last executing test programs: 3.403454126s ago: executing program 2 (id=2871): r0 = bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec8500000050000000850000000f00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000100)='kfree\x00', r1}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00', r2}, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), 0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0xffffff7a, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x90) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='rss_stat\x00', r5}, 0x10) syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r3, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000200)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000000000000000100000024000180060005004e230000060001000200000008000300ac1414aa0800060001"], 0x38}, 0x1, 0x0, 0x0, 0x4000011}, 0x4c080) open(&(0x7f0000000000)='./file1\x00', 0x109042, 0x0) fcntl$setlease(0xffffffffffffffff, 0x400, 0x0) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r3, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000c00)=ANY=[@ANYBLOB="14000000", @ANYRES16=r4, @ANYBLOB="010028bd7000fcdbdf2504"], 0x14}}, 0x0) 3.340789003s ago: executing program 2 (id=2873): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000004880)=ANY=[@ANYBLOB="240000003900070101000000fbe8df25037c000004008c800c000180060006008847"], 0x24}, 0x1, 0x0, 0x0, 0x48001}, 0x20000000) 3.316950716s ago: executing program 2 (id=2874): r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x9, 0x690bb, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x3, 0x6, 0x2, 0x0, 0x0, 0x0, 0x6}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x1) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) socket$xdp(0x2c, 0x3, 0x0) syz_mount_image$iso9660(&(0x7f0000000080), &(0x7f0000000100)='./file1\x00', 0x800002, &(0x7f0000000700)=ANY=[], 0x5, 0x57b, &(0x7f0000000140)="$eJzs3V9v29YZx/EfHRsx1CEYtiEIgjQ9TTbAAVKFkhsFQq846khmK5ECSRX2VRE0dmFEboe4AxbfdLnJNmB7D+vtXsRewq53v+tiL2DDNJCUHMm2LMeurCT4foSWFPXwnIeUwgcn4R8BAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA5fsN1K47aQdjbNNP5jTjqnPL5qL17E5Mj/rn/ql/Jyf7T6qpuFItu/OJV5PXsf3d0q3h3S6vZZFUH713/6Sc/X14arX9KQpdi//nB08f9/vazRSeyIC0bBkkUdLyWNUESmXqt5j7YaCbSDdlk67t/2I7xY+ulUWzW/HumUq+vG1veinphq+G17Wjho4+qrlszn5a71ouTKHzwaTnxN4J2OwhbeUz2cRbzKPshfhakJrVex5id3f72+qwks6DKWYKqs4KqbrVaqVSrldrD+sNHrrt8bIE76aqORSz+R4vFmsdhHDiXpWH9V1uBQvW0KXPiy1dDsSJ1pnw+NKr/v3pQ1Oxpxuv/qMrfePXxTeX1/3bx7va0+j8ll8t77eu5DvRUj9VXX9t6djzmcDecp/2/XmDdOb0Gg7F3LVmFCpQoUqCOvHyJGS4xqqummlx9oQ01lcioqUBtWSXaUqJUNv9F+Ypl5SlVpFhGa/J1T0YV1VXXuoysytpSpJ5CtdSQl7eyo918v6+fkvFhUOUsQdWpIVeG38Vr1H+X+v/OWx79ET2rix+0gR/JYFT/JS0vOhkAAAAAADAXTv6379n4f0Xv53PNoG3dqdEAAAAAAODtk4/ob2WTlWzufTmnjf8BAAAAAMDbyMmvsXMklfSBpMHg8Eool3/wBwAAAADg3ZAP8G9nk1I294GcifE/AAAAAAB4B/xx1j32V5PuVefv/9YVrTgvupu/dPa8LM7bG94O9crRFtPmzff+M8gt523VlodN+vaW85Mi6PAmmD8MJzuz8nDi+OwJONeGa08moD/rwyLmwyfF9Mnok6KXUjNo27IftT+pyPOuLaV2M/3t17u/k7Le/xR2rjna2e1vl7/8pv8kz+VF1sqLveF5EsdOlzgll2/z+y3k11ycuMUr+YUYw35LRb/u+PYvFasvvUafL3WniLlTKqalye1fzfqslKdt/TCLygW3/KXuFjF31+4WkxOyqM7Kojqexbn2xRmyWJ+VxfoFswCARdmZXoX+VxTxwdG6e46j3OVU95dak/Qvae1mfmBdvnnCEd2ddUR3L1jd/nbsGUjTamzW71+OVNXvsxW+n9pv0q462S688u3eb3R9//nBR7t7j7/a/mr762p1veZ+7LoPq1rJN2M4OZ7pKrUHAHDSM3ZGNbd4xs7Mp/A4H88YVf/s8JSCsr7UN+rrie7nVxvkZxyc2Gpp7DSE+zNGraWxJ7zcnzGqK4096OXssetz/hYAALhcd2bU4bPU//ujceqUcfdkLT99dDxeywEAwHzY+AenlP7BieOg+0WlXq946YY1ceR/ZuKg0bImCFMb+xte2LKmG0dp5EftbObzoGETk/S63ShOTTOKTTdKgk3TDNrWJFtJajsmsR0vTAM/6batN/hOisLU81PTCBLfdHu/bgfJho3zlZOu9YNm4HtpEIUmiXqxb8vGJNaOBQYNG6ZBM8hmQ9ONg44Xb5nPo3avY03DJn4cdNOoaNAf9hWEzSju5M2WF72zAQB4Q+w/P3j6uN/ffjbHmUVvIwAAmESVBgAAAAAAAAAAAAAAAAAAAADgzXcZ1/9NzFydY6fO7y/WzpImlzj/HQxeu53BnHbd6H69l/x9jc+saJ5dvAEbeO6Zq/rRW16StMjtWuBBCcCl+H8AAAD//5JXWjA=") socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000b40)) r2 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv4/vs/amemthresh\x00', 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000a80)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000345579b4fcfce7d31d7d4f00"/32], 0x48) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000a00)={'team0\x00', 0x0}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x19, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002010000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r4, @cgroup_sockopt, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f00000003c0)='mm_page_alloc\x00', r5, 0x0, 0xffffffffffffffff}, 0x18) perf_event_open(&(0x7f0000000c80)={0x8, 0x80, 0x7, 0x0, 0x0, 0x3, 0x82, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080), 0xf}, 0x8080, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x10000000000007}, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x2) r6 = openat$hwrng(0xffffffffffffff9c, 0x0, 0x8000, 0x0) fcntl$lock(r6, 0x6, &(0x7f0000000440)={0x2, 0x1, 0x6, 0xfffffffffffffffe}) r7 = open(&(0x7f0000000140)='.\x00', 0x8000, 0x112) ioctl$EXT4_IOC_SETFSUUID(r7, 0x4008662c, &(0x7f0000000000)={0x0, 0x0, "8376630682008000"}) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x19, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$BTRFS_IOC_GET_DEV_STATS(0xffffffffffffffff, 0xc4089434, &(0x7f0000003980)={0x0, 0x8, 0x0, [0xfffffffffffffffc, 0x7, 0x30, 0x6, 0x6], [0x1ff, 0x2f, 0x8000000000000000, 0x2, 0x2, 0x5, 0x1793e080, 0x2, 0x1ff, 0x81de, 0x4, 0x4, 0x3, 0x7, 0x401, 0x0, 0x40001ff, 0xa, 0x7, 0xd, 0x1, 0x61b, 0x2, 0x6, 0x7ff, 0x5, 0x0, 0x5, 0x0, 0x4000000000000, 0x8, 0x2, 0xe32, 0x200, 0xd3, 0x1, 0x4, 0x3, 0x1, 0x6, 0x2, 0x3, 0x3, 0x0, 0xd, 0x5, 0x88, 0x0, 0xfffffffff1ecc4dc, 0x680f, 0x9, 0xfffffffffffffffc, 0x6, 0x8001, 0x7, 0xfffffffffffffffd, 0x88db, 0x8, 0x401, 0x98, 0xe, 0xdf, 0xa5, 0x9, 0x43, 0x800, 0xffffffff80000001, 0x1, 0x2, 0x6, 0x5, 0x80, 0x15, 0x1, 0x1787, 0x140, 0x4, 0x4, 0x7, 0xfffffffffffffeff, 0x9, 0x40, 0x5ec54289, 0x200, 0xf730, 0x1, 0x5, 0x9, 0x1ff, 0x4, 0x0, 0x2, 0x503, 0x0, 0x40, 0x1, 0xf, 0x9, 0x1, 0x7, 0x6, 0x4, 0x2, 0x101, 0x80000000, 0x7f, 0x1, 0x3, 0x2, 0x9, 0x266, 0x8, 0xf, 0x8, 0x8, 0x0, 0xff, 0xa1c, 0x2f, 0x8, 0x8]}) r8 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r8, 0x29, 0x40, &(0x7f00000001c0)=@mangle={'mangle\x00', 0x2, 0x6, 0x7d8, 0x308, 0x220, 0x6000000, 0x308, 0x4d8, 0x708, 0x708, 0x708, 0x708, 0x708, 0x6, 0x0, {[{{@ipv6={@mcast1, @private1, [], [], 'pimreg0\x00', 'macvtap0\x00', {}, {}, 0x21}, 0x0, 0x118, 0x140, 0x0, {0x7a00000010000000}, [@common=@hl={{0x28}, {0x3, 0x4}}, @common=@unspec=@ipvs={{0x48}, {@ipv6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', [0xffffff00, 0x0, 0xffffffff, 0xff000000], 0x4e20, 0x2f, 0x6, 0x4e22, 0x20, 0x20}}]}, @unspec=@CHECKSUM={0x28}}, {{@ipv6={@mcast2, @dev, [0xff000000], [], 'veth1_macvtap\x00', 'veth1_vlan\x00'}, 0x0, 0xa8, 0xe0}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{}, {0x0, 0x20}}}}, {{@ipv6={@ipv4, @initdev={0xfe, 0x88, '\x00', 0x4, 0x0}, [0x0, 0x0, 0x0, 0xff], [0x0, 0x0, 0xff000000], '\x00', 'bond_slave_0\x00', {}, {}, 0x0, 0x0, 0x2}, 0x0, 0xa8, 0xe8, 0x48000000}, @common=@inet=@TCPOPTSTRIP={0x40, 'TCPOPTSTRIP\x00', 0x0, {[0x0, 0xffffffff, 0x3, 0x5, 0x2, 0x8000, 0xc, 0x4]}}}, {{@uncond, 0x0, 0xa8, 0x1d0}, @common=@unspec=@SECMARK={0x128, 'SECMARK\x00', 0x0, {0x1, 0xcb, 'system_u:object_r:kmsg_device_t:s0\x00'}}}, {{@uncond, 0x0, 0x208, 0x230, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x2}}, @common=@rt={{0x138}, {0x0, [], 0x0, 0x0, 0x0, [@empty, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @private0, @empty, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @ipv4={'\x00', '\xff\xff', @remote}, @mcast2, @private1, @private1, @empty, @private2={0xfc, 0x2, '\x00', 0x2}, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, @private0, @private1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @private0]}}]}, @HL={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x838) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) ioctl$TIOCGISO7816(0xffffffffffffffff, 0x80285442, &(0x7f0000000040)) symlinkat(&(0x7f0000002040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0xffffffffffffff9c, &(0x7f0000000640)='./file0\x00') stat(&(0x7f0000000f80)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', &(0x7f0000000100)) r9 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$sock_ifreq(r9, 0x8910, &(0x7f0000000000)={'veth0_vlan\x00', @ifru_ivalue=0x7}) ioctl$EVIOCREVOKE(r6, 0x40044591, &(0x7f0000000b00)=0x1) socket$nl_xfrm(0x10, 0x3, 0x6) 3.158368405s ago: executing program 2 (id=2882): perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x1000000009, 0x690bb, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0xef, 0x3d27}, 0x400, 0x32, 0x43a1bd76, 0x7, 0x203, 0x6, 0x2, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x3) (async) r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x1000000009, 0x690bb, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0xef, 0x3d27}, 0x400, 0x32, 0x43a1bd76, 0x7, 0x203, 0x6, 0x2, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x3) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) socket(0x10, 0x3, 0x0) r2 = socket(0x10, 0x3, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000001440)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r3}, 0x10) bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0) socket$inet(0x2, 0x4000000000000001, 0x0) (async) r4 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r4, 0x6, 0xd, &(0x7f0000000100)='dctcp', 0x5) bind$inet(r4, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x23) sendto$inet(r4, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) (async) sendto$inet(r4, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) membarrier(0x10, 0x0) socket$netlink(0x10, 0x3, 0x0) (async) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=@newqdisc={0x54, 0x10, 0x1, 0xfffffffc, 0x0, {0x0, 0x0, 0x0, 0x0, {0xffe0, 0x7}, {0xf}, {0xe}}, [@TCA_RATE={0x6, 0x5, {0x9, 0x1}}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1a, {0x0, 0x0, 0x491, 0x0, 0x0, 0x4, 0x8, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x80}, 0x4040c00) (async) sendmsg$nl_route_sched(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=@newqdisc={0x54, 0x10, 0x1, 0xfffffffc, 0x0, {0x0, 0x0, 0x0, 0x0, {0xffe0, 0x7}, {0xf}, {0xe}}, [@TCA_RATE={0x6, 0x5, {0x9, 0x1}}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1a, {0x0, 0x0, 0x491, 0x0, 0x0, 0x4, 0x8, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x80}, 0x4040c00) sendmmsg$inet6(r4, &(0x7f0000003d40)=[{{0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000140)="ce", 0x1}], 0x1}}], 0x1, 0x20040001) (async) sendmmsg$inet6(r4, &(0x7f0000003d40)=[{{0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000140)="ce", 0x1}], 0x1}}], 0x1, 0x20040001) gettid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x6a855000) perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_config_ext={0x100000001, 0xdd5}, 0x0, 0x0, 0x10000, 0x2, 0x2, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x1) prctl$PR_SET_THP_DISABLE(0x29, 0x0) r6 = socket$kcm(0x2, 0x2, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="60000000100001040100"/20, @ANYRES32=0x0, @ANYBLOB="7b130000000000003800128008000100677470002c00028008000100", @ANYRES32=r6, @ANYBLOB="08000200", @ANYRES32], 0x60}}, 0x0) socket$netlink(0x10, 0x3, 0x0) (async) r7 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r7, &(0x7f00000002c0), 0x40000000000009f, 0x0) (async) sendmmsg(r7, &(0x7f00000002c0), 0x40000000000009f, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000240)={'lo\x00'}) (async) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000240)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000980)=@newqdisc={0x58, 0x24, 0xd0f, 0x70bd30, 0x0, {0x60, 0x0, 0x0, r8, {0x0, 0xd}, {0xffff, 0xffff}, {0x0, 0xfff2}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x2c, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0x3, 0x1, 0x8, 0x1, 0xff, 0x7}, {0x4, 0x0, 0x3, 0xa159, 0x1000, 0xbebc20}, 0x3, 0x4000000, 0x41e}}]}}]}, 0x58}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) (async) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$SEG6(&(0x7f0000004040), 0xffffffffffffffff) sendmsg$SEG6_CMD_SETHMAC(r9, &(0x7f0000004140)={0x0, 0x0, &(0x7f0000004100)={&(0x7f0000004080)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r10, @ANYBLOB="01000000000000000008010000000500060002000000050005000400000000000800040001000000"], 0xfd10}, 0x1, 0x0, 0x0, 0x4845}, 0x20000080) 2.70803852s ago: executing program 2 (id=2887): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="1b000000000000"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0x7, &(0x7f0000000240)=ANY=[@ANYRES32=r0, @ANYBLOB="0000000000000000b702000000000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r1, 0x0, 0x1}, 0x18) r2 = syz_io_uring_setup(0x49a, &(0x7f0000000400)={0x0, 0x79af, 0x3180, 0x8000, 0x400246}, 0x0, &(0x7f00000006c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4) syz_io_uring_submit(0x0, r3, &(0x7f00000002c0)=@IORING_OP_MSG_RING={0x28, 0x0, 0x0, r2, 0x0, 0x0}) io_uring_enter(r2, 0x4c6e, 0xc67a, 0x8, 0x0, 0x0) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000fc0)=@raw={'raw\x00', 0x8, 0x3, 0x4d8, 0x0, 0x11, 0x148, 0x0, 0x0, 0x440, 0x2a8, 0x2a8, 0x440, 0x2a8, 0x3, 0x0, {[{{@ip={@rand_addr=0x64010102, @empty, 0xff, 0x100000100, 'team0\x00', 'batadv_slave_1\x00', {0xff}, {0xff}, 0x29, 0x2, 0x40}, 0x0, 0x2f8, 0x340, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'ip_vti0\x00', {0x0, 0x0, 0x3f, 0x0, 0x88000000, 0x3, 0x7}}}, @common=@unspec=@bpf1={{0x230}, @pinned={0x1, 0x0, 0x0, './file0\x00'}}]}, @unspec=@CT0={0x48}}, {{@ip={@multicast2, @empty, 0x0, 0x0, 'vlan0\x00', 'netdevsim0\x00'}, 0x0, 0xc0, 0x100, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@inet=@set2={{0x28}, {{0x2, 0x1, 0x3}}}]}, @common=@inet=@LOG={0x40, 'LOG\x00', 0x0, {0x4f, 0x7, "72f6daeff0a9c6294e211d2d88fe6dcff5d0e552201da3b7a1fdb30dcb59"}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x538) socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$bt_l2cap_L2CAP_LM(0xffffffffffffffff, 0x6, 0x3, &(0x7f00000003c0), &(0x7f0000000480)=0x4) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f00000001c0)={'erspan0\x00', &(0x7f0000000040)={'tunl0\x00', 0x0, 0x10, 0x700, 0x5, 0x42c, {{0x2e, 0x4, 0x3, 0x0, 0xb8, 0x67, 0x0, 0x7, 0x29, 0x0, @local, @broadcast, {[@ra={0x94, 0x4}, @end, @timestamp_addr={0x44, 0x44, 0xc, 0x1, 0x8, [{@multicast2, 0x7}, {@local, 0x7}, {@broadcast, 0xffffffff}, {@remote, 0x8}, {@dev={0xac, 0x14, 0x14, 0x29}, 0x1000}, {@loopback, 0xffff}, {@rand_addr=0x64010100, 0xbc2}, {@multicast2, 0x3}]}, @rr={0x7, 0x23, 0x34, [@multicast2, @broadcast, @local, @remote, @loopback, @multicast1, @local, @dev={0xac, 0x14, 0x14, 0x35}]}, @lsrr={0x83, 0x1f, 0xe3, [@empty, @rand_addr=0x64010100, @multicast2, @private=0xa010101, @local, @multicast1, @remote]}, @timestamp={0x44, 0x18, 0xe0, 0x0, 0xc, [0x3, 0xec, 0xfffffff7, 0x8, 0x8]}]}}}}}) 2.673440344s ago: executing program 2 (id=2888): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1e0000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b7040000000000008500000057000000"], 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x3, '\x00', 0x0, @fallback=0x8, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffb}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) r2 = perf_event_open(&(0x7f0000001480)={0x2, 0x80, 0x82, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7fffffffffffffff, 0x8000}, 0x11112, 0x0, 0x0, 0x4, 0x0, 0xd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x40082406, &(0x7f0000000180)='cpu=_0!|!') 2.63093618s ago: executing program 4 (id=2890): bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000012c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) r2 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000240)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x10, &(0x7f0000000000)=@framed={{0x18, 0x6}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r2}, {}, {}, {0x7, 0x0, 0xb, 0x7}}, @printk]}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x13, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) 2.611713002s ago: executing program 4 (id=2891): r0 = socket(0x10, 0x2, 0x9) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000013c0)={{0x14, 0x453, 0x1, 0x0, 0x0, {0x5}}, [], {0x14, 0x3ec}}, 0x28}, 0x1, 0x0, 0x0, 0x64049}, 0x40000) 2.563365938s ago: executing program 4 (id=2892): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000300)='syzkaller\x00', 0x8, 0x0, 0x0, 0x0, 0x4c, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) perf_event_open(&(0x7f00000000c0)={0x5, 0x80, 0xf0, 0x6, 0x40, 0x3, 0x0, 0x4000000000, 0xd4, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x4, 0x2, @perf_bp={0x0, 0x8}, 0x100882, 0x7ff, 0x6, 0x3, 0x0, 0x2, 0x3ff, 0x0, 0x0, 0x0, 0xb}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x100000a, 0x4082172, 0xffffffffffffffff, 0x0) (async) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f0000000080)=0x1, 0x4) mremap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x4000, 0x3, &(0x7f0000005000/0x4000)=nil) (async) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000029c0)) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01030000000000000000010000020900010073797a310000000034000000030a0102000000000000000001a400000900030073797a310000000008000a40000000040900010073797a31000000002c000000050a01020000000000000000010000010900030073797a31000000000900010073797a31"], 0xa8}, 0x1, 0x0, 0x0, 0x24008080}, 0x0) 2.562659688s ago: executing program 4 (id=2894): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="05000000030000000800000008"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000280)='sys_enter\x00', r3, 0x0, 0xffffffffffffffff}, 0x18) (async) rt_sigpending(0x0, 0x0) (async) sendmsg$L2TP_CMD_SESSION_DELETE(r0, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000c40)=ANY=[@ANYBLOB="993b972bf7e4b64b3e102589970b43b82e2e15d1fcf90548751106d02393741f13ebef9c8fcdce6b8653bab9c3cebbd444d50177c886cd421d72b64c63c3e1af4ac299b450a5954b5538f88897e1b008024954a7865926eb620a3f7318a314fc7912d5cb5486d920ccb8e5592b80ae916eb16aff373c097df7037f54d6b1760b6dee1a725129bb2e89cc804b3d864e11a0ab2a6169431b5234cf52dfcfb487d04e734a7470eddda688fddb84d2b0ab99c1731da488b2a1a3e2243cdf683ad4c0aba9f146d53560fa708ab11f2df7e8f0226b6527efe780a399b0686175", @ANYRES16=r1, @ANYBLOB="00022abd7000fedbdf250600000006001a004e2400000c001000000000000000000014001f00fe8000000000000000000000000000bb08000b000200000006001b004e2400000c000f000600000000000000"], 0x58}, 0x1, 0x0, 0x0, 0x8064}, 0x4000000) (async) r4 = socket$netlink(0x10, 0x3, 0x10) (async) r5 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_GET(r0, &(0x7f0000000500)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000480)={&(0x7f0000000340)={0x114, r5, 0x8, 0x70bd26, 0x25dfdbff, {}, [@handle=@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_RATE_NODE_NAME={0xa1, 0xa8, @random="c6e23c65e696ebe27508605d8ed7e6faf112121b5d1b11dbaa544c4b63e0ada669539e51e5ee0bb8955ea5668e8f06090ec0dab5d81264cff6220139c7490fc179a31c313998cd7c6918a48ea25f41d180d345605db6e6e53959bf01c04d69cee09ed694ab80e52caa8cd1904d1b1b99056918749c085ebd3e72b692db4413d14c9cb979ea84ca64fb6e9501993a1249a07cc443d297e1e3f645d26e05"}, @DEVLINK_ATTR_PORT_INDEX={0x8}, @DEVLINK_ATTR_PORT_INDEX={0x8, 0x3, 0x1}, @handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_RATE_NODE_NAME={0xe}]}, 0x114}, 0x1, 0x0, 0x0, 0x4000000}, 0x4008014) (async) syz_genetlink_get_family_id$team(&(0x7f0000000580), r4) (async) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000600)={'erspan0\x00', &(0x7f00000005c0)={'syztnl0\x00', 0x0, 0x80, 0xb0, 0xffe00000, 0x4, {{0x7, 0x4, 0x1, 0x8, 0x1c, 0x66, 0x0, 0x4, 0x4, 0x0, @empty, @remote, {[@ra={0x94, 0x4, 0x1}, @noop]}}}}}) r6 = openat(0xffffffffffffffff, &(0x7f0000000b40)='./file0\x00', 0x26201, 0x0) (async) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000780)={0x203, 0x0}, 0x1) bpf$BPF_PROG_DETACH(0x9, &(0x7f00000007c0)=ANY=[@ANYRES32=r6, @ANYRES32=r0, @ANYBLOB="2800000020290000000000007deb25914ea824130722f38483c33bc2898d19e25a91602da04e94780649a6a3716eb4282cda081f28e4cbe34717bfc53ff9fff557d2e0d637dc4b8f8d919b77489b", @ANYRES32=r7, @ANYBLOB, @ANYRES64=0x0], 0x20) (async) r8 = syz_genetlink_get_family_id$batadv(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$BATADV_CMD_SET_MESH(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000880)={0x34, r8, 0x1, 0x4070bd28, 0x1, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}]}, 0x34}}, 0x18) (async) r9 = socket(0x1, 0x803, 0x0) getsockname$packet(r9, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) (async) r10 = socket(0x10, 0x3, 0x0) connect$netlink(r10, &(0x7f0000000280)=@unspec, 0xc) (async) sendmsg$TCPDIAG_GETSOCK(r6, &(0x7f0000000740)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000d80)={0x340, 0x12, 0x800, 0x70bd2b, 0x25dfdbfe, {0x1, 0x7, 0x0, 0x0, {0x4e24, 0x4e20, [0x3, 0xc9b0, 0x7f, 0x6], [0x9, 0x0, 0x1000, 0xfffffff8], 0x0, [0x9253, 0x100]}, 0x8, 0x6f}, [@INET_DIAG_REQ_BYTECODE={0x9d, 0x1, "93f8b7b83b12d0b4674a2128b4ed91c2e2d6770c2d4a16a2659d47378032b9dcec92d709ab0aad2516448d5864c28d73e8aa0bc807025277220b9ab1584d6a6df390232a5cec7336c5e46a209492e4b39f68751ced82349d205377b74df4bf3401db1bb161aba7071faac61ea295f2428b163dcf0e463cff7c2b662e150797c0d65a1e999eb838ab333f1a862fe6c0c3636e82801411393cbe"}, @INET_DIAG_REQ_BYTECODE={0x9e, 0x1, "392519682314883ac5acc78b63033e1a7736f03702eb7d04bdac516f612294dd43edc13a9983cec554beaa5cfb3513739e82be4df48734189c4894b9854a479b41e912b3ae8a64e005a561564d8bed436e955c056ad58ec292161f0027a66a86acc5454fe93d996001792bc09355b9a84d77cf5538ffefaef7703542fdbaf264d47128c5beb7616a809bc8d6805de55b2cfd9d5423eb1ff5c88a"}, @INET_DIAG_REQ_BYTECODE={0x9d, 0x1, "58e74c328a240b85aa813f1972a8610b653874af475702473ec464716d5f0bee62bf92432b3ff9aed7c8f92b0e906d11e27e30235f3e2e4db1287836da0ec97766633980ade7dabf39c680b71b399ea2a49d1af5bcda0c8026b7178822a02731497848db465ff209b8056477863e1e7fb2f195477b0152109a96c1f27c0c4fad8c34bff15176369c74dcebff541553c7f2c3288ecd3959393a"}, @INET_DIAG_REQ_BYTECODE={0xe, 0x1, "32233c5068a3a927aa42"}, @INET_DIAG_REQ_BYTECODE={0xf7, 0x1, "c94b581c5f190ca542d4c4d81030397c422a2caa49160ebd98973801b4f20585a84009402b291116e65081f0cba41147986104d1d5fe997816f5f7bffeab6320377cad65339a928141cb86de2fd7667de78f1f2779196281f003f35ddd58b416c348c9f91df8002c2622d4e4b190fd34fa9e5eef2dea5928b7af89e68d255af1ced139369f7176569b13740f30ab404a4afe755639cf6aeb5363f6b5d09b9d9b3c60116f0287b03a52e24460310f69a30b9535c14452a94e42450a22381db484dbd1b1ee64c9c9948f2a0b7d1cc47bfd53818e0c46a826a85a2f455cdf9512fe9238a2718f0097b33619a04219145cad139d4d"}, @INET_DIAG_REQ_BYTECODE={0x9, 0x1, "6c7a66ff1f"}]}, 0x340}, 0x1, 0x0, 0x0, 0x24002000}, 0x24000040) r11 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r11, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x5c, 0x10, 0xffffffffffffffff, 0x70bd25, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x50afa, 0x823}, [@IFLA_LINKINFO={0x3c, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x2c, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x14, 0x3, @mcast2}, @IFLA_IPTUN_LOCAL={0x14, 0x2, @loopback}]}}}]}, 0x5c}}, 0x0) sendmsg$nl_route_sched(r10, &(0x7f0000000080)={&(0x7f0000000000), 0xc, &(0x7f0000000040)={&(0x7f0000000940)=@newtaction={0x18, 0x32, 0x829, 0x0, 0x0, {0x0, 0x0, 0x2}, [{0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x4010}, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'bond0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000640)=ANY=[@ANYBLOB="4400000010000104000002000000000200000000", @ANYRES32=0x0, @ANYBLOB="0386010000000000140012800c0001006d616376746170000400028008001f000600000008000a00", @ANYRES32=r12, @ANYBLOB="5abb6eb796ded76cd3eafa5e8f9731e3421dc2dd3c5c8046b49c27bccef7db913e7742ae46ef47ab331f69f96239382565287220b1c24ce273ea1b658c035c7f50d7cb7463877e5c0383580a1d0ed7f709bdfbca811e232ca65bcb8e9f8c023f775c7e0cf2dbb5230b2ba32ad8d896d9201c23492e48448dcda10a20588f94ef26e27420ae697017cb79fcc60104b80a889a0cdd449b9e406ec8ed0b1a"], 0x44}, 0x1, 0x0, 0x0, 0x20004885}, 0x4054) (async) unshare(0x6a040000) 2.319526007s ago: executing program 4 (id=2898): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="1b000000000000"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0x7, &(0x7f0000000240)=ANY=[@ANYRES32=r0, @ANYBLOB="0000000000000000b702000000000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r1, 0x0, 0x1}, 0x18) r2 = syz_io_uring_setup(0x49a, &(0x7f0000000400)={0x0, 0x79af, 0x3180, 0x8000, 0x400246}, &(0x7f0000000340)=0x0, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4) syz_io_uring_submit(r3, 0x0, &(0x7f00000002c0)=@IORING_OP_MSG_RING={0x28, 0x0, 0x0, r2, 0x0, 0x0}) io_uring_enter(r2, 0x4c6e, 0xc67a, 0x8, 0x0, 0x0) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000fc0)=@raw={'raw\x00', 0x8, 0x3, 0x4d8, 0x0, 0x11, 0x148, 0x0, 0x0, 0x440, 0x2a8, 0x2a8, 0x440, 0x2a8, 0x3, 0x0, {[{{@ip={@rand_addr=0x64010102, @empty, 0xff, 0x100000100, 'team0\x00', 'batadv_slave_1\x00', {0xff}, {0xff}, 0x29, 0x2, 0x40}, 0x0, 0x2f8, 0x340, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'ip_vti0\x00', {0x0, 0x0, 0x3f, 0x0, 0x88000000, 0x3, 0x7}}}, @common=@unspec=@bpf1={{0x230}, @pinned={0x1, 0x0, 0x0, './file0\x00'}}]}, @unspec=@CT0={0x48}}, {{@ip={@multicast2, @empty, 0x0, 0x0, 'vlan0\x00', 'netdevsim0\x00'}, 0x0, 0xc0, 0x100, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@inet=@set2={{0x28}, {{0x2, 0x1, 0x3}}}]}, @common=@inet=@LOG={0x40, 'LOG\x00', 0x0, {0x4f, 0x7, "72f6daeff0a9c6294e211d2d88fe6dcff5d0e552201da3b7a1fdb30dcb59"}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x538) socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$bt_l2cap_L2CAP_LM(0xffffffffffffffff, 0x6, 0x3, &(0x7f00000003c0), &(0x7f0000000480)=0x4) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f00000001c0)={'erspan0\x00', &(0x7f0000000040)={'tunl0\x00', 0x0, 0x10, 0x700, 0x5, 0x42c, {{0x2e, 0x4, 0x3, 0x0, 0xb8, 0x67, 0x0, 0x7, 0x29, 0x0, @local, @broadcast, {[@ra={0x94, 0x4}, @end, @timestamp_addr={0x44, 0x44, 0xc, 0x1, 0x8, [{@multicast2, 0x7}, {@local, 0x7}, {@broadcast, 0xffffffff}, {@remote, 0x8}, {@dev={0xac, 0x14, 0x14, 0x29}, 0x1000}, {@loopback, 0xffff}, {@rand_addr=0x64010100, 0xbc2}, {@multicast2, 0x3}]}, @rr={0x7, 0x23, 0x34, [@multicast2, @broadcast, @local, @remote, @loopback, @multicast1, @local, @dev={0xac, 0x14, 0x14, 0x35}]}, @lsrr={0x83, 0x1f, 0xe3, [@empty, @rand_addr=0x64010100, @multicast2, @private=0xa010101, @local, @multicast1, @remote]}, @timestamp={0x44, 0x18, 0xe0, 0x0, 0xc, [0x3, 0xec, 0xfffffff7, 0x8, 0x8]}]}}}}}) 2.222787249s ago: executing program 4 (id=2900): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0x1000804, &(0x7f0000000080)={[{@user_xattr}, {@inlinecrypt}, {@noload}]}, 0x5, 0x51e, &(0x7f0000000d00)="$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") pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x2, &(0x7f0000000300)=@gcm_128={{0x303}, "fc674d000000f8f7", "c5991ee20139b401046a89606ffcf92e", "2c5be7c6", "a0ca05c0707e52f4"}, 0x28) recvfrom$inet6(r1, &(0x7f00000000c0)=""/3, 0x3, 0x300, 0x0, 0x0) splice(r1, 0x0, r0, 0x0, 0x10000008ebc, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="05000000040000001700000001"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000380)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r3}, 0x18) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000009c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x45}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000001cc0)='kfree\x00', r4, 0x0, 0xfffffffffffffffc}, 0x29) prctl$PR_SET_NAME(0xf, &(0x7f0000000140)='\x00\x00\x00\x00\x00') kexec_load(0x4, 0xa, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0xfe, 0x0, 0x7ffc9ffe}]}) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0x3, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000010000000000000000"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}, 0x94) mremap(&(0x7f0000000000/0x9000)=nil, 0x600000, 0x600000, 0x3, &(0x7f0000a00000/0x600000)=nil) syz_emit_ethernet(0x52, &(0x7f0000000000)={@local, @empty, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "00a8bc", 0x1c, 0x6, 0x0, @dev={0xfe, 0x80, '\x00', 0xa}, @local, {[], {{0x0, 0x4001, 0x41424344, 0x41424344, 0x0, 0x0, 0x7, 0x2, 0x0, 0x0, 0x0, {[@exp_fastopen={0xfe, 0x8, 0xf989, "b9460dfb"}]}}}}}}}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, 0x2}, 0x94) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)=ANY=[@ANYBLOB="8c00000010001fff28bd70000000800000000000", @ANYRES32=0x0, @ANYBLOB="efb00000800000006c0012800b00010062726964676500005c00028008000500010000000c002e"], 0x8c}, 0x1, 0x0, 0x0, 0x4000084}, 0x14) sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000800)=@newlink={0x30, 0x10, 0xffffffffffffffff, 0x70bd25, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0x2840, 0x420}, [@IFLA_TARGET_NETNSID={0x8, 0x2e, 0x3}, @IFLA_NET_NS_PID={0x8}]}, 0x30}, 0x1, 0x0, 0x0, 0x4040885}, 0x8000002) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB="18010000000000000000000295"], &(0x7f00000003c0)='syzkaller\x00', 0x3, 0x0, 0x0, 0x41000, 0xc, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x200}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kmem_cache_free\x00', r7}, 0x10) open_tree(0xffffffffffffff9c, &(0x7f0000000100)='.\x00', 0x0) r8 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000640)=ANY=[@ANYBLOB="1b00000000000000000000000020"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001000000000000000640000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b70800000e0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 1.7192143s ago: executing program 0 (id=2916): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(0xffffffffffffffff, &(0x7f0000001280)={0x2, 0x4e5f, @private=0xa010102}, 0x10) setsockopt$sock_int(r0, 0x1, 0x800000000f, &(0x7f0000000080)=0x7, 0x4) listen(r0, 0x70000008) r1 = socket$inet(0x2, 0x1, 0x0) setsockopt$sock_int(r1, 0x1, 0xf, 0x0, 0x0) bind$inet(r1, &(0x7f0000000240)={0x2, 0x4e22, @multicast1}, 0x10) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f00000000c0)='veth1_to_hsr\x00', 0x10) syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000080)='./file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x200010, &(0x7f0000000680)=ANY=[@ANYBLOB="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"], 0x5, 0x25a, &(0x7f0000000240)="$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") syz_emit_ethernet(0x46, &(0x7f0000000000)=ANY=[@ANYBLOB="f3bbbb"], 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) (fail_nth: 5) 1.578019047s ago: executing program 0 (id=2918): socket$pppoe(0x18, 0x1, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0x7, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000000000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x18) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup(r2) connect$inet6(r3, &(0x7f0000000000)={0xa, 0x0, 0x0, @local, 0x7}, 0x1c) setsockopt$IPT_SO_SET_REPLACE(r3, 0x4000000000000, 0x4, 0x0, 0x28) 941.599675ms ago: executing program 3 (id=2942): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000000)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x50) munmap(&(0x7f0000001000/0x3000)=nil, 0x3000) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000300)={r0}, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000880)={0x11, 0x3, &(0x7f00000003c0)=@framed, &(0x7f0000000240)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x68}, 0x94) 938.404855ms ago: executing program 3 (id=2944): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000021c0), 0x181000) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000f80)=ANY=[@ANYBLOB="05000000"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000480)='kfree\x00', r2, 0x0, 0x7fffffffffffffff}, 0x18) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r0, 0xc0a85320, &(0x7f0000000300)={{0x80}, 'port0\x00', 0x41, 0xfe8ee28a1d9fac77, 0x6, 0x6, 0x2, 0x40, 0x3, 0x0, 0x6, 0x3}) ioctl$SNDRV_SEQ_IOCTL_DELETE_PORT(r0, 0xc0a85320, &(0x7f00000007c0)={{0x80}, 'port0\x00', 0x3c, 0x151625, 0xd, 0x2, 0x20107, 0x6, 0x5, 0x0, 0x5, 0x3}) 932.669936ms ago: executing program 3 (id=2946): bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xb, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020782500000000002020207b1af8fe00000000bfa100000000000007010000f8ffffffb702000008000000b703000007000000850000001100000095"], &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffbff}, 0x94) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x0) write$binfmt_script(r0, &(0x7f0000000600)={'#! ', './file0'}, 0xb) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000001800ff0f0000000000000000850000006d000000850000000800000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$PROG_LOAD(0x5, 0x0, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)) syslog(0x2, &(0x7f00000004c0)=""/164, 0xa4) 918.957408ms ago: executing program 1 (id=2947): bpf$BPF_GET_BTF_INFO(0xf, 0x0, 0x0) r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f0000000240)=ANY=[@ANYBLOB="9feb010018001934784ac19a4c8e00001c00000003000000050000000000000c040000000c0000193f67fa9ccb7258fdb1005c02005f00"], &(0x7f0000000280)=""/128, 0x37, 0x80, 0x0, 0x5}, 0x28) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x18, 0xb, &(0x7f0000000440)=ANY=[@ANYRESDEC, @ANYRESDEC], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='netlink_extack\x00', r1}, 0x10) openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) r2 = bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020047b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000020000085000000c3000000"], &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r4, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) r5 = socket(0x10, 0x3, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x10, 0x803, 0x2) r8 = fsopen(&(0x7f0000000080)='securityfs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r8, 0x1, &(0x7f0000001d40)='\xd0\x9e^\xa0\xee\xc8\x17T\xb1GI\x90\xe2Q1\xb0\x8f\xe1\xa8\x95\xa0\xcd\fL\xaei\xb6\xb7\xc1Y\xd5YG\xf9\xc2\xf1\xa4\xdb$\xf6]\xab\x1a\xdaY\xfb\x03dhS\x97nZ\xf8\xc6\x1f\x03\x00\x00\x00\x00\x00\x00\x00\x9bg-D#g\x16\xf4\xd9\x00\x00\x00\x00\x00eA\x9f\xc3\x11\x18\xe6\xc5\x95\x9e!^W\xf6\xacE\xa3\xc8\xe7\xec\xd6\xbd\x1c+\n\xc7Q( \xba\xff\x17N\x1fB\x91\x15\x83\xec(B\xc5\x05\x9d\xd6\x02|6\xdc\xee$\xb5\x1deC\xfb\xa2\xaa\xe0#\xcb\xde;sA\xad\xa6\xb6P\xa3\xf7\xc3q\xd4\xb6\x95\x02\xd8*\xa8\xd2\x94\xa3\x89\xa9\xa0\xc5\xc9=\xa5^\x00\x00\x00\x00\x00\x00\x00\x00\x00\xef\xcd\xd3\t\x01A\xd5\x81\xc1;9\xeez\xba\x00\x00\x00\xdc\x94\xff)\xa4\xe6\xfb]\x90bG\x11\b\x98#\xaa99ez|\x8b5\x92\xa5\xba\x96\xb3\xb26I\xbb\xdeb\x95?\xc0\x81', &(0x7f0000000200)='sockfs\x00', 0x0) close(r8) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r7) getsockname$packet(r7, &(0x7f0000000680)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r9], 0x3c}}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000005840)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=@newqdisc={0x2c, 0x24, 0x5820a61ca228651, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, r9, {}, {0xffff, 0xffff}, {0x1, 0xfff1}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000005880)=@newtfilter={0x3648, 0x28, 0x575ac7824d421509, 0x70bd2a, 0x4, {0x0, 0x0, 0x0, r9, {}, {0x1}, {0x4, 0x3d}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x3618, 0x2, [@TCA_CGROUP_POLICE={0x408, 0x2, [@TCA_POLICE_RATE={0x404, 0x2, [0x9, 0x8, 0x27, 0x40, 0x4, 0x8, 0x4, 0x8, 0x8, 0x101, 0x2, 0x63ba, 0x5, 0x101, 0xe4b, 0x0, 0x8, 0x62, 0x9, 0x46c, 0xffffffff, 0x7fffffff, 0x10, 0x92, 0x3ff, 0x493, 0xff, 0x5, 0x3, 0x8, 0x9, 0x7fff, 0x7, 0x800, 0x0, 0x8, 0x7fff, 0x7, 0xfffffffe, 0x9b93, 0x6, 0x8000, 0x0, 0x80000000, 0x6, 0xdd09, 0x3, 0x1, 0x3, 0x1, 0x8, 0x2, 0x0, 0xff, 0x6, 0xffffffff, 0xffff, 0x4, 0x4, 0x1, 0x7, 0x1, 0x6462, 0x6, 0x0, 0x7, 0xb7, 0x8, 0x8000, 0x101, 0x2, 0x800, 0x8, 0x8, 0x8001, 0x0, 0x3, 0x3, 0x1, 0xffffffff, 0x115620ef, 0x2, 0x1, 0x7, 0x4, 0x0, 0x400, 0xd4, 0x1, 0x1f81, 0x8, 0x3, 0x0, 0x100, 0x7, 0x8000, 0x7, 0x4d, 0x6b1e, 0x2, 0x3f7, 0x6, 0x7, 0x2, 0x200, 0x9, 0x4, 0xd1eb, 0xff, 0xf6d8, 0xc22, 0x100, 0x69de, 0xfffffc00, 0x5, 0x9, 0xd, 0xfffffffc, 0x7fffffff, 0x7, 0x6, 0xffffffed, 0x8, 0x81, 0xffff, 0x10001, 0x8, 0x8001, 0x4, 0x6, 0x4, 0x5, 0x7e, 0x5, 0xfffffff9, 0x1ff, 0x7f, 0x1000, 0xa4, 0x3, 0x27, 0x3, 0x4, 0xff, 0x0, 0xd, 0x8, 0x6, 0x5eba, 0x4, 0x4, 0x1ff, 0x5, 0xf684, 0x7, 0x7, 0xfffffff9, 0x5836, 0x4, 0x5, 0x0, 0x3, 0x3, 0xfd5a, 0xe8, 0xffffff7f, 0x6, 0x9, 0x4, 0x9, 0x1ff, 0x8, 0x4, 0x2, 0x4, 0x5, 0xffff, 0x8, 0xfffffffe, 0x3c, 0x33, 0xb, 0x2, 0x5, 0x1c, 0xec6, 0xffffffcc, 0x5, 0x3, 0x7, 0x8000, 0x9, 0x4, 0x9, 0x37, 0x2, 0x3, 0x3d, 0x1000, 0x4, 0x0, 0xc7, 0x3, 0x1470, 0x3, 0xe1, 0x5, 0x5, 0xb0, 0x1, 0x4, 0x10, 0xb7a8, 0x81, 0x0, 0x4, 0x9, 0x38000000, 0x2, 0xfffffbf7, 0x7f, 0xaa, 0x2, 0x1, 0x8, 0x5, 0x4, 0xbd2a, 0x5, 0x9, 0x7f, 0x54, 0xfff, 0xe6, 0x4, 0x2, 0xc, 0x40, 0x7, 0x8, 0x2, 0x1, 0x10000, 0x7, 0x800000, 0xfd8, 0x7fff, 0x8, 0x6, 0x8, 0x9, 0x4, 0x7, 0x7, 0x4, 0xfff]}]}, @TCA_CGROUP_EMATCHES={0xb8, 0x3, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x401}}, @TCA_EMATCH_TREE_LIST={0x7c, 0x2, 0x0, 0x1, [@TCF_EM_IPT={0x68, 0x3, 0x0, 0x0, {{0x5, 0x9, 0x5}, [@TCA_EM_IPT_MATCH_DATA={0x5a, 0x5, "1c5073a6520a21d587efb55f51d2bf54c3fad62be2719899ed962288ef0f85972670ff03292bff4eaa96037164d4790e51d01c571ce3c365413845a33aa54e1c3a61b4fef02128c1afe3a14058059388f5642f5cd1b3"}]}}, @TCF_EM_IPSET={0x10, 0x3, 0x0, 0x0, {{0x2, 0x8, 0xfff6}, {0x1, 0x1, 0x4}}}]}, @TCA_EMATCH_TREE_HDR={0x8}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x8}}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x1c2f}}, @TCA_EMATCH_TREE_LIST={0x18, 0x2, 0x0, 0x1, [@TCF_EM_CANID={0x14, 0x2, 0x0, 0x0, {{0x8, 0x7, 0x1}, {{0x2, 0x0, 0x1}, {0x1, 0x1, 0x0, 0x1}}}}]}]}, @TCA_CGROUP_ACT={0x408, 0x1, [@m_simple={0x368, 0x3, 0x0, 0x0, {{0xb}, {0x40, 0x2, 0x0, 0x1, [@TCA_DEF_PARMS={0x18, 0x2, {0x5, 0x0, 0x7, 0x3, 0x6}}, @TCA_DEF_PARMS={0x18, 0x2, {0xa, 0x10000, 0x8, 0x5, 0xffff7fff}}, @TCA_DEF_DATA={0xa, 0x3, 'kfree\x00'}]}, {0x300, 0x6, "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"}, {0xc}, {0xc, 0x8, {0x3, 0x3}}}}, @m_connmark={0x9c, 0x19, 0x0, 0x0, {{0xd}, {0x4}, {0x6b, 0x6, "443c494560934b8e2f6eb6e0d1dd77e62a0fb3c7152718ec8c411c72f2b7eb0d509ad395efb10b236f9c43253159a32b496f985866c0fbd8506c7ccd697a9f880cada92e1b060ff20bab2a0f1ace3f6f9928592943d78ce3acfa19b168e2e8c19255d5e9e90d7b"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x2, 0x1}}}}]}, @TCA_CGROUP_ACT={0x2164, 0x1, [@m_ife={0x34, 0x3, 0x0, 0x0, {{0x8}, {0xc, 0x2, 0x0, 0x1, [@TCA_IFE_TYPE={0x6, 0x5, 0x8}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x2}}}}, @m_sample={0x64, 0x4, 0x0, 0x0, {{0xb}, {0xc, 0x2, 0x0, 0x1, [@TCA_SAMPLE_TRUNC_SIZE={0x8, 0x4, 0x8001}]}, {0x2e, 0x6, "85428a5bfe0996b46f390c54ebe9e047ee3115b1b811a5d4efd4ded14d5614ba864fcdf5f953dbf5c93a"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x3}}}}, @m_pedit={0xe50, 0x1a, 0x0, 0x0, {{0xa}, {0xe24, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS={0xe20, 0x2, {{{0x429eacec, 0xfff, 0x10000000, 0x0, 0x5}, 0xc, 0x2}, [{0x768, 0x1, 0x0, 0x1000, 0x664e, 0x6}, {0x3ff, 0x4, 0x8, 0x3, 0x9, 0x9}, {0x9, 0x5, 0x8, 0x1, 0x5, 0x7}, {0x5, 0x6, 0x1, 0x2, 0x2, 0x5}, {0x9, 0xffff0001, 0x3, 0x1, 0x2, 0x9}, {0x4, 0x1ff, 0x1000, 0x120000, 0x101, 0xc57}, {0xdb63, 0x100, 0xf0fe, 0x9, 0x8, 0xffff7f7f}, {0x7, 0xa, 0x6, 0x6, 0x5, 0x800}, {0x6, 0x101, 0x7fff, 0x45f, 0xffffffff, 0x4}, {0xd7b, 0x55, 0x40, 0x1, 0xe, 0x6}, {0x9, 0x1, 0x9, 0x8, 0x1}, {0x1, 0x2, 0x3ab7, 0x3ff, 0x5, 0x10000}, {0x3, 0xfff, 0x7, 0x6, 0x1}, {0xfffffffd, 0x1, 0x9, 0x4, 0x6, 0xfffffc13}, {0x6, 0x5bdb5959, 0x5, 0x0, 0x4, 0xc}, {0x8000, 0x4, 0x7, 0xbe9, 0x1, 0x7}, {0xffffffff, 0x40, 0x9, 0x81, 0x2, 0x99}, {0x3, 0x1, 0x5bcf06dc, 0x6, 0x8, 0xfffffff9}, {0x3, 0x5, 0x0, 0x0, 0x0, 0x3e}, {0x9550, 0x7, 0xfffffb2a, 0xbb, 0x6, 0x8001}, {0x1, 0xc12b, 0x9, 0x9, 0x4, 0x1}, {0x6ca, 0x10000, 0x7fffffff, 0xffff82d7, 0x7, 0x8}, {0xfffffffc, 0x3, 0x6, 0x3, 0x883e}, {0x6, 0x6128, 0xff, 0x100, 0x101, 0x8}, {0x517, 0x1, 0x8, 0x1, 0xb, 0x8}, {0x77e5, 0x31, 0xf1, 0x80, 0x2, 0x593d2887}, {0x6, 0x1, 0x200, 0x6, 0x5, 0xd3}, {0x4, 0x857, 0x4, 0x4, 0x8, 0x33d0}, {0xadb, 0x5, 0x3, 0x5, 0x7, 0x1}, {0xf7f, 0xfffffffb, 0x6, 0x3, 0xfff, 0x1}, {0x9, 0x5, 0x394, 0x8, 0xc, 0x2}, {0xfea, 0x7, 0x8, 0x7f, 0x5, 0x6}, {0x6, 0x40, 0x1, 0x9, 0x1000, 0x7}, {0x3, 0x7, 0x1, 0xffff, 0x3, 0x81}, {0x4, 0xf, 0x0, 0x7, 0xf3, 0x4}, {0x1, 0xffff, 0x4, 0x9, 0x9, 0x3}, {0x9, 0x8, 0x3, 0x4, 0x24, 0x7}, {0x8, 0x2, 0x5, 0x1, 0xa, 0x3ff}, {0x7, 0x80, 0x8, 0x38, 0xaa0, 0x9}, {0x841, 0x9, 0x0, 0xb93d, 0xb8, 0xff}, {0x9, 0x1, 0xfffffff7, 0x0, 0x4f8, 0x4}, {0x0, 0x4, 0xf3e6, 0x7, 0x7ff, 0x3}, {0x3, 0xff, 0x100, 0x5, 0x5, 0x4000}, {0x1, 0xfffffffa, 0xba, 0xe3e2, 0x3, 0x1}, {0xfffffff7, 0xffff, 0x8, 0x1ff, 0x79, 0xc}, {0x5, 0x1ff, 0x5, 0xe60, 0x8, 0x6}, {0x46a140dd, 0x6, 0x9, 0xc0000000, 0x8, 0x103}, {0xffffff81, 0x7fff, 0x2, 0x10000, 0x1, 0x2}, {0xb, 0xfffffff8, 0x31d, 0x1, 0x8001, 0x5373}, {0x7, 0x0, 0x1ff, 0x9, 0x10000, 0xfffffeff}, {0x200, 0x9, 0x9fdf, 0x18, 0x4, 0x6}, {0x400, 0xc00, 0x10000, 0x1, 0x800, 0xffffffff}, {0x5, 0x8, 0xfffffffb, 0x6, 0x0, 0x4}, {0xfffffffb, 0x8, 0xc6, 0x6, 0x7, 0x2}, {0x3, 0x8, 0xffffffff, 0x200, 0x5, 0xb64}, {0x9, 0x9, 0x5f, 0x7429, 0x2, 0xd}, {0x2, 0x8001, 0x6, 0xde4, 0x6, 0x1}, {0x4, 0x7, 0x1, 0xfffffffc, 0x2, 0x8}, {0xe61, 0x7ff, 0x8, 0x8001, 0x7fffffff, 0x2}, {0x4, 0xfffffffc, 0x5, 0xe, 0x8, 0xffff}, {0x8, 0x8, 0x2, 0x5, 0xa2c7, 0x9}, {0x7fff, 0x0, 0x8e, 0xa817, 0x3, 0x3}, {0x98, 0x5, 0x1, 0xffff, 0x9, 0xff}, {0x200004, 0x4, 0x8, 0x2, 0x5}, {0x7, 0x9, 0xe, 0x8000, 0x0, 0x3}, {0x0, 0x8, 0x4, 0xff, 0x956e, 0x8a}, {0x9, 0x8000, 0xd798, 0x5, 0x4, 0x8000}, {0xffff, 0x9, 0x4, 0x2, 0x4, 0x2ee8}, {0x1, 0x5, 0x9, 0x8000001, 0x9b, 0x1000}, {0x9, 0x6cb, 0xc, 0x1, 0x10000, 0x3}, {0xb2, 0x1, 0x2, 0x10001, 0x1, 0x5}, {0xfffffffa, 0x0, 0x7f, 0xcf6, 0x2, 0x4}, {0x7, 0x1, 0x8, 0x6, 0x8, 0x6}, {0xfffff4c1, 0x7fff, 0x61, 0x5d33cab8, 0x9, 0x3}, {0x72200000, 0x2, 0x0, 0x4, 0xfffffffe}, {0x5, 0x400, 0xe, 0xfffffff7, 0x4, 0xcd5}, {0x1, 0xb2, 0xfffffffc, 0x38a, 0x1, 0x7}, {0x0, 0x46, 0x7, 0x5, 0xffffff68, 0x205c0d75}, {0x0, 0xfff, 0x1ff, 0x1, 0x7, 0x6}, {0x9, 0x2, 0x5, 0x41, 0x7, 0x2}, {0xdd, 0x9, 0x5, 0x5, 0x8, 0x1}, {0x3ff, 0x4, 0x8, 0xfffffffb, 0x2, 0x4}, {0x7f61, 0xb, 0x379, 0x1, 0x3ff, 0x8}, {0x1, 0x8, 0x0, 0x3, 0xe, 0x8}, {0x4, 0x3, 0xb81, 0x9, 0x7, 0xc00a}, {0x1, 0x1200000, 0x5, 0x720, 0x8, 0x6}, {0x0, 0x2, 0x8, 0x9, 0x3}, {0x0, 0xa31, 0x0, 0x800, 0x1, 0x1}, {0x1, 0xffff7fff, 0x6, 0x401, 0x9}, {0x7fd, 0x1000, 0x7, 0x0, 0x6, 0x7}, {0x7ff, 0xff, 0x8, 0x7, 0x8c, 0x6ff}, {0x1ff, 0x7, 0x6, 0x2, 0x798a, 0x5}, {0x3, 0x7ff, 0x0, 0x101, 0x7, 0x9}, {0x8, 0xb, 0x10000, 0x1, 0x200}, {0x5, 0x1441, 0xfffffffe, 0x6, 0x1, 0x1}, {0x8, 0x4, 0x400, 0x277, 0x4, 0x401}, {0xfffffffe, 0x7fffffff, 0x5, 0x800, 0x3, 0x7}, {0x4, 0x2, 0xa, 0x6, 0x3}, {0x2, 0x2, 0x4, 0x2, 0x9}, {0x9, 0x2, 0x7, 0x6, 0x2, 0x8}, {0x1, 0xff, 0x3, 0x1, 0x2}, {0x6, 0xffffffc0, 0x0, 0xfffffffe, 0x2, 0x8}, {0xd6, 0x80000000, 0x7, 0x5, 0x101, 0x9}, {0x2, 0x8000, 0x7, 0x2, 0xfffffc01}, {0x1, 0x93e, 0x8, 0x1, 0xa3eb, 0x9}, {0x4, 0xfffffffd, 0x2, 0x7f, 0x14110000}, {0x8000, 0x0, 0x3, 0x8e53, 0x3, 0x81}, {0x0, 0x6, 0xfffffffe, 0x9, 0x9, 0xba6}, {0x0, 0x0, 0x8000, 0xf, 0x8, 0x6}, {0x40, 0x8, 0xb93e, 0x80000001, 0x0, 0x40000006}, {0x42ef, 0x0, 0x7, 0x7, 0x8, 0x7}, {0x6, 0x4, 0x6, 0x9, 0x0, 0xe6e}, {0x3, 0x6b, 0xfffffffc, 0xa0, 0xcc42, 0xb}, {0xd, 0xaa85, 0x3fdc3c48, 0x6f9f, 0x7f}, {0xc1cf, 0x8, 0x9, 0x8001, 0xe, 0x80000001}, {0x1ff, 0xfffffffc, 0xdd, 0x0, 0x81, 0x5}, {0x1d57, 0x5c5, 0x200, 0x8, 0x80000000, 0x7fffffff}, {0x7fff, 0x3f729270, 0xfefffffc, 0x4, 0xd, 0x5}, {0x7fff, 0x0, 0xfff, 0x3, 0x9, 0x3}, {0x714, 0x101, 0x6, 0x800, 0x0, 0x1}, {0x20000000, 0x4, 0x45, 0x80000000, 0x6, 0xffff}, {0x5ba6c236, 0x3, 0x1400, 0xfffffffc, 0x1, 0x8}, {0x6, 0x1, 0x8, 0x8, 0x0, 0xc}, {0x7, 0x2, 0x7, 0x0, 0x81, 0xd}, {0xffff, 0x3, 0x7f, 0x7, 0x9, 0x1}, {0xa0, 0x9, 0x3, 0x4, 0x80000004, 0x200}, {0x1ff, 0x5, 0x7, 0x10001, 0x1, 0xa}, {0x4, 0x8, 0x594, 0xe, 0x1, 0xa97a}], [{0x4, 0x1}, {0x2, 0x1}, {0x4}, {}, {0x3, 0x1}, {0x1}, {0x1}, {0x4, 0x1}, {0x4, 0x1}, {0x1}, {0x5, 0x1}, {0x3, 0x1}, {0x3, 0x1}, {0x2}, {0x2}, {0x4}, {0x5}, {0x2, 0x1}, {0x0, 0x1}, {0x5, 0x1}, {}, {0x4}, {0x0, 0x1}, {0x1}, {0x2, 0x1}, {0x1, 0x1}, {0x0, 0x1}, {0x4}, {0x3, 0x1}, {}, {0x1, 0x1}, {}, {0x1}, {}, {0x0, 0x1}, {}, {}, {0x2}, {0x3}, {0x0, 0x1}, {0xb2ee6980f65bdb94}, {0x2, 0x1}, {0x0, 0x1}, {0x2}, {0x2, 0x1}, {0x4}, {0x3, 0x1}, {0x5, 0x1}, {0x5, 0x1}, {0x3}, {0x4, 0x1}, {0x2}, {0x3}, {0x2, 0x1}, {0x4}, {0x0, 0x1}, {0x1, 0x1}, {0x3}, {}, {0x5}, {0x3, 0x1}, {0x5, 0x1}, {0x0, 0x1}, {0x4}, {0x1, 0x1}, {0x4, 0x1}, {0x1}, {0x2, 0x1}, {0x3, 0x1}, {0x2}, {0x3, 0x1}, {0x4, 0x1}, {0x1, 0x1}, {0x1}, {0x1}, {0x2}, {0x5}, {0x5}, {0x2, 0x1}, {0x5, 0x1}, {0x4, 0x1}, {0x5}, {0x4, 0x1}, {0x6, 0x1}, {0x3, 0x1}, {0x0, 0x1}, {0x0, 0x3e7fd4ad1b01a411}, {0x3, 0x1}, {0x1, 0x1}, {0x1, 0x1}, {0x2, 0x1}, {0x1, 0x1}, {0x0, 0x1}, {}, {0x5, 0x1}, {0x2, 0x1}, {0x0, 0x1}, {0x3}, {0x5, 0x1}, {0x3, 0x1}, {0x2}, {0x5}, {}, {0x4, 0x1}, {0x0, 0x1}, {0x4}, {0x3}, {0x7, 0x1}, {0x1, 0x1}, {0x1, 0x1}, {0x1}, {0x4}, {0x5, 0x1}, {0x4, 0x1}, {}, {0x1}, {0x1}, {0x3, 0x1}, {0x0, 0x1}, {0x1, 0x1}, {0x2}, {0x3}, {0x3}, {0x3, 0x1}, {0x1, 0x1}, {}, {0x4, 0x1}, {0x4}], 0x1}}]}, {0x4}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x2}}}}, @m_pedit={0x30, 0x0, 0x0, 0x0, {{0xa}, {0x4}, {0x4}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x2, 0x1}}}}, @m_nat={0xe4, 0x2, 0x0, 0x0, {{0x8}, {0x7c, 0x2, 0x0, 0x1, [@TCA_NAT_PARMS={0x28, 0x1, {{0x0, 0x7927, 0x2, 0x4, 0x21}, @loopback, @loopback, 0x0, 0x1}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x2, 0x4, 0x4, 0x2, 0xfffff991}, @multicast1, @remote, 0xff}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x1, 0x1, 0x2, 0x1, 0x3}, @rand_addr=0x64010102, @rand_addr=0x64010101, 0x0, 0x1}}]}, {0x41, 0x6, "6fc3a020977aa1bae7c38ebeac11d80195d9fff53bf2c98b2f01e458cdb78cdfa4b5898c4c7331e0bb70dc4b0852e1bdee3443765993682e548a6c9943"}, {0xc}, {0xc, 0x8, {0x1, 0x1}}}}, @m_connmark={0x1088, 0xc, 0x0, 0x0, {{0xd}, {0x58, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x4, 0x7, 0xffffffffffffffff, 0x4, 0x8}, 0xfffa}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x4, 0x0, 0xffffffffffffffff, 0x3ff, 0x4}, 0x4}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0xfffffff7, 0x80000000, 0x20000000, 0x16, 0x3}}}]}, {0x1004, 0x6, "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"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x4}}}}, @m_skbedit={0xdc, 0x1d, 0x0, 0x0, {{0xc}, {0x34, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_PARMS={0x18, 0x2, {0x1, 0x2, 0x1, 0xd, 0x1}}, @TCA_SKBEDIT_PRIORITY={0x8, 0x3, {0x1, 0xd}}, @TCA_SKBEDIT_PRIORITY={0x8, 0x3, {0xc}}, @TCA_SKBEDIT_QUEUE_MAPPING={0x6, 0x4, 0x19}]}, {0x7d, 0x6, "41db8fa0efab0a0c0b826d6d84905a3d33873edb907b4cd1d63987aaada6fdf592a0cacab31240b867a4e4a7f684519a0aa47c50223c5a0eabd62ff5a5ebfe9e4a5ee55108c88ae84d1c5960eedf9ffe6dc641874939b06125f29ba2b8ec45bdfdd3ea3f3bd4b793445e1080b9323f6344b4d426b91c616f0c"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x0, 0x2}}}}]}, @TCA_CGROUP_ACT={0x128, 0x1, [@m_ife={0x124, 0x9, 0x0, 0x0, {{0x8}, {0xa8, 0x2, 0x0, 0x1, [@TCA_IFE_SMAC={0xa, 0x4, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}, @TCA_IFE_DMAC={0xa}, @TCA_IFE_SMAC={0xa}, @TCA_IFE_METALST={0x30, 0x6, [@IFE_META_PRIO={0x8, 0x3, @val=0x7f}, @IFE_META_PRIO={0x4, 0x3, @void}, @IFE_META_PRIO={0x4, 0x3, @void}, @IFE_META_TCINDEX={0x4, 0x5, @void}, @IFE_META_TCINDEX={0x4, 0x5, @void}, @IFE_META_TCINDEX={0x6, 0x5, @val=0x4}, @IFE_META_PRIO={0x4, 0x3, @void}, @IFE_META_PRIO={0x8, 0x3, @val=0x1}]}, @TCA_IFE_PARMS={0x1c, 0x1, {{0x8fc, 0xc94a, 0x10000000, 0x9a, 0x8}}}, @TCA_IFE_METALST={0x20, 0x6, [@IFE_META_TCINDEX={0x6, 0x5, @val=0x3}, @IFE_META_TCINDEX={0x6, 0x5, @val=0x8}, @IFE_META_SKBMARK={0x4, 0x1, @void}, @IFE_META_TCINDEX={0x6, 0x5, @val=0x8000}]}, @TCA_IFE_METALST={0x14, 0x6, [@IFE_META_SKBMARK={0x8, 0x1, @val=0x6}, @IFE_META_TCINDEX={0x6, 0x5, @val=0xfff3}]}]}, {0x58, 0x6, "85d90213f327eb8c3fe5d9298fd80c7119a603347476422c8b9df57834d268b3bc50c4b56c5263bb210c3d4727c872a78e44a10bfe73c57cabc1361be84f159f48c081d565b8c159d6cc2294225d8598afbd4fbd"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x1}}}}]}, @TCA_CGROUP_POLICE={0x41c, 0x2, [@TCA_POLICE_RATE={0x404, 0x2, [0x4, 0x80, 0xb9a0, 0x17e, 0xfff, 0x3ec, 0x0, 0x5, 0xe9, 0x4, 0x3, 0x7e11a242, 0x9, 0x1, 0x40, 0x8, 0x6, 0x4, 0x2, 0x2, 0x9, 0x8, 0x7, 0x0, 0x0, 0x0, 0x73b, 0x1, 0x101, 0x3, 0xd7e, 0x1, 0x0, 0x6, 0x7ff, 0xfffff7fa, 0x0, 0x1, 0x4, 0x4, 0x7, 0x4363a4ed, 0x2, 0x6, 0xc, 0x80000000, 0xe, 0x8, 0x2, 0x279, 0x91, 0x5, 0x4, 0x4, 0xf9, 0x2e9, 0x80000001, 0x0, 0x6d49, 0xa0, 0x2, 0xfffffff7, 0x14c, 0x9, 0xe, 0x1ff, 0xfffffff9, 0x95a9, 0x7, 0xc407, 0x5, 0x5, 0x1000, 0x1, 0xff, 0x6, 0x5f, 0x285, 0x1000, 0x7fffffff, 0x11d, 0x8, 0xb, 0x3, 0x368, 0x80000000, 0x200, 0x7ff, 0x66c, 0x7bb, 0x2, 0x9, 0xffffffff, 0x7fff, 0x6, 0xffff, 0x800, 0x9, 0x54, 0xffffffff, 0x2, 0xfffffffc, 0x3, 0x7fffffff, 0x4, 0x8, 0x0, 0x2, 0x1c00000, 0x13, 0x80000000, 0x0, 0x68, 0x5, 0x6, 0x1, 0x800, 0x9, 0x5, 0x7f, 0x0, 0xca0, 0x4, 0xffff8001, 0x66, 0x36c54675, 0xb, 0x4, 0x401, 0x2, 0x8e66, 0x87, 0x6, 0x800, 0x2, 0x0, 0x0, 0x401, 0x7, 0x100, 0xa7, 0x9, 0xe, 0x8, 0x7fffffff, 0x9, 0x8, 0x9, 0x9, 0x4, 0x0, 0x9, 0xffffffff, 0x3, 0x8, 0x1, 0xda, 0x4, 0x10001, 0xfffffff9, 0x6000, 0x200, 0x5, 0x240000, 0x4ab, 0x0, 0x7fff, 0x7, 0x2, 0x7, 0x400, 0x7, 0x9, 0x8, 0x80, 0xfffff2eb, 0x400, 0x7, 0xfffffbff, 0x7fffffff, 0x1ff, 0xe20, 0xdf9, 0x2, 0x39d0e986, 0x3, 0xffffffff, 0x5, 0x2, 0x0, 0xffffbf48, 0x4, 0x4, 0x7, 0x5, 0x1ff, 0x38, 0x0, 0x138, 0x9, 0x1, 0x8, 0xbd82, 0x2, 0x7fffffff, 0x10000000, 0x394ba4b5, 0x7, 0x0, 0x0, 0xffff9148, 0xffffff35, 0xffffffff, 0xe4b, 0x8, 0x7, 0x3, 0x0, 0x9, 0x90, 0x8, 0x5, 0x1fc, 0x5, 0x7, 0x1, 0x1f96000, 0x5, 0x29f8b090, 0x2, 0x0, 0x1a, 0x8, 0x5, 0xfffffffe, 0xcdc4, 0xca4, 0x7, 0x10000, 0x2, 0x1, 0x401, 0x80000001, 0xf7a, 0xffffffff, 0xfffff801, 0x5, 0x4, 0x6, 0x5, 0x3, 0x4, 0x2, 0x2, 0xb9b, 0x80000001]}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x4}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x81e}]}, @TCA_CGROUP_EMATCHES={0x288, 0x3, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0x24, 0x2, 0x0, 0x1, [@TCF_EM_IPSET={0x10, 0x1, 0x0, 0x0, {{0x9, 0x8, 0x7ff}, {0x0, 0x5}}}, @TCF_EM_IPSET={0x10, 0x3, 0x0, 0x0, {{0x6, 0x8, 0x3}, {0x2, 0x3}}}]}, @TCA_EMATCH_TREE_LIST={0x184, 0x2, 0x0, 0x1, [@TCF_EM_U32={0x1c, 0x3, 0x0, 0x0, {{0x7, 0x3, 0x3}, {0x400, 0x7, 0x9, 0x1ff}}}, @TCF_EM_IPSET={0x10, 0x3, 0x0, 0x0, {{0xc, 0x8, 0x8001}, {0x4}}}, @TCF_EM_CANID={0x14, 0x3, 0x0, 0x0, {{0xffff, 0x7, 0x8}, {{0x2, 0x1, 0x1, 0x1}, {0x1, 0x0, 0x1}}}}, @TCF_EM_META={0x68, 0x2, 0x0, 0x0, {{0x9, 0x4, 0x197}, [@TCA_EM_META_RVALUE={0x8, 0x3, [@TCF_META_TYPE_INT=0x1]}, @TCA_EM_META_HDR={0xc, 0x1, {{0x7, 0x7f}, {0x1, 0xfe}}}, @TCA_EM_META_LVALUE={0x33, 0x2, [@TCF_META_TYPE_VAR="cf808032f7e7ec", @TCF_META_TYPE_INT=0x7, @TCF_META_TYPE_VAR="c5b6", @TCF_META_TYPE_VAR="bd7d3ff925", @TCF_META_TYPE_VAR="baa56dac26e83c", @TCF_META_TYPE_VAR="5b193bae7c4b923c", @TCF_META_TYPE_INT=0x8, @TCF_META_TYPE_VAR="f6f7bb64293d1f132af5"]}, @TCA_EM_META_HDR={0xc, 0x1, {{0x1c, 0x0, 0x1}, {0x3d, 0x6, 0x2}}}, @TCA_EM_META_LVALUE={0x5, 0x2, [@TCF_META_TYPE_VAR='@']}]}}, @TCF_EM_META={0xb8, 0x2, 0x0, 0x0, {{0x100, 0x4, 0xfff4}, [@TCA_EM_META_LVALUE={0x4}, @TCA_EM_META_RVALUE={0x34, 0x3, [@TCF_META_TYPE_INT=0x7, @TCF_META_TYPE_INT=0x4, @TCF_META_TYPE_VAR="6bc5359128feb600675a", @TCF_META_TYPE_INT=0x6, @TCF_META_TYPE_VAR="2a20f11f94586413d72d", @TCF_META_TYPE_INT=0x4, @TCF_META_TYPE_INT, @TCF_META_TYPE_VAR, @TCF_META_TYPE_INT=0x2, @TCF_META_TYPE_INT=0x1]}, @TCA_EM_META_LVALUE={0x12, 0x2, [@TCF_META_TYPE_VAR="467f", @TCF_META_TYPE_INT=0x5, @TCF_META_TYPE_INT=0x3, @TCF_META_TYPE_INT]}, @TCA_EM_META_LVALUE={0x19, 0x2, [@TCF_META_TYPE_VAR="a88af5b0", @TCF_META_TYPE_INT=0x5, @TCF_META_TYPE_VAR="bc26c02b5cb4", @TCF_META_TYPE_INT=0x4, @TCF_META_TYPE_VAR="13d682", @TCF_META_TYPE_VAR]}, @TCA_EM_META_HDR={0xc, 0x1, {{0x1, 0x3, 0x1}, {0x1, 0x7}}}, @TCA_EM_META_HDR={0xc, 0x1, {{0x41f, 0x4, 0x1}, {0x4, 0x3, 0x2}}}, @TCA_EM_META_RVALUE={0x1d, 0x3, [@TCF_META_TYPE_INT=0x9, @TCF_META_TYPE_INT=0x7, @TCF_META_TYPE_INT=0x8, @TCF_META_TYPE_VAR='U', @TCF_META_TYPE_INT=0x1, @TCF_META_TYPE_INT=0xa, @TCF_META_TYPE_INT=0xa]}, @TCA_EM_META_HDR={0xc, 0x1, {{0x2, 0xc}, {0x5, 0x4, 0x1}}}]}}, @TCF_EM_IPSET={0x10, 0x1, 0x0, 0x0, {{0x0, 0x8, 0x3}, {0x4, 0x4}}}, @TCF_EM_IPSET={0x10, 0x2, 0x0, 0x0, {{0x4, 0x8, 0xc}, {0x1, 0x5}}}]}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x751c}}, @TCA_EMATCH_TREE_LIST={0xd4, 0x2, 0x0, 0x1, [@TCF_EM_CONTAINER={0x38, 0x3, 0x0, 0x0, {{0x0, 0x0, 0x4}, "aafbfb9a22398dde919d2913c00a3c26296c45be744930146f50d20c7dbde8488b33a55d9290128e16"}}, @TCF_EM_U32={0x1c, 0x2, 0x0, 0x0, {{0x5fe0, 0x3, 0x3}, {0x7, 0xffff2874, 0x3, 0xc}}}, @TCF_EM_CONTAINER={0x6c, 0x2, 0x0, 0x0, {{0x5, 0x0, 0x7}, "666cd60be98be65bdda1ee778bc0116abdb179a3321c04094de2b292072823db1951b7a90c8e82d31acbf59761adc33a426986f67ec17b7628191c947b710a0726a315bf34dd0574ab2ace587ec3908df1bdf6554710cbea04d2e5e318"}}, @TCF_EM_IPSET={0x10, 0x2, 0x0, 0x0, {{0x8, 0x8, 0x2}, {0x0, 0x5, 0xa04d193f510c4f34}}}]}]}, @TCA_CGROUP_EMATCHES={0x304, 0x3, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0x184, 0x2, 0x0, 0x1, [@TCF_EM_IPSET={0x10, 0x2, 0x0, 0x0, {{0x2, 0x8, 0x48}, {0x1, 0x2, 0x8}}}, @TCF_EM_IPT={0x24, 0x1, 0x0, 0x0, {{0x2, 0x9, 0x46}, [@TCA_EM_IPT_HOOK={0x8}, @TCA_EM_IPT_NFPROTO={0x5, 0x4, 0x5}, @TCA_EM_IPT_HOOK={0x8, 0x1, 0x2}]}}, @TCF_EM_CONTAINER={0xfc, 0x2, 0x0, 0x0, {{0xb6, 0x0, 0x10}, "07846daa04b621220cea06eccc02524f5306c7971d9198200d46c9f337deb47bf1645499e6f54cd1f1292d310b438e0329d7818e713faec0650f477689494f727a60b2a9d409bc361f6acc9085902ad4a35bc5e64ea4e68bd11a26ea0831edac2a184f2444e2fd4b2f7bc0745ccc26951f754663eaf67a374606b6316a1ba3761a98d77b824341468a5a22bf70967409f2595cef14b4e6f4c9d9ba28556b8478c6a9554f31fd45bbb10acc5542f89803d1b2f76057fd3a0892a051e8808c38b2b84e1ab2e172b3e29d8a32448176807cff328ae61452b456b82c499d1a1f060f5c53956a597e6d1959ff8922970264f9"}}, @TCF_EM_CANID={0x14, 0x1, 0x0, 0x0, {{0xbf}, {{0x1, 0x1, 0x0, 0x1}, {0x0, 0x0, 0x1}}}}, @TCF_EM_META={0x3c, 0x1, 0x0, 0x0, {{0x8}, [@TCA_EM_META_LVALUE={0x2e, 0x2, [@TCF_META_TYPE_INT=0x5, @TCF_META_TYPE_VAR="9b8d", @TCF_META_TYPE_INT=0xd994, @TCF_META_TYPE_VAR="46d502", @TCF_META_TYPE_INT=0x9, @TCF_META_TYPE_INT=0x6, @TCF_META_TYPE_INT, @TCF_META_TYPE_VAR="cfa7b47a", @TCF_META_TYPE_INT=0x8, @TCF_META_TYPE_VAR="5dda05cc2cc7963989"]}]}}]}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0xbc}}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x1}}, @TCA_EMATCH_TREE_LIST={0x164, 0x2, 0x0, 0x1, [@TCF_EM_CMP={0x18, 0x2, 0x0, 0x0, {{0xcfa9, 0x1, 0x7}, {0xd2, 0x3, 0x6, 0xa, 0x0, 0x2, 0x1}}}, @TCF_EM_U32={0x1c, 0x2, 0x0, 0x0, {{0x3, 0x3, 0x40}, {0x9, 0x7, 0xb47, 0x3}}}, @TCF_EM_CANID={0x14, 0x3, 0x0, 0x0, {{0x26, 0x7, 0x7}, {{0x0, 0x1, 0x1, 0x1}, {0x4, 0x0, 0x1, 0x1}}}}, @TCF_EM_CONTAINER={0x50, 0x1, 0x0, 0x0, {{0x2, 0x0, 0x7}, "d5cca5f61b4a7b63b6d90b68ae27de7847b5c1ba7608e6c5277f161e3dc3bc1f00891f422f5caee17cc8a79651bdf16bdce58e0d85074b4cafcf7332a57ca3f352"}}, @TCF_EM_IPSET={0x10, 0x1, 0x0, 0x0, {{0x2, 0x8, 0x1ff}, {0x3, 0x5, 0x1}}}, @TCF_EM_CMP={0x18, 0x2, 0x0, 0x0, {{0xb506, 0x1, 0x1}, {0x2000, 0xe25, 0x6, 0x6, 0x7, 0x1}}}, @TCF_EM_CONTAINER={0x78, 0x2, 0x0, 0x0, {{0x2, 0x0, 0x5}, "d34bd8aa158f7a39f0b29529f13485123be269d24c379d2be6edd1dd8e1dc5f1e57cc773cdd2f53fe32dafddbef4417822c77fb689ca864742a15a237d7ade401418b68de7ad0136801e3ce9c0bf7c6e77f9eb9693f51989ce3d5aeeec468f6a9e3b60236784035549"}}, @TCF_EM_IPT={0x28, 0x1, 0x0, 0x0, {{0x1}, [@TCA_EM_IPT_HOOK={0x8, 0x1, 0x3}, @TCA_EM_IPT_NFPROTO={0x5, 0x4, 0x1}, @TCA_EM_IPT_MATCH_NAME={0xb}]}}]}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x3}}]}, @TCA_CGROUP_EMATCHES={0x10c, 0x3, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0x108, 0x2, 0x0, 0x1, [@TCF_EM_IPT={0xc0, 0x1, 0x0, 0x0, {{0xa40, 0x9, 0x18}, [@TCA_EM_IPT_HOOK={0x8, 0x1, 0x3}, @TCA_EM_IPT_MATCH_DATA={0x95, 0x5, "3d4c1b21f7e86e938e9a7cee5551045bfac456597d9f6d48f05791ea6a5d8ee114b6b530c7bd5dbe194abf467be9186dceb69116b9495ea059b378d2414fed08fe26f6d29052c2c4bb3e9cb8c0c040c12cae21149234a7ab7819a0ea7a536f5ab854391b8b561909cdba248d1f3ab5d4644c4dbf7b6528f6e78752b842ddc5f045b3be11da182b83c57a0bf9f38dd1782a"}, @TCA_EM_IPT_MATCH_REVISION={0x5, 0x3, 0x7}, @TCA_EM_IPT_MATCH_NAME={0xb}]}}, @TCF_EM_IPT={0xc, 0x1, 0x0, 0x0, {{0x0, 0x9, 0x1}}}, @TCF_EM_META={0x24, 0x3, 0x0, 0x0, {{0xa, 0x4, 0x3}, [@TCA_EM_META_HDR={0xc, 0x1, {{0xff, 0x9, 0x1}, {0x3, 0x9, 0x1}}}, @TCA_EM_META_LVALUE={0xc, 0x2, [@TCF_META_TYPE_VAR, @TCF_META_TYPE_INT, @TCF_META_TYPE_INT=0xa]}]}}, @TCF_EM_CANID={0x14, 0x1, 0x0, 0x0, {{0x200, 0x7, 0x9}, {{0x4, 0x1}, {0x4}}}}]}]}, @TCA_CGROUP_POLICE={0xc, 0x2, [@TCA_POLICE_AVRATE={0x8, 0x4, 0x7}]}]}}]}, 0x3648}}, 0x40) close(0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x14, 0x1b, &(0x7f0000000500)=ANY=[@ANYBLOB="180000007f00fa000400b6000000000018190000", @ANYRES32=r2, @ANYBLOB="00000000000000001859000009000000000000000000000018280000", @ANYRES32=r2, @ANYBLOB="0000000005000000b7080000000000007b8af8ff00000000b7080000090000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70500000800000085000000a50000001842000001000000000000000000000018220000", @ANYRES32=r2, @ANYBLOB="000000000000000085200000030000009500000000000000"], &(0x7f0000000180)='GPL\x00', 0xd1f, 0xa7, &(0x7f0000000700)=""/167, 0x1e00, 0x48, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f00000008c0)={0x2, 0x4, 0x0, 0x1000}, 0x10, 0x0, 0xffffffffffffffff, 0xa, &(0x7f0000000900)=[r2, r2, 0xffffffffffffffff], &(0x7f0000000940)=[{0x4, 0xffff, 0x7, 0x9}, {0x0, 0x4, 0xd, 0xa}, {0x1, 0x2, 0x2, 0x8}, {0x3, 0x4, 0xa, 0x8}, {0x0, 0x2, 0x9, 0x8}, {0x1, 0x5, 0xf}, {0x3, 0x5, 0xe, 0x4}, {0x3, 0x2, 0x6, 0x7}, {0x1, 0x2, 0x7, 0x6ee4c8c059e94413}, {0x3, 0x5, 0x3}], 0x10, 0x6}, 0x94) sendmsg$nl_route_sched(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=@delchain={0x24, 0x11, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x2, 0x9}, {0x5, 0x1}, {0x6}}}, 0x24}}, 0x400c810) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000440)={&(0x7f00000003c0)='kmem_cache_free\x00'}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x1e, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f66f63bb85000000430000"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0xae, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00'}, 0x10) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r10, 0x8943, &(0x7f0000000100)={'macvtap0\x00', @link_local}) 888.259791ms ago: executing program 1 (id=2948): r0 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'gre0\x00', 0x0}) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x1, 0x4, 0x7fe2, 0x1}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r3}, 0x10) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0xf1, &(0x7f0000000240)={&(0x7f0000000500)=@newqdisc={0x38, 0x24, 0x3fe3aa0262d8c583, 0x0, 0xf1ffffff, {0x0, 0x0, 0x0, r1, {0x0, 0xf1ff}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hhf={{0x8}, {0xc, 0x2, [@TCA_HHF_HH_FLOWS_LIMIT={0x4}]}}]}, 0x38}}, 0x0) 654.79312ms ago: executing program 1 (id=2949): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000002d00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x66, '\x00', 0x0, @fallback=0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10) r1 = socket$unix(0x1, 0x5, 0x0) bind$unix(r1, &(0x7f00000002c0)=@file={0x1, '.\x00'}, 0x6e) (fail_nth: 4) 645.847751ms ago: executing program 1 (id=2950): mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x2, 0xc3072, 0xffffffffffffffff, 0x200000) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000036000/0x2000)=nil, &(0x7f0000594000/0x4000)=nil, &(0x7f0000f36000/0x2000)=nil, &(0x7f0000918000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000c12000/0x2000)=nil, &(0x7f000003f000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0, 0x30}, 0x68) unshare(0x62040200) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x20, 0x3, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000000a2347d47be9e"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x99ee}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x6, 0x16, &(0x7f00000006c0)=ANY=[@ANYRES32=r0, @ANYRES32, @ANYBLOB="0000000000000000b7080000ff0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000100000085000000820000007fe307000004000080e40200fdffffff18110000", @ANYRES32=0x1, @ANYBLOB="0000000000000000b7080000010000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000020000008500000082000000185000000700"/80], &(0x7f0000000100)='syzkaller\x00', 0x400080, 0x62, &(0x7f0000000300)=""/98, 0x40f00, 0x6a, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000140)={0x4, 0x1}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x6, &(0x7f0000000240)=[0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0x1], &(0x7f00000003c0)=[{0x3, 0x3, 0x1, 0x3}, {0x2, 0x2, 0x5, 0xc}, {0x0, 0x2, 0x9, 0x1}, {0x1, 0x5, 0x0, 0x9}, {0x1, 0x5, 0xb, 0xc}, {0x1, 0x4, 0x9, 0x1}], 0x10, 0x80}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x10001, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f00000003c0)='sched_switch\x00', r1}, 0x10) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000002380)={r1, 0x0, 0x2d, 0x0, @val=@netfilter={0x0, 0x4, 0x600, 0x1}}, 0x20) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000001c0)='./file2\x00', 0x404, &(0x7f0000000bc0)={[{@errors_remount}, {@jqfmt_vfsv1}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x68}}, {@stripe={'stripe', 0x3d, 0xb}}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}, {@dax_inode}]}, 0x1, 0x42f, &(0x7f0000000d80)="$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") open(&(0x7f00000001c0)='./file1\x00', 0x14927e, 0x20) open(&(0x7f0000000080)='./file1\x00', 0x0, 0x86) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000007000000080000000800000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000a80)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000100000000000000fe0018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000}, 0x94) r3 = socket$can_raw(0x1d, 0x3, 0x1) getsockopt$CAN_RAW_FD_FRAMES(r3, 0x65, 0x5, 0x0, &(0x7f0000000600)) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000180)='./bus\x00', 0xe, &(0x7f00000004c0)={[{@resuid}, {@init_itable}, {@stripe}, {@noblock_validity}]}, 0x3, 0x451, &(0x7f0000000f80)="$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") r4 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) getdents(r4, 0x0, 0x0) mknod$loop(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x1) creat(&(0x7f0000000e00)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) lseek(r4, 0x7ff, 0x1) getdents64(r4, 0x0, 0x10) 643.435701ms ago: executing program 0 (id=2951): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000002d00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x66, '\x00', 0x0, @fallback=0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10) r1 = socket$unix(0x1, 0x5, 0x0) bind$unix(r1, &(0x7f00000002c0)=@file={0x7e, '.\x00'}, 0x6e) 623.399114ms ago: executing program 0 (id=2952): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x85, 0x7, 0x7ffc0001}]}) syz_open_dev$hidraw(&(0x7f0000000700), 0x10, 0x400) r0 = socket$packet(0x11, 0xa, 0x300) ioctl$int_in(r0, 0x5452, &(0x7f0000000080)=0xa) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r0, {0x2}}, './file0\x00'}) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000, 0xc, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xa0000000}, 0x94) r3 = openat(0xffffffffffffff9c, 0x0, 0x42, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000009c0000000b"], 0x50) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020047b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000020000085000000c300000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x24, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000000)='sched_switch\x00', r5}, 0x18) socket$nl_rdma(0x10, 0x3, 0x14) r6 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x7}, 0x18) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000340)={@cgroup=r1, 0x35, 0x0, 0x6, 0x0, 0x0, 0x0, &(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0], &(0x7f00000001c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000300), 0x0}, 0xa2) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000380)=ANY=[@ANYRES32=r6, @ANYRES32, @ANYRES32, @ANYBLOB, @ANYRES32, @ANYRESHEX, @ANYRES64=r7], 0x20) bpf$BPF_PROG_ATTACH(0x8, &(0x7f00000005c0)=ANY=[@ANYRES32=r3, @ANYRES32=r5, @ANYBLOB='.\x00\x00\x00\t\x00\x00\x00', @ANYRES32=r2, @ANYBLOB, @ANYRES32=r3, @ANYBLOB="b4a0d0dc2b82da19dbb587b4f1dfbeea5f0cb7149238ebb899317ce63bce820f7ff7bea56875dd96aa791cadb17592fa4d287ff4c8cc8879e1f5", @ANYRES64=r7], 0x20) sendmmsg$inet(0xffffffffffffffff, &(0x7f00000017c0)=[{{&(0x7f0000000040)={0x2, 0x4e1c, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0, 0x0, &(0x7f0000000000)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @empty, @multicast1}}}], 0x20}}], 0x1, 0x0) r8 = socket$packet(0x11, 0x3, 0x300) r9 = socket$nl_route(0x10, 0x3, 0x0) r10 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f00000000c0), r10) getsockname$packet(r10, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000005c0)=0x56) sendmsg$nl_route(r9, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000002c0)=@newlink={0x40, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, r11, 0x49801}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @sit={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x8, 0x3, @remote}, @IFLA_IPTUN_ENCAP_TYPE={0x6, 0xf, 0x3}]}}}]}, 0x40}}, 0x0) sendto$packet(r8, &(0x7f0000000400)="05d936277c6f5422007f83477ca1b278e3e4018a34e7bfd3de1a00ad6762646c95c716727eb53bcc", 0x28, 0x40880, &(0x7f0000000200)={0x11, 0x86dd, r11, 0x1, 0x4, 0x6, @local}, 0x14) r12 = syz_genetlink_get_family_id$fou(&(0x7f0000000540), r3) sendmsg$FOU_CMD_ADD(r10, &(0x7f00000006c0)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000580)={&(0x7f0000000640)={0x64, r12, 0x2, 0x70bd27, 0x25dfdbfc, {}, [@FOU_ATTR_LOCAL_V6={0x14, 0x7, @remote}, @FOU_ATTR_LOCAL_V4={0x8, 0x6, @dev={0xac, 0x14, 0x14, 0x24}}, @FOU_ATTR_REMCSUM_NOPARTIAL={0x4}, @FOU_ATTR_PEER_V4={0x8, 0x8, @local}, @FOU_ATTR_AF={0x5, 0x2, 0x2}, @FOU_ATTR_REMCSUM_NOPARTIAL={0x4}, @FOU_ATTR_IPPROTO={0x5, 0x3, 0x32}, @FOU_ATTR_PEER_V6={0x14, 0x9, @remote}]}, 0x64}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000001) r13 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="06000000040000000800000008"], 0x48) openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) r14 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xc, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r13, @ANYBLOB="0000000000000000b7080000000000007b8af81001000000bfa20000001d00000000000000000008000000b7040000000000008500000003000000950000000009053f55abc5d909fb4daa17c0b7c0871fc585825c0fc3c4745aa30080b7d573b95eb83f6365a47f5761542bf4c748d342d4b98d4c822c03d30afc97f4f9a43d46723512df5ddda7ae151fd114e7d7a9d42dac861c7d06dc6a2a59f493831d1be829564b1bb9df2be7f16d513e5a3a37a605e8e58f81df0ab82ee5355c7016270905577426c2d099"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f00000005c0)='sys_enter\x00', r14}, 0x10) mlockall(0x2) 593.853017ms ago: executing program 3 (id=2953): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="1b000000000000"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0x7, &(0x7f0000000240)=ANY=[@ANYRES32=r0, @ANYBLOB="0000000000000000b702000000000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r1, 0x0, 0x1}, 0x18) r2 = syz_io_uring_setup(0x49a, &(0x7f0000000400)={0x0, 0x79af, 0x3180, 0x8000, 0x400246}, &(0x7f0000000340)=0x0, &(0x7f00000006c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, 0x0, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f00000002c0)=@IORING_OP_MSG_RING={0x28, 0x0, 0x0, r2, 0x0, 0x0}) io_uring_enter(r2, 0x4c6e, 0xc67a, 0x8, 0x0, 0x0) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000fc0)=@raw={'raw\x00', 0x8, 0x3, 0x4d8, 0x0, 0x11, 0x148, 0x0, 0x0, 0x440, 0x2a8, 0x2a8, 0x440, 0x2a8, 0x3, 0x0, {[{{@ip={@rand_addr=0x64010102, @empty, 0xff, 0x100000100, 'team0\x00', 'batadv_slave_1\x00', {0xff}, {0xff}, 0x29, 0x2, 0x40}, 0x0, 0x2f8, 0x340, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'ip_vti0\x00', {0x0, 0x0, 0x3f, 0x0, 0x88000000, 0x3, 0x7}}}, @common=@unspec=@bpf1={{0x230}, @pinned={0x1, 0x0, 0x0, './file0\x00'}}]}, @unspec=@CT0={0x48}}, {{@ip={@multicast2, @empty, 0x0, 0x0, 'vlan0\x00', 'netdevsim0\x00'}, 0x0, 0xc0, 0x100, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@inet=@set2={{0x28}, {{0x2, 0x1, 0x3}}}]}, @common=@inet=@LOG={0x40, 'LOG\x00', 0x0, {0x4f, 0x7, "72f6daeff0a9c6294e211d2d88fe6dcff5d0e552201da3b7a1fdb30dcb59"}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x538) socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$bt_l2cap_L2CAP_LM(0xffffffffffffffff, 0x6, 0x3, &(0x7f00000003c0), &(0x7f0000000480)=0x4) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f00000001c0)={'erspan0\x00', &(0x7f0000000040)={'tunl0\x00', 0x0, 0x10, 0x700, 0x5, 0x42c, {{0x2e, 0x4, 0x3, 0x0, 0xb8, 0x67, 0x0, 0x7, 0x29, 0x0, @local, @broadcast, {[@ra={0x94, 0x4}, @end, @timestamp_addr={0x44, 0x44, 0xc, 0x1, 0x8, [{@multicast2, 0x7}, {@local, 0x7}, {@broadcast, 0xffffffff}, {@remote, 0x8}, {@dev={0xac, 0x14, 0x14, 0x29}, 0x1000}, {@loopback, 0xffff}, {@rand_addr=0x64010100, 0xbc2}, {@multicast2, 0x3}]}, @rr={0x7, 0x23, 0x34, [@multicast2, @broadcast, @local, @remote, @loopback, @multicast1, @local, @dev={0xac, 0x14, 0x14, 0x35}]}, @lsrr={0x83, 0x1f, 0xe3, [@empty, @rand_addr=0x64010100, @multicast2, @private=0xa010101, @local, @multicast1, @remote]}, @timestamp={0x44, 0x18, 0xe0, 0x0, 0xc, [0x3, 0xec, 0xfffffff7, 0x8, 0x8]}]}}}}}) 545.521723ms ago: executing program 3 (id=2954): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000000)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x50) munmap(&(0x7f0000001000/0x3000)=nil, 0x3000) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r0}, &(0x7f00000000c0), &(0x7f0000000100)}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000300)={r0}, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000880)={0x11, 0x0, 0x0, &(0x7f0000000240)='GPL\x00', 0x4, 0x1009, &(0x7f0000002500)=""/4105, 0x0, 0x68}, 0x94) 544.941683ms ago: executing program 0 (id=2955): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000240), 0x3af4701e) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28012, r0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) syz_clone(0x0, 0x0, 0x43, 0x0, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f00000003c0)='smaps\x00') r1 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_int(r1, 0x0, 0xc, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) r2 = creat(&(0x7f0000000080)='./file0/file1\x00', 0x90) r3 = socket$netlink(0x10, 0x3, 0x10) r4 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r4, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r4, 0x1, 0x8, &(0x7f0000000000)=0x80, 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r4, 0x10e, 0x4, &(0x7f0000000180)=0x800, 0x4) r5 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0xf, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001580)={&(0x7f0000000180)='kmem_cache_free\x00', r6}, 0x10) sendmsg$DEVLINK_CMD_RATE_NEW(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000100)=ANY=[@ANYBLOB="121acc7900a7aed5dc1648c4dcca6c3a147e6b814dc64a0325038c00086ca6e4f2ff9597", @ANYRES16=r5, @ANYBLOB="010000000000fbdbdf2525000000"], 0x14}, 0x1, 0x0, 0x0, 0x41}, 0x0) write$cgroup_type(r2, &(0x7f0000000000), 0xd4ba103) link(&(0x7f00000000c0)='./file0/file1\x00', &(0x7f0000000180)='./file1\x00') perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$kcm(0xa, 0x2, 0x0) socket(0xf, 0x800, 0x2) socket$nl_audit(0x10, 0x3, 0x9) syz_mount_image$ext4(0x0, &(0x7f0000000140)='./file0\x00', 0x2000000, 0x0, 0x0, 0x0, &(0x7f0000000000)) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x2, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000005a0000008500000022000000180100002020702500000000002020200100000000000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007300000095"], 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020097b1af8ff00000000bfa100000000000007010000b8ffffffb702000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='9p_protocol_dump\x00', r7}, 0x10) 544.542433ms ago: executing program 3 (id=2956): r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_mreq(r0, 0x29, 0x1b, &(0x7f0000000100)={@remote}, 0x14) r1 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000280)={'syz_tun\x00', 0x0}) bind$packet(r1, &(0x7f0000000080)={0x11, 0x800, r2, 0x1, 0x0, 0x6, @random="518440db9de1"}, 0x14) sendmsg$NFT_BATCH(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={0x0, 0xe4}, 0x1, 0x0, 0x0, 0x2404c801}, 0x20050840) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r3, @ANYBLOB="0000000000000000b704000008000000850000007800000095"], 0x0, 0x6, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kfree\x00', r4}, 0x10) r5 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r5, 0x0, 0x60, &(0x7f0000000200)={'filter\x00', 0x6002, 0x4, 0x418, 0x220, 0x220, 0xf0, 0x330, 0x220, 0x330, 0x4, 0x0, {[{{@uncond, 0xc0, 0xf0}, @unspec=@CONNMARK={0x30, 'CONNMARK\x00', 0x1, {0x100007, 0x1ff, 0x11}}}, {{@arp={@remote, @remote, 0x0, 0x0, 0x3, 0x10, {@empty, {[0x0, 0x0, 0x0, 0x0, 0x0, 0xff]}}, {@empty, {[0x0, 0x0, 0xff]}}, 0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 'veth1_vlan\x00', 'nicvf0\x00'}, 0xc0, 0x130}, @unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0xa, 0x1, 0x2, 0x0, 0x0, "13b911e5284250ec81c17349113a3cfb44cacec1b17c5169103aa911ccde13af46942ffe283747525f02c26cacacf4224636c02166494a749e5e3abbd96793dd"}}}, {{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @mac=@link_local, @local, @local, 0xf, 0x5fa0832aa5fc72f3}}}], {{'\x00', 0xc0, 0xe8}, {0x28, '\x00', 0x0, 0xfffffffb}}}}, 0x468) setsockopt$inet6_mreq(r0, 0x29, 0x1b, &(0x7f0000000280)={@remote}, 0x14) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000002040)=ANY=[@ANYBLOB="1e0000000000000005000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x41000}, 0x94) r7 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r7, 0x29, 0x35, &(0x7f0000000000)=0x8000, 0x4) setsockopt$inet6_IPV6_HOPOPTS(r7, 0x29, 0x36, &(0x7f0000000140)=ANY=[], 0x8) bind$inet6(r7, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$inet6_int(r7, 0x29, 0xb, &(0x7f0000000400)=0x6, 0x4) recvmmsg(r7, &(0x7f0000000e00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000a80)=""/203, 0xcb}, 0x8357}], 0x1, 0x2, 0x0) sendto$inet6(r7, 0x0, 0x0, 0x0, &(0x7f0000000040)={0xa, 0x4e20, 0x223, @mcast1}, 0x1c) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000540)='syzkaller\x00', 0x3, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r8}, 0x10) close(r0) 286.026714ms ago: executing program 1 (id=2957): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1, 0x0, 0x1000000000000008}, 0x18) add_key(&(0x7f0000000280)='rxrpc\x00', 0x0, &(0x7f0000000100)="01000000020000000002006bb55a2a630bf7c045f94cd977", 0x18, 0xffffffffffffffff) 285.643684ms ago: executing program 1 (id=2958): timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0xd3283d0368e269b3, 0x8031, 0xffffffffffffffff, 0x0) mknodat(0xffffffffffffff9c, &(0x7f0000000140)='./file4\x00', 0x11c0, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f00000001c0)='./file4\x00', 0x1, 0x20) openat2$dir(0xffffffffffffff9c, &(0x7f0000000080)='./file4\x00', &(0x7f00000000c0)={0x8a001, 0x0, 0x20}, 0x18) openat2$dir(0xffffffffffffff9c, &(0x7f0000000080)='./file4\x00', &(0x7f00000002c0)={0x40000, 0x20, 0x22}, 0x18) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r1, &(0x7f0000003580)={0x2, 0x0, @dev}, 0x10) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file2\x00', 0x2200000, &(0x7f00000005c0)={[{@noblock_validity}, {}, {@sysvgroups}, {@norecovery}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@orlov}, {@nogrpid}, {@noauto_da_alloc}, {@user_xattr}]}, 0x3, 0x570, &(0x7f0000000c00)="$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") r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x11, 0x7, &(0x7f0000000300)=ANY=[@ANYBLOB="180000000000000000000000000000001811", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000004000000850000008600000095"], &(0x7f0000000000)='GPL\x00', 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f00000005c0)='kmem_cache_free\x00', r3}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0xfe, 0x0, 0x7ffc9ffe}]}) chmod(&(0x7f0000000100)='./file0\x00', 0x1c8) bind$inet(r1, &(0x7f0000000040)={0x2, 0x4e21, @empty}, 0x10) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000100), 0x4) mknod$loop(&(0x7f0000000080)='./file0\x00', 0x100000000000600d, 0x1) r4 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, 0x2}, 0x94) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x18, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r6 = socket$netlink(0x10, 0x3, 0x0) getsockopt$sock_cred(r6, 0x1, 0x11, &(0x7f0000000040)={0x0, 0x0}, &(0x7f00000000c0)=0xc) sendmsg$nl_generic(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000380)=ANY=[@ANYBLOB="280000001800010000000000000000000200000008000000e00000020c00088008000c00", @ANYRES32=r8, @ANYBLOB="5a6a677a7c8b530af7ab97d050e978803c789e2bb052dde4947726c427c15ed66a0c77a02ad8bf18c368bdb7cc59bb8071b3ae0ba5d0ca5560f0c68624abfab9db85839ac88dcceb30e960bc193bfb8ca3dc25bf31ed9fcc7e"], 0x28}}, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r4, 0xc018937b, &(0x7f0000000180)={{0x1, 0x1, 0x18, r1, {r8, 0xee01}}, './file0\x00'}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r5}, 0x10) ioctl$BLKTRACESETUP(r4, 0xc0481273, &(0x7f0000000000)={'\x00', 0xc, 0x202, 0x803fe, 0x1, 0x800, r7}) connect$inet(r1, &(0x7f0000000140)={0x2, 0x4e21, @empty}, 0x10) 0s ago: executing program 0 (id=2959): timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0xd3283d0368e269b3, 0x8031, 0xffffffffffffffff, 0x0) mknodat(0xffffffffffffff9c, &(0x7f0000000140)='./file4\x00', 0x11c0, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f00000001c0)='./file4\x00', 0x1, 0x20) openat2$dir(0xffffffffffffff9c, &(0x7f0000000080)='./file4\x00', &(0x7f00000000c0)={0x8a001, 0x0, 0x20}, 0x18) openat2$dir(0xffffffffffffff9c, &(0x7f0000000080)='./file4\x00', &(0x7f00000002c0)={0x40000, 0x20, 0x22}, 0x18) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r1, &(0x7f0000003580)={0x2, 0x0, @dev}, 0x10) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file2\x00', 0x2200000, &(0x7f00000005c0)={[{@noblock_validity}, {}, {@sysvgroups}, {@norecovery}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@orlov}, {@nogrpid}, {@noauto_da_alloc}, {@user_xattr}]}, 0x3, 0x570, &(0x7f0000000c00)="$eJzs3V9rW+UfAPDvSdOt+/P7rYMx1Asp7MLJXLq2/pkgbF6KDgd6P0ObldF0GU061jpwu3A33sgQRByIL8B7L4dvwFcx0MGQUfTCm8pJT7qsTdqmy0zn+XzgtM9zzkme8+T5k+/JOSEB5NZY+qcQ8XJEfJ1EHGnbVoxs49jafiuPb06nSxKrq5/8kUSSrWvtn2T/D2WZlyLily8jThU2l1tfWp4rV6uVhSw/3pi/Nl5fWj59Zb48W5mtXJ2cmjr71tTku++83be6vn7xr+8+vv/B2a9OrHz708Ojd5M4H4ezbe31eFqxlyJutWfGYix7TYbj/IYdJ3p51hdAMugDYFeGsh4+HOkccCSGeuvvwAvsi4hYBXIqMf4hp1pxQOvcvvt58H/To/cjYqRT/Ytrn43ESPPc6OBK8tSZUXq+O9qH8tMyfv793t10iS0/h1iL1QD65dbtiDhTLG6e/5Js/tu9M80Pj7e2sYy8vf/AIN1P4583OsU/hfX4JzrEP4c6jN3d2H78Fx72oZiu0vjvvY7x7/rUNTqU5f7XjPmGk8tXqpUzEfH/iDgZw/vT/FbXc86uPFjttq09/kuXtPxWLJgdx8Pi/qcfM1NulJ+lzu0e3Y54pbhe/yQ2zf8jzVh3Y/unr8fFHZZxvHLv1W7btq9/u/5HwKs/RrzWsf2fXNFKtr4+Od7sD+OtXrHZn3eO/9qt/N7q339p+x/cuv6jSfv12nrvZfww8nel27bd9v99yafN9L5s3Y1yo7EwEbEv+Wjz+sknj23lW/un9T95Yuv5r1P/PxARn+2w/neO3em6615o/5me2r/3xIMPP/++W/k7a/83m6mT2ZqdzH87PcBnee0AAAAAAABgrylExOFICqX1dKFQKq3d33EsDhaqtXrj1OXa4tWZaH5XdjSGC60r3Ufa7oeYyO6HbeUnN+SnIuJoRHwzdKCZL03XqjODrjwAAAAAAAAAAAAAAAAAAADsEYe6fP8/9dvQoI8OeO785Dfk17bjvx+/9ATsSd7/Ib+Mf8gv4x/yy/iH/DL+Ib+Mf8gv4x/yy/gHAAAAAAAAAAAAAAAAAAAAAAAAAACAvrp44UK6rK48vjmd5meuLy3O1a6fnqnU50rzi9Ol6drCtdJsrTZbrZSma/PbPV+1Vrs2MRmLN8YblXpjvL60fGm+tni1cenKfHm2cqky/K/UCgAAAAAAAAAAAAAAAAAAAF4s9aXluXK1WlmQ6Jo4F3viMHadSLZr5XNZZ9hVEcXBV1DiOSQGPDEBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQJt/AgAA//96TTPP") r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x11, 0x7, &(0x7f0000000300)=ANY=[@ANYBLOB="1800"/15, @ANYRES32=r2, @ANYBLOB="0000000000000000b702000004000000850000008600000095"], &(0x7f0000000000)='GPL\x00', 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f00000005c0)='kmem_cache_free\x00', r3}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0xfe, 0x0, 0x7ffc9ffe}]}) chmod(&(0x7f0000000100)='./file0\x00', 0x1c8) bind$inet(r1, &(0x7f0000000040)={0x2, 0x4e21, @empty}, 0x10) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000100), 0x4) mknod$loop(&(0x7f0000000080)='./file0\x00', 0x100000000000600d, 0x1) r4 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, 0x2}, 0x94) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x18, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r6 = socket$netlink(0x10, 0x3, 0x0) getsockopt$sock_cred(r6, 0x1, 0x11, &(0x7f0000000040)={0x0, 0x0}, &(0x7f00000000c0)=0xc) sendmsg$nl_generic(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000380)=ANY=[@ANYBLOB="280000001800010000000000000000000200000008000000e00000020c00088008000c00", @ANYRES32=r8, @ANYBLOB="5a6a677a7c8b530af7ab97d050e978803c789e2bb052dde4947726c427c15ed66a0c77a02ad8bf18c368bdb7cc59bb8071b3ae0ba5d0ca5560f0c68624abfab9db85839ac88dcceb30e960bc193bfb8ca3dc25bf31ed9fcc7e"], 0x28}}, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r4, 0xc018937b, &(0x7f0000000180)={{0x1, 0x1, 0x18, r1, {r8, 0xee01}}, './file0\x00'}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r5}, 0x10) ioctl$BLKTRACESETUP(r4, 0xc0481273, &(0x7f0000000000)={'\x00', 0xc, 0x202, 0x803fe, 0x1, 0x800, r7}) connect$inet(r1, &(0x7f0000000140)={0x2, 0x4e21, @empty}, 0x10) kernel console output (not intermixed with test programs): 6915][ T8420] SELinux: failed to load policy [ 153.616520][ T8424] loop3: detected capacity change from 0 to 1024 [ 153.623812][ T8424] EXT4-fs: Ignoring removed orlov option [ 153.639900][ T8423] SELinux: security_context_str_to_sid (Ð-šXܘ7.H\¹ÿ %ºu@) failed with errno=-22 [ 153.664609][ T8405] loop2: detected capacity change from 0 to 1024 [ 153.709952][ T8405] EXT4-fs: Ignoring removed orlov option [ 153.754604][ T8429] netlink: 'syz.0.1612': attribute type 1 has an invalid length. [ 153.754623][ T8429] netlink: 'syz.0.1612': attribute type 1 has an invalid length. [ 153.754633][ T8429] netlink: 'syz.0.1612': attribute type 1 has an invalid length. [ 153.755501][ T8429] macvtap0: refused to change device tx_queue_len [ 153.766197][ T8405] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 153.905466][ T3317] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 153.947057][ T8443] FAULT_INJECTION: forcing a failure. [ 153.947057][ T8443] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 153.947157][ T8443] CPU: 0 UID: 0 PID: 8443 Comm: syz.1.1617 Not tainted syzkaller #0 PREEMPT(voluntary) [ 153.947184][ T8443] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 153.947198][ T8443] Call Trace: [ 153.947215][ T8443] [ 153.947224][ T8443] __dump_stack+0x1d/0x30 [ 153.947251][ T8443] dump_stack_lvl+0x95/0xd0 [ 153.947275][ T8443] dump_stack+0x15/0x1b [ 153.947298][ T8443] should_fail_ex+0x265/0x280 [ 153.947324][ T8443] should_fail+0xb/0x20 [ 153.947359][ T8443] should_fail_usercopy+0x1a/0x20 [ 153.947448][ T8443] _copy_from_user+0x1c/0xb0 [ 153.947478][ T8443] set_user_sigmask+0x61/0x190 [ 153.947524][ T8443] do_epoll_pwait+0x2b/0x150 [ 153.947559][ T8443] __x64_sys_epoll_pwait+0x17d/0x1b0 [ 153.947634][ T8443] ? ksys_write+0x192/0x1a0 [ 153.947654][ T8443] x64_sys_call+0x153d/0x3000 [ 153.947678][ T8443] do_syscall_64+0xca/0x2b0 [ 153.947787][ T8443] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 153.947811][ T8443] RIP: 0033:0x7f53d715f749 [ 153.947827][ T8443] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 153.947845][ T8443] RSP: 002b:00007f53d5bc7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000119 [ 153.947869][ T8443] RAX: ffffffffffffffda RBX: 00007f53d73b5fa0 RCX: 00007f53d715f749 [ 153.947962][ T8443] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffffffffffffffff [ 153.947974][ T8443] RBP: 00007f53d5bc7090 R08: 0000200000000180 R09: 0000000000000008 [ 153.947985][ T8443] R10: 00000000cf800000 R11: 0000000000000246 R12: 0000000000000001 [ 153.947997][ T8443] R13: 00007f53d73b6038 R14: 00007f53d73b5fa0 R15: 00007fff3f2dbe58 [ 153.948016][ T8443] [ 154.156615][ T8452] loop1: detected capacity change from 0 to 1024 [ 154.157231][ T8452] EXT4-fs (loop1): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 154.157255][ T8452] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 154.158004][ T8452] JBD2: no valid journal superblock found [ 154.158018][ T8452] EXT4-fs (loop1): Could not load journal inode [ 154.162395][ T8452] SELinux: security_context_str_to_sid (Ð-šXܘ7.H\¹ÿ %ºu@) failed with errno=-22 [ 154.240846][ T8456] loop1: detected capacity change from 0 to 1024 [ 154.248604][ T8455] SELinux: security_context_str_to_sid (Ð-šXܘ7.H\¹ÿ %ºu@) failed with errno=-22 [ 154.260054][ T3318] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 154.260430][ T8456] EXT4-fs error (device loop1): ext4_orphan_get:1417: comm syz.1.1623: bad orphan inode 134217728 [ 154.281464][ T8456] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 154.327312][ T8456] 8021q: adding VLAN 0 to HW filter on device bond0 [ 154.337823][ T8456] 8021q: adding VLAN 0 to HW filter on device team0 [ 154.346426][ T8463] openvswitch: netlink: Missing key (keys=40, expected=80) [ 154.360492][ T8464] openvswitch: netlink: Missing key (keys=40, expected=80) [ 154.371342][ T8456] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 154.517979][ T8488] loop2: detected capacity change from 0 to 512 [ 154.527045][ T8488] EXT4-fs (loop2): feature flags set on rev 0 fs, running e2fsck is recommended [ 154.539643][ T8488] EXT4-fs (loop2): orphan cleanup on readonly fs [ 154.546778][ T8488] EXT4-fs error (device loop2): ext4_mb_mark_diskspace_used:4215: comm syz.2.1638: Allocating blocks 41-42 which overlap fs metadata [ 154.563290][ T8488] EXT4-fs error (device loop2): ext4_mb_mark_diskspace_used:4215: comm syz.2.1638: Allocating blocks 41-42 which overlap fs metadata [ 154.578045][ T8488] EXT4-fs error (device loop2): ext4_acquire_dquot:6986: comm syz.2.1638: Failed to acquire dquot type 1 [ 154.590534][ T8488] EXT4-fs error (device loop2): mb_free_blocks:2037: group 0, inode 12: block 14:freeing already freed block (bit 14); block bitmap corrupt. [ 154.605642][ T8488] EXT4-fs error (device loop2): ext4_do_update_inode:5617: inode #12: comm syz.2.1638: corrupted inode contents [ 154.618995][ T8488] EXT4-fs error (device loop2): ext4_dirty_inode:6502: inode #12: comm syz.2.1638: mark_inode_dirty error [ 154.641359][ T8495] option changes via remount are deprecated (pid=8494 comm=syz.3.1639) [ 154.648015][ T8488] EXT4-fs error (device loop2): ext4_do_update_inode:5617: inode #12: comm syz.2.1638: corrupted inode contents [ 154.650025][ T8495] cgroup: option or name mismatch, new: 0x10 "", old: 0x0 "" [ 154.664516][ T8488] EXT4-fs error (device loop2): __ext4_ext_dirty:206: inode #12: comm syz.2.1638: mark_inode_dirty error [ 154.683066][ T8488] EXT4-fs error (device loop2): ext4_do_update_inode:5617: inode #12: comm syz.2.1638: corrupted inode contents [ 154.695457][ T8488] EXT4-fs error (device loop2) in ext4_orphan_del:303: Corrupt filesystem [ 154.704536][ T8488] EXT4-fs error (device loop2): ext4_do_update_inode:5617: inode #12: comm syz.2.1638: corrupted inode contents [ 154.718010][ T8488] EXT4-fs error (device loop2): ext4_truncate:4635: inode #12: comm syz.2.1638: mark_inode_dirty error [ 154.730161][ T8488] EXT4-fs error (device loop2) in ext4_process_orphan:345: Corrupt filesystem [ 154.746850][ T8488] EXT4-fs (loop2): 1 truncate cleaned up [ 154.753658][ T8488] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 154.786472][ T8501] batadv_slave_0: entered promiscuous mode [ 154.825769][ T3317] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 154.872954][ T3318] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 154.923591][ T8514] __nla_validate_parse: 6 callbacks suppressed [ 154.923607][ T8514] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1644'. [ 154.958820][ T8518] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1649'. [ 154.973052][ T8518] netlink: 'syz.3.1649': attribute type 1 has an invalid length. [ 154.981098][ T8518] netlink: 'syz.3.1649': attribute type 1 has an invalid length. [ 154.988989][ T8518] netlink: 'syz.3.1649': attribute type 1 has an invalid length. [ 155.000323][ T8520] SELinux: ebitmap: truncated map [ 155.007872][ T8520] SELinux: failed to load policy [ 155.015355][ T8518] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1649'. [ 155.025005][ T8518] macvtap0: refused to change device tx_queue_len [ 155.066431][ T8525] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1651'. [ 155.152469][ T8532] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1653'. [ 155.361979][ T8552] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1662'. [ 155.375446][ T8552] netlink: 'syz.4.1662': attribute type 1 has an invalid length. [ 155.383259][ T8552] netlink: 'syz.4.1662': attribute type 1 has an invalid length. [ 155.390994][ T8552] netlink: 'syz.4.1662': attribute type 1 has an invalid length. [ 155.399334][ T8552] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1662'. [ 155.409668][ T8552] macvtap0: refused to change device tx_queue_len [ 155.457814][ T29] kauditd_printk_skb: 3579 callbacks suppressed [ 155.457829][ T29] audit: type=1326 audit(1768323543.106:52531): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8513 comm="syz.2.1644" exe="/root/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7f9f2ec9f749 code=0x7ffc0000 [ 155.488628][ T29] audit: type=1326 audit(1768323543.146:52532): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8524 comm="syz.3.1651" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fb516ec2005 code=0x7ffc0000 [ 155.512428][ T29] audit: type=1400 audit(1768323543.146:52533): avc: denied { prog_load } for pid=8557 comm="syz.2.1664" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 155.531813][ T29] audit: type=1400 audit(1768323543.146:52534): avc: denied { bpf } for pid=8557 comm="syz.2.1664" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 155.552645][ T29] audit: type=1400 audit(1768323543.146:52535): avc: denied { perfmon } for pid=8557 comm="syz.2.1664" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 155.573736][ T29] audit: type=1400 audit(1768323543.146:52536): avc: denied { create } for pid=8557 comm="syz.2.1664" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 155.594233][ T29] audit: type=1400 audit(1768323543.146:52537): avc: denied { create } for pid=8557 comm="syz.2.1664" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 155.615424][ T29] audit: type=1400 audit(1768323543.146:52538): avc: denied { write } for pid=8557 comm="syz.2.1664" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 155.636506][ T29] audit: type=1400 audit(1768323543.146:52539): avc: denied { nlmsg_write } for pid=8557 comm="syz.2.1664" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 155.659186][ T29] audit: type=1400 audit(1768323543.166:52540): avc: denied { create } for pid=8549 comm="syz.1.1661" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 155.702965][ T8566] netlink: 'syz.2.1668': attribute type 1 has an invalid length. [ 155.746449][ T8572] loop3: detected capacity change from 0 to 2048 [ 155.749152][ T8566] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1668'. [ 155.759962][ T8573] SELinux: security_context_str_to_sid (Ð-šXܘ7.H\¹ÿ %ºu@) failed with errno=-22 [ 155.818690][ T8582] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 155.843431][ T8584] loop2: detected capacity change from 0 to 128 [ 155.855388][ T8584] loop2: detected capacity change from 0 to 128 [ 155.863645][ T8584] msdos: Bad value for 'gid' [ 155.868338][ T8584] msdos: Bad value for 'gid' [ 156.016398][ T8594] xt_ecn: cannot match TCP bits for non-tcp packets [ 156.157707][ T8603] loop3: detected capacity change from 0 to 1024 [ 156.167582][ T8603] EXT4-fs (loop3): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 156.178561][ T8603] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 156.190683][ T8603] JBD2: no valid journal superblock found [ 156.196465][ T8603] EXT4-fs (loop3): Could not load journal inode [ 156.211237][ T8603] SELinux: security_context_str_to_sid (Ð-šXܘ7.H\¹ÿ %ºu@) failed with errno=-22 [ 156.299161][ T8618] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1689'. [ 156.337035][ T8623] loop2: detected capacity change from 0 to 512 [ 156.375692][ T8629] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 156.402912][ T8629] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 156.418930][ T8629] ext4 filesystem being mounted at /359/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 156.445230][ T3317] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 156.512243][ T8649] ISOFS: unable to read i-node block [ 156.527838][ T8649] isofs_fill_super: get root inode failed [ 156.620540][ T8652] vhci_hcd vhci_hcd.2: USB_PORT_FEAT_U1/2_TIMEOUT req not supported for USB 2.0 roothub [ 156.677785][ T8656] EXT4-fs (loop3): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 156.688767][ T8656] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 156.700444][ T8656] JBD2: no valid journal superblock found [ 156.706242][ T8656] EXT4-fs (loop3): Could not load journal inode [ 156.715702][ T8656] SELinux: security_context_str_to_sid (Ð-šXܘ7.H\¹ÿ %ºu@) failed with errno=-22 [ 156.838248][ T8668] netlink: 72 bytes leftover after parsing attributes in process `syz.4.1704'. [ 157.389438][ T8698] x_tables: duplicate underflow at hook 3 [ 157.473481][ T8706] sctp: [Deprecated]: syz.0.1720 (pid 8706) Use of struct sctp_assoc_value in delayed_ack socket option. [ 157.473481][ T8706] Use struct sctp_sack_info instead [ 157.594758][ T8719] tipc: Started in network mode [ 157.599773][ T8719] tipc: Node identity 84e, cluster identity 4711 [ 157.606177][ T8719] tipc: Node number set to 2126 [ 157.641709][ T8720] 8021q: adding VLAN 0 to HW filter on device bond3 [ 157.732273][ T8721] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 157.834945][ T3318] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 157.901932][ T8746] bridge: RTM_NEWNEIGH with invalid ether address [ 157.957516][ T8738] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e842c11c, mo2=0002] [ 157.965730][ T8738] System zones: 0-2, 18-18, 34-34 [ 157.971769][ T8738] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.1730: bg 0: block 248: padding at end of block bitmap is not set [ 157.986510][ T8738] EXT4-fs error (device loop1): ext4_acquire_dquot:6986: comm syz.1.1730: Failed to acquire dquot type 1 [ 157.999070][ T8738] EXT4-fs (loop1): 1 truncate cleaned up [ 158.005339][ T8738] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 158.018396][ T8738] ext4 filesystem being mounted at /366/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 158.032364][ T8734] 9p: Bad value for 'wfdno' [ 158.050801][ T3317] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 158.915089][ T8785] FAULT_INJECTION: forcing a failure. [ 158.915089][ T8785] name failslab, interval 1, probability 0, space 0, times 0 [ 158.929973][ T8785] CPU: 0 UID: 0 PID: 8785 Comm: syz.0.1742 Not tainted syzkaller #0 PREEMPT(voluntary) [ 158.929999][ T8785] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 158.930026][ T8785] Call Trace: [ 158.930035][ T8785] [ 158.930043][ T8785] __dump_stack+0x1d/0x30 [ 158.930134][ T8785] dump_stack_lvl+0x95/0xd0 [ 158.930230][ T8785] dump_stack+0x15/0x1b [ 158.930251][ T8785] should_fail_ex+0x265/0x280 [ 158.930278][ T8785] should_failslab+0x8c/0xb0 [ 158.930300][ T8785] kmem_cache_alloc_node_noprof+0x6b/0x4c0 [ 158.930327][ T8785] ? __alloc_skb+0x2ff/0x4b0 [ 158.930416][ T8785] __alloc_skb+0x2ff/0x4b0 [ 158.930437][ T8785] ? __alloc_skb+0x228/0x4b0 [ 158.930459][ T8785] netlink_alloc_large_skb+0xbf/0xf0 [ 158.930507][ T8785] netlink_sendmsg+0x3cf/0x6b0 [ 158.930542][ T8785] ? __pfx_netlink_sendmsg+0x10/0x10 [ 158.930571][ T8785] __sock_sendmsg+0x145/0x180 [ 158.930658][ T8785] ____sys_sendmsg+0x31e/0x4a0 [ 158.930756][ T8785] ___sys_sendmsg+0x17b/0x1d0 [ 158.930825][ T8785] __x64_sys_sendmsg+0xd4/0x160 [ 158.930844][ T8785] x64_sys_call+0x17ba/0x3000 [ 158.930868][ T8785] do_syscall_64+0xca/0x2b0 [ 158.930954][ T8785] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 158.931019][ T8785] RIP: 0033:0x7f1e5306f749 [ 158.931083][ T8785] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 158.931145][ T8785] RSP: 002b:00007f1e51acf038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 158.931158][ T8785] RAX: ffffffffffffffda RBX: 00007f1e532c5fa0 RCX: 00007f1e5306f749 [ 158.931165][ T8785] RDX: 0000000000000040 RSI: 0000200000009b40 RDI: 0000000000000004 [ 158.931173][ T8785] RBP: 00007f1e51acf090 R08: 0000000000000000 R09: 0000000000000000 [ 158.931245][ T8785] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 158.931253][ T8785] R13: 00007f1e532c6038 R14: 00007f1e532c5fa0 R15: 00007ffea6dab568 [ 158.931264][ T8785] [ 159.156390][ T8790] set_capacity_and_notify: 6 callbacks suppressed [ 159.156433][ T8790] loop1: detected capacity change from 0 to 1024 [ 159.182760][ T8790] EXT4-fs (loop1): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 159.193926][ T8790] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 159.206243][ T8790] JBD2: no valid journal superblock found [ 159.212103][ T8790] EXT4-fs (loop1): Could not load journal inode [ 159.221321][ T8790] SELinux: security_context_str_to_sid (Ð-šXܘ7.H\¹ÿ %ºu@) failed with errno=-22 [ 159.346804][ T8808] validate_nla: 1 callbacks suppressed [ 159.346819][ T8808] netlink: 'syz.1.1749': attribute type 1 has an invalid length. [ 159.360302][ T8808] netlink: 'syz.1.1749': attribute type 1 has an invalid length. [ 159.368074][ T8808] netlink: 'syz.1.1749': attribute type 1 has an invalid length. [ 159.377964][ T8808] macvtap0: refused to change device tx_queue_len [ 159.692346][ T8837] 9p: Bad value for 'port' [ 159.778022][ T8842] loop2: detected capacity change from 0 to 128 [ 159.789119][ T8842] SELinux: policydb magic number 0x6c65732f does not match expected magic number 0xf97cff8c [ 159.799486][ T8842] SELinux: failed to load policy [ 159.858699][ T8847] syz.2.1761: attempt to access beyond end of device [ 159.858699][ T8847] loop2: rw=2049, sector=145, nr_sectors = 88 limit=128 [ 159.872962][ T8847] syz.2.1761: attempt to access beyond end of device [ 159.872962][ T8847] loop2: rw=2049, sector=241, nr_sectors = 8 limit=128 [ 159.886797][ T8847] syz.2.1761: attempt to access beyond end of device [ 159.886797][ T8847] loop2: rw=2049, sector=257, nr_sectors = 8 limit=128 [ 159.902270][ T8834] loop3: detected capacity change from 0 to 512 [ 159.904052][ T8847] syz.2.1761: attempt to access beyond end of device [ 159.904052][ T8847] loop2: rw=2049, sector=273, nr_sectors = 8 limit=128 [ 159.933940][ T8847] syz.2.1761: attempt to access beyond end of device [ 159.933940][ T8847] loop2: rw=2049, sector=289, nr_sectors = 8 limit=128 [ 159.948020][ T8847] syz.2.1761: attempt to access beyond end of device [ 159.948020][ T8847] loop2: rw=2049, sector=305, nr_sectors = 8 limit=128 [ 159.961790][ T8847] syz.2.1761: attempt to access beyond end of device [ 159.961790][ T8847] loop2: rw=2049, sector=321, nr_sectors = 8 limit=128 [ 159.992243][ T8847] syz.2.1761: attempt to access beyond end of device [ 159.992243][ T8847] loop2: rw=2049, sector=337, nr_sectors = 8 limit=128 [ 160.025157][ T8847] syz.2.1761: attempt to access beyond end of device [ 160.025157][ T8847] loop2: rw=2049, sector=353, nr_sectors = 8 limit=128 [ 160.039411][ T8847] syz.2.1761: attempt to access beyond end of device [ 160.039411][ T8847] loop2: rw=2049, sector=369, nr_sectors = 8 limit=128 [ 160.159911][ T8883] __nla_validate_parse: 4 callbacks suppressed [ 160.159928][ T8883] netlink: 48 bytes leftover after parsing attributes in process `syz.3.1776'. [ 160.224812][ T8889] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1778'. [ 160.261793][ T8896] loop2: detected capacity change from 0 to 512 [ 160.268807][ T8896] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 160.284736][ T8896] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e002c01c, mo2=0002] [ 160.292996][ T8896] System zones: 1-12 [ 160.300122][ T8896] EXT4-fs error (device loop2): __ext4_iget:5426: inode #15: block 1803188595: comm syz.2.1780: invalid block [ 160.312453][ T8896] EXT4-fs error (device loop2): ext4_orphan_get:1396: comm syz.2.1780: couldn't read orphan inode 15 (err -117) [ 160.325231][ T8896] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 160.351658][ T3318] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 160.513169][ T8908] netlink: 'syz.2.1783': attribute type 1 has an invalid length. [ 160.521179][ T8908] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1783'. [ 160.941250][ T29] kauditd_printk_skb: 735 callbacks suppressed [ 160.941338][ T29] audit: type=1400 audit(1768323548.596:53274): avc: denied { cpu } for pid=8911 comm="syz.1.1785" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 160.944319][ T8913] 8021q: VLANs not supported on ip6_vti0 [ 160.980596][ T29] audit: type=1326 audit(1768323548.636:53275): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8921 comm="syz.0.1787" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1e5306f749 code=0x7ffc0000 [ 161.004333][ T8913] loop1: detected capacity change from 0 to 512 [ 161.005612][ T29] audit: type=1326 audit(1768323548.656:53276): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8921 comm="syz.0.1787" exe="/root/syz-executor" sig=0 arch=c000003e syscall=53 compat=0 ip=0x7f1e5306f749 code=0x7ffc0000 [ 161.034251][ T29] audit: type=1326 audit(1768323548.656:53277): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8921 comm="syz.0.1787" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1e5306f749 code=0x7ffc0000 [ 161.057898][ T29] audit: type=1326 audit(1768323548.656:53278): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8921 comm="syz.0.1787" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f1e5306f749 code=0x7ffc0000 [ 161.082208][ T29] audit: type=1326 audit(1768323548.656:53279): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8921 comm="syz.0.1787" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1e5306f749 code=0x7ffc0000 [ 161.105823][ T29] audit: type=1326 audit(1768323548.656:53280): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8921 comm="syz.0.1787" exe="/root/syz-executor" sig=0 arch=c000003e syscall=72 compat=0 ip=0x7f1e5306f749 code=0x7ffc0000 [ 161.129498][ T29] audit: type=1326 audit(1768323548.656:53281): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8921 comm="syz.0.1787" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1e5306f749 code=0x7ffc0000 [ 161.153143][ T29] audit: type=1326 audit(1768323548.656:53282): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8921 comm="syz.0.1787" exe="/root/syz-executor" sig=0 arch=c000003e syscall=7 compat=0 ip=0x7f1e5306f749 code=0x7ffc0000 [ 161.189964][ T29] audit: type=1326 audit(1768323548.716:53283): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8926 comm="syz.4.1789" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9a2ae4f749 code=0x7ffc0000 [ 161.220326][ T8913] EXT4-fs warning (device loop1): ext4_enable_quotas:7221: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 161.237159][ T8913] EXT4-fs (loop1): mount failed [ 161.287630][ T8937] netlink: 52 bytes leftover after parsing attributes in process `syz.3.1792'. [ 161.307595][ T8937] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1792'. [ 161.502542][ T8959] netlink: 'syz.3.1798': attribute type 10 has an invalid length. [ 161.513546][ T8959] team0: Port device dummy0 added [ 161.546514][ T8959] netlink: 'syz.3.1798': attribute type 10 has an invalid length. [ 161.960990][ T8959] team0: Port device dummy0 removed [ 161.974735][ T8959] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 162.000276][ T8965] FAULT_INJECTION: forcing a failure. [ 162.000276][ T8965] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 162.013686][ T8965] CPU: 0 UID: 0 PID: 8965 Comm: syz.1.1800 Not tainted syzkaller #0 PREEMPT(voluntary) [ 162.013715][ T8965] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 162.013729][ T8965] Call Trace: [ 162.013736][ T8965] [ 162.013821][ T8965] __dump_stack+0x1d/0x30 [ 162.013849][ T8965] dump_stack_lvl+0x95/0xd0 [ 162.013872][ T8965] dump_stack+0x15/0x1b [ 162.013894][ T8965] should_fail_ex+0x265/0x280 [ 162.013950][ T8965] should_fail_alloc_page+0xf2/0x100 [ 162.013977][ T8965] __alloc_frozen_pages_noprof+0x109/0x360 [ 162.014012][ T8965] alloc_pages_mpol+0xb3/0x260 [ 162.014045][ T8965] vma_alloc_folio_noprof+0x1aa/0x300 [ 162.014133][ T8965] do_wp_page+0xf60/0x2510 [ 162.014161][ T8965] ? css_rstat_updated+0xbb/0x280 [ 162.014237][ T8965] ? __rcu_read_lock+0x37/0x50 [ 162.014282][ T8965] handle_mm_fault+0x7b0/0x2c60 [ 162.014324][ T8965] do_user_addr_fault+0x630/0x1080 [ 162.014406][ T8965] ? switch_fpu_return+0xe/0x20 [ 162.014432][ T8965] exc_page_fault+0x62/0xa0 [ 162.014467][ T8965] asm_exc_page_fault+0x26/0x30 [ 162.014530][ T8965] RIP: 0033:0x7f53d70209f0 [ 162.014624][ T8965] Code: 39 4f 08 72 4c 8d 4d ff 85 ed 74 33 66 0f 1f 44 00 00 48 39 f0 72 1b 4d 8b 07 49 89 c1 49 29 f1 47 0f b6 0c 08 45 84 c9 74 08 <45> 88 0c 00 49 8b 47 10 48 83 c0 01 49 89 47 10 83 e9 01 73 d3 41 [ 162.014680][ T8965] RSP: 002b:00007f53d5bc64a0 EFLAGS: 00010202 [ 162.014694][ T8965] RAX: 0000000000005005 RBX: 00007f53d5bc6540 RCX: 0000000000000013 [ 162.014707][ T8965] RDX: 00000000000027ff RSI: 0000000000000400 RDI: 00007f53d5bc65e0 [ 162.014718][ T8965] RBP: 0000000000000014 R08: 00007f53cd7a7000 R09: 0000000000000004 [ 162.014729][ T8965] R10: 0000200000001042 R11: 0000000000000481 R12: 0000000000000301 [ 162.014801][ T8965] R13: 00007f53d71ffc40 R14: 0000000000000013 R15: 00007f53d5bc65e0 [ 162.014819][ T8965] [ 162.014828][ T8965] Huh VM_FAULT_OOM leaked out to the #PF handler. Retrying PF [ 162.202700][ T8965] loop1: detected capacity change from 0 to 512 [ 162.226283][ T8965] EXT4-fs warning (device loop1): ext4_xattr_inode_get:560: inode #11: comm syz.1.1800: EA inode hash validation failed [ 162.239844][ T8965] EXT4-fs error (device loop1): ext4_do_update_inode:5617: inode #15: comm syz.1.1800: corrupted inode contents [ 162.257780][ T8965] EXT4-fs error (device loop1): ext4_dirty_inode:6502: inode #15: comm syz.1.1800: mark_inode_dirty error [ 162.267825][ T8971] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1802'. [ 162.278613][ T8965] EXT4-fs error (device loop1): ext4_do_update_inode:5617: inode #15: comm syz.1.1800: corrupted inode contents [ 162.286728][ T8971] netlink: 'syz.3.1802': attribute type 1 has an invalid length. [ 162.291092][ T8965] EXT4-fs error (device loop1): ext4_xattr_delete_inode:3000: inode #15: comm syz.1.1800: mark_inode_dirty error [ 162.298415][ T8971] netlink: 'syz.3.1802': attribute type 1 has an invalid length. [ 162.318405][ T8971] netlink: 'syz.3.1802': attribute type 1 has an invalid length. [ 162.319802][ T8965] EXT4-fs error (device loop1): ext4_xattr_delete_inode:3003: inode #15: comm syz.1.1800: mark inode dirty (error -117) [ 162.339487][ T8965] EXT4-fs warning (device loop1): ext4_evict_inode:273: xattr delete (err -117) [ 162.348890][ T8965] EXT4-fs (loop1): 1 orphan inode deleted [ 162.355257][ T8965] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 162.374705][ T8970] loop2: detected capacity change from 0 to 1024 [ 162.382456][ T8970] EXT4-fs (loop2): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 162.393593][ T8970] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 162.406997][ T3317] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 162.418852][ T8970] JBD2: no valid journal superblock found [ 162.425392][ T8970] EXT4-fs (loop2): Could not load journal inode [ 162.431263][ T8971] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1802'. [ 162.445547][ T8970] SELinux: security_context_str_to_sid (Ð-šXܘ7.H\¹ÿ %ºu@) failed with errno=-22 [ 162.475751][ T8978] 9pnet_fd: p9_fd_create_unix (8978): problem connecting socket: ./file0: -2 [ 162.591182][ T8995] veth0_to_team: left promiscuous mode [ 162.793161][ T9013] SELinux: failed to load policy [ 162.822066][ T9020] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1817'. [ 162.835999][ T9020] netlink: 'syz.1.1817': attribute type 1 has an invalid length. [ 162.844919][ T9020] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1817'. [ 162.854584][ T9020] macvtap0: refused to change device tx_queue_len [ 162.973493][ T9033] SELinux: security_context_str_to_sid (Ð-šXܘ7.H\¹ÿ %ºu@) failed with errno=-22 [ 162.990137][ T9035] loop1: detected capacity change from 0 to 1024 [ 162.997076][ T9035] EXT4-fs (loop1): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 163.008086][ T9035] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 163.021151][ T9035] JBD2: no valid journal superblock found [ 163.027009][ T9035] EXT4-fs (loop1): Could not load journal inode [ 163.047312][ T9035] SELinux: security_context_str_to_sid (Ð-šXܘ7.H\¹ÿ %ºu@) failed with errno=-22 [ 163.498831][ T9073] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1837'. [ 163.536907][ T9077] netdevsim netdevsim2 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 163.546771][ T9077] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 163.563404][ T9081] xt_addrtype: ipv6 PROHIBIT (THROW, NAT ..) matching not supported [ 163.621740][ T9077] netdevsim netdevsim2 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 163.631583][ T9077] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 163.671906][ T9077] netdevsim netdevsim2 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 163.682110][ T9077] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 163.731574][ T9077] netdevsim netdevsim2 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 163.741421][ T9077] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 163.797867][ T2560] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 163.806330][ T2560] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 163.817562][ T2560] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 163.825966][ T2560] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 163.838160][ T2560] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 163.846495][ T2560] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 163.858389][ T4115] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 163.866649][ T4115] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 163.988688][ T9091] 8021q: VLANs not supported on ip6_vti0 [ 164.001470][ T9091] loop1: detected capacity change from 0 to 512 [ 164.023329][ T9091] EXT4-fs warning (device loop1): ext4_enable_quotas:7221: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 164.040165][ T9091] EXT4-fs (loop1): mount failed [ 164.072984][ T9103] 9p: Bad value for 'wfdno' [ 164.170947][ T9116] macvtap0: refused to change device tx_queue_len [ 164.178459][ T9111] SELinux: failed to load policy [ 164.262722][ T9129] loop1: detected capacity change from 0 to 128 [ 164.382991][ T9138] validate_nla: 7 callbacks suppressed [ 164.383008][ T9138] netlink: 'syz.3.1860': attribute type 1 has an invalid length. [ 164.396308][ T9138] netlink: 'syz.3.1860': attribute type 1 has an invalid length. [ 164.404142][ T9138] netlink: 'syz.3.1860': attribute type 1 has an invalid length. [ 164.480375][ T9150] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 164.493932][ T9152] loop1: detected capacity change from 0 to 128 [ 164.510068][ T9152] SELinux: Context Áœ5‹¹NU¸hUhºIoK¤“Ф€èhtã‰äÓ3×Dþ60Šê [ 164.510068][ T9152] ì'"[¿›ÍS.UŸn6"öO†! *5¢Ã¾Ä@p€g is not valid (left unmapped). [ 164.890481][ T9186] smc: net device ip6gretap0 applied user defined pnetid SYZ2 [ 164.907346][ T9187] smc: net device ip6gretap0 erased user defined pnetid SYZ2 [ 164.939589][ T9188] netlink: 'syz.2.1877': attribute type 13 has an invalid length. [ 164.991969][ T9188] gretap0: refused to change device tx_queue_len [ 165.009438][ T9188] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 165.318226][ T9200] loop2: detected capacity change from 0 to 1024 [ 165.348455][ T9200] EXT4-fs: Ignoring removed orlov option [ 165.390621][ T9200] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 165.856455][ T9223] SELinux: security_context_str_to_sid (Ð-šXܘ7.H\¹ÿ %ºu@) failed with errno=-22 [ 165.886506][ T9226] loop3: detected capacity change from 0 to 512 [ 165.902571][ T9227] __nla_validate_parse: 4 callbacks suppressed [ 165.902587][ T9227] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1889'. [ 165.955713][ T9227] netlink: 'syz.0.1889': attribute type 1 has an invalid length. [ 165.963673][ T9227] netlink: 'syz.0.1889': attribute type 1 has an invalid length. [ 165.971439][ T9227] netlink: 'syz.0.1889': attribute type 1 has an invalid length. [ 165.988895][ T29] kauditd_printk_skb: 3417 callbacks suppressed [ 165.988912][ T29] audit: type=1400 audit(1768323553.636:56700): avc: denied { read } for pid=9230 comm="syz.3.1892" name="sg0" dev="devtmpfs" ino=137 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 166.005961][ T9232] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1889'. [ 166.018957][ T29] audit: type=1400 audit(1768323553.636:56701): avc: denied { open } for pid=9230 comm="syz.3.1892" path="/dev/sg0" dev="devtmpfs" ino=137 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 166.053158][ T29] audit: type=1326 audit(1768323553.586:56698): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9194 comm="syz.2.1879" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f9f2ec965e7 code=0x7ffc0000 [ 166.076724][ T29] audit: type=1326 audit(1768323553.686:56702): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9194 comm="syz.2.1879" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f9f2ec3b829 code=0x7ffc0000 [ 166.100914][ T29] audit: type=1326 audit(1768323553.686:56703): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9194 comm="syz.2.1879" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f9f2ec965e7 code=0x7ffc0000 [ 166.124752][ T29] audit: type=1326 audit(1768323553.686:56704): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9194 comm="syz.2.1879" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f9f2ec3b829 code=0x7ffc0000 [ 166.148422][ T29] audit: type=1326 audit(1768323553.686:56705): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9194 comm="syz.2.1879" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f9f2ec965e7 code=0x7ffc0000 [ 166.171951][ T29] audit: type=1326 audit(1768323553.686:56706): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9194 comm="syz.2.1879" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f9f2ec3b829 code=0x7ffc0000 [ 166.172545][ T9227] macvtap0: refused to change device tx_queue_len [ 166.195487][ T29] audit: type=1326 audit(1768323553.686:56707): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9194 comm="syz.2.1879" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f9f2ec965e7 code=0x7ffc0000 [ 166.225334][ T29] audit: type=1326 audit(1768323553.686:56708): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9194 comm="syz.2.1879" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f9f2ec3b829 code=0x7ffc0000 [ 166.390428][ T9243] SELinux: ebitmap: truncated map [ 166.404014][ T9243] SELinux: failed to load policy [ 166.668025][ T9260] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1896'. [ 166.729108][ T9253] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 166.811130][ T3318] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 166.840512][ T9269] SELinux: security_context_str_to_sid (Ð-šXܘ7.H\¹ÿ %ºu@) failed with errno=-22 [ 166.872361][ T9273] netlink: 'syz.0.1905': attribute type 4 has an invalid length. [ 166.880200][ T9273] netlink: 17 bytes leftover after parsing attributes in process `syz.0.1905'. [ 167.208873][ T9281] FAULT_INJECTION: forcing a failure. [ 167.208873][ T9281] name failslab, interval 1, probability 0, space 0, times 0 [ 167.221593][ T9281] CPU: 1 UID: 0 PID: 9281 Comm: syz.2.1908 Not tainted syzkaller #0 PREEMPT(voluntary) [ 167.221621][ T9281] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 167.221667][ T9281] Call Trace: [ 167.221673][ T9281] [ 167.221679][ T9281] __dump_stack+0x1d/0x30 [ 167.221774][ T9281] dump_stack_lvl+0x95/0xd0 [ 167.221856][ T9281] dump_stack+0x15/0x1b [ 167.221872][ T9281] should_fail_ex+0x265/0x280 [ 167.221892][ T9281] should_failslab+0x8c/0xb0 [ 167.221911][ T9281] kmem_cache_alloc_noprof+0x69/0x4b0 [ 167.221952][ T9281] ? alloc_empty_file+0x76/0x200 [ 167.221977][ T9281] alloc_empty_file+0x76/0x200 [ 167.222058][ T9281] path_openat+0x63/0x23b0 [ 167.222159][ T9281] ? _parse_integer_limit+0x170/0x190 [ 167.222202][ T9281] ? _parse_integer+0x27/0x40 [ 167.222218][ T9281] ? kstrtoull+0x111/0x140 [ 167.222234][ T9281] ? kstrtouint+0x76/0xc0 [ 167.222251][ T9281] do_filp_open+0x109/0x230 [ 167.222285][ T9281] do_sys_openat2+0xa6/0x150 [ 167.222401][ T9281] __x64_sys_openat+0xf2/0x120 [ 167.222431][ T9281] x64_sys_call+0x2b07/0x3000 [ 167.222452][ T9281] do_syscall_64+0xca/0x2b0 [ 167.222591][ T9281] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 167.222610][ T9281] RIP: 0033:0x7f9f2ec9df90 [ 167.222623][ T9281] Code: 48 89 44 24 20 75 93 44 89 54 24 0c e8 69 95 02 00 44 8b 54 24 0c 89 da 48 89 ee 41 89 c0 bf 9c ff ff ff b8 01 01 00 00 0f 05 <48> 3d 00 f0 ff ff 77 38 44 89 c7 89 44 24 0c e8 bc 95 02 00 8b 44 [ 167.222642][ T9281] RSP: 002b:00007f9f2d6fef10 EFLAGS: 00000293 ORIG_RAX: 0000000000000101 [ 167.222660][ T9281] RAX: ffffffffffffffda RBX: 0000000000000002 RCX: 00007f9f2ec9df90 [ 167.222750][ T9281] RDX: 0000000000000002 RSI: 00007f9f2d6fefa0 RDI: 00000000ffffff9c [ 167.222761][ T9281] RBP: 00007f9f2d6fefa0 R08: 0000000000000000 R09: 0000000000000000 [ 167.222771][ T9281] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000001 [ 167.222803][ T9281] R13: 00007f9f2eef6038 R14: 00007f9f2eef5fa0 R15: 00007fffaff20708 [ 167.222820][ T9281] [ 167.455753][ T9291] program syz.1.1912 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 167.493280][ T9297] xt_ecn: cannot match TCP bits for non-tcp packets [ 167.612781][ T9304] loop1: detected capacity change from 0 to 1024 [ 167.620603][ T9304] EXT4-fs: Ignoring removed orlov option [ 167.629067][ T9304] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 167.853389][ T9313] loop3: detected capacity change from 0 to 2048 [ 167.861089][ T9313] EXT4-fs: Ignoring removed nomblk_io_submit option [ 167.867817][ T9313] EXT4-fs: Ignoring removed nobh option [ 167.986705][ T3317] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 168.044900][ T9324] loop1: detected capacity change from 0 to 764 [ 168.053569][ T9324] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 168.077113][ T9327] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1925'. [ 168.222161][ T9343] netdevsim netdevsim2 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 168.232092][ T9343] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 168.295083][ T9353] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1935'. [ 168.295904][ T9343] netdevsim netdevsim2 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 168.314038][ T9343] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 168.342843][ T9357] netlink: 14 bytes leftover after parsing attributes in process `syz.4.1937'. [ 168.343471][ T9353] netlink: 'syz.1.1935': attribute type 1 has an invalid length. [ 168.359751][ T9353] netlink: 'syz.1.1935': attribute type 1 has an invalid length. [ 168.370450][ T9353] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1935'. [ 168.380215][ T9343] netdevsim netdevsim2 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 168.390156][ T9343] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 168.427849][ T9353] macvtap0: refused to change device tx_queue_len [ 168.441490][ T9343] netdevsim netdevsim2 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 168.451411][ T9343] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 168.512191][ T9364] loop1: detected capacity change from 0 to 1024 [ 168.519242][ T9364] EXT4-fs (loop1): ext4_check_descriptors: Block bitmap for group 0 overlaps block group descriptors [ 168.530238][ T9364] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (38281!=20869) [ 168.541972][ T9364] EXT4-fs (loop1): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 168.553918][ T9364] EXT4-fs error (device loop1): ext4_ext_check_inode:523: inode #3: comm syz.1.1939: pblk 82 bad header/extent: invalid extent entries - magic f30a, entries 2, max 4(4), depth 0(0) [ 168.572989][ T9364] EXT4-fs (loop1): no journal found [ 168.578212][ T9364] EXT4-fs (loop1): can't get journal size [ 168.585199][ T9364] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 168.588418][ T9368] xt_ecn: cannot match TCP bits for non-tcp packets [ 168.598220][ T9364] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 168.619144][ T12] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 168.627532][ T12] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 168.641854][ T12] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 168.650306][ T12] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 168.663689][ T12] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 168.671998][ T12] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 168.684176][ T12] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 168.692444][ T12] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 168.832637][ T9391] loop3: detected capacity change from 0 to 512 [ 168.845936][ T9391] EXT4-fs: Ignoring removed mblk_io_submit option [ 168.910992][ T9396] SELinux: ebitmap: truncated map [ 168.916705][ T9396] SELinux: failed to load policy [ 169.089559][ T9412] loop3: detected capacity change from 0 to 512 [ 169.229613][ T9438] SELinux: ebitmap: truncated map [ 169.237805][ T9438] SELinux: failed to load policy [ 169.243005][ T9435] EXT4-fs (loop1): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 169.253992][ T9435] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 169.265213][ T9435] JBD2: no valid journal superblock found [ 169.271050][ T9435] EXT4-fs (loop1): Could not load journal inode [ 169.290585][ T9435] SELinux: security_context_str_to_sid (Ð-šXܘ7.H\¹ÿ %ºu@) failed with errno=-22 [ 169.536586][ T9452] set_capacity_and_notify: 1 callbacks suppressed [ 169.536603][ T9452] loop1: detected capacity change from 0 to 1024 [ 169.552136][ T9452] EXT4-fs: Ignoring removed orlov option [ 169.576795][ T9452] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 169.926629][ T9462] FAULT_INJECTION: forcing a failure. [ 169.926629][ T9462] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 169.939758][ T9462] CPU: 0 UID: 0 PID: 9462 Comm: syz.0.1978 Not tainted syzkaller #0 PREEMPT(voluntary) [ 169.939787][ T9462] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 169.939801][ T9462] Call Trace: [ 169.939837][ T9462] [ 169.939847][ T9462] __dump_stack+0x1d/0x30 [ 169.939873][ T9462] dump_stack_lvl+0x95/0xd0 [ 169.939897][ T9462] dump_stack+0x15/0x1b [ 169.939917][ T9462] should_fail_ex+0x265/0x280 [ 169.940019][ T9462] should_fail+0xb/0x20 [ 169.940040][ T9462] should_fail_usercopy+0x1a/0x20 [ 169.940122][ T9462] _copy_from_iter+0xcf/0xe70 [ 169.940146][ T9462] ? __alloc_skb+0x396/0x4b0 [ 169.940168][ T9462] ? __alloc_skb+0x228/0x4b0 [ 169.940220][ T9462] netlink_sendmsg+0x471/0x6b0 [ 169.940278][ T9462] ? __pfx_netlink_sendmsg+0x10/0x10 [ 169.940331][ T9462] __sock_sendmsg+0x145/0x180 [ 169.940355][ T9462] ____sys_sendmsg+0x31e/0x4a0 [ 169.940389][ T9462] ___sys_sendmsg+0x17b/0x1d0 [ 169.940431][ T9462] __x64_sys_sendmsg+0xd4/0x160 [ 169.940544][ T9462] x64_sys_call+0x17ba/0x3000 [ 169.940572][ T9462] do_syscall_64+0xca/0x2b0 [ 169.940606][ T9462] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 169.940630][ T9462] RIP: 0033:0x7f1e5306f749 [ 169.940676][ T9462] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 169.940694][ T9462] RSP: 002b:00007f1e51acf038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 169.940716][ T9462] RAX: ffffffffffffffda RBX: 00007f1e532c5fa0 RCX: 00007f1e5306f749 [ 169.940730][ T9462] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000004 [ 169.940744][ T9462] RBP: 00007f1e51acf090 R08: 0000000000000000 R09: 0000000000000000 [ 169.940759][ T9462] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 169.940801][ T9462] R13: 00007f1e532c6038 R14: 00007f1e532c5fa0 R15: 00007ffea6dab568 [ 169.940822][ T9462] [ 170.148109][ T3317] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 170.232264][ T9468] SELinux: ebitmap: truncated map [ 170.238123][ T9468] SELinux: failed to load policy [ 170.250787][ T9469] loop3: detected capacity change from 0 to 512 [ 170.257892][ T9469] SELinux: security_context_str_to_sid (system_) failed with errno=-22 [ 170.294501][ T9478] loop1: detected capacity change from 0 to 512 [ 170.308569][ T9474] loop2: detected capacity change from 0 to 1024 [ 170.325157][ T9474] EXT4-fs (loop2): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 170.336191][ T9474] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 170.362588][ T9482] 8021q: VLANs not supported on ip6_vti0 [ 170.377600][ T9478] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 170.391387][ T9474] JBD2: no valid journal superblock found [ 170.397226][ T9474] EXT4-fs (loop2): Could not load journal inode [ 170.409898][ T9478] ext4 filesystem being mounted at /425/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 170.485730][ T9474] SELinux: security_context_str_to_sid (Ð-šXܘ7.H\¹ÿ %ºu@) failed with errno=-22 [ 170.527594][ T9478] validate_nla: 1 callbacks suppressed [ 170.527611][ T9478] netlink: 'syz.1.1985': attribute type 21 has an invalid length. [ 170.540977][ T9478] netlink: 'syz.1.1985': attribute type 4 has an invalid length. [ 170.683190][ T3317] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 171.133912][ T9503] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1992'. [ 171.203013][ T29] kauditd_printk_skb: 5193 callbacks suppressed [ 171.203098][ T29] audit: type=1400 audit(1768323566.851:61902): avc: denied { write } for pid=9502 comm="syz.3.1992" name="igmp" dev="proc" ino=4026532767 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 171.259880][ T9506] 9p: Bad value for 'rfdno' [ 171.330412][ T29] audit: type=1400 audit(1768323566.981:61903): avc: denied { ioctl } for pid=9509 comm="syz.3.1995" path="socket:[26184]" dev="sockfs" ino=26184 ioctlcmd=0x671f scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 171.358163][ T9501] loop2: detected capacity change from 0 to 1024 [ 171.364877][ T9501] EXT4-fs: Ignoring removed orlov option [ 171.373522][ T9510] loop3: detected capacity change from 0 to 512 [ 171.485303][ T9501] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 171.679826][ T29] audit: type=1326 audit(1768323567.321:61904): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9515 comm="syz.3.1997" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb516e8f749 code=0x7ffc0000 [ 171.709378][ T9516] xt_ecn: cannot match TCP bits for non-tcp packets [ 171.812457][ T29] audit: type=1326 audit(1768323567.361:61905): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9515 comm="syz.3.1997" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fb516e8f749 code=0x7ffc0000 [ 171.836133][ T29] audit: type=1326 audit(1768323567.361:61906): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9515 comm="syz.3.1997" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb516e8f749 code=0x7ffc0000 [ 171.859740][ T29] audit: type=1326 audit(1768323567.361:61907): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9515 comm="syz.3.1997" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb516e8f749 code=0x7ffc0000 [ 171.883453][ T29] audit: type=1326 audit(1768323567.361:61908): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9515 comm="syz.3.1997" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fb516e8f749 code=0x7ffc0000 [ 171.907098][ T29] audit: type=1326 audit(1768323567.361:61909): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9515 comm="syz.3.1997" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb516e8f749 code=0x7ffc0000 [ 171.930705][ T29] audit: type=1326 audit(1768323567.361:61910): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9515 comm="syz.3.1997" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb516e8f749 code=0x7ffc0000 [ 171.954850][ T29] audit: type=1326 audit(1768323567.361:61911): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9515 comm="syz.3.1997" exe="/root/syz-executor" sig=0 arch=c000003e syscall=2 compat=0 ip=0x7fb516e8f749 code=0x7ffc0000 [ 171.956290][ T9522] 8021q: VLANs not supported on ip6_vti0 [ 171.989637][ T9520] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2000'. [ 172.039301][ T9522] loop3: detected capacity change from 0 to 512 [ 172.203160][ T9529] SELinux: ebitmap: truncated map [ 172.257488][ T9529] SELinux: failed to load policy [ 173.159816][ T9561] 8021q: VLANs not supported on nlmon0 [ 173.307653][ T9565] Option 'Ú¼ÂeFœýØ 2Í‚úØ ·æÞÅ ¡†¶K¡…*Ϫã,ÛŸÊn‰yBÞ6Îf[åA [ 173.307653][ T9565] Q¿ñí׿2:[¼„‚”·¶éÇkáz' to dns_resolver key: bad/missing value [ 173.450038][ T9572] usb usb6: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 173.494775][ T9572] vhci_hcd vhci_hcd.2: invalid port number 96 [ 173.501430][ T9572] vhci_hcd vhci_hcd.2: default hub control req: 0300 vfffa i0060 l0 [ 173.708965][ T9582] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2020'. [ 173.742214][ T9582] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2020'. [ 173.781368][ T9579] SELinux: ebitmap: truncated map [ 173.787659][ T9579] SELinux: failed to load policy [ 173.833128][ T9588] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2021'. [ 174.008508][ T3318] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 174.876340][ T9620] 8021q: adding VLAN 0 to HW filter on device bond0 [ 174.902937][ T9620] bond0: (slave ip6gretap1): Enslaving as a backup interface with an up link [ 174.922337][ T9630] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2036'. [ 174.924396][ T9633] 8021q: VLANs not supported on ip6_vti0 [ 174.951833][ T9633] loop2: detected capacity change from 0 to 512 [ 174.973881][ T9633] EXT4-fs warning (device loop2): ext4_enable_quotas:7221: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 174.979780][ T4134] bond0: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 174.989271][ T9633] EXT4-fs (loop2): mount failed [ 175.129546][ T9643] loop2: detected capacity change from 0 to 1024 [ 175.136084][ T4134] bond0: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 175.158407][ T9643] EXT4-fs: Ignoring removed bh option [ 175.193340][ T9643] EXT4-fs (loop2): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 175.232274][ T9643] ext4 filesystem being mounted at /424/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 175.268946][ T3318] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 175.359614][ T9657] pim6reg1: entered promiscuous mode [ 175.365011][ T9657] pim6reg1: entered allmulticast mode [ 175.382502][ T9664] 9p: Bad value for 'rfdno' [ 175.544075][ T9686] loop1: detected capacity change from 0 to 512 [ 175.561165][ T9686] EXT4-fs warning (device loop1): ext4_enable_quotas:7221: Failed to enable quota tracking (type=0, err=-13, ino=3). Please run e2fsck to fix. [ 175.576243][ T9686] EXT4-fs (loop1): mount failed [ 175.603612][ T9690] netlink: 128 bytes leftover after parsing attributes in process `syz.4.2055'. [ 175.777033][ T9704] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2060'. [ 175.916094][ T9713] loop1: detected capacity change from 0 to 1024 [ 175.923331][ T9713] EXT4-fs (loop1): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 175.934271][ T9713] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 175.944590][ T9713] JBD2: no valid journal superblock found [ 175.950553][ T9713] EXT4-fs (loop1): Could not load journal inode [ 175.959440][ T9713] SELinux: security_context_str_to_sid (Ð-šXܘ7.H\¹ÿ %ºu@) failed with errno=-22 [ 175.982779][ T9715] loop1: detected capacity change from 0 to 256 [ 175.997178][ T9715] FAT-fs (loop1): Directory bread(block 64) failed [ 176.004171][ T9715] FAT-fs (loop1): Directory bread(block 65) failed [ 176.011195][ T9715] FAT-fs (loop1): Directory bread(block 66) failed [ 176.017818][ T9715] FAT-fs (loop1): Directory bread(block 67) failed [ 176.024613][ T9715] FAT-fs (loop1): Directory bread(block 68) failed [ 176.031258][ T9715] FAT-fs (loop1): Directory bread(block 69) failed [ 176.038021][ T9715] FAT-fs (loop1): Directory bread(block 70) failed [ 176.044601][ T9715] FAT-fs (loop1): Directory bread(block 71) failed [ 176.051185][ T9715] FAT-fs (loop1): Directory bread(block 72) failed [ 176.057690][ T9715] FAT-fs (loop1): Directory bread(block 73) failed [ 176.192950][ T9732] netlink: 64 bytes leftover after parsing attributes in process `syz.1.2070'. [ 176.202236][ T9732] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2070'. [ 176.268305][ T29] kauditd_printk_skb: 1563 callbacks suppressed [ 176.268327][ T29] audit: type=1326 audit(1768323571.911:63468): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9731 comm="syz.1.2070" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f53d715f749 code=0x7ffc0000 [ 176.306327][ T29] audit: type=1326 audit(1768323571.911:63469): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9731 comm="syz.1.2070" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f53d715f749 code=0x7ffc0000 [ 176.330149][ T29] audit: type=1326 audit(1768323571.911:63470): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9731 comm="syz.1.2070" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f53d715f749 code=0x7ffc0000 [ 176.354334][ T29] audit: type=1326 audit(1768323571.911:63471): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9731 comm="syz.1.2070" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f53d715f749 code=0x7ffc0000 [ 176.377846][ T29] audit: type=1326 audit(1768323571.911:63472): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9731 comm="syz.1.2070" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f53d715f749 code=0x7ffc0000 [ 176.402250][ T29] audit: type=1326 audit(1768323571.911:63473): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9731 comm="syz.1.2070" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f53d715f749 code=0x7ffc0000 [ 176.426121][ T29] audit: type=1326 audit(1768323571.911:63474): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9731 comm="syz.1.2070" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f53d715f749 code=0x7ffc0000 [ 176.449617][ T29] audit: type=1326 audit(1768323571.911:63475): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9731 comm="syz.1.2070" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f53d715f749 code=0x7ffc0000 [ 176.473288][ T29] audit: type=1326 audit(1768323571.911:63476): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9731 comm="syz.1.2070" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f53d715f749 code=0x7ffc0000 [ 176.482239][ T9739] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2073'. [ 176.497143][ T29] audit: type=1326 audit(1768323571.911:63477): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9731 comm="syz.1.2070" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f53d715f749 code=0x7ffc0000 [ 176.596353][ T9744] loop2: detected capacity change from 0 to 1024 [ 176.603436][ T9744] EXT4-fs (loop2): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 176.614610][ T9744] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 176.625225][ T9744] JBD2: no valid journal superblock found [ 176.630986][ T9744] EXT4-fs (loop2): Could not load journal inode [ 176.641510][ T9744] SELinux: security_context_str_to_sid (Ð-šXܘ7.H\¹ÿ %ºu@) failed with errno=-22 [ 176.796832][ T9756] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2081'. [ 177.060675][ T9773] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 177.095123][ T9777] loop3: detected capacity change from 0 to 2048 [ 177.109089][ T9777] 9p: Bad value for 'rfdno' [ 177.120528][ T9777] loop3: detected capacity change from 0 to 512 [ 177.127455][ T9777] EXT4-fs: dax option not supported [ 177.129443][ T9779] SELinux: ebitmap: truncated map [ 177.138106][ T9777] bond1: (slave bond0): Releasing active interface [ 177.139277][ T9779] SELinux: failed to load policy [ 177.150988][ T9777] bond0: (slave dummy0): Releasing backup interface [ 177.159328][ T9777] bond0: (slave bond_slave_0): Releasing backup interface [ 177.167689][ T9777] bond0: (slave bond_slave_1): Releasing backup interface [ 177.176395][ T9777] team0: Port device team_slave_0 removed [ 177.184936][ T9777] team0: Port device team_slave_1 removed [ 177.233431][ T9787] loop1: detected capacity change from 0 to 512 [ 177.251371][ T9787] EXT4-fs warning (device loop1): ext4_enable_quotas:7221: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 177.266653][ T9787] EXT4-fs (loop1): mount failed [ 177.420434][ T9816] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2104'. [ 177.436897][ T9816] netlink: 'syz.3.2104': attribute type 1 has an invalid length. [ 177.444733][ T9816] netlink: 'syz.3.2104': attribute type 1 has an invalid length. [ 177.452645][ T9816] netlink: 'syz.3.2104': attribute type 1 has an invalid length. [ 177.462121][ T9816] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2104'. [ 177.525196][ T9825] FAULT_INJECTION: forcing a failure. [ 177.525196][ T9825] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 177.538376][ T9825] CPU: 0 UID: 0 PID: 9825 Comm: syz.2.2106 Not tainted syzkaller #0 PREEMPT(voluntary) [ 177.538442][ T9825] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 177.538453][ T9825] Call Trace: [ 177.538459][ T9825] [ 177.538544][ T9825] __dump_stack+0x1d/0x30 [ 177.538569][ T9825] dump_stack_lvl+0x95/0xd0 [ 177.538590][ T9825] dump_stack+0x15/0x1b [ 177.538670][ T9825] should_fail_ex+0x265/0x280 [ 177.538723][ T9825] should_fail+0xb/0x20 [ 177.538746][ T9825] should_fail_usercopy+0x1a/0x20 [ 177.538768][ T9825] _copy_from_user+0x1c/0xb0 [ 177.538841][ T9825] __copy_msghdr+0x244/0x300 [ 177.538868][ T9825] ___sys_sendmsg+0x109/0x1d0 [ 177.538974][ T9825] __x64_sys_sendmsg+0xd4/0x160 [ 177.539011][ T9825] x64_sys_call+0x17ba/0x3000 [ 177.539037][ T9825] do_syscall_64+0xca/0x2b0 [ 177.539146][ T9825] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 177.539170][ T9825] RIP: 0033:0x7f9f2ec9f749 [ 177.539185][ T9825] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 177.539231][ T9825] RSP: 002b:00007f9f2d6ff038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 177.539250][ T9825] RAX: ffffffffffffffda RBX: 00007f9f2eef5fa0 RCX: 00007f9f2ec9f749 [ 177.539301][ T9825] RDX: 0000000000000080 RSI: 0000200000000200 RDI: 0000000000000003 [ 177.539315][ T9825] RBP: 00007f9f2d6ff090 R08: 0000000000000000 R09: 0000000000000000 [ 177.539329][ T9825] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 177.539343][ T9825] R13: 00007f9f2eef6038 R14: 00007f9f2eef5fa0 R15: 00007fffaff20708 [ 177.539363][ T9825] [ 177.733100][ T9829] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2109'. [ 177.872718][ T9845] xt_hashlimit: max too large, truncated to 1048576 [ 177.880049][ T9845] xt_CT: You must specify a L4 protocol and not use inversions on it [ 177.928595][ T9848] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2116'. [ 178.251237][ T9875] FAULT_INJECTION: forcing a failure. [ 178.251237][ T9875] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 178.264336][ T9875] CPU: 0 UID: 0 PID: 9875 Comm: syz.1.2125 Not tainted syzkaller #0 PREEMPT(voluntary) [ 178.264405][ T9875] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 178.264417][ T9875] Call Trace: [ 178.264423][ T9875] [ 178.264431][ T9875] __dump_stack+0x1d/0x30 [ 178.264498][ T9875] dump_stack_lvl+0x95/0xd0 [ 178.264527][ T9875] dump_stack+0x15/0x1b [ 178.264632][ T9875] should_fail_ex+0x265/0x280 [ 178.264653][ T9875] should_fail+0xb/0x20 [ 178.264671][ T9875] should_fail_usercopy+0x1a/0x20 [ 178.264776][ T9875] _copy_to_user+0x20/0xa0 [ 178.264868][ T9875] simple_read_from_buffer+0xb5/0x130 [ 178.264893][ T9875] proc_fail_nth_read+0x10e/0x150 [ 178.264964][ T9875] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 178.264993][ T9875] vfs_read+0x1a8/0x770 [ 178.265009][ T9875] ? __rcu_read_unlock+0x4f/0x70 [ 178.265102][ T9875] ? __fget_files+0x184/0x1c0 [ 178.265126][ T9875] ? mutex_lock+0x58/0x90 [ 178.265158][ T9875] ksys_read+0xda/0x1a0 [ 178.265180][ T9875] __x64_sys_read+0x40/0x50 [ 178.265200][ T9875] x64_sys_call+0x2889/0x3000 [ 178.265267][ T9875] do_syscall_64+0xca/0x2b0 [ 178.265302][ T9875] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 178.265321][ T9875] RIP: 0033:0x7f53d715e15c [ 178.265338][ T9875] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 178.265361][ T9875] RSP: 002b:00007f53d5bc7030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 178.265380][ T9875] RAX: ffffffffffffffda RBX: 00007f53d73b5fa0 RCX: 00007f53d715e15c [ 178.265393][ T9875] RDX: 000000000000000f RSI: 00007f53d5bc70a0 RDI: 0000000000000005 [ 178.265406][ T9875] RBP: 00007f53d5bc7090 R08: 0000000000000000 R09: 0000000000000000 [ 178.265420][ T9875] R10: 0000200000000140 R11: 0000000000000246 R12: 0000000000000001 [ 178.265435][ T9875] R13: 00007f53d73b6038 R14: 00007f53d73b5fa0 R15: 00007fff3f2dbe58 [ 178.265456][ T9875] [ 178.513899][ T9884] loop1: detected capacity change from 0 to 2048 [ 178.537750][ T9884] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 178.552699][ T9884] ext4 filesystem being mounted at /464/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 179.281001][ T4134] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm kworker/u8:45: bg 0: block 345: padding at end of block bitmap is not set [ 179.340117][ T4134] EXT4-fs (loop1): Remounting filesystem read-only [ 179.346910][ T4058] EXT4-fs warning (device loop1): ext4_convert_unwritten_extents:4984: inode #15: block 1: len 15: ext4_ext_map_blocks returned -30 [ 179.510579][ T3317] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 179.562878][ T9925] bridge0: entered promiscuous mode [ 179.568970][ T9925] bridge0: port 3(macvtap1) entered blocking state [ 179.575692][ T9925] bridge0: port 3(macvtap1) entered disabled state [ 179.582994][ T9925] macvtap1: entered allmulticast mode [ 179.588411][ T9925] bridge0: entered allmulticast mode [ 179.597811][ T9925] macvtap1: left allmulticast mode [ 179.602990][ T9925] bridge0: left allmulticast mode [ 179.608818][ T9925] bridge0: left promiscuous mode [ 179.622340][ T9926] bridge0: entered promiscuous mode [ 179.627711][ T9926] macsec1: entered promiscuous mode [ 179.633550][ T9926] bridge0: port 3(macsec1) entered blocking state [ 179.640165][ T9926] bridge0: port 3(macsec1) entered disabled state [ 179.646875][ T9926] macsec1: entered allmulticast mode [ 179.652216][ T9926] bridge0: entered allmulticast mode [ 179.658385][ T9926] macsec1: left allmulticast mode [ 179.663511][ T9926] bridge0: left allmulticast mode [ 179.718301][ T9926] bridge0: left promiscuous mode [ 179.774333][ T9933] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 179.786093][ T9933] EXT4-fs (loop2): 1 truncate cleaned up [ 179.792617][ T9933] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 179.818649][ T3318] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 179.841720][ T9938] xt_limit: Overflow, try lower: 167772/2147483648 [ 179.890261][ T9940] SELinux: ebitmap: truncated map [ 179.900084][ T9940] SELinux: failed to load policy [ 180.083356][ T9950] openvswitch: netlink: Missing key (keys=40, expected=200000) [ 180.271677][ T9948] netdevsim netdevsim2 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 180.281649][ T9948] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 180.298198][ T9971] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2156'. [ 180.316230][ T9971] netlink: 'syz.3.2156': attribute type 1 has an invalid length. [ 180.324034][ T9971] netlink: 'syz.3.2156': attribute type 1 has an invalid length. [ 180.331833][ T9971] netlink: 'syz.3.2156': attribute type 1 has an invalid length. [ 180.341214][ T9964] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2148'. [ 180.360083][ T9964] bond1: option ad_user_port_key: invalid value (1136) [ 180.366976][ T9964] bond1: option ad_user_port_key: allowed values 0 - 1023 [ 180.375582][ T9964] bond1 (unregistering): Released all slaves [ 180.391570][ T9948] netdevsim netdevsim2 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 180.401383][ T9948] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 180.415284][ T9967] set_capacity_and_notify: 1 callbacks suppressed [ 180.415301][ T9967] loop2: detected capacity change from 0 to 1024 [ 180.428431][ T9967] SELinux: security_context_str_to_sid (system_u) failed with errno=-22 [ 180.446996][ T9978] SELinux: security_context_str_to_sid (Ð-šXܘ7.H\¹ÿ %ºu@) failed with errno=-22 [ 180.472451][ T9985] netlink: 'syz.1.2162': attribute type 10 has an invalid length. [ 180.484348][ T9985] team0: Port device dummy0 added [ 180.492074][ T9948] netdevsim netdevsim2 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 180.501926][ T9948] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 180.551754][ T9948] netdevsim netdevsim2 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 180.561559][ T9948] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 180.573078][ T9997] futex_wake_op: syz.1.2162 tries to shift op by -1; fix this program [ 180.606581][ T4134] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 180.614834][ T4134] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 180.663851][ T4134] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 180.672320][ T4134] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 180.684936][ T4120] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 180.693403][ T4120] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 180.711586][ T4120] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 180.720500][ T4120] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 180.744429][T10014] netlink: 'syz.3.2172': attribute type 1 has an invalid length. [ 180.752342][T10014] netlink: 'syz.3.2172': attribute type 1 has an invalid length. [ 180.760115][T10014] netlink: 'syz.3.2172': attribute type 1 has an invalid length. [ 181.057453][T10053] 9p: Bad value for 'rfdno' [ 181.082049][T10055] macvtap0: refused to change device tx_queue_len [ 181.226146][T10073] SELinux: ebitmap: truncated map [ 181.235499][T10073] SELinux: failed to load policy [ 181.262319][T10076] loop3: detected capacity change from 0 to 512 [ 181.289606][ T29] kauditd_printk_skb: 418 callbacks suppressed [ 181.289622][ T29] audit: type=1326 audit(1768323576.931:63895): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10079 comm="syz.3.2200" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb516e8f749 code=0x7ffc0000 [ 181.320065][ T29] audit: type=1326 audit(1768323576.941:63896): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10079 comm="syz.3.2200" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb516e8f749 code=0x7ffc0000 [ 181.343755][ T29] audit: type=1326 audit(1768323576.941:63897): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10079 comm="syz.3.2200" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb516e8f749 code=0x7ffc0000 [ 181.367406][ T29] audit: type=1326 audit(1768323576.941:63898): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10079 comm="syz.3.2200" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fb516e8f749 code=0x7ffc0000 [ 181.391566][ T29] audit: type=1326 audit(1768323576.941:63899): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10079 comm="syz.3.2200" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb516e8f749 code=0x7ffc0000 [ 181.415175][ T29] audit: type=1326 audit(1768323576.941:63900): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10079 comm="syz.3.2200" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb516e8f749 code=0x7ffc0000 [ 181.438995][ T29] audit: type=1326 audit(1768323576.941:63901): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10079 comm="syz.3.2200" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb516e8f749 code=0x7ffc0000 [ 181.462638][ T29] audit: type=1326 audit(1768323576.941:63902): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10079 comm="syz.3.2200" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb516e8f749 code=0x7ffc0000 [ 181.486247][ T29] audit: type=1326 audit(1768323576.941:63903): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10079 comm="syz.3.2200" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fb516e8f749 code=0x7ffc0000 [ 181.510005][ T29] audit: type=1326 audit(1768323576.941:63904): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10079 comm="syz.3.2200" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb516e8f749 code=0x7ffc0000 [ 181.533934][T10081] __nla_validate_parse: 11 callbacks suppressed [ 181.534020][T10081] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2200'. [ 181.587545][T10086] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2203'. [ 181.602210][T10086] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2203'. [ 181.612282][T10086] macvtap0: refused to change device tx_queue_len [ 181.660643][T10084] tipc: New replicast peer: 255.255.255.255 [ 181.666732][T10084] tipc: Enabled bearer , priority 10 [ 181.678372][T10084] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2202'. [ 181.687417][T10084] tipc: Disabling bearer [ 181.700981][T10095] loop1: detected capacity change from 0 to 1024 [ 181.707941][T10095] EXT4-fs (loop1): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 181.718854][T10095] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 181.730701][T10095] JBD2: no valid journal superblock found [ 181.736466][T10095] EXT4-fs (loop1): Could not load journal inode [ 181.751953][T10095] SELinux: security_context_str_to_sid (Ð-šXܘ7.H\¹ÿ %ºu@) failed with errno=-22 [ 181.831597][T10107] loop1: detected capacity change from 0 to 128 [ 181.938752][T10121] pim6reg: entered allmulticast mode [ 181.944755][T10121] pim6reg: left allmulticast mode [ 181.973285][T10121] loop2: detected capacity change from 0 to 1024 [ 181.980666][T10121] EXT4-fs: quotafile must be on filesystem root [ 182.046713][T10128] SELinux: security_context_str_to_sid (Ð-šXܘ7.H\¹ÿ %ºu@) failed with errno=-22 [ 182.160290][T10151] bridge16: entered promiscuous mode [ 182.165666][T10151] bridge16: entered allmulticast mode [ 182.173701][T10151] team0: Port device bridge16 added [ 182.185427][T10151] bridge0: entered promiscuous mode [ 182.200544][T10151] bridge0: port 3(macvtap1) entered blocking state [ 182.207230][T10151] bridge0: port 3(macvtap1) entered disabled state [ 182.240188][T10151] macvtap1: entered allmulticast mode [ 182.245606][T10151] bridge0: entered allmulticast mode [ 182.270545][T10151] macvtap1: left allmulticast mode [ 182.275723][T10151] bridge0: left allmulticast mode [ 182.283416][T10151] bridge0: left promiscuous mode [ 182.294031][T10162] loop1: detected capacity change from 0 to 512 [ 182.318560][T10162] EXT4-fs warning (device loop1): ext4_xattr_inode_get:560: inode #11: comm syz.1.2230: EA inode hash validation failed [ 182.331838][T10162] EXT4-fs error (device loop1): ext4_do_update_inode:5617: inode #15: comm syz.1.2230: corrupted inode contents [ 182.344177][T10162] EXT4-fs error (device loop1): ext4_dirty_inode:6502: inode #15: comm syz.1.2230: mark_inode_dirty error [ 182.356211][T10162] EXT4-fs error (device loop1): ext4_do_update_inode:5617: inode #15: comm syz.1.2230: corrupted inode contents [ 182.368550][T10162] EXT4-fs error (device loop1): ext4_xattr_delete_inode:3000: inode #15: comm syz.1.2230: mark_inode_dirty error [ 182.380890][T10162] EXT4-fs error (device loop1): ext4_xattr_delete_inode:3003: inode #15: comm syz.1.2230: mark inode dirty (error -117) [ 182.393888][T10162] EXT4-fs warning (device loop1): ext4_evict_inode:273: xattr delete (err -117) [ 182.403406][T10162] EXT4-fs (loop1): 1 orphan inode deleted [ 182.411502][T10162] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 182.431158][T10173] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2237'. [ 182.459525][ T3317] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 182.489152][T10175] SELinux: security_context_str_to_sid (Ð-šXܘ7.H\¹ÿ %ºu@) failed with errno=-22 [ 182.576299][T10186] ipt_rpfilter: unknown options [ 182.639178][T10193] usb usb1: usbfs: interface 0 claimed by hub while 'syz.1.2246' sets config #-1 [ 182.998043][T10201] loop2: detected capacity change from 0 to 1024 [ 183.005283][T10201] EXT4-fs (loop2): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 183.016199][T10201] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 183.028009][T10201] JBD2: no valid journal superblock found [ 183.033864][T10201] EXT4-fs (loop2): Could not load journal inode [ 183.043871][T10201] SELinux: security_context_str_to_sid (Ð-šXܘ7.H\¹ÿ %ºu@) failed with errno=-22 [ 183.087176][T10210] SELinux: ebitmap: truncated map [ 183.096404][T10210] SELinux: failed to load policy [ 183.137548][T10217] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2256'. [ 183.232063][T10225] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 183.296673][T10233] tipc: Started in network mode [ 183.301725][T10233] tipc: Node identity b67d66522936, cluster identity 4711 [ 183.308903][T10233] tipc: Enabled bearer , priority 0 [ 183.316863][T10232] tipc: Resetting bearer [ 183.333660][T10232] tipc: Disabling bearer [ 183.400686][T10243] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2267'. [ 183.421562][T10243] validate_nla: 6 callbacks suppressed [ 183.421643][T10243] netlink: 'syz.3.2267': attribute type 1 has an invalid length. [ 183.421731][T10239] SELinux: security_context_str_to_sid (Ð-šXܘ7.H\¹ÿ %ºu@) failed with errno=-22 [ 183.427398][T10243] netlink: 'syz.3.2267': attribute type 1 has an invalid length. [ 183.452632][T10243] netlink: 'syz.3.2267': attribute type 1 has an invalid length. [ 183.472381][T10243] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2267'. [ 183.638355][T10268] loop3: detected capacity change from 0 to 1024 [ 183.645934][T10268] EXT4-fs: Ignoring removed nobh option [ 183.651637][T10268] EXT4-fs: Ignoring removed bh option [ 183.707284][T10272] loop3: detected capacity change from 0 to 512 [ 183.868752][T10286] SELinux: ebitmap: truncated map [ 183.877116][T10286] SELinux: failed to load policy [ 184.048132][T10300] loop3: detected capacity change from 0 to 2048 [ 184.167728][T10310] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2293'. [ 184.187255][T10310] netlink: 'syz.3.2293': attribute type 1 has an invalid length. [ 184.195209][T10310] netlink: 'syz.3.2293': attribute type 1 has an invalid length. [ 184.203108][T10310] netlink: 'syz.3.2293': attribute type 1 has an invalid length. [ 184.212154][T10310] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2293'. [ 184.688421][T10325] EXT4-fs: Ignoring removed orlov option [ 184.694470][T10325] /dev/loop1: Can't open blockdev [ 184.885850][T10337] SELinux: security_context_str_to_sid (Ð-šXܘ7.H\¹ÿ %ºu@) failed with errno=-22 [ 185.076077][T10333] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2560 sclass=netlink_route_socket pid=10333 comm=syz.1.2303 [ 185.088911][T10333] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2563 sclass=netlink_route_socket pid=10333 comm=syz.1.2303 [ 185.128064][T10368] netlink: 'syz.4.2316': attribute type 1 has an invalid length. [ 185.135914][T10368] netlink: 'syz.4.2316': attribute type 1 has an invalid length. [ 185.143798][T10368] netlink: 'syz.4.2316': attribute type 1 has an invalid length. [ 185.155303][T10368] macvtap0: refused to change device tx_queue_len [ 185.268745][T10377] loop2: p1 p2[DM] p4 [ 185.273241][T10377] loop2: p1 size 196608 extends beyond EOD, truncated [ 185.294386][T10377] loop2: p2 start 4292936063 is beyond EOD, truncated [ 185.298937][T10396] sctp: [Deprecated]: syz.0.2329 (pid 10396) Use of int in max_burst socket option. [ 185.298937][T10396] Use struct sctp_assoc_value instead [ 185.301324][T10377] loop2: p4 size 50331648 extends beyond EOD, truncated [ 185.326423][T10388] SELinux: ebitmap: truncated map [ 185.335508][T10378] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks [ 185.345900][T10388] SELinux: failed to load policy [ 185.482456][T10422] FAULT_INJECTION: forcing a failure. [ 185.482456][T10422] name failslab, interval 1, probability 0, space 0, times 0 [ 185.495171][T10422] CPU: 1 UID: 0 PID: 10422 Comm: syz.2.2337 Not tainted syzkaller #0 PREEMPT(voluntary) [ 185.495199][T10422] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 185.495217][T10422] Call Trace: [ 185.495225][T10422] [ 185.495232][T10422] __dump_stack+0x1d/0x30 [ 185.495256][T10422] dump_stack_lvl+0x95/0xd0 [ 185.495321][T10422] dump_stack+0x15/0x1b [ 185.495377][T10422] should_fail_ex+0x265/0x280 [ 185.495412][T10422] should_failslab+0x8c/0xb0 [ 185.495491][T10422] kmem_cache_alloc_noprof+0x69/0x4b0 [ 185.495515][T10422] ? dst_alloc+0xbd/0x100 [ 185.495545][T10422] dst_alloc+0xbd/0x100 [ 185.495570][T10422] ip_route_output_key_hash_rcu+0xf29/0x1380 [ 185.495673][T10422] ip_route_output_flow+0x65/0x110 [ 185.495705][T10422] tcp_v4_connect+0x493/0xaf0 [ 185.495786][T10422] __inet_stream_connect+0x169/0x7d0 [ 185.495809][T10422] ? should_failslab+0x8c/0xb0 [ 185.495828][T10422] ? __kmalloc_cache_noprof+0x252/0x4c0 [ 185.495849][T10422] ? tcp_sendmsg_fastopen+0x172/0x520 [ 185.495892][T10422] tcp_sendmsg_fastopen+0x43a/0x520 [ 185.495982][T10422] tcp_sendmsg_locked+0x26e1/0x2c00 [ 185.496010][T10422] ? lockref_put_return+0xf7/0x130 [ 185.496037][T10422] ? __rcu_read_unlock+0x4f/0x70 [ 185.496056][T10422] ? __rcu_read_unlock+0x4f/0x70 [ 185.496085][T10422] ? avc_has_perm_noaudit+0xab/0x130 [ 185.496130][T10422] ? avc_has_perm+0xf7/0x180 [ 185.496155][T10422] ? _raw_spin_lock_bh+0x56/0xb0 [ 185.496180][T10422] ? _raw_spin_unlock_bh+0x36/0x40 [ 185.496225][T10422] ? __pfx_tcp_sendmsg+0x10/0x10 [ 185.496255][T10422] tcp_sendmsg+0x2f/0x50 [ 185.496280][T10422] inet_sendmsg+0x76/0xd0 [ 185.496374][T10422] __sock_sendmsg+0x102/0x180 [ 185.496396][T10422] __sys_sendto+0x268/0x330 [ 185.496429][T10422] __x64_sys_sendto+0x76/0x90 [ 185.496535][T10422] x64_sys_call+0x29a7/0x3000 [ 185.496560][T10422] do_syscall_64+0xca/0x2b0 [ 185.496642][T10422] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 185.496665][T10422] RIP: 0033:0x7f9f2ec9f749 [ 185.496682][T10422] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 185.496700][T10422] RSP: 002b:00007f9f2d6ff038 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 185.496778][T10422] RAX: ffffffffffffffda RBX: 00007f9f2eef5fa0 RCX: 00007f9f2ec9f749 [ 185.496789][T10422] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000003 [ 185.496874][T10422] RBP: 00007f9f2d6ff090 R08: 0000200000e68000 R09: 0000000000000010 [ 185.496886][T10422] R10: 00000000200007fd R11: 0000000000000246 R12: 0000000000000001 [ 185.496898][T10422] R13: 00007f9f2eef6038 R14: 00007f9f2eef5fa0 R15: 00007fffaff20708 [ 185.496985][T10422] [ 185.838937][T10438] netlink: 'syz.1.2344': attribute type 1 has an invalid length. [ 185.847681][T10438] macvtap0: refused to change device tx_queue_len [ 185.869144][T10436] SELinux: ebitmap: truncated map [ 185.880586][T10436] SELinux: failed to load policy [ 186.319710][ T29] kauditd_printk_skb: 3733 callbacks suppressed [ 186.319724][ T29] audit: type=1326 audit(1768323581.961:67636): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10441 comm="syz.2.2346" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f9f2ecd2005 code=0x7ffc0000 [ 186.420120][ T29] audit: type=1326 audit(1768323582.071:67637): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10441 comm="syz.2.2346" exe="/root/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7f9f2ec9f749 code=0x7ffc0000 [ 186.499158][T10469] SELinux: ebitmap: truncated map [ 186.508843][T10469] SELinux: failed to load policy [ 186.546507][T10480] __nla_validate_parse: 10 callbacks suppressed [ 186.546523][T10480] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2361'. [ 186.570002][T10480] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2361'. [ 186.582518][T10475] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2359'. [ 186.693308][T10492] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2366'. [ 186.703480][T10486] futex_wake_op: syz.4.2363 tries to shift op by -1; fix this program [ 186.716420][ T29] audit: type=1326 audit(1768323582.371:67638): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10496 comm="syz.3.2368" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb516e8f749 code=0x7ffc0000 [ 186.740242][ T29] audit: type=1326 audit(1768323582.371:67639): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10496 comm="syz.3.2368" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fb516e8f749 code=0x7ffc0000 [ 186.764023][ T29] audit: type=1326 audit(1768323582.371:67640): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10496 comm="syz.3.2368" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb516e8f749 code=0x7ffc0000 [ 186.787794][ T29] audit: type=1326 audit(1768323582.371:67641): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10496 comm="syz.3.2368" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fb516e8f749 code=0x7ffc0000 [ 186.813107][ T29] audit: type=1326 audit(1768323582.371:67642): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10496 comm="syz.3.2368" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb516e8f749 code=0x7ffc0000 [ 186.813773][T10492] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2366'. [ 186.836823][ T29] audit: type=1326 audit(1768323582.371:67643): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10496 comm="syz.3.2368" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fb516e8f749 code=0x7ffc0000 [ 186.836860][ T29] audit: type=1326 audit(1768323582.371:67644): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10496 comm="syz.3.2368" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb516e8f749 code=0x7ffc0000 [ 186.836886][ T29] audit: type=1326 audit(1768323582.371:67645): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10496 comm="syz.3.2368" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fb516e8f749 code=0x7ffc0000 [ 186.917530][T10502] macvtap0: refused to change device tx_queue_len [ 186.948558][T10507] netlink: 19 bytes leftover after parsing attributes in process `syz.3.2372'. [ 186.959406][T10505] SELinux: ebitmap: truncated map [ 186.966966][T10505] SELinux: failed to load policy [ 187.049300][T10521] SELinux: security_context_str_to_sid (Ð-šXܘ7.H\¹ÿ %ºu@) failed with errno=-22 [ 187.135576][T10534] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2385'. [ 187.151933][T10534] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2385'. [ 187.157925][T10536] SELinux: ebitmap: truncated map [ 187.166386][T10534] macvtap0: refused to change device tx_queue_len [ 187.181374][T10536] SELinux: failed to load policy [ 187.229310][T10546] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2389'. [ 187.357259][T10525] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2380'. [ 187.487100][T10556] set_capacity_and_notify: 4 callbacks suppressed [ 187.487115][T10556] loop2: detected capacity change from 0 to 512 [ 187.525819][T10556] EXT4-fs warning (device loop2): ext4_enable_quotas:7221: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 187.536922][T10559] SELinux: security_context_str_to_sid (Ð-šXܘ7.H\¹ÿ %ºu@) failed with errno=-22 [ 187.561610][T10556] EXT4-fs (loop2): mount failed [ 187.671833][T10579] program syz.2.2399 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 187.700852][T10579] loop2: detected capacity change from 0 to 512 [ 187.713756][T10579] EXT4-fs error (device loop2): ext4_quota_enable:7173: comm syz.2.2399: Bad quota inum: 1, type: 2 [ 187.725279][T10579] EXT4-fs warning (device loop2): ext4_enable_quotas:7221: Failed to enable quota tracking (type=2, err=-117, ino=1). Please run e2fsck to fix. [ 187.740813][T10579] EXT4-fs (loop2): mount failed [ 187.770090][T10586] wireguard0: entered promiscuous mode [ 187.775623][T10586] wireguard0: entered allmulticast mode [ 187.834125][T10591] macvtap0: refused to change device tx_queue_len [ 187.916646][T10597] loop2: detected capacity change from 0 to 1024 [ 187.925907][T10597] EXT4-fs (loop2): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 187.937280][T10597] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 187.952813][T10597] JBD2: no valid journal superblock found [ 187.958832][T10597] EXT4-fs (loop2): Could not load journal inode [ 187.978969][T10597] SELinux: security_context_str_to_sid (Ð-šXܘ7.H\¹ÿ %ºu@) failed with errno=-22 [ 188.071315][T10615] macvtap0: refused to change device tx_queue_len [ 188.136412][T10625] SELinux: security_context_str_to_sid (Ð-šXܘ7.H\¹ÿ %ºu@) failed with errno=-22 [ 188.238643][T10641] macvtap0: refused to change device tx_queue_len [ 188.378841][T10654] SELinux: security_context_str_to_sid (Ð-šXܘ7.H\¹ÿ %ºu@) failed with errno=-22 [ 188.472029][T10671] validate_nla: 18 callbacks suppressed [ 188.472046][T10671] netlink: 'syz.3.2440': attribute type 1 has an invalid length. [ 188.485390][T10671] netlink: 'syz.3.2440': attribute type 1 has an invalid length. [ 188.493200][T10671] netlink: 'syz.3.2440': attribute type 1 has an invalid length. [ 188.533692][T10675] netlink: 'syz.1.2443': attribute type 7 has an invalid length. [ 188.545139][T10675] loop1: detected capacity change from 0 to 512 [ 188.552372][T10675] ext4: Unknown parameter 'uid>00000000000000000000' [ 188.561262][T10679] SELinux: ebitmap: truncated map [ 188.571502][T10679] SELinux: failed to load policy [ 188.628142][T10687] loop1: detected capacity change from 0 to 1024 [ 188.652698][T10687] EXT4-fs (loop1): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 188.663700][T10687] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 188.680646][T10687] JBD2: no valid journal superblock found [ 188.686516][T10687] EXT4-fs (loop1): Could not load journal inode [ 188.706493][T10687] SELinux: security_context_str_to_sid (Ð-šXܘ7.H\¹ÿ %ºu@) failed with errno=-22 [ 188.771430][T10710] netlink: 'syz.1.2457': attribute type 1 has an invalid length. [ 188.779203][T10710] netlink: 'syz.1.2457': attribute type 1 has an invalid length. [ 188.787151][T10710] netlink: 'syz.1.2457': attribute type 1 has an invalid length. [ 188.819779][T10710] macvtap0: refused to change device tx_queue_len [ 188.926482][T10737] xt_hashlimit: max too large, truncated to 1048576 [ 188.934524][T10737] xt_CT: You must specify a L4 protocol and not use inversions on it [ 188.942835][T10733] loop1: detected capacity change from 0 to 1024 [ 188.950116][T10733] EXT4-fs (loop1): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 188.961218][T10733] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 188.972292][T10733] JBD2: no valid journal superblock found [ 188.978244][T10733] EXT4-fs (loop1): Could not load journal inode [ 188.987237][T10733] SELinux: security_context_str_to_sid (Ð-šXܘ7.H\¹ÿ %ºu@) failed with errno=-22 [ 189.266430][T10755] loop1: detected capacity change from 0 to 1024 [ 189.274091][T10755] EXT4-fs: Ignoring removed orlov option [ 189.282428][T10755] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 189.315908][T10759] netlink: 'syz.4.2477': attribute type 1 has an invalid length. [ 189.323792][T10759] netlink: 'syz.4.2477': attribute type 1 has an invalid length. [ 189.331586][T10759] netlink: 'syz.4.2477': attribute type 1 has an invalid length. [ 189.366589][T10759] macvtap0: refused to change device tx_queue_len [ 189.561041][ T3317] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 189.610224][T10768] SELinux: security_context_str_to_sid (Ð-šXܘ7.H\¹ÿ %ºu@) failed with errno=-22 [ 189.756747][T10788] loop1: detected capacity change from 0 to 512 [ 189.800245][T10788] EXT4-fs: Ignoring removed nomblk_io_submit option [ 189.827674][T10788] EXT4-fs error (device loop1): ext4_orphan_get:1391: inode #15: comm syz.1.2489: iget: bad extended attribute block 262144 [ 189.875355][T10788] EXT4-fs error (device loop1): ext4_orphan_get:1396: comm syz.1.2489: couldn't read orphan inode 15 (err -117) [ 189.917350][T10788] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 190.085450][ T3317] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 190.385373][T10817] pim6reg1: entered promiscuous mode [ 190.390917][T10817] pim6reg1: entered allmulticast mode [ 190.625226][T10831] loop1: detected capacity change from 0 to 4096 [ 190.806570][T10831] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 191.154545][T10863] 0ªî{X¹¦: left allmulticast mode [ 191.166203][T10863] ip6_vti0 speed is unknown, defaulting to 1000 [ 191.180258][T10863] ip6_vti0 speed is unknown, defaulting to 1000 [ 191.186437][T10868] SELinux: Context system_u:object_r:dpkg_exec_t:s0 is not valid (left unmapped). [ 191.188262][T10863] ip6_vti0 speed is unknown, defaulting to 1000 [ 191.234545][T10871] macvtap0: refused to change device tx_queue_len [ 191.240634][T10863] infiniband syz2: set down [ 191.245768][T10863] infiniband syz2: added ip6_vti0 [ 191.254116][T10873] bridge16: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 191.266624][T10873] bridge16: entered promiscuous mode [ 191.271982][T10873] bridge16: entered allmulticast mode [ 191.279928][ T3725] ip6_vti0 speed is unknown, defaulting to 1000 [ 191.289703][T10863] RDS/IB: syz2: added [ 191.293745][T10863] smc: adding ib device syz2 with port count 1 [ 191.301826][T10863] smc: ib device syz2 port 1 has no pnetid [ 191.308063][ T3725] ip6_vti0 speed is unknown, defaulting to 1000 [ 191.321042][T10863] ip6_vti0 speed is unknown, defaulting to 1000 [ 191.360203][T10863] ip6_vti0 speed is unknown, defaulting to 1000 [ 191.364384][ T29] kauditd_printk_skb: 4746 callbacks suppressed [ 191.364399][ T29] audit: type=1400 audit(1768323587.011:72391): avc: denied { remount } for pid=10872 comm="syz.2.2526" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 191.396267][T10863] ip6_vti0 speed is unknown, defaulting to 1000 [ 191.417993][ T3317] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 191.443332][T10863] ip6_vti0 speed is unknown, defaulting to 1000 [ 191.456727][ T29] audit: type=1326 audit(1768323587.101:72392): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10884 comm="syz.1.2531" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f53d715f749 code=0x7ffc0000 [ 191.508271][T10863] ip6_vti0 speed is unknown, defaulting to 1000 [ 191.538065][ T29] audit: type=1326 audit(1768323587.131:72393): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10884 comm="syz.1.2531" exe="/root/syz-executor" sig=0 arch=c000003e syscall=294 compat=0 ip=0x7f53d715f749 code=0x7ffc0000 [ 191.562068][ T29] audit: type=1326 audit(1768323587.131:72394): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10884 comm="syz.1.2531" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f53d715f749 code=0x7ffc0000 [ 191.585903][ T29] audit: type=1326 audit(1768323587.131:72395): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10884 comm="syz.1.2531" exe="/root/syz-executor" sig=0 arch=c000003e syscall=254 compat=0 ip=0x7f53d715f749 code=0x7ffc0000 [ 191.609587][ T29] audit: type=1326 audit(1768323587.131:72396): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10884 comm="syz.1.2531" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f53d715f749 code=0x7ffc0000 [ 191.633251][ T29] audit: type=1326 audit(1768323587.131:72397): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10884 comm="syz.1.2531" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f53d715f749 code=0x7ffc0000 [ 191.656956][ T29] audit: type=1326 audit(1768323587.131:72398): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10884 comm="syz.1.2531" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f53d715f749 code=0x7ffc0000 [ 191.677775][T10903] __nla_validate_parse: 30 callbacks suppressed [ 191.677793][T10903] netlink: 32 bytes leftover after parsing attributes in process `syz.4.2540'. [ 191.680692][ T29] audit: type=1326 audit(1768323587.131:72399): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10884 comm="syz.1.2531" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f53d715f749 code=0x7ffc0000 [ 191.719691][ T29] audit: type=1326 audit(1768323587.131:72400): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10884 comm="syz.1.2531" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f53d715f749 code=0x7ffc0000 [ 191.746512][T10890] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2534'. [ 191.892438][T10931] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2554'. [ 191.934516][T10936] Set syz1 is full, maxelem 6117 reached [ 192.005040][T10948] gretap1: entered promiscuous mode [ 192.160495][T10965] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2568'. [ 192.359413][T10990] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2579'. [ 192.369887][T10990] netlink: 312 bytes leftover after parsing attributes in process `syz.1.2579'. [ 192.378971][T10990] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2579'. [ 192.482802][T11002] openvswitch: netlink: Missing key (keys=40, expected=200000) [ 192.542476][T11012] netlink: 68 bytes leftover after parsing attributes in process `syz.1.2589'. [ 193.083223][T11046] SELinux: security_context_str_to_sid (Ð-šXܘ7.H\¹ÿ %ºu@) failed with errno=-22 [ 193.123144][T11058] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2603'. [ 193.165500][T11058] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2603'. [ 193.180832][T11058] macvtap0: refused to change device tx_queue_len [ 194.521349][T11154] SELinux: ebitmap: truncated map [ 194.530977][T11149] SELinux: security_context_str_to_sid (Ð-šXܘ7.H\¹ÿ %ºu@) failed with errno=-22 [ 194.541000][T11154] SELinux: failed to load policy [ 195.679928][T11251] SELinux: ebitmap: truncated map [ 195.685733][T11251] SELinux: failed to load policy [ 195.723232][T11259] atomic_op ffff88817547e928 conn xmit_atomic 0000000000000000 [ 195.905813][T11288] vhci_hcd vhci_hcd.3: default hub control req: 010b v0000 i0000 l0 [ 195.977463][T11305] validate_nla: 7 callbacks suppressed [ 195.977559][T11305] netlink: 'syz.2.2707': attribute type 1 has an invalid length. [ 195.990885][T11305] netlink: 'syz.2.2707': attribute type 1 has an invalid length. [ 195.998725][T11305] netlink: 'syz.2.2707': attribute type 1 has an invalid length. [ 196.010575][T11305] macvtap0: refused to change device tx_queue_len [ 196.331005][T11339] openvswitch: netlink: Missing key (keys=40, expected=200000) [ 196.429234][ T29] kauditd_printk_skb: 3792 callbacks suppressed [ 196.429246][ T29] audit: type=1326 audit(1768323592.071:76193): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11324 comm="syz.2.2716" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f9f2ecd2005 code=0x7ffc0000 [ 196.492993][T11344] bridge16: entered promiscuous mode [ 196.498378][T11344] bridge16: entered allmulticast mode [ 196.529510][ T29] audit: type=1326 audit(1768323592.171:76194): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11324 comm="syz.2.2716" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f9f2ecd2005 code=0x7ffc0000 [ 196.558810][T11349] bridge0: entered promiscuous mode [ 196.565537][T11349] bridge0: port 3(macvtap1) entered blocking state [ 196.572093][T11349] bridge0: port 3(macvtap1) entered disabled state [ 196.578809][T11349] macvtap1: entered allmulticast mode [ 196.584239][T11349] bridge0: entered allmulticast mode [ 196.589947][T11349] macvtap1: left allmulticast mode [ 196.595092][T11349] bridge0: left allmulticast mode [ 196.600958][T11349] bridge0: left promiscuous mode [ 196.611493][T11348] macvtap0: refused to change device tx_queue_len [ 196.629918][ T29] audit: type=1326 audit(1768323592.271:76195): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11324 comm="syz.2.2716" exe="/root/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7f9f2ec9f749 code=0x7ffc0000 [ 196.662929][ T29] audit: type=1326 audit(1768323592.311:76196): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11351 comm="syz.1.2726" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f53d715f749 code=0x7ffc0000 [ 196.687990][ T29] audit: type=1326 audit(1768323592.311:76197): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11351 comm="syz.1.2726" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f53d715f749 code=0x7ffc0000 [ 196.711783][ T29] audit: type=1326 audit(1768323592.311:76198): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11351 comm="syz.1.2726" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f53d715f749 code=0x7ffc0000 [ 196.717076][T11356] tmpfs: Bad value for 'mpol' [ 196.735491][ T29] audit: type=1326 audit(1768323592.311:76199): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11351 comm="syz.1.2726" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f53d715f749 code=0x7ffc0000 [ 196.792198][ T29] audit: type=1326 audit(1768323592.411:76200): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11357 comm="syz.2.2729" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9f2ec9f749 code=0x7ffc0000 [ 196.816309][ T29] audit: type=1326 audit(1768323592.411:76201): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11357 comm="syz.2.2729" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9f2ec9f749 code=0x7ffc0000 [ 196.840019][ T29] audit: type=1326 audit(1768323592.411:76202): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11357 comm="syz.2.2729" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9f2ec9f749 code=0x7ffc0000 [ 196.866788][T11352] __nla_validate_parse: 9 callbacks suppressed [ 196.866799][T11352] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2726'. [ 196.994647][T11373] vxcan1: entered allmulticast mode [ 197.004984][T11372] vxcan1: left allmulticast mode [ 197.062902][T11386] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2743'. [ 197.073955][T11386] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2743'. [ 197.083765][T11386] macvtap0: refused to change device tx_queue_len [ 197.305103][T11416] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2757'. [ 197.357568][T11423] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2759'. [ 197.428710][T11425] bridge19: entered promiscuous mode [ 197.434209][T11425] bridge19: entered allmulticast mode [ 197.606935][T11444] netlink: 'syz.2.2767': attribute type 1 has an invalid length. [ 197.653838][T11444] 8021q: adding VLAN 0 to HW filter on device bond1 [ 197.666852][T11446] bond0: (slave dummy0): Releasing backup interface [ 197.693493][T11446] bond1: (slave dummy0): making interface the new active one [ 197.702605][T11446] bond1: (slave dummy0): Enslaving as an active interface with an up link [ 197.731100][T11444] bond1: entered allmulticast mode [ 197.741016][T11444] dummy0: entered allmulticast mode [ 198.063258][T11465] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2775'. [ 198.101946][T11465] macvtap0: refused to change device tx_queue_len [ 198.404776][T11490] SELinux: security_context_str_to_sid (Ð-šXܘ7.H\¹ÿ %ºu@) failed with errno=-22 [ 198.714323][T11518] SELinux: security_context_str_to_sid (Ð-šXܘ7.H\¹ÿ %ºu@) failed with errno=-22 [ 198.875853][T11543] SELinux: security_context_str_to_sid (Ð-šXܘ7.H\¹ÿ %ºu@) failed with errno=-22 [ 199.038222][T11557] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2814'. [ 199.204950][T11569] loop1: detected capacity change from 0 to 128 [ 199.211718][T11569] /dev/loop1: Can't open blockdev [ 199.415275][T11571] openvswitch: netlink: Missing key (keys=40, expected=200000) [ 199.508302][T11584] netlink: 'syz.1.2825': attribute type 1 has an invalid length. [ 199.627650][T11584] SELinux: policydb magic number 0x80 does not match expected magic number 0xf97cff8c [ 199.647635][T11584] SELinux: failed to load policy [ 199.748451][T11602] netlink: 'syz.0.2832': attribute type 5 has an invalid length. [ 199.765279][T11604] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2833'. [ 199.780415][T11606] loop1: detected capacity change from 0 to 1024 [ 199.796870][T11606] EXT4-fs (loop1): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 199.807847][T11606] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 199.818464][T11606] JBD2: no valid journal superblock found [ 199.824357][T11606] EXT4-fs (loop1): Could not load journal inode [ 199.845631][T11606] SELinux: security_context_str_to_sid (Ð-šXܘ7.H\¹ÿ %ºu@) failed with errno=-22 [ 199.936211][T11615] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2837'. [ 199.945238][T11615] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2837'. [ 199.993109][T11624] 0ªX¹¦À: left allmulticast mode [ 199.998695][T11624] wg2: left promiscuous mode [ 200.003428][T11624] wg2: left allmulticast mode [ 200.008920][T11624] batadv_slave_0: left promiscuous mode [ 200.030829][T11624] ip6gre2: left promiscuous mode [ 200.035938][T11624] ip6gre2: left allmulticast mode [ 200.119735][T11626] ip6_vti0 speed is unknown, defaulting to 1000 [ 200.304688][T11653] SELinux: security_context_str_to_sid (Ð-šXܘ7.H\¹ÿ %ºu@) failed with errno=-22 [ 200.542876][T11658] loop1: detected capacity change from 0 to 1024 [ 200.614279][T11658] EXT4-fs: Ignoring removed orlov option [ 200.666442][T11658] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 200.862361][T11688] SELinux: security_context_str_to_sid (Ð-šXܘ7.H\¹ÿ %ºu@) failed with errno=-22 [ 200.901325][T11686] FAULT_INJECTION: forcing a failure. [ 200.901325][T11686] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 200.914499][T11686] CPU: 1 UID: 0 PID: 11686 Comm: syz.0.2860 Not tainted syzkaller #0 PREEMPT(voluntary) [ 200.914531][T11686] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 200.914545][T11686] Call Trace: [ 200.914552][T11686] [ 200.914559][T11686] __dump_stack+0x1d/0x30 [ 200.914584][T11686] dump_stack_lvl+0x95/0xd0 [ 200.914641][T11686] dump_stack+0x15/0x1b [ 200.914662][T11686] should_fail_ex+0x265/0x280 [ 200.914686][T11686] should_fail+0xb/0x20 [ 200.914707][T11686] should_fail_usercopy+0x1a/0x20 [ 200.914759][T11686] _copy_to_user+0x20/0xa0 [ 200.914788][T11686] simple_read_from_buffer+0xb5/0x130 [ 200.914812][T11686] proc_fail_nth_read+0x10e/0x150 [ 200.914843][T11686] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 200.914901][T11686] vfs_read+0x1a8/0x770 [ 200.914920][T11686] ? __rcu_read_unlock+0x4f/0x70 [ 200.914943][T11686] ? __fget_files+0x184/0x1c0 [ 200.914994][T11686] ? mutex_lock+0x58/0x90 [ 200.915020][T11686] ksys_read+0xda/0x1a0 [ 200.915038][T11686] __x64_sys_read+0x40/0x50 [ 200.915057][T11686] x64_sys_call+0x2889/0x3000 [ 200.915158][T11686] do_syscall_64+0xca/0x2b0 [ 200.915195][T11686] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 200.915220][T11686] RIP: 0033:0x7f1e5306e15c [ 200.915312][T11686] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 200.915333][T11686] RSP: 002b:00007f1e51acf030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 200.915356][T11686] RAX: ffffffffffffffda RBX: 00007f1e532c5fa0 RCX: 00007f1e5306e15c [ 200.915369][T11686] RDX: 000000000000000f RSI: 00007f1e51acf0a0 RDI: 0000000000000005 [ 200.915382][T11686] RBP: 00007f1e51acf090 R08: 0000000000000000 R09: 0000000000000000 [ 200.915431][T11686] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 200.915451][T11686] R13: 00007f1e532c6038 R14: 00007f1e532c5fa0 R15: 00007ffea6dab568 [ 200.915473][T11686] [ 201.138813][T11692] macvtap0: refused to change device tx_queue_len [ 201.314700][T11700] netlink: 'syz.3.2865': attribute type 10 has an invalid length. [ 201.324374][T11700] team0: Port device dummy0 added [ 201.330449][T11700] netlink: 'syz.3.2865': attribute type 10 has an invalid length. [ 201.340047][T11700] team0: Port device dummy0 removed [ 201.347094][T11700] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 201.459714][ T29] kauditd_printk_skb: 5300 callbacks suppressed [ 201.459730][ T29] audit: type=1326 audit(1768323597.021:81504): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11694 comm="syz.0.2864" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1e5306f749 code=0x7ffc0000 [ 201.489807][ T29] audit: type=1326 audit(1768323597.021:81505): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11694 comm="syz.0.2864" exe="/root/syz-executor" sig=0 arch=c000003e syscall=203 compat=0 ip=0x7f1e5306f749 code=0x7ffc0000 [ 201.513538][ T29] audit: type=1326 audit(1768323597.021:81506): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11694 comm="syz.0.2864" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1e5306f749 code=0x7ffc0000 [ 201.537367][ T29] audit: type=1326 audit(1768323597.021:81507): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11694 comm="syz.0.2864" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1e5306f749 code=0x7ffc0000 [ 201.561364][ T29] audit: type=1326 audit(1768323597.021:81508): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11694 comm="syz.0.2864" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1e5306f749 code=0x7ffc0000 [ 201.589067][ T29] audit: type=1326 audit(1768323597.021:81509): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11694 comm="syz.0.2864" exe="/root/syz-executor" sig=0 arch=c000003e syscall=299 compat=0 ip=0x7f1e5306f749 code=0x7ffc0000 [ 201.615405][ T29] audit: type=1326 audit(1768323597.021:81502): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11633 comm="syz.1.2843" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f53d71565e7 code=0x7ffc0000 [ 201.638971][ T29] audit: type=1326 audit(1768323597.021:81510): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11633 comm="syz.1.2843" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f53d70fb829 code=0x7ffc0000 [ 201.662533][ T29] audit: type=1326 audit(1768323597.021:81511): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11633 comm="syz.1.2843" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f53d71565e7 code=0x7ffc0000 [ 201.686161][ T29] audit: type=1326 audit(1768323597.021:81512): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11633 comm="syz.1.2843" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f53d70fb829 code=0x7ffc0000 [ 201.867340][ T3317] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 201.926501][T11709] __nla_validate_parse: 3 callbacks suppressed [ 201.926518][T11709] netlink: 68 bytes leftover after parsing attributes in process `syz.3.2870'. [ 202.010662][T11717] openvswitch: netlink: Missing key (keys=40, expected=200000) [ 202.039712][T11719] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 202.070996][T11719] SET target dimension over the limit! [ 202.258580][T11741] bridge0: port 2(bridge_slave_1) entered disabled state [ 202.265963][T11741] bridge0: port 1(bridge_slave_0) entered disabled state [ 202.384380][T11741] tipc: Resetting bearer [ 202.401828][ T52] netdevsim netdevsim2 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 202.410416][ T52] netdevsim netdevsim2 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 202.422285][ T52] netdevsim netdevsim2 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 202.430906][ T52] netdevsim netdevsim2 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 202.439378][T11748] ip6_vti0 speed is unknown, defaulting to 1000 [ 202.439426][ T52] netdevsim netdevsim2 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 202.439454][ T52] netdevsim netdevsim2 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 202.462621][ T52] netdevsim netdevsim2 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 202.471148][ T52] netdevsim netdevsim2 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 202.840503][T11779] ip6_vti0 speed is unknown, defaulting to 1000 [ 202.928861][T11776] ip6_vti0 speed is unknown, defaulting to 1000 [ 203.052881][T11793] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2897'. [ 203.175603][T11776] chnl_net:caif_netlink_parms(): no params data found [ 203.256241][T11776] bridge0: port 1(bridge_slave_0) entered blocking state [ 203.263512][T11776] bridge0: port 1(bridge_slave_0) entered disabled state [ 203.271807][T11776] bridge_slave_0: entered allmulticast mode [ 203.278641][T11776] bridge_slave_0: entered promiscuous mode [ 203.307242][T11814] SELinux: security_context_str_to_sid (Ð-šXܘ7.H\¹ÿ %ºu@) failed with errno=-22 [ 203.329372][T11816] futex_wake_op: syz.1.2905 tries to shift op by -1; fix this program [ 203.368380][T11776] bridge0: port 2(bridge_slave_1) entered blocking state [ 203.376519][T11776] bridge0: port 2(bridge_slave_1) entered disabled state [ 203.406370][T11776] bridge_slave_1: entered allmulticast mode [ 203.414223][T11825] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2908'. [ 203.420701][T11776] bridge_slave_1: entered promiscuous mode [ 203.423549][T11825] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 203.489376][T11776] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 203.508723][T11776] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 203.533811][T11833] bridge: RTM_NEWNEIGH with invalid ether address [ 203.542165][T11776] team0: Port device team_slave_0 added [ 203.561129][T11776] team0: Port device team_slave_1 added [ 203.581762][T11776] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 203.588809][T11776] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 203.615010][T11776] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 203.627742][T11776] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 203.634767][T11776] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 203.642764][T11842] FAULT_INJECTION: forcing a failure. [ 203.642764][T11842] name failslab, interval 1, probability 0, space 0, times 0 [ 203.660791][T11776] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 203.673542][T11842] CPU: 1 UID: 0 PID: 11842 Comm: syz.0.2916 Not tainted syzkaller #0 PREEMPT(voluntary) [ 203.673609][T11842] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 203.673622][T11842] Call Trace: [ 203.673630][T11842] [ 203.673639][T11842] __dump_stack+0x1d/0x30 [ 203.673665][T11842] dump_stack_lvl+0x95/0xd0 [ 203.673764][T11842] dump_stack+0x15/0x1b [ 203.673785][T11842] should_fail_ex+0x265/0x280 [ 203.673845][T11842] should_failslab+0x8c/0xb0 [ 203.673932][T11842] kmem_cache_alloc_noprof+0x69/0x4b0 [ 203.673956][T11842] ? security_inode_alloc+0x37/0x100 [ 203.673979][T11842] security_inode_alloc+0x37/0x100 [ 203.674000][T11842] inode_init_always_gfp+0x4b7/0x500 [ 203.674024][T11842] ? __pfx_shmem_alloc_inode+0x10/0x10 [ 203.674081][T11842] alloc_inode+0x58/0x170 [ 203.674102][T11842] new_inode+0x1d/0xe0 [ 203.674125][T11842] shmem_get_inode+0x246/0x750 [ 203.674154][T11842] shmem_mknod+0x44/0x170 [ 203.674229][T11842] shmem_mkdir+0x33/0x70 [ 203.674259][T11842] vfs_mkdir+0x2db/0x3d0 [ 203.674313][T11842] do_mkdirat+0x133/0x3b0 [ 203.674334][T11842] __x64_sys_mkdirat+0x4c/0x60 [ 203.674353][T11842] x64_sys_call+0x30c/0x3000 [ 203.674396][T11842] do_syscall_64+0xca/0x2b0 [ 203.674471][T11842] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 203.674493][T11842] RIP: 0033:0x7f1e5306f749 [ 203.674510][T11842] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 203.674529][T11842] RSP: 002b:00007f1e51acf038 EFLAGS: 00000246 ORIG_RAX: 0000000000000102 [ 203.674549][T11842] RAX: ffffffffffffffda RBX: 00007f1e532c5fa0 RCX: 00007f1e5306f749 [ 203.674616][T11842] RDX: 00000000000001ff RSI: 0000200000000000 RDI: ffffffffffffff9c [ 203.674631][T11842] RBP: 00007f1e51acf090 R08: 0000000000000000 R09: 0000000000000000 [ 203.674643][T11842] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 203.674656][T11842] R13: 00007f1e532c6038 R14: 00007f1e532c5fa0 R15: 00007ffea6dab568 [ 203.674676][T11842] [ 203.915015][T11776] hsr_slave_0: entered promiscuous mode [ 203.922031][T11776] hsr_slave_1: entered promiscuous mode [ 204.004276][T11864] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2925'. [ 204.014901][T11864] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2925'. [ 204.024683][T11864] macvtap0: refused to change device tx_queue_len [ 204.054540][T11873] openvswitch: netlink: Missing key (keys=40, expected=200000) [ 204.261493][T11892] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2935'. [ 204.275295][T11892] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2935'. [ 204.300836][T11894] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2936'. [ 204.311216][T11894] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2936'. [ 204.321354][T11894] macvtap0: refused to change device tx_queue_len [ 204.344530][T11897] tc_dump_action: action bad kind [ 204.350425][T11898] openvswitch: netlink: Missing key (keys=40, expected=200000) [ 204.433248][T11919] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2947'. [ 204.443644][T11919] macvtap0: refused to change device tx_queue_len [ 204.462408][T11921] netlink: 'syz.1.2948': attribute type 3 has an invalid length. [ 204.483162][T11923] FAULT_INJECTION: forcing a failure. [ 204.483162][T11923] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 204.496358][T11923] CPU: 1 UID: 0 PID: 11923 Comm: syz.1.2949 Not tainted syzkaller #0 PREEMPT(voluntary) [ 204.496390][T11923] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 204.496401][T11923] Call Trace: [ 204.496408][T11923] [ 204.496419][T11923] __dump_stack+0x1d/0x30 [ 204.496437][T11923] dump_stack_lvl+0x95/0xd0 [ 204.496450][T11923] dump_stack+0x15/0x1b [ 204.496493][T11923] should_fail_ex+0x265/0x280 [ 204.496507][T11923] should_fail+0xb/0x20 [ 204.496518][T11923] should_fail_usercopy+0x1a/0x20 [ 204.496532][T11923] _copy_to_user+0x20/0xa0 [ 204.496610][T11923] simple_read_from_buffer+0xb5/0x130 [ 204.496623][T11923] proc_fail_nth_read+0x10e/0x150 [ 204.496640][T11923] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 204.496683][T11923] vfs_read+0x1a8/0x770 [ 204.496693][T11923] ? __rcu_read_unlock+0x4f/0x70 [ 204.496706][T11923] ? __fget_files+0x184/0x1c0 [ 204.496719][T11923] ? mutex_lock+0x58/0x90 [ 204.496777][T11923] ksys_read+0xda/0x1a0 [ 204.496867][T11923] __x64_sys_read+0x40/0x50 [ 204.496878][T11923] x64_sys_call+0x2889/0x3000 [ 204.496892][T11923] do_syscall_64+0xca/0x2b0 [ 204.496911][T11923] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 204.496925][T11923] RIP: 0033:0x7f53d715e15c [ 204.496939][T11923] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 204.497000][T11923] RSP: 002b:00007f53d5bc7030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 204.497013][T11923] RAX: ffffffffffffffda RBX: 00007f53d73b5fa0 RCX: 00007f53d715e15c [ 204.497036][T11923] RDX: 000000000000000f RSI: 00007f53d5bc70a0 RDI: 0000000000000006 [ 204.497090][T11923] RBP: 00007f53d5bc7090 R08: 0000000000000000 R09: 0000000000000000 [ 204.497097][T11923] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 204.497117][T11923] R13: 00007f53d73b6038 R14: 00007f53d73b5fa0 R15: 00007fff3f2dbe58 [ 204.497128][T11923] [ 204.715561][T11925] ip6_vti0 speed is unknown, defaulting to 1000 [ 204.895067][T11925] loop1: detected capacity change from 0 to 512 [ 204.901979][T11925] EXT4-fs: dax option not supported [ 204.913791][T11925] loop1: detected capacity change from 0 to 512 [ 204.921367][T11925] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 204.933920][T11925] EXT4-fs (loop1): 1 truncate cleaned up [ 204.940305][T11925] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 205.017157][ T3317] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 205.230463][T11776] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 205.255506][T11951] loop1: detected capacity change from 0 to 1024 [ 205.262786][T11951] EXT4-fs: Ignoring removed orlov option [ 205.271709][T11776] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 205.280938][T11776] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 205.290982][T11951] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 205.304524][T11776] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 205.373816][T11776] 8021q: adding VLAN 0 to HW filter on device bond0 [ 205.387504][T11776] 8021q: adding VLAN 0 to HW filter on device team0 [ 205.398047][ T52] bridge0: port 1(bridge_slave_0) entered blocking state [ 205.405174][ T52] bridge0: port 1(bridge_slave_0) entered forwarding state [ 205.425980][T11776] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 205.436447][T11776] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 205.453290][ T52] bridge0: port 2(bridge_slave_1) entered blocking state [ 205.460413][ T52] bridge0: port 2(bridge_slave_1) entered forwarding state [ 205.527573][ T3312] ================================================================== [ 205.535690][ T3312] BUG: KCSAN: data-race in shmem_getattr / shmem_recalc_inode [ 205.543176][ T3312] [ 205.545508][ T3312] read-write to 0xffff88810ae85468 of 8 bytes by task 11945 on cpu 0: [ 205.553656][ T3312] shmem_recalc_inode+0x3f/0x1f0 [ 205.558606][ T3312] shmem_get_folio_gfp+0x79d/0xd50 [ 205.563822][ T3312] shmem_write_begin+0xfc/0x1f0 [ 205.568725][ T3312] generic_perform_write+0x184/0x490 [ 205.574030][ T3312] shmem_file_write_iter+0xc5/0xf0 [ 205.579163][ T3312] __kernel_write_iter+0x2d6/0x540 [ 205.584285][ T3312] dump_user_range+0x61e/0x8f0 [ 205.589144][ T3312] elf_core_dump+0x1de7/0x1f80 [ 205.593928][ T3312] coredump_write+0xacf/0xdf0 [ 205.598794][ T3312] vfs_coredump+0x24f7/0x2e60 [ 205.603476][ T3312] get_signal+0xd84/0xf70 [ 205.605098][T11776] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 205.607808][ T3312] arch_do_signal_or_restart+0x96/0x450 [ 205.620086][ T3312] irqentry_exit+0xf9/0x560 [ 205.624600][ T3312] asm_exc_page_fault+0x26/0x30 [ 205.629457][ T3312] [ 205.631788][ T3312] read to 0xffff88810ae85468 of 8 bytes by task 3312 on cpu 1: [ 205.639328][ T3312] shmem_getattr+0x41/0x200 [ 205.643967][ T3312] vfs_getattr_nosec+0x146/0x1e0 [ 205.648929][ T3312] vfs_statx+0x113/0x390 [ 205.653176][ T3312] vfs_fstatat+0x115/0x170 [ 205.657606][ T3312] __se_sys_newfstatat+0x55/0x260 [ 205.662643][ T3312] __x64_sys_newfstatat+0x55/0x70 [ 205.667760][ T3312] x64_sys_call+0x111f/0x3000 [ 205.672548][ T3312] do_syscall_64+0xca/0x2b0 [ 205.677191][ T3312] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 205.683349][ T3312] [ 205.685663][ T3312] value changed: 0x0000000000001cc2 -> 0x0000000000001cc4 [ 205.692779][ T3312] [ 205.695114][ T3312] Reported by Kernel Concurrency Sanitizer on: [ 205.701262][ T3312] CPU: 1 UID: 0 PID: 3312 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(voluntary) [ 205.711151][ T3312] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 205.721237][ T3312] ================================================================== [ 205.794064][ T3317] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 205.855521][T11776] veth0_vlan: entered promiscuous mode [ 205.893305][T11776] veth1_vlan: entered promiscuous mode [ 205.908230][T11776] veth0_macvtap: entered promiscuous mode [ 205.915620][T11776] veth1_macvtap: entered promiscuous mode [ 205.926323][T11776] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 205.937715][T11776] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 205.951117][ T12] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 205.963178][ T12] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 205.975220][ T12] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 206.012240][ T12] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 206.470043][ T29] kauditd_printk_skb: 3129 callbacks suppressed [ 206.470137][ T29] audit: type=1326 audit(1768323602.121:84642): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11965 comm="syz.0.2959" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1e5306f749 code=0x7ffc0000 [ 206.503139][ T29] audit: type=1326 audit(1768323602.121:84643): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11965 comm="syz.0.2959" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f1e530665e7 code=0x7ffc0000 [ 206.526974][ T29] audit: type=1326 audit(1768323602.121:84644): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11965 comm="syz.0.2959" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f1e5300b829 code=0x7ffc0000 [ 206.550588][ T29] audit: type=1326 audit(1768323602.121:84645): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11965 comm="syz.0.2959" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f1e530665e7 code=0x7ffc0000 [ 206.574206][ T29] audit: type=1326 audit(1768323602.121:84646): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11965 comm="syz.0.2959" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f1e5300b829 code=0x7ffc0000 [ 206.597724][ T29] audit: type=1326 audit(1768323602.121:84647): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11965 comm="syz.0.2959" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f1e530665e7 code=0x7ffc0000 [ 206.621729][ T29] audit: type=1326 audit(1768323602.121:84648): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11965 comm="syz.0.2959" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f1e5300b829 code=0x7ffc0000 [ 206.645301][ T29] audit: type=1326 audit(1768323602.121:84649): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11965 comm="syz.0.2959" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f1e530665e7 code=0x7ffc0000 [ 206.668855][ T29] audit: type=1326 audit(1768323602.121:84650): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11965 comm="syz.0.2959" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f1e5300b829 code=0x7ffc0000 [ 206.692415][ T29] audit: type=1326 audit(1768323602.121:84651): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11965 comm="syz.0.2959" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f1e530665e7 code=0x7ffc0000