last executing test programs: 5m54.296815294s ago: executing program 32 (id=8901): bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x10, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = socket$igmp6(0xa, 0x3, 0x2) sendmmsg$inet6(r0, 0x0, 0x0, 0x40) 5m51.163247812s ago: executing program 4 (id=8933): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = syz_open_procfs(0x0, &(0x7f0000000340)='net/vlan/vlan0\x00') socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet6(0xa, 0x3, 0x87) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000280)={{{@in=@private=0xa010102, @in=@loopback, 0xfffd, 0x0, 0x4e20, 0xfffd, 0x2}, {0x0, 0x4, 0x1, 0x0, 0x0, 0x9}, {0x1ff, 0xffffffffe, 0x4053e5, 0x80000000}, 0x6, 0x1, 0x1, 0x0, 0x2, 0x2}, {{@in=@empty, 0x4d2, 0x32}, 0xa, @in6=@private0, 0x3502, 0x1, 0x0, 0x80, 0x400, 0xfffffffd}}, 0xe8) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001580)={0x0}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) epoll_pwait2(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000480)={0x77359400}, &(0x7f00000004c0)={[0x1b94]}, 0x8) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000a80)=ANY=[@ANYBLOB="9feb010018000000000000004900000049000000040000000000000001000085f0b300080d00000000000000ff7f00000f0000000100000f01000000020000004000000003000000be0b000000000000070000000004000000000000080400000000000000505f00ee694e78f35228a48982068d2f5546e444695b4f854b0600f4f8df543c1145b464b808a40c995fcd24d0b177c8bb94a6a83514c9e469f39c91e48d94585571c4c2decf151e4eb74514d876529bb5c4e5267ff11664caca53"], 0x0, 0x68, 0x0, 0x1, 0x2}, 0x28) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000009385000000"], &(0x7f0000000200)='GPL\x00', 0xfffffffc, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000500)={&(0x7f0000000380)='cachefiles_trunc\x00', r0}, 0xffffffffffffffea) pipe2(&(0x7f0000001cc0), 0x800) set_robust_list(&(0x7f0000000100)={&(0x7f0000000040)={&(0x7f0000000000)}, 0x1, &(0x7f00000000c0)={&(0x7f0000000080)}}, 0x18) r2 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000240)=@newqdisc={0xb4, 0x24, 0xf0b, 0x70bd2b, 0x0, {0x0, 0x0, 0x12, r3, {}, {0xffff, 0xffff}, {0x2, 0xfff3}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x84, 0x2, [@TCA_TAPRIO_ATTR_FLAGS={0x8, 0xa, 0x1}, @TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1], 0x0, [0x8, 0x6, 0x3c, 0x0, 0x8, 0x0, 0x2, 0xe, 0x0, 0x0, 0x0, 0x0, 0x61c1, 0x0, 0x0, 0x3], [0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x401, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x39]}}, @TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x10, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x4000000}]}]}, @TCA_TAPRIO_ATTR_SCHED_CLOCKID={0x8, 0x5, 0x1}, @TCA_TAPRIO_ATTR_TXTIME_DELAY={0x8, 0xb, 0x1}]}}]}, 0xb4}}, 0x0) fcntl$setownex(r4, 0xf, &(0x7f0000000180)={0x1}) r5 = gettid() sendmsg$NFC_CMD_DEV_UP(0xffffffffffffffff, &(0x7f0000000a40)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000a00)={&(0x7f00000009c0)={0x2c, 0x0, 0x1, 0x70bd26, 0x25dfdbfe, {}, [@NFC_ATTR_DEVICE_INDEX={0x8}, @NFC_ATTR_DEVICE_INDEX={0x8}, @NFC_ATTR_DEVICE_INDEX={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8002}, 0x4004) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r5}, &(0x7f0000bbdffc)) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x50) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r6 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000200), 0x100) readv(r6, &(0x7f0000000300)=[{&(0x7f0000000000)=""/47, 0x2f}], 0x1) 5m50.240786283s ago: executing program 4 (id=8956): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0xd, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b704000008000000850000007800000095"], 0x0, 0x6, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kfree\x00', r1}, 0x10) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000000c0)={{r0, 0xffffffffffffffff}, &(0x7f0000000040), &(0x7f0000000080)='%pi6 \x00'}, 0x20) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r5, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@ipv6_newnexthop={0x20, 0x68, 0x5fb9a818fb7378e9, 0x0, 0x25dfdbff, {}, [@NHA_OIF={0x8, 0x5, r7}]}, 0x20}}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000003c0)=@newlink={0x20, 0x10, 0x437, 0x0, 0x0, {0x0, 0x0, 0x0, r7, 0x192}}, 0x20}}, 0x0) r8 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000002c0)=0xffffffffffffffff, 0x4) r9 = creat(&(0x7f00000000c0)='./file0\x00', 0xf6) ioctl$BLKROTATIONAL(r9, 0x127e, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000740)=@bpf_ext={0x1c, 0x1e, &(0x7f0000000100)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x16}, {{0x18, 0x1, 0x1, 0x0, r2}}, {}, [@map_val={0x18, 0x2, 0x2, 0x0, r0, 0x0, 0x0, 0x0, 0x8000}, @map_fd={0x18, 0x6, 0x1, 0x0, r0}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x2}, @btf_id={0x18, 0x2, 0x3, 0x0, 0x2}, @generic={0x1, 0x6, 0x1, 0x5, 0xfb}, @alu={0x4, 0x1, 0x0, 0x5, 0xa, 0xffffffffffffffc0, 0x8}, @cb_func={0x18, 0x1, 0x4, 0x0, 0x6}, @map_idx_val={0x18, 0x5, 0x6, 0x0, 0xd, 0x0, 0x0, 0x0, 0x1}, @map_fd={0x18, 0x7, 0x1, 0x0, r3}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000200)='syzkaller\x00', 0x3, 0x8, &(0x7f0000000240)=""/8, 0x40f00, 0x2, '\x00', r7, 0x0, r8, 0x8, &(0x7f0000000300)={0x7, 0x4}, 0x8, 0x10, &(0x7f0000000380)={0x4, 0xf, 0x4, 0x5}, 0x10, 0x24669, r1, 0x5, &(0x7f00000003c0)=[r0, r0, r0, r0, r0, r9], &(0x7f0000000400)=[{0x3, 0x4, 0x4, 0x4}, {0x4, 0x4, 0x9, 0x7}, {0x4, 0x2, 0xd, 0x5}, {0x1, 0x4, 0xb, 0x4}, {0x2, 0x2, 0x8, 0x3}]}, 0x94) openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) 5m50.233820924s ago: executing program 4 (id=8957): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0x13, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020641700000000002020007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000040000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) rseq(&(0x7f00000004c0), 0x20, 0x0, 0x0) 5m50.203548707s ago: executing program 4 (id=8959): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7ec9}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYBLOB], 0xa8}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000900)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000180a0500000000000000000002000000300003802c00038014000100776732000000000000000000000000001400010076657468315f746f5f627269646765000900020073797a30000000000900010073797a300000000014000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x24040089}, 0x20008000) 5m50.181018439s ago: executing program 4 (id=8960): mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x2, 0x1) connect$inet(r0, &(0x7f0000000180)={0x2, 0x0, @remote}, 0x10) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080", @ANYRESOCT=r0], 0x48) r1 = socket(0x28, 0x5, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000c40)={0x11, 0x5, &(0x7f0000000080)=ANY=[@ANYBLOB="1801000042000000000000003b810000850000006d000000070000000000000095"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x28, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f0000000a80)='kfree\x00', r2}, 0x10) r3 = syz_open_procfs(0x0, &(0x7f0000000000)='ns\x00') r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x39) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x800}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000cc0)='kmem_cache_free\x00', r5}, 0x18) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount$bind(&(0x7f0000000100)='.\x00', &(0x7f0000000240)='./file0/../file0\x00', 0x0, 0x2151090, 0x0) r6 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r6, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000080)='./file0/file0\x00', 0x0) fsetxattr$security_capability(r3, &(0x7f0000000200), &(0x7f0000000300)=@v3={0x3000000, [{0x8a, 0x8}, {0x3, 0x6548}]}, 0x18, 0x0) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000ac0)={0x18, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000380)='syzkaller\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r7}, 0x10) connect$vsock_stream(r1, &(0x7f0000000040)={0x28, 0x0, 0x2710}, 0x10) mknod$loop(&(0x7f0000000700)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x10, 0x1) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x8080}, 0x20004450) sendmsg$NFT_MSG_GETRULE(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000740)=ANY=[@ANYBLOB="38000000070a010100000006000000000a0040010900010073797a310000000009000200"], 0x38}, 0x1, 0x0, 0x0, 0x20040850}, 0x44054) connect$vsock_stream(r1, &(0x7f0000000400)={0x28, 0x0, 0x2710, @host}, 0x10) 5m49.816414475s ago: executing program 4 (id=8961): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000640)={&(0x7f0000000300)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@func_proto]}}, &(0x7f0000000540)=""/228, 0x26, 0xe4, 0x1}, 0x28) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000340)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6361, 0x7, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc01, {0x0, 0x0, 0x0, r3, {0x0, 0xd}, {0xffff, 0xb}, {0xffff, 0xffe0}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0xc, 0x2, [@TCA_FQ_CODEL_CE_THRESHOLD={0x8, 0x7, 0xfffffff9}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x240040e0}, 0x4890) r4 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r4, &(0x7f00000005c0)="bad330fbc9b55400040000ea0756a85d86dd", 0x5ea, 0x40, &(0x7f00000001c0)={0x11, 0x88a8, r3, 0x1, 0xd8, 0x6, @multicast}, 0x14) (fail_nth: 1) 5m46.653516337s ago: executing program 33 (id=9002): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = syz_open_procfs(0x0, &(0x7f0000000340)='net/vlan/vlan0\x00') socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet6(0xa, 0x3, 0x87) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000280)={{{@in=@private=0xa010102, @in=@loopback, 0xfffd, 0x0, 0x4e20, 0xfffd, 0x2}, {0x0, 0x4, 0x1, 0x0, 0x0, 0x9}, {0x1ff, 0xffffffffe, 0x4053e5, 0x80000000}, 0x6, 0x1, 0x1, 0x0, 0x2, 0x2}, {{@in=@empty, 0x4d2, 0x32}, 0xa, @in6=@private0, 0x3502, 0x1, 0x0, 0x80, 0x400, 0xfffffffd}}, 0xe8) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001580)={0x0}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) epoll_pwait2(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000480)={0x77359400}, &(0x7f00000004c0)={[0x1b94]}, 0x8) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000a80)=ANY=[@ANYBLOB="9feb010018000000000000004900000049000000040000000000000001000085f0b300080d00000000000000ff7f00000f0000000100000f01000000020000004000000003000000be0b000000000000070000000004000000000000080400000000000000505f00ee694e78f35228a48982068d2f5546e444695b4f854b0600f4f8df543c1145b464b808a40c995fcd24d0b177c8bb94a6a83514c9e469f39c91e48d94585571c4c2decf151e4eb74514d876529bb5c4e5267ff11664caca53"], 0x0, 0x68, 0x0, 0x1, 0x2}, 0x28) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000938500000071000000"], &(0x7f0000000200)='GPL\x00', 0xfffffffc, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000500)={&(0x7f0000000380)='cachefiles_trunc\x00', r0}, 0xffffffffffffffea) pipe2(&(0x7f0000001cc0), 0x800) set_robust_list(&(0x7f0000000100)={&(0x7f0000000040)={&(0x7f0000000000)}, 0x1, &(0x7f00000000c0)={&(0x7f0000000080)}}, 0x18) r2 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000240)=@newqdisc={0xb4, 0x24, 0xf0b, 0x70bd2b, 0x0, {0x0, 0x0, 0x12, r3, {}, {0xffff, 0xffff}, {0x2, 0xfff3}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x84, 0x2, [@TCA_TAPRIO_ATTR_FLAGS={0x8, 0xa, 0x1}, @TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1], 0x0, [0x8, 0x6, 0x3c, 0x0, 0x8, 0x0, 0x2, 0xe, 0x0, 0x0, 0x0, 0x0, 0x61c1, 0x0, 0x0, 0x3], [0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x401, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x39]}}, @TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x10, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x4000000}]}]}, @TCA_TAPRIO_ATTR_SCHED_CLOCKID={0x8, 0x5, 0x1}, @TCA_TAPRIO_ATTR_TXTIME_DELAY={0x8, 0xb, 0x1}]}}]}, 0xb4}}, 0x0) fcntl$setownex(r4, 0xf, &(0x7f0000000180)={0x1}) r5 = gettid() sendmsg$NFC_CMD_DEV_UP(0xffffffffffffffff, &(0x7f0000000a40)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000a00)={&(0x7f00000009c0)={0x2c, 0x0, 0x1, 0x70bd26, 0x25dfdbfe, {}, [@NFC_ATTR_DEVICE_INDEX={0x8}, @NFC_ATTR_DEVICE_INDEX={0x8}, @NFC_ATTR_DEVICE_INDEX={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8002}, 0x4004) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r5}, &(0x7f0000bbdffc)) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x50) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r6 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000200), 0x100) readv(r6, &(0x7f0000000300)=[{&(0x7f0000000000)=""/47, 0x2f}], 0x1) 5m45.066474544s ago: executing program 34 (id=9018): openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x4, 0xc, &(0x7f0000000240)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x5, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$qrtr(0x2a, 0x2, 0x0) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r0, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x3f00, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='attr/exec\x00') bpf$MAP_CREATE(0x0, 0x0, 0x48) syz_mount_image$ext4(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000340)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d000000180100d19915ec697b8ec342a5a027f9bb0020696c2500000000002020207b1af8ff00000000bfa100000000150007010000f8ffffffb702000008000000b7241f310bba091ec589c985aba7e7e8ee580300000000000085000000"], 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x20, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{r3}, &(0x7f0000000200), &(0x7f0000000240)=r4}, 0x20) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000240)='kfree\x00', r5}, 0x18) readv(0xffffffffffffffff, 0x0, 0x0) r6 = socket(0x2, 0x80805, 0x0) sendmmsg$inet_sctp(r6, &(0x7f0000000880)=[{&(0x7f0000000440)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f00000004c0)=[{&(0x7f0000000100)="03", 0x1}], 0x1}], 0x1, 0x0) sendmmsg$inet_sctp(r6, &(0x7f00000032c0)=[{&(0x7f00000000c0)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000240)=[{0x0}, {&(0x7f0000000300)="359cb6", 0x3}], 0x2, &(0x7f0000000000)=ANY=[@ANYBLOB="30000000000000008400000001000000000000000c000400"/33, @ANYRES32=0x0], 0x30}], 0x1, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a5df850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0xc2f00, 0x4d, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000980)='mm_page_free\x00', r7}, 0x18) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) ioctl$AUTOFS_IOC_FAIL(0xffffffffffffffff, 0x9361, 0x9) clock_getres(0xfffffffffffffffa, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mount$9p_fd(0x0, &(0x7f0000000300)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f0000000ac0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) 5m41.660701259s ago: executing program 35 (id=9050): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0x13, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020641700000000002020007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000400000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) rseq(&(0x7f00000004c0), 0x20, 0x0, 0x0) 5m39.271520235s ago: executing program 0 (id=9068): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0003}]}) clock_nanosleep(0x2, 0x37dc12502000000, &(0x7f00000000c0)={0x0, 0x989680}, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={0x0}, 0x18) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) socket$inet6_tcp(0xa, 0x1, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000009c0000000b"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020047b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000020000085000000c300000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000000)='sched_switch\x00', r2}, 0x18) sendmsg$NFNL_MSG_COMPAT_GET(0xffffffffffffffff, 0x0, 0x20000184) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="01000000080010000400000007"], 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240), &(0x7f0000001940), 0x2000cc0, r3}, 0x38) openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x42, 0x0) r4 = openat$nci(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) write$nci(r4, 0x0, 0xfffffeea) r5 = bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x18, 0xf, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000", @ANYRES32=r5, @ANYBLOB="0000000000000000b702000014fa0000b7030000000008008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000020000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x8, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x94) r6 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_mreq(r6, 0x29, 0x1b, &(0x7f0000000000)={@remote}, 0x14) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0026}]}) connect$inet(0xffffffffffffffff, 0x0, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x8, 0x0, 0x0) bind$inet(0xffffffffffffffff, 0x0, 0x0) socket$inet(0x2, 0x2, 0x6a113fc2) socket$inet(0x2, 0x2, 0x1) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)=ANY=[@ANYBLOB="4c00000002060108000034e40000000000000000050001000600000005000400000000000900020073797a3100000000050005000200000c12000300686173683a6e65742c706f7274"], 0x4c}}, 0x2) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r8, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)=ANY=[@ANYBLOB="50000000090601020000000000000000020000000900020073797a31000000000500010007000000280007800c00018008000140ffffffff0500070084000000060004404e220000060005"], 0x50}, 0x1, 0x0, 0x0, 0x10000082}, 0x80) socket$nl_netfilter(0x10, 0x3, 0xc) 5m38.854423456s ago: executing program 0 (id=9071): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x6, 0x3, &(0x7f0000000480)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x32, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000580)={'veth0_to_team\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000004c0)={r0, r2, 0x25, 0x0, @void}, 0x10) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f00000000c0)=[@in={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x23}}]}, &(0x7f0000000180)=0x10) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)) bpf$MAP_CREATE(0x0, 0x0, 0x48) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_bp={0x0, 0x2}, 0x800}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) openat$cgroup_procs(0xffffffffffffffff, 0x0, 0x2, 0x0) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000820004000000000000000c00850000000f00000095"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x18) socketpair(0x1d, 0x2, 0x2, 0x0) bpf$BPF_PROG_TEST_RUN_LIVE(0xa, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, &(0x7f0000000080)='mem\x00\x10\x00\x00\x00\x00\x00\x00I\xa2l') syz_open_procfs$namespace(0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) syz_clone(0x22023400, 0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r6 = io_uring_setup(0x4fee, &(0x7f0000000040)={0x0, 0x3cb1, 0x1c080, 0xa, 0x20002f7}) io_uring_enter(r6, 0x2219, 0x7721, 0x16, 0x0, 0x0) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004}, &(0x7f0000bbdffc)) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0xd, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'team_slave_0\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="20000000110001002cbd70000000000000000000", @ANYRES32=r7], 0x20}}, 0x2000e844) 5m38.689686022s ago: executing program 0 (id=9072): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000004000000b703000000000000850000007200000095"], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0xe, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f00000004c0)='kfree\x00', r0, 0x0, 0x8000006}, 0x18) lsetxattr$security_selinux(&(0x7f0000000900)='./cgroup.cpu/cgroup.procs\x00', &(0x7f0000000940), &(0x7f0000000980)='system_u:object_r:netutils_exec_t:s0\x00', 0xf, 0x0) r1 = socket(0x10, 0x3, 0x0) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="400000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001800128008000100707070000c00028008000100", @ANYRES32=r2, @ANYBLOB='\b\x00\n\x00', @ANYRES64=r1], 0x40}}, 0x0) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x43, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r4, 0x0, 0x8}, 0x18) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0x8000000000, 0x1}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x3, 0x0, 0x0, 0x7fffffff, 0xfffffffffffffffc}, 0x0, 0x0) 5m38.183660192s ago: executing program 36 (id=9073): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0x13, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020641700000000002020007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000400000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={0x0, r0}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) rseq(&(0x7f00000004c0), 0x20, 0x0, 0x0) 5m37.59378919s ago: executing program 0 (id=9080): mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x2, 0x1) connect$inet(r0, &(0x7f0000000180)={0x2, 0x0, @remote}, 0x10) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080", @ANYRESOCT=r0], 0x48) r1 = socket(0x28, 0x5, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000c40)={0x11, 0x5, &(0x7f0000000080)=ANY=[@ANYBLOB="1801000042000000000000003b810000850000006d000000070000000000000095"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x28, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f0000000a80)='kfree\x00', r2}, 0x10) r3 = syz_open_procfs(0x0, &(0x7f0000000000)='ns\x00') r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x39) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x800}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000cc0)='kmem_cache_free\x00', r5}, 0x18) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount$bind(&(0x7f0000000100)='.\x00', &(0x7f0000000240)='./file0/../file0\x00', 0x0, 0x2151090, 0x0) r6 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r6, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000080)='./file0/file0\x00', 0x0) fsetxattr$security_capability(r3, &(0x7f0000000200), &(0x7f0000000300)=@v3={0x3000000, [{0x8a, 0x8}, {0x3, 0x6548}]}, 0x18, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000ac0)={0x18, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000380)='syzkaller\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) connect$vsock_stream(r1, &(0x7f0000000040)={0x28, 0x0, 0x2710}, 0x10) connect$vsock_stream(r1, &(0x7f0000000400)={0x28, 0x0, 0x2710, @host}, 0x10) 5m37.481254451s ago: executing program 0 (id=9082): r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.net/devices.allow\x00', 0x2, 0x0) open_by_handle_at(r0, &(0x7f0000000140)=@ceph_nfs_fh={0x8, 0x1, {0x7}}, 0x2241c2) 5m37.28764567s ago: executing program 6 (id=9085): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000010000000800000008"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000400000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) r2 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000000c0)={'veth1_to_bond\x00', 0x0}) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000005a40)=ANY=[@ANYBLOB="b400000010000904000000000000000000002200", @ANYRES32=0x0, @ANYBLOB="fffffffed9526cfd8400128009000100766c616e000000007400028006000100000600000c000200367da1650e000000280003800c00010001800000002000000c000100a1000000c84200000c0001000800000008000000340004800c00010006000000ff0300000c000100", @ANYRES32=r3, @ANYBLOB='\b\x00\n\x00', @ANYRESOCT], 0xb4}}, 0x0) 5m37.142498455s ago: executing program 6 (id=9087): r0 = socket$netlink(0x10, 0x3, 0x10) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000b00)=ANY=[@ANYBLOB="1e0000000000000005000000ff"], 0x50) r2 = socket$kcm(0x29, 0x5, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x16, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x200, 0x0, 0x0, 0x0, 0x68, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r4, 0x0, 0x1}, 0x18) sendmmsg$inet(r2, &(0x7f0000000c00)=[{{0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000f80)="ee", 0x1}], 0x1}}], 0x1, 0x0) close(r2) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005700000095"], 0x0}, 0x90) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000080)='mem_disconnect\x00', r5}, 0x10) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x4, &(0x7f0000000100)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x41}]}, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r6, 0x0, 0xe, 0x0, &(0x7f00000003c0)="131c8701feaa16bca4ac74ab821d", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x9}, 0x50) r7 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r7, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r7, 0x1, 0x8, &(0x7f0000000000)=0x80, 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r7, 0x10e, 0x4, &(0x7f0000000180)=0x800, 0x4) r8 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)={0x34, r8, 0x1, 0x0, 0x25dfdbfb, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}}, 0x6048800) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x2400, 0x0) r10 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18010000200180000000000000000000850000007b00000095"], &(0x7f00000001c0)='GPL\x00', 0x4}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='sched_switch\x00', r10}, 0x10) ioctl$TUNSETIFF(r9, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) close(r9) 5m36.932743125s ago: executing program 0 (id=9089): perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_config_ext={0x100000001, 0xdd5}, 0x1004, 0x0, 0x10000, 0x0, 0x2, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) socket$nl_generic(0x10, 0x3, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000500)='./file1\x00', 0x0, &(0x7f00000001c0), 0x1, 0x4bc, &(0x7f0000000a40)="$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") bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000005000000050000000900000001"], 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000004c0)={r0, &(0x7f0000000340), &(0x7f0000000500)=""/155}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000009c0)={0x1f, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x10) r2 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_SET_BINARY(r2, 0x6, 0x0, 0x0, 0x0) fsmount(r2, 0x0, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000300)=ANY=[@ANYBLOB='-cpu'], 0x5) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000140)={[{0x2b, 'cpu'}]}, 0x5) r3 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x181242, 0x148) pwrite64(r3, &(0x7f0000000140)='2', 0xfdef, 0xfecc) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000180)='kfree\x00', r5, 0x0, 0x2}, 0x18) r6 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000200)='memory.stat\x00', 0x275a, 0x0) write(r6, &(0x7f0000000280)="8654f6", 0x3) splice(r6, &(0x7f0000000040), 0xffffffffffffffff, 0x0, 0x6, 0x0) 5m36.932421375s ago: executing program 37 (id=9089): perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_config_ext={0x100000001, 0xdd5}, 0x1004, 0x0, 0x10000, 0x0, 0x2, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) socket$nl_generic(0x10, 0x3, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000500)='./file1\x00', 0x0, &(0x7f00000001c0), 0x1, 0x4bc, &(0x7f0000000a40)="$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") bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000005000000050000000900000001"], 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000004c0)={r0, &(0x7f0000000340), &(0x7f0000000500)=""/155}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000009c0)={0x1f, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x10) r2 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_SET_BINARY(r2, 0x6, 0x0, 0x0, 0x0) fsmount(r2, 0x0, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000300)=ANY=[@ANYBLOB='-cpu'], 0x5) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000140)={[{0x2b, 'cpu'}]}, 0x5) r3 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x181242, 0x148) pwrite64(r3, &(0x7f0000000140)='2', 0xfdef, 0xfecc) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000180)='kfree\x00', r5, 0x0, 0x2}, 0x18) r6 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000200)='memory.stat\x00', 0x275a, 0x0) write(r6, &(0x7f0000000280)="8654f6", 0x3) splice(r6, &(0x7f0000000040), 0xffffffffffffffff, 0x0, 0x6, 0x0) 5m36.467562711s ago: executing program 6 (id=9091): bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x11, 0x1f, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018000000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f66f63bb85"], 0x0, 0x10000000, 0x0, 0x0, 0x41100, 0x10, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x68, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000300)='kfree\x00', r0, 0x0, 0x8}, 0x18) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000140)={0x0, 0x0, 0x6, 0x5, 0xfe, "ff00"}) r2 = syz_open_pts(r1, 0x141601) write(r2, &(0x7f0000000000)="d5", 0xfffffedf) close_range(r1, 0xffffffffffffffff, 0x0) 5m36.352910112s ago: executing program 6 (id=9092): mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x2, 0x1) connect$inet(r0, &(0x7f0000000180)={0x2, 0x0, @remote}, 0x10) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080", @ANYRESOCT=r0], 0x48) r1 = socket(0x28, 0x5, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000c40)={0x11, 0x5, &(0x7f0000000080)=ANY=[@ANYBLOB="1801000042000000000000003b810000850000006d000000070000000000000095"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x28, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f0000000a80)='kfree\x00', r2}, 0x10) r3 = syz_open_procfs(0x0, &(0x7f0000000000)='ns\x00') r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x39) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x800}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000cc0)='kmem_cache_free\x00', r5}, 0x18) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount$bind(&(0x7f0000000100)='.\x00', &(0x7f0000000240)='./file0/../file0\x00', 0x0, 0x2151090, 0x0) r6 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r6, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000080)='./file0/file0\x00', 0x0) fsetxattr$security_capability(r3, &(0x7f0000000200), &(0x7f0000000300)=@v3={0x3000000, [{0x8a, 0x8}, {0x3, 0x6548}]}, 0x18, 0x0) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000ac0)={0x18, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000380)='syzkaller\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r7}, 0x10) connect$vsock_stream(r1, &(0x7f0000000400)={0x28, 0x0, 0x2710, @host}, 0x10) 5m36.292263098s ago: executing program 6 (id=9093): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000009c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18060000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000003000000b703000000000000850000007300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000400)='kfree\x00', r0}, 0x18) r1 = syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x0) syz_usb_disconnect(r1) syz_usb_connect(0x4, 0x24, &(0x7f00000000c0)=ANY=[], 0x0) ioctl$EVIOCRMFF(r1, 0x40095505, 0x0) 5m35.605465996s ago: executing program 8 (id=9096): perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_config_ext={0x100000001, 0xdd5}, 0x1004, 0x0, 0x10000, 0x0, 0x2, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) socket$nl_generic(0x10, 0x3, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000500)='./file1\x00', 0x0, &(0x7f00000001c0), 0x1, 0x4bc, &(0x7f0000000a40)="$eJzs3ctvW1UaAPDPdpMmaWb6mNGo7UjTSh2p81DjPDRqMjObWc3MotJoKrEBqYTEDSVOHMVOaaIuUth1wQKBQEIs2PMXsKErKiTEGvaIBSqCEiRAQjK613abOHGwII1p7u8n3ebch/2dU+s7Ovf4Xt8AMuts8k8uYjgiPoyIo43VrQecbfzZuH9zJllyUa9f/iKXHpestw5tve5IRKxHxEBE/P/fEc/ktsetrq7NT5fLpeXmerG2sFSsrq5duLYwPVeaKy2OTV6cmpocnRif2rO23n7puduX3vlv/9vfvHjv7svvvZtUa7i5b3M79lKj6X1xfNO2QxHxz0cRrAcKzfYM9roi/CTJ5/ebiDiX5v/RKKSfJpAF9Xq9/n39cKfd63XgwMqnY+BcfiQiGuV8fmSkMYb/bQzly5Vq7a9XKyuLs42x8rHoy1+9Vi6NNs8VjkVfLlkfS8sP18fb1ici0jHwK4XBdH1kplKe3d+uDmhzpC3/vy408h/ICKf8kF3yH7JL/kN2yX/ILvkP2SX/IbvkP2SX/Ifskv+QXfIfskv+Qyb979KlZKm37n+fvb66Ml+5fmG2VJ0fWViZGZmpLC+NzFUqc+k9Ows/9n7lSmVp7G+xcqNYK1Vrxerq2pWFyspi7Up6X/+VUt++tAroxvEzdz7ORcT63wfTJdHf3CdX4WCr13PR63uQgd4o9LoDAnrG1B9kl3N8oP0netvHBQOdXrj0cL4QeLzke10BoGfOn/L9H2SV+X/ILvP/kF3G+MAOj+jbYrf5f+DxZP4fsmu4w/O/frXp2V2jEfHriPio0He49awv4CDIf5Zrjv/PH/3jcPve/ty36VcE/RHx/BuXX7sxXastjyXbv3ywvfZ6c/v4phd2PGEAeqWVp608BgCya+P+zZnWsp9xP/9X4yKE7fEPNecmB9LvKIc2cluuVcjt0bUL67ci4uRO8XPN5503TmSGNgrb4p9o/s013iKt76H0uen7E//Upvh/2BT/9M/+X4FsuJP0P6M75V8+zel4kH9b+5/hPbp2onP/l3/Q/xU69H9nuozx7JsvfNox/q2I0zvGb8UbSGO1x0/qdr7L+PeeeuJ3nfbV32q8z07xW5JSsbawVKyurl1If0durrQ4NnlxampydGJ8qpjOURdbM9Xb/ePkB3d3a/9Qh/i7tT/Z9ucu2//d799/8uwu8f90bufP/8Qu8Qcj4i9dxv9q/JOnO+1L4s92aH9+l/jJtoku41df/c/hLg8FAPZBdXVtfrpcLi0rKCj0pHDrl1GNtkKveybgUauuJqfmSdL3uiYAAAAAAAAAAABAt/bjcuJetxEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA4CD4IQAA//9HcdTQ") bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000005000000050000000900000001"], 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000004c0)={r0, &(0x7f0000000340), &(0x7f0000000500)=""/155}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000009c0)={0x1f, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x10) r2 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_SET_BINARY(r2, 0x6, 0x0, 0x0, 0x0) fsmount(r2, 0x0, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000300)=ANY=[@ANYBLOB='-cpu'], 0x5) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000140)={[{0x2b, 'cpu'}]}, 0x5) r3 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x181242, 0x148) pwrite64(r3, &(0x7f0000000140)='2', 0xfdef, 0xfecc) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000180)='kfree\x00', r5, 0x0, 0x2}, 0x18) r6 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000200)='memory.stat\x00', 0x275a, 0x0) write(r6, &(0x7f0000000280)="8654f6", 0x3) splice(r6, &(0x7f0000000040), 0xffffffffffffffff, 0x0, 0x6, 0x0) 5m35.444843182s ago: executing program 8 (id=9097): r0 = socket$netlink(0x10, 0x3, 0x10) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000b00)=ANY=[@ANYBLOB="1e0000000000000005000000ff"], 0x50) r2 = socket$kcm(0x29, 0x5, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x16, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x200, 0x0, 0x0, 0x0, 0x68, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r4, 0x0, 0x1}, 0x18) sendmmsg$inet(r2, &(0x7f0000000c00)=[{{0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000f80)="ee", 0x1}], 0x1}}], 0x1, 0x0) close(r2) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005700000095"], 0x0}, 0x90) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000080)='mem_disconnect\x00', r5}, 0x10) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x4, &(0x7f0000000100)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x41}]}, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r6, 0x0, 0xe, 0x0, &(0x7f00000003c0)="131c8701feaa16bca4ac74ab821d", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x9}, 0x50) r7 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r7, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r7, 0x1, 0x8, &(0x7f0000000000)=0x80, 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r7, 0x10e, 0x4, &(0x7f0000000180)=0x800, 0x4) r8 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)={0x34, r8, 0x1, 0x0, 0x25dfdbfb, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}}, 0x6048800) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x2400, 0x0) r10 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18010000200180000000000000000000850000007b00000095"], &(0x7f00000001c0)='GPL\x00', 0x4}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='sched_switch\x00', r10}, 0x10) ioctl$TUNSETIFF(r9, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) close(r9) 5m34.581658477s ago: executing program 8 (id=9099): socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_TUNNEL_CREATE(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000540)={0x24, 0x0, 0x200, 0x70bd28, 0x25dfdbfe, {}, [@L2TP_ATTR_VLAN_ID={0x6, 0xe, 0xc}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @loopback}]}, 0x24}, 0x1, 0x0, 0x0, 0x20048000}, 0x4) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000003b00)={0x17, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x10) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x4a0, 0x1e8, 0xffffffff, 0xffffffff, 0x1e8, 0xffffffff, 0x3d0, 0xffffffff, 0xffffffff, 0x3d0, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@remote, @loopback, [0xff, 0xff, 0xff, 0xff], [0xff000000, 0xff, 0xff], 'team_slave_0\x00', 'netdevsim0\x00', {}, {0xff}, 0x29, 0x3, 0x0, 0x60}, 0x0, 0x1a0, 0x1e8, 0x60030000, {0x0, 0xff000000}, [@common=@inet=@recent0={{0xf8}, {0x9, 0x0, 0x24, 0x0, 'syz1\x00'}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x1, 0x4, 0x7a3, 0x6, 'snmp_trap\x00', {0x369bc443}}}}, {{@ipv6={@remote, @local, [0xffffff00, 0xffffffff, 0x0, 0xffffff00], [0xffffffff, 0xffffff00, 0xffffffff, 0xff000000], 'netpci0\x00', 'bridge_slave_1\x00', {}, {0xff}, 0x2b, 0x2, 0x5, 0x5}, 0x0, 0x1c8, 0x1e8, 0x0, {}, [@common=@inet=@recent0={{0xf8}, {0x0, 0x29, 0x1, 0x1, 'syz0\x00'}}, @inet=@rpfilter={{0x28}, {0x1c}}]}, @unspec=@NOTRACK={0x20}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x500) 5m34.561740449s ago: executing program 38 (id=8961): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000640)={&(0x7f0000000300)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@func_proto]}}, &(0x7f0000000540)=""/228, 0x26, 0xe4, 0x1}, 0x28) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000340)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6361, 0x7, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc01, {0x0, 0x0, 0x0, r3, {0x0, 0xd}, {0xffff, 0xb}, {0xffff, 0xffe0}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0xc, 0x2, [@TCA_FQ_CODEL_CE_THRESHOLD={0x8, 0x7, 0xfffffff9}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x240040e0}, 0x4890) r4 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r4, &(0x7f00000005c0)="bad330fbc9b55400040000ea0756a85d86dd", 0x5ea, 0x40, &(0x7f00000001c0)={0x11, 0x88a8, r3, 0x1, 0xd8, 0x6, @multicast}, 0x14) (fail_nth: 1) 5m34.544330721s ago: executing program 8 (id=9101): mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x2, 0x1) connect$inet(r0, &(0x7f0000000180)={0x2, 0x0, @remote}, 0x10) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080", @ANYRESOCT=r0], 0x48) r1 = socket(0x28, 0x5, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000c40)={0x11, 0x5, &(0x7f0000000080)=ANY=[@ANYBLOB="1801000042000000000000003b810000850000006d000000070000000000000095"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x28, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f0000000a80)='kfree\x00', r2}, 0x10) syz_open_procfs(0x0, &(0x7f0000000000)='ns\x00') r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x39) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x800}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000cc0)='kmem_cache_free\x00', r4}, 0x18) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount$bind(&(0x7f0000000100)='.\x00', &(0x7f0000000240)='./file0/../file0\x00', 0x0, 0x2151090, 0x0) r5 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r5, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000080)='./file0/file0\x00', 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00'}, 0x10) connect$vsock_stream(r1, &(0x7f0000000040)={0x28, 0x0, 0x2710}, 0x10) connect$vsock_stream(r1, &(0x7f0000000400)={0x28, 0x0, 0x2710, @host}, 0x10) 5m34.468937828s ago: executing program 8 (id=9102): r0 = open(&(0x7f0000000440)='./file0\x00', 0x348a42, 0xa5) fcntl$setlease(r0, 0x400, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="0a000000010000000800000008b749183feabee6ed6306dcd31b5456"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000400000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b00000000000000000000000000140000000000", @ANYRES32=0x0, @ANYBLOB, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x48) r2 = gettid() r3 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) read$ptp(r3, 0x0, 0x0) timer_create(0x0, &(0x7f00000002c0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)=0x0) timer_settime(r4, 0x1, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000780)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYRES32=0x0], 0x48) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r5 = socket$kcm(0x2, 0x1000000000000002, 0x0) sendmsg$inet(r5, &(0x7f0000000040)={&(0x7f0000000080)={0x2, 0x4e20, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000180)}, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0xa, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0700000004"], 0x48) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000b80)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r6, @ANYBLOB="0000000000000000b703000000030000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x404}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000480)='kfree\x00', r7, 0x0, 0x7}, 0x18) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xe, 0x14, &(0x7f0000000780)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) kexec_load(0x4, 0xa, 0x0, 0x0) openat$sysfs(0xffffff9c, &(0x7f0000000000)='/sys/kernel/notes', 0x0, 0x10) epoll_create(0x3ff) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0x7, &(0x7f00000007c0)=ANY=[@ANYRES64=r4, @ANYRESHEX=r1, @ANYBLOB="00ffac00000000ff070000020000000000008500000086000000954f786f154ebed1f69a87129bc19278f2e2de6d9d8d17747e64e1ab9f80bf00075eaf9fe5a7f38fb0c9be076401090415b0a7ee8b1cd0d1cc952676c1208d7519e5e8686b3262b7c3cfc5461ddee2c0e71a802b79a4bfaad94985eedb72b78e38dc3013680100000000000000b29fd064ce11c7e3997b3e1042aaf6541b3b0a6a2fa7aeb6aa1a3a03d74b79f4ae6b88a99a9b7e"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') 5m33.764176207s ago: executing program 1 (id=9106): r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='attr/fscreate\x00') lseek(r0, 0xbad1, 0x4) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x11, 0x4, &(0x7f0000000180)=ANY=[@ANYRESOCT=0x0, @ANYRESDEC=r0], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, r0, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8db}, 0x94) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000003c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x50) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'veth1_virt_wifi\x00', 0x0}) getsockopt$inet_tcp_buf(0xffffffffffffffff, 0x6, 0x23, &(0x7f0000000040)=""/36, &(0x7f0000000200)=0x24) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0xa, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000800"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r4, @ANYBLOB="0000000000000000b703000000030000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='kfree\x00', r5, 0x0, 0x4}, 0x18) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000001c0)=@newqdisc={0x54, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0x10, 0xf}}, [@qdisc_kind_options=@q_mq={0x7}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x7, 0x7, 0x6, 0x4, 0x2, 0xea31, 0xfff, 0x1}}, {0x6, 0x2, [0x0]}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x24000001}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000040)='kfree\x00', r1, 0x0, 0x401}, 0x11) r7 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_TX_RING(r7, 0x11b, 0x6, &(0x7f0000000000)=0x40000000, 0x4) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r8 = socket$rds(0x15, 0x5, 0x0) bind$rds(r8, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$rds(r8, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000200)=[@rdma_args={0x48, 0x114, 0x1, {{}, {0x0, 0x2c}, &(0x7f00000006c0)=[{&(0x7f0000000100)=""/44, 0x2c}], 0x1}}, @rdma_args={0x48, 0x114, 0x1, {{}, {0x0}, &(0x7f00000004c0)=[{&(0x7f0000000080)=""/28, 0x1c}], 0x1}}], 0x90}, 0x0) 5m33.118980731s ago: executing program 1 (id=9108): syz_io_uring_setup(0x49a, &(0x7f0000000140)={0x0, 0x79b0, 0x3180, 0x8000, 0x40024e}, &(0x7f0000000080), &(0x7f0000000040)) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="070000000400000000010000"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x8, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000bb00551a000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000680)={&(0x7f0000000080)='kfree\x00', r1, 0x0, 0xb9}, 0x18) mount$9p_tcp(0x0, &(0x7f0000000680)='.\x00', &(0x7f00000006c0), 0x8010, &(0x7f0000000080)=ANY=[@ANYBLOB='trans=tcp']) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB], 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000800000001"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000012c0)={0x17, 0x8, &(0x7f0000001100)=ANY=[@ANYRESOCT=r2, @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000030000850000001b000000b70000000000000095"], &(0x7f0000001000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x2, '\x00', 0x0, @fallback=0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x39}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x18) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000fc0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r4, &(0x7f0000001580)={0x0, 0x0, &(0x7f0000001400)=[{&(0x7f0000000080)="3bfdd75fa5717852d59a9367444a2130e72cd4dabc8854532cca0c32a5b9f844a4610c7525650ce3d3b76b15026d93e6dee896115e9364066aa3d14e33ef732b4681335c576902153114bdb9c74b538a71115fb1d1a63d1b04129661b29aab89d0be999a6b7c9bea755adedbf305a79f70b71d3d4c98577b49db4963ce89b0def5e840f459659cb6f86d56b069a5de11d601d348ff88ca6e5e2cfe40176880b33e9e8dbc32ba2e6a99b1b50276dc4f06166000d7069a3cc76f", 0xb9}, {&(0x7f0000000180)="892950e2405ee8629d9384a91c16d1706a3e61f305119f95cac0f1927f4c205b971eb41147cb1f86883d6910e68ac3996551800b3ec64b77f8444b18345a2c8b178eeeba0cde7319a5a46bfe7f5770e019efd9d52069edcced33a758c4e657f3a792dc193a1911b4e82ea800ad7afe03c851a8", 0x73}, {&(0x7f0000000200)="a68cde0d56b170df7710b54f17d9a39c4f98f3547190", 0x16}, {&(0x7f0000000240)="45e04400f2b383517a08c397dd0a76e67ecfc8e74573c24dedd3a48fb62418c1412fdcd15e888cb0f5d02e77bfecefda6b064c0bb2b66a9a522e63873dde02330510255eec7dfa1af708cdab59fb71eca786a359a2c3b0cbad35144ec5b069c53f90e43339845dc7fd140c55b0149ab38eb27c140f374bcc2c95b0b121d1a9302f3a01b888243b3fc0d46f0de0", 0x8d}, {&(0x7f0000000300)}], 0x5, &(0x7f0000001480)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @private, @multicast1}}}], 0x20}, 0x0) recvmsg$unix(r5, &(0x7f0000001140)={0x0, 0x0, &(0x7f0000001040)=[{&(0x7f00000015c0)=""/4096, 0x7ffff000}], 0x1, 0x0, 0x2}, 0x40000100) recvmsg$unix(r5, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x30}, 0x181) r6 = fsopen(0x0, 0x0) fsconfig$FSCONFIG_SET_BINARY(r6, 0x6, 0x0, 0x0, 0x0) r7 = fsmount(r6, 0x0, 0x0) openat$cgroup_subtree(r7, &(0x7f0000000100), 0x2, 0x0) syz_mount_image$ext4(&(0x7f0000000740)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x818010, &(0x7f0000000300)={[{@minixdf}, {@grpjquota}]}, 0x3, 0x72c, &(0x7f00000014c0)="$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") bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001040)={0x11, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="180100000100a7d9000000000020b200850000007b00000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffd}, 0x94) socket$key(0xf, 0x3, 0x2) r8 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r8, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000200)=ANY=[@ANYBLOB, @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="ff010000000000000000000000000001000000002b000000fc00000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000001000000000feffffffffffffff0951000001000000090000000000000000000000000000000000200000000000070000000000000000000000000000000000040000000000e8"], 0x104}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x18d, &(0x7f0000000480)=ANY=[@ANYBLOB="1802000000000000"], 0x0}, 0x94) 5m32.253131147s ago: executing program 1 (id=9110): socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_TUNNEL_CREATE(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000540)={0x24, 0x0, 0x200, 0x70bd28, 0x25dfdbfe, {}, [@L2TP_ATTR_VLAN_ID={0x6, 0xe, 0xc}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @loopback}]}, 0x24}, 0x1, 0x0, 0x0, 0x20048000}, 0x4) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000003b00)={0x17, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x10) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x4a0, 0x1e8, 0xffffffff, 0xffffffff, 0x1e8, 0xffffffff, 0x3d0, 0xffffffff, 0xffffffff, 0x3d0, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@remote, @loopback, [0xff, 0xff, 0xff, 0xff], [0xff000000, 0xff, 0xff], 'team_slave_0\x00', 'netdevsim0\x00', {}, {0xff}, 0x29, 0x3, 0x0, 0x60}, 0x0, 0x1a0, 0x1e8, 0x60030000, {0x0, 0xff000000}, [@common=@inet=@recent0={{0xf8}, {0x9, 0x0, 0x24, 0x0, 'syz1\x00'}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x1, 0x4, 0x7a3, 0x6, 'snmp_trap\x00', {0x369bc443}}}}, {{@ipv6={@remote, @local, [0xffffff00, 0xffffffff, 0x0, 0xffffff00], [0xffffffff, 0xffffff00, 0xffffffff, 0xff000000], 'netpci0\x00', 'bridge_slave_1\x00', {}, {0xff}, 0x2b, 0x2, 0x5, 0x5}, 0x0, 0x1c8, 0x1e8, 0x0, {}, [@common=@inet=@recent0={{0xf8}, {0x0, 0x29, 0x1, 0x1, 'syz0\x00'}}, @inet=@rpfilter={{0x28}, {0x1c}}]}, @unspec=@NOTRACK={0x20}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x500) 5m32.174547654s ago: executing program 1 (id=9111): mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x2, 0x1) connect$inet(r0, &(0x7f0000000180)={0x2, 0x0, @remote}, 0x10) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080", @ANYRESOCT=r0], 0x48) r1 = socket(0x28, 0x5, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000c40)={0x11, 0x5, &(0x7f0000000080)=ANY=[@ANYBLOB="1801000042000000000000003b810000850000006d000000070000000000000095"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x28, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f0000000a80)='kfree\x00', r2}, 0x10) syz_open_procfs(0x0, &(0x7f0000000000)='ns\x00') r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x39) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x800}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000cc0)='kmem_cache_free\x00', r4}, 0x18) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount$bind(&(0x7f0000000100)='.\x00', &(0x7f0000000240)='./file0/../file0\x00', 0x0, 0x2151090, 0x0) r5 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r5, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000080)='./file0/file0\x00', 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00'}, 0x10) connect$vsock_stream(r1, &(0x7f0000000040)={0x28, 0x0, 0x2710}, 0x10) connect$vsock_stream(r1, &(0x7f0000000400)={0x28, 0x0, 0x2710, @host}, 0x10) 5m32.104609991s ago: executing program 1 (id=9112): prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) setrlimit(0x3, &(0x7f00000001c0)={0x0, 0x10}) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000040)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000280)={@ifindex, 0xffffffffffffffff, 0x19, 0x8}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) syz_clone(0x41aa1000, 0x0, 0x0, 0x0, 0x0, 0x0) move_mount(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x150) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000840)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x37, 0x0, 0x0, 0x0}, 0x94) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETOBJ(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=ANY=[@ANYBLOB="2c000000150a01"], 0x2c}, 0x1, 0x0, 0x0, 0x800}, 0x0) 5m31.831906218s ago: executing program 6 (id=9116): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000000c0)="d8000000140081044e81f782db44b904021f080211000000040000a118000200e014000100000e1208000f0100810401a80016ea1f000840032e5f54c92011148ed08734843cb12b00000803600cfab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef075c0100000000000000cb090000001fb791643a5ee4001b146218a07445d6d930dfe1d9d322fe7c9fd68775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e0060000000000000080bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd68adbef", 0xd8}, {&(0x7f00000001c0)="0011547617fb2aa568489cbeaf86a7cad01d2c2f18732229d5feb5c6f814b8590c246cf3112d7652d5612b2d537bd32fb188125cad8f8777ddbb3dc7e23683a1b411b7e87b1cd7a9d132a7544aab08dbf8eca4f427753c45ec5fc02bd9a2ce137692e364ee3a88616ad4459309fa2f87d37cd407b4cd4b9615df43576feb43cb87d7ef05e670d0a9e548973696504eda6181501886a59da71161afeb74d1d00a06611b2d28d8ec5e813f14f9055199a806c4cd444efb2b9ff71ba3b7c8e6cca57733cc7e1e449d4dc3216d62f378eec6507b0fbfb82bb58dad330a04", 0xdc}, {&(0x7f00000002c0)="2ebd361ccb464e5f8c8c98dc10f77cc20c07c0110ba7941db3e830bae184ea3917a1ff338701095b92118c79933db6dc331ff680068c5fce7872c83bec7aec73dd9e57f4351cfbca22c9203fbc634c21cd0446955858c0b75929215a7df20cc3d3f162c458f971242403b4807ca30e67b81b2cc3a809613da050ff305fa1992dfbec65b7dd36029016d4bb5da43ff41ee44da1290b03", 0x96}, {&(0x7f0000000380)="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", 0x1000}], 0x4, 0x0, 0x0, 0x7400}, 0x0) 5m31.831691858s ago: executing program 39 (id=9116): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000000c0)="d8000000140081044e81f782db44b904021f080211000000040000a118000200e014000100000e1208000f0100810401a80016ea1f000840032e5f54c92011148ed08734843cb12b00000803600cfab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef075c0100000000000000cb090000001fb791643a5ee4001b146218a07445d6d930dfe1d9d322fe7c9fd68775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e0060000000000000080bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd68adbef", 0xd8}, {&(0x7f00000001c0)="0011547617fb2aa568489cbeaf86a7cad01d2c2f18732229d5feb5c6f814b8590c246cf3112d7652d5612b2d537bd32fb188125cad8f8777ddbb3dc7e23683a1b411b7e87b1cd7a9d132a7544aab08dbf8eca4f427753c45ec5fc02bd9a2ce137692e364ee3a88616ad4459309fa2f87d37cd407b4cd4b9615df43576feb43cb87d7ef05e670d0a9e548973696504eda6181501886a59da71161afeb74d1d00a06611b2d28d8ec5e813f14f9055199a806c4cd444efb2b9ff71ba3b7c8e6cca57733cc7e1e449d4dc3216d62f378eec6507b0fbfb82bb58dad330a04", 0xdc}, {&(0x7f00000002c0)="2ebd361ccb464e5f8c8c98dc10f77cc20c07c0110ba7941db3e830bae184ea3917a1ff338701095b92118c79933db6dc331ff680068c5fce7872c83bec7aec73dd9e57f4351cfbca22c9203fbc634c21cd0446955858c0b75929215a7df20cc3d3f162c458f971242403b4807ca30e67b81b2cc3a809613da050ff305fa1992dfbec65b7dd36029016d4bb5da43ff41ee44da1290b03", 0x96}, {&(0x7f0000000380)="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", 0x1000}], 0x4, 0x0, 0x0, 0x7400}, 0x0) 5m30.386648721s ago: executing program 1 (id=9123): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000000000000000000ea04850000007b00000095"], &(0x7f0000000100)='GPL\x00', 0x800000, 0x0, 0x0, 0x41100, 0xc, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x10) r1 = socket$kcm(0xa, 0x1, 0x106) sendmsg$kcm(r1, &(0x7f0000001840)={0x0, 0x0, 0x0}, 0x24000000) setsockopt$sock_attach_bpf(r1, 0x29, 0x4b, 0x0, 0x4) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) r3 = socket$inet_sctp(0x2, 0x5, 0x84) close(r3) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f0000000040)={0x0, 0x10, &(0x7f0000000000)=[@in={0x2, 0x0, @private=0xa010104}]}, &(0x7f0000000080)=0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r4, 0x84, 0x1d, &(0x7f0000000140)={0x1, [0x0]}, &(0x7f0000000240)=0x8) sendmsg$inet_sctp(r3, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000440)="be6f88e904006dd2bd0117c586023380ec289d6c15d3fc0fb99d7337093227523ac2fe6bc9040e01b630dcecf43a9dc2ec73ca8323adbd5e3a0b91ebec615dfb1a23c01b1977a0b14dc32cafe1a70aaa8fb8a3683c7a114b56dd7f22da4178ffd809abddedaa6dfd4637286f12610033f3a62b203f7432b1ce1d701f3b38d77f0fd821733693a34566fd7aba12f7c8f6ff8092e2028fafa4bf4fa980508d371217af62f17c4eac6032968e543fd5a565b8efc372aa05a1b5add6c58ac7d8f828a9bfcb1081ffaecb10e29000"/219, 0xfe98}], 0x1, &(0x7f00000000c0)=ANY=[@ANYBLOB="2000000000000000840000000200000006000400280100000b008002", @ANYRES32=r5], 0x20, 0x6044}, 0x6) getsockopt$inet_sctp6_SCTP_RESET_STREAMS(r2, 0x84, 0x77, &(0x7f00000000c0)={r5, 0x0, 0x4, [0x2, 0x3, 0x1, 0x8001]}, &(0x7f0000000140)=0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000180)=[{0x200000000006, 0x0, 0x0, 0x7ffc0001}]}) set_robust_list(&(0x7f00000003c0)={0x0, 0x4}, 0x18) 5m30.386281981s ago: executing program 40 (id=9123): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000000000000000000ea04850000007b00000095"], &(0x7f0000000100)='GPL\x00', 0x800000, 0x0, 0x0, 0x41100, 0xc, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x10) r1 = socket$kcm(0xa, 0x1, 0x106) sendmsg$kcm(r1, &(0x7f0000001840)={0x0, 0x0, 0x0}, 0x24000000) setsockopt$sock_attach_bpf(r1, 0x29, 0x4b, 0x0, 0x4) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) r3 = socket$inet_sctp(0x2, 0x5, 0x84) close(r3) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f0000000040)={0x0, 0x10, &(0x7f0000000000)=[@in={0x2, 0x0, @private=0xa010104}]}, &(0x7f0000000080)=0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r4, 0x84, 0x1d, &(0x7f0000000140)={0x1, [0x0]}, &(0x7f0000000240)=0x8) sendmsg$inet_sctp(r3, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000440)="be6f88e904006dd2bd0117c586023380ec289d6c15d3fc0fb99d7337093227523ac2fe6bc9040e01b630dcecf43a9dc2ec73ca8323adbd5e3a0b91ebec615dfb1a23c01b1977a0b14dc32cafe1a70aaa8fb8a3683c7a114b56dd7f22da4178ffd809abddedaa6dfd4637286f12610033f3a62b203f7432b1ce1d701f3b38d77f0fd821733693a34566fd7aba12f7c8f6ff8092e2028fafa4bf4fa980508d371217af62f17c4eac6032968e543fd5a565b8efc372aa05a1b5add6c58ac7d8f828a9bfcb1081ffaecb10e29000"/219, 0xfe98}], 0x1, &(0x7f00000000c0)=ANY=[@ANYBLOB="2000000000000000840000000200000006000400280100000b008002", @ANYRES32=r5], 0x20, 0x6044}, 0x6) getsockopt$inet_sctp6_SCTP_RESET_STREAMS(r2, 0x84, 0x77, &(0x7f00000000c0)={r5, 0x0, 0x4, [0x2, 0x3, 0x1, 0x8001]}, &(0x7f0000000140)=0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000180)=[{0x200000000006, 0x0, 0x0, 0x7ffc0001}]}) set_robust_list(&(0x7f00000003c0)={0x0, 0x4}, 0x18) 5m30.154692303s ago: executing program 8 (id=9126): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000009c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18060000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000003000000b703000000000000850000007300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000400)='kfree\x00', r0}, 0x18) r1 = syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x0) syz_usb_disconnect(r1) syz_usb_connect(0x4, 0x24, &(0x7f00000000c0)=ANY=[], 0x0) ioctl$EVIOCRMFF(r1, 0x40095505, 0x0) 5m30.154606853s ago: executing program 41 (id=9126): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000009c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18060000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000003000000b703000000000000850000007300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000400)='kfree\x00', r0}, 0x18) r1 = syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x0) syz_usb_disconnect(r1) syz_usb_connect(0x4, 0x24, &(0x7f00000000c0)=ANY=[], 0x0) ioctl$EVIOCRMFF(r1, 0x40095505, 0x0) 4.043243561s ago: executing program 3 (id=15040): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000005"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001000000"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x18) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r0}, 0x0, &(0x7f0000000180)=r1}, 0x20) 4.022823353s ago: executing program 3 (id=15041): madvise(&(0x7f0000800000/0x800000)=nil, 0x800002, 0x18) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f00000007c0), 0x0, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000940)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) r3 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000500)='btrfs_qgroup_account_extent\x00', r2}, 0x18) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r1, 0xc0189374, &(0x7f0000000240)={{0x1, 0x1, 0x1018, 0xffffffffffffffff, {0x29}}, './file0\x00'}) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000011c0)=@newtaction={0x98, 0x30, 0x871a15abc695fb3d, 0x0, 0x0, {}, [{0x84, 0x1, [@m_tunnel_key={0x80, 0x1, 0x0, 0x0, {{0xf}, {0xfffffffffffffe2e, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{}, 0x1}}, @TCA_TUNNEL_KEY_ENC_IPV6_DST={0x14, 0x6, @ipv4={'\x00', '\xff\xff', @private}}, @TCA_TUNNEL_KEY_ENC_IPV6_SRC={0x14, 0x5, @remote}, @TCA_TUNNEL_KEY_ENC_KEY_ID={0x8}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x98}}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000d80)=ANY=[@ANYRESDEC=r3, @ANYRESOCT=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRESHEX=r2, @ANYBLOB="04000000000000000000000000000000000000000000a69ac7b90000"], 0x50) getdents64(0xffffffffffffffff, 0x0, 0x0) getsockopt$inet_mreqsrc(0xffffffffffffffff, 0x0, 0x26, &(0x7f0000000000)={@loopback, @broadcast, @multicast2}, &(0x7f0000000040)=0xc) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000a00)={0x11, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="180100000100a7d9000000000020b200850000007b00000095"], &(0x7f0000000140)='GPL\x00', 0x1, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xb904}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x18) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r5, 0x29, 0x40, &(0x7f0000000540)=@raw={'raw\x00', 0x3c1, 0x3, 0x2d8, 0x0, 0x1170, 0x1170, 0x118, 0x1170, 0x208, 0x1398, 0x1398, 0x208, 0x1398, 0x3, 0x0, {[{{@ipv6={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @private2={0xfc, 0x2, '\x00', 0x1}, [0xffffffff, 0xff000000, 0xffffff00], [0x0, 0x0, 0x0, 0xffffff00], 'vcan0\x00', 'veth0_to_hsr\x00', {}, {}, 0x2e, 0x0, 0x0, 0x46}, 0x0, 0xf8, 0x118, 0x0, {}, [@common=@inet=@socket2={{0x28}, 0x1}, @common=@hl={{0x28}, {0x3, 0x65}}]}, @unspec=@NOTRACK={0x20}}, {{@ipv6={@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @private1, [0xff, 0xff000000, 0xffffff00], [0xffffffff], 'rose0\x00', 'bond0\x00', {}, {0xff}, 0x2, 0x2, 0x5, 0x68}, 0x0, 0xa8, 0xf0}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x6, 'snmp_trap\x00', {0x8001}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x338) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0x13, &(0x7f0000000b40)=ANY=[@ANYBLOB="18020000f6ffffff00000000fcffffff1801007de3ffffffffffff00002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000010400008500000006000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8fffeffb702000008000000b703000000000000850000001700000095000000000000000461dc4d2a86f523f09f28e8baa9b3f003aa98e2e50f"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x2}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r6, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) preadv2(r4, &(0x7f0000001100)=[{&(0x7f0000000c00)=""/252, 0xfc}, {&(0x7f0000002280)=""/232, 0xe8}, {&(0x7f0000000e00)=""/197, 0xc5}, {&(0x7f0000000f00)=""/198, 0xc6}, {0x0}, {&(0x7f0000000940)=""/158, 0x9e}, {&(0x7f0000000400)=""/51, 0x33}, {&(0x7f0000001280)=""/4096, 0x1000}, {&(0x7f0000001000)=""/202, 0xca}], 0x9, 0xfffc, 0xfffffffe, 0x0) socket$kcm(0x29, 0x2, 0x0) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0xd, 0xc, &(0x7f0000000440)=ANY=[@ANYRESOCT], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x4, '\x00', 0x0, @sock_ops=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000200)='qdisc_reset\x00', r8}, 0x10) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000ac0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000054850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x7, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x28, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r9}, 0x18) umount2(&(0x7f00000002c0)='./file0\x00', 0x0) syz_open_dev$usbfs(&(0x7f0000000240), 0xb, 0x101301) 3.867640818s ago: executing program 3 (id=15044): socket$inet_udp(0x2, 0x2, 0x0) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000000)={0x5}, 0x8) prctl$PR_SET_NAME(0xf, &(0x7f00000002c0)='+}[@\x00G5\v\x89n\xb2\x0e\xb7\xb4\x9a\xb3\xb9\xe1\xff@`\x87\xefy\xb7\xe0\xe6c\x91\x81ND\t3\xc4\xca\xf0\xd0Zp\xadbdY\xdcz\xc6lo\xd0\xc7\'CT') r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x48) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000ed07449e000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f00000003c0)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x45, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000240)='kfree\x00', r2}, 0x18) r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000180)={&(0x7f0000000bc0)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c00000004000000020000000000000800000000000061"], 0x0, 0x28}, 0x28) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0xd, 0x4, &(0x7f0000001300)=ANY=[@ANYBLOB="1800000000000000000000000000000000000000080000009500000010000000"], &(0x7f0000000040)='syzkaller\x00', 0x8, 0x0, 0x0, 0x0, 0x6, '\x00', 0x0, 0xb, r3, 0x8, 0x0, 0x0, 0x14, 0x0, 0x14}, 0x94) r4 = socket$netlink(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)={0x34, r5, 0x1, 0x0, 0x25dfdbfb, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}}, 0x6048800) sendmsg$DEVLINK_CMD_PORT_SET(r1, &(0x7f0000000480)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000380)={0xa0, r5, 0x400, 0x70bd29, 0x25dfdbfc, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}, {0x6}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}, {0x6}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x3}}, {0x6}}]}, 0xa0}, 0x1, 0x0, 0x0, 0x80}, 0x4000) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x8, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000130000000000000000000018110000", @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000340)={{r0}, &(0x7f0000000280), &(0x7f00000002c0)=r6}, 0x20) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00', r7}, 0x10) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000b40)={0x11, 0x8, &(0x7f00000017c0)=ANY=[@ANYBLOB], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) ioctl$BTRFS_IOC_TREE_SEARCH(r8, 0xd0009411, 0x0) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000cc0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)=[@ip_tos_int={{0x14, 0x0, 0x1, 0x4}}], 0x18}}], 0x1, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCBRDELBR(0xffffffffffffffff, 0x89a2, &(0x7f0000000200)='bridge0\x00') 3.577715837s ago: executing program 2 (id=15056): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000900)=ANY=[@ANYRES8, @ANYRESOCT=0x0], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x20, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x7, 0x10, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) bpf$MAP_CREATE(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="1b000000000000000000"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="18000000000000000000", @ANYRES8=r0, @ANYBLOB="dd00000000000000b719000003000010857800000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_read_part_table(0x5df, &(0x7f0000000000)="$eJzs3DGIE1kYB/CXIBEFETs7gykichAh3UkEDXGQgAnBQ4s70c4t0qyVRYxgQCzMNhE5Gy0UYQ1aaCUiCCImFkIqUXavuN1l2eJY2CawLHMEZrvjYG/JHQe/Hzx4b97/zcfHMOVM4H8tHf6I4zgVQoj37vz0T/OVs+ey9dONCyGkwi8hhN/zs79OdlJJYvuuR5P1YrIuvt3TvDcf3en2Dhx+nd38nE72byVjZfjw8q6bY+qOXT/+/sh4dOhNNTwenBqc3N+8dK2fL7f7X+qvzjzNPtt+7oUp1X9Z+njwdmc26t4ozXyNWkvRanpjPTr/4FEhM9du5NdOJLkrU6rf3LqYef7kQ7mzvK/4qVqr9V58v59rVd51bo6GuW/ju1eT3MI/eLsAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPj3Hbt+/P2R8ejQm2p4PDg1OLm/eelaP19u97/UX515mn12NMkVplT/Zenjwdud2ah7ozTzNWotRavpjfXo/INHhcxcu5FfO5HkrvzV4TiO27us39y6mHn+5EO5s7yv+Klaq/VefL+fa1XedW6Ohrlv47tXk9zC3l0WAgAAAAAAAAAAAAAAAAAAgL9ROXsuWz/duDCZ/xxC+GHmx7nJPE6+d08lue3/ACxOrqdDKL7d07w3H93p9g4cfp3d/Pxbkr+VjJXhw8v/QTvs0J8BAAD//9odjZ8=") prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) write$P9_RVERSION(0xffffffffffffffff, &(0x7f0000000300)=ANY=[], 0x15) dup(0xffffffffffffffff) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000340)='kmem_cache_free\x00', r4, 0x0, 0xf7}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000340)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) signalfd4(0xffffffffffffffff, &(0x7f0000000140)={[0xfffffffffbfffff5]}, 0x8, 0x0) socket$netlink(0x10, 0x3, 0x0) io_setup(0x7, &(0x7f0000000600)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) add_key$keyring(&(0x7f0000000100), &(0x7f0000000340)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', 0xffffffffffffffff, 0x0, 0x1ffffffffffffffc}, 0x18) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, 0x0, &(0x7f0000000000)='asymmetric\x00', &(0x7f0000000180)=@keyring={'key_or_keyring:', 0x0, 0x2}) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r6, 0x0, r7, 0x0, 0x1, 0x4) vmsplice(r7, &(0x7f0000000880)=[{&(0x7f0000000180)="04", 0x1}, {&(0x7f0000000200)}, {0x0}, {&(0x7f00000002c0)='@', 0x1}, {&(0x7f0000003040)="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", 0xfa1}, {&(0x7f0000000480)="37c2", 0x2}], 0x6, 0x0) ioctl$sock_inet_udp_SIOCINQ(r7, 0x541b, 0x0) write(r5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000380)='find_free_extent\x00'}, 0x18) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r2}, 0x10) 3.217346302s ago: executing program 2 (id=15066): socket$inet6_udplite(0xa, 0x2, 0x88) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000001400), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000300), 0x111, 0x3}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000100)={0x3, 0x40, 0xfa00, {{0xa, 0xfffc, 0x2, @empty, 0xa09c}, {0xa, 0x2, 0xfffffffe, @dev={0xfe, 0x80, '\x00', 0x39}}, 0xffffffffffffffff, 0x40099d}}, 0x37) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000300)) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, 0x0, 0x0) writev(r0, &(0x7f0000000040)=[{&(0x7f0000000100), 0x86}], 0x2) 3.172128387s ago: executing program 2 (id=15069): r0 = socket(0x23, 0x80805, 0x0) poll(&(0x7f0000000000)=[{r0, 0x9081}], 0x1, 0x2) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020700000000000002030207b1af8ff00000000bfa100000000000007010000f8ffffffb70200"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r2 = socket$kcm(0x21, 0x2, 0xa) sendmsg$kcm(r2, &(0x7f0000000080)={&(0x7f0000000000)=@rxrpc=@in6={0x21, 0xfffc, 0x2, 0x1c, {0xa, 0x0, 0x4, @dev}}, 0x80, 0x0, 0x0, &(0x7f00000000c0)=[{0x18, 0x110, 0x1, "dc"}], 0x18}, 0xfc00) r3 = bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000400)={@fallback=r1, 0x2e, 0x0, 0x7fffffff, 0x0, 0x0, 0x0, &(0x7f00000002c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000300)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000340)=[0x0, 0x0, 0x0, 0x0], 0x0}, 0x40) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000500)={0x0, @broadcast}, &(0x7f0000000540)=0xc) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000580)=ANY=[@ANYRES32=r5, @ANYRES32=r1, @ANYBLOB="2700000004000000", @ANYRES32=r1, @ANYBLOB="2a56f08fb2460aa9444c1d39f341813802097785f1be42eb", @ANYRES32=r1, @ANYBLOB, @ANYRES64=r4], 0x20) perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x4f, 0x1, 0x0, 0x0, 0x0, 0x7, 0x98142, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7d, 0x1, @perf_config_ext={0x4190, 0xaea}, 0x4105, 0x2e, 0x6, 0x3, 0x2, 0x0, 0x6, 0x0, 0x0, 0x0, 0x40000000000a9e6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) r6 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r6, &(0x7f0000000000)={0xa, 0x4001, 0x0, @loopback}, 0x1c) r7 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r7, &(0x7f0000000280), 0x1) socket$netlink(0x10, 0x3, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000b80)={0x4, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000140)='kmem_cache_free\x00', r8}, 0x10) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r9, 0x8923, &(0x7f0000000000)={'vlan1\x00', @broadcast}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r3], 0x0, 0x0, 0x0, 0x0, 0x0, 0x54, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r10 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r10, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=@ipv4_newrule={0x38, 0x20, 0x301, 0x0, 0x0, {0x2, 0x14}, [@FRA_GENERIC_POLICY=@FRA_FWMASK={0x8, 0x10, 0x9}, @FRA_DST={0x8, 0x1, @loopback}, @FRA_TUN_ID={0xc, 0xc, 0x1, 0x0, 0x8}]}, 0x38}, 0x1, 0x0, 0x0, 0x240480d4}, 0x0) r11 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='sys_enter\x00', r11}, 0x18) 2.395933494s ago: executing program 5 (id=15074): openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000850000005000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x6d, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000001000000b703000000000000850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000140)='kfree\x00', r0, 0x0, 0x9}, 0x3a) r1 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000980)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r1, &(0x7f0000000240)='asymmetric\x00', &(0x7f0000000180)=@keyring) 2.368885817s ago: executing program 5 (id=15075): syz_open_procfs(0x0, &(0x7f0000000180)='attr\x00') socket$nl_generic(0x10, 0x3, 0x10) socket(0x10, 0x3, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000740), 0x0, 0x0) socket(0x400000000010, 0x3, 0x0) socket$unix(0x1, 0x5, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) socket$inet6_tcp(0xa, 0x1, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_PKTINFO(r0, 0x10e, 0xc, &(0x7f0000000040)=0x8, 0x4) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000000)=ANY=[@ANYBLOB="2800000012000100"/20, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00', @ANYRES32=r0], 0x28}}, 0x802) 2.33911548s ago: executing program 5 (id=15076): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180200000020702500000000002020207b1af8ff00000000bfa100000000000007010000dbffffffb702000000000000b703000000000000850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x23, '\x00', 0x0, @fallback=0x2b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000340)='kfree\x00', r1, 0x0, 0xfffffffffffffffc}, 0x18) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000780)=@newtaction={0x64, 0x30, 0xb, 0x0, 0x0, {}, [{0x50, 0x1, [@m_ct={0x4c, 0x1, 0x0, 0x0, {{0x7}, {0x24, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0xfdb}}, @TCA_CT_MARK={0x8, 0x10}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x64}, 0x1, 0x0, 0x0, 0x20004000}, 0x10000000) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="0600000004000000990000000d"], 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0x14, &(0x7f0000000740)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r4}, 0x10) symlinkat(&(0x7f0000001040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0xffffffffffffff9c, &(0x7f0000000640)='./file0\x00') renameat2(0xffffffffffffff9c, &(0x7f0000002480)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0xffffffffffffffff, 0x0, 0x4) close(r0) openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x103002, 0x0) ioctl$TUNGETVNETLE(r0, 0x40047452, &(0x7f0000001200)) 2.309412292s ago: executing program 2 (id=15077): madvise(&(0x7f0000800000/0x800000)=nil, 0x800002, 0x18) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f00000007c0), 0x0, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000940)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) r3 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000500)='btrfs_qgroup_account_extent\x00', r2}, 0x18) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r1, 0xc0189374, &(0x7f0000000240)={{0x1, 0x1, 0x1018, 0xffffffffffffffff, {0x29}}, './file0\x00'}) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000011c0)=@newtaction={0x98, 0x30, 0x871a15abc695fb3d, 0x0, 0x0, {}, [{0x84, 0x1, [@m_tunnel_key={0x80, 0x1, 0x0, 0x0, {{0xf}, {0xfffffffffffffe2e, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{}, 0x1}}, @TCA_TUNNEL_KEY_ENC_IPV6_DST={0x14, 0x6, @ipv4={'\x00', '\xff\xff', @private}}, @TCA_TUNNEL_KEY_ENC_IPV6_SRC={0x14, 0x5, @remote}, @TCA_TUNNEL_KEY_ENC_KEY_ID={0x8}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x98}}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000d80)=ANY=[@ANYRESDEC=r3, @ANYRESOCT=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRESHEX=r2, @ANYBLOB="04000000000000000000000000000000000000000000a69ac7b90000"], 0x50) getdents64(0xffffffffffffffff, 0x0, 0x0) getsockopt$inet_mreqsrc(0xffffffffffffffff, 0x0, 0x26, &(0x7f0000000000)={@loopback, @broadcast, @multicast2}, &(0x7f0000000040)=0xc) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000a00)={0x11, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="180100000100a7d9000000000020b200850000007b00000095"], &(0x7f0000000140)='GPL\x00', 0x1, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xb904}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x18) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r5, 0x29, 0x40, &(0x7f0000000540)=@raw={'raw\x00', 0x3c1, 0x3, 0x2d8, 0x0, 0x1170, 0x1170, 0x118, 0x1170, 0x208, 0x1398, 0x1398, 0x208, 0x1398, 0x3, 0x0, {[{{@ipv6={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @private2={0xfc, 0x2, '\x00', 0x1}, [0xffffffff, 0xff000000, 0xffffff00], [0x0, 0x0, 0x0, 0xffffff00], 'vcan0\x00', 'veth0_to_hsr\x00', {}, {}, 0x2e, 0x0, 0x0, 0x46}, 0x0, 0xf8, 0x118, 0x0, {}, [@common=@inet=@socket2={{0x28}, 0x1}, @common=@hl={{0x28}, {0x3, 0x65}}]}, @unspec=@NOTRACK={0x20}}, {{@ipv6={@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @private1, [0xff, 0xff000000, 0xffffff00], [0xffffffff], 'rose0\x00', 'bond0\x00', {}, {0xff}, 0x2, 0x2, 0x5, 0x68}, 0x0, 0xa8, 0xf0}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x6, 'snmp_trap\x00', {0x8001}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x338) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0x13, &(0x7f0000000b40)=ANY=[@ANYBLOB="18020000f6ffffff00000000fcffffff1801007de3ffffffffffff00002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000010400008500000006000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8fffeffb702000008000000b703000000000000850000001700000095000000000000000461dc4d2a86f523f09f28e8baa9b3f003aa98e2e50f"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x2}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r6, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) preadv2(r4, &(0x7f0000001100)=[{&(0x7f0000000c00)=""/252, 0xfc}, {&(0x7f0000002280)=""/232, 0xe8}, {&(0x7f0000000e00)=""/197, 0xc5}, {&(0x7f00000003c0)=""/40, 0x28}, {&(0x7f0000000940)=""/158, 0x9e}, {&(0x7f0000000400)=""/51, 0x33}, {&(0x7f0000001280)=""/4096, 0x1000}, {&(0x7f0000001000)=""/202, 0xca}], 0x8, 0xfffc, 0xfffffffe, 0x0) socket$kcm(0x29, 0x2, 0x0) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0xd, 0xc, &(0x7f0000000440)=ANY=[@ANYRESOCT], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x4, '\x00', 0x0, @sock_ops=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000200)='qdisc_reset\x00', r8}, 0x10) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000ac0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000054850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x7, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x28, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r9}, 0x18) umount2(&(0x7f00000002c0)='./file0\x00', 0x0) syz_open_dev$usbfs(&(0x7f0000000240), 0xb, 0x101301) 2.260696617s ago: executing program 5 (id=15078): bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0xa, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000800"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000030000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='kfree\x00', r1, 0x0, 0x4}, 0x18) r2 = socket$rds(0x15, 0x5, 0x0) bind$rds(r2, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r2, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000200)}, 0x0) 2.259983308s ago: executing program 5 (id=15079): socket$inet6_udplite(0xa, 0x2, 0x88) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000001400), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000300), 0x111, 0x3}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000100)={0x3, 0x40, 0xfa00, {{0xa, 0xfffc, 0x2, @empty, 0xa09c}, {0xa, 0x2, 0xfffffffe, @dev={0xfe, 0x80, '\x00', 0x39}}, 0xffffffffffffffff, 0x40099d}}, 0x37) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000300)) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, 0x0, 0x0) writev(r0, &(0x7f0000000040)=[{&(0x7f0000000100), 0x86}], 0x2) 2.196404544s ago: executing program 5 (id=15081): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0xc0100, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0xf) ioctl$TCFLSH(r0, 0x400455c8, 0x0) syz_usb_connect(0x2, 0xfffffffffffffe86, 0x0, 0x0) ioctl$TIOCVHANGUP(r0, 0x5437, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000000800000008"], 0x50) r2 = openat(0xffffffffffffff9c, 0x0, 0x8102, 0x0) sendfile(r2, r2, 0x0, 0x6) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{r1}, &(0x7f0000000240), &(0x7f0000000280)=r3}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kfree\x00', r3}, 0x10) 2.148310269s ago: executing program 2 (id=15085): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000005"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x18) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r0}, 0x0, &(0x7f0000000180)=r1}, 0x20) 2.093308524s ago: executing program 2 (id=15086): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0xc0100, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0xf) ioctl$TCFLSH(r0, 0x400455c8, 0x0) syz_usb_connect(0x2, 0xfffffffffffffe86, 0x0, 0x0) ioctl$TIOCVHANGUP(r0, 0x5437, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000000800000008"], 0x50) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x6) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kfree\x00', r2}, 0x10) 1.233711789s ago: executing program 3 (id=15100): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020207025000000002dba513d7b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000008fd885000000040000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x4, '\x00', 0x0, @fallback=0x1c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r0}, 0x10) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x0, &(0x7f00000001c0), 0x1, 0x4bc, &(0x7f0000000a40)="$eJzs3ctvW1UaAPDPdpMmaWb6mNGo7UjTSh2p81DjPDRqMjObWc3MotJoKrEBqYTEDSVOHMVOaaIuUth1wQKBQEIs2PMXsKErKiTEGvaIBSqCEiRAQjK613abOHGwII1p7u8n3ebch/2dU+s7Ovf4Xt8AMuts8k8uYjgiPoyIo43VrQecbfzZuH9zJllyUa9f/iKXHpestw5tve5IRKxHxEBE/P/fEc/ktsetrq7NT5fLpeXmerG2sFSsrq5duLYwPVeaKy2OTV6cmpocnRif2rO23n7puduX3vlv/9vfvHjv7svvvZtUa7i5b3M79lKj6X1xfNO2QxHxz0cRrAcKzfYM9roi/CTJ5/ebiDiX5v/RKKSfJpAF9Xq9/n39cKfd63XgwMqnY+BcfiQiGuV8fmSkMYb/bQzly5Vq7a9XKyuLs42x8rHoy1+9Vi6NNs8VjkVfLlkfS8sP18fb1ici0jHwK4XBdH1kplKe3d+uDmhzpC3/vy408h/ICKf8kF3yH7JL/kN2yX/ILvkP2SX/IbvkP2SX/Ifskv+QXfIfskv+Qyb979KlZKm37n+fvb66Ml+5fmG2VJ0fWViZGZmpLC+NzFUqc+k9Ows/9n7lSmVp7G+xcqNYK1Vrxerq2pWFyspi7Up6X/+VUt++tAroxvEzdz7ORcT63wfTJdHf3CdX4WCr13PR63uQgd4o9LoDAnrG1B9kl3N8oP0netvHBQOdXrj0cL4QeLzke10BoGfOn/L9H2SV+X/ILvP/kF3G+MAOj+jbYrf5f+DxZP4fsmu4w/O/frXp2V2jEfHriPio0He49awv4CDIf5Zrjv/PH/3jcPve/ty36VcE/RHx/BuXX7sxXastjyXbv3ywvfZ6c/v4phd2PGEAeqWVp608BgCya+P+zZnWsp9xP/9X4yKE7fEPNecmB9LvKIc2cluuVcjt0bUL67ci4uRO8XPN5503TmSGNgrb4p9o/s013iKt76H0uen7E//Upvh/2BT/9M/+X4FsuJP0P6M75V8+zel4kH9b+5/hPbp2onP/l3/Q/xU69H9nuozx7JsvfNox/q2I0zvGb8UbSGO1x0/qdr7L+PeeeuJ3nfbV32q8z07xW5JSsbawVKyurl1If0durrQ4NnlxampydGJ8qpjOURdbM9Xb/ePkB3d3a/9Qh/i7tT/Z9ucu2//d799/8uwu8f90bufP/8Qu8Qcj4i9dxv9q/JOnO+1L4s92aH9+l/jJtoku41df/c/hLg8FAPZBdXVtfrpcLi0rKCj0pHDrl1GNtkKveybgUauuJqfmSdL3uiYAAAAAAAAAAABAt/bjcuJetxEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA4CD4IQAA//9HcdTQ") openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x41, 0x0) r2 = syz_io_uring_setup(0x891, &(0x7f0000000380)={0x0, 0x8c36, 0x80, 0x2, 0xbfdffe00}, &(0x7f0000000000)=0x0, &(0x7f00000000c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) io_uring_enter(r2, 0x47f6, 0x0, 0x0, 0x0, 0x0) r5 = socket$key(0xf, 0x3, 0x2) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000880)=ANY=[@ANYBLOB="0a000000010000000800000008"], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r6, 0xffffffffffffffff}, &(0x7f0000000300), &(0x7f00000002c0)}, 0x20) bpf$TOKEN_CREATE(0x24, &(0x7f00000008c0)={0x0, r1}, 0x8) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000001f00)={0x18, 0xd, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000ae00000018110000", @ANYRES32=r5, @ANYRES8=r7], &(0x7f0000000040)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r8}, 0x10) sendmsg$key(r5, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000100)=ANY=[@ANYBLOB="020300030f0000002cbd7000fbdbdf2503000900800000001cdc0dca1d9f68846960e56de42944af03000600000000000200010000000000000000000000000002000100000000000000070c01000000030005000000000002004e21ac1e010100000000000000000200130003"], 0x78}, 0x1, 0x7}, 0x0) accept4$unix(0xffffffffffffffff, 0x0, &(0x7f00000002c0), 0x800) lsetxattr$trusted_overlay_upper(&(0x7f00000001c0)='./file1\x00', &(0x7f0000000180), &(0x7f00000001c0)=ANY=[], 0x361, 0x0) lsetxattr$security_ima(&(0x7f0000000080)='./file1\x00', &(0x7f00000000c0), 0x0, 0x0, 0x1) lsetxattr$system_posix_acl(&(0x7f0000000000)='./file1\x00', &(0x7f00000003c0)='system.posix_acl_access\x00', &(0x7f0000000540)=ANY=[@ANYBLOB="0200000001000000000000000400000000000000100000000000000020"], 0x24, 0x0) 1.146761217s ago: executing program 3 (id=15101): bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0xa, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000800"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000030000850000001b000000b7000000000000"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='kfree\x00', r1, 0x0, 0x4}, 0x18) r2 = socket$rds(0x15, 0x5, 0x0) bind$rds(r2, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r2, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, 0x0}, 0x0) 1.11114917s ago: executing program 3 (id=15103): socket$inet_udp(0x2, 0x2, 0x0) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000000)={0x5}, 0x8) prctl$PR_SET_NAME(0xf, &(0x7f00000002c0)='+}[@\x00G5\v\x89n\xb2\x0e\xb7\xb4\x9a\xb3\xb9\xe1\xff@`\x87\xefy\xb7\xe0\xe6c\x91\x81ND\t3\xc4\xca\xf0\xd0Zp\xadbdY\xdcz\xc6lo\xd0\xc7\'CT') r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x48) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000ed07449e000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f00000003c0)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x45, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000240)='kfree\x00', r2}, 0x18) r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000180)={&(0x7f0000000bc0)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c00000004000000020000000000000800000000000061"], 0x0, 0x28}, 0x28) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0xd, 0x4, &(0x7f0000001300)=ANY=[@ANYBLOB="1800000000000000000000000000000000000000080000009500000010000000"], &(0x7f0000000040)='syzkaller\x00', 0x8, 0x0, 0x0, 0x0, 0x6, '\x00', 0x0, 0xb, r3, 0x8, 0x0, 0x0, 0x14, 0x0, 0x14}, 0x94) r4 = socket$netlink(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)={0x34, r5, 0x1, 0x0, 0x25dfdbfb, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}}, 0x6048800) sendmsg$DEVLINK_CMD_PORT_SET(r1, &(0x7f0000000480)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000380)={0xa0, r5, 0x400, 0x70bd29, 0x25dfdbfc, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}, {0x6}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}, {0x6}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x3}}, {0x6}}]}, 0xa0}, 0x1, 0x0, 0x0, 0x80}, 0x4000) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x8, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000130000000000000000000018110000", @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000340)={{r0}, &(0x7f0000000280), &(0x7f00000002c0)=r6}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000cc0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)=[@ip_tos_int={{0x14, 0x0, 0x1, 0x4}}], 0x18}}], 0x1, 0x0) r7 = socket$inet_tcp(0x2, 0x1, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCBRDELBR(r8, 0x89a2, &(0x7f0000000200)='bridge0\x00') ioctl$sock_SIOCBRDELBR(r7, 0x89a3, &(0x7f0000000200)='bridge0\x00') 258.676954ms ago: executing program 7 (id=15121): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000005"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x18) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r0}, 0x0, &(0x7f0000000180)=r1}, 0x20) 221.850108ms ago: executing program 7 (id=15123): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000001400), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x3, 0x0, 0x111, 0x3}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000100)={0x3, 0x40, 0xfa00, {{0xa, 0xfffc, 0x2, @empty, 0xa09c}, {0xa, 0x2, 0xfffffffe, @dev={0xfe, 0x80, '\x00', 0x39}}, 0xffffffffffffffff, 0x40099d}}, 0x37) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000300)) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, &(0x7f0000000140)={0x0, 0xffffffff}, 0x8) writev(r0, &(0x7f0000000040)=[{&(0x7f0000000100), 0x86}], 0x2) 192.356731ms ago: executing program 7 (id=15125): syz_open_procfs(0x0, &(0x7f0000000180)='attr\x00') socket(0x10, 0x3, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000740), 0x0, 0x0) socket(0x400000000010, 0x3, 0x0) socket$unix(0x1, 0x5, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) socket(0x10, 0x80003, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) socket$inet6_tcp(0xa, 0x1, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) r0 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_PKTINFO(r0, 0x10e, 0xc, &(0x7f0000000040)=0x8, 0x4) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000000)=ANY=[@ANYBLOB="2800000012000100"/20, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00', @ANYRES32=r0], 0x28}}, 0x802) 191.743571ms ago: executing program 9 (id=15126): syz_open_procfs(0x0, &(0x7f0000000180)='attr\x00') socket$nl_generic(0x10, 0x3, 0x10) socket(0x10, 0x3, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000740), 0x0, 0x0) socket(0x400000000010, 0x3, 0x0) socket$unix(0x1, 0x5, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) socket(0x10, 0x80003, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_PKTINFO(r0, 0x10e, 0xc, &(0x7f0000000040)=0x8, 0x4) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000000)=ANY=[@ANYBLOB="2800000012000100"/20, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00', @ANYRES32=r0], 0x28}}, 0x802) 176.960753ms ago: executing program 7 (id=15127): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001480), 0x42002, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x50) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000280)={&(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000003000/0x2000)=nil, &(0x7f0000000580)="27146be5d79ab77934589dff853ef7be456e50a67c9fba88036a2658c88c9d5ae28388325fcd26484e687ddc071756885787cdc2a4ae7f8f99009be88f1b52292ee0b7b76a42ef9ae45254c445aa5883e29ed0ee8f4aab83f9033e19a6ed06e1c5df28b84e9418fcc5e6253ce32ed01d7c19d1fc0afb890567abd67d7ff92fa1c2eb1cdfcdc812ce28d52768f2190b919036666da15c7ae0a9c0ab435de3d60282f0072f8d4bd0a2e57fa196cb0806ef48495f1ad7a9cb6db8c0df3ece9b4543aa226137fcb33fe4cd0752ced49944358a945b8de9057947754c7f19f3e9b8721ae8ef9a27181725bbcc9aac36582f65f21b7057ace05bd0", 0xf8}, 0x68) ioctl$TIOCVHANGUP(r0, 0x5437, 0x0) 173.832393ms ago: executing program 9 (id=15128): bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0xa, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000800"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000030000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='kfree\x00', r1, 0x0, 0x4}, 0x18) r2 = socket$rds(0x15, 0x5, 0x0) bind$rds(r2, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r2, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000200)=[@rdma_args={0x48, 0x114, 0x1, {{}, {0x0}, &(0x7f00000006c0)}}], 0x48}, 0x0) 150.164305ms ago: executing program 7 (id=15129): r0 = socket$inet(0xa, 0x801, 0x84) connect$inet(r0, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r0, 0x8) r1 = accept4(r0, 0x0, 0x0, 0x0) sendto$inet(r1, &(0x7f00000002c0)="cc", 0x1, 0x41, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r1, 0x84, 0x7b, &(0x7f0000000140)={0x0, 0x1}, 0x8) close(r1) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000000c0)={'bridge0\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=@newlink={0x60, 0x10, 0x401, 0x4, 0x0, {0x0, 0x0, 0x0, 0x0, 0x8503}, [@IFLA_LINKINFO={0x38, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x28, 0x2, 0x0, 0x1, [@IFLA_VLAN_EGRESS_QOS={0x1c, 0x3, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x80000001, 0x7fffffff}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x80000001, 0x6}}]}, @IFLA_VLAN_ID={0x6, 0x1, 0x3}]}}}, @IFLA_LINK={0x8, 0x5, r4}]}, 0x60}, 0x1, 0x0, 0x0, 0x20004800}, 0x4000000) sendmsg$nl_route_sched(r1, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000080)={&(0x7f0000001c00)=@delchain={0x3934, 0x65, 0x4, 0x70bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r2, {0xfffc, 0xfff1}, {0xfff3, 0x1}, {0x10, 0x9}}, [@filter_kind_options=@f_basic={{0xa}, {0x1ee0, 0x2, [@TCA_BASIC_CLASSID={0x8, 0x1, {0x6, 0x9}}, @TCA_BASIC_ACT={0x1388, 0x3, [@m_skbmod={0x88, 0x17, 0x0, 0x0, {{0xb}, {0x4c, 0x2, 0x0, 0x1, [@TCA_SKBMOD_PARMS={0x24, 0x2, {{0x9, 0xab9b, 0x20000000, 0x3ff, 0x2}, 0xa}}, @TCA_SKBMOD_PARMS={0x24, 0x2, {{0x2, 0x7, 0x4, 0x3e6, 0x1}, 0x4}}]}, {0x11, 0x6, "85a3db0d1fefbf53670414b807"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x2}}}}, @m_police={0x111c, 0x11, 0x0, 0x0, {{0xb}, {0x10b8, 0x2, 0x0, 0x1, [[@TCA_POLICE_RATE64={0xc, 0x8, 0x1fb8}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x3, 0xfffffffb, 0x7, 0xfff, 0x40, 0xf, 0x1, 0x100, 0xfffffe00, 0x0, 0x1, 0x9, 0x5d3a, 0x8, 0x6, 0xffff, 0x1, 0x8, 0x7, 0x8, 0xce, 0x7, 0x3, 0xf, 0x1, 0x7, 0x3, 0x1, 0x25d8c13a, 0x45, 0x14000, 0x2, 0x8, 0x7f, 0xc, 0x4, 0x2, 0x3, 0x1ff, 0x8, 0x4, 0x5, 0x1, 0x4, 0x6, 0x3, 0x5, 0x6, 0x7, 0x6, 0xf30, 0x8001, 0x1, 0x100000, 0x1, 0x2, 0x8000, 0x0, 0x9ad5, 0x700, 0x2, 0x4, 0x9, 0x4, 0x0, 0x4, 0xc8, 0x8, 0x4000000, 0x4392, 0x6, 0x8, 0x28, 0x9, 0x7f, 0x3, 0x9, 0x400, 0x8, 0x0, 0x6, 0xc9, 0xfff, 0x7, 0x5, 0x9, 0x5, 0x2, 0x81, 0x1, 0x8, 0x400, 0x1, 0x3, 0x9, 0x4, 0x75, 0x2, 0x9, 0x5, 0x0, 0x2, 0x4, 0x8d2, 0x0, 0x7f, 0x77, 0x8, 0xffffffff, 0xb, 0x0, 0x8, 0x9, 0x7, 0xfffffffd, 0x1, 0x80000001, 0xffff, 0x392f, 0xfffffffd, 0x6, 0x5, 0x4, 0x61365d0, 0x9, 0x4, 0xd, 0x3, 0x372be223, 0x7, 0x10001, 0xc, 0xd4, 0x9, 0x5, 0x400, 0x8001, 0x48, 0xfffffffc, 0x5, 0x4, 0x8001, 0xd2, 0xfffff52e, 0xb6, 0xfffffffe, 0x8, 0xa79, 0x5, 0x4, 0x0, 0xfffffffd, 0x9, 0x1, 0x5, 0xffffffff, 0x8000, 0x465, 0x409a, 0x9, 0xf, 0x7, 0x401, 0x4, 0xc, 0x80000000, 0x3, 0x40, 0x2, 0x7, 0x0, 0x3, 0x64, 0xa0, 0x0, 0xfffffff7, 0x9, 0x78f4, 0x9473, 0x200, 0xff, 0x40, 0x3ff, 0x3, 0x6, 0x9, 0x4, 0xfffff3f7, 0xff, 0x1, 0x1, 0xee09, 0x2, 0x7fffffff, 0x10000, 0x6, 0x4, 0x2, 0xf118, 0x348, 0x1, 0x6, 0x800, 0xa, 0x200, 0x80000000, 0x3, 0x8, 0xfffeffff, 0x7fffffff, 0x2, 0x65, 0x660855fe, 0x4d21, 0x7, 0x401, 0x7, 0x80000000, 0xfffffffe, 0x4, 0x1, 0x9, 0x8, 0x1, 0x3, 0xb, 0x0, 0x4, 0x8001, 0x8, 0x7ff, 0x10000, 0x8, 0xfffffff9, 0x2, 0xe, 0x3ff, 0x1ff, 0x6, 0x0, 0x7fffffff, 0x7e, 0x3, 0x8, 0x72, 0x3, 0x1, 0x40, 0xb, 0x7f, 0x6, 0x3, 0x5, 0x2, 0x2, 0x5]}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x6, 0x15703e95, 0x6, 0x0, 0x4, 0xffff, 0x3d, 0x401, 0x8, 0x401, 0x2, 0x80000001, 0x2, 0xb44b, 0xfffffffb, 0xfffffffe, 0x1ff, 0x7, 0x0, 0x1, 0x4, 0xf, 0x6, 0x4, 0xfffffffb, 0x7, 0xffff, 0x4, 0x5, 0x81, 0x1000, 0x4, 0x81, 0xe94, 0x1, 0x0, 0x1, 0x40, 0x6, 0xffff, 0x8, 0x48000000, 0x8, 0x9, 0x7, 0x6, 0x80000001, 0xc8, 0x0, 0x2, 0xbe, 0xdf9, 0xd2, 0x4, 0x4, 0x80, 0x7144, 0x2, 0xfffffc55, 0x2, 0x5, 0x0, 0x7, 0x0, 0x6, 0x0, 0xffffffe5, 0x6, 0x9, 0x0, 0x4, 0x8, 0x7, 0x80, 0xc02, 0xccd0, 0x7fffffff, 0x9, 0x8c4, 0x4, 0x0, 0xff, 0x4e5c, 0x3, 0x3ff, 0x81, 0x3, 0x5, 0x6, 0x9, 0x1, 0x2, 0x5ad6, 0x3, 0x1, 0x10000, 0x6, 0x7, 0x1, 0x9, 0x3, 0x4, 0x1, 0x8, 0xfffffffc, 0x7, 0xfffffff9, 0x0, 0xc8d, 0x6, 0x1, 0xb11f, 0x100, 0x302800, 0x0, 0xc, 0xffff, 0xad7e, 0x5, 0x4, 0xf, 0x9d1, 0xf8f6, 0x7, 0x4, 0x9, 0x8, 0x2, 0x8000, 0x3994, 0x4, 0x9, 0x9, 0x800, 0x7fff, 0x6, 0x2, 0x10000, 0x2, 0xfff, 0xb, 0xa4, 0x3ff, 0x5, 0x5, 0xff, 0x401, 0x4, 0x80000001, 0x7, 0x7, 0x80000001, 0x7, 0xfffffff9, 0x1, 0x8, 0x3d8, 0x8, 0xcb1, 0x4, 0x53, 0x5, 0x4, 0x1, 0x7, 0x7f, 0xfffffffe, 0x9, 0x7, 0x80, 0x91, 0x1, 0x7, 0x3, 0xfffffffb, 0xaca1, 0xffffffff, 0x2, 0x5, 0x8, 0x10001, 0x7a18, 0x4, 0x0, 0x8, 0x100, 0x6, 0x10, 0x9fff, 0x9, 0x7fff, 0x27a57cfb, 0x2, 0x80000001, 0xd, 0x401, 0xfffffffc, 0xab08, 0x8001, 0x240, 0x5, 0xe, 0x3, 0x9, 0x9, 0x80000001, 0x7, 0x7, 0x6, 0x9, 0x2, 0xffffff00, 0x1, 0x2, 0xffffffff, 0x3ff, 0x4, 0x5, 0xffffffff, 0x702b, 0x101, 0x2, 0x7, 0xc, 0x4, 0xf, 0x8, 0xfffffffa, 0xb, 0x8, 0x1, 0x4, 0x1, 0x5e56e322, 0xfffffff8, 0x2, 0x0, 0x6, 0x7ff, 0x4, 0x2, 0x2, 0x2, 0x2, 0x5, 0x62, 0x0, 0xfff, 0x7, 0xfffff57d, 0x6, 0x2, 0x3, 0x7fffffff, 0x80000001, 0x1]}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x4}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x0, 0x2, 0x5, 0xbc, 0x5356, 0x70, 0x25c, 0x10, 0x81, 0x9, 0xffffc762, 0x3, 0x7, 0x8, 0x159d, 0x3, 0x6, 0x0, 0xd, 0x7fff, 0x3, 0x0, 0x8, 0xfffffffa, 0x1, 0x1, 0x1, 0x7, 0x2313, 0x8, 0x1207, 0x6, 0x9, 0x5, 0xb, 0x7, 0x6, 0x0, 0x4, 0x1, 0x3, 0x9, 0x6, 0x101, 0x10001, 0xa, 0x161, 0x9, 0xea800000, 0xfffffff9, 0x5, 0xb5, 0xb, 0x7, 0x5, 0x6, 0x2, 0x60000000, 0x3, 0x3, 0xd, 0xff, 0x0, 0xfffffff2, 0xb, 0x2, 0x3, 0xc5af, 0x1, 0x0, 0x7ff, 0x1a, 0x6, 0x2, 0x1bd1fa4a, 0x7, 0xfffffc01, 0x3, 0x1, 0x100, 0x200, 0x3, 0x8000, 0x5ba, 0x6, 0x7, 0x4, 0x4, 0x7, 0xa, 0xa, 0xcd93, 0x8727, 0x2, 0x8, 0x0, 0x100, 0x4, 0x3, 0x3ff, 0x4, 0x40, 0x100, 0x5f8, 0xff, 0x200, 0x1, 0x7, 0xffffffff, 0x4, 0x8, 0x6, 0x65b8e5d6, 0xfffffff9, 0x401, 0x38, 0xb7, 0x1, 0x7, 0x5, 0x396, 0x9, 0x7, 0x6, 0x2, 0x0, 0x9, 0x401, 0x4, 0x7, 0x4, 0x3, 0x31e, 0x89, 0x3, 0xc03, 0x5, 0xffffffff, 0xfff, 0xd3d, 0xff, 0x3, 0x80, 0x3, 0x7fffffff, 0x6, 0x6, 0x4, 0x1, 0x100, 0x7, 0x401, 0xffff0001, 0x101, 0x5, 0x4, 0xffff, 0x8, 0x5, 0x7fffffff, 0x859, 0x5, 0x6, 0x8, 0x400, 0x401, 0x0, 0x2, 0x4, 0x8, 0x401, 0x9, 0x0, 0xe0, 0x1, 0x6, 0x2, 0x3, 0x80000000, 0x7, 0x9, 0x1, 0x3, 0x40, 0x6, 0x3, 0x7ff, 0x81, 0x101, 0x0, 0xc, 0x1, 0x9, 0x6, 0x333, 0x8, 0x3, 0x3, 0x4, 0xfff, 0x6, 0x0, 0x4, 0xffff7116, 0xffff, 0xd, 0x2, 0x0, 0x9, 0xffff9d3f, 0x3, 0x400, 0x0, 0xea, 0x10a, 0x80000000, 0x3085, 0x4, 0x6, 0x3, 0x40000000, 0x4, 0x0, 0xcddf, 0x6, 0x10001, 0x4, 0x40, 0x1, 0x9, 0x4, 0xe, 0x5, 0x6, 0x200, 0x9, 0x7, 0x9, 0x6, 0x3, 0xb77, 0xf, 0x9, 0x6, 0x0, 0x0, 0x800, 0x2, 0x0, 0xf, 0xff, 0xfffffff8, 0x5, 0xf9, 0x9, 0xfa59]}, @TCA_POLICE_RATE64={0xc, 0x8, 0x4}, @TCA_POLICE_RATE64={0xc, 0x8, 0x4}, @TCA_POLICE_RATE64={0xc, 0x8, 0xffffffffffffffff}], [@TCA_POLICE_RATE={0x404, 0x2, [0x0, 0x6, 0xa412, 0x80, 0xd377, 0x9, 0xc000000, 0x8, 0x2, 0x1ff, 0x0, 0x2, 0xcf4, 0xfffffff8, 0x6, 0x5, 0x3, 0xfffffeff, 0x1, 0x8, 0xc, 0x0, 0x4, 0x6, 0x581, 0x5, 0x4b15d232, 0x6, 0x5, 0x25cd, 0x9, 0x9, 0x4cf2, 0x9, 0x5, 0x5, 0x3, 0x7ff, 0x9, 0x2, 0x5, 0xe1f, 0x6, 0x8, 0xffffffc0, 0x4, 0x8000, 0xf8a1, 0x3, 0x5, 0xd, 0xc, 0x2, 0x5, 0x4b, 0x3, 0x8, 0x8, 0x7fffffff, 0x781bc930, 0x5, 0xffffffff, 0x9, 0xeb0, 0x401, 0xba1, 0x3, 0x10001, 0x7fff, 0xb19, 0xf, 0x2, 0xfffffffd, 0x3ff, 0x8, 0x1, 0x10000, 0x4, 0x2, 0x5, 0x3, 0x5, 0x1, 0x3, 0xa781, 0x3ff, 0x200, 0x0, 0x10000, 0xba29, 0x6, 0x0, 0xffffffff, 0x5, 0x3, 0x5, 0x7, 0x101, 0x5, 0x80, 0x7, 0x10001, 0xa1, 0x0, 0x4, 0x5bc, 0xd104, 0x1, 0x3a9af6de, 0x3, 0x2, 0xb633, 0x0, 0x4, 0x1, 0x9c, 0x4, 0x3ff, 0x90000, 0x6, 0x18a, 0x54c, 0x0, 0x0, 0x100, 0x7, 0x101, 0x7fffffff, 0x7462, 0x7, 0x5, 0x1, 0x6f, 0x3, 0x5, 0x0, 0x10, 0xfffffffd, 0xfabe, 0x9, 0x0, 0x327, 0x3862, 0x650, 0xa1fa, 0x6, 0x2, 0x4, 0x1000, 0x9, 0x8, 0x6afc, 0x0, 0x9, 0xd, 0x6, 0x3, 0x1, 0xffff, 0xffffff7f, 0x1, 0x7fff, 0x7, 0x6, 0x5, 0x8, 0x0, 0x1, 0x6, 0x9, 0x45, 0x7, 0xf11, 0x6, 0x7, 0xb56, 0x7b5, 0x8001, 0xffffffff, 0x4, 0x32, 0xb, 0x7fffffff, 0x7, 0xfffffffc, 0x1, 0x0, 0x8, 0x1, 0x7, 0x1, 0x6, 0x3, 0x7, 0x9, 0x1, 0xd, 0x6, 0x1, 0x3, 0x7, 0x5f7, 0x1, 0x3ff, 0xfffffff6, 0x40, 0xfffffeff, 0x1000, 0xa, 0x4, 0xfffffffa, 0xa497, 0x7fff, 0x8, 0x8, 0x7, 0x100, 0xffffffff, 0xfaea, 0x4, 0x91, 0xd0, 0xfffffc01, 0x9e9, 0xffffd37b, 0x9, 0x2, 0x0, 0x3, 0x6, 0x4, 0x4, 0x5, 0x5, 0x11a2, 0x2, 0xac8, 0x9, 0x0, 0x3ff, 0x6bd, 0xfffffffd, 0x3, 0x3ff, 0x1ff, 0x8, 0x984, 0x21, 0x4, 0x631, 0x8000, 0x0, 0x2, 0x6f6d, 0x9, 0x8]}], [@TCA_POLICE_RESULT={0x8, 0x5, 0x9}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0xe0}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x9}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x7}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x401}, @TCA_POLICE_TBF={0x3c, 0x1, {0x1f14c9fe, 0x1, 0x8, 0x7, 0x2, {0x1, 0x2, 0xffc0, 0x29, 0x2, 0xb58}, {0x5, 0x3, 0x2, 0x0, 0x1, 0x2}, 0x7fff, 0x3, 0x7}}]]}, {0x39, 0x6, "f7de6b3536197f74e1fcb39070c72b18cabf9c827fd0860beb92b84d801703604dde5975a7e0e7dc1b61c329c03123322db9ebe526"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_bpf={0x110, 0x8, 0x0, 0x0, {{0x8}, {0x1c, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_PARMS={0x18, 0x2, {0x5, 0x184, 0x2, 0x2, 0x6}}]}, {0xcd, 0x6, "eb0b10d42aa8b9bd344c0aeea4ca3bf64dbbdf23e1f373f052fedfa4b9debb4f9f9eda743ee8f2c672f9cdac03cb239450df57d008e03ad69bd0a2ddc6dc16957e856dbd720482f9aefa5a47fa27dcf0dbabf6ec811bfc77e90cce031f8b4df0c5eef0dafa75a7d9cedee0d075bb0792da913f4d6e3970c028da884831658310ab6b2e820103b99e223a12f5f5817d8b3fa2d5cf311895c2b710886b7b4d886aa36a77a9edddbe21b1da2e87e8a5d66cd76db257ec0840c7dab0c4ba0e47e7c47b2f3f3042213363f6"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x3}}}}, @m_bpf={0xd0, 0x4, 0x0, 0x0, {{0x8}, {0xa4, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_FD={0x8}, @TCA_ACT_BPF_OPS={0x2c, 0x4, [{0x9, 0x0, 0x8, 0x10000}, {0x800, 0x81, 0x6, 0xff}, {0x6, 0x0, 0xdc, 0x7fffffff}, {0x5, 0x2, 0xfb, 0x1}, {0x5, 0x7, 0x8a, 0x401}]}, @TCA_ACT_BPF_OPS={0xc, 0x4, [{0xf801, 0x4, 0x5, 0x1}]}, @TCA_ACT_BPF_PARMS={0x18, 0x2, {0x9, 0x2, 0x0, 0x4, 0x2}}, @TCA_ACT_BPF_OPS={0x24, 0x4, [{0xfeff, 0x8, 0x1, 0x10}, {0x2, 0x8, 0x3, 0x1}, {0x4, 0xe2, 0x9b, 0x2}, {0x5, 0x3, 0xff, 0x7}]}, @TCA_ACT_BPF_NAME={0xc, 0x6, './file0\x00'}, @TCA_ACT_BPF_PARMS={0x18, 0x2, {0x0, 0x6, 0xd864c69f8c94edd3, 0x3}}]}, {0x5, 0x6, "1c"}, {0xc}, {0xc, 0x8, {0x2, 0x1}}}}]}, @TCA_BASIC_POLICE={0x4f8, 0x4, [@TCA_POLICE_TBF={0x3c, 0x1, {0x4, 0x7, 0xf, 0x7fcfa5bc, 0x1, {0x7f, 0x2, 0x0, 0x80, 0x7, 0x7fff}, {0x8a, 0x1, 0x3, 0x101, 0xc4dc, 0x75}, 0x0, 0xb1, 0x7}}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x4}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x8}, @TCA_POLICE_RESULT={0x8, 0x5, 0xf7}, @TCA_POLICE_TBF={0x3c, 0x1, {0x5, 0x4, 0x7, 0x7, 0x9, {0x2, 0x2, 0x800, 0x4, 0x0, 0x8001}, {0x4, 0x0, 0xe, 0x7f, 0x3ff, 0x4}, 0x2, 0x7, 0xa}}, @TCA_POLICE_RATE64={0xc, 0x8, 0x3}, @TCA_POLICE_RATE={0x404, 0x2, [0x3, 0x7, 0x0, 0x7, 0xf, 0x6, 0x9, 0x1, 0x6, 0x9, 0x3, 0x3deca48b, 0x60000, 0xb, 0x7fffffff, 0x3, 0x59259f2f, 0x2, 0x70, 0x3, 0x10, 0xffff9deb, 0x3, 0xdf6, 0x80000001, 0x2, 0x8d, 0x4, 0x1, 0x2, 0x80000001, 0x6, 0x9, 0x80000000, 0x4, 0x3fab9bef, 0x5, 0x1, 0xffffffff, 0x8001, 0x7, 0x10000, 0x9f76, 0x5, 0x9, 0x4, 0xff, 0xffff, 0x3ff, 0x5, 0x80, 0xe, 0x2, 0x7, 0x0, 0x9, 0x6, 0x8, 0x8a, 0xece3, 0x5, 0x4010, 0x5, 0x3, 0xfa3, 0x7, 0xddc4, 0x9, 0x3, 0x8001, 0x10, 0x4542, 0x0, 0x7, 0x0, 0xfffffffc, 0x8, 0x7, 0xa19, 0xd3, 0x6, 0x7, 0x1, 0x1000, 0x7, 0x7, 0xfffff9c4, 0x1, 0x7, 0x636, 0x84, 0x9, 0x6, 0x5, 0x800000, 0x8, 0x6, 0x7b4, 0x8001, 0x0, 0x1ff, 0x80000000, 0x200, 0x7, 0x5, 0x1, 0xa0000, 0x1, 0x2, 0x5, 0x556, 0xd8968543, 0x2, 0x3, 0x1, 0x200, 0x6, 0x3b00, 0x9, 0x40, 0x81, 0x5, 0x7, 0x432, 0x1, 0x3, 0x0, 0x45c9c7b9, 0x27ce, 0x1, 0x786ac478, 0xfff, 0x5, 0x3, 0x6, 0x8, 0x0, 0x6, 0x40, 0x40, 0x5, 0xfffeffff, 0xfffffa1f, 0x5, 0x1ff, 0x1400000, 0x8, 0xffffffff, 0x2, 0x1, 0x4, 0x172, 0x27, 0x1d, 0x7, 0x0, 0x8, 0x1, 0x0, 0xc03, 0x8, 0x4076, 0xe42, 0x4, 0x3, 0x81, 0x10000000, 0x7b0, 0x40, 0x7, 0x1, 0x7, 0x9, 0x7fffffff, 0x5, 0x4, 0xfffffff7, 0x0, 0x1ff5, 0x2, 0xfff, 0x1, 0x200, 0x240, 0x9, 0x2, 0x8, 0x8, 0xfffff7df, 0x7045f5d8, 0x8, 0x800, 0xfff, 0x49b, 0xf9, 0x7, 0xc, 0xff, 0x1, 0x8, 0x3, 0x5fa5, 0xffffffd7, 0x9, 0xe, 0x6, 0xff, 0x7f, 0x6, 0x6, 0xa26, 0x7, 0xc, 0x8, 0x5, 0x0, 0x7, 0x7fff, 0xfffffff5, 0x6, 0x3, 0x4, 0x0, 0x4f, 0x3, 0x6e, 0x401, 0x5, 0x3, 0x7, 0xe, 0x2, 0x9, 0x80000001, 0xc, 0x9, 0xaf27, 0x6, 0x3, 0xff, 0x1, 0x4, 0xf, 0x0, 0x80000000, 0x1, 0x9, 0x8000, 0x2, 0x1, 0x3, 0x1b, 0x8, 0x2db, 0x3ff, 0x9]}, @TCA_POLICE_RATE64={0xc, 0x8, 0x8}, @TCA_POLICE_RESULT={0x8, 0x5, 0x9}, @TCA_POLICE_TBF={0x3c, 0x1, {0x8, 0x4, 0xa7ed, 0x5, 0x0, {0x5, 0x0, 0x4, 0x9, 0x9, 0x3}, {0xe, 0x1, 0xfffc, 0x4, 0x1000, 0xfffffffc}, 0x6, 0x7}}]}, @TCA_BASIC_ACT={0x20c, 0x3, [@m_mpls={0xd0, 0x7, 0x0, 0x0, {{0x9}, {0x14, 0x2, 0x0, 0x1, [@TCA_MPLS_BOS={0x5}, @TCA_MPLS_LABEL={0x8, 0x5, 0xba7be}]}, {0x93, 0x6, "8531c429e24eeeaa81b0fa074596ea0eaf55de916e127a519a3e82fb6288200220dddd60db4228e3da0c3b58998e6a2ea1e36536c3a1803336a911957e9dba8287607683c07b0b020bc51fb1895b6b403d325ca62eec7d192b02db0427a686a9946fd85da737dae592def000eea162e99ddf7b8883888b40cc5ee844a92b75962336b3e077b0781763447c23da67c5"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x2}}}}, @m_csum={0x138, 0x4, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0xf, 0x6, 0x10000000, 0x7, 0xdcb0}, 0x35}}]}, {0xed, 0x6, "085fa788c20fb0aeaf136261e028ab8f05887e213aeb641660f5c68ebb059340530fd547253d00756f2f305657eff218d31cce0ebf8a82ff0d82631c2a872b0f4c841cb7b77f33577c7b0900436efaaad5e21a162523ffc5bc1f4ffa523d5210b5d8677667d1d970c5f186085cac3847bf22cd90a3ba3e4e273c897c99cb8f7ba6658960ff16485ad95b88090874c7166d97dc146d70f04e37cfc0f378c6b78dfae492dfe3da5bbcc57c5a86a449f3e313c3083396b0cfe6ab7f40f98a4b4f4e001e533d848e73835142d1e2bf6e6c35cbde1d1d5d520c894def1716029970956d8f4738f0648d163a"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x2}}}}]}, @TCA_BASIC_CLASSID={0x8, 0x1, {0x7, 0x7}}, @TCA_BASIC_ACT={0x438, 0x3, [@m_nat={0x144, 0xa, 0x0, 0x0, {{0x8}, {0xa4, 0x2, 0x0, 0x1, [@TCA_NAT_PARMS={0x28, 0x1, {{0x4, 0x2, 0x1, 0x1, 0x81}, @loopback, @rand_addr=0x64010102, 0xff000000}}, @TCA_NAT_PARMS={0x28, 0x1, {{0xfe9e, 0x1ff, 0x1, 0x43c, 0x7b}, @broadcast, @loopback, 0xffffff00}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x4, 0x6, 0x4, 0x0, 0x8}, @multicast1, @dev={0xac, 0x14, 0x14, 0x44}, 0xff000000}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x9, 0x3, 0x7, 0x5, 0x3}, @dev, @dev={0xac, 0x14, 0x14, 0x1a}, 0xffffffff}}]}, {0x7a, 0x6, "8d2b7ac49d804b51a2ada50243ba2e6f2c5cc0b56efadd4448061e441de4c0cb658cfde3cf4e71645f45ea6d837998797620cec80c12b6e63e8a5de9d449d516904ac5890aab8113f63bb58523a5075794c7c75285c98812b64e794b2e434b6ea2b01bcc6f396666faa22450bd2db98860c060755f9b"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x1, 0x2}}}}, @m_mpls={0xcc, 0x1e, 0x0, 0x0, {{0x9}, {0x54, 0x2, 0x0, 0x1, [@TCA_MPLS_PARMS={0x1c, 0x2, {{0x3, 0x40, 0x20000000, 0x5, 0x2}}}, @TCA_MPLS_BOS={0x5}, @TCA_MPLS_PARMS={0x1c, 0x2, {{0x7, 0x10000, 0x5, 0xcc92, 0x5}, 0x3}}, @TCA_MPLS_TC={0x5}, @TCA_MPLS_LABEL={0x8, 0x5, 0x5073c}]}, {0x4e, 0x6, "3d1f7be14b8e3639955f10746c67f7d1e3a62f4e92092f8d7f9a4544e27d2e871ae8ddb389198caa82a95a36dbd7bf54775cec07f30f0609bd58bf2d9929f1d69138dd96b3b2c9dd7570"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x2, 0x3}}}}, @m_skbmod={0xe8, 0x14, 0x0, 0x0, {{0xb}, {0x64, 0x2, 0x0, 0x1, [@TCA_SKBMOD_PARMS={0x24, 0x2, {{0x800, 0x3, 0x20000000, 0x2, 0x2}, 0xe}}, @TCA_SKBMOD_PARMS={0x24, 0x2, {{0x7, 0x6, 0x8, 0x8, 0x3}, 0xe}}, @TCA_SKBMOD_SMAC={0xa, 0x4, @remote}, @TCA_SKBMOD_SMAC={0xa}]}, {0x59, 0x6, "b47f3078cfee1b31ba460cb06873b08c593931638ba14ec0fcc7bac8b7df9ab3ad22e33fd483890da8ccf4ab600fa15fd5888dd07404a62925d92d25bde5c1f9ab732053222f3f596870d5291505239562077906b6"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1}}}}, @m_gact={0x13c, 0x7, 0x0, 0x0, {{0x9}, {0x28, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0x7, 0x0, 0x7, 0xfffffc01, 0xffffff80}}, @TCA_GACT_PROB={0xc, 0x3, {0x1, 0x1ab, 0x2}}]}, {0xe9, 0x6, "c1eb70114a1415ecd5c9755995773266c37be55ea86df4d30eecd3f9b2fa16761ab8e34cf5d650c805fd9e3e095c2533d580490739701f212220a231d656e8b516b213ca7b69a16950fbe8f1b326b26ec0a58665afa8249da775d4d40d35cb65f4af63be14e9ac2ef34946040fbd442e4ad87d87e72a4b8a78f65ff52a39274c692426a29cc4c96246a85932b051668583124ed455a9923c776318abf68189ba81345863dfcb3ac4bf0a4d8a1785e825d3c890ce098c6d1dc0fa8c078104382b70d2b049a92a09db16ef63d55368ae7a7d9e66713f11277acb4bba92faa6544de582600664"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3}}}}]}, @TCA_BASIC_CLASSID={0x8, 0x1, {0x0, 0xffe0}}]}}, @TCA_RATE={0x6, 0x5, {0x9, 0x2}}, @filter_kind_options=@f_bpf={{0x8}, {0x151c, 0x2, [@TCA_BPF_FLAGS={0x8}, @TCA_BPF_ACT={0x1510, 0x1, [@m_police={0x150c, 0x7, 0x0, 0x0, {{0xb}, {0x14c0, 0x2, 0x0, 0x1, [[@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x6, 0x1, 0x5, 0x8001, 0x7, 0x9, 0x7, 0x0, 0xfffffffd, 0xd, 0x172, 0x5, 0x5, 0x9, 0x2, 0x7, 0x70000000, 0xd, 0xd, 0xce3, 0x80000001, 0x7, 0x10001, 0x6, 0x4, 0x8, 0x7ff, 0x5, 0x6, 0x7, 0x800, 0x6, 0xe73, 0xc0b, 0x5, 0x1, 0x1, 0x32f98000, 0x3, 0x0, 0x4, 0x0, 0x7, 0x6, 0x1, 0x2, 0x6, 0x7, 0xb462, 0x40000, 0xffff, 0x9, 0x1, 0x0, 0x5, 0x80000000, 0x2, 0x1, 0xe, 0x335eb7ea, 0x2, 0x8, 0x8, 0xc, 0x3, 0x6, 0xe6, 0xfffffff7, 0x1d20, 0x7ff, 0x200, 0x1, 0x9, 0x0, 0x510, 0xfffffffc, 0xfffffffa, 0x8, 0x0, 0x1ff, 0x5, 0x5, 0x7f, 0x9, 0x7, 0xac9, 0x2, 0x8001, 0xfffffffc, 0x6, 0x3ff, 0x7, 0x7, 0xffa, 0x9, 0x3, 0xaec, 0x5, 0x1, 0x5d29, 0xff, 0x3, 0x4, 0xfffffffe, 0xc0000000, 0x5, 0x7, 0x0, 0xe5, 0x8001, 0x1, 0x1ff, 0x10001, 0x212, 0x3, 0x0, 0x3c0cba94, 0x4, 0x100, 0x3, 0x0, 0xc, 0x4, 0x942, 0x0, 0x1, 0xfff, 0x0, 0x7f, 0x8, 0xcf47, 0xc, 0xe, 0x7, 0x80, 0xa, 0x200, 0x3bf, 0x8000, 0x400, 0xb, 0xfffffffe, 0xe, 0xa, 0xfffe000, 0xffff, 0x0, 0x3, 0x0, 0x7fff, 0x7f9f84d6, 0x7fff, 0xba2, 0x7, 0x7, 0x963, 0x6, 0x7, 0x6, 0x9, 0x2, 0x5, 0x6, 0x4, 0x2, 0x1, 0x8, 0xf, 0x10000, 0x9, 0x6, 0x1d, 0x2, 0x7ff, 0x5, 0x1, 0x4, 0xffff, 0x4, 0x5, 0xf, 0x8, 0x4, 0x8, 0x81, 0x81, 0x6, 0xc, 0x7, 0x0, 0x1, 0x6, 0x1, 0x8, 0x4, 0x45, 0x7, 0x6, 0x6, 0x3, 0xffffffff, 0x4, 0x601c, 0x2, 0x3, 0xffffffff, 0x3, 0xfffffe01, 0x40, 0x4800, 0x9, 0x4, 0x1, 0x9, 0x7, 0x3, 0x2, 0xb, 0xff, 0x1, 0x44, 0x6, 0x3ff, 0x5, 0x1, 0x401, 0x401, 0x6, 0x0, 0x6, 0xb, 0xac0, 0x6, 0xfffffffe, 0x0, 0x401, 0x7, 0xd, 0x9, 0x4, 0x5, 0x10, 0x3, 0x2, 0x7, 0x3, 0x0, 0x1000, 0x2, 0xb, 0x8, 0xfffffffe, 0x7fffffff, 0x101, 0x5, 0x1]}, @TCA_POLICE_RATE64={0xc, 0x8, 0xe1c}, @TCA_POLICE_RESULT={0x8, 0x5, 0xdb28}, @TCA_POLICE_RATE64={0xc, 0x8, 0xfffffffffffffffb}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x1}, @TCA_POLICE_AVRATE={0x8, 0x4, 0xf}, @TCA_POLICE_TBF={0x3c, 0x1, {0x5cd, 0x5, 0x7ff, 0x100, 0x4, {0x9, 0x2, 0xff39, 0x6a, 0xc62, 0x1}, {0x0, 0x0, 0x10, 0x1, 0x1000, 0x1}, 0x10001, 0xd, 0x5}}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x10001, 0x989, 0x3, 0x5, 0x7e8b, 0x9, 0x3, 0xd, 0x8, 0xfffffff8, 0xe, 0xf, 0xfc, 0x3, 0x1, 0x7, 0x81, 0x5, 0x8, 0x8, 0xffffffff, 0x9, 0x1, 0x3, 0x7, 0x401, 0xafd, 0x6, 0x4, 0x3, 0x2, 0x5, 0x3, 0x9, 0x4, 0xfffffeff, 0x0, 0x24ce5293, 0xfffffffa, 0x9, 0x10001, 0x4, 0x400, 0xe085, 0x9, 0x28, 0x1, 0x9, 0xfffffc00, 0x0, 0x1ff, 0xe47, 0x0, 0xb, 0x2, 0xec, 0x3, 0x4, 0x0, 0x9, 0x4, 0x3, 0x7, 0x5, 0x42, 0x8, 0x2, 0x3, 0x9, 0x3, 0x2, 0x5, 0x6, 0x2, 0x1, 0x1ff, 0x30f, 0x4, 0x40, 0x30, 0x2, 0x1, 0x9, 0x4, 0x7, 0xc6, 0xf8, 0x5, 0x0, 0x10000, 0x3e9091da, 0x6, 0x3, 0x0, 0x3, 0xd95, 0xd1, 0x8, 0x7, 0x40, 0x0, 0x5, 0xf7, 0x200, 0x2, 0xffffffae, 0x68, 0x5, 0xc9, 0x2, 0x3, 0x14e, 0x4, 0x8001, 0x3, 0x9, 0x8, 0x9, 0x1, 0x17b, 0x0, 0x401, 0x4, 0x5, 0x7ff, 0x1, 0xd, 0x1, 0x9f, 0x1d, 0x8, 0x100, 0x3f0, 0x5e, 0x2, 0x0, 0x6cc3, 0x7, 0x0, 0x3, 0x87, 0x3, 0x3, 0x3, 0x7cb, 0x9, 0x53d42caa, 0x0, 0x322, 0x3, 0x7, 0x9, 0x1, 0x3, 0x7, 0x4, 0x4, 0xf, 0x7fffffff, 0x924, 0x46eb, 0xe, 0x1f76, 0x7, 0x8, 0x9, 0x4, 0x7cd107d8, 0x7, 0x4, 0x85, 0x8, 0x5, 0x9, 0x0, 0x401, 0x1, 0x8, 0x72, 0x12ff50f6, 0xd53, 0x2, 0x3, 0x9aae, 0x7, 0x6de7b43b, 0x5, 0x7, 0xfffffeca, 0x1, 0x80000000, 0x7, 0x5, 0x6, 0x7, 0x7, 0x45, 0x9, 0x0, 0xfffff3d2, 0x3, 0x990, 0x7fffffff, 0x0, 0x6, 0x5, 0xb8, 0x8, 0x7e, 0x3, 0x4, 0x4, 0x8, 0xa467, 0x800, 0x6, 0xb, 0x3, 0x6, 0x3, 0x0, 0x9, 0x1ff, 0x4, 0x8, 0x0, 0x8, 0x7f, 0xfffffffb, 0x1, 0x8, 0x6, 0x5, 0xe4a0, 0xffffff7f, 0x6, 0x1ff, 0x2, 0x1, 0x7, 0x8, 0xfffffff1, 0x1, 0x3, 0x7, 0x6, 0x10, 0x7fffffff, 0x6, 0x8, 0x7, 0x81, 0x7ff, 0x8001, 0x3, 0xe]}], [@TCA_POLICE_AVRATE={0x8, 0x4, 0x58c}], [@TCA_POLICE_RATE={0x404, 0x2, [0x7fffffff, 0x8, 0x1, 0x2, 0x0, 0x8, 0x10000, 0x54, 0xffffffff, 0x5, 0x800, 0x1, 0x7fffffff, 0xcca, 0x83, 0x3ff, 0x800, 0x1, 0xfffffff7, 0xd, 0xb, 0xd6c5, 0x0, 0x9, 0x8, 0x7, 0x21, 0x7, 0x1, 0x4, 0x219b, 0x8, 0x139b, 0x5, 0x0, 0xffff4894, 0x8, 0x40, 0x8, 0x3, 0x4800, 0x7f922113, 0x9, 0x3, 0x6d0000, 0x5, 0x4, 0x8, 0xf2d, 0x3, 0x40, 0x8000, 0x5, 0x1, 0xa, 0x80000000, 0xfff, 0x4, 0xc21a, 0x400, 0xffffff7a, 0x50000000, 0x80000000, 0x272, 0x1, 0xbc, 0x2, 0x3, 0xfffffff1, 0xb00, 0x5, 0xf, 0x800, 0x7, 0x2, 0x6, 0xffff, 0xffffff81, 0xbf, 0x4, 0x3, 0x6, 0x22, 0x2, 0x7, 0x3, 0x3ff, 0xdefd, 0x5, 0x2, 0xa9, 0x7, 0x0, 0x519d, 0x0, 0xdd63, 0x7f, 0x13600000, 0xf8, 0x1b, 0x81, 0xb, 0x1, 0x2d24, 0x8, 0x75bb, 0x530, 0x1, 0x3, 0x5, 0xfffffffb, 0xa, 0x46, 0x1, 0x3ff, 0x2, 0x1f, 0x2e8, 0x9, 0x8000, 0x7, 0x7, 0x2d, 0x9, 0x5, 0x8, 0x100, 0xfffffff5, 0x8001, 0x1, 0x10000, 0x8, 0x2, 0x101, 0x9, 0x10, 0x800, 0x0, 0x101, 0x3, 0xa6e, 0x1, 0x4, 0x100, 0x0, 0xffffffff, 0x9, 0xf, 0x10001, 0x6, 0x3, 0x8, 0x3, 0x7fffffff, 0x0, 0x2, 0x3, 0xbd2, 0xffffffff, 0x10000000, 0xaf78, 0x1, 0xffffffff, 0x3, 0xfffffff9, 0x3, 0x40, 0x71b2, 0x76, 0x2, 0x0, 0x1, 0x581, 0x1, 0x3ff, 0x7ff, 0x78, 0x800, 0x5, 0x3, 0x8, 0x0, 0x1a1f, 0x1, 0x3ff, 0xfffffffc, 0x10000, 0x8000, 0x80, 0xfffffff8, 0x8000000, 0x10001, 0xfffffffa, 0x2, 0xfffff59b, 0x0, 0x80, 0xb, 0x3, 0x4, 0x6, 0x4, 0x4, 0x7, 0x7, 0x3, 0x80000001, 0x1, 0x0, 0x8001, 0x3, 0x3, 0x2, 0x80, 0x80000001, 0x88a9, 0x5, 0x6, 0x200, 0x61c, 0x4, 0x1, 0xf11e, 0x5, 0x100, 0xffffffff, 0x9, 0x8000, 0xa, 0x4, 0x6, 0xa, 0x4, 0x4, 0x401, 0x0, 0x8, 0x2, 0x4, 0x5, 0x22a, 0x6, 0xff, 0x1, 0x3, 0x7f, 0x6, 0x0, 0x6, 0x2, 0x401, 0x6, 0x7ff2, 0x314, 0x6, 0xffffffff]}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x7, 0x0, 0x4, 0x7, 0x3, 0x7, 0x9, 0x4, 0x96, 0x5, 0x5, 0x5, 0x7fffffff, 0x3d19, 0x1000, 0xa66, 0x2, 0x2, 0x6, 0x91000000, 0x9, 0x4, 0xfffffffb, 0x9, 0x2, 0x10, 0x2, 0xfffffff4, 0xfffffff7, 0x81, 0x5, 0x5, 0x1, 0x98b0, 0xe, 0x1, 0x450, 0xe3, 0x7, 0x18000000, 0x5, 0x6, 0x4, 0x401, 0x97c0, 0xffffffff, 0x6f9, 0x8000, 0x4, 0x6, 0x7, 0x38, 0x1, 0x6, 0x1, 0xc85, 0x401, 0x7, 0x9, 0x509, 0x6, 0x4, 0x80000000, 0x5, 0x4, 0xff, 0x935d, 0x1ff, 0x5, 0x4, 0x100, 0x8000, 0x200, 0x4, 0x2, 0x6, 0x1, 0x4, 0x6, 0x8, 0x1, 0x1, 0x101, 0x80, 0x0, 0x100, 0x2, 0x3, 0x6, 0x1, 0x9, 0x8001, 0x2, 0xb, 0x2, 0x0, 0xf93a, 0x10, 0x5, 0x3, 0x6, 0x7, 0xfffffff9, 0xfffffffc, 0x3ff, 0x1, 0x80000001, 0x5, 0x400, 0x7, 0x4f, 0x4, 0x0, 0x7, 0x2, 0x800, 0x4, 0xb, 0x5e5, 0x8001, 0x7, 0x0, 0x0, 0xff, 0x6, 0xfe2, 0x1, 0x81, 0xdd0f, 0x4, 0x8f9, 0xc, 0x845, 0x3, 0x5, 0x401, 0x200, 0x2, 0x9, 0x9, 0x0, 0x1, 0x8, 0x80, 0x809, 0x2, 0x36cc6813, 0x80000000, 0x10, 0xfff, 0x7, 0xfffffff7, 0xffffffff, 0x9, 0x10001, 0x9, 0x6, 0x4, 0x7, 0x8, 0x7, 0x8000, 0x0, 0x8, 0x2, 0x4, 0xef, 0x2, 0x2, 0x1, 0x3, 0x0, 0x6, 0x1, 0xfffffff7, 0x5, 0x7, 0x3, 0xffffffff, 0x959c, 0x0, 0xe0, 0x8001, 0x1, 0xffffffc0, 0x4, 0x401, 0x1, 0xfffffffa, 0x1, 0x80000001, 0xb, 0x10, 0x5, 0xbe7d, 0x8, 0x7, 0x704a08e5, 0x7ff, 0xf4c, 0x6, 0x5, 0x800, 0x7, 0x5, 0xf, 0x5, 0x7, 0x8, 0x9, 0x7, 0x5, 0x0, 0xfffffffd, 0xb07, 0x99, 0x6, 0x803, 0x5, 0x4, 0x1000, 0x16, 0x8, 0x2, 0x8, 0x4, 0x2, 0x9, 0x3, 0xffffffee, 0x2, 0x5, 0x8, 0x272, 0x7, 0x7c71b961, 0x80, 0x80, 0x2, 0x503d406e, 0x8, 0x7ff, 0x7fffffff, 0x5, 0x8, 0x0, 0x7fff, 0x3, 0xffffffff, 0x6, 0x3, 0x5, 0xfffffffa, 0x1e5, 0x6, 0x3]}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x9}, @TCA_POLICE_RATE={0x404, 0x2, [0x2, 0xa476, 0x3, 0xf, 0x5, 0x0, 0x6, 0x20b3, 0xfff, 0xdb, 0x7, 0x7fff, 0x8, 0xe0, 0x2, 0x5, 0x5, 0xde0, 0x0, 0x5, 0xc5, 0x9, 0x0, 0x101, 0xb, 0xfffffffa, 0x40, 0x6, 0x9, 0x400, 0x0, 0xffff, 0x7fff, 0x10, 0x1, 0x9, 0x1ff, 0x9, 0x101, 0x918, 0xfff, 0x80000000, 0x81, 0x5, 0x0, 0x0, 0x0, 0xb, 0x7, 0x7fffffff, 0x0, 0x1, 0x0, 0x89, 0x4, 0x7, 0x85b591c9, 0x0, 0x1, 0x0, 0xb, 0x109e, 0x9, 0xfffffffe, 0x28, 0x8, 0x0, 0x5, 0xf, 0x7fff, 0x5, 0x5, 0x7fff, 0x83, 0x800, 0x1, 0x0, 0x2, 0xfffffffd, 0x3, 0xf, 0xfffffffe, 0xa, 0x6, 0xc, 0x3, 0x4d, 0x7, 0x7ff, 0x7f, 0xa623, 0x0, 0x4, 0x1, 0x9, 0x4, 0xbc, 0xa17, 0x0, 0xd904, 0x79, 0x2, 0x7, 0x100, 0x8, 0x0, 0x2, 0x7, 0x85, 0x3, 0x10, 0x2, 0x4, 0x80000000, 0xfea, 0x8, 0x2, 0x5, 0x7, 0x81, 0x9, 0x2, 0x0, 0x0, 0x3, 0xb, 0x8, 0x9, 0xe, 0xf, 0xfffffffa, 0x7, 0x7, 0x40, 0x7, 0x6, 0x3ff, 0x1, 0x3, 0x40, 0x1, 0xc, 0x7, 0x9, 0x3, 0x575, 0x6, 0x0, 0x4, 0x6, 0xfff, 0x400, 0xbc, 0x21800000, 0x7fffffff, 0xf, 0x7, 0x7fff, 0x8, 0x200, 0x8, 0x80, 0x80000001, 0x0, 0xc18, 0x2, 0x3, 0xf0e, 0x80, 0x7, 0x1ff, 0x8a, 0x7fff, 0x0, 0x80000001, 0xb6, 0x1, 0xf, 0x826e, 0xfd14, 0x10, 0x10001, 0x8000, 0x32, 0x2, 0x200, 0x0, 0x5, 0x6, 0x8000, 0x7fffffff, 0x2, 0x54, 0xfffffffd, 0x7f, 0x5, 0x10000, 0x8, 0x80000000, 0x3, 0x1, 0x0, 0xe149, 0x6, 0x5, 0x4, 0x1, 0xb, 0x7ff, 0xa255, 0x9875, 0x7, 0xfa6e, 0x6, 0x1000, 0x955a, 0x8, 0x4, 0x7cd, 0xfffffffb, 0xfffffffb, 0x0, 0x1, 0x9, 0x100, 0x3, 0x0, 0xe27, 0x1000, 0x3, 0x24d, 0x9, 0x8, 0x1, 0x8, 0x3, 0x0, 0x5, 0x8001, 0x800, 0xf3, 0x1e08, 0x6, 0x59, 0x6, 0x7fff, 0x9, 0x5, 0x7ff, 0x5, 0x5, 0x1, 0x4, 0x7ed, 0x7eff98ad, 0xfa]}], [@TCA_POLICE_RATE64={0xc, 0x8, 0x7fffffff}, @TCA_POLICE_AVRATE={0x8, 0x4, 0xfffff758}, @TCA_POLICE_RESULT={0x8, 0x5, 0x5}, @TCA_POLICE_RATE64={0xc, 0x8, 0x87}]]}, {0x21, 0x6, "f8d75d9e90705160e64955f1c7309635b1538d27fe3d89d052d208941f"}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}}, @filter_kind_options=@f_flower={{0xb}, {0x84, 0x2, [@TCA_FLOWER_KEY_ARP_OP={0x5, 0x3d, 0x7}, @TCA_FLOWER_KEY_IPV4_DST={0x8, 0xc, @rand_addr=0x64010100}, @TCA_FLOWER_KEY_ENC_OPTS_MASK={0x34, 0x55, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_ERSPAN={0xc, 0x3, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_ERSPAN_HWID={0x5, 0x4, 0xe}]}, @TCA_FLOWER_KEY_ENC_OPTS_VXLAN={0x24, 0x2, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x5}, @TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0xd5}, @TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8}, @TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x6}]}]}, @TCA_FLOWER_KEY_IPV6_DST={0x14, 0x10, @dev={0xfe, 0x80, '\x00', 0x43}}, @TCA_FLOWER_KEY_ICMPV6_CODE_MASK={0x5}, @TCA_FLOWER_KEY_CVLAN_ETH_TYPE={0x6, 0x4f, 0x88a8}, @TCA_FLOWER_KEY_IPV4_DST_MASK={0x8, 0xd, 0xffffffff}, @TCA_FLOWER_KEY_TCP_DST={0x6}, @TCA_FLOWER_KEY_ICMPV4_TYPE_MASK={0x5}]}}, @TCA_CHAIN={0x8, 0xb, 0x6}, @filter_kind_options=@f_route={{0xa}, {0x44c, 0x2, [@TCA_ROUTE4_TO={0x8, 0x2, 0xc8}, @TCA_ROUTE4_CLASSID={0x8, 0x1, {0xffff, 0xa}}, @TCA_ROUTE4_IIF={0x8, 0x4, r4}, @TCA_ROUTE4_FROM={0x8, 0x3, 0xa4}, @TCA_ROUTE4_FROM={0x8, 0x3, 0x74}, @TCA_ROUTE4_FROM={0x8, 0x3, 0x9b}, @TCA_ROUTE4_POLICE={0x410, 0x5, [@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x8, 0x441f, 0x0, 0xffffffff, 0x4, 0x1ff, 0x1, 0x10, 0x7, 0x4aa, 0x6, 0x4, 0x5, 0x2, 0x6, 0x1, 0x80000000, 0x4, 0x5, 0xffff, 0x2, 0xfff, 0x0, 0x1, 0x1, 0x2, 0x7, 0x0, 0x6, 0x6, 0x5e76, 0x3, 0x4, 0x5, 0xfffffff4, 0x1, 0x17e6, 0x100, 0x591, 0xa2b, 0x9f19, 0x4, 0x3dfb, 0x1, 0x7ff, 0xe000, 0x1, 0xaaf5, 0x2, 0x8, 0x5, 0xffff, 0x8, 0x2, 0x3, 0xff, 0x3, 0x3, 0x2, 0x661847c1, 0x9, 0x401, 0x9, 0x80000000, 0x2, 0x6, 0x3, 0xff, 0x2, 0x6, 0x1e4, 0x10001, 0x7fffffff, 0xffff7958, 0xfffffff7, 0x3, 0xe, 0x80000000, 0x4, 0x0, 0x7de2000, 0x380, 0x6, 0x0, 0x93, 0x0, 0x856, 0xfea, 0xffffb76f, 0x7, 0xf0b, 0x66a, 0x9, 0x40, 0x8, 0x1, 0x0, 0x9, 0xb3b, 0x80, 0x5, 0x9, 0x7, 0x81, 0x7, 0x5, 0x7, 0x7, 0x0, 0x91, 0x6b, 0x6, 0x9, 0x3de3, 0x100, 0x10000000, 0x2, 0x7f, 0x7, 0x5, 0xff1, 0x1ec, 0x0, 0x35a, 0x5, 0x4, 0x1, 0x9, 0x101, 0x3, 0x5, 0x7, 0x0, 0x5, 0x3, 0x7, 0xb, 0x1, 0x6, 0x0, 0x4, 0x5, 0x80, 0xd05, 0x1ff, 0xfcab, 0x100, 0x0, 0x5, 0x9, 0x5, 0x8001, 0xb12, 0x9, 0x1, 0xfffffffb, 0xe, 0x0, 0x100, 0xe, 0x7, 0xffff2154, 0x0, 0x2, 0x4, 0x3, 0x4, 0x1, 0x5, 0x72d, 0x1ff, 0x53, 0x3, 0x5, 0xe6, 0x15a7, 0x10, 0x8000, 0x5d, 0xfffffffc, 0x9f16, 0x2, 0x2, 0x7, 0x5, 0x2, 0x5, 0xb, 0x6, 0x0, 0x4, 0x1, 0x8, 0x8, 0x100, 0x80000001, 0x2, 0xae15, 0x2, 0x0, 0x1, 0x6, 0x8, 0xffffffff, 0xfffffff7, 0xfffffffa, 0x3, 0x6afc, 0x4d7d, 0x7fffffff, 0x800, 0x9, 0xd37, 0x2, 0x1, 0x6, 0x86, 0x1, 0x3ff, 0x1, 0x5, 0x2, 0x40, 0x80, 0x3, 0xff, 0x40, 0x8, 0x9, 0x3, 0x4, 0xa9d7, 0x3, 0x5, 0xe, 0x45, 0x7fffffff, 0xb, 0x2fa, 0x7, 0x3, 0x56, 0x8, 0x9, 0xd3e5, 0x4, 0xca6, 0x5, 0x8001, 0x87, 0x4, 0x5, 0x10000, 0x1000, 0x5, 0x6]}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x4}]}, @TCA_ROUTE4_CLASSID={0x8, 0x1, {0xe, 0xc}}]}}, @TCA_CHAIN={0x8, 0xb, 0xffffffff}]}, 0x3934}, 0x1, 0x0, 0x0, 0x20048008}, 0x40) syz_mount_image$ext4(&(0x7f0000000740)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x818010, &(0x7f0000000300)={[{@minixdf}, {@grpjquota}]}, 0x3, 0x72c, &(0x7f00000014c0)="$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") 149.498725ms ago: executing program 9 (id=15130): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48) r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1000000004000000080000000500000000000000", @ANYRES32, @ANYBLOB="000000000000000000bb9bd48805444852f45d00", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008900000b7030000feffffff850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000003c0)={r4, r2}, 0x14) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="0600000004000000990000000d"], 0x50) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r6}, 0x10) r7 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r7, 0x0, 0x80, &(0x7f0000001d80)=@broute={'broute\x00', 0x20, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000000c0], 0x11, 0x0, 0x0}, 0x108) syz_emit_ethernet(0xd86, &(0x7f0000001800)=ANY=[], 0x0) r8 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r9 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000740), r8) sendmsg$WG_CMD_GET_DEVICE(r8, &(0x7f0000000400)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x68, r9, 0x300, 0x70bd25, 0x25dfdbfe, {}, [@WGDEVICE_A_IFINDEX={0x8, 0x1, r2}, @WGDEVICE_A_FLAGS={0x8}, @WGDEVICE_A_PEERS={0x28, 0x8, 0x0, 0x1, [{0x18, 0x0, 0x0, 0x1, [@WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e22, @initdev={0xac, 0x1e, 0x0, 0x0}}}]}, {0xc, 0x0, 0x0, 0x1, [@WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0x8}]}]}, @WGDEVICE_A_IFINDEX={0x8, 0x1, r2}, @WGDEVICE_A_IFNAME={0x14, 0x2, 'wg2\x00'}]}, 0x68}, 0x1, 0x0, 0x0, 0x200400c0}, 0x4040049) r10 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) setsockopt$bt_BT_DEFER_SETUP(r10, 0x112, 0x7, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x41100}, 0x94) r11 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000007c0)=ANY=[], 0x48) r12 = bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000030000000000000000000400b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r11, @ANYBLOB="0000000000000000b705000008000000850000006900000095"], &(0x7f0000000500)='syzkaller\x00', 0x1, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000040)='kmem_cache_free\x00', r12, 0x0, 0x800000000006}, 0x18) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) pivot_root(&(0x7f00000001c0)='./file0\x00', &(0x7f00000000c0)='./file0\x00') r13 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r13}, 0x10) getpeername$l2tp6(r8, &(0x7f00000006c0)={0xa, 0x0, 0x0, @remote}, &(0x7f0000000700)=0x20) ioctl$TIOCGSID(r8, 0x5429, &(0x7f0000000600)) r14 = openat$sysfs(0xffffff9c, &(0x7f00000003c0)='/sys/power/pm_trace_dev_match', 0x20800, 0x2) read$msr(r14, &(0x7f00000002c0)=""/4096, 0x1000) 113.814359ms ago: executing program 9 (id=15131): bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0xa, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000800"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000030000850000001b000000b700000000000000"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='kfree\x00', r1, 0x0, 0x4}, 0x18) r2 = socket$rds(0x15, 0x5, 0x0) bind$rds(r2, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r2, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, 0x0}, 0x0) 95.81375ms ago: executing program 9 (id=15132): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020207025000000002dba513d7b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000008fd885000000040000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x4, '\x00', 0x0, @fallback=0x1c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r0}, 0x10) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x0, &(0x7f00000001c0), 0x1, 0x4bc, &(0x7f0000000a40)="$eJzs3ctvW1UaAPDPdpMmaWb6mNGo7UjTSh2p81DjPDRqMjObWc3MotJoKrEBqYTEDSVOHMVOaaIuUth1wQKBQEIs2PMXsKErKiTEGvaIBSqCEiRAQjK613abOHGwII1p7u8n3ebch/2dU+s7Ovf4Xt8AMuts8k8uYjgiPoyIo43VrQecbfzZuH9zJllyUa9f/iKXHpestw5tve5IRKxHxEBE/P/fEc/ktsetrq7NT5fLpeXmerG2sFSsrq5duLYwPVeaKy2OTV6cmpocnRif2rO23n7puduX3vlv/9vfvHjv7svvvZtUa7i5b3M79lKj6X1xfNO2QxHxz0cRrAcKzfYM9roi/CTJ5/ebiDiX5v/RKKSfJpAF9Xq9/n39cKfd63XgwMqnY+BcfiQiGuV8fmSkMYb/bQzly5Vq7a9XKyuLs42x8rHoy1+9Vi6NNs8VjkVfLlkfS8sP18fb1ici0jHwK4XBdH1kplKe3d+uDmhzpC3/vy408h/ICKf8kF3yH7JL/kN2yX/ILvkP2SX/IbvkP2SX/Ifskv+QXfIfskv+Qyb979KlZKm37n+fvb66Ml+5fmG2VJ0fWViZGZmpLC+NzFUqc+k9Ows/9n7lSmVp7G+xcqNYK1Vrxerq2pWFyspi7Up6X/+VUt++tAroxvEzdz7ORcT63wfTJdHf3CdX4WCr13PR63uQgd4o9LoDAnrG1B9kl3N8oP0netvHBQOdXrj0cL4QeLzke10BoGfOn/L9H2SV+X/ILvP/kF3G+MAOj+jbYrf5f+DxZP4fsmu4w/O/frXp2V2jEfHriPio0He49awv4CDIf5Zrjv/PH/3jcPve/ty36VcE/RHx/BuXX7sxXastjyXbv3ywvfZ6c/v4phd2PGEAeqWVp608BgCya+P+zZnWsp9xP/9X4yKE7fEPNecmB9LvKIc2cluuVcjt0bUL67ci4uRO8XPN5503TmSGNgrb4p9o/s013iKt76H0uen7E//Upvh/2BT/9M/+X4FsuJP0P6M75V8+zel4kH9b+5/hPbp2onP/l3/Q/xU69H9nuozx7JsvfNox/q2I0zvGb8UbSGO1x0/qdr7L+PeeeuJ3nfbV32q8z07xW5JSsbawVKyurl1If0durrQ4NnlxampydGJ8qpjOURdbM9Xb/ePkB3d3a/9Qh/i7tT/Z9ucu2//d799/8uwu8f90bufP/8Qu8Qcj4i9dxv9q/JOnO+1L4s92aH9+l/jJtoku41df/c/hLg8FAPZBdXVtfrpcLi0rKCj0pHDrl1GNtkKveybgUauuJqfmSdL3uiYAAAAAAAAAAABAt/bjcuJetxEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA4CD4IQAA//9HcdTQ") openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x41, 0x0) r2 = syz_io_uring_setup(0x891, &(0x7f0000000380)={0x0, 0x8c36, 0x80, 0x2, 0xbfdffe00}, &(0x7f0000000000)=0x0, &(0x7f00000000c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) io_uring_enter(r2, 0x47f6, 0x0, 0x0, 0x0, 0x0) r5 = socket$key(0xf, 0x3, 0x2) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000880)=ANY=[@ANYBLOB="0a000000010000000800000008"], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r6, 0xffffffffffffffff}, &(0x7f0000000300), &(0x7f00000002c0)}, 0x20) bpf$TOKEN_CREATE(0x24, &(0x7f00000008c0)={0x0, r1}, 0x8) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000001f00)={0x18, 0xd, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000ae00000018110000", @ANYRES32=r5, @ANYRES8=r7], &(0x7f0000000040)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r8}, 0x10) sendmsg$key(r5, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000100)=ANY=[@ANYBLOB="020300030f0000002cbd7000fbdbdf2503000900800000001cdc0dca1d9f68846960e56de42944af03000600000000000200010000000000000000000000000002000100000000000000070c01000000030005000000000002004e21ac1e010100000000000000000200130003"], 0x78}, 0x1, 0x7}, 0x0) accept4$unix(0xffffffffffffffff, &(0x7f0000000240), 0x0, 0x800) lsetxattr$trusted_overlay_upper(&(0x7f00000001c0)='./file1\x00', &(0x7f0000000180), &(0x7f00000001c0)=ANY=[], 0x361, 0x0) lsetxattr$security_ima(&(0x7f0000000080)='./file1\x00', &(0x7f00000000c0), 0x0, 0x0, 0x1) lsetxattr$system_posix_acl(&(0x7f0000000000)='./file1\x00', &(0x7f00000003c0)='system.posix_acl_access\x00', &(0x7f0000000540)=ANY=[@ANYBLOB="0200000001000000000000000400000000000000100000000000000020"], 0x24, 0x0) 29.778557ms ago: executing program 7 (id=15133): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x19, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002010000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sockopt, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000380)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000100)='mm_lru_insertion\x00', r1}, 0x10) r2 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r2, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/74, 0x328000, 0x1000}, 0x1c) socket$nl_netfilter(0x10, 0x3, 0xc) r3 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000001ec0), 0x800, 0x0) read$msr(r3, &(0x7f00000000c0)=""/199, 0xfffffdf7) r4 = openat$null(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) faccessat2(r4, &(0x7f0000000000)='\x00', 0x2, 0x1000) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_clone(0x640c7000, 0x0, 0x0, 0x0, 0x0, 0x0) r5 = syz_open_procfs(0x0, &(0x7f0000000180)='net/ip_tables_matches\x00') pread64(r5, &(0x7f0000000040)=""/9, 0x9, 0x100) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) syz_mount_image$ext4(&(0x7f00000003c0)='ext4\x00', &(0x7f00000002c0)='./bus\x00', 0x404, &(0x7f00000001c0), 0x1, 0x5d8, &(0x7f0000000c00)="$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") r7 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x4040, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(r3, 0x8933, &(0x7f0000000b40)={'wg2\x00', 0x0}) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r5, 0x89f2, &(0x7f0000000bc0)={'syztnl0\x00', &(0x7f0000000b80)={'tunl0\x00', 0x0, 0x8, 0x7800, 0x5, 0x8, {{0x7, 0x4, 0x2, 0x6, 0x1c, 0x67, 0x0, 0x1, 0x4, 0x0, @remote, @initdev={0xac, 0x1e, 0x1, 0x0}, {[@ssrr={0x89, 0x7, 0x5e, [@local]}]}}}}}) sendmsg$ETHTOOL_MSG_LINKINFO_GET(r4, &(0x7f00000014c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000001480)={&(0x7f0000001200)={0x23c, 0x0, 0x200, 0x70bd25, 0x25dfdc01, {}, [@HEADER={0x50, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'virt_wifi0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_virt_wifi\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg2\x00'}]}, @HEADER={0x64, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6erspan0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vxcan1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x74, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pim6reg1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'geneve0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'geneve1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ipvlan1\x00'}]}, @HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pim6reg0\x00'}]}, @HEADER={0x7c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'nr0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_batadv\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syzkaller1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_hsr\x00'}]}, @HEADER={0x4}, @HEADER={0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}]}, 0x23c}, 0x1, 0x0, 0x0, 0x1}, 0x55) r10 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1202, 0x0) write(r10, &(0x7f0000004200)='t', 0x1) sendfile(r10, r7, 0x0, 0x3ffff) sendfile(r10, r7, 0x0, 0x7ffff000) bind$netlink(r6, &(0x7f0000000000)={0x10, 0x0, 0x0, 0x80065c9}, 0xc) r11 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r11, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a05000000000000000000010000000900010073797a300000000040000000030a01010000000000000000010000000900030073797a310000000014000480080002400000000008000140000000000900010073797a300000000070000000060a010400000000000000000100000048000480240001800b00010072656a65637400001400028008000140000000000500020000000000200001800700010072740000140002800800014000000009080002400000000008000b40000000000900010073797a300000000014000000110001"], 0xf8}, 0x1, 0x0, 0x0, 0x2040441}, 0x0) 0s ago: executing program 9 (id=15134): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000900)=ANY=[@ANYRES8, @ANYRESOCT=0x0], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x20, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x7, 0x10, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) bpf$MAP_CREATE(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="1b000000000000000000"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="18000000000000000000", @ANYRES8=r0, @ANYBLOB="dd00000000000000b719000003000010857800000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_read_part_table(0x5df, &(0x7f0000000000)="$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") prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) write$P9_RVERSION(0xffffffffffffffff, &(0x7f0000000300)=ANY=[], 0x15) dup(0xffffffffffffffff) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000340)='kmem_cache_free\x00', r3, 0x0, 0xf7}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000340)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) signalfd4(0xffffffffffffffff, &(0x7f0000000140)={[0xfffffffffbfffff5]}, 0x8, 0x0) socket$netlink(0x10, 0x3, 0x0) io_setup(0x7, &(0x7f0000000600)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) add_key$keyring(&(0x7f0000000100), &(0x7f0000000340)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', 0xffffffffffffffff, 0x0, 0x1ffffffffffffffc}, 0x18) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, 0x0, &(0x7f0000000000)='asymmetric\x00', &(0x7f0000000180)=@keyring={'key_or_keyring:', 0x0, 0x2}) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r5, 0x0, r6, 0x0, 0x1, 0x4) vmsplice(r6, &(0x7f0000000880)=[{&(0x7f0000000180)="04", 0x1}, {&(0x7f0000000200)}, {0x0}, {&(0x7f00000002c0)='@', 0x1}, {&(0x7f0000003040)="162dd3cad75f87b473622140aca9f6be4377caaba76f08daaad767f134c2ffc2ba9c92a5971b01b71a225dababc99832633ea975d465532309695b29d56eb9befec5159067bffa2d17b24093b372ebaf5589d18a8905982d01ee2870aa096647d6afabca77e0f36a01481b10ed8f0a585ceb41bf50f0515c259bbbbee74db0e045a9fde3614d35c6f2dfa1e71dace811a410bdfb395dd7c54fa733c6f8111f24df309ad928c6462d0a53a3824f9af07b11cb0c05724c33acfad1f5f16bffaf6c58ab2b8c4626bd9d4d1cc4ab67c9838b1fc53fb4ce46d304a12fffc2110043381d08160f056e8d3908497a402dcc156ff69bbf5cb5e5443c06bc4e3c6e4f231aab0eb6fdd2bb0740ae88095360d8b247daa6628fc10edbf048d800625134022e1d5d0bcb5c50e567f50c1990b1a434caa57d210b6084c9424d37c7a71479613b69b67670baab82f13b0923a73786655cfceb0c70d511b94f992391cad9ce57c5c76675cae6a2712cb9ce6dc07bdd0118001f062a22943ca72742a0fe97c48b9b895515fc71145fac9dfd27118a70b71dd564f27e31e1112292864a7be45459524ad8fb03c1f4388bdba3d9e3882a9be894133b0deea92885d0276f268bad0396635036192da1a9788e7525b08de07b0f351147e0f2aaa239e197924a5fc6961dbfcc96ad4cae4cf59f7a812d0c7f8506216dfb7658f8f8545477f4b6c1a606554ee19621d85438014d5e569b0c467e67cf0bb046284f4145ee9f9601b950b0217d183d0266da78f83ed2cf8a83f1374295853d52cdd561a756f247598126cddc98416c42c47a5ad4fda1c419b6ce04f4b57efd2cecf7bfe1589aab05c33e397c8acfb5e4d05cc62db2ba633e74d08c9a3c92111d39ef7d1c0321bfa1827b9fbbb592c49d46244b57c985ee4cc830f7eeda32cae961c4386916f927fc7f442eb6e2eaf45a3d2b0f28d4d319fdedd003aedc1c6384085921397a041384edee7172973fddb3eee2132acdec385cb596055f82a41087097ffece144a340cfe3ec0c0b833f4a92d28709419827eb0f747d73a2e7cc7d00a24749b9dd340793e2ca36536bc47233c9e2602a7f7f94450b22117215be6086d0c0132d24350c19abcb3d713fa97f76ce6ec8f61b24bfecb3ddcd0e7bccd0c4839de19283e95e08bc629554aac9543c15b0f69f1d03374269796c477579d212708b760914bde3269d9e9b0036c7cd0e8f3376d6a62ed0cde76861423ec5f76f2ab4d0f05b21db57277feaaf8475e6e6d1e5672281db17046b7464439d69e25210f67998e912d02c5296c60a450a38495e3b6737339a05f83e5a02aa1ee5bca6bf67ba84c659ef3cc4495cb1551e749277a86db07e7c48f61ee0672919d6a00472a893b6c6eead02140318fb497a1819b692b9bcb3b5cbe7cb55b9524abb1268b3f4a031a64fe6305519a2212298089c443b0503e77b7c8a3da14387872ca35cd6524f629161d85f253498568587513aa16848fa8f8f3dea115cbe8e85bdb8aa20f20ce26f3fcaac4615a9b9d7d6919ba952f7e93a96ba26010cc4bc24622ed3bb9b063e0e686f41b2cece5a50d787676600a04bfe7e6eb78e740b8bcb4b3a51f2a39250d0163a75d8f97032c60efc5516ba48ce2d53da0a7aab99330369a2c44cfc6ac65707733971493de86a519629f7be4643a52abe3d0ca1e22dfa27d8f7c54c50e0e1f3f639dbc622afa56d22b2732232d62b0a312c359dfd25e266f2138a49689fcc789470b01aabc05563ab025938153c15abbb300192e0bc27f810246d4d24295f337db02aa6b3e801905ee519a681fd73462eb330800763f75ae88e3e57c2a5552fba4b6154cab775625b817e18ff1e26273d21bf8b3cb2a79df7e92a8e498dadc04f11c62d6841bdd0408b212a43951a4a4f4f29c9b8918644e743e2f30cc52d422a9ce03750307096a5f8b61bb585ada2ad7a63d440e418c16e6827792dd470fa980a72cbe53b354ab208b0cb99ad858ff2ee4395f7fbff96c38fe2f84ccca78b6c867d1ff0440c5795b875339b87d98e59dca2dd80b3624c7406b56dc76b0198514bdb97b228e5b726683b3c12f71fb2b1dda24d085175acdc5d7744129df8065168ac103d819bc95dd408e17bfa7ae37d0ff5145e393a37b5cc08c2c10e5ef5d80dd6c79d35c650417e6fc47467c3552bbc1a3d50d2cdce471e5cd43b48475272e30c9d415c826bed60369c1841219e15d93bd87de49e2566de3a01dfc60cd3295134c876863cbfb7be8be44b0d4369b81a778f8fb2fcd039048fd16bf9d4f08a9458dbeadb298ee12b7ee7f6f43099dc684e33bee75d23f37c5b058e56f785f1c2af0c2ad66b69fc1fc06073bd53bed4a967314a6af8ede4d2facdae08ed503c4903fd5fdfd291327cd2ead1876361a16d9341cc24a63b2b51538b7199e048c00cab7127d19ae9a3ea0755b9b5d9604fefcfe7237d641019291bcd9ce30d5a388ad7127fde6061f1e307c0024ff1c200dc04354340eb4e8daac073b7c2f1fe1cee49330cc89ac061bd8a5f1676391d22d4afc8e5875daf4806bac0b5565bb99f07723cdd063ff070ba409fba6642888ea88109b333c3748f77b99f3bd4b9b61ec5e3d798d3584937c0165f4df571b8132ae425849e7e5ce414fbb00d9a30c129e2c13b6791435bb552bb01cedf3003b3bb24503fe226121d1f83419d5c23fad54dbd08fb3449b8a561954a23b47e34b7b14ddbcec2745353269e19fe218da2d0aad6df73083b3979160d4e52c8532c9f6602bc8ee624b9d5157fefbffec98e0e91a4f3824ccb4c33e17d19011f4c8db333d0fc5530930951cb63353a3aa0617ab2aba52268b81628d9f4a56b227300488c10df1e7f7533e1e4db449cb9cb6e588debf4795f98810702de5bfb81414bdacfcbd9e66f051ec7272b41ba281e8a68fe7c61e1cb4e74077342ddb7c5191d9731448a9e42a30c4df80e533db26ca3e12ab8ce8b5f0d114888692589b6c836c603ea4210c31b0e053092d75d9ceb49c5e9e2815b5aeebfcb53e97017d0ff6c7d3410120e355f9a6a1226e64a1621a2e6c04865acb25e137243ab9b82beea39c411163afd8969b086df73751020879785ec79c451fb822c11df1ae927318b35bd583a56827fd8744df8e7693837b8ddb0e831fd97b87505d5540d76d3e09895e64cc563dadf60bec88ee70b6008a53e50523ffbd2c0aa9f19123bd6f28de9851ae1f3f6101b46acf9139792be4872bf494c8970aee100a7a0c4dfbccbf01b6ccbebdfa8291f8ab3e25a9e4ff5dbda11488630e3bb8158b8f8de8cd4f793885e7a28e5afdf45eb57ad1330dfc0c51f51986e53c458feb4a4ef55b810a32f847d7ff5500c0f769d9abc090c10f87ba4e5250f36e70abb838ccb8f9fa95d96ba1e2e75a2d808a8fa26b686149ed6738a8e63ef70ed284e25d044aaa1e14c8caea04b77c9fba96036dd8b3be2e7704c65090fa7e8bf0e45c291709d3eb16a81e8aac27a120e52c05866310d8f288367f2b5187e83a1f7d5cb9dc6f8faa648683b7c88d54871dfcdca822568959ac2f7eb7dd3a345b0a8149806105dc90abfee3d5cefae3dfece4723fdc5a73c3a087020ca2fe1b166fe5b54cfb2f661fa5b017502155bf91856c3aae5cd20a48fbb958e1a0e70df51e4e46bbea56f639f6f32698d45297296244e8aaa845c13b70fa7f4f31115de0808975c143191c89c0233c557ddb93d6233ce22a699ca9a54ca6e8ddcfb5bf9d95b9807a49d9a64f7a239c77fa4e0d92d561fca5aa3e6c149c16c11131c9ad78493572cf1a9f953cc63ef8121cfa86a0f3fdb5a73c8530ddf93a9308fcaf436455aa6817f65e4616c9e38733b1cf9fa09822953d7d203748c5e45cbbe84a4fb7d59318013ba2a7da6f972c47ff9289091d7476035affddf44cc7a0b223cd14af5243dd14cd5d0f42849bd31af8ef9de434a01c52ee583c2d93b4785c34969629ffa406335ccd090637b83a5ee126a4833e6d6cf92b8aa6f9a2213df25fa575980c0cbd98039ca978860442b7466c3d4aa215593243d9c7ad3980470c9ef85154566ceed93ccb0330634f92d1fe5050bfe135f345527c93476e474f31ea45729ec534475d36b69876644e5db59c8cb0412f8d65be9ff2bea5ac37c5b1ff5d5d484aebed8b33920bbc8ed59ba9b3bf24ab6da8ebeda14dad9148183411980136cc2fde47049c98063b0ff1816a0852af035cbe8313d88620559e8331d983a43e0f4b515a61f5761bcd2130853ea24377d042643684699ceb9441a73f1285f6a15c8e00d17b4e051df2bd16b1a5699f6dce4556b0b6c88b8b86464beb6415777a8ec890c9335cc14452d6b23e2483d5b77b56042a694435bf913cb6e48ce6ca60c3009b274869bb350a8026d80680b32c9394e9b5dfee8df555a705bb1ff17ac848ccec95bb37206a72ab1d56160682d83e38c8acca34b08fa3b8665b35d01967c0a49681ef74b89b39f785977187a9d6f70affe2a32f41fe942fbd30fd9da981cf8f75485015962cb598d3d09a039787bf8d339695d0f5cd7cb60d25cdba119fa435e3692e06bdd76db5856eb2ed2cd85a081209b0a1453d52e1f8cf5120c7f044bddc38cded7ed59a793bfb2b289137137147f704a0628bb8e3e342b6084fbcc105b5345023fed9b2d339b95b0d0c97945943a70e007fe2172c501fae54ad04c279ae6da7150ea25469ce7e9c33b51713b05dcd4753930a0a37326d276fd28c8c0f6e06660beb102e2868fee31f70d37d38769e824846b081d120d8fcd394627fd672fe823cfdcf7af07b20b40e8e5efce8e93e8414744efd2723798aad9dabd8e23efc08983db6c65cf3c43d5b759ca52d118fad7a1bb23e5b3578f616fc42e304c797e640d8b985987274766adbf424e4e9a78c29dc436636e0df6e9255ebdd2c7c0cd261d42631cc49df231d0bd080da2928bcab9a0546b404b658f75fca9d8e506f3f6639bca2a13eae6bded0081fd2239bd8c0ab2382d23eecfb8985da82fe5ed32a96ac1e198d7f8cf5752cfb296af0a2d59ed19022cb084b525d44d8c773a14743a706baf209aebb270104b16181fdc2462d356341d89ba8024171c462640abfc3bd6f602c3bbd710f6ae6a2cef146f27002f78051d6687b83dac0cc627e0af1ed8765396d9783c6429b4063a8d58728c60ec88416c5dbdf362b891d278db21c9a4558c724b06547fc5f641801dd0da8403e57cff37d407fab07bb389c40555af869af263265333bf8aa4290d7cdb9a78573362d608a549165f13323c0107aa4dfac934fef838cf6e5f06b9324a5d8474183f077de97287eaf3c85cb74165b189d7547d3fccc4c763d02ce57d59c70f39e8065cdeb5fd13c4c14609f98941b73b16fed60bc55a2d8ef92104568b595f4a31f6428d527b34c470715d1300cd41ea992763f46a739ba387f359ee1d97c51e889e5599cebd800dbeef1496e3dbacaafc403d0dc7cd3c7d193788536aa5b0f5f25482744107d74795f27a8a8832596166fdcaa548b90c48890715526a52518f16d697d65beb6321befa003dc56432e3dd4b01cede5447813eb429dce845bf9702e5063fe571d8cb6cfecf12870e373b42c4f86f75b7b249f1bdb397113dfd7a23f1930f8533e300e8d0dc1674acb3c", 0xfa1}, {&(0x7f0000000480)="37c2", 0x2}], 0x6, 0x0) ioctl$sock_inet_udp_SIOCINQ(r6, 0x541b, 0x0) write(r4, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000380)='find_free_extent\x00'}, 0x18) fsopen(&(0x7f0000000100)='configfs\x00', 0x0) kernel console output (not intermixed with test programs): 00000 r/w without journal. Quota mode: none. [ 1009.406256][T10069] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1009.526669][T15233] loop5: detected capacity change from 0 to 1024 [ 1009.545661][T15233] EXT4-fs: Ignoring removed nomblk_io_submit option [ 1009.558441][T15233] EXT4-fs: Invalid want_extra_isize 18478 [ 1009.607892][ T4822] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1009.639423][ T4822] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1009.686092][ T4822] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1009.828230][ T4822] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1009.916998][ T29] kauditd_printk_skb: 130 callbacks suppressed [ 1009.917016][ T29] audit: type=1326 audit(1760605950.560:128102): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15229 comm="syz.5.14427" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f23de1aeec9 code=0x7ffc0000 [ 1009.967899][ T29] audit: type=1326 audit(1760605950.560:128103): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15229 comm="syz.5.14427" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f23de1aeec9 code=0x7ffc0000 [ 1010.020397][T15265] loop3: detected capacity change from 0 to 512 [ 1010.032378][T15265] EXT4-fs (loop3): 1 orphan inode deleted [ 1010.038830][T15265] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1010.094347][ T9054] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1010.104693][T15270] loop9: detected capacity change from 0 to 512 [ 1010.131895][T15270] EXT4-fs (loop9): 1 orphan inode deleted [ 1010.138386][T15270] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1010.140579][T15274] netlink: 68 bytes leftover after parsing attributes in process `syz.3.14444'. [ 1010.201365][ T8108] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1010.298636][T15281] loop9: detected capacity change from 0 to 512 [ 1010.321983][T15281] EXT4-fs (loop9): 1 orphan inode deleted [ 1010.332244][T15281] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1010.366861][ T8108] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1010.564456][T15295] loop7: detected capacity change from 0 to 2048 [ 1010.602200][T15295] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1010.644727][ T29] audit: type=1326 audit(1760605951.290:128104): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15299 comm="syz.2.14454" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f09a7f1eec9 code=0x7ffc0000 [ 1010.668538][ T29] audit: type=1326 audit(1760605951.290:128105): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15299 comm="syz.2.14454" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f09a7f1eec9 code=0x7ffc0000 [ 1010.692358][ T29] audit: type=1326 audit(1760605951.290:128106): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15299 comm="syz.2.14454" exe="/root/syz-executor" sig=0 arch=c000003e syscall=203 compat=0 ip=0x7f09a7f1eec9 code=0x7ffc0000 [ 1010.716194][ T29] audit: type=1326 audit(1760605951.290:128107): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15299 comm="syz.2.14454" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f09a7f1eec9 code=0x7ffc0000 [ 1010.739993][ T29] audit: type=1326 audit(1760605951.290:128108): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15299 comm="syz.2.14454" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f09a7f1eec9 code=0x7ffc0000 [ 1010.819090][ T29] audit: type=1326 audit(1760605951.410:128109): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15299 comm="syz.2.14454" exe="/root/syz-executor" sig=0 arch=c000003e syscall=85 compat=0 ip=0x7f09a7f1eec9 code=0x7ffc0000 [ 1010.843252][ T29] audit: type=1326 audit(1760605951.410:128110): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15299 comm="syz.2.14454" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f09a7f1eec9 code=0x7ffc0000 [ 1010.867034][ T29] audit: type=1326 audit(1760605951.410:128111): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15299 comm="syz.2.14454" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f09a7f1eec9 code=0x7ffc0000 [ 1010.981984][T10069] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1010.989248][T15303] loop9: detected capacity change from 0 to 2048 [ 1011.052906][T15303] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1011.116250][T15311] netlink: 68 bytes leftover after parsing attributes in process `syz.7.14457'. [ 1011.183129][T15301] loop2: detected capacity change from 0 to 1024 [ 1011.252618][T15301] EXT4-fs: Ignoring removed nomblk_io_submit option [ 1011.316344][T15301] EXT4-fs: Invalid want_extra_isize 18478 [ 1011.358685][T15319] loop7: detected capacity change from 0 to 2048 [ 1011.397863][T15319] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1011.619305][T10069] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1011.672048][T15336] loop5: detected capacity change from 0 to 2048 [ 1011.683141][T15336] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1011.787657][ T8108] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1011.805801][ T7605] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1011.836158][T15354] loop5: detected capacity change from 0 to 512 [ 1011.855635][T15354] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1011.878639][T15359] loop3: detected capacity change from 0 to 512 [ 1011.880613][T15354] ext4 filesystem being mounted at /568/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1011.918958][T15359] EXT4-fs (loop3): 1 orphan inode deleted [ 1011.929237][T15359] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1011.943651][T15360] loop7: detected capacity change from 0 to 2048 [ 1011.972503][T15360] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1011.990176][ T9054] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1012.022178][T15363] loop9: detected capacity change from 0 to 2048 [ 1012.039303][ T7605] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1012.056239][T15363] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1012.101454][T15369] loop3: detected capacity change from 0 to 512 [ 1012.121604][T15373] loop5: detected capacity change from 0 to 2048 [ 1012.133613][T15369] EXT4-fs (loop3): 1 orphan inode deleted [ 1012.134491][T15373] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1012.139756][T15369] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1012.168886][ T8108] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1012.181334][T10069] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1012.201158][ T9054] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1012.258529][T15386] netlink: 'syz.9.14485': attribute type 39 has an invalid length. [ 1012.285132][ T7605] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1012.304767][T15386] bond0: (slave syz_tun): Releasing backup interface [ 1012.315419][ T4822] Bluetooth: hci0: Frame reassembly failed (-84) [ 1012.368191][T15397] loop5: detected capacity change from 0 to 512 [ 1012.385945][T15399] loop7: detected capacity change from 0 to 2048 [ 1012.398232][T15397] EXT4-fs (loop5): 1 orphan inode deleted [ 1012.407223][T15397] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1012.422965][T15399] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1012.436566][ T7605] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1012.528209][ T4822] Bluetooth: hci1: Frame reassembly failed (-84) [ 1012.538792][T15411] loop9: detected capacity change from 0 to 512 [ 1012.548632][T10069] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1012.561467][T15411] EXT4-fs (loop9): 1 orphan inode deleted [ 1012.567735][T15411] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1012.594031][ T8108] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1012.675312][ T4812] Bluetooth: hci2: Frame reassembly failed (-84) [ 1013.500578][T15436] netdevsim netdevsim9 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1013.550551][T15436] netdevsim netdevsim9 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1013.567434][T15441] tipc: Enabled bearer , priority 0 [ 1013.576077][T15441] tipc: Disabling bearer [ 1013.622301][T15436] netdevsim netdevsim9 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1013.691482][T15448] netlink: 108 bytes leftover after parsing attributes in process `syz.7.14507'. [ 1013.701264][T15448] netlink: 108 bytes leftover after parsing attributes in process `syz.7.14507'. [ 1013.712472][T15436] netdevsim netdevsim9 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1013.723307][T15448] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1013.778430][ T4842] netdevsim netdevsim9 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1013.789923][ T4842] netdevsim netdevsim9 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1013.802347][ T4842] netdevsim netdevsim9 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1013.814360][ T4842] netdevsim netdevsim9 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1013.845071][T15450] loop7: detected capacity change from 0 to 512 [ 1013.851935][T15450] EXT4-fs: Ignoring removed orlov option [ 1013.858109][T15450] EXT4-fs (loop7): mounting ext3 file system using the ext4 subsystem [ 1013.868263][T15450] EXT4-fs error (device loop7): ext4_iget_extra_inode:5075: inode #15: comm syz.7.14508: corrupted in-inode xattr: e_value size too large [ 1013.883577][T15450] EXT4-fs error (device loop7): ext4_orphan_get:1397: comm syz.7.14508: couldn't read orphan inode 15 (err -117) [ 1013.896407][T15450] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1013.922550][T10069] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1014.099166][T15471] loop9: detected capacity change from 0 to 512 [ 1014.112454][T15471] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1014.125263][T15469] loop7: detected capacity change from 0 to 512 [ 1014.125345][T15471] ext4 filesystem being mounted at /513/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1014.153936][T15469] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1014.196685][ T8108] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1014.221871][T15477] loop9: detected capacity change from 0 to 512 [ 1014.232506][T15477] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1014.245346][T15477] ext4 filesystem being mounted at /514/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1014.315908][ T8108] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1014.344166][T15481] loop9: detected capacity change from 0 to 512 [ 1014.354536][T15481] EXT4-fs (loop9): 1 orphan inode deleted [ 1014.360789][T15481] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1014.386308][ T8108] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1014.390385][ T3541] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 1014.395453][ T3672] Bluetooth: hci0: command 0x1003 tx timeout [ 1014.435756][T15486] loop9: detected capacity change from 0 to 512 [ 1014.452914][T15486] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1014.466003][T15486] ext4 filesystem being mounted at /517/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1014.528818][ T8108] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1014.550415][ T6229] Bluetooth: hci1: Opcode 0x1003 failed: -110 [ 1014.673511][T15503] loop9: detected capacity change from 0 to 512 [ 1014.692386][T15503] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1014.705194][T15503] ext4 filesystem being mounted at /523/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1014.720597][ T6229] Bluetooth: hci2: command 0x1003 tx timeout [ 1014.720597][T24731] Bluetooth: hci2: Opcode 0x1003 failed: -110 [ 1014.743848][ T8108] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1014.849307][T10069] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1014.926781][ T29] kauditd_printk_skb: 66 callbacks suppressed [ 1014.926799][ T29] audit: type=1326 audit(1760605955.570:128178): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15508 comm="syz.7.14526" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f21b6d1eec9 code=0x7ffc0000 [ 1014.959174][ T29] audit: type=1326 audit(1760605955.570:128179): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15508 comm="syz.7.14526" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f21b6d1eec9 code=0x7ffc0000 [ 1014.983128][ T29] audit: type=1326 audit(1760605955.570:128180): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15508 comm="syz.7.14526" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f21b6d1eec9 code=0x7ffc0000 [ 1015.006944][ T29] audit: type=1326 audit(1760605955.570:128181): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15508 comm="syz.7.14526" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f21b6d1eec9 code=0x7ffc0000 [ 1015.030808][ T29] audit: type=1326 audit(1760605955.570:128182): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15508 comm="syz.7.14526" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f21b6d1eec9 code=0x7ffc0000 [ 1015.054809][ T29] audit: type=1326 audit(1760605955.570:128183): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15508 comm="syz.7.14526" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f21b6d1eec9 code=0x7ffc0000 [ 1015.078663][ T29] audit: type=1326 audit(1760605955.570:128184): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15508 comm="syz.7.14526" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f21b6d1eec9 code=0x7ffc0000 [ 1015.102621][ T29] audit: type=1326 audit(1760605955.570:128185): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15508 comm="syz.7.14526" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f21b6d1eec9 code=0x7ffc0000 [ 1015.126392][ T29] audit: type=1326 audit(1760605955.570:128186): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15508 comm="syz.7.14526" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f21b6d1eec9 code=0x7ffc0000 [ 1015.150184][ T29] audit: type=1326 audit(1760605955.570:128187): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15508 comm="syz.7.14526" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f21b6d1eec9 code=0x7ffc0000 [ 1015.176901][T15516] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1015.192417][T15518] tipc: Enabled bearer , priority 0 [ 1015.200690][T15517] tipc: Disabling bearer [ 1015.255643][T15516] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1015.275408][T15520] loop9: detected capacity change from 0 to 512 [ 1015.286410][T15520] EXT4-fs (loop9): 1 orphan inode deleted [ 1015.292920][T15520] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1015.316672][ T8108] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1015.327515][T15516] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1015.378825][T15516] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1015.391419][T15527] netlink: 68 bytes leftover after parsing attributes in process `syz.9.14533'. [ 1015.460606][ T4842] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1015.476809][ T4842] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1015.485432][ T4842] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1015.505378][ T4802] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1015.638606][T15544] loop2: detected capacity change from 0 to 2048 [ 1015.651757][T15544] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1015.675220][T15542] loop9: detected capacity change from 0 to 512 [ 1015.692054][T15542] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1015.752392][T15552] loop7: detected capacity change from 0 to 512 [ 1015.764109][ T9583] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1015.775958][T15552] EXT4-fs (loop7): 1 orphan inode deleted [ 1015.783776][T15552] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1015.808293][T15557] FAULT_INJECTION: forcing a failure. [ 1015.808293][T15557] name failslab, interval 1, probability 0, space 0, times 0 [ 1015.821097][T15557] CPU: 0 UID: 0 PID: 15557 Comm: syz.5.14545 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 1015.821276][T15557] Tainted: [W]=WARN [ 1015.821283][T15557] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 1015.821298][T15557] Call Trace: [ 1015.821307][T15557] [ 1015.821318][T15557] __dump_stack+0x1d/0x30 [ 1015.821345][T15557] dump_stack_lvl+0xe8/0x140 [ 1015.821372][T15557] dump_stack+0x15/0x1b [ 1015.821467][T15557] should_fail_ex+0x265/0x280 [ 1015.821544][T15557] should_failslab+0x8c/0xb0 [ 1015.821654][T15557] __kvmalloc_node_noprof+0x12e/0x670 [ 1015.821696][T15557] ? file_tty_write+0x1a3/0x690 [ 1015.821725][T15557] file_tty_write+0x1a3/0x690 [ 1015.821748][T15557] tty_write+0x25/0x30 [ 1015.821833][T15557] iter_file_splice_write+0x666/0xa60 [ 1015.821877][T15557] ? __pfx_iter_file_splice_write+0x10/0x10 [ 1015.821907][T15557] direct_splice_actor+0x156/0x2a0 [ 1015.821985][T15557] ? splice_shrink_spd+0x1/0x70 [ 1015.822008][T15557] splice_direct_to_actor+0x312/0x680 [ 1015.822100][T15557] ? __pfx_direct_splice_actor+0x10/0x10 [ 1015.822136][T15557] do_splice_direct+0xda/0x150 [ 1015.822163][T15557] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 1015.822198][T15557] do_sendfile+0x380/0x650 [ 1015.822285][T15557] __x64_sys_sendfile64+0x105/0x150 [ 1015.822338][T15557] x64_sys_call+0x2bb4/0x3000 [ 1015.822362][T15557] do_syscall_64+0xd2/0x200 [ 1015.822464][T15557] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 1015.822537][T15557] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 1015.822581][T15557] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1015.822605][T15557] RIP: 0033:0x7f23de1aeec9 [ 1015.822621][T15557] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1015.822711][T15557] RSP: 002b:00007f23dcc17038 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 1015.822735][T15557] RAX: ffffffffffffffda RBX: 00007f23de405fa0 RCX: 00007f23de1aeec9 [ 1015.822799][T15557] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000000000000003 [ 1015.822813][T15557] RBP: 00007f23dcc17090 R08: 0000000000000000 R09: 0000000000000000 [ 1015.822830][T15557] R10: 0000020000023892 R11: 0000000000000246 R12: 0000000000000001 [ 1015.822863][T15557] R13: 00007f23de406038 R14: 00007f23de405fa0 R15: 00007ffcaab10228 [ 1015.822890][T15557] [ 1015.824715][T10069] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1016.068361][T15564] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1016.099230][ T4802] Bluetooth: hci0: Frame reassembly failed (-84) [ 1016.121973][T15576] tipc: Enabled bearer , priority 0 [ 1016.129882][T15576] tipc: Disabling bearer [ 1016.137810][T15564] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1016.182093][T15564] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1016.222252][T15564] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1016.287707][ T4802] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1016.298899][ T4802] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1016.311024][ T4802] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1016.322848][ T4802] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1016.391060][ T8108] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1016.509244][T15592] loop9: detected capacity change from 0 to 512 [ 1016.519180][T15592] EXT4-fs (loop9): 1 orphan inode deleted [ 1016.525670][T15592] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1016.549098][ T8108] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1017.753090][T15608] loop9: detected capacity change from 0 to 512 [ 1018.148813][T15618] loop2: detected capacity change from 0 to 2048 [ 1018.155389][ T6229] Bluetooth: hci0: command 0x1003 tx timeout [ 1018.155445][T24731] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 1018.363608][T15622] loop2: detected capacity change from 0 to 2048 [ 1018.527711][T15630] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1018.559485][ T4800] Bluetooth: hci0: Frame reassembly failed (-84) [ 1018.961727][T15638] loop5: detected capacity change from 0 to 2048 [ 1019.208073][ T4812] Bluetooth: hci1: Frame reassembly failed (-84) [ 1019.224803][T15653] netdevsim netdevsim5 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1019.262382][T15653] netdevsim netdevsim5 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1019.280950][T15656] bridge0: port 3(gretap0) entered blocking state [ 1019.287474][T15656] bridge0: port 3(gretap0) entered disabled state [ 1019.294218][T15656] gretap0: entered allmulticast mode [ 1019.300115][T15656] gretap0: entered promiscuous mode [ 1019.305819][T15656] bridge0: port 3(gretap0) entered blocking state [ 1019.312349][T15656] bridge0: port 3(gretap0) entered forwarding state [ 1019.322801][T15656] gretap0: left allmulticast mode [ 1019.327867][T15656] gretap0: left promiscuous mode [ 1019.333256][T15656] bridge0: port 3(gretap0) entered disabled state [ 1019.343389][T15653] netdevsim netdevsim5 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1019.382482][T15653] netdevsim netdevsim5 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1019.419732][T15658] loop2: detected capacity change from 0 to 512 [ 1019.439565][ T4822] netdevsim netdevsim5 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1019.451000][ T4822] netdevsim netdevsim5 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1019.462234][ T4822] netdevsim netdevsim5 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1019.474290][ T4822] netdevsim netdevsim5 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1019.535887][T15664] can0: slcan on ttyS3. [ 1019.570513][T15664] can0 (unregistered): slcan off ttyS3. [ 1019.579627][T15664] can0: slcan on ttyS3. [ 1019.586303][T15664] unsupported nla_type 52263 [ 1019.650556][T15663] can0 (unregistered): slcan off ttyS3. [ 1019.747927][T15672] loop3: detected capacity change from 0 to 512 [ 1019.757667][T15672] EXT4-fs (loop3): 1 orphan inode deleted [ 1019.786764][T15675] netlink: 7 bytes leftover after parsing attributes in process `syz.3.14586'. [ 1019.796072][T15675] netlink: 8 bytes leftover after parsing attributes in process `syz.3.14586'. [ 1020.151442][T15681] loop2: detected capacity change from 0 to 2048 [ 1020.205298][ T29] kauditd_printk_skb: 45 callbacks suppressed [ 1020.205366][ T29] audit: type=1326 audit(1760605960.850:128233): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15686 comm="syz.2.14589" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f09a7f1eec9 code=0x7ffc0000 [ 1020.235727][ T29] audit: type=1326 audit(1760605960.850:128234): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15686 comm="syz.2.14589" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f09a7f1eec9 code=0x7ffc0000 [ 1020.259626][ T29] audit: type=1326 audit(1760605960.860:128235): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15686 comm="syz.2.14589" exe="/root/syz-executor" sig=0 arch=c000003e syscall=276 compat=0 ip=0x7f09a7f1eec9 code=0x7ffc0000 [ 1020.269362][T15691] loop2: detected capacity change from 0 to 2048 [ 1020.283774][ T29] audit: type=1326 audit(1760605960.860:128236): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15686 comm="syz.2.14589" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f09a7f1eec9 code=0x7ffc0000 [ 1020.313849][ T29] audit: type=1326 audit(1760605960.860:128237): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15686 comm="syz.2.14589" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f09a7f1eec9 code=0x7ffc0000 [ 1020.378647][T15695] loop2: detected capacity change from 0 to 2048 [ 1020.630299][ T3541] Bluetooth: hci0: command 0x1003 tx timeout [ 1020.630335][T24731] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 1020.762770][T15711] loop3: detected capacity change from 0 to 512 [ 1020.772287][T15711] ext4 filesystem being mounted at /475/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1020.849587][T15715] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1020.892029][T15715] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1020.907706][T15716] tipc: Enabled bearer , priority 0 [ 1020.915931][T15716] tipc: Disabling bearer [ 1020.942350][T15715] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1020.981885][T15715] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1021.038087][ T4822] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1021.049758][ T4822] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1021.060697][ T4812] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1021.072816][ T4812] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1021.121050][T15718] loop3: detected capacity change from 0 to 2048 [ 1021.184211][T15724] loop3: detected capacity change from 0 to 2048 [ 1021.270364][ T6229] Bluetooth: hci1: Opcode 0x1003 failed: -110 [ 1021.276527][T24731] Bluetooth: hci1: command 0x1003 tx timeout [ 1021.431348][T15734] netlink: 8 bytes leftover after parsing attributes in process `syz.3.14605'. [ 1021.443760][T15734] netlink: 8 bytes leftover after parsing attributes in process `syz.3.14605'. [ 1021.453309][T15734] netlink: 8 bytes leftover after parsing attributes in process `syz.3.14605'. [ 1021.462561][T15734] netlink: 8 bytes leftover after parsing attributes in process `syz.3.14605'. [ 1021.500974][T15738] netlink: 108 bytes leftover after parsing attributes in process `syz.3.14607'. [ 1021.510177][T15738] netlink: 108 bytes leftover after parsing attributes in process `syz.3.14607'. [ 1021.522357][T15738] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1021.548381][T15742] loop2: detected capacity change from 0 to 1024 [ 1021.555304][T15742] EXT4-fs: Ignoring removed orlov option [ 1021.584245][ T29] audit: type=1400 audit(1760605962.230:128238): avc: denied { ioctl } for pid=15741 comm="syz.2.14609" path="/463/file1/cpu.stat" dev="loop2" ino=18 ioctlcmd=0x583b scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 1021.587207][T15742] EXT4-fs error (device loop2): mb_free_blocks:2017: group 0, inode 20: block 145:freeing already freed block (bit 9); block bitmap corrupt. [ 1021.670380][ T29] audit: type=1400 audit(1760605962.310:128239): avc: denied { setopt } for pid=15749 comm="syz.2.14612" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 1021.819272][ T29] audit: type=1326 audit(1760605962.460:128240): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15754 comm="syz.9.14613" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcc97a4eec9 code=0x7ffc0000 [ 1021.849582][ T29] audit: type=1326 audit(1760605962.490:128241): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15754 comm="syz.9.14613" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fcc97a4eec9 code=0x7ffc0000 [ 1021.873349][ T29] audit: type=1326 audit(1760605962.490:128242): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15754 comm="syz.9.14613" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcc97a4eec9 code=0x7ffc0000 [ 1021.901634][T15766] loop3: detected capacity change from 0 to 512 [ 1021.982152][T15771] loop2: detected capacity change from 0 to 512 [ 1022.556604][T15775] netdevsim netdevsim9 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1022.615219][T15775] netdevsim netdevsim9 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1022.627698][T15777] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1022.639699][T15778] tipc: Enabled bearer , priority 0 [ 1022.647926][T15778] tipc: Disabling bearer [ 1022.662241][T15775] netdevsim netdevsim9 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1022.680348][T15779] tipc: Enabled bearer , priority 0 [ 1022.694169][T15779] tipc: Disabling bearer [ 1022.703498][T15777] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1022.719672][T15783] loop2: detected capacity change from 0 to 512 [ 1022.732929][T15775] netdevsim netdevsim9 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1022.745095][T15783] ext4 filesystem being mounted at /468/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1022.774399][T15777] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1022.786319][T15791] FAULT_INJECTION: forcing a failure. [ 1022.786319][T15791] name failslab, interval 1, probability 0, space 0, times 0 [ 1022.799060][T15791] CPU: 0 UID: 0 PID: 15791 Comm: syz.7.14626 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 1022.799118][T15791] Tainted: [W]=WARN [ 1022.799126][T15791] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 1022.799139][T15791] Call Trace: [ 1022.799146][T15791] [ 1022.799155][T15791] __dump_stack+0x1d/0x30 [ 1022.799177][T15791] dump_stack_lvl+0xe8/0x140 [ 1022.799197][T15791] dump_stack+0x15/0x1b [ 1022.799238][T15791] should_fail_ex+0x265/0x280 [ 1022.799279][T15791] ? __pfx_loop_control_ioctl+0x10/0x10 [ 1022.799316][T15791] ? loop_add+0x64/0x590 [ 1022.799348][T15791] should_failslab+0x8c/0xb0 [ 1022.799451][T15791] __kmalloc_cache_noprof+0x4c/0x4a0 [ 1022.799490][T15791] ? __pfx_loop_control_ioctl+0x10/0x10 [ 1022.799570][T15791] loop_add+0x64/0x590 [ 1022.799606][T15791] ? __pfx_loop_control_ioctl+0x10/0x10 [ 1022.799652][T15791] loop_control_ioctl+0xd0/0x3f0 [ 1022.799688][T15791] ? __pfx_loop_control_ioctl+0x10/0x10 [ 1022.799743][T15791] __se_sys_ioctl+0xce/0x140 [ 1022.799770][T15791] __x64_sys_ioctl+0x43/0x50 [ 1022.799794][T15791] x64_sys_call+0x1816/0x3000 [ 1022.799821][T15791] do_syscall_64+0xd2/0x200 [ 1022.799911][T15791] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 1022.799937][T15791] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 1022.799967][T15791] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1022.799988][T15791] RIP: 0033:0x7f21b6d1eec9 [ 1022.800002][T15791] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1022.800019][T15791] RSP: 002b:00007f21b5787038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1022.800037][T15791] RAX: ffffffffffffffda RBX: 00007f21b6f75fa0 RCX: 00007f21b6d1eec9 [ 1022.800049][T15791] RDX: 0000000007000000 RSI: 0000000000004c80 RDI: 0000000000000006 [ 1022.800124][T15791] RBP: 00007f21b5787090 R08: 0000000000000000 R09: 0000000000000000 [ 1022.800135][T15791] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1022.800147][T15791] R13: 00007f21b6f76038 R14: 00007f21b6f75fa0 R15: 00007ffdedbc3b38 [ 1022.800203][T15791] [ 1023.061909][ T4842] netdevsim netdevsim9 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1023.082675][ T4842] netdevsim netdevsim9 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1023.093924][T15777] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1023.109808][ T4842] netdevsim netdevsim9 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1023.126023][ T4842] netdevsim netdevsim9 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1023.171548][T15812] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'filter' [ 1023.207741][T15814] netdevsim netdevsim9 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1023.257789][T15815] loop9: detected capacity change from 0 to 128 [ 1023.282529][T15814] netdevsim netdevsim9 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1023.345477][T15814] netdevsim netdevsim9 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1023.394881][T15814] netdevsim netdevsim9 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1024.024537][T15828] loop5: detected capacity change from 0 to 512 [ 1024.035589][T24731] Bluetooth: hci0: sending frame failed (-49) [ 1024.041831][ T6229] Bluetooth: hci0: Opcode 0x1003 failed: -49 [ 1024.062217][T15828] ext4 filesystem being mounted at /599/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1024.124336][ T7605] syz_tun (unregistering): left promiscuous mode [ 1024.257213][T15835] chnl_net:caif_netlink_parms(): no params data found [ 1024.295712][T15835] bridge0: port 1(bridge_slave_0) entered blocking state [ 1024.302877][T15835] bridge0: port 1(bridge_slave_0) entered disabled state [ 1024.310174][T15835] bridge_slave_0: entered allmulticast mode [ 1024.316760][T15835] bridge_slave_0: entered promiscuous mode [ 1024.323786][T15835] bridge0: port 2(bridge_slave_1) entered blocking state [ 1024.330905][T15835] bridge0: port 2(bridge_slave_1) entered disabled state [ 1024.338296][T15835] bridge_slave_1: entered allmulticast mode [ 1024.345310][T15835] bridge_slave_1: entered promiscuous mode [ 1024.363757][T15835] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1024.374297][T15835] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1024.394170][T15835] team0: Port device team_slave_0 added [ 1024.401402][T15835] team0: Port device team_slave_1 added [ 1024.418383][T15835] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1024.425480][T15835] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1024.451713][T15835] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1024.463099][T15835] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1024.470045][T15835] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1024.496042][T15835] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1024.524736][T15835] hsr_slave_0: entered promiscuous mode [ 1024.530930][T15835] hsr_slave_1: entered promiscuous mode [ 1024.536986][T15835] debugfs: 'hsr0' already exists in 'hsr' [ 1024.542844][T15835] Cannot create hsr debugfs directory [ 1024.604578][T15835] netdevsim netdevsim5 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1024.652042][T15835] netdevsim netdevsim5 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1024.708732][T15855] netdevsim netdevsim7 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1024.721827][T15835] netdevsim netdevsim5 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1024.752125][T15855] netdevsim netdevsim7 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1024.766693][T15856] tipc: Enabled bearer , priority 0 [ 1024.774613][T15856] tipc: Disabling bearer [ 1024.782535][T15835] netdevsim netdevsim5 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1024.801778][T15855] netdevsim netdevsim7 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1024.846937][T15835] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 1024.856039][T15835] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 1024.865030][T15835] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 1024.875519][T15855] netdevsim netdevsim7 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1024.886393][T15835] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 1024.902049][T15835] bridge0: port 2(bridge_slave_1) entered blocking state [ 1024.909133][T15835] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1024.916454][T15835] bridge0: port 1(bridge_slave_0) entered blocking state [ 1024.923563][T15835] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1024.952760][T15835] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1024.966584][ T4812] netdevsim netdevsim7 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1024.977987][ T4812] netdevsim netdevsim7 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1024.989833][ T4800] bridge0: port 1(bridge_slave_0) entered disabled state [ 1024.998002][ T4800] bridge0: port 2(bridge_slave_1) entered disabled state [ 1025.011099][T15835] 8021q: adding VLAN 0 to HW filter on device team0 [ 1025.021433][ T4816] netdevsim netdevsim7 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1025.038331][ T4816] bridge0: port 1(bridge_slave_0) entered blocking state [ 1025.045501][ T4816] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1025.066206][ T4799] netdevsim netdevsim7 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1025.076178][ T4816] bridge0: port 2(bridge_slave_1) entered blocking state [ 1025.083316][ T4816] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1025.096383][ T4799] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1025.104850][ T4799] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1025.120119][ T4799] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1025.134913][ T4799] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1025.150046][T15835] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1025.217569][T15835] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1025.317541][ T29] kauditd_printk_skb: 84 callbacks suppressed [ 1025.317561][ T29] audit: type=1326 audit(1760605965.960:128327): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15877 comm="syz.3.14647" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc47b0beec9 code=0x7ffc0000 [ 1025.348291][ T29] audit: type=1326 audit(1760605965.960:128328): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15877 comm="syz.3.14647" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fc47b0beec9 code=0x7ffc0000 [ 1025.354738][T15835] veth0_vlan: entered promiscuous mode [ 1025.372059][ T29] audit: type=1326 audit(1760605965.960:128329): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15877 comm="syz.3.14647" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc47b0beec9 code=0x7ffc0000 [ 1025.381227][T15835] veth1_vlan: entered promiscuous mode [ 1025.401252][ T29] audit: type=1326 audit(1760605965.960:128330): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15877 comm="syz.3.14647" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc47b0beec9 code=0x7ffc0000 [ 1025.428948][T15835] veth0_macvtap: entered promiscuous mode [ 1025.430815][ T29] audit: type=1326 audit(1760605965.960:128331): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15877 comm="syz.3.14647" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7fc47b0beec9 code=0x7ffc0000 [ 1025.440386][T15835] veth1_macvtap: entered promiscuous mode [ 1025.460417][ T29] audit: type=1326 audit(1760605965.960:128332): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15877 comm="syz.3.14647" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc47b0beec9 code=0x7ffc0000 [ 1025.476688][T15835] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1025.489419][ T29] audit: type=1326 audit(1760605965.960:128333): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15877 comm="syz.3.14647" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc47b0beec9 code=0x7ffc0000 [ 1025.489510][ T29] audit: type=1326 audit(1760605965.960:128334): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15877 comm="syz.3.14647" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc47b0beec9 code=0x7ffc0000 [ 1025.504852][T15835] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1025.520658][ T29] audit: type=1326 audit(1760605965.960:128335): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15877 comm="syz.3.14647" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc47b0beec9 code=0x7ffc0000 [ 1025.554245][ T4800] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1025.575445][ T29] audit: type=1326 audit(1760605965.960:128336): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15877 comm="syz.3.14647" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc47b0beec9 code=0x7ffc0000 [ 1025.611499][ T4800] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1025.621028][ T4800] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1025.632090][ T4800] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1025.894516][T15893] loop5: detected capacity change from 0 to 512 [ 1026.023091][T15901] loop7: detected capacity change from 0 to 2048 [ 1026.082178][T15905] loop7: detected capacity change from 0 to 2048 [ 1026.175253][T15915] loop7: detected capacity change from 0 to 2048 [ 1026.225635][T15920] loop2: detected capacity change from 0 to 2048 [ 1026.465265][T15928] syz_tun: entered promiscuous mode [ 1026.477786][T15928] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1026.506517][T15928] macvtap1: entered promiscuous mode [ 1026.511899][T15928] macvtap1: entered allmulticast mode [ 1026.517598][T15928] dummy0: entered promiscuous mode [ 1026.522985][T15928] dummy0: entered allmulticast mode [ 1026.529299][T15928] team0: Device macvtap1 failed to register rx_handler [ 1026.536942][T15928] dummy0: left allmulticast mode [ 1026.542428][T15928] dummy0: left promiscuous mode [ 1026.578354][T15929] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1026.741837][T15942] loop2: detected capacity change from 0 to 512 [ 1026.752283][T15942] ext4 filesystem being mounted at /476/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1026.987525][T15950] loop3: detected capacity change from 0 to 2048 [ 1027.292068][T15958] loop7: detected capacity change from 0 to 2048 [ 1027.438825][ T4812] netdevsim netdevsim9 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1027.451676][ T4842] netdevsim netdevsim9 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1027.462922][ T4842] netdevsim netdevsim9 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1027.480421][ T4842] netdevsim netdevsim9 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1027.580519][T15967] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1027.632602][T15965] loop7: detected capacity change from 0 to 512 [ 1027.719038][T15972] loop2: detected capacity change from 0 to 512 [ 1027.732716][T15972] ext4 filesystem being mounted at /478/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1027.821587][T15978] loop2: detected capacity change from 0 to 512 [ 1027.844039][T15978] ext4 filesystem being mounted at /480/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1027.898917][ T4812] Bluetooth: hci0: Frame reassembly failed (-84) [ 1027.937505][T15984] loop2: detected capacity change from 0 to 512 [ 1027.953227][T15984] ext4 filesystem being mounted at /481/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1028.047057][T15989] loop2: detected capacity change from 0 to 2048 [ 1028.258786][T15993] loop2: detected capacity change from 0 to 512 [ 1028.282990][T15993] ext4 filesystem being mounted at /483/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1028.392296][T16004] loop7: detected capacity change from 0 to 512 [ 1028.402236][T16004] EXT4-fs (loop7): 1 orphan inode deleted [ 1028.436096][T16008] loop7: detected capacity change from 0 to 2048 [ 1028.449881][T16009] loop2: detected capacity change from 0 to 512 [ 1028.456871][T16009] EXT4-fs: Ignoring removed oldalloc option [ 1028.463230][T16009] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 1028.475726][T16009] EXT4-fs warning (device loop2): ext4_expand_extra_isize_ea:2853: Unable to expand inode 11. Delete some EAs or run e2fsck. [ 1028.489360][T16009] EXT4-fs (loop2): 1 truncate cleaned up [ 1029.418564][T16025] loop7: detected capacity change from 0 to 512 [ 1029.428948][T16025] EXT4-fs (loop7): 1 orphan inode deleted [ 1029.434849][ C0] ip6_tunnel: ip6gre3 xmit: Local address not yet configured! [ 1029.485492][T16030] loop7: detected capacity change from 0 to 1024 [ 1029.492485][T16030] EXT4-fs: Ignoring removed orlov option [ 1029.515807][T16030] EXT4-fs error (device loop7): mb_free_blocks:2017: group 0, inode 20: block 145:freeing already freed block (bit 9); block bitmap corrupt. [ 1029.853281][T15967] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1029.903907][T15967] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1029.914479][ T6229] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 1029.963556][T15967] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1030.007095][ T4842] netdevsim netdevsim5 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1030.018124][ T4842] netdevsim netdevsim5 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1030.029024][ T4842] netdevsim netdevsim5 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1030.040889][ T4842] netdevsim netdevsim5 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1030.125014][T16041] loop2: detected capacity change from 0 to 2048 [ 1030.214202][T16051] loop9: detected capacity change from 0 to 1024 [ 1030.221163][T16051] EXT4-fs: Ignoring removed orlov option [ 1030.232607][T16048] loop5: detected capacity change from 0 to 512 [ 1030.242848][T16051] EXT4-fs error (device loop9): mb_free_blocks:2017: group 0, inode 20: block 145:freeing already freed block (bit 9); block bitmap corrupt. [ 1030.291069][T16057] loop9: detected capacity change from 0 to 512 [ 1030.302358][T16057] EXT4-fs (loop9): 1 orphan inode deleted [ 1030.414054][T16069] netdevsim netdevsim9 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1030.453061][T16069] netdevsim netdevsim9 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1030.495399][T16081] loop3: detected capacity change from 0 to 2048 [ 1030.523322][T16069] netdevsim netdevsim9 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1030.633922][T16069] netdevsim netdevsim9 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1031.044541][T16093] FAULT_INJECTION: forcing a failure. [ 1031.044541][T16093] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1031.057737][T16093] CPU: 0 UID: 0 PID: 16093 Comm: syz.5.14714 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 1031.057781][T16093] Tainted: [W]=WARN [ 1031.057791][T16093] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 1031.057860][T16093] Call Trace: [ 1031.057868][T16093] [ 1031.057876][T16093] __dump_stack+0x1d/0x30 [ 1031.057905][T16093] dump_stack_lvl+0xe8/0x140 [ 1031.057932][T16093] dump_stack+0x15/0x1b [ 1031.057954][T16093] should_fail_ex+0x265/0x280 [ 1031.058051][T16093] should_fail+0xb/0x20 [ 1031.058090][T16093] should_fail_usercopy+0x1a/0x20 [ 1031.058118][T16093] _copy_from_user+0x1c/0xb0 [ 1031.058186][T16093] memdup_user+0x5e/0xd0 [ 1031.058216][T16093] strndup_user+0x68/0xb0 [ 1031.058241][T16093] __se_sys_fsconfig+0x3d8/0x770 [ 1031.058274][T16093] __x64_sys_fsconfig+0x67/0x80 [ 1031.058335][T16093] x64_sys_call+0x1f83/0x3000 [ 1031.058364][T16093] do_syscall_64+0xd2/0x200 [ 1031.058452][T16093] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 1031.058490][T16093] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 1031.058520][T16093] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1031.058550][T16093] RIP: 0033:0x7fa4d4ddeec9 [ 1031.058661][T16093] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1031.058687][T16093] RSP: 002b:00007fa4d3847038 EFLAGS: 00000246 ORIG_RAX: 00000000000001af [ 1031.058846][T16093] RAX: ffffffffffffffda RBX: 00007fa4d5035fa0 RCX: 00007fa4d4ddeec9 [ 1031.058864][T16093] RDX: 0000200000000040 RSI: 0000000000000001 RDI: 0000000000000004 [ 1031.058882][T16093] RBP: 00007fa4d3847090 R08: 0000000000000000 R09: 0000000000000000 [ 1031.058899][T16093] R10: 00002000000000c0 R11: 0000000000000246 R12: 0000000000000001 [ 1031.058944][T16093] R13: 00007fa4d5036038 R14: 00007fa4d5035fa0 R15: 00007ffdfbadf6d8 [ 1031.058971][T16093] [ 1031.265238][ T4800] netdevsim netdevsim9 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1031.277886][ T4800] netdevsim netdevsim9 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1031.294047][ T4800] netdevsim netdevsim9 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1031.322173][ T4800] netdevsim netdevsim9 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1031.357088][T16098] loop9: detected capacity change from 0 to 512 [ 1031.383568][T16098] msdos: Unknown parameter 'o{w_utime' [ 1031.420387][ T29] kauditd_printk_skb: 195 callbacks suppressed [ 1031.420428][ T29] audit: type=1400 audit(1760605972.060:128532): avc: denied { getopt } for pid=16103 comm="syz.5.14719" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 1031.582539][T16116] loop9: detected capacity change from 0 to 2048 [ 1031.594352][T16118] loop5: detected capacity change from 0 to 2048 [ 1031.692814][ T4812] Bluetooth: hci0: Frame reassembly failed (-84) [ 1031.704082][ T29] audit: type=1326 audit(1760605972.350:128533): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16127 comm="syz.5.14724" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fa4d4ddeec9 code=0x0 [ 1031.925516][T16133] netlink: 108 bytes leftover after parsing attributes in process `syz.9.14725'. [ 1031.934787][T16133] netlink: 108 bytes leftover after parsing attributes in process `syz.9.14725'. [ 1031.945377][T16133] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1032.031900][T16135] loop9: detected capacity change from 0 to 128 [ 1032.077869][T16139] netdevsim netdevsim9 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1032.152337][T16139] netdevsim netdevsim9 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1032.202378][T16139] netdevsim netdevsim9 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1032.262322][T16139] netdevsim netdevsim9 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1032.322878][T16147] loop2: detected capacity change from 0 to 512 [ 1032.332986][T16147] EXT4-fs (loop2): 1 orphan inode deleted [ 1032.367296][T16151] loop2: detected capacity change from 0 to 512 [ 1032.377078][T16151] EXT4-fs (loop2): 1 orphan inode deleted [ 1032.406275][T16154] vhci_hcd: invalid port number 12 [ 1032.412525][ T29] audit: type=1326 audit(1760605973.060:128534): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16153 comm="syz.2.14733" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f09a7f1eec9 code=0x7ffc0000 [ 1032.436791][ T29] audit: type=1326 audit(1760605973.060:128535): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16153 comm="syz.2.14733" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f09a7f1eec9 code=0x7ffc0000 [ 1032.460583][ T29] audit: type=1326 audit(1760605973.060:128536): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16153 comm="syz.2.14733" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f09a7f1eec9 code=0x7ffc0000 [ 1032.484493][ T29] audit: type=1326 audit(1760605973.060:128537): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16153 comm="syz.2.14733" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f09a7f1eec9 code=0x7ffc0000 [ 1032.508324][ T29] audit: type=1326 audit(1760605973.060:128538): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16153 comm="syz.2.14733" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f09a7f1eec9 code=0x7ffc0000 [ 1032.532363][ T29] audit: type=1326 audit(1760605973.060:128539): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16153 comm="syz.2.14733" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f09a7f1eec9 code=0x7ffc0000 [ 1032.556279][ T29] audit: type=1326 audit(1760605973.060:128540): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16153 comm="syz.2.14733" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f09a7f1eec9 code=0x7ffc0000 [ 1032.580140][ T29] audit: type=1326 audit(1760605973.060:128541): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16153 comm="syz.2.14733" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f09a7f1eec9 code=0x7ffc0000 [ 1033.500803][T16171] tipc: Enabled bearer , priority 0 [ 1033.517838][T16171] syzkaller0: entered promiscuous mode [ 1033.523416][T16171] syzkaller0: entered allmulticast mode [ 1033.579253][T16171] tipc: Resetting bearer [ 1033.590994][T16170] tipc: Resetting bearer [ 1033.611308][ T4812] Bluetooth: hci1: Frame reassembly failed (-84) [ 1033.619040][T16170] tipc: Disabling bearer [ 1033.750360][ T6229] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 1033.750456][ T3541] Bluetooth: hci0: command 0x1003 tx timeout [ 1033.857043][T16180] loop3: detected capacity change from 0 to 1024 [ 1033.871173][T16180] EXT4-fs: Ignoring removed orlov option [ 1033.960560][T16185] loop3: detected capacity change from 0 to 512 [ 1033.983836][T16185] ext4 filesystem being mounted at /512/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1034.362938][T16197] loop3: detected capacity change from 0 to 512 [ 1034.372754][T16197] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended [ 1034.393601][T16197] EXT4-fs warning (device loop3): ext4_update_dynamic_rev:1137: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 1034.428532][T16197] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.14751: bg 0: block 248: padding at end of block bitmap is not set [ 1034.453444][T16197] EXT4-fs error (device loop3): ext4_acquire_dquot:6945: comm syz.3.14751: Failed to acquire dquot type 1 [ 1034.480970][T16197] EXT4-fs (loop3): 1 truncate cleaned up [ 1034.532372][T16201] loop3: detected capacity change from 0 to 512 [ 1034.552710][T16201] ext4 filesystem being mounted at /518/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 1034.599843][T16206] loop3: detected capacity change from 0 to 512 [ 1034.623177][T16206] ext4 filesystem being mounted at /519/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1034.712803][T16210] loop3: detected capacity change from 0 to 512 [ 1034.733321][T16210] ext4 filesystem being mounted at /520/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1034.817770][T16214] netlink: 20 bytes leftover after parsing attributes in process `syz.5.14755'. [ 1034.867218][T16216] loop3: detected capacity change from 0 to 2048 [ 1034.893647][T16219] netdevsim netdevsim5 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1034.942400][T16219] netdevsim netdevsim5 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1034.964115][T16221] tipc: Started in network mode [ 1034.969058][T16221] tipc: Node identity 0a6eb6b7cdfb, cluster identity 4711 [ 1034.976376][T16221] tipc: Enabled bearer , priority 0 [ 1034.985307][T16221] tipc: Disabling bearer [ 1034.994997][T16219] netdevsim netdevsim5 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1035.082215][T16219] netdevsim netdevsim5 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1035.153156][ T4816] netdevsim netdevsim5 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1035.166298][ T4816] netdevsim netdevsim5 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1035.184918][ T4816] netdevsim netdevsim5 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1035.225585][ T4816] netdevsim netdevsim5 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1035.331966][ T4799] netdevsim netdevsim9 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1035.362321][ T4799] netdevsim netdevsim9 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1035.382100][ T4799] netdevsim netdevsim9 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1035.403287][T16233] loop5: detected capacity change from 0 to 2048 [ 1035.410391][ T4799] netdevsim netdevsim9 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1035.428526][T16231] netlink: 16 bytes leftover after parsing attributes in process `syz.3.14762'. [ 1035.444606][T16236] loop9: detected capacity change from 0 to 512 [ 1035.499163][T16236] ext4 filesystem being mounted at /570/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1035.531125][T16245] loop2: detected capacity change from 0 to 2048 [ 1035.564182][T16249] loop9: detected capacity change from 0 to 512 [ 1035.613201][T16249] ext4 filesystem being mounted at /571/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1035.648006][T16258] FAULT_INJECTION: forcing a failure. [ 1035.648006][T16258] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1035.661211][T16258] CPU: 0 UID: 0 PID: 16258 Comm: syz.2.14769 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 1035.661332][T16258] Tainted: [W]=WARN [ 1035.661341][T16258] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 1035.661356][T16258] Call Trace: [ 1035.661364][T16258] [ 1035.661373][T16258] __dump_stack+0x1d/0x30 [ 1035.661398][T16258] dump_stack_lvl+0xe8/0x140 [ 1035.661421][T16258] dump_stack+0x15/0x1b [ 1035.661440][T16258] should_fail_ex+0x265/0x280 [ 1035.661559][T16258] should_fail+0xb/0x20 [ 1035.661621][T16258] should_fail_usercopy+0x1a/0x20 [ 1035.661645][T16258] _copy_to_user+0x20/0xa0 [ 1035.661733][T16258] simple_read_from_buffer+0xb5/0x130 [ 1035.661759][T16258] proc_fail_nth_read+0x10e/0x150 [ 1035.661812][T16258] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1035.661844][T16258] vfs_read+0x1a8/0x770 [ 1035.661874][T16258] ? __rcu_read_unlock+0x4f/0x70 [ 1035.661902][T16258] ? __fget_files+0x184/0x1c0 [ 1035.661929][T16258] ? radix_tree_lookup+0xfa/0x140 [ 1035.661971][T16258] ksys_read+0xda/0x1a0 [ 1035.662033][T16258] __x64_sys_read+0x40/0x50 [ 1035.662077][T16258] x64_sys_call+0x27c0/0x3000 [ 1035.662101][T16258] do_syscall_64+0xd2/0x200 [ 1035.662176][T16258] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 1035.662208][T16258] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 1035.662232][T16258] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1035.662258][T16258] RIP: 0033:0x7f09a7f1d8dc [ 1035.662354][T16258] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 1035.662376][T16258] RSP: 002b:00007f09a697f030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1035.662398][T16258] RAX: ffffffffffffffda RBX: 00007f09a8175fa0 RCX: 00007f09a7f1d8dc [ 1035.662413][T16258] RDX: 000000000000000f RSI: 00007f09a697f0a0 RDI: 0000000000000003 [ 1035.662427][T16258] RBP: 00007f09a697f090 R08: 0000000000000000 R09: 0000000000000000 [ 1035.662440][T16258] R10: 000000000000000c R11: 0000000000000246 R12: 0000000000000001 [ 1035.662454][T16258] R13: 00007f09a8176038 R14: 00007f09a8175fa0 R15: 00007ffcd95a2bf8 [ 1035.662552][T16258] [ 1035.879403][ T6229] Bluetooth: hci1: command 0x1003 tx timeout [ 1035.882906][T24731] Bluetooth: hci1: Opcode 0x1003 failed: -110 [ 1035.992208][T16273] netlink: 108 bytes leftover after parsing attributes in process `syz.2.14776'. [ 1036.001653][T16273] netlink: 108 bytes leftover after parsing attributes in process `syz.2.14776'. [ 1036.013276][T16273] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1036.142230][T16284] loop2: detected capacity change from 0 to 512 [ 1036.172932][T16284] ext4 filesystem being mounted at /503/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1036.345286][T16296] loop2: detected capacity change from 0 to 1024 [ 1036.360853][T16296] EXT4-fs: Ignoring removed orlov option [ 1036.376284][T16298] loop5: detected capacity change from 0 to 1024 [ 1036.383906][T16298] EXT4-fs: Ignoring removed nobh option [ 1036.389496][T16298] EXT4-fs: Ignoring removed bh option [ 1036.398984][T16296] EXT4-fs error (device loop2): mb_free_blocks:2017: group 0, inode 19: block 129:freeing already freed block (bit 8); block bitmap corrupt. [ 1036.458539][T16298] EXT4-fs error (device loop5): ext4_mb_mark_diskspace_used:4193: comm syz.5.14787: Allocating blocks 449-513 which overlap fs metadata [ 1036.473326][ T29] kauditd_printk_skb: 33463 callbacks suppressed [ 1036.473344][ T29] audit: type=1326 audit(1760605977.120:162003): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16305 comm="syz.2.14789" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f09a7f1eec9 code=0x7ffc0000 [ 1036.503631][ T29] audit: type=1326 audit(1760605977.120:162004): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16305 comm="syz.2.14789" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f09a7f1eec9 code=0x7ffc0000 [ 1036.504383][T16306] loop2: detected capacity change from 0 to 2048 [ 1036.528425][ T29] audit: type=1326 audit(1760605977.120:162005): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16305 comm="syz.2.14789" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f09a7f1eec9 code=0x7ffc0000 [ 1036.557920][ T29] audit: type=1326 audit(1760605977.120:162006): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16305 comm="syz.2.14789" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f09a7f1eec9 code=0x7ffc0000 [ 1036.580351][T16298] EXT4-fs (loop5): Remounting filesystem read-only [ 1036.581824][ T29] audit: type=1326 audit(1760605977.120:162007): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16305 comm="syz.2.14789" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f09a7f1eec9 code=0x7ffc0000 [ 1036.612058][ T29] audit: type=1326 audit(1760605977.120:162008): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16305 comm="syz.2.14789" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f09a7f1eec9 code=0x7ffc0000 [ 1036.636357][ T29] audit: type=1326 audit(1760605977.120:162009): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16305 comm="syz.2.14789" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f09a7f1eec9 code=0x7ffc0000 [ 1036.660157][ T29] audit: type=1326 audit(1760605977.120:162010): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16305 comm="syz.2.14789" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7f09a7f1eec9 code=0x7ffc0000 [ 1036.683959][ T29] audit: type=1326 audit(1760605977.120:162011): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16305 comm="syz.2.14789" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f09a7f1ef03 code=0x7ffc0000 [ 1036.707574][ T29] audit: type=1326 audit(1760605977.120:162012): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16305 comm="syz.2.14789" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f09a7f1d97f code=0x7ffc0000 [ 1036.742649][T16310] loop7: detected capacity change from 0 to 512 [ 1036.751572][T18241] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 1036.759069][T18241] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 1036.766527][T18241] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 1036.775374][T16306] Alternate GPT is invalid, using primary GPT. [ 1036.780330][T18241] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 1036.781718][T16306] loop2: p1 p2 p3 [ 1036.788991][T18241] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 1036.795270][T16310] EXT4-fs (loop7): filesystem is read-only [ 1036.800103][T18241] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 1036.813366][T18241] hid-generic 0000:0000:0000.0009: unknown main item tag 0x4 [ 1036.820963][T16310] EXT4-fs (loop7): ext4_check_descriptors: Block bitmap for group 0 overlaps block group descriptors [ 1036.821072][T18241] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 1036.839331][T18241] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 1036.846772][T18241] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 1036.860689][T16310] EXT4-fs (loop7): filesystem is read-only [ 1036.866553][T16310] EXT4-fs (loop7): orphan cleanup on readonly fs [ 1036.875912][T16310] EXT4-fs error (device loop7): ext4_orphan_get:1392: inode #16: comm syz.7.14790: iget: bad i_size value: 648518346341360424 [ 1036.889835][T16310] EXT4-fs error (device loop7): ext4_orphan_get:1397: comm syz.7.14790: couldn't read orphan inode 16 (err -117) [ 1036.930777][T16314] netlink: 108 bytes leftover after parsing attributes in process `syz.3.14791'. [ 1036.939958][T16314] netlink: 108 bytes leftover after parsing attributes in process `syz.3.14791'. [ 1036.964697][T18241] hid-generic 0000:0000:0000.0009: hidraw0: HID v8.00 Device [syz0] on syz0 [ 1036.980630][T16314] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1036.990755][T16297] EXT4-fs (loop5): pa ffff8881071b4690: logic 48, phys. 177, len 21 [ 1037.063161][T16320] loop7: detected capacity change from 0 to 512 [ 1037.092786][T16320] EXT4-fs (loop7): 1 orphan inode deleted [ 1037.127593][T16324] loop2: detected capacity change from 0 to 2048 [ 1037.327826][T16337] loop2: detected capacity change from 0 to 2048 [ 1037.438596][T16348] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1037.502742][T16348] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1037.521965][T16354] tipc: Enabled bearer , priority 0 [ 1037.536362][T16354] tipc: Disabling bearer [ 1037.552375][T16348] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1037.579203][T16357] netlink: 'syz.7.14807': attribute type 29 has an invalid length. [ 1037.597777][T16359] loop9: detected capacity change from 0 to 512 [ 1037.609011][T16359] EXT4-fs (loop9): 1 orphan inode deleted [ 1037.617100][T16348] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1037.655478][T16364] loop9: detected capacity change from 0 to 2048 [ 1037.671770][ T4816] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1037.684133][ T4799] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1037.696498][ T4799] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1037.708806][ T4799] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1037.758813][T16372] loop9: detected capacity change from 0 to 2048 [ 1037.773273][T16374] serio: Serial port ptm0 [ 1038.231756][T16398] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1038.291020][T16399] tipc: Enabled bearer , priority 0 [ 1038.304067][T16399] tipc: Disabling bearer [ 1038.318214][T16398] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1038.383149][T16398] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1038.432532][T16398] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1038.502817][T16403] loop7: detected capacity change from 0 to 512 [ 1038.516834][ T4799] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1038.528009][T16403] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 1038.549486][ T4799] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1038.559844][T16403] EXT4-fs (loop7): 1 orphan inode deleted [ 1038.565742][T16403] EXT4-fs (loop7): 1 truncate cleaned up [ 1038.575631][ T4799] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1038.592588][ T4799] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1038.617332][T16403] EXT4-fs mount: 132 callbacks suppressed [ 1038.617355][T16403] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1038.638386][T16403] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1038.740581][T16412] loop3: detected capacity change from 0 to 2048 [ 1038.751947][T16412] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1038.776765][T16417] loop9: detected capacity change from 0 to 512 [ 1038.788250][ T9054] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1038.801220][T16417] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1038.813899][T16417] ext4 filesystem being mounted at /581/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1038.850120][T16423] loop3: detected capacity change from 0 to 2048 [ 1038.868281][T16423] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1038.894927][T16427] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1038.907289][ T8108] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1038.941840][ T9054] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1038.942970][T16427] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1038.964086][T16430] bridge0: port 3(gretap0) entered blocking state [ 1038.970595][T16430] bridge0: port 3(gretap0) entered disabled state [ 1038.977234][ T4799] Bluetooth: hci0: Frame reassembly failed (-84) [ 1038.977246][T16430] gretap0: entered allmulticast mode [ 1038.977803][T16430] gretap0: entered promiscuous mode [ 1038.995045][T16430] bridge0: port 3(gretap0) entered blocking state [ 1039.001629][T16430] bridge0: port 3(gretap0) entered forwarding state [ 1039.009286][T16434] gretap0: left allmulticast mode [ 1039.014537][T16434] gretap0: left promiscuous mode [ 1039.019700][T16434] bridge0: port 3(gretap0) entered disabled state [ 1039.033810][T16427] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1039.082630][T16427] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1039.983114][T16454] loop9: detected capacity change from 0 to 2048 [ 1040.008240][T16454] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1040.040765][ T8108] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1040.094755][T16461] loop9: detected capacity change from 0 to 512 [ 1040.124261][T16461] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1040.139038][T16461] ext4 filesystem being mounted at /586/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1040.221327][ T8108] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1040.259260][T16467] loop9: detected capacity change from 0 to 512 [ 1040.286124][T16467] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1040.311921][T16467] ext4 filesystem being mounted at /587/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1040.468194][T16477] loop7: detected capacity change from 0 to 1024 [ 1040.492057][ T8108] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1040.501937][T16477] EXT4-fs: Ignoring removed orlov option [ 1040.523298][T16477] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1040.544131][T16479] netdevsim netdevsim9 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1040.561812][T16477] EXT4-fs error (device loop7): mb_free_blocks:2017: group 0, inode 18: block 129:freeing already freed block (bit 8); block bitmap corrupt. [ 1040.592519][T16479] netdevsim netdevsim9 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1040.605581][T10069] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1040.662476][T16479] netdevsim netdevsim9 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1040.746957][T16488] loop7: detected capacity change from 0 to 2048 [ 1040.755510][T16479] netdevsim netdevsim9 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1040.771765][T16488] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1040.796278][T16490] netdevsim netdevsim5 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1040.809289][T10069] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1040.828802][ T4800] netdevsim netdevsim9 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1040.841476][ T4842] netdevsim netdevsim9 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1040.859009][T16490] netdevsim netdevsim5 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1040.865661][T16494] loop7: detected capacity change from 0 to 2048 [ 1040.878407][T16495] tipc: Enabled bearer , priority 0 [ 1040.885118][ T4800] netdevsim netdevsim9 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1040.894887][T16494] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1040.908589][T16495] tipc: Disabling bearer [ 1040.916402][ T4800] netdevsim netdevsim9 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1040.927642][T16490] netdevsim netdevsim5 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1041.002150][T16490] netdevsim netdevsim5 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1041.030518][T24731] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 1041.068870][ T4800] netdevsim netdevsim5 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1041.090681][ T4800] netdevsim netdevsim5 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1041.116199][ T4800] netdevsim netdevsim5 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1041.130920][T10069] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1041.143775][ T4816] netdevsim netdevsim5 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1041.220143][T16503] : renamed from vlan1 (while UP) [ 1041.256781][ T4816] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1041.274089][ T4816] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1041.290764][ T4816] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1041.308038][T16513] loop5: detected capacity change from 0 to 512 [ 1041.325534][T16513] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1041.343599][T16513] ext4 filesystem being mounted at /32/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1041.354529][ T4816] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1041.368570][T16517] loop7: detected capacity change from 0 to 512 [ 1041.392681][T16517] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1041.408798][T16517] ext4 filesystem being mounted at /471/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1041.439640][T16519] loop2: detected capacity change from 0 to 2048 [ 1041.532950][T16519] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1041.570893][T10069] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1041.598410][T15835] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1041.618251][T16527] loop9: detected capacity change from 0 to 512 [ 1041.652867][T16527] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1041.878264][T16540] loop5: detected capacity change from 0 to 512 [ 1041.888954][T16540] EXT4-fs (loop5): 1 orphan inode deleted [ 1041.895398][T16540] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1041.923403][T15835] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1041.941433][ T9583] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1041.975245][ T29] kauditd_printk_skb: 68 callbacks suppressed [ 1041.975266][ T29] audit: type=1326 audit(1760605982.620:162081): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16544 comm="syz.2.14870" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f09a7f1eec9 code=0x7ffc0000 [ 1041.988187][T16543] netlink: 7 bytes leftover after parsing attributes in process `syz.5.14869'. [ 1042.005305][ T29] audit: type=1326 audit(1760605982.620:162082): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16544 comm="syz.2.14870" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f09a7f1eec9 code=0x7ffc0000 [ 1042.040886][ T29] audit: type=1400 audit(1760605982.630:162083): avc: denied { create } for pid=16542 comm="syz.5.14869" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 1042.062019][ T29] audit: type=1326 audit(1760605982.680:162084): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16544 comm="syz.2.14870" exe="/root/syz-executor" sig=0 arch=c000003e syscall=2 compat=0 ip=0x7f09a7f1eec9 code=0x7ffc0000 [ 1042.081797][T16543] netlink: 68 bytes leftover after parsing attributes in process `syz.5.14869'. [ 1042.086701][ T29] audit: type=1326 audit(1760605982.680:162085): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16544 comm="syz.2.14870" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f09a7f1eec9 code=0x7ffc0000 [ 1042.118567][ T29] audit: type=1326 audit(1760605982.680:162086): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16544 comm="syz.2.14870" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f09a7f1eec9 code=0x7ffc0000 [ 1042.154118][ T29] audit: type=1326 audit(1760605982.780:162087): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16544 comm="syz.2.14870" exe="/root/syz-executor" sig=0 arch=c000003e syscall=40 compat=0 ip=0x7f09a7f1eec9 code=0x7ffc0000 [ 1042.177917][ T29] audit: type=1326 audit(1760605982.780:162088): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16544 comm="syz.2.14870" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f09a7f1eec9 code=0x7ffc0000 [ 1042.201948][ T29] audit: type=1326 audit(1760605982.780:162089): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16544 comm="syz.2.14870" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f09a7f1eec9 code=0x7ffc0000 [ 1042.424627][ T29] audit: type=1400 audit(1760605982.970:162090): avc: denied { unlink } for pid=15835 comm="syz-executor" name="file0" dev="tmpfs" ino=215 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 1042.577686][ T8108] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1042.843718][T16570] loop9: detected capacity change from 0 to 512 [ 1042.900812][T16570] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1043.090165][T16570] ext4 filesystem being mounted at /593/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1043.317823][ T8108] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1043.977766][T16587] loop5: detected capacity change from 0 to 512 [ 1044.012646][T16587] EXT4-fs (loop5): 1 orphan inode deleted [ 1044.025254][T16587] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1044.080632][T15835] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1044.138008][T16591] loop5: detected capacity change from 0 to 512 [ 1044.160094][T16591] EXT4-fs (loop5): 1 orphan inode deleted [ 1044.168115][T16591] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1044.287104][T15835] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1044.405991][T16597] loop5: detected capacity change from 0 to 2048 [ 1044.471551][T16597] Alternate GPT is invalid, using primary GPT. [ 1044.477868][T16597] loop5: p1 p2 p3 [ 1044.495870][T16600] netdevsim netdevsim9 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1044.548079][T16601] bridge0: port 3(gretap0) entered blocking state [ 1044.554971][T16601] bridge0: port 3(gretap0) entered disabled state [ 1044.617099][T16601] gretap0: entered allmulticast mode [ 1044.633402][T16601] gretap0: entered promiscuous mode [ 1044.648538][T16600] netdevsim netdevsim9 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1044.675724][T16603] gretap0: left allmulticast mode [ 1044.680961][T16603] gretap0: left promiscuous mode [ 1044.686332][T16603] bridge0: port 3(gretap0) entered disabled state [ 1044.733170][T16600] netdevsim netdevsim9 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1044.782394][T16600] netdevsim netdevsim9 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1044.886399][ T4842] netdevsim netdevsim9 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1044.905015][ T4842] netdevsim netdevsim9 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1044.920522][T16611] loop7: detected capacity change from 0 to 512 [ 1044.952253][ T4842] netdevsim netdevsim9 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1044.969019][ T4842] netdevsim netdevsim9 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1044.994766][T16611] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1045.024403][T16611] ext4 filesystem being mounted at /476/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1045.111015][T16617] loop9: detected capacity change from 0 to 2048 [ 1045.129218][T10069] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1045.140124][T16617] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1045.383886][ T8108] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1045.590941][T16629] chnl_net:caif_netlink_parms(): no params data found [ 1045.603241][T16641] Q6\bY4: renamed from lo (while UP) [ 1045.614001][T16641] netlink: 'syz.3.14895': attribute type 1 has an invalid length. [ 1045.628125][T16641] 8021q: adding VLAN 0 to HW filter on device bond7 [ 1045.643308][T16641] netlink: 4 bytes leftover after parsing attributes in process `syz.3.14895'. [ 1045.657046][T16641] bond7 (unregistering): Released all slaves [ 1045.673067][T16629] bridge0: port 1(bridge_slave_0) entered blocking state [ 1045.680317][T16629] bridge0: port 1(bridge_slave_0) entered disabled state [ 1045.687497][T16629] bridge_slave_0: entered allmulticast mode [ 1045.694115][T16629] bridge_slave_0: entered promiscuous mode [ 1045.701015][T16629] bridge0: port 2(bridge_slave_1) entered blocking state [ 1045.708163][T16629] bridge0: port 2(bridge_slave_1) entered disabled state [ 1045.715733][T16629] bridge_slave_1: entered allmulticast mode [ 1045.722577][T16629] bridge_slave_1: entered promiscuous mode [ 1045.747290][T16647] loop3: detected capacity change from 0 to 2048 [ 1045.756258][T16629] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1045.761900][T16647] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1045.767463][T16629] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1045.824874][T16629] team0: Port device team_slave_0 added [ 1045.842048][T16629] team0: Port device team_slave_1 added [ 1045.879085][T16629] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1045.886223][T16629] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1045.912609][T16629] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1045.925478][T16629] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1045.932575][T16629] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1045.958584][T16629] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1045.989017][T16629] hsr_slave_0: entered promiscuous mode [ 1045.995325][T16629] hsr_slave_1: entered promiscuous mode [ 1046.001337][T16629] debugfs: 'hsr0' already exists in 'hsr' [ 1046.007065][T16629] Cannot create hsr debugfs directory [ 1046.028904][ T9054] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1046.075737][T16658] loop7: detected capacity change from 0 to 512 [ 1046.092440][T16658] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1046.105215][T16658] ext4 filesystem being mounted at /479/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1046.106296][T16629] netdevsim netdevsim9 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1046.152312][T16629] netdevsim netdevsim9 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1046.183101][T10069] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1046.202188][T16629] netdevsim netdevsim9 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1046.231301][T16629] netdevsim netdevsim9 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1046.335894][T16670] loop7: detected capacity change from 0 to 512 [ 1046.345649][T16670] EXT4-fs (loop7): 1 orphan inode deleted [ 1046.351915][T16670] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1046.375458][T10069] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1046.396862][T16673] FAULT_INJECTION: forcing a failure. [ 1046.396862][T16673] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1046.410033][T16673] CPU: 0 UID: 0 PID: 16673 Comm: syz.7.14905 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 1046.410110][T16673] Tainted: [W]=WARN [ 1046.410121][T16673] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 1046.410134][T16673] Call Trace: [ 1046.410140][T16673] [ 1046.410149][T16673] __dump_stack+0x1d/0x30 [ 1046.410168][T16673] dump_stack_lvl+0xe8/0x140 [ 1046.410186][T16673] dump_stack+0x15/0x1b [ 1046.410201][T16673] should_fail_ex+0x265/0x280 [ 1046.410321][T16673] should_fail+0xb/0x20 [ 1046.410359][T16673] should_fail_usercopy+0x1a/0x20 [ 1046.410463][T16673] _copy_from_user+0x1c/0xb0 [ 1046.410487][T16673] ___sys_sendmsg+0xc1/0x1d0 [ 1046.410529][T16673] __sys_sendmmsg+0x178/0x300 [ 1046.410716][T16673] __x64_sys_sendmmsg+0x57/0x70 [ 1046.410744][T16673] x64_sys_call+0x1c4a/0x3000 [ 1046.410764][T16673] do_syscall_64+0xd2/0x200 [ 1046.410861][T16673] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 1046.410900][T16673] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 1046.410939][T16673] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1046.410959][T16673] RIP: 0033:0x7f21b6d1eec9 [ 1046.410973][T16673] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1046.410989][T16673] RSP: 002b:00007f21b5787038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 1046.411007][T16673] RAX: ffffffffffffffda RBX: 00007f21b6f75fa0 RCX: 00007f21b6d1eec9 [ 1046.411018][T16673] RDX: 0000000000000001 RSI: 00002000000030c0 RDI: 0000000000000006 [ 1046.411173][T16673] RBP: 00007f21b5787090 R08: 0000000000000000 R09: 0000000000000000 [ 1046.411185][T16673] R10: 9200000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1046.411197][T16673] R13: 00007f21b6f76038 R14: 00007f21b6f75fa0 R15: 00007ffdedbc3b38 [ 1046.411215][T16673] [ 1046.653218][T16680] loop7: detected capacity change from 0 to 2048 [ 1046.730024][ T4812] Bluetooth: hci0: Frame reassembly failed (-84) [ 1046.755344][ T4812] Bluetooth: hci1: Frame reassembly failed (-84) [ 1046.967725][T16693] loop3: detected capacity change from 0 to 2048 [ 1046.981825][T16693] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1047.163033][ T9054] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1047.184637][T16697] loop3: detected capacity change from 0 to 512 [ 1047.202564][T16697] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1047.215419][T16697] ext4 filesystem being mounted at /544/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1047.240806][ T9054] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1047.260097][ T4800] Bluetooth: hci2: Frame reassembly failed (-84) [ 1047.476706][T16706] netdevsim netdevsim5 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1047.512483][T16706] netdevsim netdevsim5 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1047.532847][T16707] tipc: Enabled bearer , priority 0 [ 1047.541096][T16707] tipc: Disabling bearer [ 1047.562339][T16706] netdevsim netdevsim5 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1047.622315][T16706] netdevsim netdevsim5 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1047.678732][ T4812] netdevsim netdevsim5 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1047.690591][ T4812] netdevsim netdevsim5 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1047.702286][ T4812] netdevsim netdevsim5 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1047.713613][ T4812] netdevsim netdevsim5 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1048.790338][T24731] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 1048.791954][ T3672] Bluetooth: hci1: command 0x1003 tx timeout [ 1048.796491][ T1917] Bluetooth: hci0: command 0x1003 tx timeout [ 1048.802483][ T6229] Bluetooth: hci1: Opcode 0x1003 failed: -110 [ 1049.035701][T16629] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 1049.047558][T16629] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 1049.056615][T16629] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 1049.065555][T16629] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 1049.101025][T16629] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1049.113698][T16629] 8021q: adding VLAN 0 to HW filter on device team0 [ 1049.123946][ T4812] bridge0: port 1(bridge_slave_0) entered blocking state [ 1049.131208][ T4812] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1049.142553][ T4816] bridge0: port 2(bridge_slave_1) entered blocking state [ 1049.149758][ T4816] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1049.216253][T16629] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1049.270415][T24731] Bluetooth: hci2: command 0x1003 tx timeout [ 1049.276521][ T3541] Bluetooth: hci2: Opcode 0x1003 failed: -110 [ 1049.339468][ T29] kauditd_printk_skb: 114 callbacks suppressed [ 1049.339527][ T29] audit: type=1400 audit(1760605989.980:162205): avc: denied { ioctl } for pid=16744 comm="syz.2.14924" path="socket:[200218]" dev="sockfs" ino=200218 ioctlcmd=0x940e scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 1049.340051][T16629] veth0_vlan: entered promiscuous mode [ 1049.379859][ T29] audit: type=1400 audit(1760605990.020:162206): avc: denied { read } for pid=16744 comm="syz.2.14924" path="socket:[200218]" dev="sockfs" ino=200218 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 1049.387327][T16629] veth1_vlan: entered promiscuous mode [ 1049.410096][ T29] audit: type=1326 audit(1760605990.060:162207): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16744 comm="syz.2.14924" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f09a7f1eec9 code=0x0 [ 1049.419341][T16629] veth0_macvtap: entered promiscuous mode [ 1049.444191][T16629] veth1_macvtap: entered promiscuous mode [ 1049.455914][T16629] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1049.466625][T16629] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1049.477284][ T4816] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1049.488725][ T4816] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1049.499649][ T4816] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1049.509168][ T4816] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1049.639584][ T29] audit: type=1326 audit(1760605990.280:162208): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16750 comm="syz.9.14925" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd20164eec9 code=0x7ffc0000 [ 1049.665589][ T29] audit: type=1326 audit(1760605990.280:162209): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16750 comm="syz.9.14925" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd20164eec9 code=0x7ffc0000 [ 1049.689830][ T29] audit: type=1326 audit(1760605990.280:162210): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16750 comm="syz.9.14925" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fd20164eec9 code=0x7ffc0000 [ 1049.713598][ T29] audit: type=1326 audit(1760605990.280:162211): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16750 comm="syz.9.14925" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd20164eec9 code=0x7ffc0000 [ 1049.737516][ T29] audit: type=1326 audit(1760605990.280:162212): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16750 comm="syz.9.14925" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd20164eec9 code=0x7ffc0000 [ 1049.761349][ T29] audit: type=1326 audit(1760605990.280:162213): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16750 comm="syz.9.14925" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7fd20164eec9 code=0x7ffc0000 [ 1049.785178][ T29] audit: type=1326 audit(1760605990.280:162214): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16750 comm="syz.9.14925" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd20164eec9 code=0x7ffc0000 [ 1050.826354][T16784] netdevsim netdevsim7 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1050.836564][ T4816] Bluetooth: hci1: Frame reassembly failed (-84) [ 1050.902166][T16784] netdevsim netdevsim7 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1050.942934][T16784] netdevsim netdevsim7 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1050.982569][T16784] netdevsim netdevsim7 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1051.048684][ T4822] netdevsim netdevsim7 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1051.061488][ T4822] netdevsim netdevsim7 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1051.072930][ T4822] netdevsim netdevsim7 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1051.085114][ T4822] netdevsim netdevsim7 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1051.116315][T16791] loop7: detected capacity change from 0 to 512 [ 1051.130009][T16791] EXT4-fs (loop7): failed to initialize system zone (-117) [ 1051.138206][T16791] EXT4-fs (loop7): mount failed [ 1051.154364][T16794] loop2: detected capacity change from 0 to 512 [ 1051.164318][T16794] EXT4-fs (loop2): 1 orphan inode deleted [ 1051.170775][T16794] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1051.197269][ T9583] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1051.537937][T16812] loop7: detected capacity change from 0 to 512 [ 1051.552958][T16812] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1051.565796][T16812] ext4 filesystem being mounted at /497/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1051.702005][T10069] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1051.746191][T16820] loop7: detected capacity change from 0 to 1024 [ 1051.754618][T16820] EXT4-fs: Ignoring removed orlov option [ 1051.775590][T16820] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1051.797448][T16820] EXT4-fs error (device loop7): mb_free_blocks:2017: group 0, inode 19: block 145:freeing already freed block (bit 9); block bitmap corrupt. [ 1051.812350][T16826] loop2: detected capacity change from 0 to 512 [ 1051.822432][T16826] EXT4-fs (loop2): 1 orphan inode deleted [ 1051.828675][T16826] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1051.854828][T10069] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1051.865637][ T9583] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1051.911158][T16830] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1051.961932][T16833] bridge0: port 3(gretap0) entered blocking state [ 1051.968435][T16833] bridge0: port 3(gretap0) entered disabled state [ 1051.975207][T16833] gretap0: entered allmulticast mode [ 1051.981205][T16833] gretap0: entered promiscuous mode [ 1051.986893][T16833] bridge0: port 3(gretap0) entered blocking state [ 1051.993408][T16833] bridge0: port 3(gretap0) entered forwarding state [ 1052.007325][T16830] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1052.062268][T16830] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1052.112612][T16830] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1052.150360][ T1917] Bluetooth: hci0: command 0x1003 tx timeout [ 1052.151026][ T3541] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 1052.171029][ T4812] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1052.183037][ T4812] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1052.194938][ T4812] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1052.207290][ T4812] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1052.279477][T16835] loop9: detected capacity change from 0 to 2048 [ 1052.291956][T16835] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1052.323854][T16841] loop2: detected capacity change from 0 to 2048 [ 1052.342825][T16841] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1052.357210][T16629] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1052.462939][ T9583] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1052.486911][T16848] loop2: detected capacity change from 0 to 512 [ 1052.502171][T16848] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1052.514942][T16848] ext4 filesystem being mounted at /536/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1052.581520][ T9583] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1052.851869][T16865] netdevsim netdevsim5 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1052.870365][T24731] Bluetooth: hci1: Opcode 0x1003 failed: -110 [ 1052.871287][ T3541] Bluetooth: hci1: command 0x1003 tx timeout [ 1052.912669][T16865] netdevsim netdevsim5 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1052.938265][T16867] v: renamed from ip6_vti0 (while UP) [ 1052.977009][T16865] netdevsim netdevsim5 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1053.043314][T16865] netdevsim netdevsim5 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1053.118989][ T4816] netdevsim netdevsim5 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1053.143251][ T4816] netdevsim netdevsim5 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1053.177590][ T4816] netdevsim netdevsim5 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1053.238973][ T4816] netdevsim netdevsim5 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1053.444622][T16880] loop7: detected capacity change from 0 to 512 [ 1053.466457][T16878] loop9: detected capacity change from 0 to 2048 [ 1053.485161][T16880] ext4 filesystem being mounted at /503/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1053.773043][ T4816] Bluetooth: hci0: Frame reassembly failed (-84) [ 1053.876867][T16896] loop7: detected capacity change from 0 to 736 [ 1053.928503][T16896] rock: directory entry would overflow storage [ 1053.934754][T16896] rock: sig=0x3b10, size=4, remaining=3 [ 1054.023714][T16906] FAULT_INJECTION: forcing a failure. [ 1054.023714][T16906] name failslab, interval 1, probability 0, space 0, times 0 [ 1054.036488][T16906] CPU: 1 UID: 0 PID: 16906 Comm: syz.2.14976 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 1054.036535][T16906] Tainted: [W]=WARN [ 1054.036545][T16906] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 1054.036607][T16906] Call Trace: [ 1054.036616][T16906] [ 1054.036626][T16906] __dump_stack+0x1d/0x30 [ 1054.036657][T16906] dump_stack_lvl+0xe8/0x140 [ 1054.036717][T16906] dump_stack+0x15/0x1b [ 1054.036740][T16906] should_fail_ex+0x265/0x280 [ 1054.036845][T16906] ? __se_sys_memfd_create+0x1cc/0x590 [ 1054.036879][T16906] should_failslab+0x8c/0xb0 [ 1054.036917][T16906] __kmalloc_cache_noprof+0x4c/0x4a0 [ 1054.037037][T16906] ? fput+0x8f/0xc0 [ 1054.037146][T16906] __se_sys_memfd_create+0x1cc/0x590 [ 1054.037178][T16906] __x64_sys_memfd_create+0x31/0x40 [ 1054.037207][T16906] x64_sys_call+0x2ac2/0x3000 [ 1054.037242][T16906] do_syscall_64+0xd2/0x200 [ 1054.037274][T16906] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 1054.037349][T16906] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 1054.037378][T16906] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1054.037406][T16906] RIP: 0033:0x7f09a7f1eec9 [ 1054.037468][T16906] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1054.037490][T16906] RSP: 002b:00007f09a697ee18 EFLAGS: 00000202 ORIG_RAX: 000000000000013f [ 1054.037509][T16906] RAX: ffffffffffffffda RBX: 00000000000004dd RCX: 00007f09a7f1eec9 [ 1054.037522][T16906] RDX: 00007f09a697eef0 RSI: 0000000000000000 RDI: 00007f09a7fa2960 [ 1054.037536][T16906] RBP: 0000200000000240 R08: 00007f09a697ebb7 R09: 00007f09a697ee40 [ 1054.037552][T16906] R10: 000000000000000a R11: 0000000000000202 R12: 0000200000000100 [ 1054.037586][T16906] R13: 00007f09a697eef0 R14: 00007f09a697eeb0 R15: 0000200000000140 [ 1054.037614][T16906] [ 1054.060187][T16910] loop7: detected capacity change from 0 to 512 [ 1054.246046][T16913] loop2: detected capacity change from 0 to 512 [ 1054.272673][T16913] ext4 filesystem being mounted at /539/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1054.284314][T16910] ext4 filesystem being mounted at /508/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1054.357819][T16926] loop7: detected capacity change from 0 to 2048 [ 1054.362029][T16928] loop2: detected capacity change from 0 to 1024 [ 1054.371939][T16928] EXT4-fs: Ignoring removed orlov option [ 1054.385743][T16928] EXT4-fs error (device loop2): mb_free_blocks:2017: group 0, inode 19: block 145:freeing already freed block (bit 9); block bitmap corrupt. [ 1054.463753][ T29] kauditd_printk_skb: 87 callbacks suppressed [ 1054.463773][ T29] audit: type=1326 audit(1760605995.110:162302): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16943 comm="syz.2.14986" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f09a7f1eec9 code=0x7ffc0000 [ 1054.497187][ T29] audit: type=1326 audit(1760605995.150:162303): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16943 comm="syz.2.14986" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f09a7f1eec9 code=0x7ffc0000 [ 1054.521203][ T29] audit: type=1326 audit(1760605995.150:162304): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16943 comm="syz.2.14986" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f09a7f1eec9 code=0x7ffc0000 [ 1054.545091][ T29] audit: type=1326 audit(1760605995.150:162305): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16943 comm="syz.2.14986" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f09a7f1eec9 code=0x7ffc0000 [ 1054.569151][ T29] audit: type=1326 audit(1760605995.150:162306): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16943 comm="syz.2.14986" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f09a7f1eec9 code=0x7ffc0000 [ 1054.593197][ T29] audit: type=1326 audit(1760605995.150:162307): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16943 comm="syz.2.14986" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f09a7f1eec9 code=0x7ffc0000 [ 1054.617057][ T29] audit: type=1326 audit(1760605995.150:162308): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16943 comm="syz.2.14986" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f09a7f1eec9 code=0x7ffc0000 [ 1054.641046][ T29] audit: type=1326 audit(1760605995.150:162309): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16943 comm="syz.2.14986" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f09a7f1eec9 code=0x7ffc0000 [ 1054.665114][ T29] audit: type=1326 audit(1760605995.150:162310): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16943 comm="syz.2.14986" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f09a7f1eec9 code=0x7ffc0000 [ 1054.688920][ T29] audit: type=1326 audit(1760605995.150:162311): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16943 comm="syz.2.14986" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f09a7f1eec9 code=0x7ffc0000 [ 1054.721674][T16944] netlink: 12 bytes leftover after parsing attributes in process `syz.2.14986'. [ 1054.884648][T16995] loop7: detected capacity change from 0 to 512 [ 1054.913979][T16995] ext4 filesystem being mounted at /513/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1055.362954][T17064] loop5: detected capacity change from 0 to 2048 [ 1055.381686][T17067] loop2: detected capacity change from 0 to 2048 [ 1055.447569][T17082] loop2: detected capacity change from 0 to 2048 [ 1055.564633][T17104] loop2: detected capacity change from 0 to 1024 [ 1055.574499][T17104] EXT4-fs: Ignoring removed orlov option [ 1055.594689][T17104] EXT4-fs error (device loop2): mb_free_blocks:2017: group 0, inode 19: block 145:freeing already freed block (bit 9); block bitmap corrupt. [ 1055.639001][T17114] loop2: detected capacity change from 0 to 512 [ 1055.654109][T17114] ext4 filesystem being mounted at /548/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1055.830343][T24731] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 1055.836532][ T3541] Bluetooth: hci0: command 0x1003 tx timeout [ 1055.939160][T17127] loop7: detected capacity change from 0 to 512 [ 1055.952269][T17127] ext4 filesystem being mounted at /516/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1056.223177][ T4822] Bluetooth: hci0: Frame reassembly failed (-84) [ 1056.326218][T17142] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1056.362976][T17142] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1056.376147][T17144] loop9: detected capacity change from 0 to 2048 [ 1056.378402][T17145] bridge0: port 4(gretap0) entered blocking state [ 1056.389115][T17145] bridge0: port 4(gretap0) entered disabled state [ 1056.396293][T17145] gretap0: entered allmulticast mode [ 1056.403088][T17145] gretap0: entered promiscuous mode [ 1056.410627][T17142] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1056.456774][T17150] vlan1: entered promiscuous mode [ 1056.461922][T17150] bridge0: entered promiscuous mode [ 1056.473132][T17142] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1056.530031][ T4822] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1056.542601][ T4822] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1056.551066][T17150] loop5: detected capacity change from 0 to 2048 [ 1056.559171][ T4822] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1056.567670][ T4822] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1056.584031][T17150] EXT4-fs (loop5): failed to initialize system zone (-117) [ 1056.595878][T17150] EXT4-fs (loop5): mount failed [ 1056.616265][T17160] loop3: detected capacity change from 0 to 512 [ 1056.643398][T17160] ext4 filesystem being mounted at /557/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1056.668288][T17164] loop2: detected capacity change from 0 to 2048 [ 1056.678950][T17166] loop5: detected capacity change from 0 to 512 [ 1056.693312][T17166] ext4 filesystem being mounted at /66/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1056.779368][T17178] loop2: detected capacity change from 0 to 1024 [ 1056.799779][T17178] EXT4-fs: Ignoring removed orlov option [ 1056.818399][T17178] EXT4-fs error (device loop2): mb_free_blocks:2017: group 0, inode 19: block 145:freeing already freed block (bit 9); block bitmap corrupt. [ 1057.068863][T17203] loop5: detected capacity change from 0 to 512 [ 1057.082577][T17203] ext4 filesystem being mounted at /71/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1057.654603][T17229] loop5: detected capacity change from 0 to 2048 [ 1057.692331][T17229] Alternate GPT is invalid, using primary GPT. [ 1057.698810][T17229] loop5: p1 p2 p3 [ 1057.747737][T17233] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1057.790081][T17238] netlink: 108 bytes leftover after parsing attributes in process `syz.3.15041'. [ 1057.799313][T17238] netlink: 108 bytes leftover after parsing attributes in process `syz.3.15041'. [ 1057.810242][T17238] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1057.820348][T17233] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1057.834973][T17239] tipc: Enabled bearer , priority 0 [ 1057.846328][T17239] tipc: Disabling bearer [ 1057.892038][T17233] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1057.952174][T17247] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1057.987662][T17233] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1058.004119][T17253] loop5: detected capacity change from 0 to 512 [ 1058.013754][T17247] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1058.022757][T17253] ext4 filesystem being mounted at /83/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1058.074249][ T4799] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1058.093631][T17247] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1058.113303][ T4799] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1058.121836][ T4799] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1058.149153][ T4799] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1058.159731][T17247] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1058.230796][ T3541] Bluetooth: hci0: command 0x1003 tx timeout [ 1058.236909][T24731] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 1058.246705][T17278] loop2: detected capacity change from 0 to 2048 [ 1058.301241][T17278] Alternate GPT is invalid, using primary GPT. [ 1058.307729][T17278] loop2: p1 p2 p3 [ 1058.503615][T17302] loop9: detected capacity change from 0 to 512 [ 1058.532326][T17302] ext4 filesystem being mounted at /26/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1058.604616][T17306] loop9: detected capacity change from 0 to 2048 [ 1058.863242][T17329] loop7: detected capacity change from 0 to 1024 [ 1058.873812][T17329] EXT4-fs: Ignoring removed orlov option [ 1058.897613][T17329] EXT4-fs error (device loop7): mb_free_blocks:2017: group 0, inode 19: block 145:freeing already freed block (bit 9); block bitmap corrupt. [ 1059.501623][T17344] netlink: 108 bytes leftover after parsing attributes in process `syz.2.15077'. [ 1059.510913][T17344] netlink: 108 bytes leftover after parsing attributes in process `syz.2.15077'. [ 1059.531595][T17344] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1059.568683][T17350] loop9: detected capacity change from 0 to 2048 [ 1059.580582][ T4812] Bluetooth: hci0: Frame reassembly failed (-84) [ 1059.659901][T17361] loop9: detected capacity change from 0 to 512 [ 1059.672407][T17361] ext4 filesystem being mounted at /32/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1059.691197][ T4799] Bluetooth: hci1: Frame reassembly failed (-84) [ 1059.741573][T17371] netdevsim netdevsim9 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1059.798956][T17373] bridge0: port 3(gretap0) entered blocking state [ 1059.805629][T17373] bridge0: port 3(gretap0) entered disabled state [ 1059.812698][T17373] gretap0: entered allmulticast mode [ 1059.818758][T17373] gretap0: entered promiscuous mode [ 1059.824617][T17373] bridge0: port 3(gretap0) entered blocking state [ 1059.827249][T17375] loop7: detected capacity change from 0 to 1024 [ 1059.831117][T17373] bridge0: port 3(gretap0) entered forwarding state [ 1059.835374][T17373] gretap0: left allmulticast mode [ 1059.849318][T17373] gretap0: left promiscuous mode [ 1059.854548][T17373] bridge0: port 3(gretap0) entered disabled state [ 1059.861008][T17375] EXT4-fs: Ignoring removed orlov option [ 1059.873082][T17371] netdevsim netdevsim9 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1059.879833][T17375] EXT4-fs error (device loop7): mb_free_blocks:2017: group 0, inode 19: block 145:freeing already freed block (bit 9); block bitmap corrupt. [ 1059.925254][T17379] loop7: detected capacity change from 0 to 512 [ 1059.935465][T17371] netdevsim netdevsim9 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1059.942876][T17379] ext4 filesystem being mounted at /523/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1059.994063][T17371] netdevsim netdevsim9 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1060.044437][ T4812] netdevsim netdevsim9 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1060.056343][ T4812] netdevsim netdevsim9 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1060.064650][ T29] kauditd_printk_skb: 194 callbacks suppressed [ 1060.064668][ T29] audit: type=1400 audit(1760606000.700:162506): avc: denied { write } for pid=17384 comm="syz.7.15092" path="socket:[202695]" dev="sockfs" ino=202695 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 1060.071294][ T4812] netdevsim netdevsim9 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1060.107358][ T4812] netdevsim netdevsim9 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1060.171657][ T6376] hid_parser_main: 19 callbacks suppressed [ 1060.171677][ T6376] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 1060.187966][ T6376] hid-generic 0000:0000:0000.000A: hidraw0: HID v0.00 Device [syz1] on syz0 [ 1060.236068][ T29] audit: type=1326 audit(1760606000.880:162507): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17399 comm="syz.9.15099" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd20164eec9 code=0x7ffc0000 [ 1060.249650][T17400] loop9: detected capacity change from 0 to 2048 [ 1060.266866][ T29] audit: type=1326 audit(1760606000.880:162508): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17399 comm="syz.9.15099" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd20164eec9 code=0x7ffc0000 [ 1060.290907][ T29] audit: type=1326 audit(1760606000.880:162509): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17399 comm="syz.9.15099" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd20164eec9 code=0x7ffc0000 [ 1060.314881][ T29] audit: type=1326 audit(1760606000.880:162510): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17399 comm="syz.9.15099" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd20164eec9 code=0x7ffc0000 [ 1060.338682][ T29] audit: type=1326 audit(1760606000.880:162511): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17399 comm="syz.9.15099" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd20164eec9 code=0x7ffc0000 [ 1060.362495][ T29] audit: type=1326 audit(1760606000.880:162512): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17399 comm="syz.9.15099" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd20164eec9 code=0x7ffc0000 [ 1060.386521][ T29] audit: type=1326 audit(1760606000.880:162513): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17399 comm="syz.9.15099" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd20164eec9 code=0x7ffc0000 [ 1060.410516][ T29] audit: type=1326 audit(1760606000.880:162514): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17399 comm="syz.9.15099" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7fd20164eec9 code=0x7ffc0000 [ 1060.434535][ T29] audit: type=1326 audit(1760606000.880:162515): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17399 comm="syz.9.15099" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7fd20164ef03 code=0x7ffc0000 [ 1060.481188][T17400] Alternate GPT is invalid, using primary GPT. [ 1060.487524][T17400] loop9: p1 p2 p3 [ 1060.515824][ T4812] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1060.527444][ T4812] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1060.538599][ T4812] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1060.549397][ T4812] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1060.576272][T17404] loop3: detected capacity change from 0 to 512 [ 1060.592201][T17404] ext4 filesystem being mounted at /563/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1060.696301][T17413] loop7: detected capacity change from 0 to 2048 [ 1060.707415][T17415] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1060.731248][T17413] Alternate GPT is invalid, using primary GPT. [ 1060.737657][T17413] loop7: p1 p2 p3 [ 1060.757981][T17418] gretap0: left allmulticast mode [ 1060.763286][T17418] gretap0: left promiscuous mode [ 1060.763396][T17417] loop9: detected capacity change from 0 to 512 [ 1060.768505][T17418] bridge0: port 4(gretap0) entered disabled state [ 1060.793160][T17417] ext4 filesystem being mounted at /39/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1060.805898][T17415] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1060.842162][T17415] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1060.882486][T17415] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1060.895223][T17428] loop9: detected capacity change from 0 to 1024 [ 1060.902092][T17428] EXT4-fs: Ignoring removed orlov option [ 1060.913645][T17428] EXT4-fs error (device loop9): mb_free_blocks:2017: group 0, inode 19: block 145:freeing already freed block (bit 9); block bitmap corrupt. [ 1060.994137][T17437] loop9: detected capacity change from 0 to 2048 [ 1061.042123][T17437] Alternate GPT is invalid, using primary GPT. [ 1061.048552][T17437] loop9: p1 p2 p3 [ 1061.076794][T17445] loop7: detected capacity change from 0 to 512 [ 1061.102588][T17445] ext4 filesystem being mounted at /533/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1061.205310][T17453] loop7: detected capacity change from 0 to 2048 [ 1061.251171][T17453] Alternate GPT is invalid, using primary GPT. [ 1061.257527][T17453] loop7: p1 p2 p3 [ 1061.349967][T17459] loop9: detected capacity change from 0 to 512 [ 1061.362880][T17459] ext4 filesystem being mounted at /47/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1061.440192][T17465] loop9: detected capacity change from 0 to 2048 [ 1061.485047][T17469] loop9: detected capacity change from 0 to 1024 [ 1061.492158][T17469] EXT4-fs: Ignoring removed orlov option [ 1061.503518][T17469] EXT4-fs error (device loop9): mb_free_blocks:2017: group 0, inode 19: block 145:freeing already freed block (bit 9); block bitmap corrupt. [ 1061.590325][T24731] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 1061.590757][ T1917] Bluetooth: hci0: command 0x1003 tx timeout [ 1061.663886][T17491] vlan3: entered promiscuous mode [ 1061.668983][T17491] bridge0: entered promiscuous mode [ 1061.690206][T17491] loop7: detected capacity change from 0 to 2048 [ 1061.712974][T17495] loop9: detected capacity change from 0 to 512 [ 1061.713742][T17491] EXT4-fs (loop7): failed to initialize system zone (-117) [ 1061.722682][T17495] ext4 filesystem being mounted at /56/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1061.726629][T17491] EXT4-fs (loop7): mount failed [ 1061.750333][ T3541] Bluetooth: hci1: Opcode 0x1003 failed: -110 [ 1061.828406][T17503] loop9: detected capacity change from 0 to 2048 [ 1061.871011][T17503] Alternate GPT is invalid, using primary GPT. [ 1061.877387][T17503] loop9: p1 p2 p3 [ 1061.881973][T17501] loop7: detected capacity change from 0 to 1024 [ 1062.017179][T17501] ================================================================== [ 1062.025334][T17501] BUG: KCSAN: data-race in filemap_read / filemap_read [ 1062.032304][T17501] [ 1062.034652][T17501] read to 0xffff888103ed40a8 of 8 bytes by task 17506 on cpu 0: [ 1062.042298][T17501] filemap_read+0x6f/0xa00 [ 1062.046738][T17501] generic_file_read_iter+0x79/0x330 [ 1062.052034][T17501] ext4_file_read_iter+0x1cc/0x290 [ 1062.057166][T17501] copy_splice_read+0x442/0x660 [ 1062.062037][T17501] splice_direct_to_actor+0x290/0x680 [ 1062.067414][T17501] do_splice_direct+0xda/0x150 [ 1062.072236][T17501] do_sendfile+0x380/0x650 [ 1062.076692][T17501] __x64_sys_sendfile64+0x105/0x150 [ 1062.081911][T17501] x64_sys_call+0x2bb4/0x3000 [ 1062.086614][T17501] do_syscall_64+0xd2/0x200 [ 1062.091151][T17501] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1062.097045][T17501] [ 1062.099367][T17501] write to 0xffff888103ed40a8 of 8 bytes by task 17501 on cpu 1: [ 1062.107095][T17501] filemap_read+0x974/0xa00 [ 1062.111615][T17501] generic_file_read_iter+0x79/0x330 [ 1062.116921][T17501] ext4_file_read_iter+0x1cc/0x290 [ 1062.122057][T17501] copy_splice_read+0x442/0x660 [ 1062.126925][T17501] splice_direct_to_actor+0x290/0x680 [ 1062.132318][T17501] do_splice_direct+0xda/0x150 [ 1062.137092][T17501] do_sendfile+0x380/0x650 [ 1062.141534][T17501] __x64_sys_sendfile64+0x105/0x150 [ 1062.146843][T17501] x64_sys_call+0x2bb4/0x3000 [ 1062.151534][T17501] do_syscall_64+0xd2/0x200 [ 1062.156054][T17501] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1062.161957][T17501] [ 1062.164282][T17501] value changed: 0x00000000000002ed -> 0x00000000000002ee [ 1062.171394][T17501] [ 1062.173717][T17501] Reported by Kernel Concurrency Sanitizer on: [ 1062.179889][T17501] CPU: 1 UID: 0 PID: 17501 Comm: syz.7.15133 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 1062.191356][T17501] Tainted: [W]=WARN [ 1062.195158][T17501] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 1062.205223][T17501] ================================================================== [ 1063.350391][ C0] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 1064.475598][ T4842] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1064.486410][ T4842] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1064.497620][ T4842] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1064.509154][ T4842] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0