop0: p3 size 33554432 extends beyond EOD, truncated [ 79.491366][ T5469] loop4: detected capacity change from 0 to 512 [ 79.499041][ T5459] loop1: detected capacity change from 0 to 8192 [ 79.528627][ T3941] loop0: p4 start 8388607 is beyond EOD, truncated [ 79.919513][ T5461] loop0: p2 p3 p4 [ 79.923503][ T5459] loop1: p2 p3 p4 [ 79.928845][ T5469] __quota_error: 14 callbacks suppressed [ 79.928862][ T5469] Quota error (device loop4): v2_read_file_info: Free block number 1 out of range (1, 6). [ 79.945223][ T5461] loop0: p2 start 452985600 is beyond EOD, truncated [ 79.952111][ T5461] loop0: p3 size 33554432 extends beyond EOD, truncated [ 79.958227][ T5469] EXT4-fs warning (device loop4): ext4_enable_quotas:7168: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 79.966688][ T5459] loop1: p2 start 452985600 is beyond EOD, truncated [ 79.980569][ T5459] loop1: p3 size 33554432 extends beyond EOD, truncated [ 79.985106][ T5469] EXT4-fs (loop4): mount failed [ 79.989049][ T5459] loop1: p4 start 8388607 is beyond EOD, truncated [ 80.002475][ T5461] loop0: p4 start 8388607 is beyond EOD, truncated [ 80.075957][ T3941] udevd[3941]: inotify_add_watch(7, /dev/loop0p3, 10) failed: No such file or directory [ 80.108561][ T3941] udevd[3941]: inotify_add_watch(7, /dev/loop0p3, 10) failed: No such file or directory [ 80.156722][ T5479] ip6gretap0: entered allmulticast mode [ 80.234001][ T5489] selinux_netlink_send: 4 callbacks suppressed [ 80.234021][ T5489] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=5489 comm=syz.0.574 [ 80.309298][ T5494] netlink: 'syz.1.575': attribute type 4 has an invalid length. [ 80.311056][ T5484] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=5484 comm=syz.0.574 [ 80.349384][ T5494] netlink: 'syz.1.575': attribute type 4 has an invalid length. [ 80.434362][ T5498] netlink: 'syz.1.577': attribute type 10 has an invalid length. [ 80.442659][ T5498] dummy0: entered promiscuous mode [ 80.458117][ T5499] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=5499 comm=syz.0.576 [ 80.507490][ T5499] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=5499 comm=syz.0.576 [ 80.639163][ T5511] netlink: 'syz.3.591': attribute type 10 has an invalid length. [ 80.650570][ T5511] dummy0: entered promiscuous mode [ 80.799098][ T5528] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=5528 comm=syz.1.586 [ 80.836248][ T5532] netlink: 'syz.0.588': attribute type 4 has an invalid length. [ 80.846048][ T5532] netlink: 'syz.0.588': attribute type 4 has an invalid length. [ 80.932943][ T5523] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=5523 comm=syz.1.586 [ 81.142449][ T5530] loop3: detected capacity change from 0 to 8192 [ 81.197607][ T3941] loop3: p2 p3 p4 [ 81.201828][ T3941] loop3: p2 start 452985600 is beyond EOD, truncated [ 81.208662][ T3941] loop3: p3 size 33554432 extends beyond EOD, truncated [ 81.307362][ T3941] loop3: p4 start 8388607 is beyond EOD, truncated [ 81.332900][ T5530] loop3: p2 p3 p4 [ 81.336848][ T5530] loop3: p2 start 452985600 is beyond EOD, truncated [ 81.343746][ T5530] loop3: p3 size 33554432 extends beyond EOD, truncated [ 81.353526][ T5530] loop3: p4 start 8388607 is beyond EOD, truncated [ 81.501842][ T5553] netlink: 'syz.3.595': attribute type 10 has an invalid length. [ 81.509750][ T5553] __nla_validate_parse: 18 callbacks suppressed [ 81.509763][ T5553] netlink: 40 bytes leftover after parsing attributes in process `syz.3.595'. [ 81.577101][ T3941] udevd[3941]: inotify_add_watch(7, /dev/loop3p3, 10) failed: No such file or directory [ 81.641294][ T3941] udevd[3941]: inotify_add_watch(7, /dev/loop3p3, 10) failed: No such file or directory [ 81.662723][ T3941] udevd[3941]: inotify_add_watch(7, /dev/loop3p3, 10) failed: No such file or directory [ 81.744871][ T29] audit: type=1326 audit(1749015137.704:2875): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5558 comm="syz.3.598" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4abedae969 code=0x7ffc0000 [ 81.744909][ T29] audit: type=1326 audit(1749015137.704:2876): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5558 comm="syz.3.598" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4abedae969 code=0x7ffc0000 [ 81.744960][ T29] audit: type=1326 audit(1749015137.704:2877): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5558 comm="syz.3.598" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f4abedae969 code=0x7ffc0000 [ 81.744993][ T29] audit: type=1326 audit(1749015137.704:2878): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5558 comm="syz.3.598" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4abedae969 code=0x7ffc0000 [ 81.745025][ T29] audit: type=1326 audit(1749015137.704:2879): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5558 comm="syz.3.598" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f4abedae969 code=0x7ffc0000 [ 81.745159][ T29] audit: type=1326 audit(1749015137.704:2880): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5558 comm="syz.3.598" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4abedae969 code=0x7ffc0000 [ 81.745189][ T29] audit: type=1326 audit(1749015137.704:2881): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5558 comm="syz.3.598" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4abedae969 code=0x7ffc0000 [ 81.747858][ T29] audit: type=1326 audit(1749015137.714:2882): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5558 comm="syz.3.598" exe="/root/syz-executor" sig=0 arch=c000003e syscall=251 compat=0 ip=0x7f4abedae969 code=0x7ffc0000 [ 81.747897][ T29] audit: type=1326 audit(1749015137.714:2883): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5558 comm="syz.3.598" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4abedae969 code=0x7ffc0000 [ 81.891634][ T5566] vhci_hcd: invalid port number 15 [ 81.891649][ T5566] vhci_hcd: USB_PORT_FEAT_LINK_STATE req not supported for USB 2.0 roothub [ 82.065048][ T5568] netlink: 'syz.2.601': attribute type 4 has an invalid length. [ 82.126107][ T5570] netlink: 'syz.2.601': attribute type 4 has an invalid length. [ 82.188652][ T5573] usb usb1: usbfs: process 5573 (syz.3.600) did not claim interface 0 before use [ 82.568320][ T5590] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=5590 comm=syz.1.606 [ 82.581963][ T5590] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=5590 comm=syz.1.606 [ 82.703640][ T5593] loop4: detected capacity change from 0 to 8192 [ 82.738095][ T3941] loop4: p2 p3 p4 [ 82.741926][ T3941] loop4: p2 start 452985600 is beyond EOD, truncated [ 82.743477][ T5600] netlink: 4 bytes leftover after parsing attributes in process `syz.2.610'. [ 82.748714][ T3941] loop4: p3 size 33554432 extends beyond EOD, truncated [ 82.767581][ T3941] loop4: p4 start 8388607 is beyond EOD, truncated [ 82.784829][ T5593] loop4: p2 p3 p4 [ 82.788879][ T5593] loop4: p2 start 452985600 is beyond EOD, truncated [ 82.795757][ T5593] loop4: p3 size 33554432 extends beyond EOD, truncated [ 82.837954][ T5593] loop4: p4 start 8388607 is beyond EOD, truncated [ 83.331009][ T5607] netlink: 'syz.0.612': attribute type 10 has an invalid length. [ 83.338883][ T5607] netlink: 40 bytes leftover after parsing attributes in process `syz.0.612'. [ 84.233978][ T5644] sd 0:0:1:0: device reset [ 84.542904][ T5653] netlink: 40 bytes leftover after parsing attributes in process `syz.2.626'. [ 84.563178][ T5653] dummy0: entered promiscuous mode [ 85.669921][ T5673] netlink: 16402 bytes leftover after parsing attributes in process `syz.1.629'. [ 85.691643][ T5668] netlink: 16402 bytes leftover after parsing attributes in process `syz.1.629'. [ 86.147132][ T5682] loop3: detected capacity change from 0 to 8192 [ 86.228033][ T5682] loop3: p2 p3 p4 [ 86.228140][ T5682] loop3: p2 start 452985600 is beyond EOD, truncated [ 86.228232][ T5682] loop3: p3 size 33554432 extends beyond EOD, truncated [ 86.229116][ T5682] loop3: p4 start 8388607 is beyond EOD, truncated [ 86.243650][ T5689] validate_nla: 2 callbacks suppressed [ 86.243669][ T5689] netlink: 'syz.2.634': attribute type 10 has an invalid length. [ 86.243744][ T5689] netlink: 40 bytes leftover after parsing attributes in process `syz.2.634'. [ 86.273466][ T29] kauditd_printk_skb: 16 callbacks suppressed [ 86.273480][ T29] audit: type=1326 audit(1749015142.234:2900): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5684 comm="syz.1.633" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd3d975e969 code=0x7ffc0000 [ 86.274253][ T29] audit: type=1326 audit(1749015142.234:2901): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5684 comm="syz.1.633" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd3d975e969 code=0x7ffc0000 [ 86.274300][ T29] audit: type=1326 audit(1749015142.234:2902): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5684 comm="syz.1.633" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd3d975e969 code=0x7ffc0000 [ 86.274333][ T29] audit: type=1326 audit(1749015142.234:2903): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5684 comm="syz.1.633" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd3d975e969 code=0x7ffc0000 [ 86.275121][ T29] audit: type=1326 audit(1749015142.234:2904): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5684 comm="syz.1.633" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd3d975e969 code=0x7ffc0000 [ 86.275226][ T29] audit: type=1326 audit(1749015142.234:2905): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5684 comm="syz.1.633" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd3d975e969 code=0x7ffc0000 [ 86.413000][ T29] audit: type=1326 audit(1749015142.364:2906): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5692 comm="syz.2.636" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f749c89e969 code=0x7ffc0000 [ 86.413038][ T29] audit: type=1326 audit(1749015142.364:2907): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5692 comm="syz.2.636" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f749c89e969 code=0x7ffc0000 [ 86.413064][ T29] audit: type=1326 audit(1749015142.364:2908): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5692 comm="syz.2.636" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f749c89e969 code=0x7ffc0000 [ 86.413092][ T29] audit: type=1326 audit(1749015142.364:2909): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5692 comm="syz.2.636" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f749c89e969 code=0x7ffc0000 [ 86.434509][ T5697] netlink: 'syz.2.639': attribute type 4 has an invalid length. [ 86.513201][ T5703] netlink: 'syz.0.640': attribute type 4 has an invalid length. [ 86.696627][ T5709] ip6gretap0: entered allmulticast mode [ 87.131832][ T5727] netlink: 'syz.4.643': attribute type 4 has an invalid length. [ 87.228610][ T5727] netlink: 'syz.4.643': attribute type 4 has an invalid length. [ 87.490003][ T5708] loop2: detected capacity change from 0 to 8192 [ 88.054657][ T5737] netlink: 'syz.3.646': attribute type 10 has an invalid length. [ 88.062537][ T5737] netlink: 40 bytes leftover after parsing attributes in process `syz.3.646'. [ 88.282136][ T5752] ip6gretap0: entered allmulticast mode [ 88.349476][ T5758] dummy0: left promiscuous mode [ 88.367029][ T5758] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 88.457855][ T5757] netlink: 4 bytes leftover after parsing attributes in process `syz.0.653'. [ 88.467150][ T5757] netlink: 4 bytes leftover after parsing attributes in process `syz.0.653'. [ 88.486439][ T5757] netlink: 4 bytes leftover after parsing attributes in process `syz.0.653'. [ 88.539469][ T5768] netlink: 16402 bytes leftover after parsing attributes in process `syz.4.654'. [ 88.660307][ T5765] netlink: 16402 bytes leftover after parsing attributes in process `syz.4.654'. [ 88.692417][ T5757] netlink: 4 bytes leftover after parsing attributes in process `syz.0.653'. [ 88.701385][ T5757] netlink: 4 bytes leftover after parsing attributes in process `syz.0.653'. [ 88.762704][ T5757] netlink: 4 bytes leftover after parsing attributes in process `syz.0.653'. [ 88.841653][ T5749] loop2: detected capacity change from 0 to 8192 [ 88.878016][ T5757] netlink: 4 bytes leftover after parsing attributes in process `syz.0.653'. [ 88.894532][ T5749] loop2: p2 p3 p4 [ 88.899436][ T5749] loop2: p2 start 452985600 is beyond EOD, truncated [ 88.906231][ T5749] loop2: p3 size 33554432 extends beyond EOD, truncated [ 88.944046][ T5749] loop2: p4 start 8388607 is beyond EOD, truncated [ 89.092370][ T5786] netlink: 'syz.0.658': attribute type 27 has an invalid length. [ 89.205039][ T5801] netlink: 'syz.2.665': attribute type 4 has an invalid length. [ 89.230970][ T5795] 8021q: adding VLAN 0 to HW filter on device bond0 [ 89.258109][ T5795] 8021q: adding VLAN 0 to HW filter on device team0 [ 89.281765][ T5795] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 89.304377][ T5811] netlink: 'syz.2.665': attribute type 4 has an invalid length. [ 90.011205][ T5836] loop0: detected capacity change from 0 to 8192 [ 90.068754][ T5852] netlink: 'syz.4.678': attribute type 10 has an invalid length. [ 90.077114][ T3941] loop0: p2 p3 p4 [ 90.081102][ T3941] loop0: p2 start 452985600 is beyond EOD, truncated [ 90.087884][ T3941] loop0: p3 size 33554432 extends beyond EOD, truncated [ 90.097102][ T3941] loop0: p4 start 8388607 is beyond EOD, truncated [ 90.105459][ T5852] dummy0: entered promiscuous mode [ 90.111286][ T5836] loop0: p2 p3 p4 [ 90.118172][ T5836] loop0: p2 start 452985600 is beyond EOD, truncated [ 90.124932][ T5836] loop0: p3 size 33554432 extends beyond EOD, truncated [ 90.137227][ T5836] loop0: p4 start 8388607 is beyond EOD, truncated [ 90.483163][ T5861] 8021q: adding VLAN 0 to HW filter on device bond0 [ 90.539335][ T5861] 8021q: adding VLAN 0 to HW filter on device team0 [ 90.577466][ T5861] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 90.874569][ T5884] loop1: detected capacity change from 0 to 8192 [ 90.908247][ T5884] loop1: p2 p3 p4 [ 90.915834][ T5884] loop1: p2 start 452985600 is beyond EOD, truncated [ 90.922622][ T5884] loop1: p3 size 33554432 extends beyond EOD, truncated [ 91.165938][ T5858] loop2: detected capacity change from 0 to 8192 [ 91.325643][ T5884] loop1: p4 start 8388607 is beyond EOD, truncated [ 92.130560][ T5910] sd 0:0:1:0: device reset [ 92.284189][ T5920] validate_nla: 1 callbacks suppressed [ 92.284205][ T5920] netlink: 'syz.1.698': attribute type 27 has an invalid length. [ 92.310235][ T5924] dummy0: left promiscuous mode [ 92.316042][ T5924] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 92.479727][ T5920] ip6gretap0: left allmulticast mode [ 92.598498][ T5920] dummy0: left promiscuous mode [ 92.659943][ T5925] 8021q: adding VLAN 0 to HW filter on device bond0 [ 92.704718][ T5925] 8021q: adding VLAN 0 to HW filter on device team0 [ 92.757355][ T5925] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 93.166346][ T29] kauditd_printk_skb: 258 callbacks suppressed [ 93.166440][ T29] audit: type=1326 audit(1749015149.124:3168): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5950 comm="syz.4.704" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f518d21e969 code=0x7ffc0000 [ 93.246054][ T29] audit: type=1326 audit(1749015149.164:3169): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5950 comm="syz.4.704" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f518d21e969 code=0x7ffc0000 [ 93.269525][ T29] audit: type=1326 audit(1749015149.164:3170): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5950 comm="syz.4.704" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f518d21e969 code=0x7ffc0000 [ 93.292997][ T29] audit: type=1326 audit(1749015149.164:3171): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5950 comm="syz.4.704" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f518d21e969 code=0x7ffc0000 [ 93.316334][ T29] audit: type=1326 audit(1749015149.164:3172): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5950 comm="syz.4.704" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f518d21e969 code=0x7ffc0000 [ 93.339806][ T29] audit: type=1326 audit(1749015149.164:3173): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5950 comm="syz.4.704" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f518d21e969 code=0x7ffc0000 [ 93.346173][ T5957] netlink: 'syz.1.706': attribute type 4 has an invalid length. [ 93.363132][ T29] audit: type=1326 audit(1749015149.164:3174): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5950 comm="syz.4.704" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f518d21e969 code=0x7ffc0000 [ 93.363169][ T29] audit: type=1326 audit(1749015149.174:3175): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5950 comm="syz.4.704" exe="/root/syz-executor" sig=0 arch=c000003e syscall=251 compat=0 ip=0x7f518d21e969 code=0x7ffc0000 [ 93.363199][ T29] audit: type=1326 audit(1749015149.174:3176): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5950 comm="syz.4.704" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f518d21e969 code=0x7ffc0000 [ 93.441345][ T29] audit: type=1326 audit(1749015149.174:3177): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5950 comm="syz.4.704" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f518d21e969 code=0x7ffc0000 [ 93.469534][ T5957] netlink: 'syz.1.706': attribute type 4 has an invalid length. [ 93.519825][ T5963] __nla_validate_parse: 43 callbacks suppressed [ 93.519847][ T5963] netlink: 16402 bytes leftover after parsing attributes in process `syz.4.707'. [ 93.548909][ T5967] netlink: 'syz.2.710': attribute type 10 has an invalid length. [ 93.556773][ T5967] netlink: 40 bytes leftover after parsing attributes in process `syz.2.710'. [ 93.559896][ T5960] netlink: 16402 bytes leftover after parsing attributes in process `syz.4.707'. [ 93.742166][ T5984] netlink: 'syz.2.716': attribute type 27 has an invalid length. [ 93.766414][ T5984] ip6gretap0: left allmulticast mode [ 93.772096][ T5984] dummy0: left promiscuous mode [ 93.816327][ T5984] 8021q: adding VLAN 0 to HW filter on device bond0 [ 93.868558][ T5991] netlink: 4 bytes leftover after parsing attributes in process `syz.2.716'. [ 93.877442][ T5991] netlink: 4 bytes leftover after parsing attributes in process `syz.2.716'. [ 94.105007][ T5984] 8021q: adding VLAN 0 to HW filter on device team0 [ 94.172789][ T5984] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 94.176986][ T5991] netlink: 4 bytes leftover after parsing attributes in process `syz.2.716'. [ 94.213312][ T5991] netlink: 4 bytes leftover after parsing attributes in process `syz.2.716'. [ 94.222222][ T5991] netlink: 4 bytes leftover after parsing attributes in process `syz.2.716'. [ 94.223137][ T5993] loop3: detected capacity change from 0 to 8192 [ 94.235157][ T5991] netlink: 4 bytes leftover after parsing attributes in process `syz.2.716'. [ 94.275974][ T5991] netlink: 4 bytes leftover after parsing attributes in process `syz.2.716'. [ 94.295388][ T3941] loop3: p2 p3 p4 [ 94.299384][ T3941] loop3: p2 start 452985600 is beyond EOD, truncated [ 94.306147][ T3941] loop3: p3 size 33554432 extends beyond EOD, truncated [ 94.324025][ T3941] loop3: p4 start 8388607 is beyond EOD, truncated [ 94.336825][ T5993] loop3: p2 p3 p4 [ 94.340735][ T5993] loop3: p2 start 452985600 is beyond EOD, truncated [ 94.347553][ T5993] loop3: p3 size 33554432 extends beyond EOD, truncated [ 94.372200][ T5993] loop3: p4 start 8388607 is beyond EOD, truncated [ 94.567984][ T6008] netlink: 'syz.0.721': attribute type 10 has an invalid length. [ 94.575987][ T6008] dummy0: entered promiscuous mode [ 94.840692][ T3941] udevd[3941]: inotify_add_watch(7, /dev/loop3p3, 10) failed: No such file or directory [ 94.993919][ T6022] netlink: 'syz.3.725': attribute type 4 has an invalid length. [ 95.377074][ T6043] netlink: 'syz.2.733': attribute type 4 has an invalid length. [ 95.544176][ T6043] netlink: 'syz.2.733': attribute type 4 has an invalid length. [ 95.852989][ T6053] netlink: 'syz.1.736': attribute type 4 has an invalid length. [ 96.103132][ T6065] loop1: detected capacity change from 0 to 8192 [ 96.438078][ T6086] ip6gretap0: entered allmulticast mode [ 96.660162][ T6065] loop1: p2 p3 p4 [ 96.689841][ T6065] loop1: p2 start 452985600 is beyond EOD, truncated [ 96.696635][ T6065] loop1: p3 size 33554432 extends beyond EOD, truncated [ 96.718288][ T6065] loop1: p4 start 8388607 is beyond EOD, truncated [ 97.264286][ T6110] loop0: detected capacity change from 0 to 8192 [ 97.520639][ T6110] loop0: p2 p3 p4 [ 97.520793][ T6110] loop0: p2 start 452985600 is beyond EOD, truncated [ 97.520813][ T6110] loop0: p3 size 33554432 extends beyond EOD, truncated [ 97.560154][ T6110] loop0: p4 start 8388607 is beyond EOD, truncated [ 97.996616][ T6140] ip6gretap0: entered allmulticast mode [ 98.797589][ T6167] validate_nla: 1 callbacks suppressed [ 98.797610][ T6167] netlink: 'syz.3.767': attribute type 4 has an invalid length. [ 98.841594][ T6171] sd 0:0:1:0: device reset [ 98.884955][ T6177] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=6177 comm=syz.4.768 [ 98.885181][ T6177] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=6177 comm=syz.4.768 [ 99.934141][ T6201] loop2: detected capacity change from 0 to 8192 [ 100.155062][ T6201] loop2: p2 p3 p4 [ 100.189196][ T6201] loop2: p2 start 452985600 is beyond EOD, truncated [ 100.196026][ T6201] loop2: p3 size 33554432 extends beyond EOD, truncated [ 100.452662][ T6220] netlink: 'syz.3.781': attribute type 4 has an invalid length. [ 100.564561][ T6201] loop2: p4 start 8388607 is beyond EOD, truncated [ 100.595075][ T6225] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=6225 comm=syz.0.783 [ 100.650857][ T6228] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=6228 comm=syz.0.783 [ 100.669590][ T6227] netlink: 'syz.3.784': attribute type 10 has an invalid length. [ 100.677607][ T6227] __nla_validate_parse: 6 callbacks suppressed [ 100.677621][ T6227] netlink: 40 bytes leftover after parsing attributes in process `syz.3.784'. [ 100.702916][ T6216] loop4: detected capacity change from 0 to 8192 [ 100.766836][ T6216] loop4: p2 p3 p4 [ 100.787787][ T6216] loop4: p2 start 452985600 is beyond EOD, truncated [ 100.794558][ T6216] loop4: p3 size 33554432 extends beyond EOD, truncated [ 100.896126][ T6231] sd 0:0:1:0: device reset [ 100.920843][ T6216] loop4: p4 start 8388607 is beyond EOD, truncated [ 100.929724][ T3009] loop4: p2 p3 p4 [ 100.933800][ T3009] loop4: p2 start 452985600 is beyond EOD, truncated [ 100.940618][ T3009] loop4: p3 size 33554432 extends beyond EOD, truncated [ 100.955879][ T3009] loop4: p4 start 8388607 is beyond EOD, truncated [ 101.044174][ T6236] netlink: 'syz.3.787': attribute type 10 has an invalid length. [ 101.052238][ T6236] netlink: 40 bytes leftover after parsing attributes in process `syz.3.787'. [ 101.262413][ T3941] udevd[3941]: inotify_add_watch(7, /dev/loop4p3, 10) failed: No such file or directory [ 101.316009][ T3941] udevd[3941]: inotify_add_watch(7, /dev/loop4p3, 10) failed: No such file or directory [ 101.718796][ T29] kauditd_printk_skb: 301 callbacks suppressed [ 101.718814][ T29] audit: type=1326 audit(1749015157.684:3479): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6253 comm="syz.4.791" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f518d21e969 code=0x7ffc0000 [ 101.807546][ T29] audit: type=1326 audit(1749015157.714:3480): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6253 comm="syz.4.791" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f518d21e969 code=0x7ffc0000 [ 101.830998][ T29] audit: type=1326 audit(1749015157.714:3481): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6253 comm="syz.4.791" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f518d21e969 code=0x7ffc0000 [ 101.854389][ T29] audit: type=1326 audit(1749015157.714:3482): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6253 comm="syz.4.791" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f518d21e969 code=0x7ffc0000 [ 101.877881][ T29] audit: type=1326 audit(1749015157.714:3483): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6253 comm="syz.4.791" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f518d21e969 code=0x7ffc0000 [ 101.901403][ T29] audit: type=1326 audit(1749015157.714:3484): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6253 comm="syz.4.791" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f518d21e969 code=0x7ffc0000 [ 101.925145][ T29] audit: type=1326 audit(1749015157.714:3485): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6253 comm="syz.4.791" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f518d21e969 code=0x7ffc0000 [ 101.948596][ T29] audit: type=1326 audit(1749015157.714:3486): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6253 comm="syz.4.791" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f518d21e969 code=0x7ffc0000 [ 101.972073][ T29] audit: type=1326 audit(1749015157.714:3487): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6253 comm="syz.4.791" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f518d21e969 code=0x7ffc0000 [ 101.995431][ T29] audit: type=1326 audit(1749015157.714:3488): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6253 comm="syz.4.791" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f518d21e969 code=0x7ffc0000 [ 102.025298][ T6246] loop3: detected capacity change from 0 to 8192 [ 102.118162][ T3009] ================================================================== [ 102.121265][ T3941] loop3: p2 p3 p4 [ 102.126382][ T3009] BUG: KCSAN: data-race in dont_mount / lookup_fast [ 102.136716][ T3009] [ 102.139062][ T3009] read-write to 0xffff888106bb5b40 of 4 bytes by task 3308 on cpu 1: [ 102.141663][ T3941] loop3: p2 start 452985600 is beyond EOD, [ 102.147147][ T3009] dont_mount+0x2a/0x40 [ 102.147176][ T3009] vfs_unlink+0x28f/0x420 [ 102.153106][ T3941] truncated [ 102.157236][ T3009] do_unlinkat+0x28e/0x4c0 [ 102.157262][ T3009] __x64_sys_unlink+0x2e/0x40 [ 102.161573][ T3941] loop3: p3 size 33554432 extends beyond EOD, [ 102.164673][ T3009] x64_sys_call+0x22a6/0x2fb0 [ 102.169093][ T3941] truncated [ 102.173737][ T3009] do_syscall_64+0xd2/0x200 [ 102.192347][ T3009] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 102.198288][ T3009] [ 102.200617][ T3009] read to 0xffff888106bb5b40 of 4 bytes by task 3009 on cpu 0: [ 102.208193][ T3009] lookup_fast+0xf0/0x320 [ 102.212567][ T3009] walk_component+0x3f/0x220 [ 102.217184][ T3009] path_lookupat+0xfe/0x2a0 [ 102.221716][ T3009] filename_lookup+0x147/0x340 [ 102.226511][ T3009] do_readlinkat+0x7d/0x320 [ 102.231049][ T3009] __x64_sys_readlink+0x47/0x60 [ 102.235924][ T3009] x64_sys_call+0x2cf3/0x2fb0 [ 102.240624][ T3009] do_syscall_64+0xd2/0x200 [ 102.245169][ T3009] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 102.251083][ T3009] [ 102.253421][ T3009] value changed: 0x00300008 -> 0x00004008 [ 102.259153][ T3009] [ 102.261488][ T3009] Reported by Kernel Concurrency Sanitizer on: [ 102.267653][ T3009] CPU: 0 UID: 0 PID: 3009 Comm: udevd Not tainted 6.15.0-syzkaller-11796-g5abc7438f1e9 #0 PREEMPT(voluntary) [ 102.279402][ T3009] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 102.289493][ T3009] ================================================================== [ 102.306723][ T3941] loop3: p4 start 8388607 is beyond EOD, truncated [ 102.377813][ T6246] loop3: p2 p3 p4 [ 102.381865][ T6246] loop3: p2 start 452985600 is beyond EOD, truncated [ 102.388815][ T6246] loop3: p3 size 33554432 extends beyond EOD, truncated [ 102.428476][ T6246] loop3: p4 start 8388607 is beyond EOD, truncated [ 102.663644][ T3941] udevd[3941]: inotify_add_watch(7, /dev/loop3p3, 10) failed: No such file or directory