last executing test programs: 31.567123785s ago: executing program 4 (id=565): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000340), 0x0) (async) futex(&(0x7f000000cffc), 0x80000000000b, 0x0, 0x0, &(0x7f0000048000), 0x0) (async) r1 = socket$inet6(0xa, 0x5, 0x0) setsockopt$inet_int(r1, 0x0, 0x14, &(0x7f0000000340)=0xfffffffffffffff9, 0x4) (async) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000700)=[@in={0x2, 0x4e21, @broadcast}, @in6={0xa, 0x4e21, 0x4d, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x5}, @in={0x2, 0x4e63, @empty}], 0x3c) (async) futex(&(0x7f000000cffc)=0x4, 0x10b, 0x4, 0x0, &(0x7f0000048000), 0x0) (async) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) (async) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000000000000000000000000000000000000000000fad4c98d00408b37f2633a176f55e97693d8032718"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1b, 0x10, &(0x7f0000000a00)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000041000003ef5abe3179b8859bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r3, @ANYBLOB="0000000000000000b703ff0008000000850095000000000000a7000000000000e7a92025cf0468484b88bf2a7348d2177244ab389c70e4b75fb3f9138854f6c1d5be0fa62b5bcb4e58ccf5590a3a105ddf371636a1abb7d716383dfcec4ba861a53101fcbd954684dc5b2196932ddfcdffbf305eb83ee0ecb899ea6547658db8533058d31a319a93b85e32f46dbdcdde69a7591dec77f408b65c8b8f76b325c5afec8a4e0513cbd38a5e2af3b304fd4b0cc6a747d82187064d714099dee77b11d7b5"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xeb48195b69e85694, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000840)=ANY=[@ANYRESDEC=r2, @ANYRESOCT=r0, @ANYRES64, @ANYBLOB="d7587ecbcd29c57e026325c1c3661b8e97ddac2d4c1053fee876e1245a35cacc7c1379d6f54049d7c841dec7e642120f3c503c4e7f1e", @ANYRESDEC=r0, @ANYRES64=r0, @ANYRESHEX=r4, @ANYBLOB="5344e8ee5e3764221e89dd6a059a574c02c3b91f8c00d2dc06cffaec6d2959effb45375344c8833d4558b02e77567b2cba694b8f0a63c8404f6113c2f0fa8872e9c331c67c5f5d936ed174c6c153e177dccce09c9807e642b64a573dd881657f5de5978869fc7f0bbfc8d01bcb6dbf01c6dab6bb7f88b09269727463ca9349564d3bed9a4fae18f9e77145a79355086840a2d7478930cf1751a6419c3de687c51fa741cc364acf8fbb6ec01aaa650de1ff340aa6d7dbf22d05e6492d41a9ec38d2e441f4bddb1eb4fd8b0fff451212c280"], &(0x7f0000000600)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kfree\x00', r5, 0x0, 0x5}, 0x18) (async) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$NS_GET_USERNS(r0, 0xb701, 0x0) sendmsg$IPSET_CMD_CREATE(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="5c0000000206030000000000008000000000000005000100070000000900020073797a30000000001400078008001240000000000500150004000000050005000000000005000400000000000d000300686173683a6d6163"], 0x5c}}, 0x0) (async) sendmsg$IPSET_CMD_ADD(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000780)=ANY=[@ANYRES32=r2], 0x44}, 0x1, 0x0, 0x0, 0x48814}, 0x44000) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) mmap(&(0x7f000013c000/0x1000)=nil, 0x1000, 0x3, 0x110, 0xffffffffffffffff, 0x1000) (async) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002010000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r8}, 0x10) remap_file_pages(&(0x7f00005fd000/0x4000)=nil, 0x4000, 0x0, 0x5, 0x20000) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x6f}, 0x94) (async) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907001175f37538e486dd630080fc00082c00db5b6861589bcfe8875a060300000023000000000000000000000000ac1414aa33"], 0xfdef) r9 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r9, 0x5, 0x1, 0x0, &(0x7f00000005c0)='%', 0x0, 0x4, 0x80040000, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x2}, 0x50) (async) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000b40)=ANY=[@ANYRES32=r3, @ANYRES32=r4, @ANYBLOB="1e0000001000000000000000", @ANYRES32=r4, @ANYBLOB="c854a6bb2533606d40b5f6a23a3fdec7c91d059d5ef85ec4cc92066a2f1fb09854b42650710824ae3570335686e05a6bc1f3d207d2a48774bdc32525d32aeeeb30a0aa08abe759e34d5dd645195ab5260c54f7df80cf53c40007be26c858bf709e2f", @ANYRES64=0x0], 0x20) (async) sendmsg$IPSET_CMD_DESTROY(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000280)=ANY=[@ANYBLOB="28000000030605000000000000000000000000000500010007"], 0x28}, 0x1, 0x0, 0x0, 0x80}, 0x8000) futex(&(0x7f000000cffc), 0xc, 0x1, &(0x7f0000000300)={0x0, 0x989680}, &(0x7f00000003c0)=0x2, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000001c0)={0xfffffffc, 0x5, 0x0, 'queue0\x00', 0x10000}) 31.517382996s ago: executing program 4 (id=566): syz_mount_image$vfat(&(0x7f0000000140), &(0x7f0000000200)='./file0\x00', 0x800, &(0x7f0000000340)=ANY=[@ANYRES32=0x0, @ANYRESOCT, @ANYRES64, @ANYRES16], 0x1, 0x36e, &(0x7f0000000c00)="$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") r0 = creat(0x0, 0x0) open(&(0x7f0000000780)='./bus\x00', 0x14507e, 0x0) fallocate(r0, 0x0, 0x0, 0x1000f4) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000180), 0x10000, 0x0) gettid() epoll_create1(0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB, @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x3, &(0x7f0000000200)=@framed, &(0x7f00000003c0)='GPL\x00'}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000140)='contention_end\x00', r2}, 0x10) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff, 0x4}, 0x0, 0x0) ioctl$EVIOCGRAB(0xffffffffffffffff, 0x40044590, &(0x7f0000000200)=0x7ffffffc) r3 = socket$inet6(0xa, 0x80002, 0x88) bind$inet6(r3, &(0x7f0000000000)={0xa, 0x10000000004e20, 0x0, @mcast2, 0x6}, 0x1c) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, 0x0, 0x0) r4 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TCSETAW(r4, 0x5407, &(0x7f0000000200)={0x5, 0x6, 0x54c0, 0x4, 0x16, "030e7fc99f4da288"}) r5 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r5, &(0x7f0000000240)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x1a}}, 0x10) prlimit64(0x0, 0xe, 0x0, 0x0) sendmmsg$inet(r5, &(0x7f0000000b40)=[{{&(0x7f0000000680)={0x2, 0x4e22, @multicast2}, 0x10, 0x0}}, {{0x0, 0x0, &(0x7f0000000d00)=[{&(0x7f0000000180)="041559aa792e99", 0x7}], 0x1}}], 0x2, 0xc044) r6 = socket(0x11, 0x2, 0x10001) ioctl$sock_SIOCETHTOOL(r6, 0x8946, &(0x7f0000000040)={'team0\x00', &(0x7f0000000080)=@ethtool_sfeatures={0x3b, 0x2, [{0x3f1, 0x6}, {0x10007, 0x30000080}]}}) setsockopt$inet6_udp_int(r3, 0x11, 0xb, &(0x7f0000000100)=0xfff, 0x4) setsockopt$inet6_udp_encap(r3, 0x11, 0x64, &(0x7f0000000080)=0x3, 0x4) syz_emit_ethernet(0x83, &(0x7f0000000040)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaf9ff030486dd601b8b97004d88c19e9ace5ffb2e9fc603dd282100000002ff02000000000000000000000000000104004e200023b0"], 0x0) close(0xffffffffffffffff) 30.525327557s ago: executing program 4 (id=606): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x20, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2, 0x0, 0x7fff}, 0x18) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{r0}, &(0x7f0000000200), &(0x7f0000000240)=r1}, 0x20) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x40000, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1e0000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000040)=0x2) readv(r3, &(0x7f0000000000)=[{&(0x7f0000000440)=""/244, 0xf4}], 0x1) ioctl$TIOCVHANGUP(r3, 0x5437, 0x0) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000540)={0x118, 0x13, 0xb, 0x401, 0x70bd28, 0x25dfdbfc, {0x0, 0x0, 0x3}, [@typed={0x14, 0x118, 0x0, 0x0, @ipv6=@ipv4={'\x00', '\xff\xff', @multicast2}}, @generic="8f5b543314db3566da6ecfdd6d6f9b7906c30a68af5cfb5abc9181baca7866299ee9e5f7665866969ffd590400ee7389b0887db97607ef5ff078c1287d7c01365a84e75a8f282f1b1d1a0f0625757d4de05037f79a4d5b6542018deeca51613c648f4382b2159879aacc7d03bd2b40fcf13c9f00b0ed70d3abcce5cee6d022dc7f01899e338ddeb9ed33b3102724b40bca12866e4449e181590e1608331a205ee7eb1aabef4abde386643afc1c71a455ed6acdbc9e9cf28b6429e2bd31039f8f034f97feef340e77a5326348e3e0c7777db1b45e01c2c6541e5084e01ae8a86e1bdc60179b8bc05cd76cdb451f21c0"]}, 0x118}}, 0x0) 30.394010599s ago: executing program 4 (id=611): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000004018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000090000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x100006, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000880)=ANY=[@ANYBLOB="0b00000005000000010001000800000001000000", @ANYRES32, @ANYBLOB='\b\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="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"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mount$bind(&(0x7f0000000040)='.\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x2a05004, 0x0) chroot(&(0x7f0000000100)='./file0\x00') mount$bind(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x3a95004, 0x0) pivot_root(&(0x7f0000000240)='./file0\x00', &(0x7f0000000000)='./file0/../file0\x00') sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000000400)={0x0, @in={{0x2, 0x4e22, @empty}}, 0x3fe, 0xbffc, 0xe652, 0x2, 0x4, 0x8, 0xff}, 0x9c) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = syz_io_uring_setup(0x88f, &(0x7f00000004c0)={0x0, 0xaee2, 0x0, 0x10000002, 0xbfdfffdc}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r7, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r7, r8, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) io_uring_enter(r6, 0x75fa, 0xe475, 0x0, 0x0, 0x0) r9 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000040)=0xffffffffffffffff, 0x4) r10 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000380)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x4, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x2}, 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000640)={0x6, 0x2e, &(0x7f00000004c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, {{0x18, 0x1, 0x1, 0x0, 0x1}}, {}, [@kfunc={0x85, 0x0, 0x2, 0x0, 0x4}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x8}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r2}}, @initr0={0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x4}, @jmp={0x5, 0x1, 0x7, 0x0, 0x2, 0x30, 0xfffffffffffffff0}, @map_fd={0x18, 0x7, 0x1, 0x0, r2}, @map_idx={0x18, 0x7, 0x5, 0x0, 0x9}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x8}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}, @alu={0x4, 0x0, 0x8, 0x1, 0x4, 0x40, 0xfffffffffffffffc}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000000)='GPL\x00', 0x3, 0x1000, &(0x7f0000000f80)=""/4096, 0x40f00, 0x4d, '\x00', 0x0, 0x25, r9, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000140)={0x4, 0xf, 0xfff, 0x9}, 0x10, 0x0, 0x0, 0x1, &(0x7f0000000180)=[r10, r2], &(0x7f0000000400)=[{0x2, 0x8, 0x3, 0x1}], 0x10, 0xb684}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r3}, 0x10) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=@dellink={0x20, 0x11, 0x1, 0x70bd2c, 0x25dfdc00, {0x0, 0x0, 0x0, r11, 0xc0a742c700a80d57, 0x25aa6}}, 0x20}}, 0x2000e844) 29.476425647s ago: executing program 4 (id=633): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002010000850000004300000095"], 0x0, 0x400000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) r2 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, 0x0) r3 = socket(0x400000000010, 0x3, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, 0x0}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000006500)=@deltfilter={0x3a08, 0x2d, 0x3, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x10, 0x9}, {0x6, 0xa}, {0xb, 0xf}}, [@TCA_CHAIN={0x8, 0xb, 0xfff}, @filter_kind_options=@f_fw={{0x7}, {0x2e74, 0x2, [@TCA_FW_ACT={0x2e44, 0x4, [@m_ct={0x100, 0x7, 0x0, 0x0, {{0x7}, {0x78, 0x2, 0x0, 0x1, [@TCA_CT_LABELS_MASK={0x14, 0x8, "24b815b5568a8e796934aff5fddab816"}, @TCA_CT_PARMS={0x18, 0x1, {0xff, 0xeca, 0x6, 0x6, 0xe}}, @TCA_CT_ZONE={0x6, 0x4, 0xe}, @TCA_CT_NAT_IPV6_MAX={0x14, 0xc, @mcast2}, @TCA_CT_NAT_IPV4_MIN={0x8, 0x9, @broadcast}, @TCA_CT_ACTION={0x6, 0x3, 0x28}, @TCA_CT_MARK_MASK={0x8, 0x6, 0x1d}, @TCA_CT_LABELS={0x14, 0x7, "a971f9a8e735f4ccfdc835440ac74dc9"}]}, {0x63, 0x6, "58a533e2d62c075bd34f8a7dc9ff47ef3420ebd21ff931bc28c1fbad3656d281ee60298656299ee55065b79bce15f989456c380ca447fbc7c9f48c9add3c183fb10999fac52ed25f98b209c135c9c5a22b50e754326fa1262f396e8b36222c"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x1, 0x1}}}}, @m_tunnel_key={0x100, 0x8, 0x0, 0x0, {{0xf}, {0x2c, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_ENC_DST_PORT={0x6, 0x9, 0x4e22}, @TCA_TUNNEL_KEY_ENC_DST_PORT={0x6, 0x9, 0x4e24}, @TCA_TUNNEL_KEY_ENC_KEY_ID={0x8, 0x7, 0x4}, @TCA_TUNNEL_KEY_ENC_IPV4_DST={0x8, 0x4, @initdev={0xac, 0x1e, 0x1, 0x0}}, @TCA_TUNNEL_KEY_ENC_DST_PORT={0x6, 0x9, 0x4e23}]}, {0xa6, 0x6, "dd9b55c9c0b48d54ca91e5abbe0d34d6997144d5b41726f8561758407be4b15f73c8f462b31ae03197a74571ef28bcc73dc0c23279c9e412f02b59c453adc16cf3bb824c6f9c25ce82484577b7ef5955774340ee64c650515f5b17d5c042108fe35be7389aabcfa8e7a44668037eb140dfb5077543dc616e18f620899944a711d34795fc5bbbe11310a538a5bed67388fa6f91a4ac34eb6b9bbd3e83bc8366185992"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x5, 0x2}}}}, @m_sample={0x1048, 0x9, 0x0, 0x0, {{0xb}, {0x1c, 0x2, 0x0, 0x1, [@TCA_SAMPLE_RATE={0x8, 0x3, 0x9}, @TCA_SAMPLE_RATE={0x8, 0x3, 0x7}, @TCA_SAMPLE_PSAMPLE_GROUP={0x8}]}, {0x1004, 0x6, "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"}, {0xc}, {0xc, 0x8, {0x1, 0x1}}}}, @m_ife={0xd4, 0x7, 0x0, 0x0, {{0x8}, {0x68, 0x2, 0x0, 0x1, [@TCA_IFE_METALST={0x4}, @TCA_IFE_TYPE={0x6, 0x5, 0x2}, @TCA_IFE_METALST={0x44, 0x6, [@IFE_META_SKBMARK={0x8, 0x1, @val=0x400}, @IFE_META_SKBMARK={0x4, 0x1, @void}, @IFE_META_TCINDEX={0x6, 0x5, @val=0x40}, @IFE_META_PRIO={0x8, 0x3, @val=0x101}, @IFE_META_PRIO={0x8, 0x3, @val=0xe}, @IFE_META_TCINDEX={0x4, 0x5, @void}, @IFE_META_TCINDEX={0x6, 0x5, @val=0x7}, @IFE_META_TCINDEX={0x4, 0x5, @void}, @IFE_META_TCINDEX={0x4, 0x5, @void}, @IFE_META_SKBMARK={0x8, 0x1, @val=0x8b6}]}, @TCA_IFE_TYPE={0x6, 0x5, 0x5}, @TCA_IFE_SMAC={0xa, 0x4, @broadcast}]}, {0x45, 0x6, "2394660bde858161767359aa1d81e7ed0af70467682e7496fb4f1c316f404583c0419150be0143d42c2f3a456030ba87ea21849a316bdc1573734e4e325b6e6440"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x2, 0x2}}}}, @m_mpls={0x144, 0x14, 0x0, 0x0, {{0x9}, {0x7c, 0x2, 0x0, 0x1, [@TCA_MPLS_PARMS={0x1c, 0x2, {{0x0, 0x8, 0xffffffffffffffff, 0x4, 0x3}, 0x4}}, @TCA_MPLS_BOS={0x5}, @TCA_MPLS_LABEL={0x8, 0x5, 0xfe1d0}, @TCA_MPLS_TTL={0x5, 0x7, 0x9}, @TCA_MPLS_PARMS={0x1c, 0x2, {{0x1, 0x1, 0xffffffffffffffff, 0x0, 0x3}, 0x1}}, @TCA_MPLS_TTL={0x5, 0x7, 0x81}, @TCA_MPLS_LABEL={0x8, 0x5, 0x8d10a}, @TCA_MPLS_LABEL={0x8, 0x5, 0x4703}, @TCA_MPLS_TTL={0x5, 0x7, 0xca}, @TCA_MPLS_PROTO={0x6, 0x4, 0x9100}]}, {0x9e, 0x6, "5f1a21b1dd20671f1d80f6fe32290acfe5d4e5f8062b67a27fbdf7047becd0faf05c70431061afdf8d51cccf162b174ea440f22173d9909f6b01165845c131abd001b36cc2ec2e59da1471bfc6e20566af718bcb3474824f2f83aa50b26b00d443dd5f0ad729ed20c7e5dfac090a96dc64003e332037fce683769b3ebf88aea296e36c623c81fe82c5a7f0a1fb250a695354592dc5b57fecf9cc"}, {0xc}, {0xc, 0x8, {0x3, 0x3}}}}, @m_police={0x19e0, 0x10, 0x0, 0x0, {{0xb}, {0x1904, 0x2, 0x0, 0x1, [[@TCA_POLICE_RESULT={0x8, 0x5, 0x1000}], [@TCA_POLICE_RESULT={0x8, 0x5, 0x10}, @TCA_POLICE_RATE64={0xc, 0x8, 0x6}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x3}, @TCA_POLICE_TBF={0x3c, 0x1, {0x6e, 0x6, 0x8, 0x3, 0x6, {0x6, 0x1, 0x6, 0x9, 0x3dbd, 0x9}, {0xf9, 0x1, 0x4, 0x5, 0x2, 0x8}, 0xc1d, 0xfffffffc, 0x5}}], [@TCA_POLICE_AVRATE={0x8, 0x4, 0x7}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x1000, 0x7, 0xfffffff7, 0x3, 0x101, 0x7ff, 0x81, 0x1, 0xfff, 0xd, 0x10, 0x2, 0xa, 0x403e, 0xa, 0x0, 0x8, 0xffff0000, 0x6, 0x5, 0x1000, 0x5, 0x3ff, 0xffffffff, 0x9, 0xeb, 0x3, 0x14ae, 0x1, 0x6, 0x6761, 0x81, 0x1b, 0x8, 0x4, 0x0, 0x5, 0x3, 0x6, 0x5e80, 0x0, 0x2, 0x9, 0x2, 0x70, 0x2, 0x9b9, 0x3, 0x400, 0x1, 0xf5f5, 0x80000001, 0x3, 0x3, 0x5, 0xff, 0x1, 0x4, 0x31d5, 0x8, 0x3, 0x58, 0x92, 0x9, 0xe, 0x4, 0x8d, 0xa5, 0x81, 0x3, 0x40, 0xb, 0x1, 0x5, 0x101, 0x6, 0x1ff, 0x3, 0x10000, 0x1, 0x400, 0x1, 0x2, 0x7fffffff, 0xfffffffe, 0x7, 0x0, 0xfffffff7, 0x6, 0xcd9, 0x1, 0x7d, 0x9, 0x5, 0x6, 0xffffff7f, 0x2, 0x0, 0x4, 0x7fffffff, 0xfffffffe, 0x9, 0xfffffffc, 0x7, 0x2, 0x3, 0x60000000, 0x2, 0x541d7f31, 0x8, 0xfffffffa, 0x7, 0x8, 0x8, 0x6, 0x3, 0x0, 0x101, 0x3, 0x3ff, 0x5, 0x7, 0xf7a4, 0x3, 0x1000, 0x1, 0x2f, 0x0, 0xa, 0x1, 0x6e9f, 0xfff, 0x912, 0x400, 0x1, 0xe, 0xfffff800, 0x1, 0xe, 0x8, 0xffffff47, 0xd, 0x8, 0x0, 0x4, 0x9, 0x3, 0x2, 0x80, 0x4, 0x944e, 0x81, 0x79000000, 0x100, 0xfffffffd, 0x8, 0x8, 0x2, 0x4, 0xffff, 0x2, 0x9, 0x6, 0xb, 0x3ff, 0xfffffffd, 0x8000, 0x9, 0x1ff, 0x2a0, 0xb, 0x8, 0x8, 0x7, 0x40000, 0x7, 0xffffffff, 0x6, 0x7, 0x10000, 0x1, 0x100, 0x72, 0x8, 0xffffffff, 0x81, 0xfa7, 0x5, 0x1, 0x10, 0x80, 0x6, 0x19ac09d4, 0x5, 0x9, 0x7, 0xb7b799d9, 0x4, 0x0, 0x6, 0x3ad, 0x26, 0x7, 0x4, 0x9, 0x570e, 0xffffffff, 0xe86d, 0x0, 0x9, 0x7fffffff, 0x3, 0x9, 0xb, 0x2, 0x4d88, 0x6, 0x6, 0xf66, 0xfffffffa, 0x0, 0x6, 0x3, 0x1, 0xb5, 0x0, 0x0, 0x4, 0x7ff, 0x2, 0x4, 0x6, 0x8319, 0x5, 0x3, 0x5, 0x6, 0x6, 0x101, 0x9, 0x6, 0x6, 0x4, 0xefffff00, 0x2, 0xfffffff4, 0x6, 0x1, 0x4, 0x4, 0xfffffd67, 0x3, 0x9, 0x3ff, 0x10, 0x8001]}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x6, 0x3, 0x5, 0x10000, 0x6, 0x5, 0x9, 0x80000001, 0x7, 0x5, 0x0, 0xc, 0x0, 0x3, 0xb, 0xfffff801, 0xffffffc0, 0x0, 0x80, 0xd5f0, 0x4, 0x80, 0x4, 0xd22, 0xffff, 0x8, 0x7, 0x0, 0x7, 0x3, 0x3, 0x2, 0xc21, 0xc030, 0x5, 0x6, 0x400, 0x9, 0x0, 0x10001, 0x7fff, 0x3, 0xa, 0x259, 0x8, 0x5, 0x6, 0x4, 0x2, 0x1, 0x7, 0x57ae754c, 0x3, 0x1bc6, 0x2, 0x3, 0x9, 0x1, 0x64d, 0xd43b, 0x7, 0x5, 0xb, 0x8, 0x2, 0xfffffff9, 0xa34f000, 0x81, 0x2, 0x2, 0x8, 0xa, 0xfffffffa, 0x6, 0x7, 0x2, 0x81, 0x2c6, 0xe443, 0x6df, 0x4, 0x1, 0x3, 0x0, 0x9, 0x6, 0x4, 0x14, 0x80000000, 0x7, 0x8dd, 0x7d, 0x1, 0x800, 0x269b, 0x800, 0x800, 0x1, 0xbca2, 0x8, 0x7bd, 0x2, 0x5, 0xd0d, 0x8, 0x9, 0x3, 0x6, 0x800, 0xfffffffb, 0x2, 0x5f, 0x8, 0x8, 0x3ff, 0xfffff4db, 0x5d7, 0x6, 0x4da, 0xf9, 0x7, 0xb, 0xfffffff9, 0x80, 0x3, 0x7f, 0xe49, 0x6, 0x5, 0xe5f7, 0x8, 0x2, 0xff, 0x7, 0x8, 0xf, 0x6, 0x7c5, 0xfffffff7, 0xebb, 0x7, 0x5, 0x4, 0x2, 0x7f, 0x7, 0x8fe, 0xcd, 0x7ff, 0x4, 0x1, 0x800, 0x2, 0x5, 0x4, 0x3, 0x7, 0x9, 0x5bc, 0x5, 0x2, 0x61df, 0x5, 0x6173, 0x3, 0xc, 0x4, 0x0, 0x0, 0x6, 0x8, 0x920, 0xd, 0x5, 0x830, 0x7f, 0x1ff, 0x5e9, 0x609f815c, 0x200, 0x3, 0x8, 0x7, 0xffff0001, 0x4, 0x4, 0x8, 0x4, 0x7, 0x3, 0x93, 0x9, 0x100, 0xfffffffd, 0x400, 0x5, 0x3ff, 0x0, 0x3, 0x2, 0xe4b, 0x1, 0xd0, 0x1000, 0x5, 0x2, 0x2, 0x0, 0xa8, 0xffff, 0xf, 0x0, 0x5, 0xcbb, 0x5fd8, 0x7, 0x6, 0xfffffff2, 0xff, 0x2, 0x100, 0x1000, 0x1ff, 0x401, 0x800, 0x6, 0xa, 0x8, 0x5, 0x0, 0x0, 0x7ff, 0x0, 0x3ff, 0x3, 0x401, 0x3, 0x1, 0x6, 0x9, 0x3fffc00, 0x1, 0x0, 0x4000, 0x5, 0x2, 0x3, 0x6, 0x2, 0x4, 0x4b, 0x5, 0x8, 0x3, 0x3, 0xfff]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x1, 0x4, 0x7, 0x800, 0x48, {0x0, 0x2, 0x9, 0xf, 0x2, 0x440}, {0x0, 0x2, 0x783, 0x7, 0x6, 0xfffffff9}, 0xdd, 0x1, 0x80000001}}], [@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x156, 0x6, 0x10001, 0x7, 0x1, 0x8, 0xfd3a, 0x80, 0xd659, 0x3, 0x8001, 0x1, 0x40, 0x101, 0x8, 0x4, 0x8, 0xf9, 0x5, 0x0, 0xd6e4, 0x5, 0x69, 0x0, 0xfffff800, 0x10, 0x25, 0x100, 0x0, 0x3, 0x3, 0x4, 0x80000000, 0x0, 0x9, 0x1, 0x8, 0x2bd, 0x7, 0x7, 0xfffffffb, 0xb4e, 0x4, 0x1, 0xff, 0x0, 0x3, 0x9, 0x52, 0x4, 0x401, 0x5, 0x1, 0x80000000, 0x6, 0x5, 0x1, 0x113, 0xb, 0x3, 0x8, 0x9, 0x7, 0x7, 0x8000, 0x3, 0x2a8d, 0x204000, 0x7fff, 0x4, 0x800, 0x16, 0x1000, 0x2, 0x8, 0x4, 0xd0, 0x1, 0xff, 0xdff, 0x1000000, 0xfffffe04, 0x6, 0x5, 0x7f, 0x0, 0x7f, 0x9, 0x0, 0x6, 0x6cec, 0xd, 0xe, 0x10, 0x18, 0x2ae2686d, 0xa5, 0xc3, 0x9, 0x9, 0xffff, 0x1, 0x9291, 0x3, 0x7ff, 0x3, 0x6, 0x1c, 0x1, 0x3, 0x3, 0x0, 0x1, 0xfffffffc, 0x1000, 0x3ff, 0x81, 0x7f, 0xa, 0x84c7, 0x0, 0x2, 0x8, 0xffff, 0x5, 0x1, 0x1, 0x6, 0x120, 0x3, 0x3, 0xd336, 0x2, 0x3, 0x8, 0xf5c, 0x438, 0xd30, 0x7, 0x6afc1a0a, 0x9, 0x3, 0x100, 0x91, 0x5, 0x1252, 0x0, 0x99e5, 0xfffffffa, 0x9, 0x80000000, 0x5, 0x3, 0x9, 0x5, 0x0, 0xe36, 0x6, 0x40, 0x400000, 0x3, 0xfffffffd, 0x9, 0x1, 0x8, 0x3, 0x8, 0xffffff01, 0x8, 0x1000, 0xff, 0xb8, 0x5, 0x4, 0x8, 0x8, 0x9, 0x280000, 0x187, 0x2, 0x5, 0xffff8001, 0x3, 0x4, 0xc6, 0x3ff, 0xffffffa4, 0x1, 0x5, 0xf3e, 0x0, 0xffff0000, 0x5, 0x4000, 0x2, 0x8, 0x2, 0x2, 0x4, 0xffffffff, 0x7f, 0x1, 0xfffffff7, 0x6, 0x10001, 0x8, 0x51d, 0x5b6, 0x0, 0x8, 0x181, 0x7, 0x9, 0xfffffff7, 0x5a, 0x6, 0x9, 0x8, 0x0, 0x7, 0x7, 0x4, 0x1, 0x8, 0x9, 0x6356, 0x9, 0x400, 0x1, 0x6, 0x2, 0x476b, 0x4, 0x3ff, 0x8, 0x7, 0xa, 0xe, 0x4, 0xc2d, 0xfffffffc, 0x9, 0x7, 0x9, 0x1, 0x6, 0x30, 0xe54, 0x4, 0x5, 0x10, 0x6, 0x8, 0x6, 0x80000001, 0x9]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x9, 0x20000000, 0x5, 0x4000, 0xffff, {0x3d, 0x0, 0x2, 0x8, 0x8, 0xfffffc01}, {0x0, 0x2, 0x0, 0x2618, 0x4, 0x4}, 0x3, 0x6, 0xfffff796}}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x0, 0xfffffff9, 0x80000000, 0x401, 0xffff, 0x5, 0x7, 0x7fffffff, 0x3196, 0x28, 0x4, 0x4, 0x2, 0x0, 0x5, 0x2, 0x1, 0xff, 0x7, 0x7, 0x5, 0x200, 0xfffffff8, 0x200, 0x7, 0x408, 0x80000001, 0xfffff4ce, 0x4, 0x6, 0x10001, 0x1, 0x2, 0xffffffff, 0x1ff, 0x6, 0x9, 0xe0000000, 0x1, 0xffff, 0x1, 0x8, 0x80000000, 0x6, 0x0, 0xc8f, 0x6, 0x8, 0x400, 0xc000000, 0x1, 0x100, 0x9, 0x8, 0x9, 0x5, 0x4, 0x7ff, 0x8, 0x9, 0x1, 0x1, 0x0, 0x2, 0x40, 0x101, 0x99, 0x3, 0x4, 0x2, 0x5, 0x643, 0x1, 0x0, 0x101, 0xe0000000, 0x4, 0xd, 0xc435, 0x0, 0xfe, 0x5, 0x8, 0x0, 0x9, 0x1, 0x4, 0x9, 0x1ff, 0x3, 0x6, 0xffffff69, 0x4b1d, 0x400, 0x401, 0x3, 0x8, 0x80, 0x9, 0x570c0c47, 0x17e3, 0x7fff, 0x9, 0x7, 0x5, 0x8353, 0x5, 0x4, 0x6, 0x2, 0xd90, 0x5, 0xfffffffc, 0x0, 0x8000, 0x81, 0x4, 0xff, 0x3, 0x5, 0xed, 0xe, 0x8, 0x7ff, 0x7fffffff, 0x7, 0x800, 0x80000000, 0xc9ae, 0x7, 0x9, 0xb, 0x5, 0x9, 0x5, 0x1c, 0x9, 0x0, 0x2, 0x6, 0x9, 0xd6ee, 0xffff8001, 0x10000, 0x4b31, 0x5, 0x2, 0x9, 0x8, 0x8, 0x7, 0xfffffffc, 0xf3e, 0x2, 0x9, 0x4, 0x75, 0x5, 0x200, 0x5, 0x0, 0x5, 0x7ff, 0x7f, 0x200, 0x8001, 0x3, 0x90, 0x0, 0x1, 0x7, 0x3, 0x3, 0xffffff80, 0x9, 0x5, 0x9, 0x8, 0x1, 0x4, 0x7b5c, 0xab, 0x6, 0x7f, 0x5, 0x10001, 0x7, 0x4, 0x7, 0xc, 0x6902, 0x0, 0x30000000, 0xc5a, 0x200, 0x8001, 0x3, 0x10, 0x101, 0x7, 0x5, 0x5, 0xb223, 0x0, 0x40, 0x8000, 0x9, 0xca2, 0x1, 0x10001, 0x1, 0x5, 0x7, 0x7f, 0x5, 0x7fff, 0xfd, 0x7, 0x3a81, 0x5, 0xf, 0x9, 0x40, 0x6, 0x4, 0xa92, 0x6, 0x6, 0x7fff, 0x4, 0x6, 0x6, 0x0, 0x6, 0x7, 0x37c, 0x7ff, 0x5, 0x19d0, 0x9, 0xf, 0x57ab, 0x1, 0x800, 0x5, 0xffffff80, 0xfbb, 0xfff, 0x2, 0x5, 0x2, 0x7, 0x9, 0x7, 0xab36, 0x5]}], [@TCA_POLICE_AVRATE={0x8, 0x4, 0x6}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x9, 0x2, 0x7, 0x0, 0x1000, 0xd, 0x2, 0x7fff, 0x2, 0x3, 0x8, 0x6, 0x7, 0xaa7, 0x4, 0x3ff, 0xd, 0x8, 0x2, 0x0, 0x2, 0xa258, 0x4, 0xd, 0xfffffff9, 0x1, 0x0, 0x9, 0x3, 0x9, 0x101, 0x9, 0x4, 0x49c, 0x4, 0xfffffffa, 0x9, 0x300a, 0xcca1, 0x9a3, 0x3, 0x4, 0x8, 0x8001, 0x9, 0x3, 0x6, 0x6, 0x1467751e, 0x0, 0x1, 0x4c, 0x9, 0x1, 0x9, 0xb025, 0x7, 0xef3, 0x6, 0x1, 0xff, 0x7, 0x6, 0x16cc, 0x1bf, 0x6, 0x8, 0x1, 0x7, 0x0, 0x7ff, 0x12, 0x4, 0x1, 0xfff, 0x80000001, 0xf7fd, 0x9, 0xa8, 0x8266, 0x2, 0x1, 0x0, 0x10000, 0x9410, 0x1, 0x8, 0x32e6429c, 0x8, 0x100, 0x8, 0x4, 0x5, 0x10, 0xfffffffe, 0x5, 0x1, 0x5, 0x6, 0x8, 0x2b, 0x1, 0xf, 0x5a57, 0x4, 0x8, 0x7, 0x9a, 0x1, 0x54a0, 0x9ef6, 0xfffffff9, 0xb08, 0x4373, 0xeb, 0x8001, 0x7, 0x6, 0x2, 0x3, 0x7, 0x3, 0xf63, 0x5, 0x1000, 0xff, 0x48000000, 0x5, 0x80000000, 0x9, 0xfa23, 0x4, 0x8, 0x8, 0x8, 0x859, 0x2, 0x0, 0x2, 0x1, 0x7, 0x80000000, 0x9, 0x0, 0x6, 0x4, 0x80, 0xfffffff3, 0xfffffffe, 0x2, 0x4, 0x4, 0x5e4, 0xd8d, 0x0, 0x100, 0x3, 0x6, 0x7, 0x7, 0x4, 0x689e, 0x5, 0x5, 0xa, 0x1, 0x9, 0x81, 0x4, 0xfffffff8, 0x4, 0x80000001, 0x4, 0x1, 0x7, 0x5, 0x81, 0x4, 0x18, 0x9, 0x6, 0x8, 0x5, 0x400, 0x6, 0x3, 0x115, 0x1, 0x5, 0x4, 0x2, 0xc, 0x7, 0x9, 0x7, 0xfffffffb, 0x6, 0xff, 0x80000000, 0x4, 0x3, 0x1, 0xffffffff, 0x2, 0x10000, 0x6, 0x7, 0x9ea4, 0x40, 0xf, 0x1000, 0x394, 0x12, 0xfffffffe, 0x2, 0xc5, 0xfffffff7, 0x9, 0x3, 0x5, 0x69d074ee, 0xd, 0x6, 0x5, 0x7, 0xffffff77, 0x7, 0xc5c, 0x2, 0x110, 0x3, 0xfffffffe, 0xfffffffc, 0x10001, 0x9, 0x5, 0x0, 0x37, 0xffffff80, 0x0, 0xbb55, 0x80000000, 0x1b27, 0x3, 0x5, 0x7, 0x5, 0x9e, 0x7f, 0x80000001, 0x1, 0xff, 0x6, 0x3ff, 0x3a3, 0x1]}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x662, 0xe63, 0x1, 0xfffffffe, 0x10, 0x8, 0x5, 0x9, 0x2, 0x6, 0xffff, 0x9, 0x3, 0x1ff, 0xc, 0x3, 0x40, 0x9, 0x7, 0x10d2, 0x7fff, 0x5, 0x32, 0xc, 0x800, 0x8, 0x0, 0x7, 0x106e, 0xfffffffb, 0x0, 0x1, 0xffff, 0x2, 0x0, 0x200, 0x9, 0xaf80, 0x0, 0x8, 0x6, 0xc, 0xffff, 0x80000001, 0x8, 0x4, 0x4, 0x3, 0xfffffffd, 0x0, 0xac3c, 0xfffffff8, 0x8001, 0x9754, 0x7, 0xfe, 0x40, 0xdd6e, 0xfffff784, 0xf6, 0x1, 0x3, 0x8, 0x800, 0x2, 0x2, 0x7, 0x6, 0x85, 0x9, 0xffffffff, 0x0, 0x2, 0x2, 0x7, 0x5, 0x1, 0x1000, 0x4, 0x1000, 0x400, 0x8, 0x5, 0x7, 0x1, 0xb, 0xfffffffc, 0x9, 0x7, 0xd, 0x7, 0x9, 0x7fff, 0x1, 0x3, 0x7, 0x1, 0x6, 0x1, 0x6, 0x251, 0x7, 0x2, 0x0, 0x2, 0x14000000, 0x1ff, 0x5, 0xb8b0, 0x9, 0x1, 0x2, 0x101, 0xfffffff8, 0x2, 0x4, 0x296e48d8, 0x2, 0xff, 0x8000, 0x9, 0x0, 0x6, 0x9, 0x7, 0x9, 0x3, 0x3, 0x3, 0x2, 0x7, 0x74, 0x7, 0x7f, 0x1000, 0xfffffffc, 0x5f, 0x80000000, 0x9, 0x22e, 0x4, 0x3, 0xd, 0x7, 0x7ff, 0x7, 0x18, 0x8, 0x6, 0x4, 0x2, 0x2, 0x9, 0x4, 0x1, 0x401, 0x5, 0x6ac6000, 0xa, 0x76, 0xa1e, 0x4, 0xfff, 0x1000, 0x4, 0x9, 0x4, 0xe, 0x7, 0x10001, 0x1, 0x0, 0x8000, 0xe, 0x7, 0x60, 0xb, 0x76, 0x3, 0x101, 0x5, 0x81, 0x1, 0xb5b, 0x32b7, 0x58cf447f, 0xdb, 0x9, 0x5, 0x7, 0x4c, 0x7fff, 0x7fff, 0x1, 0x0, 0x7, 0x5, 0x9, 0x81, 0x9, 0x7, 0xffff, 0x9, 0xdd, 0x7f, 0x6, 0x7ff, 0x6, 0x9, 0xfaff, 0x1fe, 0x0, 0x5, 0x0, 0x7, 0x7fff, 0xe, 0x0, 0xffffffff, 0x4, 0x6, 0x9, 0xb9ee, 0x9, 0x7, 0x1ff, 0x4, 0x7fff, 0x9, 0x9, 0x3, 0x5, 0x8, 0x2, 0xb07, 0x5, 0xfc5b, 0x5, 0x8, 0x7fff, 0xb5, 0xb35, 0xa718494, 0x5, 0x3ff, 0x1, 0x4, 0x0, 0x1, 0x401, 0x5, 0x6, 0x2, 0x9, 0x80, 0x3ff80]}]]}, {0xb2, 0x6, "700461c27da9f55cb5cbe5c75d398f7b7f2b5231c1c030d1ca7ebe4d836e10d5c0267c4dd4c8f211978a132462d5f4610150db6749e0fb566055e3b7db241b918a7c171ba66fc9d385b84326d512a83b8bc9b7db27faa77edde8a6dbc1e172b9585003a34cc8463b4ba2403f371650f9692fe58f4ec33102b0f77c086fc763f3f6502c5a9fcf9301b9d76880299be3ee0ae872815ce245bf581a260ff44052cf8e14553bb1770a1d090c9d9c6060"}, {0xc}, {0xc, 0x8, {0x2, 0x7}}}}]}, @TCA_FW_CLASSID={0x8, 0x1, {0x8}}, @TCA_FW_INDEV={0x14, 0x3, 'xfrm0\x00'}, @TCA_FW_MASK={0x8, 0x5, 0xfffffffc}, @TCA_FW_CLASSID={0x8, 0x1, {0x8, 0x3}}]}}, @filter_kind_options=@f_basic={{0xa}, {0xb54, 0x2, [@TCA_BASIC_POLICE={0xc0, 0x4, [@TCA_POLICE_TBF={0x3c, 0x1, {0x371f, 0x3, 0x7f, 0x1, 0xff, {0x10, 0x0, 0xfff9, 0x0, 0x8001, 0x8b22}, {0xa, 0x0, 0xc, 0xffff, 0x3ff, 0xbc8b}, 0x0, 0xd, 0x9}}, @TCA_POLICE_TBF={0x3c, 0x1, {0x7, 0x8, 0x1, 0x0, 0xfffff000, {0xff, 0x1, 0x8, 0xffff, 0x0, 0x1ff}, {0x4, 0x2, 0x2000, 0x9, 0x6, 0x8}, 0x9, 0x3feb, 0x45}}, @TCA_POLICE_TBF={0x3c, 0x1, {0x8, 0x3, 0xf8, 0x2, 0x10, {0x8, 0x2, 0x8, 0x6827, 0x2, 0x9}, {0x3, 0x2, 0x0, 0x80, 0x2, 0x7}, 0x3822, 0xffff95a0, 0x78f57b7c}}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x5}]}, @TCA_BASIC_EMATCHES={0xe0, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0xd8, 0x2, 0x0, 0x1, [@TCF_EM_NBYTE={0x10, 0x2, 0x0, 0x0, {{0xfeff, 0x2, 0x7}, {0x5, 0x0, 0x2}}}, @TCF_EM_CONTAINER={0xb4, 0x3, 0x0, 0x0, {{0xff, 0x0, 0x3}, "c362b19a69d6db480892a9327f2b0d2c9059c2f1015384f0c893b5b0282016e07d2e9465b4141beb0cd48657dedb35d8b2764426babfbc99d4712a4dee254d6fcf855232cc915ef91af613ec11141a6868773774b5e8d129bb7b83f6fe983ea59bacc9809e5d07d39b64a4aad7d1de6a48e001c15a1bc977faabc0f490c51df5ec094afea29c2be368da8a4b261cbef8baf8c6691d6ffb6bba4f01d00266c06e919f24d7509cfa"}}, @TCF_EM_NBYTE={0x10, 0x3, 0x0, 0x0, {{0x8, 0x2, 0x7f}, {0x7f, 0x0, 0x2}}}]}, @TCA_EMATCH_TREE_LIST={0x4}]}, @TCA_BASIC_ACT={0x168, 0x3, [@m_tunnel_key={0x34, 0xf, 0x0, 0x0, {{0xf}, {0x4}, {0x4}, {0xc, 0x7, {0x0, 0x92968cd411da742f}}, {0xc, 0x8, {0x2, 0x3}}}}, @m_simple={0x130, 0xf, 0x0, 0x0, {{0xb}, {0x34, 0x2, 0x0, 0x1, [@TCA_DEF_PARMS={0x18, 0x2, {0x8, 0x1, 0x8, 0x4, 0x5}}, @TCA_DEF_DATA={0xd, 0x3, '/dev/ppp\x00'}, @TCA_DEF_DATA={0x7, 0x3, '/-\x00'}]}, {0xd2, 0x6, "c034edabfbc1062b16e8f78f492867976c0f9e7260f18b3f5114f7a833ffbda2ba393efcab348243c2b45e9b2121078180554678c6539cd2399c3672428c83d8990408812eb69b6b575662d479c84f3f61be07e12e0440c0973981ef88f264424ea143f24ece1bf756d64e1460bc4cc34728c004b16d813203e1c670ac586b4959a4155dfe4c09507e7f23f5fe2ad356e90a0a771e32bffa6446d56723171d7421ced0cb300c4533aec3466bcec5e8ebb628933a8fea84d7d03f561670e3168761033659b00c734f16a0c01444ea"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x0, 0x2}}}}]}, @TCA_BASIC_POLICE={0x848, 0x4, [@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x8, 0x200, 0x80, 0x80000001, 0x8, 0x4, 0xe544, 0x80000000, 0x5, 0x8, 0xda, 0x5, 0x4, 0x10001, 0x6, 0x800000, 0x7, 0x80, 0x35ef, 0x0, 0x3, 0x10000, 0x5, 0x5, 0x4, 0xfffffffb, 0x3, 0x4, 0x2, 0x5, 0x2c2, 0x1, 0x5, 0x3, 0x0, 0x3ff, 0x1, 0x0, 0x40, 0xff, 0x7, 0x1, 0x0, 0x2, 0x80000000, 0x3ff, 0x0, 0x5, 0xfff, 0x6, 0x3, 0x7, 0x9, 0x8, 0x1, 0xf7, 0x1, 0x3ff, 0x9ae, 0x0, 0x4, 0x9, 0x8000, 0x401, 0xcc8, 0xd, 0x4, 0x9, 0x8, 0xb5d, 0x7, 0x1, 0x1000, 0x0, 0x2, 0x8, 0x4, 0x3, 0xd8dd, 0x6, 0x1, 0x81, 0x7fff, 0x7, 0x1, 0x7, 0x4, 0x0, 0x8, 0x5, 0x4, 0x8, 0x1000, 0x14, 0x7, 0x8, 0xfd, 0x10000, 0x2, 0x0, 0x4, 0x58, 0x3ff0, 0x7fff, 0xe5, 0x3, 0x1ff, 0x9, 0xf, 0x8, 0x8001, 0x0, 0x7fffffff, 0x0, 0xfffffe01, 0x6, 0x7fffffff, 0xd35, 0x0, 0x8000, 0x5, 0x0, 0x1, 0x3ff, 0xfff, 0x3, 0x800, 0xffffffff, 0x1, 0x1, 0x3, 0xa9, 0x0, 0x10, 0x6, 0x0, 0x9, 0x3, 0x10001, 0x3, 0x8, 0x4, 0xfffffffd, 0x401, 0xffffffff, 0xd4, 0x3, 0x3, 0x6, 0x5, 0x2, 0x6a, 0x0, 0x4, 0x3, 0x0, 0x81, 0x7fffffff, 0x4, 0x6, 0x5e5e, 0x4, 0x9e, 0x0, 0x477e, 0x7ff, 0x101, 0xac7, 0x80, 0x1, 0x2, 0x4, 0x80, 0x0, 0x8, 0x2, 0x5da20, 0x7, 0x3, 0x9, 0x10, 0x0, 0x5, 0x7, 0x0, 0x0, 0x8, 0x0, 0x1, 0x8, 0x5, 0xa6, 0x1, 0x5, 0x1000, 0xc, 0x4, 0x9, 0x22, 0x1, 0x5, 0xd, 0x80, 0x8000000, 0xf6d3, 0xb4d, 0x4, 0x4, 0x8, 0x3, 0x300000, 0xfffff7bf, 0x7, 0x3f, 0x9, 0x1, 0x8, 0x7, 0x3, 0xfffffffb, 0xd, 0xb7, 0x8, 0x6, 0x3, 0x40, 0x8, 0x9, 0x4, 0x2, 0x919b6a8, 0xd8000000, 0xffffff1b, 0xffffff74, 0xa, 0x6, 0x7ff, 0x1, 0x6, 0x8, 0x9, 0x80000001, 0x3, 0x9, 0x2, 0x1, 0x100, 0x5, 0x6, 0x3, 0x7, 0x2a9, 0xf, 0x2, 0x4, 0x8001]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x75, 0x20000000, 0x4, 0x2, 0xfffffff7, {0x79, 0x2, 0xfffd, 0xffff, 0x7, 0x4}, {0x8, 0x2, 0xb, 0x401, 0x1, 0x9}, 0xfffff8c7, 0x1, 0xc9}}, @TCA_POLICE_RATE={0x404, 0x2, [0x5, 0x7, 0xb, 0x7, 0x80, 0x0, 0xded0, 0xfffffffe, 0x81, 0xf7, 0x1, 0x0, 0xfffffff8, 0x800, 0x3b, 0x2, 0x6, 0x1, 0xb0cf, 0xeb, 0x401, 0x4, 0xf, 0x1, 0xfffffffd, 0x64f5, 0x6, 0x8, 0x9, 0x3, 0xe, 0x7, 0xe34, 0x8, 0x4, 0x2, 0x2, 0xfffffff2, 0x6, 0x3, 0x7, 0x2, 0x4, 0x1, 0x7fffffff, 0x0, 0x8, 0x3, 0x7, 0x842, 0xc, 0x5, 0xef27, 0x80, 0xf9, 0xf04, 0x7, 0x4, 0x5f9, 0x3, 0x9, 0x10, 0x4, 0x10001, 0x9, 0xf6db, 0x63aa, 0x6, 0x9, 0x2, 0x6, 0xe08f, 0x2, 0x2, 0x7, 0x0, 0x7, 0x3, 0xf08c, 0x3, 0x1, 0x80000001, 0xa, 0xa07d, 0x3, 0x8, 0x0, 0x6, 0x8, 0x5, 0x4, 0x6, 0x7, 0x80000000, 0x4, 0x9, 0x7, 0x1, 0x0, 0x0, 0x48, 0x8, 0x5, 0x2, 0x3, 0xffff, 0x5, 0xc46f, 0x4, 0x7fff, 0x81, 0x10000005, 0x7fff, 0xffffff05, 0x4, 0x140, 0x2, 0xe, 0xfffffff8, 0x6, 0x40, 0x0, 0x8001, 0x4, 0x6, 0x7, 0x543, 0xb56, 0x0, 0x4e05, 0x8, 0x6, 0x3, 0x200, 0x4, 0x3, 0x80000000, 0x9, 0x4, 0x5a, 0x6, 0x7, 0xfffffffc, 0x8001, 0xa, 0xcb, 0x3, 0x7, 0x1, 0x1, 0x78, 0xa0000000, 0x8, 0xe76, 0x7, 0x19, 0x3, 0xb6, 0x5, 0x6c05, 0x0, 0x7, 0x4, 0x6, 0x0, 0x200, 0x3, 0xffffffff, 0x7fffffff, 0x494d, 0x5, 0x9, 0x9, 0x7, 0xd, 0x8, 0x800, 0x2, 0xfffff00e, 0xfffffff7, 0xd3, 0x3, 0x1, 0x43b0, 0x401, 0x8, 0x2, 0x9, 0x8, 0x3, 0x7, 0x7, 0x8, 0x3, 0x8, 0x3, 0x1, 0x9, 0x5, 0x3, 0x800, 0x80000000, 0x3, 0x4, 0xe, 0xaf, 0x1, 0x365, 0x0, 0xa4e, 0x9, 0x1, 0x1, 0x4, 0xc, 0xe2b, 0x3, 0x9, 0xe, 0x8, 0x80000000, 0x8001, 0x397, 0x80000001, 0x5, 0x7f, 0x4, 0x51, 0x7f, 0x81, 0x0, 0x9, 0x2, 0x4, 0x1, 0x8001, 0xa6, 0x90000000, 0xfffffff9, 0x1ff, 0x6, 0x3, 0x5, 0xd, 0x2, 0xacdd, 0x9, 0x5, 0x7fff, 0x2, 0x1, 0xffffffff, 0x3, 0x6, 0x9, 0x7]}]}]}}]}, 0x3a08}, 0x1, 0x0, 0x0, 0x2000c0c1}, 0x800) r5 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0xc0802, 0x0) ioctl$PPPIOCNEWUNIT(r5, 0xc004743e, &(0x7f00000000c0)) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000000)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000580), &(0x7f00000005c0)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xd, &(0x7f00000004c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003000000650000000800000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mkdir(&(0x7f0000000200)='./control\x00', 0x15d) r7 = socket$packet(0x11, 0x3, 0x300) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x3, 0xc, &(0x7f0000000c40)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000006000000850000002300000095"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x6f) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r9, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000040)={'ip6gretap0\x00', 0x0}) sendmsg$nl_route(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYBLOB="6800000010000100"/20, @ANYRES32=r10, @ANYBLOB="0000000000000000480012800e0001006970366772657461700000003400028008000100", @ANYRES32, @ANYBLOB="14000600fe800000000000000000000000000015140007"], 0x68}, 0x1, 0x0, 0x0, 0x810}, 0x140) sendto$packet(r7, &(0x7f0000000180)="a6bea8a120e5f8320c30ce5086dda5e986f34c10d8c39c3002de8ec445ae083a4b7fc08a086fc691", 0x28, 0x0, &(0x7f0000000140)={0x11, 0x0, r10, 0x1, 0x0, 0x6, @random="ad446050e878"}, 0x14) 29.192767363s ago: executing program 4 (id=643): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000001c0)='./file2\x00', 0x404, &(0x7f0000000200)={[{@bh}, {@jqfmt_vfsold}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x6a}}, {@user_xattr}, {@nodelalloc}, {@quota}]}, 0x3, 0x42f, &(0x7f0000000940)="$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") openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x2060, 0x0) r0 = syz_io_uring_setup(0xbdc, &(0x7f0000000640)={0x0, 0xec29, 0x800, 0x1, 0x40000337}, &(0x7f0000000dc0)=0x0, &(0x7f00000001c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, &(0x7f0000000600)=[{&(0x7f0000001800)=""/216, 0xd8}], 0x1}) io_uring_enter(r0, 0x847ba, 0x20, 0xe, 0x0, 0x0) 29.191961593s ago: executing program 32 (id=643): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000001c0)='./file2\x00', 0x404, &(0x7f0000000200)={[{@bh}, {@jqfmt_vfsold}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x6a}}, {@user_xattr}, {@nodelalloc}, {@quota}]}, 0x3, 0x42f, &(0x7f0000000940)="$eJzs289rHFUcAPDvzCat/WViqT+aVo1WMfgjadJae/CiKHhQEPRQjzFJS+y2kSaCLUGjSD1Kwbt4FPwLPOlF1JPgVe9SKJJLq6eV2Z1Jdje7aZJustX9fGCS92be8t53Z97ue/N2AuhZw9mfJGJ/RPweEQO1bGOB4dq/W8uLU38vL04lUam89VdSLXdzeXGqKFq8bl+R6YtIP0viSIt65y9fOT9ZLs9cyvNjCxfeH5u/fOW52QuT52bOzVycOH365InxF05NPN+ROLO4bg59NHf08GvvXHtj6sy1d3/+Ninib4qjQ4bXO/hkpdLh6rrrQF066etiQ9iUUq2bRn+1/w9EKVZP3kC8+mlXGwdsq0qlUnmg/eGlCvA/lkS3WwB0R/FFn81/i22Hhh53hRsv1SZAWdy38q12pC/SvEx/0/y2k4Yj4szSP19lW2zPfQgAgAbfZ+OfZ1uN/9Kovy90b76GMhgR90XEwYg4FRGHIuL+iGrZByPioU3W37xIsnb8k17fUmAblI3/XszXthrHf8XoLwZLee5ANf7+5OxseeZ4/p6MRP/uLD++Th0/vPLbF+2O1Y//si2rvxgL5u243re78TXTkwuTdxJzvRufRAz1tYo/WVkJSCLicEQMbbGO2ae/Odru2O3jX0cH1pkqX0c8VTv/S9EUfyFZf31y7J4ozxwfK66KtX759eqb7eq/o/g7IDv/e1te/yvxDyb167Xzm6/j6h+ft53TbPX635W83bDvw8mFhUvjEbuS12uNrt8/0VRuYrV8Fv/Isdb9/2CsvhNHIiK7iB+OiEci4tG87Y9FxOMRcWyd+H96+Yn3th7/9srin97U+V9N7IrmPa0TpfM/ftdQ6eBm4s/O/8lqaiTfs5HPv420a2tXMwAAAPz3pBGxP5J0dCWdpqOjtd/wH4q9aXlufuGZs3MfXJyuPSMwGP1pcadroO5+6Hg+rS/yE035E/l94y9Le6r50am58nS3g4cet69N/8/8Wep264Bt53kt6F36P/Qu/R96l/4PvatF/9/TjXYAO6/V9//HXWgHsPOa+r9lP+gh5v/Qu/R/6F36P/Sk+T1x+4fkJSTWJCK9K5ohsU2Jbn8yAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAdMa/AQAA//9QOObV") openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x2060, 0x0) r0 = syz_io_uring_setup(0xbdc, &(0x7f0000000640)={0x0, 0xec29, 0x800, 0x1, 0x40000337}, &(0x7f0000000dc0)=0x0, &(0x7f00000001c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, &(0x7f0000000600)=[{&(0x7f0000001800)=""/216, 0xd8}], 0x1}) io_uring_enter(r0, 0x847ba, 0x20, 0xe, 0x0, 0x0) 2.903371522s ago: executing program 0 (id=1125): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff0000", @ANYRES32=r0, @ANYBLOB="0000000000000000b704000001000000850000007800000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kmem_cache_free\x00', r1}, 0x10) syz_emit_ethernet(0x66, &(0x7f0000000b80)={@broadcast, @random="6487a2bed3d6", @void, {@ipv4={0x800, @gre={{0x5, 0x4, 0x0, 0x0, 0x58, 0x64, 0x0, 0x0, 0x6c, 0x0, @private=0x44}, {{}, {}, {}, {}, {0x8, 0x22eb, 0x0, {{0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x4}}}}}}}}, 0x0) 2.847401663s ago: executing program 0 (id=1126): socket$nl_route(0x10, 0x3, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x7, &(0x7f0000000540)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x4) ioctl$TIOCL_BLANKSCREEN(r0, 0x4b67, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = socket(0x10, 0x3, 0x9) capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000040)={0x0, 0x0, 0x7}) ioctl$PIO_UNIMAPCLR(0xffffffffffffffff, 0x4b68, 0x0) lsm_get_self_attr(0x68, 0x0, &(0x7f0000000100), 0x0) r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) sendfile(r1, r2, 0x0, 0x7fffffffffffffff) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000300)='rxrpc_congest\x00', 0xffffffffffffffff, 0x0, 0x10000000000}, 0x18) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000840), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKSTATE_GET(0xffffffffffffffff, &(0x7f0000000980)={0x0, 0x0, &(0x7f0000000940)={&(0x7f0000000000)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010025bd7000fddbdf250600000018009a61337b020076657468305ffeff00005f7769666900"], 0x2c}, 0x1, 0x0, 0x0, 0x8094}, 0x90) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000380)) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) renameat2(0xffffffffffffff9c, &(0x7f00000007c0)='./file1\x00', 0xffffffffffffff9c, 0x0, 0x4) modify_ldt$write(0x1, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000008c0)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000770000000e000000850000002a00000095"], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x51, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000007c0)={&(0x7f0000000080)='sys_enter\x00', r4}, 0x10) setxattr$security_capability(0x0, &(0x7f0000000280), 0x0, 0x0, 0x0) lsetxattr$security_capability(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), &(0x7f00000006c0)=@v3={0x3000000, [{0x3, 0x2}, {0x9, 0x56}], 0xee01}, 0x18, 0x0) socket$nl_route(0x10, 0x3, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYRESHEX=r2], 0x48) 2.636920747s ago: executing program 5 (id=1128): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x9, 0x4, 0x8, 0x10, 0x8}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000040)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x20, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) sendmsg$AUDIT_MAKE_EQUIV(r2, &(0x7f00000021c0)={&(0x7f0000002100)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000002180)={&(0x7f0000002140)={0x20, 0x3f7, 0x100, 0x70bd2a, 0x25dfdbfc, {0x7, 0x0, './file0'}, ["", "", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x4000}, 0x4044004) io_uring_setup(0x3ead, &(0x7f0000000080)={0x0, 0x3b7f, 0x0, 0x20000004, 0x400000}) syz_io_uring_setup(0x1722, &(0x7f00000000c0)={0x0, 0x40cd, 0x3180, 0x8000, 0x359}, 0x0, 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/power/disk', 0x0, 0x0) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000180)='/sys/power/pm_test', 0xc3a01, 0x0) setsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f00000003c0)={{{@in6=@empty, @in=@empty, 0x4e1d, 0x800, 0x4e21, 0x400, 0x2, 0x0, 0x80, 0x2c, 0x0, 0xffffffffffffffff}, {0x0, 0x3, 0xffffffffffffffff, 0x4, 0x2, 0x8, 0x8000000000000001, 0xb}, {0xa25d, 0x3, 0xffff, 0x4}, 0x8000, 0x6e6bbc, 0x2, 0x0, 0x4, 0x1}, {{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x4d5, 0x2b}, 0x2, @in=@dev={0xac, 0x14, 0x14, 0x42}, 0x0, 0x1, 0x0, 0x2, 0x0, 0x2, 0x800}}, 0xe8) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xe, 0x16, &(0x7f0000000940)=ANY=[@ANYBLOB="61158800000000006113500000000000bfa000000000000007000000ee0016055e15010000000000160500000000000069163e0000000000bf07000000000000260507000fff07206706000020000000150600000ee60060bf500000000000002f650000000000006507f9ff0100000007070000cddfffff1e75000000000000bf54000000000000070400000400f9ffad4301000000000095000000000000001500000000000000950000000000000032ed3c12dc8c27df8ecf264e0f84f9f17d3c30e32f1754558f2278af6d71d79a5e12814cb1d8a5d4601d295c45a6a0b9bdb7dd3997f9c9c4f6f3be4b369289aa6812b8e007e733a9a4f1b0af3dda82ee45a010fb94fe9de57b9d8a814261bdb94a05002000c6c60bf70d742a81762bab8395fa64810b5b40d893ea8fe0185473d51b546cad3f1d5ace0600006e7c955ccefa1f6ab689b555202da2e0ec2871b4a7e65836429a527dc47ebe84a423b6c8d345dc0da3085b0ab71ca1b901627b562ed04ae76002d4519af619e3cca4d69e0dee5eb106774a8f3e6916dfec88158f0200000000c8fb730a5c1bf2b2bb71a629361997a75fd552bdc206438b8ef4901fd03c16dfda44e2a2235c8ac86d8a297dff0445a15f21dce431e56723888fb126a163f16f920ae2fb494059bba8e3b680324a188076eb685d00c4e9b2ad9bc1172ba7cbebe174aba210d739a018f9bbec63222d20cecac4d03723f1c932fb3bba54b3a6aa57f1ad2e99e0e67ab9ff16d20000009f0f53acbb40b4f8e2738270001562ed834f2af97787f696649a462e7ee4bcf8b07a10d6735154beb4000000000000000000000000004000bc00f679629709e7e78f4ddc211bc3ebe6bd9d42ca0140a7afaab43176e65ec1118d50d1e827f3472f4445d253880800000000000000690884f800031e03a651bb96589a7e2e509bcc1d161347623cb5e7ac4629c8ab04871bc47287cd31cc43010000007b40407d000000210000000000000000005f37d83f84e98a523d80bd970d703f37ca364a601ae899a56715a0a62a34c6c94cce6994521629ab028acfc1d926a0f6a5489af8dc2f17923f3c40dfd1970a55c22fe3a5ac000000000000000000000000000000c1eb2d91fb79ea00000000815266b2c9e1bfadc7498e9dda5d000000bb0d00000000000000000000e4007be511fe32fbc90e2364a55e9bb66ac64423d2d00fea2594e190deae46e26c596f84eba9000000000000003cc3aa39ee4b1386bab561cda886fa642994cacd473b543ccb5f0d7b63924f17c67b13631822a11dc3c693962895496d4f6e9cc54db6c7205a6b26f92121ef53e553acdf42068fff496d2da7d6327f31d7c8cc5d325c5379b0363ce8bd1f61b007e1ff5f1be1969a1ba791ad46d800000000c7f26a0337302f3b41eae59809fd05d12f6186f117b062df67d3a63f3265dd1410eea68208a3f26b2989b832d8b34a34a4f08b34b3042065acaa10856e858d27adee7daf32903d3fc78700d429a2d4c8b6d803eb83eecfe4c7ff9e6ab5a52e83d089dad7a8710eec53f1b11cced7bc3c8da0c44d2fbf9f6f3ff3be4d1458077c2253b0c7c7a0a9fdd63bf910dc20e5cb2a88e59febc47f1212a21f631dbaa74f22bad050e9856b48ae3a03a497c37758537650fe6db80300c41fdc3d78e046f6160e1741299e8dc29906870e6431ed1eab5d067a183f064b060a8ec12725d42e3a74863d66bee966b1574f8e01b3f34a267ff0afa1e1c758a0079b747067312e9815a21cb3f1f8150d999d788535a4d3114dbc7e2bf2402a75fd7a55733360040855ed5d1c0d634fc5fb38f8709d87b27f8a5d9121fdc058447b728f134f72062fc4b1ca0780b1a7af137ff7b4ff139604faf0453b65586f65c7943d56b52f06c870edf0c5d744b5272b44c23480b2bdbff947c4dfa108cbb88202eeb81f428a5b3c299848649e1a6bff52f657a67463d7dbf85ae9321fc2cc17dc4a29b9cba8ded5de8206c812439ab129ae818837ee1562078fc524b3baf49a0be9bb7d958d5e87c6c09bf71a894bad62934782cc308e936d7637e07c4a2a3bc87b0da20000d9ef418cf19e7a8c4c328be0ce91798adc2dca871073f6bd61940aabc86b94f8cbde4d47060400e722a6a2af483ad0d3415ed0f9db009acaba9eaea93f811d434e00000000000000000000d154672fea96aedf346279ec00000000000000000000d535d41b0067f01e2e54b9154d876020b669640ead4ca44631fadf7c4ac39a1b331dbdcd52b36df021b731ef1f92330d347f88ced5c1aaadbcdd8d2257e3a9a7c7494fadf9be36f7a2334ee6e9446fa1fd486f85d672a77dc5bd21463994d49f12016305a1e394d292b66840fe32b40ad665d241a8b8a32b3100450c32832789aa8a096f41201b585cd76631c88cf958e9e9047f5af1730c5e83db12460a0768fd4b62be6c41eed307048bac8d1f7f164574241e06027654b248dcc38749eee0c1ee7c61b3f6411a559c3d45637b11e440ed5a99109b8e71d28c3d677af5f0499c6d3fc6a129775056958c9df824ebe5fa9fb306b24a8a8334910627d03efe69d4b61c4345f048c5da8aca16cea848fa77d2507c920a6bd654b00e07789382ed902c80deeff2fd5c78f42e4353e5360c3e55962efd1331e6736eaf4ee27736fa54803ee8ec1a15266ffcd8b30368740b584c2559e691e542cab3d49db327db62328f159d1e0900b3e23e84dedcd1377aa15dbeab7db181bd66980c3557c7d9f7377fcb6023accb5c368a121acf70e5f4c3f2a0ea07011c7149ea979cab2ee65cf7ffa29152b7a8fed89575e6e6fd77d4d9463d21775abac886ee6a1f2d7d8523840438a73d6307a87e2f525867fc3af7ab74520a773ae26bae74cdd405a211e8833e1ba523cde51d04a7ca6732"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffffd2}, 0x48) r4 = socket$unix(0x1, 0x1, 0x0) close(r4) setxattr$security_capability(&(0x7f0000000340)='./file0\x00', &(0x7f0000001f80), &(0x7f0000001fc0)=@v2={0x2000000, [{0x9, 0xb}, {0x4, 0x5}]}, 0x14, 0x2) socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$sock_int(r4, 0x1, 0x2e, &(0x7f0000000040)=0x7c, 0x4) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = semget$private(0x0, 0x4, 0x0) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(r3, 0x84, 0x73, &(0x7f0000002000)={0x0, 0x3, 0x10, 0x1, 0x100000000}, &(0x7f0000002040)=0x18) getsockopt$inet_sctp_SCTP_ASSOCINFO(r3, 0x84, 0x1, &(0x7f0000002080)={r7, 0x0, 0x6, 0x0, 0x8, 0x40}, &(0x7f00000020c0)=0x14) semop(r6, &(0x7f00000002c0)=[{0x0, 0xec7b, 0x1000}], 0x1) semop(r6, &(0x7f0000000000)=[{0x0, 0xffff}, {0x0, 0x8, 0x800}], 0x2) semctl$SETALL(r6, 0x0, 0x11, &(0x7f0000000200)=[0x3, 0x3]) r8 = socket(0x10, 0x803, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000000300)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000280)={&(0x7f0000001180)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xe}}, [@NFT_MSG_NEWFLOWTABLE={0x34, 0x16, 0xa, 0x401, 0x0, 0x0, {0x3}, [@NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_FLOWTABLE_HOOK={0x14, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}]}]}, @NFT_MSG_NEWSETELEM={0x20, 0xc, 0xa, 0x5, 0x0, 0x0, {0x0, 0x0, 0x9}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz2\x00'}]}, @NFT_MSG_DELCHAIN={0x48, 0x5, 0xa, 0x201, 0x0, 0x0, {0x3}, [@NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x5}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}, @NFTA_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x2}, @NFTA_CHAIN_FLAGS={0x8, 0xa, 0x1, 0x0, 0x4}, @NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x1}]}, @NFT_MSG_DELSET={0x1c, 0xb, 0xa, 0x381, 0x0, 0x0, {0x3, 0x0, 0xa}, [@NFTA_SET_POLICY={0x8, 0x8, 0x1, 0x0, 0x1}]}, @NFT_MSG_NEWSETELEM={0x34, 0xc, 0xa, 0x801, 0x0, 0x0, {0x3, 0x0, 0x3}, [@NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_SET_ID={0x8, 0x4, 0x1, 0x0, 0x3}]}, @NFT_MSG_NEWSETELEM={0x9dc, 0xc, 0xa, 0x301, 0x0, 0x0, {0x5, 0x0, 0xa}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_SET_ID={0x8, 0x4, 0x1, 0x0, 0x1}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x9b4, 0x3, 0x0, 0x1, [{0x1f0, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_SET_ELEM_DATA={0x4}, @NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0x9}, @NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0x83}, @NFTA_SET_ELEM_KEY={0x1bc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0xbb, 0x1, "e684393aebdb9f00e40bb354e47bd9ea16b18f06e0f95241d4496da0871ed886f0971cd45366eed18f42f76cb5b9bb790a8fde6d78cb1a6ff6c60e7bbb2d8ef5c6e54f79288bd37e9e49e48cf037952646fd0bf7b6a95015c4804c36c5b822923d1aab639918c0bf8c1dd2f90ff4bd6ec04477ca307320eca8e565879c2a1d7bd4bc55df209e546ebc5ce4985dcbc0f4070c3f68d4f9889dfd7cee5f5610f724fd0bb22ad7103362f93fd1b536c6c685b1952101c37751"}, @NFTA_DATA_VERDICT={0x10, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}]}, @NFTA_DATA_VALUE={0x71, 0x1, "fc7a6dfa8d9223004a4ab9440604e5df525d251d1bd718755feaa6d2c71a180671fe1aa8ff769d8f09eb196cfc88cca910b888753aeadc69f2bbbe81dfd33cae488f7e32e45feab9f34671c970173eeeac83038ed80e5c69961784618d84fa0b516d79624dab9c6050b4ca7bc2"}, @NFTA_DATA_VALUE={0x76, 0x1, "96dc496b0cd90002d2de85dc4faa325390e6877b2e2794aa19ec27df1e7f5879a7b865ec272e46190f561b621617ff7af2f4abd56fe49fa79f53c954db22e4f95ac435196940f8842497ac272c1a06f505c1d75dbc49eb3aa04dcf996c411a1129b9c3080934330de5232d2967111e803885"}]}]}, {0x1c, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0xfffffffb}, @NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0xec}]}, {0x1c, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0x20000000009}, @NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0xd}]}, {0x5b4, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_EXPR={0x18, 0x7, 0x0, 0x1, @flow_offload={{0x11}, @void}}, @NFTA_SET_ELEM_USERDATA={0x83, 0x6, 0x1, 0x0, "50672bb52fbc336a12ff20f182b3f0443c4e5a8b81237b23e8b72f39f4f7531ed6037d5b3d74d8e8b5331c4f6cecf98400d4770cc2c3333ac7bf132d2a99dbf3b57669060d46e7ce87380908cbad914837692ca329293efa3bf11893ee7699c4a69010cb8afa9004183214accde504c7c7df038a0cce8c343ed63ddfd620ef"}, @NFTA_SET_ELEM_DATA={0x220, 0x2, 0x0, 0x1, [@NFTA_DATA_VALUE={0x4}, @NFTA_DATA_VALUE={0x8, 0x1, "9bcc7e3f"}, @NFTA_DATA_VERDICT={0x38, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CODE={0x8}]}, @NFTA_DATA_VERDICT={0x4c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}]}, @NFTA_DATA_VALUE={0x2e, 0x1, "dd9b4bb026aaba00f2b4f4fa277484ae0dbd845d90232274c8365ef14822b41864131a632dacd614cd49"}, @NFTA_DATA_VALUE={0x102, 0x1, "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"}, @NFTA_DATA_VERDICT={0x58, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0x7}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}]}]}, @NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0xf57}, @NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz0\x00'}, @NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0x900}, @NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz0\x00'}, @NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_SET_ELEM_KEY={0x23c, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x37, 0x1, "94716d9a4b17b7188eb2ade6a69f00ec096162fe58437e8b6d595e2e605eb32dee0715306a6df54811ccff411d44d23d995161"}, @NFTA_DATA_VALUE={0xc4, 0x1, "87307c6834da1afb8bffade8247ba376e6ed1fb14def96d493422c887ff32fd9a0e36e89783693c66adc055f46b8bb90658832dba8683534942a4dcca261486a7dbb9584dc916958ab9686cb79f357dba1270bd23e102cb1f059634e26514acbab026598cfca526b030a10115182d649732c682fe6de73a050a30ee7b81e3f583af51a5516181978724e3612ec0e2b533bc2cb7bbf1de7b8aff41090a417ea02c7632ea88915ca17a7af2f1b414db532bb678715e7bb3d38d4b29b25aeacbe67"}, @NFTA_DATA_VERDICT={0x44, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x400003}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}]}, @NFTA_DATA_VALUE={0x4}, @NFTA_DATA_VERDICT={0x1c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}]}, @NFTA_DATA_VALUE={0xd8, 0x1, "cdfe734cf6272fb3439c34f04e2412f4361f076be85be2d60ac2c548dd8615fd1a9189a9d9a28feedf3d3ede96eb21d91d15e104d4dbe96a69f0d22420a6f6c401f2f969704cddc132bfd30d179739d7c8810e86560654a5a57c323c0a8539805f2a8d166c775f7a8955a338b365601976b5b0819304f2e22fce7d1628a97fba47da3b56ecdc5a89571118da299a79ce2b1eb70da8d3970fcd1482d2503a18e373c406897c0613d4de66f0d565649818105d78704251ce506e7e7fc6066318b2857d268d9b09df3f19c046b7f8fd14cc742986ec"}]}, @NFTA_SET_ELEM_EXPR={0x80, 0x7, 0x0, 0x1, @counter={{0xc}, @val={0x70, 0x2, 0x0, 0x1, [@NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x5}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x197}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0xffffffff80000001}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x100000001}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0xb}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x8}, @NFTA_COUNTER_BYTES={0xc}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x4}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x1000}]}}}]}, {0x4}, {0x58, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_USERDATA={0x52, 0x6, 0x1, 0x0, "9ae55806fe3ba282c4afdb1de514c3c3af527120fdad6bcc1af50a8e7a85e0f4881306aa739e4ca45d648ad3cf2807c503bc304ba0e999f543c38253e2db6f6f9dc55359a791012a50cda5b44943"}]}, {0x178, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz2\x00'}, @NFTA_SET_ELEM_USERDATA={0xc6, 0x6, 0x1, 0x0, "9e431233ad529da3a51bed84d5580c525087004696d7b3d804e9bb1e44318f81aa084689d395df1fdc8a01bc8f129cc65c1a01e43b05d4e0b6c4c184ba2b04b540ae0a1e29e007942b35710f981f5e553d8dd07a0514646b546e1146056964777cdc0b1ad97fac1e85f495abbc5a9de74a88a7e427c13d9bae0b1b8bab8dc42cac784b111701fb6791786ada31b424a6a5baf6f63931e227bae2a09eab8646cc32d4e2ed6e2597a21899f50643e76802b5eab8b03c72a1100f708137fbd24514c807"}, @NFTA_SET_ELEM_USERDATA={0xa0, 0x6, 0x1, 0x0, "a2ec2160f2ea5c5ceab64e5ce431889c6636e60e64765e16e602419ac736c2c3b70a25c8572fcb45d86070e973009e55031d493716002704ebbb8470fbee242d15eb3515c3e4b39844bf446fb7d7d72304467b9a42cf6ccdd9dca37f4a3c14f27a9f6ca0d7368263d9d7c39ffb3f5ed923643c127beff64fb42c1abf65a04eaee1e3789262ff9cc40ec28cf17a1a1f789ff978991426712a1cf3c150"}]}]}]}, @NFT_MSG_DELOBJ={0x34, 0x14, 0xa, 0x201, 0x0, 0x0, {0x3, 0x0, 0x7}, [@NFTA_OBJ_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0x7}, @NFTA_OBJ_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWOBJ={0x20, 0x12, 0xa, 0x101, 0x0, 0x0, {0x1, 0x0, 0x2}, @NFT_OBJECT_LIMIT=@NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x3}}], {0x14, 0x11, 0x1, 0x0, 0x0, {0xa}}}, 0xb44}}, 0x20000000) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x7, 0x6, &(0x7f0000000500)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) sendmsg$IPVS_CMD_SET_INFO(r8, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) 1.96506926s ago: executing program 0 (id=1141): setreuid(0xee01, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0, r3}, 0x18) r4 = socket$kcm(0x2, 0x1000000000000002, 0x0) sendmsg$inet(r4, &(0x7f0000000b40)={&(0x7f0000000080)={0x2, 0x4e20, @remote}, 0x10, &(0x7f00000000c0)=[{0x0, 0x4f}], 0x1, &(0x7f0000000180)=[@ip_pktinfo={{0x2f, 0x0, 0x7, {0x0, @dev, @loopback}}}], 0x30}, 0x0) 1.707730376s ago: executing program 5 (id=1145): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001740)=ANY=[@ANYBLOB], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000001800)={0x11, 0xc, &(0x7f0000000c00)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) r2 = socket$packet(0x11, 0x2, 0x300) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x3, 0x0) syz_genetlink_get_family_id$devlink(&(0x7f0000000780), r4) getsockname$packet(r4, &(0x7f0000000300)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000400)=0x14) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000bc0)=ANY=[@ANYBLOB="4400000010000104001007fb5c360dff9fe30000", @ANYRES32=r5, @ANYBLOB="0100000000000000240012000c000100627269646765000e140002000800070005"], 0x44}, 0x1, 0x0, 0x0, 0x4}, 0x0) sendto$packet(r2, 0x0, 0x0, 0x0, &(0x7f00000003c0)={0x11, 0x8100, r5, 0x1, 0x0, 0x6, @local}, 0x14) 1.636921337s ago: executing program 3 (id=1146): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r1, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) getsockname$packet(r1, 0x0, &(0x7f0000000200)) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000180)=@newlink={0x48, 0x10, 0x437, 0x0, 0xfffffffd, {0x0, 0x0, 0x0, 0x0, 0x4d68f}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @vti={{0x8}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_VTI_LOCAL={0x8, 0x4, @local}, @IFLA_VTI_REMOTE={0x8, 0x5, @multicast2}, @vti_common_policy=[@IFLA_VTI_OKEY={0x8, 0x3, 0xffff}]]}}}]}, 0x48}}, 0x4) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="400000001000390400"/20, @ANYBLOB, @ANYRES32], 0x40}, 0x1, 0x0, 0x0, 0x4014}, 0x0) r4 = socket(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route_sched(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x44, 0x24, 0x5820a61ca228659, 0x0, 0xfffffffe, {0x0, 0x0, 0x0, r5, {0x0, 0x9}, {0xffff, 0xffff}, {0x5, 0x7}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_USC={0x10, 0x3, {0x6, 0x2}}}}]}, 0x79}}, 0x800) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f0000000040)='kfree\x00', r6}, 0x18) ioctl$FS_IOC_GETFLAGS(r7, 0x80086601, &(0x7f0000000000)) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001540)=@newtfilter={0x68, 0x28, 0xd27, 0x1004001, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0x2, 0x9}, {}, {0x2, 0xb}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x38, 0x2, [@TCA_CGROUP_ACT={0x34, 0x1, [@m_sample={0x30, 0x21d, 0x0, 0x0, {{0xb}, {0x4}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x2, 0x3}}}}]}]}}]}, 0x68}, 0x1, 0x0, 0x0, 0x8810}, 0x400c8b4) r8 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TIOCPKT(r8, 0x5420, &(0x7f00000000c0)=0x7) ioctl$TIOCSSOFTCAR(r8, 0x541a, &(0x7f0000000080)=0x3) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r9, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)={0x54, r10, 0x1, 0x70bd28, 0x0, {0x3}, [@TIPC_NLA_BEARER={0x40, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4, @dev={0xac, 0x14, 0x14, 0x13}}}, {0x14, 0x2, @in={0x2, 0x0, @private=0xa010102}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}]}]}, 0x54}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=@delchain={0x74, 0x11, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {}, {0x0, 0x5}}, [@filter_kind_options=@f_flower={{0xb}, {0x2c, 0x2, [@TCA_FLOWER_KEY_ETH_TYPE={0x6, 0x8, 0x9300}, @TCA_FLOWER_KEY_TCP_FLAGS={0x6, 0x47, 0x5}, @TCA_FLOWER_CLASSID={0x8, 0x1, {0x2, 0x7}}, @TCA_FLOWER_KEY_IPV4_SRC={0x8, 0xa, @initdev={0xac, 0x1e, 0x0, 0x0}}, @TCA_FLOWER_KEY_PORT_DST_MIN={0x6, 0x59, 0x4e21}]}}, @TCA_CHAIN={0x8, 0xb, 0x7}, @TCA_CHAIN={0x8, 0xb, 0x2000000}, @TCA_CHAIN={0x8, 0xb, 0xffffffbd}]}, 0x74}}, 0x10) 1.610370518s ago: executing program 3 (id=1147): r0 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_SET_BINARY(r0, 0x6, 0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) syz_clone3(&(0x7f00000004c0)={0x8002000, &(0x7f0000000180), &(0x7f0000000200), &(0x7f0000000240), {0x3b}, &(0x7f0000000340)=""/184, 0xb8, 0x0, &(0x7f0000000280)=[0x0, 0xffffffffffffffff], 0x2}, 0x58) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={0x0, r1}, 0x18) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000280)={0x1f, 0xffff, 0x3}, 0x6) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x6}]}, 0x10) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0xffff, 0x2}, 0x6) io_setup(0x8f0, &(0x7f0000002400)=0x0) io_submit(r2, 0x1, &(0x7f0000000340)=[&(0x7f0000000100)={0x2000000000, 0x4, 0x0, 0x1, 0x0, 0xffffffffffffffff, &(0x7f0000000040)="0200ffff0000", 0x6, 0x0, 0x0, 0x2}]) r3 = fsmount(r0, 0x0, 0x0) r4 = openat$cgroup_subtree(r3, &(0x7f0000000100), 0x2, 0x0) write$cgroup_subtree(r4, &(0x7f0000000300)=ANY=[@ANYBLOB='-cpu'], 0x5) r5 = socket$inet6(0xa, 0x1, 0x84) shutdown(r5, 0x0) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="3801000010000100fefffffffbdbdf25fc000000000000000000000000000000e0000002000000000000000000000000000107144e230005000000003a000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ff020000000000000000000000000001000004d46c0000007f000001000000000000000000000000000000000000000092010000580000000600000000000000ffff0000000000001c250800000000000200000000000000f8ffffffffffffff0000000000000000070000000000000000000000000000001f00000000000000feffffffffffffff01000000fcffffff000000002abd700004350000020001003400000000000000480003006465666c617465"], 0x138}, 0x1, 0x0, 0x0, 0x8801}, 0x0) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="3801000018"], 0x138}, 0x1, 0x0, 0x0, 0x8801}, 0x0) 1.5081956s ago: executing program 5 (id=1148): syz_clone3(0x0, 0x0) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0xc97c, 0x0, @perf_config_ext={0x2, 0x3}, 0x4100, 0xa88, 0x8409, 0x5, 0x0, 0x3c, 0xfffe, 0x0, 0x0, 0x0, 0x80000000000}, 0x0, 0xffbfffffffffffff, 0xffffffffffffffff, 0x1) prctl$PR_SET_SECCOMP(0x16, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000b00)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="02130f00050000002abd7000dedbdf25030007"], 0x28}}, 0x4000800) sendmsg$NFT_BATCH(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000300000a70000000060a010400000000000000000200000044000480400001800e000100627974656f726465720000002c000280080001400000000108000240000000000800044000000004080003400000000008000540000000080900010073797a30000000000900020073797a32"], 0x98}}, 0x800) r3 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_LOCAL_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1b, &(0x7f0000000240)={0x0}, &(0x7f0000000280)=0x8) setsockopt$inet_sctp_SCTP_DELAYED_SACK(r3, 0x84, 0x10, &(0x7f0000000300)=@sack_info={r4, 0x1, 0x5}, 0xc) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800"/12, @ANYRES32=r0, @ANYBLOB="0000000000000000b702000003000000850000008600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x0, &(0x7f0000000540), 0x1, 0x4a3, &(0x7f0000000580)="$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") r5 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x4040, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1202, 0x0) write(r6, &(0x7f0000004200)='t', 0x1) sendfile(r6, r5, 0x0, 0x7ffff000) r7 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/kernel/uevent_helper', 0x400080, 0x7d0404788573c43b) write$P9_RFLUSH(r7, &(0x7f0000000000)={0x7, 0x6d, 0x1}, 0x7) 1.435269781s ago: executing program 3 (id=1149): bpf$MAP_CREATE(0x0, 0x0, 0x48) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f00000001c0), 0x1e9a03, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000880)=@base={0x1, 0x4, 0x7fe2, 0x1}, 0x50) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00'}, 0x10) syz_emit_ethernet(0xfdef, &(0x7f0000001c80)={@random="e904a200", @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0xe000, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x0, 0xc, 0x0, @gue={{0x1, 0x1, 0x1, 0x4, 0x0, @void}}}}}}}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[], 0x48) r1 = socket$inet6(0xa, 0x3, 0x8000000003c) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f00000014c0)=@raw={'raw\x00', 0x8, 0x3, 0x528, 0x0, 0xffffffff, 0xffffffff, 0xd0, 0xffffffff, 0x458, 0xffffffff, 0xffffffff, 0x458, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@empty, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'wg1\x00', 'gre0\x00', {}, {}, 0x62}, 0x0, 0x358, 0x388, 0x0, {}, [@common=@inet=@hashlimit3={{0x158}, {'veth0_to_hsr\x00', {0x4, 0x8, 0x20, 0x5e1b2d47, 0xf91, 0x5, 0x4, 0x9f7, 0x18}, {0x8}}}, @common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x588) r2 = openat$tun(0xffffffffffffff9c, 0x0, 0x1c1341, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, 0x0) close(0xffffffffffffffff) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) write$cgroup_subtree(r2, &(0x7f0000000440)=ANY=[], 0xfdef) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) syz_io_uring_setup(0x5248, &(0x7f00000006c0)={0x0, 0x1f3f, 0x8000, 0x0, 0x1df}, &(0x7f0000000000)=0x0, &(0x7f0000000080)) syz_io_uring_complete(r3) r4 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TCSETSW2(r4, 0x402c542c, &(0x7f00000000c0)={0x10001, 0x2, 0x2, 0x811a, 0x1, "000200000000000000009dd0ffd76d7fcb0b0e", 0x6, 0x203}) writev(r4, &(0x7f0000000080)=[{&(0x7f0000000100)="6717a676614119e75a8dcc0c9e538bdb0371a16fa270dabd5b6634edeec1726bc97870c38b3d9acca48a1af6ba9dd7cdf69341a5cf35e178258aed8d8e34108416ebe41b5af3877ed4a579a898dc3fa7", 0xfffffda1}], 0x1) ioctl$TIOCSTI(r4, 0x5412, &(0x7f0000000000)=0xff) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000740)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r6, 0x0, r5, 0xffffffffffffffff, 0x4, 0xd) syz_mount_image$ext4(&(0x7f0000000680)='ext2\x00', &(0x7f0000000040)='./file2\x00', 0x10000, &(0x7f00000000c0)={[{@jqfmt_vfsv1}]}, 0x1, 0x559, &(0x7f0000000100)="$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") syz_emit_ethernet(0x83, &(0x7f0000000240)=ANY=[], 0x0) getpid() ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f00000000c0)) 1.289080554s ago: executing program 2 (id=1150): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000057"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7ec9}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], 0x0}, 0x94) add_key(&(0x7f0000000000)='ceph\x00', 0x0, &(0x7f0000000080)="010000000037a788a11d1f000000000000006923c63a4541062101b60a2156566de77062086575a59ea9cb", 0x2b, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x10) signalfd4(0xffffffffffffffff, &(0x7f00000000c0)={[0x4]}, 0x8, 0x800) 1.253133795s ago: executing program 2 (id=1151): socket$nl_route(0x10, 0x3, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x7, &(0x7f0000000540)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x4) ioctl$TIOCL_BLANKSCREEN(r0, 0x4b67, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = socket(0x10, 0x3, 0x9) capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000040)={0x0, 0x0, 0x7}) ioctl$PIO_UNIMAPCLR(0xffffffffffffffff, 0x4b68, 0x0) lsm_get_self_attr(0x68, 0x0, &(0x7f0000000100), 0x0) r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) sendfile(r1, r2, 0x0, 0x7fffffffffffffff) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000300)='rxrpc_congest\x00', 0xffffffffffffffff, 0x0, 0x10000000000}, 0x18) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000840), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKSTATE_GET(0xffffffffffffffff, &(0x7f0000000980)={0x0, 0x0, &(0x7f0000000940)={&(0x7f0000000000)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010025bd7000fddbdf250600000018009a61337b020076657468305ffeff00005f7769666900"], 0x2c}, 0x1, 0x0, 0x0, 0x8094}, 0x90) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000380)) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) renameat2(0xffffffffffffff9c, &(0x7f00000007c0)='./file1\x00', 0xffffffffffffff9c, 0x0, 0x4) modify_ldt$write(0x1, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000008c0)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000770000000e000000850000002a00000095"], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x51, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000007c0)={&(0x7f0000000080)='sys_enter\x00', r4}, 0x10) setxattr$security_capability(0x0, &(0x7f0000000280), 0x0, 0x0, 0x0) lsetxattr$security_capability(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), &(0x7f00000006c0)=@v3={0x3000000, [{0x3, 0x2}, {0x9, 0x56}], 0xee01}, 0x18, 0x0) socket$nl_route(0x10, 0x3, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYRESHEX=r2], 0x48) 985.1389ms ago: executing program 1 (id=1153): socket$netlink(0x10, 0x3, 0x0) socket(0x10, 0x803, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="0a00000000000002000000000ee1568d6477c89fb5f6bfed01542a5ab08c65ced39cddb86f1a5b008529ea4c08f8166b70"], 0x50) syz_io_uring_setup(0x10e, 0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r0 = bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$MAP_LOOKUP_ELEM(0x2, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000bc0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x2, 0x0, 0x0, 0x0, 0xf, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000580)={&(0x7f0000000540)='fib6_table_lookup\x00', r1}, 0x10) socket(0xa, 0x2400000001, 0x0) syz_genetlink_get_family_id$fou(&(0x7f00000003c0), 0xffffffffffffffff) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) truncate(&(0x7f0000000080)='./file0\x00', 0x8) syz_mount_image$vfat(&(0x7f0000000ec0), &(0x7f0000000180)='./file2\x00', 0x420c, &(0x7f0000003240)=ANY=[], 0x6, 0x360, &(0x7f0000000b00)="$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") r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file2\x00', 0x105042, 0x40) write$cgroup_subtree(r2, &(0x7f00000000c0)=ANY=[], 0x32600) 896.269042ms ago: executing program 1 (id=1154): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB], 0x0, 0x2003, 0x0, 0x0, 0x40f00, 0x49, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000180)='sys_enter\x00', r0}, 0x10) setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x25, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2500000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xffb}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x10) bind$inet(0xffffffffffffffff, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(0xffffffffffffffff, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000000800000008"], 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{r2}, &(0x7f0000000200), &(0x7f0000000240)=r3}, 0x20) symlinkat(&(0x7f0000002040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00') removexattr(&(0x7f0000000080)='./file0\x00', &(0x7f00000003c0)=ANY=[@ANYBLOB='trus']) syz_open_procfs(0x0, &(0x7f0000000000)='net/vlan/vlan0\x00') socket$nl_generic(0x10, 0x3, 0x10) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFVLAN_DEL_VLAN_CMD(r4, 0x8982, &(0x7f0000000040)={0x1, 'vlan0\x00', {}, 0x2}) 818.021344ms ago: executing program 1 (id=1155): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet6_sctp(0xa, 0x1, 0x84) (async) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r1, 0x84, 0x81, &(0x7f0000000280)="1a00000002000000", 0x8) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000002000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000a80)='kfree\x00', r3, 0x0, 0x2}, 0x18) close(0x3) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="58000000020605000000000000000000000000000900020073797a3100000000050005000a000000050001000600000013000300686173683a6e65742c696661636500000c0007800800124005000000050004"], 0x58}, 0x1, 0x0, 0x0, 0x1}, 0x800) (async) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="58000000020605000000000000000000000000000900020073797a3100000000050005000a000000050001000600000013000300686173683a6e65742c696661636500000c0007800800124005000000050004"], 0x58}, 0x1, 0x0, 0x0, 0x1}, 0x800) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000001440)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x16, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r5}, 0x10) r6 = bpf$ITER_CREATE(0x21, &(0x7f0000000000)={r0}, 0x8) r7 = socket$inet6(0xa, 0x2, 0x3a) sendmmsg$inet6(r7, &(0x7f0000000800)=[{{&(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback={0xfec0ffffffffffff}}, 0x1c, &(0x7f00000002c0)=[{&(0x7f0000000100)="8000102e7577d401", 0x8}], 0x1, &(0x7f0000000140)=ANY=[], 0x28}}], 0x1, 0x0) (async) sendmmsg$inet6(r7, &(0x7f0000000800)=[{{&(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback={0xfec0ffffffffffff}}, 0x1c, &(0x7f00000002c0)=[{&(0x7f0000000100)="8000102e7577d401", 0x8}], 0x1, &(0x7f0000000140)=ANY=[], 0x28}}], 0x1, 0x0) r8 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000c00), 0x220240, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r7, 0x89f3, &(0x7f00000006c0)={'ip6tnl0\x00', &(0x7f0000000c80)={'ip6tnl0\x00', 0x0, 0x4, 0x5, 0x3, 0x9ae4, 0x1, @empty, @private2, 0x7, 0x700, 0x1, 0x7}}) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000d00)={0x3, 0x4, 0x4, 0xa, 0x0, r6, 0xf852, '\x00', r9, 0xffffffffffffffff, 0x1, 0x0, 0x2}, 0x50) sendmmsg$unix(r6, &(0x7f0000000a40)=[{{&(0x7f0000000140)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000000080)=[{&(0x7f0000000240)="b3d545bc22ac3d59c7474aacaa85a29e4c47961f022204f48fd313d1a735735b73748b6bc579cac5c3f3ab9f7b8c7ea51c14c7ff29f4bcbb7c1e2c0fed15d399d5702ae3a5a7c2f6220db4e08ada8bce3f448246da304e8dbe59cce2383548843eff85c6ba5e601441", 0x69}, {&(0x7f00000002c0)="ca660d08d28b5e65c5311a7daa983de38aba5b02e41a9e8b8a314a3fbbf8222df80aba77916b4e2f43a53d1134b298428e4ccce883bb894e8b55bddc874ef0733e038d", 0x43}, {&(0x7f0000001480)="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", 0x1000}], 0x3, &(0x7f00000001c0)=ANY=[@ANYBLOB="c4bd", @ANYRES32=r0, @ANYRES32=r7, @ANYRES32=r4, @ANYRES32=r0, @ANYRES32=r0, @ANYRES32=r4, @ANYRES32=r5, @ANYRES32=r4, @ANYRES32=r0, @ANYBLOB='\x00\x00\x00\x00'], 0x38, 0x20000040}}, {{&(0x7f00000004c0)=@abs={0x1, 0x0, 0x4e22}, 0x6e, &(0x7f00000009c0)=[{&(0x7f0000000600)="6482a37c28fe884bb2927cb8aae73593afefa522132c16f6c22403018245400df99d86a3738055009f8134f085b9c5a3d49ad670dc70b6b3e23702774f86943f66ad9d8303b13bbdbd8f8b5e58024556c4c4a79539608d0b804c231fd4187afa0169a6dc7418ea9345df561e04d1709ab0e4814033653808ca4782f4c08c728962d2c08a83b4644b752972ecf98ba1e6760d4ff5dd574459717d269e", 0x9c}, {&(0x7f0000000340)="be5e5285590c3c3aadb2a8fe01dd321feac98872b8058e16087989edd15b53", 0x1f}, {&(0x7f0000000540)="df7dd96dc4e468854eb184024aa416979ef30730d897b090456b3033cab5224ec0cfc90894003cdb5f5f9fffd04d957767f520d9cd736259fb3727b3704b19bc4653229451c75c11be9397815fbc220c34cced6a0e2336322fe2b7cf4a8dfe", 0x5f}, {&(0x7f0000000800)="420d4b0a5fbbf5a5a3a6be539d12f9a7707ecdd517fc74a5f4eddd29ae68559cd822fff906e5750b988b99bc35f2fcc6acb9076f4ce095b316916fb92f8487c097214b94ecd566a6316fdbacd0b46067f5e233e9940a0c5c3fc9b9a1406b0c92beabde361236a47b1a10a2fe6f065967c6b40da4db0b98cb03e17e2c5fbcc0e001bdb02036f40cf94bec27aaba9a36bc", 0x90}, {&(0x7f0000000700)="13f3bc5ed1b314598adc5a1e9b34fb2f38a85147b7b24443f05767f8587017", 0x1f}, {&(0x7f00000008c0)="d327a14a7aa19088d1348df94f5f8dabba43cbb300701684253ffa53b610c576e531bf35f19eb23b6557fb22880093b2a3072d7c632a7c84e44f90d52acb71540c48a80e9ff6fc5b6880664b281e57b7b2f85e87921ff5f0a3c0f9321c661744f580cef723e10fdc2a30b298230a2f93ae9348ffe5", 0x75}, {&(0x7f0000000940)="4c829cd2ba611e77741e58d5e87473d65fd46f3620b89678eeaa415321df5d4d5dfec703681e29aad4c437425711d8682976b0e8a56e3b04da76383389163ffce2f88f5c75db417c6e2e", 0x4a}], 0x7, &(0x7f0000000c40)=[@rights={{0x10}}, @rights={{0x1c, 0x1, 0x1, [r0, r0, r8]}}], 0x30, 0x4000000}}], 0x2, 0x20000080) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={0xffffffffffffffff, 0x0, 0x0, 0x4b, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, &(0x7f0000000000), 0x0}, 0x50) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={0xffffffffffffffff, 0x0, 0x0, 0x4b, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, &(0x7f0000000000), 0x0}, 0x50) r10 = socket$nl_route(0x10, 0x3, 0x0) ioctl$USBDEVFS_DISCONNECT_CLAIM(r6, 0x8108551b, &(0x7f0000000ac0)={0x1, 0x2, "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"}) (async) ioctl$USBDEVFS_DISCONNECT_CLAIM(r6, 0x8108551b, &(0x7f0000000ac0)={0x1, 0x2, "5ece99343802f0d43c783eb6cd532ae466f9878becc0a4137c825cd674705caf8389118824257d96b55b0a5eb8b109961e82226c6de8999cb4189877e5ec10734bb7321e35f6ec174de0380b87350a494ac1d12c1193eda8805db3247de3c7125ee78a900f18d78b25236e751c81dc36e14d89800ad28341aedbfb7e48108aff506d7b07aa58e144f9febdceb58f01b4400bc5e6b4e7a7080a58be909142558483e2fdce778551c2141da88bc57a08af6cb71fce96fd4cb67b0fe7ca4efb9f16ab83a84b4f2ffebc33eac0213dc4cb771a9f6e2769778e55d1a7645ddbd561e4509672e73cabf81ead8894c0565979e4fb7765f637910728499ba91038d60d8b"}) r11 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000040)={'lo\x00'}) (async) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r10, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000005c0)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x8000000, 0x0, {0x0, 0x0, 0x0, r12, {0x3, 0xf}, {0xffff, 0xffff}, {0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x40000}, 0x0) syz_io_uring_setup(0x3c0c, &(0x7f0000000400)={0x0, 0xc890, 0x4000}, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x300000e, 0x20c44fb6edc09a38, 0xffffffffffffffff, 0x0) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x300000e, 0x20c44fb6edc09a38, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0, 0x6) (async) mbind(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0, 0x6) 624.119568ms ago: executing program 0 (id=1156): r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_RX_RING(r0, 0x11b, 0x2, &(0x7f00000004c0)=0x1000000, 0x4) getsockopt$XDP_STATISTICS(r0, 0x11b, 0x7, &(0x7f00000002c0), &(0x7f0000000080)=0x30) 541.106579ms ago: executing program 1 (id=1157): syz_open_dev$vcsa(&(0x7f0000000300), 0x1, 0x102) r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r1 = socket$kcm(0x2, 0x200000000000001, 0x106) sendmsg$inet(r1, &(0x7f00000003c0)={0x0, 0x0, 0x0}, 0x20004810) getsockopt(r1, 0x7f, 0x4, &(0x7f00000004c0)=""/147, &(0x7f0000000580)=0x93) setsockopt$sock_attach_bpf(r1, 0x6, 0x4, &(0x7f0000000040), 0x4) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x7, 0x4, &(0x7f00000000c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x6}, [@jmp={0x5, 0x1, 0x7, 0x5, 0x1, 0xfffffffffffffffe, 0xfffffffffffffffc}]}, &(0x7f0000000100)='syzkaller\x00', 0x5, 0x1a, &(0x7f0000000140)=""/26, 0x41000, 0x20, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x8, &(0x7f0000000200)={0x4, 0x2}, 0x8, 0x10, &(0x7f0000000340)={0x0, 0x7, 0x6, 0x49b}, 0x10, 0xffffffffffffffff, 0xffffffffffffffff, 0x2, &(0x7f0000000380)=[r0, r0, r0], &(0x7f00000003c0)=[{0x2, 0x2, 0xc, 0x9}, {0x3, 0x3, 0x9, 0xb}], 0x10, 0x7}, 0x94) syz_clone(0x6120100, &(0x7f00000005c0)="32414f2d1b98c431f284481e1a95c4a9191a09aa085d7aa77776c172b27475fbd45ea531b80b9d8b801b75dda4901ef69c564c43f81d808b65170a730aefcd9fa28323eee1e5230923884df1a78e9b8dbcd33e924fbb8cf4b38b26ddda0f626df597de3a450fefa78ed2ac5585f06c79e5bd5603db200928ab0417456d42b427003cced988b6fb87ed41abde5a42e2743fb33652ce1cfe40d0b85372a3208d8d8b8a830976d9947ef3ac7a0f8ce498baca87423ce9", 0xb5, &(0x7f0000000680), &(0x7f00000006c0), &(0x7f0000000700)="75d55507ceede7d0d2760cbcc754a0cdd115491965a77d31af9e44730bdc68112417b20793f431e71b035b53") r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xf, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYRESOCT=r0], &(0x7f0000000080)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r2, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r3}, 0x10) r4 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000180), 0x2) ioctl$SNDRV_TIMER_IOCTL_SELECT(r4, 0x40345410, &(0x7f0000000240)={{0x0, 0x0, 0xffff, 0x1, 0x6}}) 540.846949ms ago: executing program 5 (id=1158): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001740)=ANY=[@ANYBLOB], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000001800)={0x11, 0xc, &(0x7f0000000c00)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) r2 = socket$packet(0x11, 0x2, 0x300) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x3, 0x0) syz_genetlink_get_family_id$devlink(&(0x7f0000000780), r4) getsockname$packet(r4, &(0x7f0000000300)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000400)=0x14) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000bc0)=ANY=[@ANYBLOB="4400000010000104001007fb5c360dff9fe30000", @ANYRES32=r5, @ANYBLOB="0100000000000000240012000c000100627269646765000e140002000800070005"], 0x44}, 0x1, 0x0, 0x0, 0x4}, 0x0) sendto$packet(r2, 0x0, 0x0, 0x0, &(0x7f00000003c0)={0x11, 0x8100, r5, 0x1, 0x0, 0x6, @local}, 0x14) 508.05061ms ago: executing program 1 (id=1159): r0 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_SET_BINARY(r0, 0x6, 0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) syz_clone3(&(0x7f00000004c0)={0x8002000, &(0x7f0000000180), &(0x7f0000000200), &(0x7f0000000240), {0x3b}, &(0x7f0000000340)=""/184, 0xb8, 0x0, &(0x7f0000000280)=[0x0, 0xffffffffffffffff], 0x2}, 0x58) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={0x0, r1}, 0x18) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000280)={0x1f, 0xffff, 0x3}, 0x6) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x6}]}, 0x10) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0xffff, 0x2}, 0x6) io_setup(0x8f0, &(0x7f0000002400)=0x0) io_submit(r2, 0x1, &(0x7f0000000340)=[&(0x7f0000000100)={0x2000000000, 0x4, 0x0, 0x1, 0x0, 0xffffffffffffffff, &(0x7f0000000040)="0200ffff0000", 0x6, 0x0, 0x0, 0x2}]) r3 = fsmount(r0, 0x0, 0x0) r4 = openat$cgroup_subtree(r3, &(0x7f0000000100), 0x2, 0x0) write$cgroup_subtree(r4, &(0x7f0000000300)=ANY=[@ANYBLOB='-cpu'], 0x5) r5 = socket$inet6(0xa, 0x1, 0x84) shutdown(r5, 0x0) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="3801000010000100fefffffffbdbdf25fc000000000000000000000000000000e0000002000000000000000000000000000107144e230005000000003a000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ff020000000000000000000000000001000004d46c0000007f000001000000000000000000000000000000000000000092010000580000000600000000000000ffff0000000000001c250800000000000200000000000000f8ffffffffffffff0000000000000000070000000000000000000000000000001f00000000000000feffffffffffffff01000000fcffffff000000002abd700004350000020001003400000000000000480003006465666c617465"], 0x138}, 0x1, 0x0, 0x0, 0x8801}, 0x0) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="3801000018"], 0x138}, 0x1, 0x0, 0x0, 0x8801}, 0x0) 485.63086ms ago: executing program 3 (id=1160): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000004cc311ec8500000075000000a70000000800000095"], &(0x7f0000000140)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000000)='kfree\x00', r0}, 0x10) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r1, &(0x7f0000000340)={0xa, 0x5, 0x0, @ipv4={'\x00', '\xff\xff', @remote}, 0xfffffffe}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x1, &(0x7f0000000080)=@gcm_128={{0x304}, "a6341a1a379332f5", "1fd33c81cf7995313c09de00fd6ded74", "62266bd8", "1e00040000000100"}, 0x28) write$binfmt_script(r1, &(0x7f0000000500)={'#! ', './file0'}, 0xb) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r1, 0x6, 0x23, &(0x7f0000000280)={&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffd87}, &(0x7f0000000240)=0x40) writev(r1, &(0x7f0000000100)=[{&(0x7f0000000a40)="fb", 0x1}], 0x1) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f0000000040)=0x1, 0x4) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x72, 0x0, 0x7fff0000}]}) close_range(r2, 0xffffffffffffffff, 0x2000000) 449.526491ms ago: executing program 5 (id=1161): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002010000850000004300000095"], 0x0, 0x400000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) r2 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, 0x0) r3 = socket(0x400000000010, 0x3, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, 0x0}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000006500)=@deltfilter={0xb90, 0x2d, 0x3, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x10, 0x9}, {0x6, 0xa}, {0xb, 0xf}}, [@TCA_CHAIN={0x8, 0xb, 0xfff}, @filter_kind_options=@f_fw={{0x7}, {0x4}}, @filter_kind_options=@f_basic={{0xa}, {0xb4c, 0x2, [@TCA_BASIC_POLICE={0x84, 0x4, [@TCA_POLICE_TBF={0x3c, 0x1, {0x7, 0x8, 0x1, 0x0, 0xfffff000, {0xff, 0x1, 0x8, 0xffff, 0x0, 0x1ff}, {0x4, 0x2, 0x2000, 0x9, 0x6, 0x8}, 0x9, 0x3feb, 0x45}}, @TCA_POLICE_TBF={0x3c, 0x1, {0x8, 0x3, 0xf8, 0x2, 0x10, {0x8, 0x2, 0x8, 0x6827, 0x2, 0x9}, {0x3, 0x2, 0x0, 0x80, 0x2, 0x7}, 0x3822, 0xffff95a0, 0x78f57b7c}}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x5}]}, @TCA_BASIC_EMATCHES={0x114, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0x10c, 0x2, 0x0, 0x1, [@TCF_EM_NBYTE={0x10, 0x2, 0x0, 0x0, {{0xfeff, 0x2, 0x7}, {0x5, 0x0, 0x2}}}, @TCF_EM_CONTAINER={0xe8, 0x3, 0x0, 0x0, {{0xff, 0x0, 0x3}, "c362b19a69d6db480892a9327f2b0d2c9059c2f1015384f0c893b5b0282016e07d2e9465b4141beb0cd48657dedb35d8b2764426babfbc99d4712a4dee254d6fcf855232cc915ef91af613ec11141a6868773774b5e8d129bb7b83f6fe983ea59bacc9809e5d07d39b64a4aad7d1de6a48e001c15a1bc977faabc0f490c51df5ec094afea29c2be368da8a4b261cbef8baf8c6691d6ffb6bba4f01d00266c06e919f24d7509cfa7259b028fa4aba60182a38cad1a58fb8fa75b94791c5949cfd5791be9a2635861a07e200df6fbe112e371a72185e9aaf87091f12"}}, @TCF_EM_NBYTE={0x10, 0x3, 0x0, 0x0, {{0x8, 0x2, 0x7f}, {0x7f, 0x0, 0x2}}}]}, @TCA_EMATCH_TREE_LIST={0x4}]}, @TCA_BASIC_ACT={0x168, 0x3, [@m_tunnel_key={0x34, 0xf, 0x0, 0x0, {{0xf}, {0x4}, {0x4}, {0xc, 0x7, {0x0, 0x92968cd411da742f}}, {0xc, 0x8, {0x2, 0x3}}}}, @m_simple={0x130, 0xf, 0x0, 0x0, {{0xb}, {0x34, 0x2, 0x0, 0x1, [@TCA_DEF_PARMS={0x18, 0x2, {0x8, 0x1, 0x8, 0x4, 0x5}}, @TCA_DEF_DATA={0xd, 0x3, '/dev/ppp\x00'}, @TCA_DEF_DATA={0x7, 0x3, '/-\x00'}]}, {0xd2, 0x6, "c034edabfbc1062b16e8f78f492867976c0f9e7260f18b3f5114f7a833ffbda2ba393efcab348243c2b45e9b2121078180554678c6539cd2399c3672428c83d8990408812eb69b6b575662d479c84f3f61be07e12e0440c0973981ef88f264424ea143f24ece1bf756d64e1460bc4cc34728c004b16d813203e1c670ac586b4959a4155dfe4c09507e7f23f5fe2ad356e90a0a771e32bffa6446d56723171d7421ced0cb300c4533aec3466bcec5e8ebb628933a8fea84d7d03f561670e3168761033659b00c734f16a0c01444ea"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x0, 0x2}}}}]}, @TCA_BASIC_POLICE={0x848, 0x4, [@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x8, 0x200, 0x80, 0x80000001, 0x8, 0x4, 0xe544, 0x80000000, 0x5, 0x8, 0xda, 0x5, 0x4, 0x10001, 0x6, 0x800000, 0x7, 0x80, 0x35ef, 0x0, 0x3, 0x10000, 0x5, 0x5, 0x4, 0xfffffffb, 0x3, 0x4, 0x2, 0x5, 0x2c2, 0x1, 0x5, 0x3, 0x0, 0x3ff, 0x1, 0x0, 0x40, 0xff, 0x7, 0x1, 0x0, 0x2, 0x80000000, 0x3ff, 0x0, 0x5, 0xfff, 0x6, 0x3, 0x7, 0x9, 0x8, 0x1, 0xf7, 0x1, 0x3ff, 0x9ae, 0x0, 0x4, 0x9, 0x8000, 0x401, 0xcc8, 0xd, 0x4, 0x9, 0x8, 0xb5d, 0x7, 0x1, 0x1000, 0x0, 0x2, 0x8, 0x4, 0x3, 0xd8dd, 0x6, 0x1, 0x81, 0x7fff, 0x7, 0x1, 0x7, 0x4, 0x0, 0x8, 0x5, 0x4, 0x8, 0x1000, 0x14, 0x7, 0x8, 0xfd, 0x10000, 0x2, 0x0, 0x4, 0x58, 0x3ff0, 0x7fff, 0xe5, 0x3, 0x1ff, 0x9, 0xf, 0x8, 0x8001, 0x0, 0x7fffffff, 0x0, 0xfffffe01, 0x6, 0x7fffffff, 0xd35, 0x0, 0x8000, 0x5, 0x0, 0x1, 0x3ff, 0xfff, 0x3, 0x800, 0xffffffff, 0x1, 0x1, 0x3, 0xa9, 0x0, 0x10, 0x6, 0x0, 0x9, 0x3, 0x10001, 0x3, 0x8, 0x4, 0xfffffffd, 0x401, 0xffffffff, 0xd4, 0x3, 0x3, 0x6, 0x5, 0x2, 0x6a, 0x0, 0x4, 0x3, 0x0, 0x81, 0x7fffffff, 0x4, 0x6, 0x5e5e, 0x4, 0x9e, 0x0, 0x477e, 0x7ff, 0x101, 0xac7, 0x80, 0x1, 0x2, 0x4, 0x80, 0x0, 0x8, 0x2, 0x5da20, 0x7, 0x3, 0x9, 0x10, 0x0, 0x5, 0x7, 0x0, 0x0, 0x8, 0x0, 0x1, 0x8, 0x5, 0xa6, 0x1, 0x5, 0x1000, 0xc, 0x4, 0x9, 0x22, 0x1, 0x5, 0xd, 0x80, 0x8000000, 0xf6d3, 0xb4d, 0x4, 0x4, 0x8, 0x3, 0x300000, 0xfffff7bf, 0x7, 0x3f, 0x9, 0x1, 0x8, 0x7, 0x3, 0xfffffffb, 0xd, 0xb7, 0x8, 0x6, 0x3, 0x40, 0x8, 0x9, 0x4, 0x2, 0x919b6a8, 0xd8000000, 0xffffff1b, 0xffffff74, 0xa, 0x6, 0x7ff, 0x1, 0x6, 0x8, 0x9, 0x80000001, 0x3, 0x9, 0x2, 0x1, 0x100, 0x5, 0x6, 0x3, 0x7, 0x2a9, 0xf, 0x2, 0x4, 0x8001]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x75, 0x20000000, 0x4, 0x2, 0xfffffff7, {0x79, 0x2, 0xfffd, 0xffff, 0x7, 0x4}, {0x8, 0x2, 0xb, 0x401, 0x1, 0x9}, 0xfffff8c7, 0x1, 0xc9}}, @TCA_POLICE_RATE={0x404, 0x2, [0x5, 0x7, 0xb, 0x7, 0x80, 0x0, 0xded0, 0xfffffffe, 0x81, 0xf7, 0x1, 0x0, 0xfffffff8, 0x800, 0x3b, 0x2, 0x6, 0x1, 0xb0cf, 0xeb, 0x401, 0x4, 0xf, 0x1, 0xfffffffd, 0x64f5, 0x6, 0x8, 0x9, 0x3, 0xe, 0x7, 0xe34, 0x8, 0x4, 0x2, 0x2, 0xfffffff2, 0x6, 0x3, 0x7, 0x2, 0x4, 0x1, 0x7fffffff, 0x0, 0x8, 0x3, 0x7, 0x842, 0xc, 0x5, 0xef27, 0x80, 0xf9, 0xf04, 0x7, 0x4, 0x5f9, 0x3, 0x9, 0x10, 0x4, 0x10001, 0x9, 0xf6db, 0x63aa, 0x6, 0x9, 0x2, 0x6, 0xe08f, 0x2, 0x2, 0x7, 0x0, 0x7, 0x3, 0xf08c, 0x3, 0x1, 0x80000001, 0xa, 0xa07d, 0x3, 0x8, 0x0, 0x6, 0x8, 0x5, 0x4, 0x6, 0x7, 0x80000000, 0x4, 0x9, 0x7, 0x1, 0x0, 0x0, 0x48, 0x8, 0x5, 0x2, 0x3, 0xffff, 0x5, 0xc46f, 0x4, 0x7fff, 0x81, 0x10000005, 0x7fff, 0xffffff05, 0x4, 0x140, 0x2, 0xe, 0xfffffff8, 0x6, 0x40, 0x0, 0x8001, 0x4, 0x6, 0x7, 0x543, 0xb56, 0x0, 0x4e05, 0x8, 0x6, 0x3, 0x200, 0x4, 0x3, 0x80000000, 0x9, 0x4, 0x5a, 0x6, 0x7, 0xfffffffc, 0x8001, 0xa, 0xcb, 0x3, 0x7, 0x1, 0x1, 0x78, 0xa0000000, 0x8, 0xe76, 0x7, 0x19, 0x3, 0xb6, 0x5, 0x6c05, 0x0, 0x7, 0x4, 0x6, 0x0, 0x200, 0x3, 0xffffffff, 0x7fffffff, 0x494d, 0x5, 0x9, 0x9, 0x7, 0xd, 0x8, 0x800, 0x2, 0xfffff00e, 0xfffffff7, 0xd3, 0x3, 0x1, 0x43b0, 0x401, 0x8, 0x2, 0x9, 0x8, 0x3, 0x7, 0x7, 0x8, 0x3, 0x8, 0x3, 0x1, 0x9, 0x5, 0x3, 0x800, 0x80000000, 0x3, 0x4, 0xe, 0xaf, 0x1, 0x365, 0x0, 0xa4e, 0x9, 0x1, 0x1, 0x4, 0xc, 0xe2b, 0x3, 0x9, 0xe, 0x8, 0x80000000, 0x8001, 0x397, 0x80000001, 0x5, 0x7f, 0x4, 0x51, 0x7f, 0x81, 0x0, 0x9, 0x2, 0x4, 0x1, 0x8001, 0xa6, 0x90000000, 0xfffffff9, 0x1ff, 0x6, 0x3, 0x5, 0xd, 0x2, 0xacdd, 0x9, 0x5, 0x7fff, 0x2, 0x1, 0xffffffff, 0x3, 0x6, 0x9, 0x7]}]}]}}]}, 0xb90}, 0x1, 0x0, 0x0, 0x2000c0c1}, 0x800) r5 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0xc0802, 0x0) ioctl$PPPIOCNEWUNIT(r5, 0xc004743e, &(0x7f00000000c0)) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000000)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000580), &(0x7f00000005c0)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xd, &(0x7f00000004c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003000000650000000800000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mkdir(&(0x7f0000000200)='./control\x00', 0x15d) r7 = socket$packet(0x11, 0x3, 0x300) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x3, 0xc, &(0x7f0000000c40)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000006000000850000002300000095"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x6f) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r9, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000040)={'ip6gretap0\x00', 0x0}) sendmsg$nl_route(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYBLOB="6800000010000100"/20, @ANYRES32=r10, @ANYBLOB="0000000000000000480012800e0001006970366772657461700000003400028008000100", @ANYRES32, @ANYBLOB="14000600fe800000000000000000000000000015140007"], 0x68}, 0x1, 0x0, 0x0, 0x810}, 0x140) sendto$packet(r7, &(0x7f0000000180)="a6bea8a120e5f8320c30ce5086dda5e986f34c10d8c39c3002de8ec445ae083a4b7fc08a086fc691", 0x28, 0x0, &(0x7f0000000140)={0x11, 0x0, r10, 0x1, 0x0, 0x6, @random="ad446050e878"}, 0x14) 273.077555ms ago: executing program 2 (id=1162): r0 = socket(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB, @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f66f63bb850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kmem_cache_free\x00', r1}, 0x10) connect$netlink(r0, &(0x7f0000000300)=@proc={0x10, 0x0, 0x25dfdffc}, 0xc) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={&(0x7f0000000000), 0xc, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0x18, 0x31, 0x829, 0x0, 0x0, {0x0, 0x0, 0x2}, [{0x4}]}, 0x18}}, 0x48014) 199.953246ms ago: executing program 2 (id=1163): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x20, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2, 0x0, 0x7fff}, 0x18) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{r0}, &(0x7f0000000200), &(0x7f0000000240)=r1}, 0x20) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x40000, 0x0) r4 = bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000040)=0x2) readv(r3, &(0x7f0000000000)=[{&(0x7f0000000440)=""/244, 0xf4}], 0x1) ioctl$TIOCVHANGUP(r3, 0x5437, 0x0) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000540)={0x118, 0x13, 0xb, 0x401, 0x70bd28, 0x25dfdbfc, {0x0, 0x0, 0x3}, [@typed={0x14, 0x118, 0x0, 0x0, @ipv6=@ipv4={'\x00', '\xff\xff', @multicast2}}, @generic="8f5b543314db3566da6ecfdd6d6f9b7906c30a68af5cfb5abc9181baca7866299ee9e5f7665866969ffd590400ee7389b0887db97607ef5ff078c1287d7c01365a84e75a8f282f1b1d1a0f0625757d4de05037f79a4d5b6542018deeca51613c648f4382b2159879aacc7d03bd2b40fcf13c9f00b0ed70d3abcce5cee6d022dc7f01899e338ddeb9ed33b3102724b40bca12866e4449e181590e1608331a205ee7eb1aabef4abde386643afc1c71a455ed6acdbc9e9cf28b6429e2bd31039f8f034f97feef340e77a5326348e3e0c7777db1b45e01c2c6541e5084e01ae8a86e1bdc60179b8bc05cd76cdb451f21c0"]}, 0x118}}, 0x0) 112.964938ms ago: executing program 3 (id=1164): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a00)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="1804000000000000000000000000000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b100000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0xc94284a3061bb7fe, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x23, 0x0, 0x0, 0x10, 0x8000}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000002000000110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000080000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000030000009500000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000007000000010005000900000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000340)={0x1b, 0x0, 0x0, 0x3, 0x0, 0xffffffffffffffff, 0xf322, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x3, 0x5}, 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000980)='mm_page_free\x00', r2}, 0x18) kexec_load(0x0, 0x1, &(0x7f0000000140)=[{0x0, 0x3e00, 0x116094000, 0x41000000}], 0x0) 108.291448ms ago: executing program 0 (id=1165): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB], 0x0, 0x2003, 0x0, 0x0, 0x40f00, 0x49, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000180)='sys_enter\x00', r0}, 0x10) setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x25, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2500000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xffb}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x10) bind$inet(0xffffffffffffffff, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(0xffffffffffffffff, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000000800000008"], 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{r2}, &(0x7f0000000200), &(0x7f0000000240)=r3}, 0x20) symlinkat(&(0x7f0000002040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00') removexattr(&(0x7f0000000080)='./file0\x00', &(0x7f00000003c0)=ANY=[@ANYBLOB='trus']) syz_open_procfs(0x0, &(0x7f0000000000)='net/vlan/vlan0\x00') socket$nl_generic(0x10, 0x3, 0x10) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFVLAN_DEL_VLAN_CMD(r4, 0x8982, &(0x7f0000000040)={0x1, 'vlan0\x00', {}, 0x2}) 89.243458ms ago: executing program 2 (id=1166): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b704000008000000850000007800000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kmem_cache_free\x00', r1}, 0x10) openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/bus/input/devices\x00', 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000340)='kmem_cache_free\x00'}, 0x18) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r2, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10) connect$inet(r2, &(0x7f00000009c0)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x21}}, 0x10) shutdown(r2, 0x1) 82.966369ms ago: executing program 1 (id=1167): setreuid(0xee01, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r3}, 0x10) r4 = socket$kcm(0x2, 0x1000000000000002, 0x0) sendmsg$inet(r4, 0x0, 0x0) 76.363738ms ago: executing program 5 (id=1168): r0 = socket$unix(0x1, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'ipvlan0\x00', 0x0}) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0100000004000000ff0f000007"], 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='sys_enter\x00', r4}, 0x10) mount_setattr(0xffffffffffffff9c, 0x0, 0x8100, 0x0, 0x0) r5 = signalfd4(0xffffffffffffffff, &(0x7f0000000040), 0x8, 0x0) r6 = epoll_create1(0x0) mount$nfs4(0x0, &(0x7f0000000240)='.\x00', &(0x7f00000003c0), 0x200000, 0x0) epoll_ctl$EPOLL_CTL_ADD(r6, 0x1, r5, &(0x7f000001bff4)={0x2}) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYRESHEX=r1, @ANYRES64=r0, @ANYRES8], 0x4c}}, 0x0) 2.0802ms ago: executing program 0 (id=1169): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000a80)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000001340)={0x11, 0x10, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000004000000b705000008000000850000006a00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) r2 = openat$selinux_member(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$selinux_access(r2, &(0x7f0000000080)=ANY=[@ANYBLOB="73797374656d1f7557657865637f742973797374656d5f753aff3a73302030"], 0x56) 448.39µs ago: executing program 2 (id=1170): r0 = memfd_create(&(0x7f00000000c0)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf3:\x99\x1e\xac`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\xd2q#\xc6\xca\x97\x9d\xcb\x1e\x80\xd6\xd5%N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xec', 0x0) (async) r1 = socket(0x840000000002, 0x3, 0x81) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000100)={0x0, 0x0, 0x0}, &(0x7f0000000080)=0xc) lchown(&(0x7f0000000000)='.\x00', 0x0, r2) (async) r3 = getpgrp(0x0) (async) lstat(&(0x7f0000000940)='./file0\x00', &(0x7f0000000980)={0x0, 0x0, 0x0, 0x0, 0x0}) (async) getresgid(&(0x7f0000000a00), &(0x7f0000000a40), &(0x7f0000000a80)=0x0) (async) r6 = getpgrp(0xffffffffffffffff) kcmp(r6, r6, 0x3, 0xffffffffffffffff, 0xffffffffffffffff) (async) r7 = socket(0x10, 0x3, 0x0) getsockopt$sock_cred(r7, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setuid(r8) getresgid(&(0x7f0000000ac0), &(0x7f0000000b00), &(0x7f0000000b40)=0x0) r10 = syz_open_dev$rtc(&(0x7f0000000d80), 0x6, 0x4000) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f0000000dc0)={{0x1, 0x1, 0x18, r0, {0x330}}, './file0\x00'}) (async) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000e00)={0x0}, &(0x7f0000000e40)=0xc) statx(0xffffffffffffff9c, &(0x7f0000000e80)='./file0\x00', 0x400, 0x252, &(0x7f0000000ec0)={0x0, 0x0, 0x0, 0x0, 0x0}) r14 = getpid() getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000001080)={0x0, 0x0, 0x0}, &(0x7f00000010c0)=0xc) (async) ioctl$sock_SIOCGPGRP(r11, 0x8904, &(0x7f0000000380)=0x0) msgctl$IPC_SET(0x0, 0x1, &(0x7f0000001180)={{0x2, 0x0, 0x0, 0x0, r16, 0x12, 0xee9}, 0x0, 0x0, 0x9, 0x3, 0x2, 0xcc, 0x10001, 0x8159, 0x7, 0x1000, r17, r14}) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f0000000fc0)={'\x00', 0xfffa, 0x40400, 0x7, 0x20000000000d, 0x200, 0x0}) (async) newfstatat(0xffffffffffffff9c, &(0x7f0000001040)='./file1\x00', &(0x7f0000001080)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x1000) r20 = getgid() keyctl$chown(0x4, 0x0, 0x0, r20) (async) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000017c0)=[{{&(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f00000006c0)=[{&(0x7f0000000400)="28492b3289b2c44167dfd25d3ea38dc04d14e7dee5032ad99e9cb0bea932fbd4edb0662f5633c16626014c7e21bd56b956009b29f24b602f33092b1f4b0330c3dae1ab9228ebe5c1b57b8a8ea88300c8c2405e45a6a5adb3d527bd7af2b2c3baab91cb66725c5c1cf5cdf0aa299b94c811dd8f16f83fc93fd496360cdb50397529429a758782df76a5779f8f98ce5d", 0x8f}, {&(0x7f00000004c0)="081efb50837395a24b9963f1b1efc3ec137f93964da314354050cb488c775902225401fcde2aaab1af62668feca753d6b67e4f070f9e17527ae0578a7220e49695253e6575c6cd3ae0422a3712e485850b3d7cee64ebe178f4201692430aec95cb38af7762be664868c429e6516038377afa6b429bc10698efd9c71d985f558e807e5eb6edc849d6975019c12a33fbfaba7d312d3d329dba2d09cd2913ddcfd8777d6c80c1f649d830197f2a15f883a6aff0281ed54fb348566167ce0b100d56903d8396c1b1e4970a8ebddeebe27322b1695a2b521a7f66d02613273485253a500bc9e77b2e489fd174e8f5417fb421419aaae120b3e2", 0xf7}, {&(0x7f0000000080)="999e26e0b795e442d8f402a15210b4ef256cb1442b755934408f8cd9daf0c9", 0x1f}, {&(0x7f0000000240)="fd98822fad9bd193b6f3455059bfab72bbc15e7e372df9fb33738b00245604da4a687313ce03233c8908aa3e328460b762a7fcd1c8e7f25371976a3040085b5547ead6505fe7667fc4b5849b04", 0x4d}, {&(0x7f00000005c0)="180631b80cdb055bd0b3886d602fb89eb8973a3e94b72f80b45215e74bf5e21bf0a25c2fe941e40a6ac833b4bcb3ec9fcf68f2e617933a83dfaf52a740b63522d603b865884f1c773fc1ae72ad3f94bf16dabd53e5d0857a2f55e0800caf2fc65d335938881aef47d82890b7f548324a9e39f75a01976d8404f1b72f2579590efc21358c6aa73e8a4da230951ef2323faf98804f4b34e50b1053bc0da91523c96201c262280d2dbdb6b71ddd9f5c73253474858abb00d9ee436201986bbbf0a008a8294d951ff72eb0acc136fa", 0xcd}], 0x5, &(0x7f0000001900)=ANY=[@ANYRES32=r0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=r2, @ANYBLOB="000000001c000000000000000100000001000000", @ANYRES32=r0, @ANYRES32=r0, @ANYRES32=r0, @ANYBLOB="00000010140000000000000001000000010000008f8ddf216d0161ea3c00c692ebadd40004f7f977df3d66ad4d0db38ab90901f72c19e1d5a2f08d5cc714f80954c4e05a0a4bd4", @ANYRES32=r0, @ANYBLOB='\x00\x00\x00\x00'], 0x58, 0x8000000}}, {{0x0, 0x0, &(0x7f0000000900)=[{&(0x7f0000000800)="d1630a54282f6652d6ee666512dcd6166fb4b8d76fa5138ae5ec7267b1f7a9a59ff75932cdf1dd110d271847276f1802b2c8689b6ac2e6ad7293b5f7f99b5ce87bf0e20da36ab30b0266050e9437fe4320fc35036ee31e547e75502516e4fbecf28b566c5b1b06b55e66c1d641810d684ecb61679351a602e012b20f7ed3a5e294a978097076e3409f508a556e5bb483beb67c97fe2ebf2466016e4d6a26c823950554f1ec623a28ab67902d40378b73650b3dc770f31bcf792fb29e53edaf85f3bdcf8362589dbe5decd308127446339cf31ec283af7908fa1b1cec4495129f119f4a", 0xe3}], 0x1, &(0x7f0000000b80)=[@cred={{0x1c, 0x1, 0x2, {r3, r4, r5}}}, @cred={{0x1c, 0x1, 0x2, {r6, r8, r9}}}], 0x40, 0x4000881}}, {{&(0x7f0000000c00)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000000d40)=[{&(0x7f0000000d00)="25ad2eef0d8cb75cefbad25c0b8736", 0xf}], 0x1, &(0x7f00000019c0)=ANY=[@ANYBLOB="24000000000000000100000001000000", @ANYRES32=r10, @ANYRES32=r0, @ANYRES32=r0, @ANYRES32=r15, @ANYRES32=r18, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=r12, @ANYRES32=r13, @ANYRES32=r16, @ANYBLOB="000000001c00fec200100000010000000200000050adcd3ed820b8f57f6743028d63540cb6760a09be936a31df9f4b7df80e8ab409f2e6955b4f10f4a57850bad81f544719b11030df515eb55e4112d6255ffb0cdb7b84dd8214038099841dfedaffc955b04449841ca68400213e91ef0999f8f3553da914c3d9905abd209fe774e1902ec2f0956b27f41bf8f1dfa8f7bc1aa1d67a673bb86da0581d658ebb165bdc1d", @ANYRES32=r18, @ANYRES32=r19, @ANYRES16=r17, @ANYBLOB='\x00\x00\x00\x00'], 0x68, 0x800}}, {{&(0x7f0000001180)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000001540)=[{&(0x7f0000001200)="931e5a745580bc44d45ffa1f54b415a0c69133c0cc6161ab7120205fa11534c27c393ce64fec78872b898d3a59caa3a01f7ad0a7d591e98915774daa7845d7942c211d503ece03e85407bb9477292298fce09c519efff313852a8aadaf84c6bcddd5356770b99e7cc441acab74f3248789b28bf09b71cfaebc4909af9ef5cf3b24", 0x81}, {&(0x7f00000012c0)="a54f8ce96b04fc984756f4c3dd30773941d73d96cc3634835fb83c64e82c280f9abde4043c7876ac8986aee88335a209e5030677c9be1ed872a58ea23328dc72b4c7a5fbf2052a08486c386633eab3c2460077eb846e3a147c6853b7f2632b2932543e19ce6fc91f35eea6a0b96a524871277700dc24e4bbbfc6be087575c621e53d577c9853bf7ec76c9233e6ec0d43e38ea66569f2a5d0970f", 0x9a}, {&(0x7f0000001380)="72bd01ea439d2bacc854be84274cb2adf7662c5843b2b2aef3a55b9dad97433b8514e8cdd70f17a0e2958aaf1ff792f1223db4d874b58b217587670871b743108a34e72e6685df9f74723e25d89f8bef70a98a42be3c053d01d25382acd84195732e29d0993c14b5c0d33d5f27e73f6493d5d70506db01dc94b36f04eb4da2296e4fc72f1a94a2ee8a53c9f2e6eff1fb7929ed49720d4a95b5832274d8382a842a20514b7139ea7ed32e1ec0bdb53fc8b6a6b63fc636190718c4", 0xba}, {&(0x7f0000001440)="8d16177150781c5720b7fd5532318f71de4fd4af0dfd3efc0249fa5b0159d9def40de877fcae6ab1a2364341fdbed855b7c40e7a907bc4cebe918c34c73bc20f14c23fdccfcd0012bd4573dfe55950d4f66906f8e46ebec1b591227ea658cfb576eaadc0eecbd36aa4ac34fb3127a13a1e52eb3b628abc64f8874503fb5fab1aa08ab04b97933595b889ea1b94dc1c1e117dd4434b00489012f7ffbfd41454599a1cc52c56f976bb46678fcb3b2c1e254df7bb651a03bbba22518b026a4c8237bc146081e313a508ee30099829", 0xcd}], 0x4, 0x0, 0x0, 0x20000000}}, {{&(0x7f0000001580)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000001780)=[{&(0x7f0000001600)="30e19aa7e8efd18b4161f816985fc1dd0f1abcc31a20f5348783cc1490f9da7438504c06cbb0a11d04b00cedb8916b478fab91505aeeedee31d992eacbd5c67bfcbea7ba22013ec170078ae088c678428a81e1b270296bf5621a706467f7eaedebed454269cab197b73c0fa7fa7648acf29f16cd78fe42b4adf461c2a48ce8cd322216c2fdda8301ec9ddb4776552f5400095ff24b6b81d118b6f1ee604294c7b25c47c713e091db0482c2cc3d4d8677be8f7a21dbfa227c90ec2cec3f4fccef91453544e6bcbf", 0xc7}, {&(0x7f0000001700)="583ca00c48132b58ae3c286ef55b3426d9d9b669887dcf4ee7dbcad1c233218c196b79c9ae369e36bc875b9310a59100329b4f6994d4b7adee544c02cd8e40b75ddbed43923c70ba2458e3ee2cd25d95e3a4efd9f5340c39eb56ff2ed5b508c5e2f4fbcf5d6d4a0f5652e2cd8d36d074b5f73a5abad99656daace5fcdc78", 0x7e}], 0x2}}], 0x5, 0x4008884) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xb, &(0x7f0000000c80)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) write$binfmt_script(r0, &(0x7f00000003c0)={'#! ', './file0'}, 0xb) (async) ioctl$SCSI_IOCTL_SEND_COMMAND(r11, 0x1, &(0x7f0000000040)=ANY=[@ANYBLOB="0100af005256282c7dd8202700"]) (async) execveat(r0, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) 0s ago: executing program 3 (id=1171): bpf$MAP_CREATE(0x0, 0x0, 0x48) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f00000001c0), 0x1e9a03, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000880)=@base={0x1, 0x4, 0x7fe2, 0x1}, 0x50) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00'}, 0x10) syz_emit_ethernet(0xfdef, &(0x7f0000001c80)={@random="e904a200", @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0xe000, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x0, 0xc, 0x0, @gue={{0x1, 0x1, 0x1, 0x4, 0x0, @void}}}}}}}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[], 0x48) r1 = socket$inet6(0xa, 0x3, 0x8000000003c) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f00000014c0)=@raw={'raw\x00', 0x8, 0x3, 0x528, 0x0, 0xffffffff, 0xffffffff, 0xd0, 0xffffffff, 0x458, 0xffffffff, 0xffffffff, 0x458, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@empty, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'wg1\x00', 'gre0\x00', {}, {}, 0x62}, 0x0, 0x358, 0x388, 0x0, {}, [@common=@inet=@hashlimit3={{0x158}, {'veth0_to_hsr\x00', {0x4, 0x8, 0x20, 0x5e1b2d47, 0xf91, 0x5, 0x4, 0x9f7, 0x18}, {0x8}}}, @common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x588) r2 = openat$tun(0xffffffffffffff9c, 0x0, 0x1c1341, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, 0x0) close(0xffffffffffffffff) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) write$cgroup_subtree(r2, &(0x7f0000000440)=ANY=[], 0xfdef) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) syz_io_uring_setup(0x5248, &(0x7f00000006c0)={0x0, 0x1f3f, 0x8000, 0x0, 0x1df}, &(0x7f0000000000)=0x0, &(0x7f0000000080)) syz_io_uring_complete(r3) r4 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TCSETSW2(r4, 0x402c542c, &(0x7f00000000c0)={0x10001, 0x2, 0x2, 0x811a, 0x1, "000200000000000000009dd0ffd76d7fcb0b0e", 0x6, 0x203}) writev(r4, &(0x7f0000000080)=[{&(0x7f0000000100)="6717a676614119e75a8dcc0c9e538bdb0371a16fa270dabd5b6634edeec1726bc97870c38b3d9acca48a1af6ba9dd7cdf69341a5cf35e178258aed8d8e34108416ebe41b5af3877ed4a579a898dc3fa7", 0xfffffda1}], 0x1) ioctl$TIOCSTI(r4, 0x5412, &(0x7f0000000000)=0xff) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000740)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r6, 0x0, r5, 0xffffffffffffffff, 0x4, 0xd) syz_mount_image$ext4(&(0x7f0000000680)='ext2\x00', &(0x7f0000000040)='./file2\x00', 0x10000, &(0x7f00000000c0)={[{@jqfmt_vfsv1}]}, 0x1, 0x559, &(0x7f0000000100)="$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") syz_emit_ethernet(0x83, &(0x7f0000000240)=ANY=[], 0x0) getpid() ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f00000000c0)) kernel console output (not intermixed with test programs): 901] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 66.499568][ T4909] serio: Serial port ptm0 [ 66.521606][ T3312] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 66.652086][ T4926] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 66.670889][ T4928] netlink: 64 bytes leftover after parsing attributes in process `syz.2.494'. [ 66.680396][ T3380] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 66.730434][ T3380] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 66.783117][ T4936] netlink: 28 bytes leftover after parsing attributes in process `syz.4.497'. [ 66.783143][ T4936] netlink: 28 bytes leftover after parsing attributes in process `syz.4.497'. [ 66.783159][ T4936] FAULT_INJECTION: forcing a failure. [ 66.783159][ T4936] name failslab, interval 1, probability 0, space 0, times 0 [ 66.783189][ T4936] CPU: 0 UID: 0 PID: 4936 Comm: syz.4.497 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 66.783220][ T4936] Tainted: [W]=WARN [ 66.783227][ T4936] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 66.783261][ T4936] Call Trace: [ 66.783268][ T4936] [ 66.783276][ T4936] __dump_stack+0x1d/0x30 [ 66.783302][ T4936] dump_stack_lvl+0xe8/0x140 [ 66.783326][ T4936] dump_stack+0x15/0x1b [ 66.783401][ T4936] should_fail_ex+0x265/0x280 [ 66.783429][ T4936] should_failslab+0x8c/0xb0 [ 66.783458][ T4936] kmem_cache_alloc_noprof+0x50/0x310 [ 66.783489][ T4936] ? radix_tree_node_alloc+0x8a/0x1f0 [ 66.783560][ T4936] radix_tree_node_alloc+0x8a/0x1f0 [ 66.783591][ T4936] ? vprintk_store+0x800/0x860 [ 66.783610][ T4936] idr_get_free+0x1fa/0x550 [ 66.783637][ T4936] idr_alloc_u32+0xca/0x180 [ 66.783721][ T4936] tcf_idr_check_alloc+0x193/0x240 [ 66.783755][ T4936] tunnel_key_init+0x1b7/0xe20 [ 66.783842][ T4936] ? __nla_validate_parse+0x16f1/0x1d00 [ 66.783878][ T4936] ? __nla_parse+0x40/0x60 [ 66.783919][ T4936] tcf_action_init_1+0x367/0x4a0 [ 66.783961][ T4936] tcf_action_init+0x267/0x6d0 [ 66.784036][ T4936] ? mark_reg_read+0x59/0x340 [ 66.784090][ T4936] tc_ctl_action+0x291/0x830 [ 66.784138][ T4936] ? __pfx_tc_ctl_action+0x10/0x10 [ 66.784297][ T4936] rtnetlink_rcv_msg+0x657/0x6d0 [ 66.784339][ T4936] netlink_rcv_skb+0x123/0x220 [ 66.784421][ T4936] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 66.784459][ T4936] rtnetlink_rcv+0x1c/0x30 [ 66.784489][ T4936] netlink_unicast+0x5bd/0x690 [ 66.784629][ T4936] netlink_sendmsg+0x58b/0x6b0 [ 66.784662][ T4936] ? __pfx_netlink_sendmsg+0x10/0x10 [ 66.784736][ T4936] __sock_sendmsg+0x142/0x180 [ 66.784784][ T4936] ____sys_sendmsg+0x31e/0x4e0 [ 66.784816][ T4936] ___sys_sendmsg+0x17b/0x1d0 [ 66.784912][ T4936] __x64_sys_sendmsg+0xd4/0x160 [ 66.784947][ T4936] x64_sys_call+0x191e/0x2ff0 [ 66.784970][ T4936] do_syscall_64+0xd2/0x200 [ 66.785028][ T4936] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 66.785054][ T4936] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 66.785087][ T4936] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 66.785111][ T4936] RIP: 0033:0x7f437e4feec9 [ 66.785136][ T4936] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 66.785155][ T4936] RSP: 002b:00007f437cf5f038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 66.785178][ T4936] RAX: ffffffffffffffda RBX: 00007f437e755fa0 RCX: 00007f437e4feec9 [ 66.785213][ T4936] RDX: 0000000000008000 RSI: 0000200000000300 RDI: 0000000000000007 [ 66.785227][ T4936] RBP: 00007f437cf5f090 R08: 0000000000000000 R09: 0000000000000000 [ 66.785240][ T4936] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 66.785254][ T4936] R13: 00007f437e756038 R14: 00007f437e755fa0 R15: 00007ffc5bc07fb8 [ 66.785274][ T4936] [ 66.828980][ T4938] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1538 sclass=netlink_route_socket pid=4938 comm=syz.2.498 [ 66.888649][ T4943] serio: Serial port ptm0 [ 66.975169][ T4941] loop3: detected capacity change from 0 to 512 [ 67.178217][ T4941] EXT4-fs (loop3): mounting ext2 file system using the ext4 subsystem [ 67.192414][ T12] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 67.192466][ T12] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 67.193404][ T4941] EXT4-fs error (device loop3): ext4_orphan_get:1392: inode #15: comm syz.3.495: iget: bogus i_mode (5) [ 67.193598][ T4941] EXT4-fs error (device loop3): ext4_orphan_get:1397: comm syz.3.495: couldn't read orphan inode 15 (err -117) [ 67.194093][ T4941] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 67.194158][ T4941] ext2 filesystem being mounted at /94/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 67.301876][ T4958] netlink: 12 bytes leftover after parsing attributes in process `syz.4.504'. [ 67.373805][ T4966] loop4: detected capacity change from 0 to 128 [ 67.384297][ T4964] loop1: detected capacity change from 0 to 512 [ 67.401590][ T4964] netlink: 8 bytes leftover after parsing attributes in process `syz.1.506'. [ 67.412818][ T4964] netlink: 8 bytes leftover after parsing attributes in process `syz.1.506'. [ 67.413055][ T4964] netlink: 8 bytes leftover after parsing attributes in process `syz.1.506'. [ 67.452704][ T4964] netlink: 8 bytes leftover after parsing attributes in process `syz.1.506'. [ 67.510686][ T4964] loop1: detected capacity change from 0 to 512 [ 67.523608][ T4964] EXT4-fs (loop1): orphan cleanup on readonly fs [ 67.527465][ T4970] netlink: 64 bytes leftover after parsing attributes in process `syz.0.509'. [ 67.543612][ T4964] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.506: bg 0: block 248: padding at end of block bitmap is not set [ 67.544702][ T4964] EXT4-fs error (device loop1): ext4_acquire_dquot:6937: comm syz.1.506: Failed to acquire dquot type 1 [ 67.581635][ T4964] EXT4-fs (loop1): 1 truncate cleaned up [ 67.588658][ T4964] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 67.646898][ T4964] EXT4-fs error (device loop1): ext4_lookup:1791: inode #2: comm syz.1.506: deleted inode referenced: 12 [ 67.695804][ T3307] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 67.746387][ T4742] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 67.774663][ T4952] lo speed is unknown, defaulting to 1000 [ 67.783157][ T4952] lo speed is unknown, defaulting to 1000 [ 67.907003][ T4994] loop1: detected capacity change from 0 to 512 [ 67.952117][ T4994] loop1: detected capacity change from 0 to 512 [ 67.962169][ T4994] EXT4-fs (loop1): orphan cleanup on readonly fs [ 67.973611][ T4994] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.516: bg 0: block 248: padding at end of block bitmap is not set [ 67.998490][ T4994] EXT4-fs error (device loop1): ext4_acquire_dquot:6937: comm syz.1.516: Failed to acquire dquot type 1 [ 67.999473][ T4994] EXT4-fs (loop1): 1 truncate cleaned up [ 68.013432][ T4994] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 68.084692][ T4742] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 68.252636][ T5009] loop1: detected capacity change from 0 to 512 [ 68.261651][ T5009] EXT4-fs (loop1): mounting ext2 file system using the ext4 subsystem [ 68.303144][ T5009] EXT4-fs error (device loop1): ext4_orphan_get:1392: inode #15: comm syz.1.521: iget: bogus i_mode (5) [ 68.303519][ T5009] EXT4-fs error (device loop1): ext4_orphan_get:1397: comm syz.1.521: couldn't read orphan inode 15 (err -117) [ 68.310706][ T5009] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 68.381793][ T5009] ext2 filesystem being mounted at /15/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 68.652175][ T5030] serio: Serial port ptm0 [ 68.662132][ T5034] loop4: detected capacity change from 0 to 128 [ 68.829983][ T5043] lo speed is unknown, defaulting to 1000 [ 68.831893][ T5043] lo speed is unknown, defaulting to 1000 [ 69.033785][ T5055] syz.0.541 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 69.160200][ T4742] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 69.310129][ T5074] serio: Serial port ptm0 [ 69.362477][ T5082] loop3: detected capacity change from 0 to 512 [ 69.375635][ T5085] loop1: detected capacity change from 0 to 512 [ 69.386221][ T5082] loop3: detected capacity change from 0 to 512 [ 69.396032][ T5082] EXT4-fs (loop3): orphan cleanup on readonly fs [ 69.405092][ T5082] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.552: bg 0: block 248: padding at end of block bitmap is not set [ 69.420225][ T5085] loop1: detected capacity change from 0 to 512 [ 69.427054][ T5082] EXT4-fs error (device loop3): ext4_acquire_dquot:6937: comm syz.3.552: Failed to acquire dquot type 1 [ 69.439673][ T5082] EXT4-fs (loop3): 1 truncate cleaned up [ 69.448034][ T5085] EXT4-fs (loop1): orphan cleanup on readonly fs [ 69.456144][ T5085] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.553: bg 0: block 248: padding at end of block bitmap is not set [ 69.472618][ T5082] EXT4-fs error (device loop3): ext4_lookup:1791: inode #2: comm syz.3.552: deleted inode referenced: 12 [ 69.474979][ T5085] EXT4-fs error (device loop1): ext4_acquire_dquot:6937: comm syz.1.553: Failed to acquire dquot type 1 [ 69.497154][ T5085] EXT4-fs (loop1): 1 truncate cleaned up [ 69.567035][ T5095] loop3: detected capacity change from 0 to 512 [ 69.602479][ T5095] loop3: detected capacity change from 0 to 512 [ 69.611542][ T5095] EXT4-fs (loop3): orphan cleanup on readonly fs [ 69.618997][ T5095] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.557: bg 0: block 248: padding at end of block bitmap is not set [ 69.634771][ T5095] EXT4-fs error (device loop3): ext4_acquire_dquot:6937: comm syz.3.557: Failed to acquire dquot type 1 [ 69.636956][ T5100] team0 (unregistering): Port device team_slave_0 removed [ 69.656963][ T5095] EXT4-fs (loop3): 1 truncate cleaned up [ 69.673629][ T5100] team0 (unregistering): Port device team_slave_1 removed [ 69.676866][ T5095] EXT4-fs error (device loop3): ext4_lookup:1791: inode #2: comm syz.3.557: deleted inode referenced: 12 [ 69.739606][ T5111] serio: Serial port ptm0 [ 69.761835][ T5118] loop4: detected capacity change from 0 to 128 [ 69.776977][ T5120] loop1: detected capacity change from 0 to 128 [ 69.787451][ T5120] bio_check_eod: 30 callbacks suppressed [ 69.787469][ T5120] syz.1.567: attempt to access beyond end of device [ 69.787469][ T5120] loop1: rw=0, sector=2072, nr_sectors = 1 limit=128 [ 69.977912][ T5147] loop3: detected capacity change from 0 to 512 [ 69.994485][ T5149] serio: Serial port ptm0 [ 70.014108][ T5147] loop3: detected capacity change from 0 to 512 [ 70.024322][ T5147] EXT4-fs (loop3): orphan cleanup on readonly fs [ 70.031599][ T5147] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.579: bg 0: block 248: padding at end of block bitmap is not set [ 70.048443][ T5147] EXT4-fs error (device loop3): ext4_acquire_dquot:6937: comm syz.3.579: Failed to acquire dquot type 1 [ 70.063585][ T5147] EXT4-fs (loop3): 1 truncate cleaned up [ 70.105593][ T5147] EXT4-fs error (device loop3): ext4_lookup:1791: inode #2: comm syz.3.579: deleted inode referenced: 12 [ 70.256146][ T5173] pim6reg: entered allmulticast mode [ 70.339968][ T5183] serio: Serial port ptm0 [ 70.387230][ T5187] audit_log_lost: 1168 callbacks suppressed [ 70.387245][ T5187] audit: audit_lost=3 audit_rate_limit=0 audit_backlog_limit=64 [ 70.403302][ T5187] audit: out of memory in audit_log_start [ 70.441692][ T29] audit: type=1400 audit(1758568500.425:4346): avc: denied { mount } for pid=5189 comm="syz.0.597" name="/" dev="autofs" ino=10137 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=filesystem permissive=1 [ 70.497570][ T5198] loop1: detected capacity change from 0 to 512 [ 70.528779][ T29] audit: type=1326 audit(1758568500.505:4347): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5196 comm="syz.1.598" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feb59fceec9 code=0x7ffc0000 [ 70.544808][ T5198] loop1: detected capacity change from 0 to 512 [ 70.578715][ T29] audit: type=1326 audit(1758568500.505:4348): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5196 comm="syz.1.598" exe="/root/syz-executor" sig=0 arch=c000003e syscall=256 compat=0 ip=0x7feb59fceec9 code=0x7ffc0000 [ 70.603772][ T29] audit: type=1326 audit(1758568500.505:4349): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5196 comm="syz.1.598" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feb59fceec9 code=0x7ffc0000 [ 70.628004][ T29] audit: type=1326 audit(1758568500.505:4350): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5196 comm="syz.1.598" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7feb59fceec9 code=0x7ffc0000 [ 70.651846][ T29] audit: type=1326 audit(1758568500.505:4351): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5196 comm="syz.1.598" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7feb59fcef03 code=0x7ffc0000 [ 70.676189][ T29] audit: type=1326 audit(1758568500.525:4352): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5196 comm="syz.1.598" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7feb59fcd97f code=0x7ffc0000 [ 70.688909][ T5198] EXT4-fs (loop1): orphan cleanup on readonly fs [ 70.701438][ T29] audit: type=1326 audit(1758568500.525:4353): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5196 comm="syz.1.598" exe="/root/syz-executor" sig=0 arch=c000003e syscall=11 compat=0 ip=0x7feb59fcef57 code=0x7ffc0000 [ 70.719273][ T5198] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.598: bg 0: block 248: padding at end of block bitmap is not set [ 70.779370][ T5198] EXT4-fs error (device loop1): ext4_acquire_dquot:6937: comm syz.1.598: Failed to acquire dquot type 1 [ 70.792605][ T5198] EXT4-fs (loop1): 1 truncate cleaned up [ 70.802900][ T5198] EXT4-fs mount: 8 callbacks suppressed [ 70.802917][ T5198] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 70.836324][ T5217] serio: Serial port ptm0 [ 70.871957][ T5198] EXT4-fs error (device loop1): ext4_lookup:1791: inode #2: comm syz.1.598: deleted inode referenced: 12 [ 70.915581][ T4742] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 70.958919][ T5232] loop3: detected capacity change from 0 to 512 [ 70.974971][ T5232] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 70.988635][ T5232] ext4 filesystem being mounted at /110/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 70.999845][ T5240] mmap: syz.1.616 (5240) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 71.037809][ T5238] bridge_slave_1: left allmulticast mode [ 71.044544][ T5238] bridge_slave_1: left promiscuous mode [ 71.051374][ T5238] bridge0: port 2(bridge_slave_1) entered disabled state [ 71.062753][ T5238] bridge_slave_0: left allmulticast mode [ 71.068946][ T5238] bridge_slave_0: left promiscuous mode [ 71.075199][ T5238] bridge0: port 1(bridge_slave_0) entered disabled state [ 71.080329][ T5249] loop1: detected capacity change from 0 to 512 [ 71.092518][ T5250] EXT4-fs error (device loop3): ext4_do_update_inode:5653: inode #2: comm syz.3.614: corrupted inode contents [ 71.109088][ T5249] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 71.109328][ T5250] EXT4-fs error (device loop3): ext4_dirty_inode:6538: inode #2: comm syz.3.614: mark_inode_dirty error [ 71.123285][ T5249] ext4 filesystem being mounted at /37/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 71.138066][ T5250] EXT4-fs error (device loop3): ext4_do_update_inode:5653: inode #2: comm syz.3.614: corrupted inode contents [ 71.152667][ T5249] EXT4-fs error (device loop1): ext4_do_update_inode:5653: inode #2: comm syz.1.619: corrupted inode contents [ 71.173235][ T5249] EXT4-fs error (device loop1): ext4_dirty_inode:6538: inode #2: comm syz.1.619: mark_inode_dirty error [ 71.185792][ T5249] EXT4-fs error (device loop1): ext4_do_update_inode:5653: inode #2: comm syz.1.619: corrupted inode contents [ 71.215138][ T4742] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 71.302099][ T5264] loop2: detected capacity change from 0 to 512 [ 71.303050][ T5264] EXT4-fs (loop2): mounting ext2 file system using the ext4 subsystem [ 71.304404][ T5264] EXT4-fs error (device loop2): ext4_orphan_get:1392: inode #15: comm syz.2.620: iget: bogus i_mode (5) [ 71.332438][ T5264] EXT4-fs error (device loop2): ext4_orphan_get:1397: comm syz.2.620: couldn't read orphan inode 15 (err -117) [ 71.332861][ T5264] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 71.384981][ T5267] loop1: detected capacity change from 0 to 128 [ 71.387760][ T5267] syz.1.625: attempt to access beyond end of device [ 71.387760][ T5267] loop1: rw=0, sector=2072, nr_sectors = 1 limit=128 [ 71.393529][ T5264] ext2 filesystem being mounted at /130/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 71.504277][ T5278] __nla_validate_parse: 26 callbacks suppressed [ 71.504301][ T5278] netlink: 4 bytes leftover after parsing attributes in process `syz.1.629'. [ 71.545940][ T5279] SELinux: security_context_str_to_sid (Ð-šXܘ7.H\¹ÿ %ºu@) failed with errno=-22 [ 71.553771][ T5279] netlink: 8 bytes leftover after parsing attributes in process `syz.0.630'. [ 71.568800][ T5279] netlink: 'syz.0.630': attribute type 30 has an invalid length. [ 71.585550][ T1844] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 71.585604][ T1844] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 71.585660][ T1844] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 71.618962][ T1844] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 71.815762][ T3307] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 71.853327][ T5288] loop3: detected capacity change from 0 to 512 [ 71.862351][ T5288] netlink: 8 bytes leftover after parsing attributes in process `syz.3.634'. [ 71.862816][ T5288] netlink: 8 bytes leftover after parsing attributes in process `syz.3.634'. [ 71.863193][ T5288] netlink: 8 bytes leftover after parsing attributes in process `syz.3.634'. [ 71.863365][ T5288] netlink: 8 bytes leftover after parsing attributes in process `syz.3.634'. [ 71.872347][ T5288] loop3: detected capacity change from 0 to 512 [ 71.889259][ T5288] EXT4-fs (loop3): orphan cleanup on readonly fs [ 71.953734][ T5288] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.634: bg 0: block 248: padding at end of block bitmap is not set [ 71.969154][ T5288] EXT4-fs error (device loop3): ext4_acquire_dquot:6937: comm syz.3.634: Failed to acquire dquot type 1 [ 71.983926][ T5288] EXT4-fs (loop3): 1 truncate cleaned up [ 71.984650][ T5288] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 71.994134][ T5288] EXT4-fs error (device loop3): ext4_lookup:1791: inode #2: comm syz.3.634: deleted inode referenced: 12 [ 72.009714][ T3307] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 72.074857][ T67] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 72.088417][ T5306] FAULT_INJECTION: forcing a failure. [ 72.088417][ T5306] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 72.088451][ T5306] CPU: 1 UID: 0 PID: 5306 Comm: syz.3.641 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 72.088480][ T5306] Tainted: [W]=WARN [ 72.088486][ T5306] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 72.088497][ T5306] Call Trace: [ 72.088503][ T5306] [ 72.088510][ T5306] __dump_stack+0x1d/0x30 [ 72.088578][ T5306] dump_stack_lvl+0xe8/0x140 [ 72.088597][ T5306] dump_stack+0x15/0x1b [ 72.088615][ T5306] should_fail_ex+0x265/0x280 [ 72.088698][ T5306] should_fail+0xb/0x20 [ 72.088721][ T5306] should_fail_usercopy+0x1a/0x20 [ 72.088749][ T5306] _copy_to_user+0x20/0xa0 [ 72.088784][ T5306] simple_read_from_buffer+0xb5/0x130 [ 72.088837][ T5306] proc_fail_nth_read+0x10e/0x150 [ 72.088861][ T5306] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 72.088886][ T5306] vfs_read+0x1a5/0x770 [ 72.088923][ T5306] ? __rcu_read_unlock+0x4f/0x70 [ 72.088947][ T5306] ? __fget_files+0x184/0x1c0 [ 72.088979][ T5306] ksys_read+0xda/0x1a0 [ 72.089000][ T5306] __x64_sys_read+0x40/0x50 [ 72.089020][ T5306] x64_sys_call+0x27bc/0x2ff0 [ 72.089040][ T5306] do_syscall_64+0xd2/0x200 [ 72.089085][ T5306] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 72.089109][ T5306] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 72.089139][ T5306] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 72.089196][ T5306] RIP: 0033:0x7f55ed29d8dc [ 72.089211][ T5306] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 72.089271][ T5306] RSP: 002b:00007f55ebd07030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 72.089291][ T5306] RAX: ffffffffffffffda RBX: 00007f55ed4f5fa0 RCX: 00007f55ed29d8dc [ 72.089305][ T5306] RDX: 000000000000000f RSI: 00007f55ebd070a0 RDI: 0000000000000003 [ 72.089371][ T5306] RBP: 00007f55ebd07090 R08: 0000000000000000 R09: 0000000000000000 [ 72.089384][ T5306] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 72.089397][ T5306] R13: 00007f55ed4f6038 R14: 00007f55ed4f5fa0 R15: 00007fff6c68c2c8 [ 72.089416][ T5306] [ 72.132026][ T67] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 72.168306][ T5313] loop3: detected capacity change from 0 to 512 [ 72.174809][ T5313] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=5313 comm=syz.3.647 [ 72.185728][ T5313] loop3: detected capacity change from 0 to 512 [ 72.187300][ T5313] EXT4-fs (loop3): orphan cleanup on readonly fs [ 72.187723][ T5313] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.647: bg 0: block 248: padding at end of block bitmap is not set [ 72.187930][ T5313] EXT4-fs error (device loop3): ext4_acquire_dquot:6937: comm syz.3.647: Failed to acquire dquot type 1 [ 72.188393][ T5313] EXT4-fs (loop3): 1 truncate cleaned up [ 72.188918][ T5313] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 72.211236][ T67] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 72.525086][ T5311] tipc: Started in network mode [ 72.525105][ T5311] tipc: Node identity ac14140f, cluster identity 4711 [ 72.525162][ T5311] tipc: New replicast peer: 255.255.255.255 [ 72.525285][ T5311] tipc: Enabled bearer , priority 10 [ 72.569154][ T3315] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 72.581807][ T67] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 72.592743][ T3307] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 72.625529][ T5323] netlink: 8 bytes leftover after parsing attributes in process `syz.0.651'. [ 72.646588][ T5328] loop3: detected capacity change from 0 to 128 [ 72.660572][ T5323] netlink: 8 bytes leftover after parsing attributes in process `syz.0.651'. [ 72.674421][ T5328] syz.3.650: attempt to access beyond end of device [ 72.674421][ T5328] loop3: rw=0, sector=2072, nr_sectors = 1 limit=128 [ 72.690619][ T5323] netlink: 8 bytes leftover after parsing attributes in process `syz.0.651'. [ 72.701181][ T5323] netlink: 8 bytes leftover after parsing attributes in process `syz.0.651'. [ 72.719803][ T5335] kernel profiling enabled (shift: 7) [ 72.760614][ T5335] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=35 sclass=netlink_route_socket pid=5335 comm=syz.1.654 [ 72.896655][ T5352] loop1: detected capacity change from 0 to 512 [ 72.942877][ T67] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 72.954454][ T67] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 72.964409][ T67] bond0 (unregistering): Released all slaves [ 72.971236][ T5353] loop1: detected capacity change from 0 to 512 [ 72.987151][ T5353] EXT4-fs (loop1): orphan cleanup on readonly fs [ 72.996159][ T5353] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.659: bg 0: block 248: padding at end of block bitmap is not set [ 73.018771][ T5315] lo speed is unknown, defaulting to 1000 [ 73.026225][ T5353] EXT4-fs error (device loop1): ext4_acquire_dquot:6937: comm syz.1.659: Failed to acquire dquot type 1 [ 73.039532][ T5315] lo speed is unknown, defaulting to 1000 [ 73.046428][ T67] tipc: Disabling bearer [ 73.052328][ T67] tipc: Left network mode [ 73.062218][ T5353] EXT4-fs (loop1): 1 truncate cleaned up [ 73.075957][ T5353] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 73.143196][ T67] hsr_slave_0: left promiscuous mode [ 73.150455][ T67] hsr_slave_1: left promiscuous mode [ 73.156677][ T67] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 73.168076][ T67] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 73.193781][ T67] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 73.194092][ T4742] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 73.202997][ T67] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 73.225136][ T67] veth1_macvtap: left promiscuous mode [ 73.237407][ T67] veth0_macvtap: left promiscuous mode [ 73.244564][ T67] veth1_vlan: left promiscuous mode [ 73.250718][ T67] veth0_vlan: left promiscuous mode [ 73.339893][ T67] team0 (unregistering): Port device team_slave_1 removed [ 73.352593][ T67] team0 (unregistering): Port device team_slave_0 removed [ 73.387778][ T5368] tipc: Enabling of bearer rejected, already enabled [ 73.484234][ T5315] chnl_net:caif_netlink_parms(): no params data found [ 73.517975][ T5397] bridge0: port 2(bridge_slave_1) entered disabled state [ 73.531922][ T5397] bridge0: port 1(bridge_slave_0) entered disabled state [ 73.549919][ T5397] bridge0: entered allmulticast mode [ 73.576854][ T5402] loop2: detected capacity change from 0 to 512 [ 73.596164][ T5400] bridge_slave_1: left allmulticast mode [ 73.602459][ T5400] bridge_slave_1: left promiscuous mode [ 73.609359][ T5400] bridge0: port 2(bridge_slave_1) entered disabled state [ 73.633891][ T5400] bridge_slave_0: left allmulticast mode [ 73.640031][ T5400] bridge_slave_0: left promiscuous mode [ 73.646028][ T5400] bridge0: port 1(bridge_slave_0) entered disabled state [ 73.647728][ T5406] loop2: detected capacity change from 0 to 512 [ 73.654528][ T1105] tipc: Node number set to 2886997007 [ 73.675698][ T5406] EXT4-fs (loop2): orphan cleanup on readonly fs [ 73.684545][ T5406] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.679: bg 0: block 248: padding at end of block bitmap is not set [ 73.701906][ T5406] EXT4-fs error (device loop2): ext4_acquire_dquot:6937: comm syz.2.679: Failed to acquire dquot type 1 [ 73.714973][ T5406] EXT4-fs (loop2): 1 truncate cleaned up [ 73.722832][ T5406] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 73.751403][ T5406] EXT4-fs error (device loop2): ext4_lookup:1791: inode #2: comm syz.2.679: deleted inode referenced: 12 [ 73.801684][ T3315] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 73.816418][ T5315] bridge0: port 1(bridge_slave_0) entered blocking state [ 73.826154][ T5315] bridge0: port 1(bridge_slave_0) entered disabled state [ 73.858248][ T5315] bridge_slave_0: entered allmulticast mode [ 73.874495][ T5315] bridge_slave_0: entered promiscuous mode [ 73.887429][ T5419] tipc: Enabling of bearer rejected, already enabled [ 73.896688][ T5315] bridge0: port 2(bridge_slave_1) entered blocking state [ 73.904705][ T5315] bridge0: port 2(bridge_slave_1) entered disabled state [ 73.913651][ T5315] bridge_slave_1: entered allmulticast mode [ 73.921027][ T5315] bridge_slave_1: entered promiscuous mode [ 73.952562][ T5315] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 73.965204][ T5315] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 74.003069][ T5315] team0: Port device team_slave_0 added [ 74.022954][ T5431] serio: Serial port ptm0 [ 74.024437][ T5424] netlink: 'syz.3.686': attribute type 7 has an invalid length. [ 74.038720][ T5315] team0: Port device team_slave_1 added [ 74.056688][ T5315] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 74.064717][ T5315] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 74.096490][ T5315] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 74.099891][ T5434] loop2: detected capacity change from 0 to 128 [ 74.112967][ T5315] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 74.128814][ T5315] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 74.159416][ T5315] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 74.196730][ T5315] hsr_slave_0: entered promiscuous mode [ 74.205462][ T5315] hsr_slave_1: entered promiscuous mode [ 74.212331][ T5315] debugfs: 'hsr0' already exists in 'hsr' [ 74.218879][ T5315] Cannot create hsr debugfs directory [ 74.313702][ T5315] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 74.331165][ T5315] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 74.357120][ T5315] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 74.378747][ T5315] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 74.439202][ T5465] loop3: detected capacity change from 0 to 512 [ 74.472971][ T5315] 8021q: adding VLAN 0 to HW filter on device bond0 [ 74.477557][ T5465] loop3: detected capacity change from 0 to 512 [ 74.492829][ T5465] EXT4-fs (loop3): orphan cleanup on readonly fs [ 74.500192][ T5465] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.701: bg 0: block 248: padding at end of block bitmap is not set [ 74.504626][ T5315] 8021q: adding VLAN 0 to HW filter on device team0 [ 74.524975][ T5465] EXT4-fs error (device loop3): ext4_acquire_dquot:6937: comm syz.3.701: Failed to acquire dquot type 1 [ 74.537288][ T5465] EXT4-fs (loop3): 1 truncate cleaned up [ 74.547117][ T5465] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 74.562778][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 74.562824][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 74.574196][ T1844] bridge0: port 2(bridge_slave_1) entered blocking state [ 74.574234][ T1844] bridge0: port 2(bridge_slave_1) entered forwarding state [ 74.622782][ T5470] loop1: detected capacity change from 0 to 512 [ 74.634791][ T5470] EXT4-fs (loop1): mounting ext2 file system using the ext4 subsystem [ 74.644959][ T5470] EXT4-fs error (device loop1): ext4_orphan_get:1392: inode #15: comm syz.1.702: iget: bogus i_mode (5) [ 74.645759][ T5470] EXT4-fs error (device loop1): ext4_orphan_get:1397: comm syz.1.702: couldn't read orphan inode 15 (err -117) [ 74.701149][ T3307] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 74.703157][ T5470] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 74.735462][ T5470] ext2 filesystem being mounted at /58/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 74.771027][ T5315] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 74.962399][ T5315] veth0_vlan: entered promiscuous mode [ 74.967421][ T5315] veth1_vlan: entered promiscuous mode [ 74.989040][ T5315] veth0_macvtap: entered promiscuous mode [ 75.001804][ T5315] veth1_macvtap: entered promiscuous mode [ 75.018413][ T5315] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 75.024905][ T5315] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 75.040675][ T12] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.040826][ T12] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.040954][ T12] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.041252][ T12] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.252919][ T5516] loop2: detected capacity change from 0 to 512 [ 75.276704][ T5516] loop2: detected capacity change from 0 to 512 [ 75.293115][ T5516] EXT4-fs (loop2): orphan cleanup on readonly fs [ 75.293675][ T5516] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.712: bg 0: block 248: padding at end of block bitmap is not set [ 75.293909][ T5516] EXT4-fs error (device loop2): ext4_acquire_dquot:6937: comm syz.2.712: Failed to acquire dquot type 1 [ 75.294356][ T5516] EXT4-fs (loop2): 1 truncate cleaned up [ 75.295151][ T5516] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 75.377257][ T3315] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 75.508391][ T5523] loop2: detected capacity change from 0 to 512 [ 75.521896][ T4742] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 75.540710][ T29] kauditd_printk_skb: 473 callbacks suppressed [ 75.540726][ T29] audit: type=1326 audit(1758568505.525:4813): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5522 comm="syz.2.714" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f939cbaeec9 code=0x7ffc0000 [ 75.541875][ T29] audit: type=1326 audit(1758568505.525:4814): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5522 comm="syz.2.714" exe="/root/syz-executor" sig=0 arch=c000003e syscall=256 compat=0 ip=0x7f939cbaeec9 code=0x7ffc0000 [ 75.541925][ T29] audit: type=1326 audit(1758568505.525:4815): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5522 comm="syz.2.714" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f939cbaeec9 code=0x7ffc0000 [ 75.542039][ T29] audit: type=1326 audit(1758568505.525:4816): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5522 comm="syz.2.714" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7f939cbaeec9 code=0x7ffc0000 [ 75.542190][ T29] audit: type=1326 audit(1758568505.525:4817): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5522 comm="syz.2.714" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f939cbaef03 code=0x7ffc0000 [ 75.544806][ T29] audit: type=1326 audit(1758568505.525:4818): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5522 comm="syz.2.714" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f939cbad97f code=0x7ffc0000 [ 75.552585][ T29] audit: type=1326 audit(1758568505.525:4819): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5522 comm="syz.2.714" exe="/root/syz-executor" sig=0 arch=c000003e syscall=11 compat=0 ip=0x7f939cbaef57 code=0x7ffc0000 [ 75.554418][ T5523] loop2: detected capacity change from 0 to 512 [ 75.554583][ T29] audit: type=1326 audit(1758568505.535:4820): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5522 comm="syz.2.714" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f939cbad710 code=0x7ffc0000 [ 75.554609][ T29] audit: type=1326 audit(1758568505.535:4821): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5522 comm="syz.2.714" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f939cbaeacb code=0x7ffc0000 [ 75.554631][ T29] audit: type=1326 audit(1758568505.535:4822): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5522 comm="syz.2.714" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f939cbadb2a code=0x7ffc0000 [ 75.585718][ T5523] EXT4-fs (loop2): orphan cleanup on readonly fs [ 75.767930][ T5532] loop3: detected capacity change from 0 to 128 [ 75.828367][ T5523] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.714: bg 0: block 248: padding at end of block bitmap is not set [ 75.874768][ T5523] EXT4-fs error (device loop2): ext4_acquire_dquot:6937: comm syz.2.714: Failed to acquire dquot type 1 [ 75.875222][ T5523] EXT4-fs (loop2): 1 truncate cleaned up [ 75.902539][ T5523] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 75.930461][ T5523] EXT4-fs error (device loop2): ext4_lookup:1791: inode #2: comm syz.2.714: deleted inode referenced: 12 [ 76.062800][ T3315] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 76.083812][ T5546] loop2: detected capacity change from 0 to 512 [ 76.101195][ T5546] loop2: detected capacity change from 0 to 512 [ 76.110048][ T5546] EXT4-fs (loop2): orphan cleanup on readonly fs [ 76.117714][ T5546] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.723: bg 0: block 248: padding at end of block bitmap is not set [ 76.134664][ T5546] EXT4-fs error (device loop2): ext4_acquire_dquot:6937: comm syz.2.723: Failed to acquire dquot type 1 [ 76.147787][ T5546] EXT4-fs (loop2): 1 truncate cleaned up [ 76.156458][ T5546] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 76.236240][ T3315] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 76.274204][ T5561] serio: Serial port ptm1 [ 76.436400][ T5580] loop2: detected capacity change from 0 to 512 [ 76.463502][ T5580] loop2: detected capacity change from 0 to 512 [ 76.482975][ T5580] EXT4-fs (loop2): orphan cleanup on readonly fs [ 76.491127][ T5580] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.737: bg 0: block 248: padding at end of block bitmap is not set [ 76.507276][ T5580] EXT4-fs error (device loop2): ext4_acquire_dquot:6937: comm syz.2.737: Failed to acquire dquot type 1 [ 76.519853][ T5580] EXT4-fs (loop2): 1 truncate cleaned up [ 76.527722][ T5580] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 76.545683][ T5589] __nla_validate_parse: 19 callbacks suppressed [ 76.545710][ T5589] netlink: 8 bytes leftover after parsing attributes in process `+}[@'. [ 76.629333][ T5593] serio: Serial port ptm1 [ 76.702899][ T5597] netlink: 'syz.3.742': attribute type 7 has an invalid length. [ 76.711014][ T5597] netlink: 8 bytes leftover after parsing attributes in process `syz.3.742'. [ 76.742431][ T3315] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 77.228483][ T5618] loop3: detected capacity change from 0 to 128 [ 77.251982][ T5620] serio: Serial port ptm0 [ 77.287513][ T5622] loop1: detected capacity change from 0 to 512 [ 77.297742][ T5622] netlink: 8 bytes leftover after parsing attributes in process `syz.1.753'. [ 77.318299][ T5622] loop1: detected capacity change from 0 to 512 [ 77.327018][ T5622] EXT4-fs (loop1): orphan cleanup on readonly fs [ 77.336144][ T5622] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.753: bg 0: block 248: padding at end of block bitmap is not set [ 77.342970][ T5627] loop2: detected capacity change from 0 to 512 [ 77.351859][ T5622] EXT4-fs error (device loop1): ext4_acquire_dquot:6937: comm syz.1.753: Failed to acquire dquot type 1 [ 77.358225][ T5627] EXT4-fs (loop2): mounting ext2 file system using the ext4 subsystem [ 77.370583][ T5622] EXT4-fs (loop1): 1 truncate cleaned up [ 77.379724][ T5627] EXT4-fs error (device loop2): ext4_validate_block_bitmap:432: comm syz.2.754: bg 0: block 104: invalid block bitmap [ 77.413091][ T5627] EXT4-fs error (device loop2) in ext4_mb_clear_bb:6657: Corrupt filesystem [ 77.413503][ T5622] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 77.422812][ T5627] EXT4-fs error (device loop2): ext4_free_branches:1023: inode #11: comm syz.2.754: invalid indirect mapped block 1 (level 1) [ 77.459606][ T5627] EXT4-fs (loop2): 1 truncate cleaned up [ 77.466978][ T5627] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 77.529144][ T4742] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 77.562926][ T3315] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 77.639042][ T5638] netlink: 64 bytes leftover after parsing attributes in process `syz.1.757'. [ 77.714124][ T5646] loop5: detected capacity change from 0 to 128 [ 77.726775][ T5646] FAT-fs (loop5): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 77.745512][ T5646] FAT-fs (loop5): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 77.798774][ T1844] FAT-fs (loop5): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 77.853060][ T5655] loop5: detected capacity change from 0 to 128 [ 77.887165][ T5655] syz.5.765: attempt to access beyond end of device [ 77.887165][ T5655] loop5: rw=0, sector=2072, nr_sectors = 1 limit=128 [ 77.984012][ T5660] loop5: detected capacity change from 0 to 512 [ 78.054846][ T5660] netlink: 8 bytes leftover after parsing attributes in process `syz.5.768'. [ 78.115891][ T5660] loop5: detected capacity change from 0 to 512 [ 78.141017][ T5660] EXT4-fs (loop5): orphan cleanup on readonly fs [ 78.169391][ T5660] EXT4-fs error (device loop5): ext4_validate_block_bitmap:441: comm syz.5.768: bg 0: block 248: padding at end of block bitmap is not set [ 78.200007][ T5660] EXT4-fs error (device loop5): ext4_acquire_dquot:6937: comm syz.5.768: Failed to acquire dquot type 1 [ 78.249080][ T5660] EXT4-fs (loop5): 1 truncate cleaned up [ 78.279164][ T5660] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 78.382620][ T5688] netlink: 'syz.2.779': attribute type 7 has an invalid length. [ 78.391516][ T5688] netlink: 8 bytes leftover after parsing attributes in process `syz.2.779'. [ 78.411529][ T5315] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 78.425063][ T5692] FAULT_INJECTION: forcing a failure. [ 78.425063][ T5692] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 78.438836][ T5692] CPU: 0 UID: 0 PID: 5692 Comm: syz.3.780 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 78.438956][ T5692] Tainted: [W]=WARN [ 78.438964][ T5692] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 78.438978][ T5692] Call Trace: [ 78.438985][ T5692] [ 78.438994][ T5692] __dump_stack+0x1d/0x30 [ 78.439020][ T5692] dump_stack_lvl+0xe8/0x140 [ 78.439042][ T5692] dump_stack+0x15/0x1b [ 78.439139][ T5692] should_fail_ex+0x265/0x280 [ 78.439193][ T5692] should_fail+0xb/0x20 [ 78.439212][ T5692] should_fail_usercopy+0x1a/0x20 [ 78.439245][ T5692] strncpy_from_user+0x25/0x230 [ 78.439353][ T5692] ? __kmalloc_cache_noprof+0x189/0x320 [ 78.439385][ T5692] __se_sys_memfd_create+0x1ff/0x590 [ 78.439481][ T5692] __x64_sys_memfd_create+0x31/0x40 [ 78.439502][ T5692] x64_sys_call+0x2abe/0x2ff0 [ 78.439521][ T5692] do_syscall_64+0xd2/0x200 [ 78.439551][ T5692] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 78.439630][ T5692] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 78.439664][ T5692] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 78.439688][ T5692] RIP: 0033:0x7f55ed29eec9 [ 78.439714][ T5692] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 78.439800][ T5692] RSP: 002b:00007f55ebd06d68 EFLAGS: 00000202 ORIG_RAX: 000000000000013f [ 78.439823][ T5692] RAX: ffffffffffffffda RBX: 00000000000005df RCX: 00007f55ed29eec9 [ 78.439837][ T5692] RDX: 00007f55ebd06dec RSI: 0000000000000000 RDI: 00007f55ed322960 [ 78.439851][ T5692] RBP: 0000200000000000 R08: 00007f55ebd06b07 R09: 0000000000000000 [ 78.439864][ T5692] R10: 000000000000000a R11: 0000000000000202 R12: 0000000000000001 [ 78.439877][ T5692] R13: 00007f55ebd06dec R14: 00007f55ebd06df0 R15: 00007fff6c68c2c8 [ 78.439898][ T5692] [ 78.681821][ T5695] netlink: 8 bytes leftover after parsing attributes in process `syz.1.778'. [ 78.817318][ T5709] loop3: detected capacity change from 0 to 512 [ 78.817918][ T5709] EXT4-fs (loop3): mounting ext2 file system using the ext4 subsystem [ 78.848328][ T5711] loop2: detected capacity change from 0 to 512 [ 78.848570][ T5711] EXT4-fs: Ignoring removed nobh option [ 78.858454][ T5709] EXT4-fs error (device loop3): ext4_orphan_get:1392: inode #15: comm syz.3.784: iget: bogus i_mode (5) [ 78.858611][ T5709] EXT4-fs error (device loop3): ext4_orphan_get:1397: comm syz.3.784: couldn't read orphan inode 15 (err -117) [ 78.859147][ T5709] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 78.859207][ T5709] ext2 filesystem being mounted at /148/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 78.867768][ T5711] EXT4-fs error (device loop2): ext4_do_update_inode:5653: inode #3: comm syz.2.787: corrupted inode contents [ 78.952837][ T5711] EXT4-fs error (device loop2): ext4_dirty_inode:6538: inode #3: comm syz.2.787: mark_inode_dirty error [ 78.966242][ T5711] EXT4-fs error (device loop2): ext4_do_update_inode:5653: inode #3: comm syz.2.787: corrupted inode contents [ 78.980080][ T5711] EXT4-fs error (device loop2): __ext4_ext_dirty:206: inode #3: comm syz.2.787: mark_inode_dirty error [ 78.984469][ T5711] EXT4-fs error (device loop2): ext4_acquire_dquot:6937: comm syz.2.787: Failed to acquire dquot type 0 [ 78.985020][ T5711] EXT4-fs error (device loop2): ext4_do_update_inode:5653: inode #16: comm syz.2.787: corrupted inode contents [ 78.985142][ T5711] EXT4-fs error (device loop2): ext4_dirty_inode:6538: inode #16: comm syz.2.787: mark_inode_dirty error [ 78.985285][ T5711] EXT4-fs error (device loop2): ext4_do_update_inode:5653: inode #16: comm syz.2.787: corrupted inode contents [ 78.985513][ T5711] EXT4-fs error (device loop2): __ext4_ext_dirty:206: inode #16: comm syz.2.787: mark_inode_dirty error [ 78.985699][ T5711] EXT4-fs error (device loop2): ext4_do_update_inode:5653: inode #16: comm syz.2.787: corrupted inode contents [ 78.985826][ T5711] EXT4-fs error (device loop2) in ext4_orphan_del:305: Corrupt filesystem [ 78.985961][ T5711] EXT4-fs error (device loop2): ext4_do_update_inode:5653: inode #16: comm syz.2.787: corrupted inode contents [ 78.986161][ T5711] EXT4-fs error (device loop2): ext4_truncate:4666: inode #16: comm syz.2.787: mark_inode_dirty error [ 78.986338][ T5711] EXT4-fs error (device loop2) in ext4_process_orphan:347: Corrupt filesystem [ 78.986669][ T5711] EXT4-fs (loop2): 1 truncate cleaned up [ 78.987110][ T5711] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 78.987179][ T5711] ext4 filesystem being mounted at /168/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 78.988340][ T5711] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 78.988871][ T5722] loop1: detected capacity change from 0 to 512 [ 79.049136][ T5722] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 79.191027][ T5722] ext4 filesystem being mounted at /76/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 79.237623][ T4742] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 79.259622][ T5729] loop1: detected capacity change from 0 to 128 [ 79.698410][ T5735] netlink: 8 bytes leftover after parsing attributes in process `syz.0.794'. [ 79.712358][ T5735] netlink: 8 bytes leftover after parsing attributes in process `syz.0.794'. [ 79.712919][ T5735] netlink: 8 bytes leftover after parsing attributes in process `syz.0.794'. [ 79.785248][ T3307] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 79.918967][ T5749] FAULT_INJECTION: forcing a failure. [ 79.918967][ T5749] name failslab, interval 1, probability 0, space 0, times 0 [ 79.932896][ T5749] CPU: 1 UID: 0 PID: 5749 Comm: syz.5.801 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 79.932964][ T5749] Tainted: [W]=WARN [ 79.932971][ T5749] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 79.932984][ T5749] Call Trace: [ 79.932990][ T5749] [ 79.932999][ T5749] __dump_stack+0x1d/0x30 [ 79.933022][ T5749] dump_stack_lvl+0xe8/0x140 [ 79.933043][ T5749] dump_stack+0x15/0x1b [ 79.933082][ T5749] should_fail_ex+0x265/0x280 [ 79.933108][ T5749] should_failslab+0x8c/0xb0 [ 79.933179][ T5749] __kmalloc_node_track_caller_noprof+0xa4/0x410 [ 79.933213][ T5749] ? sidtab_sid2str_get+0xa0/0x130 [ 79.933238][ T5749] kmemdup_noprof+0x2b/0x70 [ 79.933300][ T5749] sidtab_sid2str_get+0xa0/0x130 [ 79.933424][ T5749] security_sid_to_context_core+0x1eb/0x2e0 [ 79.933449][ T5749] security_sid_to_context+0x27/0x40 [ 79.933470][ T5749] selinux_lsmprop_to_secctx+0x67/0xf0 [ 79.933498][ T5749] security_lsmprop_to_secctx+0x43/0x80 [ 79.933687][ T5749] audit_log_task_context+0x77/0x190 [ 79.933777][ T5749] audit_log_task+0xf4/0x250 [ 79.933868][ T5749] audit_seccomp+0x61/0x100 [ 79.933906][ T5749] ? __seccomp_filter+0x68c/0x10d0 [ 79.933930][ T5749] __seccomp_filter+0x69d/0x10d0 [ 79.933988][ T5749] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 79.934119][ T5749] ? vfs_write+0x7e8/0x960 [ 79.934168][ T5749] __secure_computing+0x82/0x150 [ 79.934191][ T5749] syscall_trace_enter+0xcf/0x1e0 [ 79.934218][ T5749] do_syscall_64+0xac/0x200 [ 79.934310][ T5749] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 79.934335][ T5749] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 79.934431][ T5749] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 79.934454][ T5749] RIP: 0033:0x7fd72bbaeec9 [ 79.934472][ T5749] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 79.934491][ T5749] RSP: 002b:00007fd72a60f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 79.934513][ T5749] RAX: ffffffffffffffda RBX: 00007fd72be05fa0 RCX: 00007fd72bbaeec9 [ 79.934527][ T5749] RDX: 0000000000000001 RSI: 0000200000000740 RDI: 0000000000000005 [ 79.934540][ T5749] RBP: 00007fd72a60f090 R08: 0000000000000000 R09: 0000000000000000 [ 79.934590][ T5749] R10: 0000000000044000 R11: 0000000000000246 R12: 0000000000000001 [ 79.934603][ T5749] R13: 00007fd72be06038 R14: 00007fd72be05fa0 R15: 00007ffc2f7fe378 [ 79.934623][ T5749] [ 79.937678][ T5753] netlink: 'syz.0.803': attribute type 7 has an invalid length. [ 80.272864][ T5756] serio: Serial port ptm0 [ 80.330123][ T5771] serio: Serial port ptm0 [ 80.397368][ T5783] loop3: detected capacity change from 0 to 512 [ 80.406917][ T5782] loop2: detected capacity change from 0 to 128 [ 80.428030][ T5782] syz.2.814: attempt to access beyond end of device [ 80.428030][ T5782] loop2: rw=0, sector=2072, nr_sectors = 1 limit=128 [ 80.444074][ T5787] netlink: 'syz.1.817': attribute type 7 has an invalid length. [ 80.455595][ T5783] loop3: detected capacity change from 0 to 512 [ 80.483297][ T5783] EXT4-fs (loop3): orphan cleanup on readonly fs [ 80.495233][ T5783] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.815: bg 0: block 248: padding at end of block bitmap is not set [ 80.554006][ T29] kauditd_printk_skb: 1184 callbacks suppressed [ 80.554024][ T29] audit: type=1326 audit(1758568510.535:5992): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5788 comm="syz.0.818" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fb67e93eec9 code=0x7ffc0000 [ 80.556462][ T5783] Quota error (device loop3): write_blk: dquota write failed [ 80.560428][ T29] audit: type=1326 audit(1758568510.535:5993): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5788 comm="syz.0.818" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb67e93eec9 code=0x7ffc0000 [ 80.560458][ T29] audit: type=1326 audit(1758568510.535:5994): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5788 comm="syz.0.818" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb67e93eec9 code=0x7ffc0000 [ 80.586073][ T5783] Quota error (device loop3): qtree_write_dquot: Error -117 occurred while creating quota [ 80.586132][ T5783] EXT4-fs error (device loop3): ext4_acquire_dquot:6937: comm syz.3.815: Failed to acquire dquot type 1 [ 80.592357][ T5783] EXT4-fs (loop3): 1 truncate cleaned up [ 80.678443][ T5783] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 80.695653][ T29] audit: type=1326 audit(1758568510.675:5995): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5781 comm="syz.3.815" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f55ed29d710 code=0x7ffc0000 [ 80.701839][ T5783] EXT4-fs error (device loop3): ext4_lookup:1791: inode #2: comm syz.3.815: deleted inode referenced: 12 [ 80.736253][ T5798] 9pnet_fd: Insufficient options for proto=fd [ 80.750553][ T29] audit: type=1326 audit(1758568510.675:5996): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5781 comm="syz.3.815" exe="/root/syz-executor" sig=0 arch=c000003e syscall=80 compat=0 ip=0x7f55ed29dc17 code=0x7ffc0000 [ 80.775515][ T29] audit: type=1326 audit(1758568510.675:5997): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5781 comm="syz.3.815" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f55ed29d710 code=0x7ffc0000 [ 80.800664][ T29] audit: type=1326 audit(1758568510.675:5998): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5781 comm="syz.3.815" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f55ed29eec9 code=0x7ffc0000 [ 80.826370][ T29] audit: type=1326 audit(1758568510.675:5999): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5781 comm="syz.3.815" exe="/root/syz-executor" sig=0 arch=c000003e syscall=433 compat=0 ip=0x7f55ed29eec9 code=0x7ffc0000 [ 80.893195][ T5805] loop1: detected capacity change from 0 to 512 [ 80.925675][ T3307] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 80.950861][ T5805] loop1: detected capacity change from 0 to 512 [ 80.967458][ T5805] EXT4-fs (loop1): orphan cleanup on readonly fs [ 80.977976][ T5805] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.824: bg 0: block 248: padding at end of block bitmap is not set [ 81.007040][ T5805] EXT4-fs error (device loop1): ext4_acquire_dquot:6937: comm syz.1.824: Failed to acquire dquot type 1 [ 81.023789][ T5814] serio: Serial port ptm0 [ 81.029131][ T5805] EXT4-fs (loop1): 1 truncate cleaned up [ 81.037336][ T5805] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 81.118455][ T5819] netlink: 'syz.3.830': attribute type 7 has an invalid length. [ 81.136154][ T4742] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 81.280861][ T5827] 9pnet_fd: Insufficient options for proto=fd [ 81.293936][ T5825] lo speed is unknown, defaulting to 1000 [ 81.297738][ T5829] IPv6: syztnl0: Disabled Multicast RS [ 81.313290][ T5825] lo speed is unknown, defaulting to 1000 [ 81.491399][ T5843] loop3: detected capacity change from 0 to 512 [ 81.516772][ T5843] loop3: detected capacity change from 0 to 512 [ 81.529810][ T5843] EXT4-fs (loop3): orphan cleanup on readonly fs [ 81.531400][ T5843] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.837: bg 0: block 248: padding at end of block bitmap is not set [ 81.531688][ T5843] EXT4-fs error (device loop3): ext4_acquire_dquot:6937: comm syz.3.837: Failed to acquire dquot type 1 [ 81.532261][ T5843] EXT4-fs (loop3): 1 truncate cleaned up [ 81.574531][ T5843] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 81.579782][ T5843] EXT4-fs error (device loop3): ext4_lookup:1791: inode #2: comm syz.3.837: deleted inode referenced: 12 [ 81.625143][ T5846] loop5: detected capacity change from 0 to 512 [ 81.625979][ T5846] EXT4-fs (loop5): mounting ext2 file system using the ext4 subsystem [ 81.633233][ T3307] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 81.633799][ T5846] EXT4-fs error (device loop5): ext4_orphan_get:1392: inode #15: comm syz.5.838: iget: bogus i_mode (5) [ 81.634036][ T5846] EXT4-fs error (device loop5): ext4_orphan_get:1397: comm syz.5.838: couldn't read orphan inode 15 (err -117) [ 81.634607][ T5846] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 81.634746][ T5846] ext2 filesystem being mounted at /17/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 81.783613][ T5853] __nla_validate_parse: 23 callbacks suppressed [ 81.783644][ T5853] netlink: 16 bytes leftover after parsing attributes in process `syz.1.841'. [ 82.010644][ T5853] hub 6-0:1.0: USB hub found [ 82.010700][ T5853] hub 6-0:1.0: 8 ports detected [ 82.181339][ T5863] loop1: detected capacity change from 0 to 512 [ 82.184871][ T5863] netlink: 8 bytes leftover after parsing attributes in process `syz.1.844'. [ 82.221234][ T5863] netlink: 8 bytes leftover after parsing attributes in process `syz.1.844'. [ 82.221577][ T5863] netlink: 8 bytes leftover after parsing attributes in process `syz.1.844'. [ 82.221885][ T5863] netlink: 8 bytes leftover after parsing attributes in process `syz.1.844'. [ 82.235021][ T5863] loop1: detected capacity change from 0 to 512 [ 82.262808][ T5863] EXT4-fs (loop1): orphan cleanup on readonly fs [ 82.263810][ T5863] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.844: bg 0: block 248: padding at end of block bitmap is not set [ 82.287545][ T5863] EXT4-fs error (device loop1): ext4_acquire_dquot:6937: comm syz.1.844: Failed to acquire dquot type 1 [ 82.288099][ T5863] EXT4-fs (loop1): 1 truncate cleaned up [ 82.307653][ T5863] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 82.391665][ T4742] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 82.444403][ T5868] netlink: 64 bytes leftover after parsing attributes in process `syz.1.846'. [ 82.502436][ T5315] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 82.543870][ T5871] loop5: detected capacity change from 0 to 128 [ 82.571632][ T5871] syz.5.847: attempt to access beyond end of device [ 82.571632][ T5871] loop5: rw=0, sector=2072, nr_sectors = 1 limit=128 [ 82.581971][ T5875] loop1: detected capacity change from 0 to 512 [ 82.606356][ T5875] netlink: 8 bytes leftover after parsing attributes in process `syz.1.849'. [ 82.628611][ T5875] netlink: 8 bytes leftover after parsing attributes in process `syz.1.849'. [ 82.649727][ T5875] netlink: 8 bytes leftover after parsing attributes in process `syz.1.849'. [ 82.671291][ T5875] netlink: 8 bytes leftover after parsing attributes in process `syz.1.849'. [ 82.702873][ T5875] loop1: detected capacity change from 0 to 512 [ 82.723649][ T5875] EXT4-fs (loop1): orphan cleanup on readonly fs [ 82.742413][ T5875] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.849: bg 0: block 248: padding at end of block bitmap is not set [ 82.766218][ T5875] EXT4-fs error (device loop1): ext4_acquire_dquot:6937: comm syz.1.849: Failed to acquire dquot type 1 [ 82.793239][ T5875] EXT4-fs (loop1): 1 truncate cleaned up [ 82.811171][ T5875] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 82.843355][ T5875] EXT4-fs error (device loop1): ext4_lookup:1791: inode #2: comm syz.1.849: deleted inode referenced: 12 [ 82.857725][ T5883] loop3: detected capacity change from 0 to 128 [ 82.886896][ T5883] syz.3.852: attempt to access beyond end of device [ 82.886896][ T5883] loop3: rw=0, sector=2072, nr_sectors = 1 limit=128 [ 82.962104][ T4742] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 83.078694][ T5893] loop3: detected capacity change from 0 to 512 [ 83.151568][ T5893] loop3: detected capacity change from 0 to 512 [ 83.173457][ T5895] loop5: detected capacity change from 0 to 512 [ 83.182857][ T5893] EXT4-fs (loop3): orphan cleanup on readonly fs [ 83.205073][ T5893] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.857: bg 0: block 248: padding at end of block bitmap is not set [ 83.205292][ T5893] EXT4-fs error (device loop3): ext4_acquire_dquot:6937: comm syz.3.857: Failed to acquire dquot type 1 [ 83.205806][ T5893] EXT4-fs (loop3): 1 truncate cleaned up [ 83.222428][ T5893] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 83.232174][ T5895] EXT4-fs (loop5): mounting ext2 file system using the ext4 subsystem [ 83.256245][ T5895] EXT4-fs error (device loop5): ext4_orphan_get:1392: inode #15: comm syz.5.856: iget: bogus i_mode (5) [ 83.256410][ T5895] EXT4-fs error (device loop5): ext4_orphan_get:1397: comm syz.5.856: couldn't read orphan inode 15 (err -117) [ 83.257011][ T5895] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 83.257116][ T5895] ext2 filesystem being mounted at /21/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 83.292882][ T3307] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 83.518406][ T5902] netlink: 'syz.3.860': attribute type 7 has an invalid length. [ 83.652627][ T5911] serio: Serial port ptm0 [ 83.959142][ T5925] loop2: detected capacity change from 0 to 512 [ 84.002320][ T5925] loop2: detected capacity change from 0 to 512 [ 84.012739][ T5925] EXT4-fs (loop2): orphan cleanup on readonly fs [ 84.024740][ T5925] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.869: bg 0: block 248: padding at end of block bitmap is not set [ 84.041456][ T5925] EXT4-fs error (device loop2): ext4_acquire_dquot:6937: comm syz.2.869: Failed to acquire dquot type 1 [ 84.041804][ T5315] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 84.055298][ T5925] EXT4-fs (loop2): 1 truncate cleaned up [ 84.069632][ T5925] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 84.138560][ T3315] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 84.161286][ T5936] netlink: 'syz.0.874': attribute type 7 has an invalid length. [ 84.990046][ T5968] loop0: detected capacity change from 0 to 512 [ 85.011790][ T5968] loop0: detected capacity change from 0 to 512 [ 85.025694][ T5968] EXT4-fs (loop0): orphan cleanup on readonly fs [ 85.034295][ T5970] tipc: Started in network mode [ 85.036578][ T5968] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.887: bg 0: block 248: padding at end of block bitmap is not set [ 85.039835][ T5970] tipc: Node identity ac14140f, cluster identity 4711 [ 85.065823][ T5968] EXT4-fs error (device loop0): ext4_acquire_dquot:6937: comm syz.0.887: Failed to acquire dquot type 1 [ 85.085805][ T5970] tipc: New replicast peer: 255.255.255.255 [ 85.092437][ T5970] tipc: Enabled bearer , priority 10 [ 85.092979][ T5968] EXT4-fs (loop0): 1 truncate cleaned up [ 85.106949][ T5972] serio: Serial port ptm0 [ 85.132143][ T5968] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 85.180095][ T5968] EXT4-fs error (device loop0): ext4_lookup:1791: inode #2: comm syz.0.887: deleted inode referenced: 12 [ 85.290241][ T3305] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 85.563733][ T29] kauditd_printk_skb: 774 callbacks suppressed [ 85.563752][ T29] audit: type=1326 audit(1758568515.545:6760): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5981 comm="syz.0.891" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fb67e935d67 code=0x7ffc0000 [ 85.601446][ T29] audit: type=1326 audit(1758568515.545:6761): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5981 comm="syz.0.891" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fb67e8daf79 code=0x7ffc0000 [ 85.629599][ T29] audit: type=1326 audit(1758568515.545:6762): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5981 comm="syz.0.891" exe="/root/syz-executor" sig=0 arch=c000003e syscall=275 compat=0 ip=0x7fb67e93eec9 code=0x7ffc0000 [ 85.655797][ T29] audit: type=1326 audit(1758568515.555:6763): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5981 comm="syz.0.891" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fb67e935d67 code=0x7ffc0000 [ 85.697720][ T29] audit: type=1326 audit(1758568515.555:6764): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5981 comm="syz.0.891" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fb67e8daf79 code=0x7ffc0000 [ 85.729978][ T29] audit: type=1326 audit(1758568515.555:6765): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5981 comm="syz.0.891" exe="/root/syz-executor" sig=0 arch=c000003e syscall=275 compat=0 ip=0x7fb67e93eec9 code=0x7ffc0000 [ 85.755559][ T29] audit: type=1326 audit(1758568515.565:6766): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5981 comm="syz.0.891" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fb67e935d67 code=0x7ffc0000 [ 85.780209][ T29] audit: type=1326 audit(1758568515.565:6767): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5981 comm="syz.0.891" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fb67e8daf79 code=0x7ffc0000 [ 85.806150][ T29] audit: type=1326 audit(1758568515.565:6768): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5981 comm="syz.0.891" exe="/root/syz-executor" sig=0 arch=c000003e syscall=275 compat=0 ip=0x7fb67e93eec9 code=0x7ffc0000 [ 85.830337][ T29] audit: type=1326 audit(1758568515.575:6769): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5981 comm="syz.0.891" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fb67e935d67 code=0x7ffc0000 [ 85.920114][ T6011] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 85.939194][ T6011] loop1: detected capacity change from 0 to 512 [ 85.947042][ T6011] EXT4-fs: inline encryption not supported [ 85.955422][ T6011] EXT4-fs: Mount option(s) incompatible with ext2 [ 85.987251][ T6013] loop1: detected capacity change from 0 to 512 [ 86.007839][ T6013] loop1: detected capacity change from 0 to 512 [ 86.017430][ T6013] EXT4-fs (loop1): orphan cleanup on readonly fs [ 86.025117][ T6013] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.902: bg 0: block 248: padding at end of block bitmap is not set [ 86.051816][ T6013] EXT4-fs error (device loop1): ext4_acquire_dquot:6937: comm syz.1.902: Failed to acquire dquot type 1 [ 86.065158][ T6013] EXT4-fs (loop1): 1 truncate cleaned up [ 86.073224][ T6013] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 86.091523][ T6013] EXT4-fs error (device loop1): ext4_lookup:1791: inode #2: comm syz.1.902: deleted inode referenced: 12 [ 86.153684][ T4742] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 86.210326][ T1105] tipc: Node number set to 2886997007 [ 86.236849][ T6020] loop0: detected capacity change from 0 to 512 [ 86.244416][ T6020] EXT4-fs: Ignoring removed nobh option [ 86.260946][ T6020] EXT4-fs error (device loop0): __ext4_fill_super:5504: inode #2: comm syz.0.905: iget: special inode unallocated [ 86.280269][ T6020] EXT4-fs (loop0): get root inode failed [ 86.286638][ T6020] EXT4-fs (loop0): mount failed [ 86.298250][ T6025] loop1: detected capacity change from 0 to 512 [ 86.325736][ T6025] loop1: detected capacity change from 0 to 512 [ 86.342353][ T6025] EXT4-fs (loop1): orphan cleanup on readonly fs [ 86.358722][ T6025] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.907: bg 0: block 248: padding at end of block bitmap is not set [ 86.381128][ T6025] EXT4-fs error (device loop1): ext4_acquire_dquot:6937: comm syz.1.907: Failed to acquire dquot type 1 [ 86.413998][ T6025] EXT4-fs (loop1): 1 truncate cleaned up [ 86.453046][ T6025] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 86.488046][ T6032] netlink: 'syz.2.910': attribute type 7 has an invalid length. [ 86.528082][ T4742] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 86.547485][ T6035] serio: Serial port ptm0 [ 86.636986][ T6042] loop2: detected capacity change from 0 to 512 [ 86.683450][ T6042] loop2: detected capacity change from 0 to 512 [ 86.695010][ T6042] EXT4-fs (loop2): orphan cleanup on readonly fs [ 86.705440][ T6052] loop1: detected capacity change from 0 to 128 [ 86.715002][ T6042] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.914: bg 0: block 248: padding at end of block bitmap is not set [ 86.729764][ T6059] loop3: detected capacity change from 0 to 512 [ 86.735685][ T6052] syz.1.919: attempt to access beyond end of device [ 86.735685][ T6052] loop1: rw=0, sector=2072, nr_sectors = 1 limit=128 [ 86.751987][ T6059] loop3: detected capacity change from 0 to 512 [ 86.757168][ T6042] EXT4-fs error (device loop2): ext4_acquire_dquot:6937: comm syz.2.914: Failed to acquire dquot type 1 [ 86.776377][ T6059] EXT4-fs (loop3): orphan cleanup on readonly fs [ 86.784353][ T6042] EXT4-fs (loop2): 1 truncate cleaned up [ 86.792585][ T6059] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.922: bg 0: block 248: padding at end of block bitmap is not set [ 86.804854][ T6042] EXT4-fs error (device loop2): ext4_lookup:1791: inode #2: comm syz.2.914: deleted inode referenced: 12 [ 86.809851][ T6059] EXT4-fs error (device loop3): ext4_acquire_dquot:6937: comm syz.3.922: Failed to acquire dquot type 1 [ 86.837025][ T6059] EXT4-fs (loop3): 1 truncate cleaned up [ 86.850116][ T6063] netlink: 'syz.1.923': attribute type 7 has an invalid length. [ 86.858026][ T6063] __nla_validate_parse: 34 callbacks suppressed [ 86.858045][ T6063] netlink: 8 bytes leftover after parsing attributes in process `syz.1.923'. [ 86.928788][ T6067] serio: Serial port ptm0 [ 86.959257][ T6069] serio: Serial port ptm1 [ 87.109446][ T6078] loop3: detected capacity change from 0 to 128 [ 87.213688][ T6089] loop2: detected capacity change from 0 to 128 [ 87.222660][ T6089] syz.2.934: attempt to access beyond end of device [ 87.222660][ T6089] loop2: rw=0, sector=2072, nr_sectors = 1 limit=128 [ 87.257505][ T6091] netlink: 'syz.2.935': attribute type 7 has an invalid length. [ 87.265630][ T6091] netlink: 8 bytes leftover after parsing attributes in process `syz.2.935'. [ 87.295320][ T6093] loop2: detected capacity change from 0 to 512 [ 87.303743][ T6093] netlink: 8 bytes leftover after parsing attributes in process `syz.2.936'. [ 87.313922][ T6093] netlink: 8 bytes leftover after parsing attributes in process `syz.2.936'. [ 87.324432][ T6093] netlink: 8 bytes leftover after parsing attributes in process `syz.2.936'. [ 87.334295][ T6093] netlink: 8 bytes leftover after parsing attributes in process `syz.2.936'. [ 87.351637][ T6093] loop2: detected capacity change from 0 to 512 [ 87.360081][ T6093] EXT4-fs (loop2): orphan cleanup on readonly fs [ 87.367237][ T6093] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.936: bg 0: block 248: padding at end of block bitmap is not set [ 87.382144][ T6093] EXT4-fs error (device loop2): ext4_acquire_dquot:6937: comm syz.2.936: Failed to acquire dquot type 1 [ 87.394540][ T6093] EXT4-fs (loop2): 1 truncate cleaned up [ 87.404181][ T6093] EXT4-fs error (device loop2): ext4_lookup:1791: inode #2: comm syz.2.936: deleted inode referenced: 12 [ 87.478139][ T6096] loop2: detected capacity change from 0 to 512 [ 87.487885][ T6096] netlink: 8 bytes leftover after parsing attributes in process `syz.2.937'. [ 87.498657][ T6096] netlink: 8 bytes leftover after parsing attributes in process `syz.2.937'. [ 87.508846][ T6096] netlink: 8 bytes leftover after parsing attributes in process `syz.2.937'. [ 87.522106][ T6096] netlink: 8 bytes leftover after parsing attributes in process `syz.2.937'. [ 87.553591][ T6096] loop2: detected capacity change from 0 to 512 [ 87.593290][ T6096] EXT4-fs (loop2): orphan cleanup on readonly fs [ 87.603421][ T6096] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.937: bg 0: block 248: padding at end of block bitmap is not set [ 87.621450][ T6096] EXT4-fs error (device loop2): ext4_acquire_dquot:6937: comm syz.2.937: Failed to acquire dquot type 1 [ 87.635626][ T6096] EXT4-fs (loop2): 1 truncate cleaned up [ 87.869923][ T6107] FAULT_INJECTION: forcing a failure. [ 87.869923][ T6107] name failslab, interval 1, probability 0, space 0, times 0 [ 87.884804][ T6107] CPU: 1 UID: 0 PID: 6107 Comm: syz.3.941 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 87.884877][ T6107] Tainted: [W]=WARN [ 87.884884][ T6107] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 87.884895][ T6107] Call Trace: [ 87.884928][ T6107] [ 87.884937][ T6107] __dump_stack+0x1d/0x30 [ 87.884959][ T6107] dump_stack_lvl+0xe8/0x140 [ 87.884979][ T6107] dump_stack+0x15/0x1b [ 87.884997][ T6107] should_fail_ex+0x265/0x280 [ 87.885100][ T6107] ? call_usermodehelper_setup+0x72/0x190 [ 87.885128][ T6107] should_failslab+0x8c/0xb0 [ 87.885220][ T6107] ? __pfx_free_modprobe_argv+0x10/0x10 [ 87.885262][ T6107] __kmalloc_cache_noprof+0x4c/0x320 [ 87.885292][ T6107] ? __kmalloc_node_track_caller_noprof+0x1e5/0x410 [ 87.885357][ T6107] ? __pfx_free_modprobe_argv+0x10/0x10 [ 87.885383][ T6107] call_usermodehelper_setup+0x72/0x190 [ 87.885492][ T6107] __request_module+0x264/0x3e0 [ 87.885523][ T6107] blk_request_module+0x108/0x1e0 [ 87.885550][ T6107] blkdev_get_no_open+0x4b/0x100 [ 87.885641][ T6107] bdev_file_open_by_dev+0xa5/0x250 [ 87.885700][ T6107] swsusp_check+0x3f/0x290 [ 87.885730][ T6107] software_resume+0x41/0x2f0 [ 87.885809][ T6107] resume_store+0x2d9/0x3d0 [ 87.885836][ T6107] ? __pfx_resume_store+0x10/0x10 [ 87.885897][ T6107] kobj_attr_store+0x4a/0x70 [ 87.885919][ T6107] ? __pfx_kobj_attr_store+0x10/0x10 [ 87.885939][ T6107] sysfs_kf_write+0xfb/0x120 [ 87.885982][ T6107] ? __pfx_sysfs_kf_write+0x10/0x10 [ 87.886004][ T6107] kernfs_fop_write_iter+0x1e8/0x300 [ 87.886041][ T6107] iter_file_splice_write+0x666/0xa60 [ 87.886076][ T6107] ? __pfx_iter_file_splice_write+0x10/0x10 [ 87.886112][ T6107] direct_splice_actor+0x156/0x2a0 [ 87.886131][ T6107] ? shmem_mmap+0x61/0xb0 [ 87.886151][ T6107] splice_direct_to_actor+0x312/0x680 [ 87.886176][ T6107] ? __pfx_direct_splice_actor+0x10/0x10 [ 87.886309][ T6107] do_splice_direct+0xda/0x150 [ 87.886330][ T6107] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 87.886434][ T6107] do_sendfile+0x380/0x650 [ 87.886542][ T6107] __x64_sys_sendfile64+0x105/0x150 [ 87.886648][ T6107] x64_sys_call+0x2bb0/0x2ff0 [ 87.886672][ T6107] do_syscall_64+0xd2/0x200 [ 87.886774][ T6107] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 87.886801][ T6107] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 87.886875][ T6107] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 87.886899][ T6107] RIP: 0033:0x7f55ed29eec9 [ 87.886917][ T6107] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 87.886937][ T6107] RSP: 002b:00007f55ebd07038 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 87.886992][ T6107] RAX: ffffffffffffffda RBX: 00007f55ed4f5fa0 RCX: 00007f55ed29eec9 [ 87.887007][ T6107] RDX: 0000000000000000 RSI: 0000000000000003 RDI: 0000000000000005 [ 87.887020][ T6107] RBP: 00007f55ebd07090 R08: 0000000000000000 R09: 0000000000000000 [ 87.887034][ T6107] R10: 00008000fffffffc R11: 0000000000000246 R12: 0000000000000002 [ 87.887047][ T6107] R13: 00007f55ed4f6038 R14: 00007f55ed4f5fa0 R15: 00007fff6c68c2c8 [ 87.887067][ T6107] [ 87.893402][ T6112] loop2: detected capacity change from 0 to 128 [ 88.360553][ T6130] netlink: 'syz.1.946': attribute type 7 has an invalid length. [ 88.484405][ T6142] loop3: detected capacity change from 0 to 512 [ 88.496047][ T6142] loop3: detected capacity change from 0 to 512 [ 88.497629][ T6142] EXT4-fs (loop3): orphan cleanup on readonly fs [ 88.498093][ T6142] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.950: bg 0: block 248: padding at end of block bitmap is not set [ 88.498365][ T6142] EXT4-fs error (device loop3): ext4_acquire_dquot:6937: comm syz.3.950: Failed to acquire dquot type 1 [ 88.498954][ T6142] EXT4-fs (loop3): 1 truncate cleaned up [ 88.559072][ T6150] loop1: detected capacity change from 0 to 512 [ 88.566786][ T6150] EXT4-fs (loop1): mounting ext2 file system using the ext4 subsystem [ 88.595496][ T6150] EXT4-fs error (device loop1): ext4_orphan_get:1392: inode #15: comm syz.1.949: iget: bogus i_mode (5) [ 88.595671][ T6150] EXT4-fs error (device loop1): ext4_orphan_get:1397: comm syz.1.949: couldn't read orphan inode 15 (err -117) [ 88.596258][ T6150] ext2 filesystem being mounted at /113/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 88.805255][ T6171] netlink: 'syz.2.960': attribute type 7 has an invalid length. [ 88.912931][ T6176] tipc: Enabling of bearer rejected, already enabled [ 89.452076][ T6188] IPVS: Error joining to the multicast group [ 89.477733][ T6191] loop3: detected capacity change from 0 to 128 [ 89.527909][ T6193] FAULT_INJECTION: forcing a failure. [ 89.527909][ T6193] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 89.544485][ T6193] CPU: 1 UID: 0 PID: 6193 Comm: syz.5.969 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 89.544677][ T6193] Tainted: [W]=WARN [ 89.544685][ T6193] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 89.544699][ T6193] Call Trace: [ 89.544707][ T6193] [ 89.544716][ T6193] __dump_stack+0x1d/0x30 [ 89.544741][ T6193] dump_stack_lvl+0xe8/0x140 [ 89.544769][ T6193] dump_stack+0x15/0x1b [ 89.544788][ T6193] should_fail_ex+0x265/0x280 [ 89.544871][ T6193] should_fail+0xb/0x20 [ 89.544894][ T6193] should_fail_usercopy+0x1a/0x20 [ 89.544922][ T6193] _copy_from_iter+0xd2/0xe80 [ 89.544960][ T6193] ? __build_skb_around+0x1a0/0x200 [ 89.544987][ T6193] ? __alloc_skb+0x223/0x320 [ 89.545018][ T6193] netlink_sendmsg+0x471/0x6b0 [ 89.545044][ T6193] ? __pfx_netlink_sendmsg+0x10/0x10 [ 89.545142][ T6193] __sock_sendmsg+0x142/0x180 [ 89.545179][ T6193] ____sys_sendmsg+0x31e/0x4e0 [ 89.545205][ T6193] ___sys_sendmsg+0x17b/0x1d0 [ 89.545280][ T6193] __x64_sys_sendmsg+0xd4/0x160 [ 89.545394][ T6193] x64_sys_call+0x191e/0x2ff0 [ 89.545465][ T6193] do_syscall_64+0xd2/0x200 [ 89.545516][ T6193] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 89.545544][ T6193] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 89.545575][ T6193] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 89.545598][ T6193] RIP: 0033:0x7fd72bbaeec9 [ 89.545613][ T6193] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 89.545675][ T6193] RSP: 002b:00007fd72a60f038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 89.545697][ T6193] RAX: ffffffffffffffda RBX: 00007fd72be05fa0 RCX: 00007fd72bbaeec9 [ 89.545711][ T6193] RDX: 0000000000000004 RSI: 0000200000000300 RDI: 0000000000000003 [ 89.545725][ T6193] RBP: 00007fd72a60f090 R08: 0000000000000000 R09: 0000000000000000 [ 89.545738][ T6193] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 89.545760][ T6193] R13: 00007fd72be06038 R14: 00007fd72be05fa0 R15: 00007ffc2f7fe378 [ 89.545781][ T6193] [ 89.843470][ T6199] netlink: 'syz.5.972': attribute type 7 has an invalid length. [ 89.862504][ T6201] loop0: detected capacity change from 0 to 128 [ 89.875246][ T6201] syz.0.973: attempt to access beyond end of device [ 89.875246][ T6201] loop0: rw=0, sector=2072, nr_sectors = 1 limit=128 [ 89.895539][ T6205] serio: Serial port ptm0 [ 89.976108][ T6216] loop5: detected capacity change from 0 to 512 [ 89.985078][ T6216] EXT4-fs (loop5): mounting ext2 file system using the ext4 subsystem [ 89.995666][ T6216] EXT4-fs error (device loop5): ext4_orphan_get:1392: inode #15: comm syz.5.977: iget: bogus i_mode (5) [ 89.995964][ T6216] EXT4-fs error (device loop5): ext4_orphan_get:1397: comm syz.5.977: couldn't read orphan inode 15 (err -117) [ 89.996617][ T6216] ext2 filesystem being mounted at /34/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 90.324860][ T6232] ref_ctr_offset mismatch. inode: 0x515 offset: 0x0 ref_ctr_offset(old): 0x0 ref_ctr_offset(new): 0x1000000000 [ 90.479029][ T6236] loop0: detected capacity change from 0 to 128 [ 90.488811][ T6236] syz.0.988: attempt to access beyond end of device [ 90.488811][ T6236] loop0: rw=0, sector=2072, nr_sectors = 1 limit=128 [ 90.552662][ T6238] netlink: 'syz.0.989': attribute type 7 has an invalid length. [ 90.616381][ T6240] serio: Serial port ptm0 [ 90.726963][ T29] kauditd_printk_skb: 772 callbacks suppressed [ 90.726983][ T29] audit: type=1326 audit(1758568520.705:7528): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6246 comm="syz.0.993" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb67e93eec9 code=0x7ffc0000 [ 90.727076][ T29] audit: type=1326 audit(1758568520.705:7529): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6246 comm="syz.0.993" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb67e93eec9 code=0x7ffc0000 [ 90.734289][ T29] audit: type=1326 audit(1758568520.715:7530): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6246 comm="syz.0.993" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fb67e93eec9 code=0x7ffc0000 [ 90.734367][ T29] audit: type=1326 audit(1758568520.715:7531): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6246 comm="syz.0.993" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb67e93eec9 code=0x7ffc0000 [ 90.734470][ T29] audit: type=1326 audit(1758568520.715:7532): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6246 comm="syz.0.993" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb67e93eec9 code=0x7ffc0000 [ 90.734746][ T29] audit: type=1326 audit(1758568520.715:7533): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6246 comm="syz.0.993" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fb67e93eec9 code=0x7ffc0000 [ 90.735020][ T29] audit: type=1326 audit(1758568520.715:7534): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6246 comm="syz.0.993" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb67e93eec9 code=0x7ffc0000 [ 90.735161][ T29] audit: type=1326 audit(1758568520.715:7535): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6246 comm="syz.0.993" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb67e93eec9 code=0x7ffc0000 [ 90.736810][ T29] audit: type=1326 audit(1758568520.715:7536): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6246 comm="syz.0.993" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fb67e93eec9 code=0x7ffc0000 [ 90.736997][ T29] audit: type=1326 audit(1758568520.715:7537): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6246 comm="syz.0.993" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb67e93eec9 code=0x7ffc0000 [ 91.093609][ T6258] loop5: detected capacity change from 0 to 512 [ 91.111667][ T6258] loop5: detected capacity change from 0 to 512 [ 91.123965][ T6258] EXT4-fs (loop5): orphan cleanup on readonly fs [ 91.131876][ T6258] EXT4-fs error (device loop5): ext4_validate_block_bitmap:441: comm syz.5.998: bg 0: block 248: padding at end of block bitmap is not set [ 91.149119][ T6258] EXT4-fs error (device loop5): ext4_acquire_dquot:6937: comm syz.5.998: Failed to acquire dquot type 1 [ 91.166394][ T6258] EXT4-fs (loop5): 1 truncate cleaned up [ 91.177236][ T6258] EXT4-fs error (device loop5): ext4_lookup:1791: inode #2: comm syz.5.998: deleted inode referenced: 12 [ 91.197328][ T6266] serio: Serial port ptm0 [ 91.375442][ T6278] netlink: 'syz.3.1006': attribute type 7 has an invalid length. [ 91.460923][ T6281] loop3: detected capacity change from 0 to 512 [ 91.468024][ T6281] EXT4-fs (loop3): mounting ext2 file system using the ext4 subsystem [ 91.473387][ T6281] EXT4-fs error (device loop3): ext4_orphan_get:1392: inode #15: comm syz.3.1007: iget: bogus i_mode (5) [ 91.491900][ T6281] EXT4-fs error (device loop3): ext4_orphan_get:1397: comm syz.3.1007: couldn't read orphan inode 15 (err -117) [ 91.492410][ T6281] ext2 filesystem being mounted at /198/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 91.922401][ T6288] __nla_validate_parse: 21 callbacks suppressed [ 91.922422][ T6288] netlink: 64 bytes leftover after parsing attributes in process `syz.2.1009'. [ 92.051505][ T6296] loop2: detected capacity change from 0 to 128 [ 92.139414][ T6299] serio: Serial port ptm0 [ 92.377197][ T6310] FAULT_INJECTION: forcing a failure. [ 92.377197][ T6310] name failslab, interval 1, probability 0, space 0, times 0 [ 92.377228][ T6310] CPU: 0 UID: 0 PID: 6310 Comm: syz.2.1019 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 92.377257][ T6310] Tainted: [W]=WARN [ 92.377264][ T6310] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 92.377389][ T6310] Call Trace: [ 92.377398][ T6310] [ 92.377406][ T6310] __dump_stack+0x1d/0x30 [ 92.377426][ T6310] dump_stack_lvl+0xe8/0x140 [ 92.377444][ T6310] dump_stack+0x15/0x1b [ 92.377463][ T6310] should_fail_ex+0x265/0x280 [ 92.377513][ T6310] should_failslab+0x8c/0xb0 [ 92.377610][ T6310] __kvmalloc_node_noprof+0x123/0x4e0 [ 92.377646][ T6310] ? vmemdup_user+0x26/0xd0 [ 92.377671][ T6310] ? should_fail_usercopy+0x1a/0x20 [ 92.377721][ T6310] vmemdup_user+0x26/0xd0 [ 92.377752][ T6310] path_setxattrat+0x1b6/0x310 [ 92.377879][ T6310] __x64_sys_setxattr+0x6e/0x90 [ 92.377909][ T6310] x64_sys_call+0xad2/0x2ff0 [ 92.377932][ T6310] do_syscall_64+0xd2/0x200 [ 92.377973][ T6310] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 92.377996][ T6310] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 92.378068][ T6310] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 92.378098][ T6310] RIP: 0033:0x7f939cbaeec9 [ 92.378190][ T6310] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 92.378212][ T6310] RSP: 002b:00007f939b617038 EFLAGS: 00000246 ORIG_RAX: 00000000000000bc [ 92.378235][ T6310] RAX: ffffffffffffffda RBX: 00007f939ce05fa0 RCX: 00007f939cbaeec9 [ 92.378250][ T6310] RDX: 0000200000000740 RSI: 0000200000000080 RDI: 0000200000004040 [ 92.378265][ T6310] RBP: 00007f939b617090 R08: 0000000000000001 R09: 0000000000000000 [ 92.378280][ T6310] R10: 000000000000006c R11: 0000000000000246 R12: 0000000000000001 [ 92.378295][ T6310] R13: 00007f939ce06038 R14: 00007f939ce05fa0 R15: 00007ffd58441648 [ 92.378317][ T6310] [ 92.510504][ T6313] netlink: 'syz.2.1020': attribute type 7 has an invalid length. [ 92.686120][ T6313] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1020'. [ 92.784628][ T6326] loop0: detected capacity change from 0 to 128 [ 92.785884][ T6324] netlink: 64 bytes leftover after parsing attributes in process `syz.3.1023'. [ 92.798951][ T6323] loop2: detected capacity change from 0 to 512 [ 92.818054][ T6323] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1024'. [ 92.847447][ T6323] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1024'. [ 92.879364][ T6323] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1024'. [ 92.909991][ T6330] serio: Serial port ptm0 [ 92.915622][ T6323] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1024'. [ 92.934748][ T6331] loop2: detected capacity change from 0 to 512 [ 92.959038][ T6331] EXT4-fs (loop2): orphan cleanup on readonly fs [ 92.968237][ T6331] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.1024: bg 0: block 248: padding at end of block bitmap is not set [ 92.993897][ T6331] EXT4-fs error (device loop2): ext4_acquire_dquot:6937: comm syz.2.1024: Failed to acquire dquot type 1 [ 93.021701][ T6331] EXT4-fs (loop2): 1 truncate cleaned up [ 93.075660][ T6343] netlink: 'syz.3.1032': attribute type 7 has an invalid length. [ 93.084307][ T6343] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1032'. [ 93.238611][ T6352] loop0: detected capacity change from 0 to 512 [ 93.241443][ T6352] EXT4-fs (loop0): mounting ext2 file system using the ext4 subsystem [ 93.242527][ T6352] EXT4-fs error (device loop0): ext4_orphan_get:1392: inode #15: comm syz.0.1033: iget: bogus i_mode (5) [ 93.242879][ T6352] EXT4-fs error (device loop0): ext4_orphan_get:1397: comm syz.0.1033: couldn't read orphan inode 15 (err -117) [ 93.243441][ T6352] ext2 filesystem being mounted at /254/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 93.247699][ T6354] loop3: detected capacity change from 0 to 1024 [ 93.248189][ T6354] EXT4-fs: Ignoring removed orlov option [ 93.248298][ T6354] EXT4-fs: Ignoring removed nomblk_io_submit option [ 93.291253][ T6354] futex_wake_op: syz.3.1036 tries to shift op by -1; fix this program [ 93.359130][ T6362] loop3: detected capacity change from 0 to 128 [ 93.451387][ T6364] netlink: 64 bytes leftover after parsing attributes in process `syz.5.1039'. [ 93.473552][ T6368] serio: Serial port ptm0 [ 93.671145][ T6378] netlink: 'syz.5.1045': attribute type 7 has an invalid length. [ 93.671214][ T6378] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1045'. [ 93.719051][ T6380] FAULT_INJECTION: forcing a failure. [ 93.719051][ T6380] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 93.719082][ T6380] CPU: 1 UID: 0 PID: 6380 Comm: syz.5.1046 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 93.719157][ T6380] Tainted: [W]=WARN [ 93.719164][ T6380] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 93.719175][ T6380] Call Trace: [ 93.719181][ T6380] [ 93.719189][ T6380] __dump_stack+0x1d/0x30 [ 93.719280][ T6380] dump_stack_lvl+0xe8/0x140 [ 93.719302][ T6380] dump_stack+0x15/0x1b [ 93.719328][ T6380] should_fail_ex+0x265/0x280 [ 93.719356][ T6380] should_fail+0xb/0x20 [ 93.719435][ T6380] should_fail_usercopy+0x1a/0x20 [ 93.719461][ T6380] _copy_to_user+0x20/0xa0 [ 93.719561][ T6380] simple_read_from_buffer+0xb5/0x130 [ 93.719586][ T6380] proc_fail_nth_read+0x10e/0x150 [ 93.719613][ T6380] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 93.719639][ T6380] vfs_read+0x1a5/0x770 [ 93.719660][ T6380] ? __rcu_read_unlock+0x4f/0x70 [ 93.719742][ T6380] ? __fget_files+0x184/0x1c0 [ 93.719769][ T6380] ksys_read+0xda/0x1a0 [ 93.719793][ T6380] __x64_sys_read+0x40/0x50 [ 93.719854][ T6380] x64_sys_call+0x27bc/0x2ff0 [ 93.719910][ T6380] do_syscall_64+0xd2/0x200 [ 93.719940][ T6380] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 93.720015][ T6380] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 93.720044][ T6380] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 93.720066][ T6380] RIP: 0033:0x7fd72bbad8dc [ 93.720083][ T6380] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 93.720175][ T6380] RSP: 002b:00007fd72a60f030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 93.720196][ T6380] RAX: ffffffffffffffda RBX: 00007fd72be05fa0 RCX: 00007fd72bbad8dc [ 93.720209][ T6380] RDX: 000000000000000f RSI: 00007fd72a60f0a0 RDI: 0000000000000003 [ 93.720285][ T6380] RBP: 00007fd72a60f090 R08: 0000000000000000 R09: 0000000000000000 [ 93.720298][ T6380] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 93.720311][ T6380] R13: 00007fd72be06038 R14: 00007fd72be05fa0 R15: 00007ffc2f7fe378 [ 93.720335][ T6380] [ 94.011063][ T6389] loop5: detected capacity change from 0 to 128 [ 94.189484][ T6394] serio: Serial port ptm0 [ 94.228432][ T6396] loop2: detected capacity change from 0 to 1024 [ 94.296186][ T6407] netlink: 'syz.5.1056': attribute type 7 has an invalid length. [ 94.327714][ T6409] sch_tbf: peakrate 7 is lower than or equals to rate 15 ! [ 94.397053][ T6414] loop1: detected capacity change from 0 to 128 [ 94.417225][ T6419] loop5: detected capacity change from 0 to 512 [ 94.429623][ T6414] syz.1.1060: attempt to access beyond end of device [ 94.429623][ T6414] loop1: rw=0, sector=2072, nr_sectors = 1 limit=128 [ 94.453434][ T6421] loop0: detected capacity change from 0 to 128 [ 94.465847][ T6419] loop5: detected capacity change from 0 to 512 [ 94.504913][ T6419] EXT4-fs (loop5): orphan cleanup on readonly fs [ 94.522973][ T6419] EXT4-fs error (device loop5): ext4_validate_block_bitmap:441: comm syz.5.1061: bg 0: block 248: padding at end of block bitmap is not set [ 94.527815][ T6423] loop1: detected capacity change from 0 to 512 [ 94.555561][ T6419] EXT4-fs error (device loop5): ext4_acquire_dquot:6937: comm syz.5.1061: Failed to acquire dquot type 1 [ 94.576750][ T6419] EXT4-fs (loop5): 1 truncate cleaned up [ 94.578760][ T6426] FAULT_INJECTION: forcing a failure. [ 94.578760][ T6426] name failslab, interval 1, probability 0, space 0, times 0 [ 94.598860][ T6426] CPU: 1 UID: 0 PID: 6426 Comm: syz.0.1064 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 94.599044][ T6426] Tainted: [W]=WARN [ 94.599052][ T6426] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 94.599065][ T6426] Call Trace: [ 94.599073][ T6426] [ 94.599082][ T6426] __dump_stack+0x1d/0x30 [ 94.599108][ T6426] dump_stack_lvl+0xe8/0x140 [ 94.599204][ T6426] dump_stack+0x15/0x1b [ 94.599224][ T6426] should_fail_ex+0x265/0x280 [ 94.599245][ T6423] loop1: detected capacity change from 0 to 512 [ 94.599253][ T6426] should_failslab+0x8c/0xb0 [ 94.599282][ T6426] kmem_cache_alloc_noprof+0x50/0x310 [ 94.599318][ T6426] ? security_inode_alloc+0x37/0x100 [ 94.599348][ T6426] security_inode_alloc+0x37/0x100 [ 94.599377][ T6426] inode_init_always_gfp+0x4b7/0x500 [ 94.599426][ T6426] ? __pfx_hugetlbfs_alloc_inode+0x10/0x10 [ 94.599523][ T6426] alloc_inode+0x58/0x170 [ 94.599548][ T6426] new_inode+0x1d/0xe0 [ 94.599573][ T6426] hugetlbfs_get_inode+0x7b/0x370 [ 94.599648][ T6426] hugetlb_file_setup+0x192/0x3d0 [ 94.599720][ T6426] ksys_mmap_pgoff+0x157/0x310 [ 94.599742][ T6426] x64_sys_call+0x14a3/0x2ff0 [ 94.599825][ T6426] do_syscall_64+0xd2/0x200 [ 94.599857][ T6426] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 94.599882][ T6426] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 94.599954][ T6426] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 94.600071][ T6426] RIP: 0033:0x7fb67e93eec9 [ 94.600090][ T6426] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 94.600109][ T6426] RSP: 002b:00007fb67d39f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 94.600130][ T6426] RAX: ffffffffffffffda RBX: 00007fb67eb95fa0 RCX: 00007fb67e93eec9 [ 94.600165][ T6426] RDX: 0000000007000000 RSI: 0000000000800000 RDI: 0000200000800000 [ 94.600179][ T6426] RBP: 00007fb67d39f090 R08: 0000000000000006 R09: 0000000000002000 [ 94.600260][ T6426] R10: 000000000006e073 R11: 0000000000000246 R12: 0000000000000001 [ 94.600279][ T6426] R13: 00007fb67eb96038 R14: 00007fb67eb95fa0 R15: 00007fff0beee568 [ 94.600300][ T6426] [ 94.869616][ T6419] EXT4-fs error (device loop5): ext4_lookup:1791: inode #2: comm syz.5.1061: deleted inode referenced: 12 [ 94.891640][ T6423] EXT4-fs (loop1): orphan cleanup on readonly fs [ 94.892258][ T6423] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.1063: bg 0: block 248: padding at end of block bitmap is not set [ 94.892443][ T6423] EXT4-fs error (device loop1): ext4_acquire_dquot:6937: comm syz.1.1063: Failed to acquire dquot type 1 [ 94.893310][ T6423] EXT4-fs (loop1): 1 truncate cleaned up [ 94.957125][ T6435] loop0: detected capacity change from 0 to 512 [ 94.991929][ T6435] EXT4-fs (loop0): mounting ext2 file system using the ext4 subsystem [ 95.009783][ T6437] serio: Serial port ptm0 [ 95.019012][ T6435] EXT4-fs error (device loop0): ext4_orphan_get:1392: inode #15: comm syz.0.1066: iget: bogus i_mode (5) [ 95.019178][ T6435] EXT4-fs error (device loop0): ext4_orphan_get:1397: comm syz.0.1066: couldn't read orphan inode 15 (err -117) [ 95.019851][ T6435] ext2 filesystem being mounted at /261/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 95.145033][ T6445] loop2: detected capacity change from 0 to 512 [ 95.188936][ T6445] loop2: detected capacity change from 0 to 512 [ 95.191049][ T6445] EXT4-fs (loop2): orphan cleanup on readonly fs [ 95.205475][ T6445] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.1070: bg 0: block 248: padding at end of block bitmap is not set [ 95.205831][ T6445] EXT4-fs error (device loop2): ext4_acquire_dquot:6937: comm syz.2.1070: Failed to acquire dquot type 1 [ 95.206235][ T6445] EXT4-fs (loop2): 1 truncate cleaned up [ 95.317848][ T6456] loop2: detected capacity change from 0 to 128 [ 95.327196][ T6458] netlink: 'syz.3.1075': attribute type 7 has an invalid length. [ 95.345607][ T6462] loop5: detected capacity change from 0 to 512 [ 95.356159][ T6456] syz.2.1074: attempt to access beyond end of device [ 95.356159][ T6456] loop2: rw=0, sector=2072, nr_sectors = 1 limit=128 [ 95.373063][ T6462] loop5: detected capacity change from 0 to 512 [ 95.418009][ T6462] EXT4-fs (loop5): orphan cleanup on readonly fs [ 95.422058][ T6462] EXT4-fs error (device loop5): ext4_validate_block_bitmap:441: comm syz.5.1077: bg 0: block 248: padding at end of block bitmap is not set [ 95.426692][ T6464] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=6464 comm=syz.3.1078 [ 95.453360][ T6467] loop2: detected capacity change from 0 to 512 [ 95.472055][ T6462] EXT4-fs error (device loop5): ext4_acquire_dquot:6937: comm syz.5.1077: Failed to acquire dquot type 1 [ 95.472521][ T6462] EXT4-fs (loop5): 1 truncate cleaned up [ 95.481285][ T6467] loop2: detected capacity change from 0 to 512 [ 95.508296][ T6467] EXT4-fs (loop2): orphan cleanup on readonly fs [ 95.508764][ T6467] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.1079: bg 0: block 248: padding at end of block bitmap is not set [ 95.509065][ T6467] EXT4-fs error (device loop2): ext4_acquire_dquot:6937: comm syz.2.1079: Failed to acquire dquot type 1 [ 95.543632][ T6467] EXT4-fs (loop2): 1 truncate cleaned up [ 95.552180][ T6467] EXT4-fs error (device loop2): ext4_lookup:1791: inode #2: comm syz.2.1079: deleted inode referenced: 12 [ 95.593145][ T6472] serio: Serial port ptm1 [ 95.801764][ T29] kauditd_printk_skb: 746 callbacks suppressed [ 95.801796][ T29] audit: type=1326 audit(1758568525.785:8270): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6480 comm="syz.0.1083" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb67e93eec9 code=0x7ffc0000 [ 95.887949][ T29] audit: type=1326 audit(1758568525.815:8271): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6480 comm="syz.0.1083" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb67e93eec9 code=0x7ffc0000 [ 95.916085][ T29] audit: type=1326 audit(1758568525.815:8272): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6480 comm="syz.0.1083" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fb67e93eec9 code=0x7ffc0000 [ 95.943253][ T29] audit: type=1326 audit(1758568525.815:8273): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6480 comm="syz.0.1083" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb67e93eec9 code=0x7ffc0000 [ 95.967905][ T29] audit: type=1326 audit(1758568525.815:8274): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6480 comm="syz.0.1083" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb67e93eec9 code=0x7ffc0000 [ 95.993605][ T29] audit: type=1326 audit(1758568525.815:8275): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6480 comm="syz.0.1083" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fb67e93eec9 code=0x7ffc0000 [ 96.018098][ T29] audit: type=1326 audit(1758568525.815:8276): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6480 comm="syz.0.1083" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb67e93eec9 code=0x7ffc0000 [ 96.044375][ T29] audit: type=1326 audit(1758568525.815:8277): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6480 comm="syz.0.1083" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb67e93eec9 code=0x7ffc0000 [ 96.071397][ T29] audit: type=1326 audit(1758568525.815:8278): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6480 comm="syz.0.1083" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fb67e93eec9 code=0x7ffc0000 [ 96.096858][ T29] audit: type=1326 audit(1758568525.815:8279): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6480 comm="syz.0.1083" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb67e93eec9 code=0x7ffc0000 [ 96.247087][ T6494] netlink: 'syz.0.1088': attribute type 7 has an invalid length. [ 96.346938][ T6499] loop1: detected capacity change from 0 to 512 [ 96.383614][ T6499] ext4 filesystem being mounted at /134/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 96.421533][ T6503] loop0: detected capacity change from 0 to 512 [ 96.426670][ T6499] FAULT_INJECTION: forcing a failure. [ 96.426670][ T6499] name failslab, interval 1, probability 0, space 0, times 0 [ 96.441940][ T6499] CPU: 0 UID: 0 PID: 6499 Comm: syz.1.1089 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 96.441975][ T6499] Tainted: [W]=WARN [ 96.441982][ T6499] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 96.441993][ T6499] Call Trace: [ 96.441998][ T6499] [ 96.442006][ T6499] __dump_stack+0x1d/0x30 [ 96.442045][ T6499] dump_stack_lvl+0xe8/0x140 [ 96.442065][ T6499] dump_stack+0x15/0x1b [ 96.442083][ T6499] should_fail_ex+0x265/0x280 [ 96.442164][ T6499] should_failslab+0x8c/0xb0 [ 96.442191][ T6499] kmem_cache_alloc_noprof+0x50/0x310 [ 96.442217][ T6499] ? security_file_alloc+0x32/0x100 [ 96.442299][ T6499] security_file_alloc+0x32/0x100 [ 96.442335][ T6499] init_file+0x5c/0x1d0 [ 96.442368][ T6499] alloc_empty_file+0x8b/0x200 [ 96.442418][ T6499] path_openat+0x68/0x2170 [ 96.442436][ T6499] ? _parse_integer_limit+0x170/0x190 [ 96.442461][ T6499] ? _parse_integer+0x27/0x40 [ 96.442560][ T6499] ? kstrtoull+0x111/0x140 [ 96.442585][ T6499] ? kstrtouint+0x76/0xc0 [ 96.442612][ T6499] do_filp_open+0x109/0x230 [ 96.442660][ T6499] do_sys_openat2+0xa6/0x110 [ 96.442725][ T6499] __x64_sys_creat+0x65/0x90 [ 96.442794][ T6499] x64_sys_call+0x2d94/0x2ff0 [ 96.442814][ T6499] do_syscall_64+0xd2/0x200 [ 96.442843][ T6499] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 96.442886][ T6499] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 96.442956][ T6499] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 96.442977][ T6499] RIP: 0033:0x7feb59fceec9 [ 96.443039][ T6499] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 96.443055][ T6499] RSP: 002b:00007feb58a2f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000055 [ 96.443078][ T6499] RAX: ffffffffffffffda RBX: 00007feb5a225fa0 RCX: 00007feb59fceec9 [ 96.443092][ T6499] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000200000000000 [ 96.443106][ T6499] RBP: 00007feb58a2f090 R08: 0000000000000000 R09: 0000000000000000 [ 96.443120][ T6499] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 96.443133][ T6499] R13: 00007feb5a226038 R14: 00007feb5a225fa0 R15: 00007ffdfe914308 [ 96.443153][ T6499] [ 96.741245][ T6503] loop0: detected capacity change from 0 to 512 [ 96.761469][ T6503] EXT4-fs (loop0): orphan cleanup on readonly fs [ 96.776874][ T6510] serio: Serial port ptm0 [ 96.789308][ T6503] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.1091: bg 0: block 248: padding at end of block bitmap is not set [ 96.789530][ T6503] EXT4-fs error (device loop0): ext4_acquire_dquot:6937: comm syz.0.1091: Failed to acquire dquot type 1 [ 96.790195][ T6503] EXT4-fs (loop0): 1 truncate cleaned up [ 96.844120][ T6513] loop5: detected capacity change from 0 to 512 [ 96.853374][ T6513] EXT4-fs (loop5): mounting ext2 file system using the ext4 subsystem [ 96.877759][ T6513] EXT4-fs error (device loop5): ext4_orphan_get:1392: inode #15: comm syz.5.1093: iget: bogus i_mode (5) [ 96.878003][ T6513] EXT4-fs error (device loop5): ext4_orphan_get:1397: comm syz.5.1093: couldn't read orphan inode 15 (err -117) [ 96.880849][ T6513] ext2 filesystem being mounted at /58/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 97.023323][ T6522] __nla_validate_parse: 27 callbacks suppressed [ 97.023347][ T6522] netlink: 64 bytes leftover after parsing attributes in process `syz.1.1098'. [ 97.032728][ T6526] loop2: detected capacity change from 0 to 512 [ 97.036142][ T6528] netlink: 'syz.3.1101': attribute type 7 has an invalid length. [ 97.036161][ T6528] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1101'. [ 97.040580][ T6526] EXT4-fs warning (device loop2): ext4_xattr_inode_get:556: inode #11: comm syz.2.1100: EA inode hash validation failed [ 97.040690][ T6526] EXT4-fs error (device loop2): ext4_do_update_inode:5653: inode #15: comm syz.2.1100: corrupted inode contents [ 97.041037][ T6526] EXT4-fs error (device loop2): ext4_dirty_inode:6538: inode #15: comm syz.2.1100: mark_inode_dirty error [ 97.041156][ T6526] EXT4-fs error (device loop2): ext4_do_update_inode:5653: inode #15: comm syz.2.1100: corrupted inode contents [ 97.041316][ T6526] EXT4-fs error (device loop2): ext4_xattr_delete_inode:2991: inode #15: comm syz.2.1100: mark_inode_dirty error [ 97.041724][ T6526] EXT4-fs error (device loop2): ext4_xattr_delete_inode:2994: inode #15: comm syz.2.1100: mark inode dirty (error -117) [ 97.208582][ T6540] loop3: detected capacity change from 0 to 512 [ 97.210566][ T6540] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1106'. [ 97.210941][ T6540] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1106'. [ 97.211307][ T6540] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1106'. [ 97.211625][ T6540] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1106'. [ 97.273787][ T6542] loop1: detected capacity change from 0 to 512 [ 97.274797][ T6540] loop3: detected capacity change from 0 to 512 [ 97.283820][ T6526] EXT4-fs warning (device loop2): ext4_evict_inode:274: xattr delete (err -117) [ 97.289644][ T6542] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1107'. [ 97.308705][ T6540] EXT4-fs (loop3): orphan cleanup on readonly fs [ 97.309326][ T6540] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.1106: bg 0: block 248: padding at end of block bitmap is not set [ 97.309555][ T6540] EXT4-fs error (device loop3): ext4_acquire_dquot:6937: comm syz.3.1106: Failed to acquire dquot type 1 [ 97.310023][ T6540] EXT4-fs (loop3): 1 truncate cleaned up [ 97.320020][ T6526] EXT4-fs (loop2): 1 orphan inode deleted [ 97.334149][ T6542] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1107'. [ 97.365856][ T6542] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1107'. [ 97.366253][ T6542] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1107'. [ 97.397003][ T6540] EXT4-fs error (device loop3): ext4_lookup:1791: inode #2: comm syz.3.1106: deleted inode referenced: 12 [ 97.425393][ T6542] loop1: detected capacity change from 0 to 512 [ 97.435844][ T6542] EXT4-fs (loop1): orphan cleanup on readonly fs [ 97.436390][ T6542] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.1107: bg 0: block 248: padding at end of block bitmap is not set [ 97.436547][ T6542] EXT4-fs error (device loop1): ext4_acquire_dquot:6937: comm syz.1.1107: Failed to acquire dquot type 1 [ 97.437110][ T6542] EXT4-fs (loop1): 1 truncate cleaned up [ 97.514968][ T6546] serio: Serial port ptm0 [ 97.670934][ T6554] loop3: detected capacity change from 0 to 512 [ 97.711764][ T6554] ext4 filesystem being mounted at /222/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 97.749412][ T6554] EXT4-fs error (device loop3): ext4_do_update_inode:5653: inode #2: comm syz.3.1111: corrupted inode contents [ 97.792170][ T6566] FAULT_INJECTION: forcing a failure. [ 97.792170][ T6566] name failslab, interval 1, probability 0, space 0, times 0 [ 97.806050][ T6566] CPU: 0 UID: 0 PID: 6566 Comm: syz.5.1114 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 97.806102][ T6566] Tainted: [W]=WARN [ 97.806110][ T6566] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 97.806124][ T6566] Call Trace: [ 97.806191][ T6566] [ 97.806200][ T6566] __dump_stack+0x1d/0x30 [ 97.806226][ T6566] dump_stack_lvl+0xe8/0x140 [ 97.806247][ T6566] dump_stack+0x15/0x1b [ 97.806274][ T6566] should_fail_ex+0x265/0x280 [ 97.806302][ T6566] should_failslab+0x8c/0xb0 [ 97.806333][ T6566] __kmalloc_node_track_caller_noprof+0xa4/0x410 [ 97.806471][ T6566] ? sidtab_sid2str_get+0xa0/0x130 [ 97.806497][ T6566] kmemdup_noprof+0x2b/0x70 [ 97.806524][ T6566] sidtab_sid2str_get+0xa0/0x130 [ 97.806544][ T6566] security_sid_to_context_core+0x1eb/0x2e0 [ 97.806632][ T6566] security_sid_to_context+0x27/0x40 [ 97.806651][ T6566] selinux_lsmprop_to_secctx+0x67/0xf0 [ 97.806676][ T6566] security_lsmprop_to_secctx+0x43/0x80 [ 97.806751][ T6566] audit_log_task_context+0x77/0x190 [ 97.806781][ T6566] audit_log_task+0xf4/0x250 [ 97.806826][ T6566] audit_seccomp+0x61/0x100 [ 97.806905][ T6566] ? __seccomp_filter+0x68c/0x10d0 [ 97.806930][ T6566] __seccomp_filter+0x69d/0x10d0 [ 97.807074][ T6566] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 97.807098][ T6566] ? vfs_write+0x7e8/0x960 [ 97.807120][ T6566] ? __rcu_read_unlock+0x4f/0x70 [ 97.807140][ T6566] ? __fget_files+0x184/0x1c0 [ 97.807185][ T6566] __secure_computing+0x82/0x150 [ 97.807270][ T6566] syscall_trace_enter+0xcf/0x1e0 [ 97.807298][ T6566] do_syscall_64+0xac/0x200 [ 97.807333][ T6566] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 97.807420][ T6566] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 97.807654][ T6566] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 97.807690][ T6566] RIP: 0033:0x7fd72bbaeec9 [ 97.807708][ T6566] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 97.807729][ T6566] RSP: 002b:00007fd72a60f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 97.807750][ T6566] RAX: ffffffffffffffda RBX: 00007fd72be05fa0 RCX: 00007fd72bbaeec9 [ 97.807762][ T6566] RDX: 0000000000000010 RSI: 00002000000000c0 RDI: 0000000000000006 [ 97.807774][ T6566] RBP: 00007fd72a60f090 R08: 0000000000000000 R09: 0000000000000000 [ 97.807811][ T6566] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 97.807825][ T6566] R13: 00007fd72be06038 R14: 00007fd72be05fa0 R15: 00007ffc2f7fe378 [ 97.807906][ T6566] [ 97.901182][ T6554] EXT4-fs error (device loop3): ext4_dirty_inode:6538: inode #2: comm syz.3.1111: mark_inode_dirty error [ 98.103649][ T6569] netlink: 'syz.5.1115': attribute type 7 has an invalid length. [ 98.113197][ T6554] EXT4-fs error (device loop3): ext4_do_update_inode:5653: inode #2: comm syz.3.1111: corrupted inode contents [ 98.167313][ T6554] EXT4-fs error (device loop3): __ext4_ext_dirty:206: inode #2: comm syz.3.1111: mark_inode_dirty error [ 98.237344][ T6582] loop5: detected capacity change from 0 to 512 [ 98.294224][ T6584] loop3: detected capacity change from 0 to 512 [ 98.310528][ T6586] serio: Serial port ptm0 [ 98.327201][ T6582] loop5: detected capacity change from 0 to 512 [ 98.342320][ T6582] EXT4-fs (loop5): orphan cleanup on readonly fs [ 98.353118][ T6582] EXT4-fs error (device loop5): ext4_validate_block_bitmap:441: comm syz.5.1120: bg 0: block 248: padding at end of block bitmap is not set [ 98.380635][ T6584] loop3: detected capacity change from 0 to 512 [ 98.387381][ T6582] EXT4-fs error (device loop5): ext4_acquire_dquot:6937: comm syz.5.1120: Failed to acquire dquot type 1 [ 98.402370][ T6582] EXT4-fs (loop5): 1 truncate cleaned up [ 98.412013][ T6584] EXT4-fs (loop3): orphan cleanup on readonly fs [ 98.412523][ T6584] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.1121: bg 0: block 248: padding at end of block bitmap is not set [ 98.442632][ T6584] EXT4-fs error (device loop3): ext4_acquire_dquot:6937: comm syz.3.1121: Failed to acquire dquot type 1 [ 98.443266][ T6584] EXT4-fs (loop3): 1 truncate cleaned up [ 98.443462][ T6582] EXT4-fs error (device loop5): ext4_lookup:1791: inode #2: comm syz.5.1120: deleted inode referenced: 12 [ 98.519608][ T6598] loop2: detected capacity change from 0 to 512 [ 98.537423][ T6598] EXT4-fs (loop2): mounting ext2 file system using the ext4 subsystem [ 98.549555][ T6600] FAULT_INJECTION: forcing a failure. [ 98.549555][ T6600] name failslab, interval 1, probability 0, space 0, times 0 [ 98.549615][ T6600] CPU: 1 UID: 0 PID: 6600 Comm: syz.5.1127 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 98.549650][ T6600] Tainted: [W]=WARN [ 98.549656][ T6600] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 98.549667][ T6600] Call Trace: [ 98.549673][ T6600] [ 98.549679][ T6600] __dump_stack+0x1d/0x30 [ 98.549758][ T6600] dump_stack_lvl+0xe8/0x140 [ 98.549781][ T6600] dump_stack+0x15/0x1b [ 98.549801][ T6600] should_fail_ex+0x265/0x280 [ 98.549881][ T6600] should_failslab+0x8c/0xb0 [ 98.549910][ T6600] __kmalloc_node_track_caller_noprof+0xa4/0x410 [ 98.549973][ T6600] ? sidtab_sid2str_get+0xa0/0x130 [ 98.549998][ T6600] kmemdup_noprof+0x2b/0x70 [ 98.550104][ T6600] sidtab_sid2str_get+0xa0/0x130 [ 98.550129][ T6600] security_sid_to_context_core+0x1eb/0x2e0 [ 98.550197][ T6600] security_sid_to_context+0x27/0x40 [ 98.550217][ T6600] selinux_lsmprop_to_secctx+0x67/0xf0 [ 98.550238][ T6600] security_lsmprop_to_secctx+0x43/0x80 [ 98.550313][ T6600] audit_log_task_context+0x77/0x190 [ 98.550347][ T6600] audit_log_task+0xf4/0x250 [ 98.550447][ T6600] audit_seccomp+0x61/0x100 [ 98.550474][ T6600] ? __seccomp_filter+0x68c/0x10d0 [ 98.550499][ T6600] __seccomp_filter+0x69d/0x10d0 [ 98.550525][ T6600] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 98.550577][ T6600] ? vfs_write+0x7e8/0x960 [ 98.550602][ T6600] ? __rcu_read_unlock+0x4f/0x70 [ 98.550622][ T6600] ? __fget_files+0x184/0x1c0 [ 98.550646][ T6600] __secure_computing+0x82/0x150 [ 98.550736][ T6600] syscall_trace_enter+0xcf/0x1e0 [ 98.550769][ T6600] do_syscall_64+0xac/0x200 [ 98.550796][ T6600] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 98.550822][ T6600] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 98.550903][ T6600] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 98.550924][ T6600] RIP: 0033:0x7fd72bbaeec9 [ 98.550939][ T6600] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 98.551038][ T6600] RSP: 002b:00007fd72a60f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000097 [ 98.551138][ T6600] RAX: ffffffffffffffda RBX: 00007fd72be05fa0 RCX: 00007fd72bbaeec9 [ 98.551153][ T6600] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000007 [ 98.551165][ T6600] RBP: 00007fd72a60f090 R08: 0000000000000000 R09: 0000000000000000 [ 98.551206][ T6600] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 98.551220][ T6600] R13: 00007fd72be06038 R14: 00007fd72be05fa0 R15: 00007ffc2f7fe378 [ 98.551241][ T6600] [ 98.557752][ T6598] EXT4-fs error (device loop2): ext4_orphan_get:1392: inode #15: comm syz.2.1124: iget: bogus i_mode (5) [ 98.557974][ T6598] EXT4-fs error (device loop2): ext4_orphan_get:1397: comm syz.2.1124: couldn't read orphan inode 15 (err -117) [ 98.558550][ T6598] ext2 filesystem being mounted at /231/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 98.809960][ T6609] netlink: 'syz.3.1129': attribute type 30 has an invalid length. [ 98.874793][ T6609] netlink: 'syz.3.1129': attribute type 10 has an invalid length. [ 98.874825][ T6609] dummy0: entered promiscuous mode [ 98.915337][ T6615] loop3: detected capacity change from 0 to 128 [ 98.921910][ T6615] syz.3.1131: attempt to access beyond end of device [ 98.921910][ T6615] loop3: rw=0, sector=2072, nr_sectors = 1 limit=128 [ 98.959201][ T6617] netlink: 'syz.1.1132': attribute type 7 has an invalid length. [ 99.338466][ T6628] loop1: detected capacity change from 0 to 1024 [ 99.346510][ T6630] FAULT_INJECTION: forcing a failure. [ 99.346510][ T6630] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 99.360508][ T6630] CPU: 0 UID: 0 PID: 6630 Comm: syz.3.1140 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 99.360551][ T6630] Tainted: [W]=WARN [ 99.360560][ T6630] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 99.360574][ T6630] Call Trace: [ 99.360582][ T6630] [ 99.360592][ T6630] __dump_stack+0x1d/0x30 [ 99.360626][ T6630] dump_stack_lvl+0xe8/0x140 [ 99.360677][ T6630] dump_stack+0x15/0x1b [ 99.360692][ T6630] should_fail_ex+0x265/0x280 [ 99.360719][ T6630] should_fail+0xb/0x20 [ 99.360812][ T6630] should_fail_usercopy+0x1a/0x20 [ 99.360836][ T6630] _copy_from_iter+0xd2/0xe80 [ 99.360862][ T6630] ? __build_skb_around+0x1a0/0x200 [ 99.360889][ T6630] ? skb_put+0x7e/0xf0 [ 99.360916][ T6630] netlink_sendmsg+0x471/0x6b0 [ 99.360979][ T6630] ? __pfx_netlink_sendmsg+0x10/0x10 [ 99.361041][ T6630] __sock_sendmsg+0x142/0x180 [ 99.361077][ T6630] ____sys_sendmsg+0x31e/0x4e0 [ 99.361112][ T6630] ___sys_sendmsg+0x17b/0x1d0 [ 99.361218][ T6630] __x64_sys_sendmsg+0xd4/0x160 [ 99.361251][ T6630] x64_sys_call+0x191e/0x2ff0 [ 99.361276][ T6630] do_syscall_64+0xd2/0x200 [ 99.361389][ T6630] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 99.361427][ T6630] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 99.361460][ T6630] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 99.361480][ T6630] RIP: 0033:0x7f55ed29eec9 [ 99.361500][ T6630] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 99.361594][ T6630] RSP: 002b:00007f55ebd07038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 99.361615][ T6630] RAX: ffffffffffffffda RBX: 00007f55ed4f5fa0 RCX: 00007f55ed29eec9 [ 99.361690][ T6630] RDX: 0000000000000010 RSI: 0000200000000280 RDI: 0000000000000003 [ 99.361705][ T6630] RBP: 00007f55ebd07090 R08: 0000000000000000 R09: 0000000000000000 [ 99.361720][ T6630] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 99.361734][ T6630] R13: 00007f55ed4f6038 R14: 00007f55ed4f5fa0 R15: 00007fff6c68c2c8 [ 99.361756][ T6630] [ 99.362376][ T6628] SELinux: security_context_str_to_sid (root) failed with errno=-22 [ 99.642996][ T6647] vti0: entered allmulticast mode [ 99.656861][ T6647] tipc: Enabling of bearer rejected, already enabled [ 99.751437][ T6648] netlink: 'syz.5.1145': attribute type 7 has an invalid length. [ 99.955238][ T6660] loop3: detected capacity change from 0 to 512 [ 99.963970][ T6660] EXT4-fs (loop3): mounting ext2 file system using the ext4 subsystem [ 99.974937][ T6660] EXT4-fs error (device loop3): ext4_orphan_get:1392: inode #15: comm syz.3.1149: iget: bogus i_mode (5) [ 99.975227][ T6660] EXT4-fs error (device loop3): ext4_orphan_get:1397: comm syz.3.1149: couldn't read orphan inode 15 (err -117) [ 99.976120][ T6660] ext2 filesystem being mounted at /233/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 100.283417][ T6654] loop5: detected capacity change from 0 to 512 [ 100.358080][ T6672] loop1: detected capacity change from 0 to 128 [ 100.371817][ T6672] syz.1.1153: attempt to access beyond end of device [ 100.371817][ T6672] loop1: rw=0, sector=2072, nr_sectors = 1 limit=128 [ 100.496357][ T6654] ext4 filesystem being mounted at /67/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 100.767657][ T6687] netlink: 'syz.5.1158': attribute type 7 has an invalid length. [ 100.818733][ T3307] EXT4-fs unmount: 61 callbacks suppressed [ 100.818754][ T3307] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 100.863156][ T29] kauditd_printk_skb: 610 callbacks suppressed [ 100.863205][ T29] audit: type=1326 audit(1758568530.845:8878): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6692 comm="syz.5.1161" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd72bbaeec9 code=0x7ffc0000 [ 100.914059][ T29] audit: type=1326 audit(1758568530.845:8879): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6692 comm="syz.5.1161" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd72bbaeec9 code=0x7ffc0000 [ 100.943183][ T29] audit: type=1326 audit(1758568530.885:8880): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6692 comm="syz.5.1161" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd72bbaeec9 code=0x7ffc0000 [ 100.968410][ T29] audit: type=1326 audit(1758568530.885:8881): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6692 comm="syz.5.1161" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd72bbaeec9 code=0x7ffc0000 [ 100.994185][ T29] audit: type=1326 audit(1758568530.885:8882): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6692 comm="syz.5.1161" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd72bbaeec9 code=0x7ffc0000 [ 101.020917][ T29] audit: type=1326 audit(1758568530.895:8883): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6692 comm="syz.5.1161" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd72bbaeec9 code=0x7ffc0000 [ 101.046415][ T29] audit: type=1326 audit(1758568530.895:8884): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6692 comm="syz.5.1161" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd72bbaeec9 code=0x7ffc0000 [ 101.072946][ T29] audit: type=1326 audit(1758568530.895:8885): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6692 comm="syz.5.1161" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd72bbaeec9 code=0x7ffc0000 [ 101.114272][ T6699] serio: Serial port ptm0 [ 101.137284][ T29] audit: type=1326 audit(1758568530.895:8886): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6692 comm="syz.5.1161" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd72bbaeec9 code=0x7ffc0000 [ 101.163015][ T29] audit: type=1326 audit(1758568530.895:8887): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6692 comm="syz.5.1161" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd72bbaeec9 code=0x7ffc0000 [ 101.330972][ T6714] ================================================================== [ 101.339350][ T6714] BUG: KCSAN: data-race in __process_echoes / n_tty_write [ 101.347210][ T6714] [ 101.349952][ T6714] write to 0xffffc90001177280 of 8 bytes by task 37 on cpu 0: [ 101.357774][ T6714] __process_echoes+0x63e/0x6b0 [ 101.362927][ T6714] n_tty_receive_buf_common+0x8e4/0xbe0 [ 101.369572][ T6714] n_tty_receive_buf2+0x33/0x40 [ 101.375120][ T6714] tty_ldisc_receive_buf+0x63/0xf0 [ 101.381402][ T6714] tty_port_default_receive_buf+0x59/0x90 [ 101.390266][ T6714] flush_to_ldisc+0x145/0x340 [ 101.395286][ T6714] process_scheduled_works+0x4cb/0x9d0 [ 101.401110][ T6714] worker_thread+0x582/0x770 [ 101.405892][ T6714] kthread+0x489/0x510 [ 101.410087][ T6714] ret_from_fork+0x11f/0x1b0 [ 101.414951][ T6714] ret_from_fork_asm+0x1a/0x30 [ 101.419994][ T6714] [ 101.422849][ T6714] read to 0xffffc90001177280 of 8 bytes by task 6714 on cpu 1: [ 101.431101][ T6714] n_tty_write+0x161/0xb50 [ 101.435992][ T6714] file_tty_write+0x370/0x690 [ 101.441207][ T6714] tty_write+0x25/0x30 [ 101.445291][ T6714] do_iter_readv_writev+0x499/0x540 [ 101.452199][ T6714] vfs_writev+0x2df/0x8b0 [ 101.456889][ T6714] do_writev+0xe7/0x210 [ 101.461244][ T6714] __x64_sys_writev+0x45/0x50 [ 101.467602][ T6714] x64_sys_call+0x1e9a/0x2ff0 [ 101.473363][ T6714] do_syscall_64+0xd2/0x200 [ 101.480042][ T6714] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 101.487716][ T6714] [ 101.490608][ T6714] value changed: 0x0000000000000000 -> 0x0000000000000007 [ 101.500022][ T6714] [ 101.502626][ T6714] Reported by Kernel Concurrency Sanitizer on: [ 101.509626][ T6714] CPU: 1 UID: 0 PID: 6714 Comm: syz.3.1171 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 101.522169][ T6714] Tainted: [W]=WARN [ 101.526938][ T6714] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 101.538039][ T6714] ================================================================== [ 101.569815][ T6724] loop3: detected capacity change from 0 to 512 [ 101.583650][ T6724] EXT4-fs (loop3): mounting ext2 file system using the ext4 subsystem [ 101.588800][ T6724] EXT4-fs error (device loop3): ext4_orphan_get:1392: inode #15: comm syz.3.1171: iget: bogus i_mode (5) [ 101.630572][ T6724] EXT4-fs error (device loop3): ext4_orphan_get:1397: comm syz.3.1171: couldn't read orphan inode 15 (err -117) [ 101.631193][ T6724] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 101.631266][ T6724] ext2 filesystem being mounted at /236/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 102.212849][ T3307] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.