last executing test programs: 14.174485443s ago: executing program 2 (id=2505): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@ipv4_newrule={0x24, 0x20, 0x301, 0x0, 0x0, {}, [@FRA_GENERIC_POLICY=@FRA_PRIORITY={0x8}]}, 0x24}}, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x18, 0x5, &(0x7f00000000c0)=ANY=[@ANYBLOB="180000000000000000000000ff000000850000000e000000c500000001f0ffff95"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000440)='mm_page_free\x00', r1, 0x0, 0x1000}, 0x18) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x800, 0x0) r3 = ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0xfffffffffffffe1c, &(0x7f0000000000)={&(0x7f0000000180)=@ipv4_newrule={0x44, 0x20, 0x301, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, [@FRA_GENERIC_POLICY=@FRA_OIFNAME={0x14, 0x11, 'batadv_slave_1\x00'}, @FRA_SRC={0x8, 0x2, @dev={0xac, 0x14, 0x14, 0xb}}, @FRA_TUN_ID={0xc, 0xc, 0x1, 0x0, 0xe}]}, 0x44}}, 0x40880) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007200000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000240)='kfree\x00', r5}, 0x10) r6 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r6, &(0x7f0000000340)=@nameseq={0x1e, 0x1, 0x3, {0x43, 0x0, 0x2}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r6, 0x10f, 0x87, &(0x7f0000000100)={0x43, 0x0, 0x3, 0x3}, 0x10) sendmsg$tipc(r6, &(0x7f0000000480)={&(0x7f0000000040)=@name={0x1e, 0x2, 0x6, {{0x40, 0x2}, 0x1}}, 0x10, 0x0}, 0x0) 14.018813384s ago: executing program 2 (id=2514): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000009c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x41) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) prctl$PR_SET_NAME(0xf, &(0x7f0000000140)='+}[@\x00') r1 = syz_open_dev$usbfs(&(0x7f0000000480), 0x77, 0x141341) ioctl$USBDEVFS_IOCTL(r1, 0xc0105512, &(0x7f0000000200)) ioctl$USBDEVFS_IOCTL(r1, 0xc0105512, &(0x7f0000000000)=@usbdevfs_connect) (fail_nth: 2) 13.100870744s ago: executing program 2 (id=2520): socket(0x2a, 0x2, 0x0) rt_sigprocmask(0x0, &(0x7f0000000000)={[0xfffffffffffffffd]}, 0x0, 0x8) r0 = gettid() r1 = gettid() bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="1804000000000000000000000000000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b100000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x18, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={0x0, r2, 0x0, 0xffffffffffffffff}, 0x18) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000380)={{}, &(0x7f00000001c0), &(0x7f0000000300)}, 0x20) tkill(r1, 0x12) tkill(r0, 0x1) tkill(r1, 0x14) 13.048679355s ago: executing program 2 (id=2523): r0 = socket$can_bcm(0x1d, 0x2, 0x2) socket$unix(0x1, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0) io_submit(0x0, 0x3, &(0x7f0000000880)=[&(0x7f0000000600)={0x0, 0x0, 0x0, 0x8, 0x81, 0xffffffffffffffff, &(0x7f0000000340)="10a6857c99b73a3ff6cfcc00310ea9f4d420bc3408eef8ced4b9e71ce3c7460429251a5dd30ef385b943762cfd4fc0214fa5500f70fd118c442b04", 0x3b, 0x6e6f31d2, 0x0, 0x3}, &(0x7f0000000780)={0x0, 0x0, 0x0, 0x3, 0x3, 0xffffffffffffffff, &(0x7f0000000680)="b7a5be1ca6c5f86679d8a5137e32949cdac93fd7538aa623ab012698284f65fe4ae6d96107486c2e784fca2d3ab2d1681757d76b8110ae548b06d4e4104be152c39496b5ade00be9e950bf79243890c67400b7e73ea26ebc3fdc37c2595ad362801bd639d4e1f3aba6870d6e6f46ffcd78e73288383a15aad4894df0230f7f23a4fb7811d94b7e1ba17fe0323dc12c6ce7cce54cd7ec3fae04d09fe6514b0f9ee45194f6675ff965c0e86da2179e5b6280b82619dc32a6c8a79236d556b0538d5929", 0xc2, 0x1, 0x0, 0x2}, &(0x7f0000000840)={0x0, 0x0, 0x0, 0x8, 0x0, 0xffffffffffffffff, &(0x7f0000000800)="fd15ba778175b76c873572db291c07ed393c6e00c41a15f562b8775cd746d21f43ebdcd4c7ae46c9e102a6f9363a2c8779a77fa01ef6cde83994a803f7197f", 0x3f, 0xfffffffffffffffe}]) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000440)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) (async) mount$bind(&(0x7f0000000440)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(0x0, &(0x7f0000000240)='./file0\x00', 0x0, 0x80000, 0x0) (async) mount$bind(0x0, &(0x7f0000000240)='./file0\x00', 0x0, 0x80000, 0x0) r1 = open$dir(&(0x7f0000000040)='./file0/../file0\x00', 0x450580, 0x40) move_mount(r1, &(0x7f00000002c0)='.\x00', 0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x102) (async) move_mount(r1, &(0x7f00000002c0)='.\x00', 0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x102) gettid() getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, &(0x7f0000001940)) getpid() (async) getpid() socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x2, 0x0, 0x0, 0x40f00, 0x65, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffc, @void, @value}, 0x94) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x2, 0x0, 0x0, 0x40f00, 0x65, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffc, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) (async) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r4}, 0x10) syz_emit_ethernet(0xfdef, &(0x7f0000000180)={@local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xfde1, 0x300, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e22, 0x4d, 0x0, @wg=@data}}}}}, 0x0) (async) syz_emit_ethernet(0xfdef, &(0x7f0000000180)={@local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xfde1, 0x300, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e22, 0x4d, 0x0, @wg=@data}}}}}, 0x0) r5 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) setsockopt$MRT6_DEL_MIF(0xffffffffffffffff, 0x29, 0xcb, &(0x7f0000000180)={0x0, 0x0, 0x2, 0x0, 0x1}, 0xc) sendmsg$DEVLINK_CMD_RELOAD(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x38, r5, 0x1, 0x70bd2d, 0x0, {}, [{@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_FD={0x8}}]}, 0x38}, 0x1, 0x0, 0x0, 0x4040010}, 0x0) (async) sendmsg$DEVLINK_CMD_RELOAD(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x38, r5, 0x1, 0x70bd2d, 0x0, {}, [{@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_FD={0x8}}]}, 0x38}, 0x1, 0x0, 0x0, 0x4040010}, 0x0) r6 = socket(0x2a, 0x1, 0x0) sendmsg$nl_route_sched(r6, 0x0, 0x4000) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000140)={'netdevsim0\x00', 0x0}) r8 = openat$selinux_validatetrans(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) write$selinux_validatetrans(r8, &(0x7f0000000180)=ANY=[@ANYBLOB='system_u:object_r:semanage_t system_u:object_r:fixed_disk_device_t:s0 00000000000w'], 0x79) ioctl$TUNGETDEVNETNS(0xffffffffffffffff, 0x54e3, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x6, 0xa, &(0x7f0000000500)=ANY=[@ANYBLOB="18360000040000000000000000000000180100002020642500000000002020207b1af8ff00000000bfa1000000000000010000f8ffffffb702000008000000b703000004000000850000000600000000"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', r7, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 12.964793886s ago: executing program 2 (id=2527): r0 = socket$vsock_stream(0x28, 0x1, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000005c0)={0x11, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x4, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x400000, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0xc, &(0x7f0000000300)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x62, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r1 = syz_genetlink_get_family_id$smc(&(0x7f0000000000), 0xffffffffffffffff) getsockopt(r0, 0x8, 0x8, &(0x7f00000000c0)=""/178, &(0x7f0000000200)=0xb2) getsockopt$inet_sctp6_SCTP_CONTEXT(0xffffffffffffffff, 0x84, 0x11, &(0x7f0000000380)={0x0, 0x7}, &(0x7f00000003c0)=0x8) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000680)={r2, 0xdc, &(0x7f0000000400)=[@in6={0xa, 0x0, 0x9, @private1, 0x3}, @in6={0xa, 0x4e23, 0x8, @dev={0xfe, 0x80, '\x00', 0x44}, 0x85b}, @in={0x2, 0x4e22, @loopback}, @in={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0xe}}, @in={0x2, 0x4e23, @rand_addr=0x64010102}, @in={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x3e}}, @in6={0xa, 0x4e20, 0xa, @empty, 0x400}, @in6={0xa, 0x4e20, 0x9, @dev={0xfe, 0x80, '\x00', 0x17}, 0x8000}, @in6={0xa, 0x4e20, 0x0, @private0={0xfc, 0x0, '\x00', 0x1}, 0x3}, @in={0x2, 0x4e23, @loopback}]}, &(0x7f00000006c0)=0x10) r3 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r4 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='sys_enter\x00', r4}, 0x10) readlink(0x0, 0x0, 0x0) sendmsg$SMC_PNETID_ADD(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)={0x40, r1, 0x1, 0x0, 0x0, {}, [@SMC_PNETID_ETHNAME={0x14, 0x2, 'bond0\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz0\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz1\x00'}]}, 0x40}}, 0x0) sendmsg$SMC_PNETID_DEL(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)={0x44, r1, 0xe27, 0x0, 0x0, {0x4, 0x7, 0x2}, [@SMC_PNETID_IBNAME={0x9, 0x3, 'syz2\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz0\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz1\x00'}]}, 0x44}, 0x1, 0x40030000000000}, 0x0) close_range(r0, r0, 0x2) 12.54002642s ago: executing program 2 (id=2534): r0 = socket$inet6_sctp(0xa, 0x801, 0x84) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f00000000c0)={0x0, 0x1}, 0x8) sendto$inet6(r0, &(0x7f00000005c0)="f5", 0x1, 0x4000000, &(0x7f0000000240)={0xa, 0x4e20, 0x8, @rand_addr=' \x01\x00'}, 0x1c) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}, 0x1c) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000500000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000c80)='kfree\x00', r2}, 0x18) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r0, 0x84, 0x7c, &(0x7f00000002c0)={0x0, 0x0, 0x4}, 0x8) socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0006}]}) rmdir(0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[], 0x50) ioperm(0x5, 0x2, 0x5) futex_waitv(&(0x7f0000002c80)=[{0x5, 0x0, 0x2}], 0x1, 0x0, &(0x7f0000003500), 0x0) r5 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000180)='rpcgss_bad_seqno\x00'}, 0x18) read$msr(r3, &(0x7f0000002700)=""/102392, 0x18ff8) r6 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) readv(r6, &(0x7f0000000000)=[{&(0x7f0000001200)=""/150, 0x96}], 0x1) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000140), &(0x7f0000000240)}, 0x20) socket$packet(0x11, 0x2, 0x300) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)=ANY=[@ANYBLOB="b400000010000904000000000000000000002200", @ANYRES32=r6, @ANYRES16=r4, @ANYRES32=0x0, @ANYBLOB="725489aced6083baab4729e7baa56ee39f291b7296823c286848717d1c2b5879a6d9a380a7e09070f294eaf47a7b5756a908866120eed9072a4d6f2f359b977dbd4548fe25fb1cd1a6f9adf4874b45e10f70532e96906cc7997a5f0890f71433", @ANYRES64=r7, @ANYRES64=r5], 0xb4}}, 0x0) write$binfmt_misc(0xffffffffffffffff, 0x0, 0x0) r8 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x281c2, 0x0) fcntl$setlease(r8, 0x400, 0x1) unlinkat(0xffffffffffffff9c, &(0x7f0000000380)='./file1\x00', 0x0) 12.514727351s ago: executing program 32 (id=2534): r0 = socket$inet6_sctp(0xa, 0x801, 0x84) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f00000000c0)={0x0, 0x1}, 0x8) sendto$inet6(r0, &(0x7f00000005c0)="f5", 0x1, 0x4000000, &(0x7f0000000240)={0xa, 0x4e20, 0x8, @rand_addr=' \x01\x00'}, 0x1c) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}, 0x1c) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000500000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000c80)='kfree\x00', r2}, 0x18) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r0, 0x84, 0x7c, &(0x7f00000002c0)={0x0, 0x0, 0x4}, 0x8) socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0006}]}) rmdir(0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[], 0x50) ioperm(0x5, 0x2, 0x5) futex_waitv(&(0x7f0000002c80)=[{0x5, 0x0, 0x2}], 0x1, 0x0, &(0x7f0000003500), 0x0) r5 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000180)='rpcgss_bad_seqno\x00'}, 0x18) read$msr(r3, &(0x7f0000002700)=""/102392, 0x18ff8) r6 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) readv(r6, &(0x7f0000000000)=[{&(0x7f0000001200)=""/150, 0x96}], 0x1) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000140), &(0x7f0000000240)}, 0x20) socket$packet(0x11, 0x2, 0x300) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)=ANY=[@ANYBLOB="b400000010000904000000000000000000002200", @ANYRES32=r6, @ANYRES16=r4, @ANYRES32=0x0, @ANYBLOB="725489aced6083baab4729e7baa56ee39f291b7296823c286848717d1c2b5879a6d9a380a7e09070f294eaf47a7b5756a908866120eed9072a4d6f2f359b977dbd4548fe25fb1cd1a6f9adf4874b45e10f70532e96906cc7997a5f0890f71433", @ANYRES64=r7, @ANYRES64=r5], 0xb4}}, 0x0) write$binfmt_misc(0xffffffffffffffff, 0x0, 0x0) r8 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x281c2, 0x0) fcntl$setlease(r8, 0x400, 0x1) unlinkat(0xffffffffffffff9c, &(0x7f0000000380)='./file1\x00', 0x0) 5.829796715s ago: executing program 0 (id=2714): bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x12, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r0, 0x84, 0x81, &(0x7f0000000280)="1a00000002000000", 0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000400)={0x0, 0x8}, 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x401, @loopback}], 0x1c) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x2040, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020207025000000002dba513d7b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000008fd8850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f0000001040)={'gre0\x00', &(0x7f0000000100)={'syztnl2\x00', 0x0, 0x2f00, 0x0, 0x4, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x4, 0x2f, 0x0, @empty, @multicast1}}}}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(0xffffffffffffffff, 0x84, 0x70, &(0x7f0000000100)={0x0, @in6={{0xa, 0x0, 0x0, @dev}}}, &(0x7f0000000000)=0x100) r5 = socket$inet_smc(0x2b, 0x1, 0x0) getsockopt$inet_mreqsrc(r5, 0x0, 0x53, &(0x7f0000000000)={@dev, @local, @broadcast}, &(0x7f0000000040)=0x8) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000001200)={0x0, 0x6800, &(0x7f0000000000)={&(0x7f0000000500)=@newqdisc={0x9c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x6c, 0x2, {{}, [@TCA_NETEM_LOSS={0x30, 0x5, 0x0, 0x1, [@NETEM_LOSS_GE={0x4}, @NETEM_LOSS_GI={0x18}]}, @TCA_NETEM_RATE={0x14, 0xd}, @TCA_NETEM_CORRUPT={0xc}]}}}]}, 0x9c}}, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000240), r1) sendmsg$IPVS_CMD_DEL_DAEMON(r7, &(0x7f0000000480)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000440)={&(0x7f00000002c0)={0x14, r8, 0x10, 0x70bd27, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x1}, 0x4000) 5.826876145s ago: executing program 3 (id=2715): r0 = socket$inet6(0x10, 0x3, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b7"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000380)='neigh_update\x00', r2}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000340)='neigh_update\x00', r2, 0x0, 0x7}, 0x18) sendto$inet6(r0, &(0x7f00000000c0)="900000001c001f4d154a817393278bff0a80a578020000000104740014000100ac1414bb0542d6401051a2d708f37ac8da1a297e0099c5ac0000c5b068d0bf46d323456536016466fcb78dcaaf6c3efed495a46215be0000760700c0c80cefd28581d158ba86c9d2896c6d3bca2d0000000b0015009e49a6560641263da4de1df32c1739d7fbee9aa241731ae9e0b390", 0x90, 0x8000, 0x0, 0x0) 5.760407066s ago: executing program 3 (id=2717): r0 = syz_open_dev$usbfs(&(0x7f0000000100), 0x77, 0x101301) ioctl$USBDEVFS_CONTROL(r0, 0xc0105500, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x14, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xffffffff, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c0000001500000000000000000000000200000000000000000008"], 0x1c}}, 0x0) r2 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r2, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0x40) setsockopt$inet_msfilter(r2, 0x0, 0x29, &(0x7f0000000040)=ANY=[@ANYBLOB="e00000027f0000010000000003"], 0x1c) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r4, 0x0, 0x2a, &(0x7f00000008c0)={0x1, {{0x2, 0x0, @multicast2}}}, 0x88) r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000030000000000000000000400b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r5, @ANYBLOB="0000000000000000b705000008000000850000006900000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r6}, 0x18) r7 = perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffd}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r7, 0x40082406, &(0x7f00000001c0)='cpu>00\t&&') writev(r3, &(0x7f00000003c0)=[{&(0x7f0000000280)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) syz_genetlink_get_family_id$ethtool(&(0x7f0000000200), r3) 5.752972016s ago: executing program 0 (id=2719): socket$kcm(0x10, 0x400000002, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[], &(0x7f0000000080)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x400}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000001200)={0x1, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x800, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r2}, &(0x7f0000000180), &(0x7f00000001c0)=r1}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00', r3}, 0x10) pwrite64(r0, &(0x7f00000000c0)='a', 0x200000c1, 0x9000) 4.808028956s ago: executing program 0 (id=2738): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000b00)=ANY=[@ANYBLOB="1e0000000000000005000000ff"], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x62, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1, 0x0, 0x3}, 0x18) syz_mount_image$msdos(&(0x7f00000001c0), &(0x7f0000000080)='./file0\x00', 0x8, &(0x7f0000000700)=ANY=[@ANYBLOB="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"], 0xfd, 0x1bf, &(0x7f0000000300)="$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") 4.722676437s ago: executing program 0 (id=2741): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0xa00008, &(0x7f0000000140)={[{@min_batch_time={'min_batch_time', 0x3d, 0xd}}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}, {@noblock_validity}]}, 0x1, 0x7ad, &(0x7f00000007c0)="$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") r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file2\x00', 0x143042, 0x8d) r2 = creat(&(0x7f0000000000)='./bus\x00', 0x0) mount(&(0x7f0000000440)=@loop={'/dev/loop', 0x0}, &(0x7f0000000080)='./bus\x00', 0x0, 0x1000, 0x0) r3 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS64(r3, 0x4c04, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x7fffffffffffffff, 0x0, 0x0, 0x0, 0x5, 0x0, "ef359f413bb901527f00d1ce5d29c3ee5e5ca9000f7c41499dc2aac63a01000000000000004faa2ad9c084a003ea0000000000000000000800002000", "036c47c67808200400000000000000335263bdbcef549ba197fce47ddfdd753abd950100002a00ffffffffffffffff00000000e8f20000000200", "b7326736181c208220000000b9000000000000000000f0fffffffff2ff00", [0x8]}) pwritev2(r1, &(0x7f0000000100)=[{&(0x7f0000000080)="ff", 0xabfe}], 0x1, 0x5405, 0x0, 0x0) r4 = socket$inet6_sctp(0xa, 0x801, 0x84) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r4, 0x84, 0x7b, &(0x7f0000000380)={0x0, 0x3}, 0x50) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0xf, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffc, @void, @value}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r6}, 0x10) syz_emit_ethernet(0xfdef, &(0x7f0000000180)={@local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xfde1, 0x300, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e22, 0x4d, 0x0, @wg=@data}}}}}, 0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x5, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000580)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, r2, 0x0, 0x0, 0x3a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r8}, 0x10) sendto$inet6(r4, &(0x7f0000000040)="aa", 0x1, 0x0, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x3}, 0x3}, 0x1c) shutdown(r4, 0x1) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x4, 0x0, 0x0, @void, @value, @void, @value}, 0x50) sendfile(r1, r1, 0x0, 0x7a680000) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000980)='mm_page_free\x00', r9}, 0x10) r10 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r10, &(0x7f00000001c0)={0xa, 0x4e20, 0x0, @private0={0xfc, 0x0, '\x00', 0x1}}, 0x1c) mount$bind(&(0x7f0000000200)='./file0\x00', &(0x7f0000000280)='./file0\x00', &(0x7f0000000300), 0x4400, 0x0) syz_emit_ethernet(0xbe, &(0x7f0000000340)=ANY=[@ANYBLOB="aaaaaaaaaaaa0180c20000000800450000b00000000000119078000000000000000000004e20009c907801000000000000007b4b080c26a04883ad5c8c82b8af584cbf2649a50f2dbc43efa8698dfa871c51852e4451b57d037ad3c045942824251d7d17b5191584cdd4fbe40a27424dbcfd56f1373669caaa2f19935e6996c7096ffe4f3a4745a8f762b9649a3bfbc1f39cb307b3472eb9cdb042d2643fcbb2c5a57df67d544af6e8dafe0900000000000000000000000000000000e9eac008aff063ffe1594bc3c7037b1da02251"], 0x0) 4.122996204s ago: executing program 0 (id=2750): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x14, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085"], 0x0, 0x7a, 0x0, 0x0, 0x41000, 0x38, '\x00', 0x0, @lirc_mode2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r0}, &(0x7f0000000000), &(0x7f0000000040)}, 0x20) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) io_uring_register$IORING_REGISTER_RESTRICTIONS(0xffffffffffffffff, 0xb, &(0x7f00000006c0), 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x10) fcntl$setlease(0xffffffffffffffff, 0x400, 0x0) r2 = syz_io_uring_setup(0xd2, &(0x7f0000000480)={0x0, 0xfffffffd, 0x80, 0x1, 0x357}, &(0x7f0000000080)=0x0, &(0x7f0000000340)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x5, 0x0, &(0x7f0000000400)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000400)={0x1, &(0x7f0000000200)=[{0x2c, 0x0, 0x0, 0x4}]}, 0x10) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x42, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x1, {0x2}}) io_uring_enter(r2, 0x47bc, 0x2, 0x0, 0x0, 0x0) 3.52249208s ago: executing program 0 (id=2755): bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x12, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r0, 0x84, 0x81, &(0x7f0000000280)="1a00000002000000", 0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000400)={0x0, 0x8}, 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x401, @loopback}], 0x1c) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x2040, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020207025000000002dba513d7b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000008fd8850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f0000001040)={'gre0\x00', &(0x7f0000000100)={'syztnl2\x00', 0x0, 0x2f00, 0x0, 0x4, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x4, 0x2f, 0x0, @empty, @multicast1}}}}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(0xffffffffffffffff, 0x84, 0x70, &(0x7f0000000100)={0x0, @in6={{0xa, 0x0, 0x0, @dev}}}, &(0x7f0000000000)=0x100) r5 = socket$inet_smc(0x2b, 0x1, 0x0) getsockopt$inet_mreqsrc(r5, 0x0, 0x53, &(0x7f0000000000)={@dev, @local, @broadcast}, &(0x7f0000000040)=0x8) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000001200)={0x0, 0x6800, &(0x7f0000000000)={&(0x7f0000000500)=@newqdisc={0x9c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x6c, 0x2, {{}, [@TCA_NETEM_LOSS={0x30, 0x5, 0x0, 0x1, [@NETEM_LOSS_GE={0x4}, @NETEM_LOSS_GI={0x18}]}, @TCA_NETEM_RATE={0x14, 0xd}, @TCA_NETEM_CORRUPT={0xc}]}}}]}, 0x9c}}, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ipvs(&(0x7f0000000240), r1) sendmsg$IPVS_CMD_DEL_DAEMON(r7, &(0x7f0000000480)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000440)={0x0}, 0x1, 0x0, 0x0, 0x1}, 0x4000) 3.505091171s ago: executing program 33 (id=2755): bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x12, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r0, 0x84, 0x81, &(0x7f0000000280)="1a00000002000000", 0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000400)={0x0, 0x8}, 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x401, @loopback}], 0x1c) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x2040, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020207025000000002dba513d7b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000008fd8850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f0000001040)={'gre0\x00', &(0x7f0000000100)={'syztnl2\x00', 0x0, 0x2f00, 0x0, 0x4, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x4, 0x2f, 0x0, @empty, @multicast1}}}}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(0xffffffffffffffff, 0x84, 0x70, &(0x7f0000000100)={0x0, @in6={{0xa, 0x0, 0x0, @dev}}}, &(0x7f0000000000)=0x100) r5 = socket$inet_smc(0x2b, 0x1, 0x0) getsockopt$inet_mreqsrc(r5, 0x0, 0x53, &(0x7f0000000000)={@dev, @local, @broadcast}, &(0x7f0000000040)=0x8) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000001200)={0x0, 0x6800, &(0x7f0000000000)={&(0x7f0000000500)=@newqdisc={0x9c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x6c, 0x2, {{}, [@TCA_NETEM_LOSS={0x30, 0x5, 0x0, 0x1, [@NETEM_LOSS_GE={0x4}, @NETEM_LOSS_GI={0x18}]}, @TCA_NETEM_RATE={0x14, 0xd}, @TCA_NETEM_CORRUPT={0xc}]}}}]}, 0x9c}}, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ipvs(&(0x7f0000000240), r1) sendmsg$IPVS_CMD_DEL_DAEMON(r7, &(0x7f0000000480)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000440)={0x0}, 0x1, 0x0, 0x0, 0x1}, 0x4000) 2.804274059s ago: executing program 1 (id=2771): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x200008, &(0x7f00000001c0)={[{@grpquota}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x800}}, {@grpid}]}, 0x1, 0x504, &(0x7f0000001000)="$eJzs3c9vI1cdAPDveOPEyaZNWnoABO3SFha0WifxtlHVA5QTQqgSokeQtiHxRlHsOIqd0oQ9pGckTkhU4gRH/gDOPXHnguDGpRyQ+BGBGiQORjMep07W3gSS2FH8+UijeW/erL/vbXbei7/Z+AUwtu5ExEFETEbEuxExl19P8iPe6hzpfZ8cPl49Ony8mkS7/c7fk6w9vRY9fyZ1O3/NUkR871sRP0yejNvc299cqdWqO3l9oVXfXmju7d/fqK+sV9erW5XK8tLy4hsPXq9c2lhfqk/mpS9+/LuDr/047dZsfqV3HJepM/TicZzURER85yqCjcCtfDyTo+4I/5dCRDwfES9nz/9c3Mq+mgDATdZuz0V7rrd+LDlZBQBuikKWA0sK5TwXMBuFQrncyeG9EDOFWqPZuveosbu11smVzUex8GijVl3Mc4XzUUzS+lJW/rReOVV/EBHPRcTPpqazenm1UVsb5Tc+ADDGbp9a//811Vn/AYAbrjTqDgAAQ2f9B4DxY/0HgPFj/QeA8dNZ/6dH3Q0AYIi8/weA8WP9B4Cx8t23306P9lH++ddr7+3tbjbeu79WbW6W67ur5dXGznZ5vdFYzz6zp37W69Uaje2l12L3/fmvbzdbC829/Yf1xu5W62H2ud4Pq8XsroMhjAwAGOS5lz76Y5KuyG9OZ0f07OVQHGnPgKtWGHUHgJG5NeoOACNjty8YXxd4j1+M+KkUAdwAfbboPaHU7xeE2u12++q6BFyxu5+T/4dx1ZP/97+AYczI/8P4kv+H8dVuJ+fd5D/OeyMAcL3J8QMDfv7/fH7+df7DgR+snb7jw6vsFQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAFxv3f1/y/le4LNRKJTLEc9ExHwUk0cbtepiRDwbEX+YKk6l9aUR9xkAuKjCX5J8/6+7c6/Onmh68fZxcTIifvSLd37+/kqrtfP7iMnkH1Pd660P8+uV4fceADhbd53Ozj1v5D85fLzaPYbZn79+MyJKnfhHh5NxdBx/IiaycymKETHzzySvdyQ9uYuLOPggIj7bb/xJzGY5kM7Op6fjp7GfGWr8won4haytc07/Lj5zCX2BcfNROv+81e/5K8Sd7Nz/+S9lM9TF5fNf+lKrR9kc+Gn87vx3a8D8d+e8MV777bc7pekn2z6I+PxERDf2Uc/8042fDIj/6jnj/+kLL748qK39y4i70T9+b6yFVn17obm3f3+jvrJeXa9uVSrLS8uLbzx4vbKQ5agXBq8Gf3vz3rOD2tLxzwyIXzpj/F8+5/h/9Z93v/+lp8T/6iv94hfihafET9fEr5wz/srMb0qD2tL4awPGf9bX/94543/85/0ntg0HAEanube/uVKrVXcUFK5/If0new260bfwjWHFmoz+TT95pfNMn2rqfu//P8YaNGNcRtYNuA6OH/qI+PeoOwMAAAAAAAAAAAAAAPQ1jN9YGvUYAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAuLn+GwAA//+hm8cd") r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=@framed={{}, [@ringbuf_output={{0x18, 0x2, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x43}}]}, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2b, 0x0, 0x0, 0x0, 0xfffffffd, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000300)='kfree\x00', r1}, 0x10) r2 = open(&(0x7f0000000240)='./file1\x00', 0x145142, 0x0) sendfile(r2, r2, 0x0, 0x800000009) (fail_nth: 2) 2.535059881s ago: executing program 1 (id=2772): r0 = syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x200008, &(0x7f00000001c0)={[{@grpquota}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x800}}, {@grpid}]}, 0x1, 0x504, &(0x7f0000001000)="$eJzs3c9vI1cdAPDveOPEyaZNWnoABO3SFha0WifxtlHVA5QTQqgSokeQtiHxRlHsOIqd0oQ9pGckTkhU4gRH/gDOPXHnguDGpRyQ+BGBGiQORjMep07W3gSS2FH8+UijeW/erL/vbXbei7/Z+AUwtu5ExEFETEbEuxExl19P8iPe6hzpfZ8cPl49Ony8mkS7/c7fk6w9vRY9fyZ1O3/NUkR871sRP0yejNvc299cqdWqO3l9oVXfXmju7d/fqK+sV9erW5XK8tLy4hsPXq9c2lhfqk/mpS9+/LuDr/047dZsfqV3HJepM/TicZzURER85yqCjcCtfDyTo+4I/5dCRDwfES9nz/9c3Mq+mgDATdZuz0V7rrd+LDlZBQBuikKWA0sK5TwXMBuFQrncyeG9EDOFWqPZuveosbu11smVzUex8GijVl3Mc4XzUUzS+lJW/rReOVV/EBHPRcTPpqazenm1UVsb5Tc+ADDGbp9a//811Vn/AYAbrjTqDgAAQ2f9B4DxY/0HgPFj/QeA8dNZ/6dH3Q0AYIi8/weA8WP9B4Cx8t23306P9lH++ddr7+3tbjbeu79WbW6W67ur5dXGznZ5vdFYzz6zp37W69Uaje2l12L3/fmvbzdbC829/Yf1xu5W62H2ud4Pq8XsroMhjAwAGOS5lz76Y5KuyG9OZ0f07OVQHGnPgKtWGHUHgJG5NeoOACNjty8YXxd4j1+M+KkUAdwAfbboPaHU7xeE2u12++q6BFyxu5+T/4dx1ZP/97+AYczI/8P4kv+H8dVuJ+fd5D/OeyMAcL3J8QMDfv7/fH7+df7DgR+snb7jw6vsFQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAFxv3f1/y/le4LNRKJTLEc9ExHwUk0cbtepiRDwbEX+YKk6l9aUR9xkAuKjCX5J8/6+7c6/Onmh68fZxcTIifvSLd37+/kqrtfP7iMnkH1Pd660P8+uV4fceADhbd53Ozj1v5D85fLzaPYbZn79+MyJKnfhHh5NxdBx/IiaycymKETHzzySvdyQ9uYuLOPggIj7bb/xJzGY5kM7Op6fjp7GfGWr8won4haytc07/Lj5zCX2BcfNROv+81e/5K8Sd7Nz/+S9lM9TF5fNf+lKrR9kc+Gn87vx3a8D8d+e8MV777bc7pekn2z6I+PxERDf2Uc/8042fDIj/6jnj/+kLL748qK39y4i70T9+b6yFVn17obm3f3+jvrJeXa9uVSrLS8uLbzx4vbKQ5agXBq8Gf3vz3rOD2tLxzwyIXzpj/F8+5/h/9Z93v/+lp8T/6iv94hfihafET9fEr5wz/srMb0qD2tL4awPGf9bX/94543/85/0ntg0HAEanube/uVKrVXcUFK5/If0new260bfwjWHFmoz+TT95pfNMn2rqfu//P8YaNGNcRtYNuA6OH/qI+PeoOwMAAAAAAAAAAAAAAPQ1jN9YGvUYAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAuLn+GwAA//+hm8cd") syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x3000000, &(0x7f0000000180), 0x1, 0x512, &(0x7f0000000c40)="$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") r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="1900000004000000040000000500000000000000", @ANYRESOCT=r0, @ANYBLOB, @ANYRES32=0x0, @ANYBLOB], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000880)={{r1}, &(0x7f0000000800), &(0x7f0000000840)=r2}, 0x20) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) quotactl$Q_SETINFO(0xffffffff80000600, 0x0, 0xee01, &(0x7f0000000180)={0x20, 0x2, 0x4, 0x1}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r3}, 0x10) ioperm(0x0, 0x1, 0x1) r4 = timerfd_create(0x7, 0x0) timerfd_settime(r4, 0x0, &(0x7f0000007000)={{}, {0x0, 0x989680}}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r5 = getuid() r6 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r6, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r7, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r8, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r7, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r9 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r9, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) lchown(&(0x7f00000000c0)='./file0/../file0\x00', r10, r11) keyctl$chown(0x4, 0x0, r5, r11) fsmount(0xffffffffffffffff, 0xdfd72f8b669113ff, 0x1) open(&(0x7f0000000300)='.\x02\x00', 0x14927e, 0x44) 1.636515552s ago: executing program 1 (id=2784): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014fa0000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r1}, 0x10) r2 = syz_genetlink_get_family_id$smc(&(0x7f0000000000), 0xffffffffffffffff) r3 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$SMC_PNETID_ADD(r3, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0xc800) sendmsg$SMC_PNETID_DEL(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)={0x14, r2, 0xe27, 0x0, 0x0, {0x4, 0x7, 0x2}}, 0x14}, 0x1, 0x40030000000000}, 0x0) 1.636040561s ago: executing program 1 (id=2785): r0 = socket$inet6(0x10, 0x3, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c3"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000380)='neigh_update\x00', r2}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000340)='neigh_update\x00', r2, 0x0, 0x7}, 0x18) sendto$inet6(r0, &(0x7f00000000c0)="900000001c001f4d154a817393278bff0a80a578020000000104740014000100ac1414bb0542d6401051a2d708f37ac8da1a297e0099c5ac0000c5b068d0bf46d323456536016466fcb78dcaaf6c3efed495a46215be0000760700c0c80cefd28581d158ba86c9d2896c6d3bca2d0000000b0015009e49a6560641263da4de1df32c1739d7fbee9aa241731ae9e0b390", 0x90, 0x8000, 0x0, 0x0) 1.504146673s ago: executing program 1 (id=2787): bpf$MAP_CREATE(0x0, 0x0, 0x48) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x0, 0x0}) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="190000000400000008000000ff"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000c00)={0x11, 0xc, &(0x7f0000000a40)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000019007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000040)=0x7) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="0b00000007000000010001000900000001"], 0x48) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r3, @ANYBLOB="0000000000000000b704000001000000850000007800000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000480)='syzkaller\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kfree\x00', r5}, 0x10) r6 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r6, 0x0, 0x60, &(0x7f0000000600)={'filter\x00', 0x5, 0x4, 0x3f0, 0x220, 0x110, 0x220, 0x110, 0x308, 0x308, 0x4, 0x0, {[{{@arp={@private=0xa010102, @multicast2, 0xff, 0xff, 0x9, 0x4, {@empty, {[0xff, 0x0, 0xff, 0xff, 0xff, 0xff]}}, {@empty, {[0xff, 0x0, 0x0, 0x0, 0xff]}}, 0xfc6, 0x7f, 0xe9b, 0x4, 0x8, 0xe, 'veth1_to_team\x00', 'syz_tun\x00', {0xff}, {0xff}, 0x0, 0x284}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @empty, @private, @empty}}}, {{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @mac=@remote, @local, @empty}}}, {{@uncond, 0xc0, 0xe8}, @unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffb}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x440) r7 = syz_io_uring_setup(0x5c2, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x4}, &(0x7f00000001c0)=0x0, &(0x7f0000000580)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r8, 0x4, &(0x7f0000000080)=0xfffffff8, 0x0, 0x4) syz_io_uring_submit(r8, r9, &(0x7f00000004c0)=@IORING_OP_TIMEOUT={0xb, 0x18, 0x0, 0x0, 0x4, &(0x7f0000000280)={0x0, 0x989680}, 0x1, 0x40, 0x1}) io_uring_enter(r7, 0x6e2, 0x3900, 0x1, 0x0, 0xe00) rt_sigsuspend(&(0x7f00000002c0)={[0x225c17d03]}, 0x8) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r2, &(0x7f0000000080), &(0x7f0000000200)=""/166}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x1b, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x74, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r4, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000380)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000300)='sys_enter\x00', r10, 0x0, 0x4}, 0x18) r11 = gettid() tkill(r11, 0x7) r12 = gettid() r13 = getpid() rt_tgsigqueueinfo(r13, r12, 0x7, &(0x7f0000000000)={0x202b, 0x0, 0x4}) r14 = syz_clone3(&(0x7f00000003c0)={0x201a48400, &(0x7f0000000080), &(0x7f0000000100), &(0x7f0000000140), {0x29}, &(0x7f0000000180)=""/29, 0x1d, &(0x7f0000000300)=""/157, 0x0}, 0x58) socket$nl_netfilter(0x10, 0x3, 0xc) getpgrp(r14) 1.395930274s ago: executing program 4 (id=2788): getsockopt$bt_BT_SECURITY(0xffffffffffffffff, 0x112, 0x4, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000580)=@framed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000400000005"], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000600)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020a07b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b70300000000a999850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x4f, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000700)='kfree\x00', r4}, 0x18) sendmsg$nl_route_sched(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000001940)=@newtaction={0xe98, 0x30, 0x871a15abc695fa3d, 0xfffffffd, 0x0, {}, [{0xe84, 0x1, [@m_pedit={0xe80, 0x1, 0x0, 0x0, {{0xa}, {0xe54, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS={0xe50, 0x2, {{{}, 0x97, 0x0, [{}, {}]}, [{}, {}, {}, {}, {}, {0x448eade7}, {0x0, 0x0, 0x80000000}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x20000000, 0x0, 0x0, 0x3}, {}, {0x0, 0xffffffff}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, {}, {}, {0x0, 0x0, 0x0, 0x1}, {}, {0xfffffff9, 0x0, 0x0, 0x0, 0x2}, {}, {}, {}, {0x0, 0x4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x4000}, {0xfffffffe}, {}, {0xd5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x10}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0xfffffffe}, {}, {}, {}, {}, {}, {}, {0x3}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffb}, {}, {0x0, 0x9, 0x0, 0x0, 0x0, 0xfffffffd}, {}, {0x0, 0x4, 0x0, 0x0, 0x0, 0xfffffffc}, {}, {}, {}, {}, {}, {}, {0x814}, {}, {}, {}, {}, {}, {}, {}, {0x4}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x10000}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xb}], [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {0x7}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {0x0, 0x1}]}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xe98}}, 0x0) r5 = dup(r2) setsockopt$IPT_SO_SET_REPLACE(r5, 0x4000000000000, 0x40, &(0x7f0000000400)=@raw={'raw\x00', 0xe501, 0x3, 0x2a8, 0x138, 0x6affffff, 0x3403000b, 0x0, 0x7, 0x210, 0x230, 0x230, 0x210, 0x223, 0x3, 0x0, {[{{@ip={@remote, @local, 0x0, 0x0, 'veth1_macvtap\x00', 'veth1_to_team\x00'}, 0x0, 0xf0, 0x138, 0x0, {}, [@common=@unspec=@limit={{0x48}, {0x7f510100, 0x4, 0x0, 0x0, 0x0, 0x2}}, @common=@unspec=@time={{0x38}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'pptp\x00'}}}, {{@uncond, 0x0, 0x70, 0xd8}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'syz0\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x308) r6 = socket(0x10, 0x3, 0x0) r7 = socket(0x10, 0x803, 0x0) r8 = getpid() r9 = syz_pidfd_open(r8, 0x0) close_range(r9, 0xffffffffffffffff, 0x0) socket(0x22, 0x2, 0x21) ioctl$BTRFS_IOC_ADD_DEV(r9, 0x5501, 0x0) sendmsg$nl_route(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000080)=ANY=[@ANYBLOB="540000001400b59500000000000000000a000000", @ANYRES32=r7, @ANYBLOB="140001000040"], 0x54}, 0x1, 0x0, 0x0, 0x800}, 0x80) sendmsg$TIPC_NL_LINK_SET(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000140)=ANY=[], 0x50}}, 0x0) sendmmsg(r6, &(0x7f0000000000), 0x4000000000001f2, 0x0) 1.122327447s ago: executing program 4 (id=2795): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000b00)=ANY=[@ANYBLOB="1e0000000000000005000000ff"], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000570000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x62, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1, 0x0, 0x3}, 0x18) syz_mount_image$msdos(&(0x7f00000001c0), &(0x7f0000000080)='./file0\x00', 0x8, &(0x7f0000000700)=ANY=[@ANYBLOB="646f74732c646f74732c646d61736b3d30303030303030303030303030303030303030303030322c646f74732c646f74732c747a3d5554432c646f74732c6e6f636173652c6e6f646f74732c666c7573682c666c7573682c6e6f646f74732c6e6f646f74732c756d61736b3d30303030303030303030303030303030303037373737372c6e66732c646f74732c747a3d5554432c646f74732c646f74732c73686f77657865632c7379735f696d6d757461626c652c666d61736b3d30303030303030303030303030303030303030303030332c000ec9b5ec8765a4a5eeaa3a908cbb1022582339fe7f48854373ffe0107d8fb8fb9c6829afdcc37233d28d85e5a7e7ae8035ef636cce1f4a49fcf4feee99e42b377941d2866653640f17436478caf5335b673ce06f13ecf0771287051e150b6bd50198695247b38097f2f885e7df6e61ece3dff92abcb7a277827ffce6743011fbeeb35bb7f38af08c32046c437e9c36bae48efe4b0df0f605daa3a43403d367768a953d6033d402f9fbf30d70d50aa02fcbf8"], 0xfd, 0x1bf, &(0x7f0000000300)="$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") 1.039542098s ago: executing program 4 (id=2797): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000a00)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r0}, 0x4) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x18, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa4000000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000000000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], &(0x7f0000000180)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000000)='kfree\x00', r1}, 0x10) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = socket$unix(0x1, 0x1, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000001c0)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {0x0, 0xb}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mq={0x7}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) 996.766868ms ago: executing program 5 (id=2799): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x5, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00', r1}, 0x10) syz_emit_ethernet(0xbe, &(0x7f0000001140)={@broadcast, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xfd}, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x1, 0x0, @private=0xa010100, @local}, @dest_unreach={0x3, 0x0, 0x0, 0x0, 0x0, 0x0, {0x25, 0x4, 0x0, 0x0, 0x0, 0x68, 0x0, 0x0, 0x89, 0x0, @remote, @local, {[@noop, @generic={0x0, 0x11, "8a45d45768dc37efa0fc588a481d05"}, @timestamp_prespec={0x44, 0xc, 0x0, 0x3, 0x0, [{@loopback}]}, @ssrr={0x89, 0xf, 0x0, [@empty, @broadcast, @multicast2]}, @timestamp_addr={0x44, 0x4c, 0x0, 0x1, 0x0, [{}, {@empty}, {}, {@local}, {@loopback}, {@private}, {@multicast2}, {@broadcast}, {@broadcast}]}, @timestamp={0x44, 0x4}]}}}}}}}, 0x0) 961.986189ms ago: executing program 5 (id=2800): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x14, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c30000"], 0x0, 0x7a, 0x0, 0x0, 0x41000, 0x38, '\x00', 0x0, @lirc_mode2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r0}, &(0x7f0000000000), &(0x7f0000000040)}, 0x20) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) io_uring_register$IORING_REGISTER_RESTRICTIONS(0xffffffffffffffff, 0xb, &(0x7f00000006c0), 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x10) fcntl$setlease(0xffffffffffffffff, 0x400, 0x0) r2 = syz_io_uring_setup(0xd2, &(0x7f0000000480)={0x0, 0xfffffffd, 0x80, 0x1, 0x357}, &(0x7f0000000080)=0x0, &(0x7f0000000340)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x5, 0x0, &(0x7f0000000400)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000400)={0x1, &(0x7f0000000200)=[{0x2c, 0x0, 0x0, 0x4}]}, 0x10) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x42, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x1, {0x2}}) io_uring_enter(r2, 0x47bc, 0x2, 0x0, 0x0, 0x0) 852.47775ms ago: executing program 4 (id=2801): socket(0x10, 0x3, 0x0) r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000180)={0xffffff, 0x100000}, 0x10) write(r0, &(0x7f0000000000)="1c0000001a005f0214f9f407000904001f000000fe00000000000000", 0x1c) r1 = socket$inet6(0xa, 0x5, 0x0) setsockopt$sock_int(r1, 0x1, 0x4000000000000020, &(0x7f00000004c0)=0x3fa, 0x23) r2 = socket$nl_route(0x10, 0x3, 0x0) mremap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x2000, 0x3, &(0x7f0000ffb000/0x2000)=nil) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=@newlink={0x28, 0x10, 0x801, 0x200, 0x0, {0x0, 0x0, 0x0, 0x0, 0xfe}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000280), r0) 833.40265ms ago: executing program 5 (id=2802): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000001000000000000000000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x1, 0x803, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x31, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000", @ANYBLOB="261b34", @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000000)='kfree\x00', r4}, 0x18) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001000010007000000000000000000000a20000000000a03000000000000000000010000000900010073797a300000000048000000090a010400000000000000000100000008000a40000000000900020073797a32250000000900010073797a3000000000080005400000001f"], 0xec}, 0x1, 0x0, 0x0, 0x20048811}, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x4, &(0x7f00000004c0)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000ae00000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x46, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000080)='kfree\x00', r6}, 0x18) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r7 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r7, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = socket(0x10, 0x3, 0x0) r10 = socket$nl_route(0x10, 0x3, 0x0) r11 = socket(0x10, 0x803, 0x2) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r11) getsockname$packet(r11, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r12, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r9, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x2c, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r12, {0x0, 0x9}, {0xffff, 0xffff}, {0x0, 0x10}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=@newtfilter={0x34, 0x28, 0xd27, 0x1000001, 0x0, {0x0, 0x0, 0x0, r12, {0xd, 0x9}, {0xa}, {0x0, 0xa}}, [@filter_kind_options=@f_flow={{0x9}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x14}, 0x4000) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="4400000010000304fcffffff3f00000000000000", @ANYRES32=0x0, @ANYBLOB="a5fdad880000000014001231e82f800b00010069610300b5042e2a9970766c61", @ANYRES32=r13, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r13, @ANYBLOB], 0x44}, 0x1, 0x300000000000000, 0x0, 0x4004}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000500)=ANY=[@ANYRES16=r1, @ANYRES64, @ANYRESHEX=r1, @ANYRESDEC, @ANYRES64=r1, @ANYRESOCT=r6, @ANYRESHEX=r0, @ANYRES64=r1], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', r12, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r14 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='mm_page_alloc\x00', r14}, 0x10) r15 = creat(&(0x7f0000000080)='./bus\x00', 0x0) fsetxattr$system_posix_acl(r15, &(0x7f0000000000)='system.posix_acl_default\x00', &(0x7f0000000680)=ANY=[@ANYBLOB="8ff57e9b495e0bb7c90402eff9d9f7334ba85b88ac2dac4442740d8915b32816e4cbe13dbf9b4fdd65435f0edbf36aea1f8358bc8b7acbecc03e2bd6f9953cd80dc3c04747a597935ee26f607a2b9da2826ef0415fb34d10193068fc22a37c861b77b771b8e87e4186d78d8f300bbf8587416aa16effd66d5b8e070068bad0ab387d5f17602a15ea2b734d220881c8e9ac0f9cfa5edcfd3ff95cbb9e75ebf0ba7fef2e56f5af8197bae0b28494dc335bec1e17ac7635c03a49dc72bc2cbba91afe6eb368701460ded4f03e0f4e5fd19091826d0837146737897f99906a70344c74ad16ba92305568791190625f9bec8402e7889359"], 0xfe44, 0x0) 556.544043ms ago: executing program 1 (id=2803): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r0, &(0x7f0000000240)={0xa, 0x4e20, 0x1, @local, 0x6}, 0x1c) listen(r1, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x1f, 0x3, &(0x7f0000000580)=@framed={{0x18, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0x10, &(0x7f0000000000)=ANY=[@ANYRES16=r4, @ANYRES16=0x0, @ANYBLOB="f952cba42a77f26d00cc17fd66a0ed90eda5a71241de4563fff27b794dc9b5ab517deaa456f7b327165a4561cdca16416eb93e4d976bee32fdd99103a498f4175a31a6936f87b8c3656980a60f8b061217", @ANYRESDEC=r3, @ANYRESDEC=r2, @ANYRESHEX=r4, @ANYBLOB="982b067211cfd5bbc0c6af6d019ef867c29ee6c6704cfda2e0bfd5b9d92bd23ad4b40a8688fe7243057ccba29eb20811dbcd76a678fcc24cb0124b07e63f929cc4c837fd69ff93f8cf6868f9436b6c69aad22392b6d0a4c2fca817c27a40d85df82af6a8d14205041b8a1189f4c03ebc60076097637e421f9c20638418062a7e8608801f3483dad24a413764"], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x91, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r5, 0x0, 0x200000000200}, 0x18) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) close_range(r2, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x4000) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4, 0x0, 0x0, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0xf, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x65, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r7}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000480)='./file0\x00', 0xc0ed0040, &(0x7f0000002a00)={[{@noblock_validity}, {@resgid={'resgid', 0x3d, 0xee00}}, {@acl}, {@noload}, {@journal_dev={'journal_dev', 0x3d, 0x3}}, {@nodiscard}]}, 0xfe, 0x472, &(0x7f0000000940)="$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") r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) ioctl$FS_IOC_GETFSMAP(r8, 0xc0c0583b, &(0x7f0000000800)=ANY=[@ANYBLOB="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"]) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x2, &(0x7f0000000000)=0x9, 0x9, 0x0) r9 = syz_open_dev$ptys(0xc, 0x3, 0x1) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000009c0)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x6, [@fwd={0x3}]}, {0x0, [0x0, 0x0, 0x5f, 0x2e]}}, 0x0, 0x2a, 0x0, 0x1, 0x6, 0x0, @void, @value}, 0x28) ioctl$TIOCSPTLCK(r9, 0x40045431, &(0x7f0000000140)) r10 = socket$packet(0x11, 0x2, 0x300) syz_io_uring_setup(0x457, &(0x7f0000000340)={0x0, 0x34fe, 0x48, 0x2a, 0x1}, &(0x7f00000003c0), &(0x7f0000000400)) setsockopt$sock_int(r10, 0x1, 0x5, &(0x7f0000000300)=0xbc7, 0x4) 555.925594ms ago: executing program 4 (id=2804): syz_mount_image$ext4(&(0x7f0000001140)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x410c84, &(0x7f0000000340), 0x1, 0x785, &(0x7f0000001900)="$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") r0 = open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x88882, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c5902, 0x0) write$RDMA_USER_CM_CMD_DESTROY_ID(r2, &(0x7f0000003280)={0x1, 0x10, 0xfa00, {0x0}}, 0x18) syz_clone3(&(0x7f00000004c0)={0x80400, &(0x7f00000000c0), &(0x7f00000001c0), &(0x7f0000000300)=0x0, {0x7}, &(0x7f00000020c0)=""/4096, 0x1000, &(0x7f00000032c0)=""/4096, &(0x7f0000000400)=[0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0], 0x4, {r1}}, 0x58) r4 = getpid() ioctl$TIOCGSID(r0, 0x5429, &(0x7f0000000580)=0x0) syz_clone3(&(0x7f0000000700)={0x40000000, &(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000080), {0x2f}, &(0x7f0000000280)=""/110, 0x6e, &(0x7f0000000380)=""/86, &(0x7f00000006c0)=[r3, r4, r5, 0x0], 0x4, {r0}}, 0x58) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800"/15, @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00'}, 0x10) sendfile(r2, r1, 0x0, 0x7ffff000) inotify_init1(0x800) fallocate(r0, 0x1, 0x0, 0x1001f0) 531.793894ms ago: executing program 5 (id=2805): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000003c0)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb703000008000000b703000000000020850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000340)='sched_switch\x00', r1, 0x0, 0xffffffffffffffff}, 0x18) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x26e1, 0x0) r3 = perf_event_open(&(0x7f0000000540)={0x8, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r4 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) perf_event_open(&(0x7f0000000000)={0x8, 0x80, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}, 0x0, 0xfffffffffffffffe}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r3) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r0}, 0x4) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500001000000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x49, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, @perf_config_ext={0x0, 0x4}, 0x45ff5eb5c5b462aa, 0x2000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x1400000, 0x0, 0xc3072, 0xffffffffffffffff, 0x0) statx(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x1000, 0x4, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="18000000000000000000000000b1000018110000", @ANYRES32=r5], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r6}, 0x10) r7 = socket$inet_udp(0x2, 0x2, 0x0) sendmmsg$inet(r7, &(0x7f0000000800)=[{{&(0x7f0000000040)={0x2, 0x4e21, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="1c000000000000000000000008000000", @ANYRES32, @ANYBLOB="ac1414aaffffffff0000000010000000000000"], 0x30}}], 0x1, 0x4008804) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x18, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, [@ldst={0x1, 0x3, 0x4, 0x8, 0x0, 0x100}]}, &(0x7f0000000300)='GPL\x00', 0x8, 0x27, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) write$UHID_CREATE2(r2, &(0x7f0000000680)={0xb, {'syz0\x00', 'syz0\x00', 'syz0\x00', 0x61, 0x5, 0x9, 0x3, 0x8, 0xdfaf, "a5f76f2a501c94fbf4bf761e40f62a6ee132c4a6e3be5f8c09d51c5d4ac15e2736ca41b101fe94be65194e31b0c38353c2a3de2254e6742bb596ce18f0721cfeb252137a6c63f2c68b3097af062c6332f7c9dd06a0bd341ee286b46f5519ea6456"}}, 0x179) getsockopt$inet_mreqn(r2, 0x0, 0x24, &(0x7f00000002c0)={@empty, @private, 0x0}, &(0x7f0000000380)=0xc) sendmsg$nl_route_sched_retired(r4, &(0x7f0000000a40)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000880)=@delqdisc={0x198, 0x25, 0x400, 0x70bd25, 0x25dfdbfc, {0x0, 0x0, 0x0, r8, {0xffe0, 0xf}, {0x0, 0xfff2}, {0x7, 0x9}}, [@q_dsmark={{0xb}, {0x1c, 0x2, [@TCA_DSMARK_SET_TC_INDEX={0x4}, @TCA_DSMARK_DEFAULT_INDEX={0x6, 0x2, 0x3}, @TCA_DSMARK_SET_TC_INDEX={0x4}, @TCA_DSMARK_INDICES={0x6, 0x1, 0x7}]}}, @q_dsmark={{0xb}, {0x14, 0x2, [@TCA_DSMARK_INDICES={0x6, 0x1, 0x2}, @TCA_DSMARK_DEFAULT_INDEX={0x6, 0x2, 0x7}]}}, @q_dsmark={{0xb}, {0x30, 0x2, [@TCA_DSMARK_INDICES={0x6}, @TCA_DSMARK_SET_TC_INDEX={0x4}, @TCA_DSMARK_INDICES={0x6}, @TCA_DSMARK_SET_TC_INDEX={0x4}, @TCA_DSMARK_INDICES={0x6, 0x1, 0x4}, @TCA_DSMARK_DEFAULT_INDEX={0x6, 0x2, 0x8}, @TCA_DSMARK_SET_TC_INDEX={0x4}]}}, @q_dsmark={{0xb}, {0x10, 0x2, [@TCA_DSMARK_SET_TC_INDEX={0x4}, @TCA_DSMARK_INDICES={0x6, 0x1, 0x19}]}}, @q_dsmark={{0xb}, {0x48, 0x2, [@TCA_DSMARK_INDICES={0x6, 0x1, 0x2e}, @TCA_DSMARK_DEFAULT_INDEX={0x6, 0x2, 0x8}, @TCA_DSMARK_SET_TC_INDEX={0x4}, @TCA_DSMARK_INDICES={0x6, 0x1, 0x9}, @TCA_DSMARK_INDICES={0x6, 0x1, 0x8}, @TCA_DSMARK_DEFAULT_INDEX={0x6, 0x2, 0x5}, @TCA_DSMARK_DEFAULT_INDEX={0x6, 0x2, 0x3}, @TCA_DSMARK_DEFAULT_INDEX={0x6, 0x2, 0x6}, @TCA_DSMARK_DEFAULT_INDEX={0x6, 0x2, 0x3}]}}, @q_dsmark={{0xb}, {0x28, 0x2, [@TCA_DSMARK_DEFAULT_INDEX={0x6, 0x2, 0x6}, @TCA_DSMARK_DEFAULT_INDEX={0x6, 0x2, 0xce}, @TCA_DSMARK_INDICES={0x6, 0x1, 0x14}, @TCA_DSMARK_SET_TC_INDEX={0x4}, @TCA_DSMARK_DEFAULT_INDEX={0x6}]}}, @q_dsmark={{0xb}, {0x40, 0x2, [@TCA_DSMARK_SET_TC_INDEX={0x4}, @TCA_DSMARK_INDICES={0x6, 0x1, 0x21}, @TCA_DSMARK_INDICES={0x6, 0x1, 0x20}, @TCA_DSMARK_DEFAULT_INDEX={0x6, 0x2, 0x9}, @TCA_DSMARK_SET_TC_INDEX={0x4}, @TCA_DSMARK_DEFAULT_INDEX={0x6, 0x2, 0x1}, @TCA_DSMARK_INDICES={0x6, 0x1, 0x1e}, @TCA_DSMARK_INDICES={0x6, 0x1, 0x10}, @TCA_DSMARK_SET_TC_INDEX={0x4}]}}]}, 0x198}, 0x1, 0x0, 0x0, 0x40080}, 0x4000000) 460.670964ms ago: executing program 3 (id=2724): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x14, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x7a, 0x0, 0x0, 0x41000, 0x38, '\x00', 0x0, @lirc_mode2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x10) r2 = syz_io_uring_setup(0xd2, &(0x7f0000000480)={0x0, 0xfffffffd, 0x80, 0x1, 0x357}, &(0x7f0000000080)=0x0, &(0x7f0000000340)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x5, 0x0, &(0x7f0000000400)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000400)={0x1, &(0x7f0000000200)=[{0x2c, 0x0, 0x0, 0x4}]}, 0x10) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x42, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x1, {0x2}}) io_uring_enter(r2, 0x47bc, 0x2, 0x0, 0x0, 0x0) 396.215385ms ago: executing program 3 (id=2806): r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}, 0x100002, 0x0, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r1}, &(0x7f0000000180), &(0x7f0000000000)=r0}, 0x64) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00', r2}, 0x10) syz_emit_ethernet(0x9a, &(0x7f0000000080)=ANY=[@ANYBLOB="0180c2000000ffffffffffff86dd6000f00e00641100fc010000000000000000000000000000ff02000000000000000000000000000100000e2200649078020000000000000002000f004c282a6e8ad23cd030f6c283dfe4b73213b427c859373bce318c617b265af46b62de51eaf909242a4ebe7aa5a67c09ad474630385a41b8e5b9dd874cc9aea9d095e6"], 0x0) 282.255127ms ago: executing program 3 (id=2807): r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x6, 0xd, &(0x7f0000000580)=@raw=[@alu={0x4, 0x0, 0x9, 0xb, 0x0, 0x20, 0x16}, @generic={0x81, 0x4, 0x2, 0x40, 0x7}, @call={0x85, 0x0, 0x0, 0xa}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, 0x1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xd2}}, @call={0x85, 0x0, 0x0, 0xa6}], &(0x7f0000000340)='GPL\x00', 0x1, 0x78, &(0x7f00000006c0)=""/120, 0x41000, 0x12, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x3, &(0x7f0000000780)=[0x1, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff], &(0x7f0000000a00)=[{0x5, 0x5, 0x8, 0xa}, {0x3, 0x1, 0x8, 0x3}, {0x2, 0x3, 0xd, 0x3}], 0x10, 0x7, @void, @value}, 0x94) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000d80)={0x6, 0x10, &(0x7f0000000b00)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0xf222, 0x0, 0x0, 0x0, 0x1}, {{0x18, 0x1, 0x1, 0x0, 0x1}}, {}, [@jmp={0x5, 0x0, 0x0, 0xa, 0x7, 0xffffffffffffffe0, 0x8}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000b80)='syzkaller\x00', 0xd, 0x8d, &(0x7f0000000bc0)=""/141, 0x41100, 0x8, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000c80)={0x4, 0x2}, 0x8, 0x10, &(0x7f0000000cc0)={0x2, 0xf, 0x7, 0x2}, 0x10, 0x0, 0x0, 0x4, &(0x7f0000000d00)=[0x1, 0x1, 0xffffffffffffffff], &(0x7f0000000d40)=[{0x0, 0x2, 0xc, 0x8}, {0x4, 0x3, 0x7, 0x1b}, {0x0, 0x1, 0xb, 0x4}, {0x3, 0x2, 0x8, 0x9}], 0x10, 0x8, @void, @value}, 0x94) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000006080)=@delchain={0x405c, 0x65, 0x2, 0x70bd28, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x2, 0x8}, {0x0, 0x9}}, [@filter_kind_options=@f_bpf={{0x8}, {0x18, 0x2, [@TCA_BPF_FLAGS_GEN={0x8, 0x9, 0x1}, @TCA_BPF_POLICE={0xc, 0x2, [@TCA_POLICE_AVRATE={0x8, 0x4, 0x6}]}]}}, @filter_kind_options=@f_route={{0xa}, {0x14, 0x2, [@TCA_ROUTE4_IIF={0x8}, @TCA_ROUTE4_TO={0x8, 0x2, 0x44}]}}, @TCA_RATE={0x6, 0x5, {0x6, 0x22}}, @filter_kind_options=@f_bpf={{0x8}, {0x3fe8, 0x2, [@TCA_BPF_CLASSID={0x8, 0x3, {0x10, 0xb}}, @TCA_BPF_FD={0x8, 0x6, r0}, @TCA_BPF_ACT={0x3f7c, 0x1, [@m_bpf={0xfc, 0x14, 0x0, 0x0, {{0x8}, {0x1c, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_PARMS={0x18, 0x2, {0x4, 0x9, 0x10000000, 0x678, 0x8}}]}, {0xb9, 0x6, "fd5560cd458b7e7466279529a08ea0c3fa406ae9be8bc352b5808785bc1f0f2f54285d0bcd0fcd72eaa3b4418971ee182c220efb989fee01e97de8b9d92ad98685ef86ad652a9a3b5a5f49d2c8942510b5510c74d9fa23cc1fa61769ffb0c6a730b7e762726d9bc2b705e37a7b5a9d663903ed2e35c754c2abd351cd004a2b2f29c6a985bcb696c38adfd412124d6c170235ad3d9e831e932ea79e801370cf46f8c9c92d68805dc3ef85371df685eff150a9512def"}, {0xc}, {0xc, 0x8, {0x1, 0x2}}}}, @m_vlan={0x94, 0x1c, 0x0, 0x0, {{0x9}, {0x4}, {0x68, 0x6, "d884b73e6c32844f2ec70461dbaead6d0d5a99a74f8e5259ca69f8b8c18df4e4f2be40b8e569359c5f0d20ee1537af8b9ac7a2616716a4e4e6bda774e442c140524f2081249e2c246e49d413b7c433f069345f0d9d2227a76fcd55bf0026c2339b45dc58"}, {0xc}, {0xc, 0x8, {0x3, 0x6}}}}, @m_pedit={0x3c2c, 0x1c, 0x0, 0x0, {{0xa}, {0x3b98, 0x2, 0x0, 0x1, [@TCA_PEDIT_KEYS_EX={0x30, 0x5, 0x0, 0x1, [{0x2c, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x5}, @TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x2}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x5}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x3}]}]}, @TCA_PEDIT_PARMS_EX={0xe68, 0x4, {{{0x5, 0x2, 0x0, 0x7fffffff, 0x3ff}, 0xe8, 0xa, [{0x1, 0x2603, 0x4, 0x3ff, 0x4, 0x1}, {0x9, 0x7, 0x8, 0x7, 0x200, 0x5}, {0x8, 0x2, 0x0, 0x101, 0x1, 0x4}]}, [{0xe, 0x17, 0xfe, 0x9, 0x6, 0x7}, {0xffff65d5, 0x3, 0x7, 0xbeb, 0x9, 0x7}, {0x2, 0x4, 0x3, 0x87e00000, 0x4, 0x6}, {0x65, 0x208e000, 0x3, 0x2, 0x5, 0x80000000}, {0x0, 0xf7ce, 0xc, 0x9, 0x3, 0x7}, {0x0, 0x53dc55d1, 0x5, 0x0, 0x80000001, 0x9}, {0xf, 0x7, 0x8, 0x9, 0x5, 0x2883}, {0xfffffc01, 0xfffffffb, 0x6, 0xe, 0x5, 0x4}, {0xfffffffb, 0xffffffff, 0x0, 0x7fffffff, 0x6, 0xfff}, {0xb, 0xfff, 0x10, 0x6, 0x9, 0x8}, {0x9, 0xe, 0x10, 0xffff, 0x7, 0x5}, {0x2, 0xa, 0xc2, 0x3, 0x1, 0x7fff}, {0x9, 0x0, 0x5, 0x7, 0x0, 0x1}, {0x4, 0xa, 0x6, 0x80000001, 0x166, 0x3}, {0x6, 0xdb, 0x8, 0x40, 0x52, 0x2}, {0x7, 0x1488, 0x0, 0x9, 0x7fffffff, 0x5078}, {0x2, 0x7, 0xdb, 0xffff, 0x100, 0x300}, {0x6, 0x1, 0x5, 0x5, 0xffff}, {0x0, 0xb12, 0x57600, 0x9, 0x1, 0x507}, {0x9, 0xd7dc, 0x0, 0x3, 0x2, 0x1a7}, {0x513, 0x8000, 0x401, 0x3, 0x5, 0x2fea4}, {0xf89b, 0x492, 0xb544, 0xdfa6, 0x10001, 0x4}, {0x7, 0xfffffff1, 0x4, 0x1, 0x7, 0x3b}, {0x401, 0x4, 0x9, 0x1, 0x7, 0x401}, {0xf5f, 0x4, 0x100, 0x2a7a, 0x81, 0xfff}, {0x0, 0x5, 0x3, 0x1, 0x4, 0x6}, {0x9, 0x2, 0x1, 0x4, 0x8}, {0x5, 0x9b9, 0xf3, 0x80000000, 0x6000, 0x1}, {0x6a82, 0x0, 0x4, 0x4, 0x6, 0x3}, {0xa, 0x7fd, 0xfffffffb, 0xfffffff8, 0x7fff, 0x7}, {0x7, 0x5, 0x1, 0x161d, 0x1, 0x10001}, {0x3, 0x8, 0x3, 0x4e2, 0x4, 0xf0}, {0x8, 0x3, 0x4, 0xffffff81, 0x8, 0x5}, {0x400, 0x543, 0xb9, 0xffffff7f, 0x0, 0x7}, {0x2, 0x6, 0x7, 0x6, 0x6, 0x9}, {0x1, 0x0, 0x10, 0x0, 0x4, 0x4}, {0x7, 0x40, 0x7ff, 0x6, 0x4f5a, 0x1b}, {0x5, 0xff, 0x100, 0x10000, 0x2, 0x6}, {0x3, 0x4, 0x1, 0x5, 0xffffff7f, 0x3}, {0x9, 0x40, 0xffffffff, 0x6, 0xf, 0x8}, {0x3c39, 0x80000001, 0x80000001, 0x4, 0x1000}, {0x4, 0x29c0, 0x2, 0x8a, 0xc, 0x80}, {0xddcb, 0x81, 0x8, 0xb9, 0x6, 0x6c0}, {0xfffffffc, 0x6, 0x10000, 0xfada, 0x2, 0x1}, {0x7, 0x68c, 0x3ff, 0x3, 0x7f, 0x80000001}, {0x45, 0x6, 0x8, 0x0, 0xbf2a, 0x8b11}, {0x2, 0x8, 0x3, 0x9, 0x80, 0x10}, {0x4, 0x0, 0x9, 0x1200, 0x6, 0x8}, {0x7, 0x10001, 0x38f, 0x0, 0xe, 0x1}, {0x8000, 0x7, 0x6, 0x2, 0x80000000, 0x9}, {0x7, 0x6, 0x1000, 0x1, 0xf, 0x9dc9}, {0xa, 0x4, 0x2, 0x367, 0x80000000, 0x1000}, {0x5, 0x3, 0x5a, 0x8000, 0x7, 0x7}, {0xfff, 0x2, 0x7, 0x80000000, 0x81, 0x7}, {0x4, 0x0, 0x4, 0xa, 0x1, 0x28c}, {0x8, 0x5, 0x3, 0x0, 0x7, 0x53a6}, {0x80000001, 0x7, 0x8, 0x7f, 0x9, 0x6}, {0x1, 0x8, 0x187f, 0x7254, 0x10000, 0x6}, {0xea29, 0xd31, 0x80, 0x10, 0x3, 0x4}, {0x6, 0x5, 0x70e5b52c, 0x7, 0x4, 0x6c3}, {0xffffffc0, 0x8, 0x4, 0xffff, 0x4, 0x6}, {0x2, 0x9, 0x7, 0x4, 0x0, 0xfffffffc}, {0xee, 0xfff, 0x8, 0x0, 0x9, 0x2}, {0x1, 0xcd, 0x3ff, 0x2, 0x9, 0x1}, {0x3, 0x5, 0x9, 0x0, 0x0, 0x4}, {0xd, 0x7f93ad49, 0x9, 0x7, 0x401, 0xbe4}, {0x9, 0x1000, 0x2, 0x3, 0x10000, 0x401}, {0x5, 0x0, 0x7, 0xb, 0x6, 0x3}, {0x10000, 0x401, 0x5c, 0x1, 0x6, 0x8}, {0x1, 0x4, 0xb, 0xffffffff, 0x1, 0x10f1}, {0x7f, 0x101, 0xffff, 0x3, 0x0, 0x2d00}, {0x7, 0x4, 0x7, 0x4, 0x5, 0x5}, {0x2, 0x0, 0x3, 0x8, 0x9, 0x10001}, {0x0, 0xd, 0x5, 0x5, 0x80000001, 0x8c4}, {0x9, 0x0, 0x9, 0xa, 0x400, 0x1ff}, {0x1, 0xfffff636, 0x5, 0x0, 0x40}, {0xffffff66, 0xcc, 0xbcf, 0x8, 0x7f, 0x401}, {0x7, 0x7ff, 0x3, 0x8, 0x80000000, 0xffffffff}, {0x2, 0x0, 0x8, 0x3, 0x6, 0xffff}, {0xf65, 0x7, 0x1, 0xda, 0x80000001}, {0xc, 0xfffffeff, 0x9, 0x5, 0x3d6, 0x7ff}, {0x2, 0x34c, 0x2, 0x105bc5f9, 0x95ef, 0x6}, {0xfffffffa, 0x7, 0x4, 0x9, 0x1, 0x2}, {0x200, 0x9, 0xe, 0x7, 0x33107feb, 0x8}, {0x147, 0xd8, 0x9, 0x6, 0x1, 0x2}, {0xb, 0x6, 0x8, 0x2, 0x7ff, 0x8}, {0x0, 0x6, 0x5, 0x1, 0x4, 0xbe4c}, {0x70, 0x4, 0x10001, 0x0, 0x13, 0x4}, {0x83f7, 0x3, 0xc, 0x2, 0x7fff, 0x4}, {0x6, 0x8, 0x92a0, 0xfffffffb, 0x2, 0xe8}, {0x7fc, 0xffffffff, 0x6, 0x3, 0x9, 0x8}, {0x9, 0x4, 0xb, 0x0, 0x5f7d6477, 0x80}, {0x0, 0xb91, 0x2, 0x6e, 0x4, 0x4}, {0x96c7, 0x1000, 0x7fffffff, 0x9, 0x200, 0x3}, {0xfffffffc, 0x0, 0x3ff, 0xe, 0x401, 0x101}, {0x3, 0x1, 0x1, 0x6, 0x1, 0x10001}, {0xfffff1d0, 0x5, 0x7, 0x400, 0x80000001, 0x2}, {0x2, 0x0, 0x3, 0x80, 0x7, 0x2}, {0x7, 0x0, 0x6, 0x788934b0, 0x6, 0x9}, {0x0, 0xff, 0x9, 0xa9, 0x75c4, 0xa}, {0x200, 0x4, 0x9, 0x3, 0x8, 0x1ff}, {0x7fffffff, 0xfffff001, 0x7, 0xfffffff3, 0x2, 0x8001}, {0x5, 0x4, 0x8, 0x2ec19447, 0x6, 0x6}, {0x0, 0x1, 0x0, 0x7, 0x9, 0x3}, {0x10001, 0x0, 0x1, 0x7c3a, 0x5, 0x5}, {0xffffffff, 0xef6, 0x8, 0x2f, 0x3ff000, 0x254}, {0xfff, 0xffff16db, 0xf0, 0x10000, 0x8001, 0x8000}, {0x2, 0x9, 0x81, 0x1ff, 0x9, 0x2}, {0x2, 0x352, 0x5, 0x3, 0x2, 0x2}, {0xfffffff0, 0xd, 0x1, 0x5, 0x7, 0x2}, {0x0, 0x1ff, 0x7, 0xda2, 0x5, 0x7}, {0x0, 0x3, 0x6, 0x8001}, {0x1, 0x5, 0x6, 0x7, 0xe, 0x2}, {0x7, 0x9, 0x7fff, 0x9, 0x0, 0x3}, {0xffff, 0x10, 0x80000000, 0x8, 0x5, 0x5c05f9ca}, {0x3, 0x7, 0x3, 0x5, 0x8, 0x10}, {0x1, 0x83, 0x3, 0x1ba48905, 0x80000000, 0x9}, {0xd, 0x5, 0xfffffffe, 0x7, 0xc94, 0xfffffff1}, {0xc, 0x2, 0x80000000, 0x101, 0x0, 0x8001}, {0x200, 0x8, 0x2, 0xff, 0xfffffff7, 0x200}, {0x4, 0x5, 0x4, 0x1, 0x2, 0xffffffff}, {0x4, 0x36, 0xffff, 0x9, 0x3ff, 0x3}, {0x3, 0xfffff000, 0x8, 0x8, 0x10001, 0xfff}, {0x0, 0x1, 0x8, 0x80000000, 0x9, 0x4}, {0xfffeffff, 0x3, 0xffffffff, 0x80000000, 0x3, 0x5}, {0x0, 0x6, 0x3, 0xb, 0x3, 0x6}, {0x8001, 0x40, 0x800, 0x9, 0x1000, 0x8}, {0x401, 0x7fffffff, 0x5c, 0x2, 0x5, 0x4}], [{0x2}, {}, {0x5}, {0x5}, {0x1, 0x1}, {0x1, 0x1}, {0x7, 0x1}, {0x1, 0x1}, {0x4, 0x1}, {0x3}, {0x4, 0x1}, {0x3}, {0x3, 0x1}, {0x5, 0x1}, {0x4, 0x1}, {0x1, 0x1}, {0x2}, {0x0, 0x1}, {0x1}, {0x3}, {0xc}, {0x2, 0x1}, {0x5, 0x1}, {0x3, 0x1}, {0x5}, {0x4, 0x1}, {0x4, 0x1}, {0x4}, {0x1, 0x1}, {0x1}, {0x1}, {0x4, 0x1}, {0x1, 0x1}, {0x0, 0x1}, {0x3}, {0x5}, {}, {}, {0x1, 0x1}, {0x2, 0x1}, {0x4, 0x1}, {0x4}, {}, {0x2}, {0x3}, {}, {0x3}, {0x5}, {0x2}, {0x2, 0x1}, {0x4}, {0x7}, {0x1}, {0x2}, {0x2}, {0xf}, {0x0, 0x1}, {0x3}, {}, {0x1}, {0x6, 0x1}, {0x3}, {0x3}, {0xa, 0x1}, {0x1, 0x1}, {0x5, 0x1}, {0x1, 0x1}, {0x5}, {0x1, 0x1}, {0x1, 0x1}, {0x6, 0x1}, {0x3}, {0x0, 0x1}, {0x1}, {0x1, 0x1}, {0x1, 0x1}, {0x5, 0x1}, {0x3}, {0x3, 0x1}, {0x0, 0x1}, {0x2}, {0x5}, {0x4, 0x1}, {0x4, 0x1}, {0x0, 0x1}, {0x5, 0x1}, {0x4}, {0x3}, {0x3}, {0x4}, {0x1, 0x1}, {0x0, 0x1}, {0x1}, {0x5}, {0x3}, {0x3}, {0x5, 0x1}, {0x0, 0x1}, {0x4}, {0x0, 0x1}, {0x2}, {}, {0x4}, {}, {}, {0x2, 0x1}, {0x3, 0x1}, {0x1}, {0x0, 0x1}, {}, {0x2}, {0x2, 0x1}, {0x1, 0xdb4b5ee6168987a1}, {0x2}, {0x2, 0x1}, {0x1}, {}, {0x3, 0x1}, {0x4, 0x1}, {}, {0x0, 0x1}, {0x1}, {0x2}, {0x4}, {0x1, 0x1}, {0x3, 0x1}, {}, {0x2}], 0x1}}, @TCA_PEDIT_KEYS_EX={0x1c, 0x5, 0x0, 0x1, [{0xc, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x2}]}, {0xc, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}]}]}, @TCA_PEDIT_PARMS={0xeb0, 0x2, {{{0x6, 0x7, 0xffffffffffffffff, 0x2, 0x40}, 0x3, 0xe3, [{0x1, 0x5, 0xc7, 0x3ff, 0x4, 0x6}, {0x400, 0xd, 0x8, 0x4, 0x0, 0x8}, {0xffffffff, 0x2, 0x10000, 0x8, 0x133ae358, 0x8}, {0x10, 0x4, 0x5, 0x81, 0x3, 0x1}, {0x6, 0x800000, 0xfffffff9, 0x1c, 0x2, 0xf}, {0x5, 0x7ff3, 0x10, 0x400, 0x8000, 0x80}]}, [{0x0, 0x3, 0x2, 0x0, 0x2, 0xffff614d}, {0x81, 0x0, 0x8, 0xdaad, 0x1, 0xfffffff6}, {0x400, 0x7ff, 0x8, 0x0, 0xf, 0xffffffb7}, {0xc, 0x3, 0xc, 0x5, 0x800, 0x3}, {0x100, 0x9, 0x5, 0x3, 0x836}, {0x9, 0x400, 0xffffffff, 0x6, 0x101, 0x348}, {0x6ce1a35b, 0x797f, 0x8000, 0x0, 0x37333b28, 0x1ff}, {0x0, 0x7f, 0x1000, 0x2, 0x10001}, {0x3, 0x3, 0x3ff, 0x7, 0x9, 0x5}, {0x2, 0x80000000, 0x4, 0x7fff, 0x3500000, 0x8}, {0xee, 0x8686, 0x3, 0xe, 0x3, 0x1000}, {0x1, 0x81, 0x2b54, 0x8, 0x2ad9, 0x3dd}, {0xf, 0x401, 0x1, 0x0, 0x401, 0x7}, {0x2, 0xb, 0x1, 0x6, 0x5, 0x5}, {0xf09, 0x1, 0x1, 0x9, 0xff, 0xb}, {0x2, 0x0, 0x6, 0xfff, 0x0, 0x5}, {0xffffffff, 0x6, 0x7ff, 0x8, 0x3000, 0x1}, {0x0, 0x8, 0xff, 0x8, 0x3}, {0xb7f, 0x4, 0x0, 0x7, 0x0, 0x9}, {0x3, 0x800, 0x3, 0x9, 0x17f7, 0x9}, {0x7, 0xff, 0x32d, 0x8, 0x8000, 0x3}, {0x10001, 0x0, 0x8000, 0x5, 0x5, 0x1}, {0x8, 0x5, 0x7, 0xa06, 0x7, 0x8001}, {0x5, 0x6, 0x3, 0x81, 0x3, 0x5}, {0xc6be, 0x0, 0x7f, 0x8, 0x204, 0x101}, {0x8, 0xfffffffd, 0x0, 0xffffffff, 0x2254, 0x8}, {0x10, 0x8, 0x4797, 0x9, 0x7f, 0x3}, {0x3, 0x6a, 0x5, 0x60, 0x200, 0x1}, {0xa86e, 0xb2, 0x4, 0x8, 0x3, 0x9}, {0x1, 0x5, 0xd, 0xfffffff0, 0x4, 0x88}, {0xea, 0xfff, 0xdba5, 0xfffff800, 0x8, 0x7}, {0x6, 0x80000001, 0x9, 0x2, 0x6, 0xf0f1}, {0xd08, 0xffffffff, 0x4, 0x200, 0x800, 0x4}, {0x7, 0x9, 0x81, 0x1ff, 0x800, 0x6}, {0x3, 0x8001, 0x7, 0x5, 0x8, 0xbe}, {0xc69, 0x2, 0x1, 0x287, 0x1, 0x735fa5c1}, {0x80, 0x7fffffff, 0x0, 0x7, 0x9, 0x2}, {0x1, 0x5, 0x2, 0xd789, 0x40, 0xd6}, {0x6, 0x400, 0x1ff, 0xa82, 0xe, 0x4}, {0x0, 0x3d, 0xfffffffd, 0x2, 0xeefd, 0x8}, {0x2, 0x9, 0x7, 0x3, 0x4, 0x2}, {0x9, 0x7ff, 0xdba, 0x0, 0x1, 0x8}, {0x7, 0x5, 0x3, 0x200, 0x2, 0x97d2}, {0x3, 0x10001, 0x6, 0x1, 0x7fffffff, 0x8}, {0xf70, 0x9, 0x7, 0x9, 0x1ff, 0x9}, {0x401, 0x80, 0x5, 0x2, 0xb, 0x7}, {0x3, 0x2f1c, 0x80, 0x7, 0x9, 0x8}, {0x2, 0x1, 0x9, 0x4, 0x1, 0x3}, {0x6, 0x8, 0x3, 0x9, 0x9, 0x7f}, {0x9, 0x6, 0x7ff, 0x10, 0x6, 0x9}, {0x6fed2794, 0x9, 0xa9f, 0x4, 0x2, 0x1}, {0x7a, 0xffffff00, 0x9, 0x81, 0xbfcb, 0xf}, {0xfff, 0x9, 0xd09, 0x1d1, 0x6}, {0x644, 0x9, 0xfffffff4, 0x0, 0x3ff, 0xda0}, {0x7, 0xf34, 0x9, 0x8, 0xfffffffe, 0xa}, {0x101, 0x7, 0x4, 0x0, 0x9, 0x2}, {0x100, 0xfffffff1, 0x12, 0x3ff, 0x1, 0x4}, {0x3, 0xff, 0x2, 0x3, 0x5, 0x4}, {0x4, 0xdd, 0x101, 0x1, 0x4, 0x60000000}, {0x5, 0x9cc4, 0x200, 0xef7, 0x5, 0xdd0}, {0x9, 0xa6, 0x7, 0x1, 0x0, 0x12000000}, {0x1, 0x9, 0x8, 0x8, 0x8}, {0x8001, 0x3, 0x9, 0x5, 0x4, 0x7}, {0x3, 0x2, 0x1, 0x3, 0xbef2, 0x80}, {0x55b, 0x8, 0x0, 0x6, 0x7f, 0x7}, {0x0, 0x6, 0x9, 0x7fffffff, 0x3, 0x3ff}, {0x4, 0x100, 0x286a160b, 0x0, 0x40, 0x1ff}, {0x5, 0x5, 0x3, 0x2, 0x1ff, 0xe}, {0x4, 0x4, 0x3, 0x2, 0x0, 0x3}, {0x2, 0x1, 0x9, 0x5, 0xfffffcb4, 0x176f}, {0x200, 0xec01, 0xffffffb1, 0xd19, 0x80000000, 0x5e0}, {0x6, 0x7, 0x2, 0x2, 0x0, 0x8001}, {0x0, 0x0, 0x3ff, 0x1000, 0x5, 0xc66d}, {0x4, 0x80000000, 0x9, 0x5924, 0xa, 0x7}, {0x7, 0xffffffff, 0x100, 0x1, 0x9, 0x32}, {0xaa4f, 0xe7, 0x9, 0x8, 0x6, 0x442}, {0x3, 0x0, 0x8, 0x7, 0x9, 0x4}, {0x7ff, 0x7, 0x7, 0x0, 0xc7, 0x2}, {0x2a1, 0x7fff, 0x5, 0x8000, 0x0, 0xcc1}, {0x101, 0x8, 0x200, 0x8, 0x1, 0x401}, {0x2, 0x0, 0x7, 0x8, 0x7, 0x7}, {0x7ff, 0x9d9, 0x6, 0x7, 0x7, 0x1}, {0x2, 0x40, 0x8, 0x5, 0x2}, {0x80, 0x4, 0x3ff, 0x2, 0x6, 0x401}, {0x1, 0x52d2, 0x4, 0x5b, 0x3, 0x5}, {0x2, 0xc, 0xa7, 0x6, 0xfbfb, 0x500}, {0x2, 0x1, 0x4, 0xd, 0x72, 0x3}, {0x2, 0x8, 0x1, 0xaf8, 0x8, 0x8}, {0x5, 0x1, 0x1, 0x4, 0x4, 0xf}, {0x2, 0x3ff, 0x9, 0x3, 0x2, 0x3ff}, {0x6, 0x7, 0xfffffffd, 0x6, 0x7, 0x9}, {0x5, 0x9, 0x5, 0x41b, 0x8001, 0x1}, {0x9dab, 0x4, 0x7, 0x22c, 0x4, 0x6}, {0x4, 0x8, 0x401, 0x776, 0x9b}, {0x80, 0x8, 0x5, 0x1, 0x0, 0x2}, {0x0, 0x80000000, 0xfa, 0x5, 0x2, 0x80000001}, {0x6, 0x800, 0x7, 0x0, 0x2, 0x4}, {0xffffffff, 0xfffffffa, 0x8, 0x10000, 0x4, 0x4}, {0x9, 0x7, 0x4, 0x9, 0x400, 0x2}, {0x1, 0x4, 0x4, 0x6, 0x8, 0xe70b}, {0x3, 0x7, 0xffff30c3, 0x8, 0x800, 0x2}, {0x1, 0xd5b0, 0x8eaa, 0x6, 0x2b, 0x4}, {0x4, 0x4, 0x8001, 0x7, 0x7, 0x9}, {0x3, 0x0, 0x7, 0x100, 0x3, 0x3}, {0x800, 0x80, 0xffffffff, 0x7f, 0x3, 0xfffffffd}, {0x7, 0x400, 0x3, 0xbce, 0x0, 0x591}, {0x81, 0x8, 0x5, 0x2, 0x7, 0x8000}, {0x7, 0x3, 0x0, 0x7, 0x6e, 0x6}, {0x6, 0xa, 0xed0, 0xbd, 0xfffffffa, 0xfffffffa}, {0x1, 0x5, 0x2, 0x6, 0x3}, {0x1, 0xff, 0x2, 0x1, 0x9, 0x4}, {0x80, 0x10000, 0x3, 0xfffffffd, 0xa, 0xfffffffe}, {0x0, 0x1000, 0x6, 0x3, 0xc1, 0x9}, {0x3, 0xd, 0x8, 0x7, 0xd857, 0xbe8}, {0x5, 0x1, 0x7, 0x6, 0x5, 0x9}, {0x5, 0x8, 0x4, 0xfffffff7, 0xfffffff9, 0x2a}, {0x11ec, 0x5, 0x0, 0xfffffffb, 0x5, 0x800}, {0xfffffffe, 0xaa4, 0x200, 0x1, 0xfffffffb, 0x1}, {0x6, 0x9, 0x0, 0x3, 0x111d, 0x80000000}, {0x2, 0x616cca23, 0x7, 0x2, 0x8c, 0x40}, {0x7, 0xffffffff, 0x4, 0x4, 0x0, 0x6}, {0x5, 0x7f, 0x6f, 0x1, 0x3, 0x789}, {0x7, 0x8, 0x1000, 0x5, 0x9}, {0x9, 0x81, 0x7, 0x80000000, 0xa4, 0x8}, {0x5, 0x5, 0x5, 0x9, 0x1}, {0x10000, 0x4000, 0x1, 0x7, 0x0, 0x7}, {0x800, 0x3, 0x2, 0x2, 0xc, 0x13}, {0x2, 0x3, 0x8, 0x3, 0x6, 0x100}], [{}, {0x5, 0x1}, {0x4, 0x1}, {0x5, 0x1}, {0x5}, {0x4, 0x1}, {0x3}, {0x5}, {0x5, 0x1}, {0x0, 0x1}, {0x5, 0x1}, {0x0, 0xc6fd85379dd288c}, {0x5, 0x1}, {}, {0x1, 0x1}, {0x2}, {0x1, 0x1}, {0x4}, {0x3, 0x1}, {0x6, 0x1}, {}, {0x3, 0x1}, {0x0, 0x1}, {0x1, 0x1}, {0x0, 0x1}, {0x2, 0x1}, {0x5}, {0x0, 0x1}, {0x2}, {0x0, 0x1}, {}, {0x0, 0x1}, {0x4}, {0x0, 0x1}, {0x1, 0x1}, {0x3}, {0x5, 0x1}, {0x4, 0x1}, {0x3}, {0x4, 0x1}, {0x2}, {0x1}, {0x5}, {0x4, 0x1}, {0x4}, {0x1}, {}, {0x3, 0x1}, {0x2}, {}, {0x3}, {0x4, 0x1}, {0x4}, {0x5}, {0x3, 0x1}, {}, {0x5}, {0x0, 0x1}, {0x1, 0x1}, {0x5, 0x1}, {}, {0x4}, {0x5}, {0x5, 0x1}, {0x3, 0x1}, {0x5}, {0x2, 0x1}, {0x3, 0x1}, {0x5}, {0x3}, {0x6, 0x1}, {0x3, 0x1}, {0x2}, {0x2}, {0x4}, {0x3, 0x1}, {0x5}, {0x3}, {0x3, 0x1}, {0x5}, {0x2}, {0x0, 0x1}, {0x5, 0x1}, {0x4, 0x1}, {0x5, 0x1}, {0x0, 0x1}, {0x2, 0x1}, {}, {0x2}, {0x0, 0x1}, {0x4}, {0x5}, {0x1}, {0x4, 0x1}, {0x0, 0x1}, {0xab15e9b419e9c944, 0x1}, {0x0, 0x1}, {0x3, 0x1}, {0x3, 0x1}, {0x1, 0x1}, {0x4, 0x1}, {0x0, 0x1}, {0x2, 0x1}, {0x4}, {0x4, 0x1}, {0x3, 0x1}, {0x0, 0x1}, {0x4}, {0x2, 0x1}, {0x4}, {0x5}, {}, {}, {0x4, 0x1}, {0x4}, {0x3, 0x1}, {0x0, 0x1}, {0x1}, {0x2}, {0x4}, {0x2, 0x1}, {0x5}, {0x4}, {0x5, 0x1}, {0x2, 0x1}, {0x4, 0x1}, {0x957b32161a1be452}, {0x3}], 0x1}}, @TCA_PEDIT_PARMS={0xe50, 0x2, {{{0x1a9, 0x7, 0x5, 0x6, 0x7}, 0x8, 0x7, [{0xd9, 0x5, 0xffffffff, 0x6, 0xaaaa, 0x1bc0}, {0x2ed, 0x6, 0x9, 0x10001, 0xfffff189, 0x10}]}, [{0x0, 0x2, 0xffff, 0x9, 0xffff}, {0x2, 0x652b, 0x0, 0x9, 0x3ff, 0x3ff}, {0x1, 0x2, 0x6, 0x5, 0x9, 0x7}, {0x6, 0x0, 0x7, 0x3, 0x80000000, 0x2}, {0x3, 0x4, 0x8, 0x3, 0x5, 0x38b8}, {0x7, 0x3, 0x0, 0x6, 0x40, 0x1}, {0x35, 0x8, 0x3, 0xffffffff, 0x9}, {0xe90, 0x6, 0xc, 0x7fffffff, 0x0, 0xfff}, {0x2, 0x994, 0x7, 0x0, 0x5, 0xd}, {0xc0, 0xfffffc00, 0x5, 0x5, 0x4, 0x1}, {0xc, 0x2, 0x4, 0x5, 0x80, 0x4b0b41af}, {0x2, 0x3, 0xa, 0x1, 0x6, 0x6}, {0x2, 0xfffffffe, 0x9, 0xd, 0x6, 0xa}, {0x8000, 0x3, 0x9, 0x5, 0x6, 0x9}, {0xbd6b, 0x10001, 0xffff, 0x0, 0x7, 0x4}, {0x9, 0x6, 0x2, 0x8, 0x7, 0x2}, {0x80, 0x0, 0x7, 0x4, 0x2, 0x1}, {0x59, 0x80000000, 0x6, 0x1ff, 0x4, 0x7ff}, {0x5, 0x60f5, 0xb86e, 0x9, 0x5, 0x101}, {0x3, 0xa9, 0x1, 0x1, 0x401, 0x101}, {0xffffffff, 0x9, 0x1, 0x4, 0x6, 0x3d781013}, {0x1f, 0xbb1, 0x401, 0x8001, 0x5949, 0x8}, {0x800000, 0x5, 0x10000, 0xffff, 0x10, 0x4}, {0x4, 0x9, 0xff, 0xfff, 0x4, 0x364}, {0x2, 0x1, 0x6, 0x0, 0x4, 0x909}, {0x0, 0x80000001, 0x8, 0x8001, 0xa1, 0x7ff}, {0x6, 0x10000, 0xd, 0x2, 0x7ff}, {0x1, 0x80000000, 0x8001, 0x86, 0xc, 0x6}, {0x3, 0x1, 0x8, 0x1, 0x1000, 0x5}, {0xffff, 0x31d537ca, 0x80, 0x1, 0x5, 0x101}, {0x2, 0x5, 0x3, 0xfa8, 0x8, 0xa}, {0x5, 0x65a, 0x3, 0x9, 0xa4d5, 0x4}, {0xffffffff, 0xffff7c6a, 0x82f, 0x2, 0x6de48378, 0xd43}, {0xb, 0x1, 0x7, 0xfffffffe, 0x341, 0xfffffffd}, {0xb, 0xc, 0xffffff40, 0x3, 0x2, 0x1ff}, {0xffff, 0x3, 0x7, 0x4, 0x8, 0x5}, {0x2, 0x1ff, 0x4, 0x8, 0x101, 0x3}, {0xfffffff7, 0x400000, 0x4, 0x5, 0x3, 0x1ff}, {0x3ff, 0x3, 0x6, 0x180, 0x400, 0x3}, {0x6, 0x9, 0x9, 0x5, 0x6, 0x3}, {0xfffffffc, 0x2, 0x7, 0x1000, 0xe15, 0x101}, {0x9402, 0xc4, 0xdd, 0x2, 0x8}, {0x1, 0x1ff, 0x2, 0x4, 0x5, 0x800}, {0xa7, 0x8, 0xfa, 0x9, 0x80000001, 0x9}, {0xffff, 0xfff, 0xfa3f, 0xfffffffe, 0x40, 0x9}, {0x5, 0x3ff, 0x10000, 0x800, 0x23, 0x80000000}, {0x7ff, 0x4, 0x8000, 0x8001, 0x9}, {0x7, 0x7, 0x2, 0xe41, 0x7, 0x1}, {0x2, 0x4, 0x2, 0x84, 0x80, 0x8}, {0xc, 0xf57, 0x3, 0xe4, 0x6, 0x400}, {0x2, 0x800, 0x8, 0x4, 0x2, 0x7f}, {0x80, 0x40, 0x6, 0xd, 0x9, 0x6}, {0x7, 0xffffffab, 0x8, 0x3, 0x5, 0x5}, {0xc8, 0x15e, 0x4, 0x9, 0x9, 0x2}, {0x0, 0x5, 0x81, 0x4, 0x4, 0x4}, {0x200, 0x2, 0x8, 0x9, 0x3, 0x8}, {0x2, 0x0, 0x9, 0x7, 0x0, 0x8}, {0x6, 0xadc, 0x171, 0x800, 0x0, 0x6bc1}, {0x4, 0x6, 0xff, 0x7, 0x3, 0x5}, {0xb7e, 0x5, 0x1, 0x4, 0x3e1c3e07, 0x2c54}, {0x4, 0xa9, 0x401, 0xbf, 0x0, 0x2b}, {0x7, 0x9, 0x4, 0x3, 0x57307837, 0x8}, {0x2, 0xb, 0x78f4, 0x6, 0xfffffffc, 0x6}, {0x4, 0x7, 0x2, 0x8, 0x3ff, 0xffffffff}, {0x4, 0xfffffff5, 0x2, 0x8967bddc, 0x9, 0x5}, {0x10000, 0x81, 0x100000, 0x9, 0x8, 0xff}, {0xf, 0x20000000, 0x2, 0x2, 0xe7a, 0x8}, {0x7fff, 0xfffffffd, 0xfba6, 0x5, 0x4d45, 0xb2}, {0x6f, 0x7, 0x1, 0xff, 0x4, 0xfff}, {0x3, 0x401, 0x0, 0xb0, 0x2, 0x7}, {0x8, 0xffffff33, 0x6, 0x3, 0x9, 0x9}, {0x5, 0x1000, 0x4000000, 0x8, 0x8000, 0xd1}, {0x6, 0x5, 0x6, 0x401, 0x1, 0x5}, {0x38, 0x81, 0x81, 0x1, 0x2, 0x9}, {0x8c0, 0x6, 0x6, 0x9, 0xea3c, 0x1}, {0x80, 0x3, 0x8, 0x3, 0xfffffffa, 0xfffffff7}, {0x9, 0x9, 0x1, 0x7, 0x1, 0x6}, {0xabf8, 0x0, 0x4, 0x1000, 0x6, 0x7}, {0x7, 0x10, 0x8, 0x2, 0xc0a, 0xfff}, {0xffff, 0x9, 0x9, 0x5, 0x6, 0x7}, {0x9, 0x40, 0xa27, 0xffffffff, 0x2, 0x10001}, {0x4, 0x5, 0x7f, 0xfc3, 0x200, 0x1}, {0x6, 0x4, 0x5, 0x9, 0x7ff, 0x9}, {0xfffffffe, 0x100, 0x8001, 0x7, 0x5, 0xf71}, {0x3a5ad9b0, 0x81, 0x752db241, 0xfff, 0x0, 0x68}, {0x9, 0x0, 0x5, 0x800, 0x7fffffff, 0x2ad2}, {0xf1a, 0x3, 0x4, 0x7fff, 0x4, 0x1}, {0x2, 0x3, 0x7, 0x9, 0xc, 0x10000}, {0x0, 0x2, 0x720e, 0xfffffffc, 0x31e2, 0x5}, {0x5, 0x3, 0x5, 0xfe00000, 0x5}, {0x10000, 0x1, 0x3, 0x1, 0x8001, 0xb44a}, {0x22f, 0x7, 0x200, 0x3, 0x1}, {0x7, 0xfffffeff, 0x1, 0x5, 0xf95, 0xb}, {0x0, 0x1, 0x4, 0xffffe242, 0x7, 0x2}, {0x3, 0xc6bf, 0x5, 0x81, 0x63c4cfad, 0x6}, {0xa, 0x80000000, 0x2, 0x3, 0xf}, {0xffffbe17, 0x2, 0x7, 0x5, 0x1, 0x7ff}, {0x5, 0x7, 0x7, 0x9, 0xfffffffd, 0x28000000}, {0x800, 0x6, 0x0, 0x4, 0xf279, 0x2}, {0x4, 0xffffffc0, 0x3, 0x9acd, 0x1, 0x6}, {0x1ff, 0x8, 0x4, 0x0, 0x1, 0x80000000}, {0x4, 0x0, 0x0, 0x1000, 0x9}, {0x6, 0x100, 0x6c29, 0x4, 0x8, 0x3}, {0x1, 0x401, 0x6, 0x0, 0x9a9, 0x9}, {0x9, 0x4, 0x7, 0x4, 0xf8, 0xffffffff}, {0x81, 0x2, 0x4b0, 0xe, 0xd, 0x5}, {0x5, 0x7, 0x80000001, 0x6, 0x10001, 0x2}, {0x0, 0x3, 0x0, 0xffff034f, 0xc7, 0x8}, {0x9, 0x942d, 0x80000000, 0x0, 0x56, 0x4103}, {0x101, 0x80000000, 0x5, 0xffffffff, 0x8, 0x2}, {0x3, 0x1, 0x10000, 0x5, 0x7, 0xfffffff9}, {0x1, 0x7, 0x9, 0x8, 0x10000, 0x5}, {0x7, 0x1, 0x8, 0x9, 0xb, 0x1000}, {0x3, 0x4, 0x4, 0x2, 0x5, 0x729c}, {0x7, 0x0, 0x9, 0x8, 0x7fffffff, 0x5fe}, {0x8, 0xb, 0x4fb8, 0x6, 0x6, 0x7fff}, {0x2, 0x6, 0x1, 0x8, 0x10, 0x2}, {0x8000, 0xa423, 0x8, 0x4, 0x6}, {0x6, 0x1, 0x5, 0x401, 0x7, 0x4}, {0x6, 0x10001, 0x9, 0xeeff, 0x6, 0x3}, {0x80000000, 0x5, 0x1, 0x9a7b, 0x4, 0x800}, {0x5cae12ac, 0x10001, 0xfffffff1, 0x2, 0xdd00, 0x5}, {0x55f0, 0x6, 0x1, 0x6, 0x0, 0x9}, {0x9, 0x2, 0xbc9, 0x400, 0x6}, {0xfffffff8, 0x5, 0x63b7, 0xd0, 0x56ba, 0x7}, {0x4, 0x101, 0x2, 0x52, 0x9, 0x8}, {0x4, 0x7fff, 0x7fffffff, 0x1, 0x0, 0x2}, {0x3, 0x717c, 0x100, 0x8, 0x1a}], [{0x2, 0x1}, {0x0, 0x1}, {0x2}, {0x1, 0x1}, {0x1, 0x1}, {}, {0x5}, {0x4, 0x1}, {0x1}, {0x2}, {0x0, 0x1}, {}, {0x1}, {0x3}, {0x0, 0x1}, {0x1, 0x1}, {0x1}, {0x4}, {0x4}, {}, {0x2, 0x1}, {0x3}, {0x0, 0x1}, {0x5}, {0x3, 0x1}, {0x0, 0x1}, {0x5}, {0x1}, {0x0, 0x1}, {0x3, 0x1}, {0x4}, {0x1}, {}, {0x4}, {0x1, 0x1}, {0x2, 0x1}, {0x4}, {0x3}, {0xe}, {0x2}, {0x0, 0x1}, {0x1}, {}, {0x0, 0x1}, {0x4}, {}, {0x2}, {0x1, 0x1}, {}, {}, {0x2, 0x1}, {0x3}, {0x5, 0x1}, {0x4}, {0x5, 0x1}, {}, {0x2}, {0x5}, {0x1, 0x1}, {}, {}, {0x1, 0x1}, {0x5, 0x1}, {0x5, 0x1}, {0x141ba0afeb3ab25a, 0x1}, {0x5, 0x1}, {0x6}, {0x6, 0xd8893a1436e89f82}, {0x2, 0x1}, {0x5, 0x1}, {0x1, 0x1}, {0x2, 0x1}, {0x1, 0x1}, {0x4, 0x1}, {0x2, 0x1}, {}, {0x1}, {0x3, 0x1}, {0x0, 0x1}, {0x1, 0x5424a45ee856704a}, {0x3}, {0x4}, {0x3, 0x1}, {}, {0x5}, {0x5}, {0x1}, {0x0, 0x1}, {0x2}, {0x4, 0x1}, {0x5}, {0x2, 0x1}, {0xe}, {0x4}, {0x2}, {0x1, 0x1}, {0x3}, {0x1}, {0x5}, {0x4, 0x1}, {0x2}, {0x5}, {0x2, 0x1}, {0x4}, {0x4, 0x1}, {0x1, 0x1}, {0x2, 0x1}, {0x0, 0x1}, {0x2, 0x1}, {0x1}, {0x7}, {}, {0x4, 0x1}, {0x0, 0x1}, {0x4, 0x1}, {0x2}, {0x2}, {0x4}, {0x3, 0x1}, {0x0, 0x1}, {0x0, 0x1}, {0x0, 0x1}, {0x2}, {0x4, 0x1}, {0x1, 0x1}, {0x1}]}}, @TCA_PEDIT_PARMS_EX={0xee0, 0x4, {{{0xa392, 0x0, 0x2, 0x592a, 0x80}, 0x7, 0x2, [{0x0, 0x6, 0xfff, 0x53, 0x362, 0x80}, {0x4, 0x8, 0x100, 0xfffff801, 0xff}, {0xf, 0x1, 0x3, 0x4, 0x9, 0x3}, {0x1, 0x1, 0xfff, 0x8, 0x7, 0x3}, {0x2, 0x1, 0x2, 0x7, 0x2, 0x9}, {0x100, 0xfffff801, 0x2, 0xb, 0x735b, 0x9}, {0x0, 0xf64, 0x3ff, 0x7fffffff, 0x6, 0x401}, {0x5, 0xe, 0x6, 0x8, 0xb, 0x8}]}, [{0x2, 0x4, 0x80000000, 0x4ad, 0x2, 0x8}, {0x5, 0x3, 0x0, 0x8, 0x5, 0x68}, {0x7fffffff, 0x3, 0x1, 0x9, 0xf907, 0x5}, {0x3, 0xffff6e0a, 0x7, 0x4, 0x1, 0xb}, {0x9, 0x80, 0x9, 0x0, 0x5, 0x5}, {0x8000, 0x3, 0x7, 0x0, 0x345f, 0x4}, {0x1, 0x0, 0x4cedf2b1, 0x4, 0x0, 0xdc8b}, {0x7e, 0x7, 0x6, 0x6, 0xf16c, 0x7}, {0x7, 0x9, 0x9, 0x9, 0x9, 0xff76}, {0x4, 0x9, 0x1, 0x7f, 0x6, 0x5}, {0x80000001, 0x9, 0x9, 0xeb3, 0xa49a91ac, 0x9ac1}, {0x8, 0x493, 0x1, 0x0, 0x8, 0x9c1}, {0x3, 0x7, 0x2, 0xf65, 0x401, 0xc4000000}, {0x0, 0x4, 0xff, 0x9, 0x5f8, 0x2}, {0x0, 0x3, 0x80000001, 0x8, 0x101, 0x4}, {0x7e9, 0x1, 0x1, 0x9, 0x4, 0x7fff}, {0x9, 0x1a, 0xffffffff, 0x7, 0x7, 0x7ff}, {0x2e68226a, 0x80000001, 0xfb1d, 0x8, 0x7, 0x4}, {0x7, 0x5, 0x455f60dc, 0x3, 0x4, 0x1ff}, {0x11233ceb, 0x11514237, 0x1, 0x6, 0x4, 0x33d8}, {0x2, 0x5, 0x8, 0x3, 0xd89, 0x4}, {0x0, 0xffffa23a, 0x8, 0x7fffffff, 0x3, 0x126}, {0x6, 0xe248, 0x83, 0x6, 0x100}, {0x8, 0x81, 0x8, 0x9c6, 0x1ff, 0xa6}, {0x9, 0x4, 0x1, 0xa1, 0x5c0, 0x401}, {0xfffffffd, 0xbfd, 0x6, 0x6, 0x0, 0x7}, {0x2, 0x8, 0xe7, 0x6, 0x3, 0x200000}, {0x34, 0x8, 0x0, 0x9, 0xb6, 0x1000}, {0xffffffff, 0x8, 0x9, 0x8, 0xc3, 0xfffffffa}, {0x36f4, 0x1, 0xfeb, 0x2, 0xffffffff, 0x8}, {0x49e, 0x3, 0x7, 0x3, 0x9, 0x10001}, {0x8, 0xdbcfc3, 0x9, 0x0, 0x7ff, 0x100}, {0x7, 0x2, 0x5, 0x4, 0x7ff, 0x8}, {0xb, 0x9, 0x6, 0x1, 0x200, 0x4}, {0x4, 0xfffff001, 0x8, 0x1, 0x3d87, 0x3}, {0x3, 0xfffffff7, 0x1, 0x3, 0x7, 0x1}, {0x40000000, 0x5, 0x10000, 0x7ff, 0x4, 0xfffffffb}, {0x8, 0xb, 0x8, 0xfffffffd, 0x5}, {0x80, 0x7, 0x9e4, 0x7, 0x80000001, 0x1}, {0x6, 0x5e, 0x1, 0x6, 0x9, 0x5}, {0x3, 0x2, 0x3, 0xff, 0x0, 0xfffffffc}, {0x101, 0x5f, 0x8, 0x5, 0x8000}, {0xc4f, 0x5, 0x2, 0x9, 0x560}, {0x1, 0x2, 0x3ff, 0x9, 0x10, 0x8}, {0x1501, 0x1000000, 0x1, 0x800, 0x7, 0x5}, {0xe0000000, 0x6183, 0x5, 0x800, 0x9ce, 0xfff}, {0x9, 0x3c249a30, 0x1, 0x2, 0xa, 0xfffffffd}, {0x3ff, 0x9, 0x2, 0x4, 0x7, 0x4}, {0x8f43, 0x9, 0x689, 0xfffffffb, 0x10001, 0x3}, {0x6bd, 0x6, 0x5, 0x1, 0x1, 0x10000}, {0x9, 0x8, 0x2, 0xd, 0x0, 0x5}, {0xfffffffc, 0x7, 0x3, 0x6, 0x1, 0x7ff}, {0x4, 0x4, 0x9, 0x7ff, 0x1, 0x1}, {0x401, 0x3, 0x9, 0x5b0e259f, 0xa, 0x9}, {0x1, 0x9, 0x9, 0xfff, 0x3}, {0x3, 0x0, 0x40, 0xa1, 0x0, 0x6}, {0x9, 0x300, 0x1, 0xd045, 0x9, 0x8}, {0x4, 0x3, 0xd89e, 0x2, 0x0, 0x47d7}, {0x2, 0x7fffffff, 0x9, 0x0, 0x8, 0x6}, {0x0, 0x6, 0x6, 0x3, 0x5, 0x1}, {0xfffffffc, 0x4, 0x10001, 0x8, 0x0, 0x3}, {0x7fffffff, 0x1000, 0x0, 0x6, 0xbc, 0x3}, {0xa, 0x1ff, 0x8, 0x0, 0x9, 0x9}, {0x8fee, 0x4, 0x6, 0xa8e, 0x3, 0x724}, {0x6, 0x6, 0x1, 0x8, 0x4, 0x3}, {0x0, 0x0, 0x4, 0x0, 0x5, 0x5}, {0x9, 0x7f, 0x401, 0x3, 0x9, 0x6}, {0x8, 0x2ae1, 0x5, 0x2, 0x8, 0x2}, {0x100, 0xcfe2, 0xb9, 0xd, 0x0, 0x3b9f}, {0x5, 0x280000, 0x8c8, 0xd0b, 0x7, 0x1}, {0x800, 0x80, 0xb, 0xec81, 0x3ff, 0x8}, {0x7f, 0x0, 0xa39, 0x0, 0x6, 0x6c}, {0x10000, 0xfffffffd, 0x0, 0x3ff, 0x6, 0x6}, {0x3, 0xfffffc00, 0x1, 0xffffffff, 0x4, 0x3}, {0x2, 0x34e, 0x4, 0x3, 0x280, 0x8}, {0x3, 0x40, 0x800, 0x1, 0x6bd, 0x9}, {0xa9e9, 0xfff, 0xf8, 0x1, 0x77, 0x100}, {0x7fff, 0x724b, 0x8, 0x5, 0x7, 0x2}, {0x80, 0x5, 0x4, 0xfffffffc, 0x100000, 0x3}, {0x8, 0x401, 0x10, 0x101, 0x1, 0x9}, {0x4, 0xf, 0x1, 0xe25, 0x7ff, 0x1}, {0xde, 0x8, 0x8, 0x5, 0x3, 0x2}, {0x1000, 0x8, 0x7, 0x7, 0x6, 0x3}, {0x8, 0xd, 0x10, 0x11c, 0xc4, 0x6}, {0x1800000, 0x7ff, 0x3, 0xfffffffa, 0x0, 0x701}, {0x6, 0x3, 0x100, 0x90b, 0x6, 0x7}, {0x0, 0x8, 0x1, 0x8, 0x7, 0xf}, {0x5, 0x5, 0x8001, 0x400, 0x48, 0x4}, {0x8, 0x5, 0x4, 0x5, 0x2, 0x5}, {0x51, 0x9, 0xfffffffa, 0x2, 0x6c21, 0xf}, {0x81, 0x8000, 0xffff, 0xb, 0xea61, 0x5c61}, {0x4, 0xe0e, 0x1ff, 0x10001, 0xe44b, 0xee}, {0x343, 0x7, 0x0, 0x7, 0x3, 0x6}, {0x80000001, 0x7, 0x3, 0xfffffffd, 0x7, 0x6}, {0x4, 0xa80, 0x750, 0x7, 0x7, 0x7fff}, {0x1, 0xea, 0xc, 0x800, 0x8, 0x3}, {0xd, 0x433, 0x7, 0xa6e9, 0x8, 0xb0}, {0x1, 0x8, 0x1, 0x5, 0x2, 0xb992}, {0x9, 0x1, 0x8, 0x8, 0x65, 0x8}, {0x6, 0x9, 0x3a, 0x65a4, 0x5, 0x8}, {0x9, 0x400, 0x7, 0x9, 0x4, 0xd}, {0x40, 0x54, 0x800, 0x1, 0xfff, 0x39df}, {0x0, 0x5, 0xfe4, 0x6, 0x6, 0x4}, {0x9, 0x9, 0x10, 0x7ba, 0x4}, {0x7, 0x1, 0x7, 0x85d, 0x5, 0x2}, {0x9fa, 0xfff, 0x5, 0x8, 0x4, 0x34}, {0x3a4c8, 0x8, 0xfffffff8, 0x81, 0x7f, 0x2}, {0x0, 0x9, 0x9, 0x4, 0x1, 0x4}, {0x80000000, 0x70, 0x6, 0x8, 0x4, 0x2}, {0x1, 0x70, 0x7c20, 0x0, 0x70000000, 0x5}, {0x3d, 0x100, 0x9, 0x45, 0x3, 0x6}, {0x9, 0x6c41, 0x0, 0x8, 0x5, 0x9}, {0x6, 0x4, 0x10001, 0x100, 0x2, 0x5b9}, {0x80000000, 0xfffffff9, 0x4, 0x2, 0x1ff, 0x401}, {0x10, 0x1, 0x9, 0x8, 0x4, 0x8}, {0x4, 0x100, 0x5, 0x100, 0x9, 0x2}, {0x100, 0x9, 0xd, 0x9, 0x1, 0x2bf}, {0x77, 0x3ff, 0x21492956, 0x4, 0x8, 0x1ff}, {0xfffffff8, 0x800, 0x9, 0x7, 0x4, 0x7}, {0x10001, 0x6, 0x80000000, 0x4, 0x2, 0xb}, {0x1, 0x8, 0xe, 0x2, 0x6, 0xe89c}, {0x7f, 0xf04, 0x800, 0xfffffff7, 0x6}, {0x6, 0xc9, 0x80, 0x1, 0xfffffffa, 0xffffffff}, {0x1, 0x9, 0xfffffff9, 0xb, 0x9, 0x100}, {0x9, 0x7, 0x9, 0xfffffffa, 0x9, 0x5}, {0x101, 0x3, 0x0, 0x6, 0x8001, 0x101}, {0x2c, 0x1a25e9b4, 0xff, 0x8, 0x5, 0x1000}, {0x7, 0x2, 0x0, 0x6, 0xc0000000, 0x2}], [{0x0, 0x1}, {0xb0802f51cdf549cd}, {}, {}, {0x3, 0x1}, {0x2, 0x1}, {0x1, 0x1}, {0x1, 0x1}, {0x3}, {}, {0x5, 0x1}, {0x1, 0x1}, {0x2, 0x1}, {0x3}, {0x2, 0x1}, {}, {0x5, 0x1}, {0x3, 0x1}, {}, {0x5, 0x1}, {0x0, 0x1}, {0x4, 0x1}, {0x0, 0x1}, {0x1, 0x1}, {0x5}, {0x2, 0x1}, {0x3, 0x1}, {0x5}, {}, {0x4}, {0x0, 0x1}, {}, {0x2}, {0x3}, {}, {0x1, 0x1}, {0x2}, {0x5}, {0x2}, {0x5}, {0x9}, {}, {0x5}, {0x6}, {0x0, 0x1}, {0x4}, {0x3}, {}, {0x1}, {0x5}, {0x4}, {0x0, 0x1}, {0x3, 0x1}, {0x5, 0x1}, {0x3, 0x1}, {0x2}, {0x4}, {0x4}, {0x5}, {0x5}, {0x0, 0x1}, {0x5, 0x1}, {0x4}, {0x1}, {0x2, 0x1}, {0x4}, {0x3, 0x1}, {0x1}, {0x2}, {0x4, 0x1}, {0x2, 0x1}, {0x0, 0x1}, {0x4}, {0x4, 0x1}, {}, {0x5, 0x1}, {0x5}, {0x2}, {0x2, 0x1}, {0x4, 0x1}, {0x2}, {0x3, 0x1}, {0x2, 0x1}, {0x1}, {0x4}, {0x4, 0x1}, {0x3}, {}, {0x5}, {0x2, 0x1}, {0x2}, {0x4}, {0x0, 0x1}, {0x5}, {0x1}, {0x2}, {0x4}, {}, {0x1}, {0x5, 0x1}, {0x5, 0x1}, {0x2}, {0x1}, {0x4, 0x1}, {0x2, 0x1}, {0x1, 0x1}, {0x3}, {0x5, 0x1}, {0x0, 0x1}, {0xa, 0x1}, {0x3, 0x1}, {0x2}, {0x1, 0x1}, {0x3, 0x1}, {0x2}, {}, {0x3, 0x1}, {0x4, 0x1}, {0x0, 0x1}, {0x4, 0x1}, {0x2}, {0x5, 0x1}, {0x0, 0x1}, {0x1, 0x1}, {0x5}, {0x5, 0x1}, {0x3, 0x1}, {0x2, 0x1}], 0x1}}, @TCA_PEDIT_KEYS_EX={0x100, 0x5, 0x0, 0x1, [{0xc, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6}]}, {0x44, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x5}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x1}, @TCA_PEDIT_KEY_EX_HTYPE={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x2}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x5}, @TCA_PEDIT_KEY_EX_HTYPE={0x6}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}]}, {0x24, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_CMD={0x6}]}, {0x2c, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x1}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x5}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}]}, {0xc, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x5}]}, {0x44, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x4}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x3}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x4}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x5}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x3}, @TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x4}]}, {0xc, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}]}]}]}, {0x6c, 0x6, "70b5e9b15f164751404812cab6306e197f0c865bd8a3ea445210cc5080d2a4ddc1c3e5c6136ffaaf468cc97fb71c36dd1122d772870b3c3c06ccfabc3e34ff87b1e7569c9b3b37468c381b898a8a3dd0db4c57aab4fd8222909075824e6318dda3774379a7b6267b"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x3}}}}, @m_mpls={0x1bc, 0x10, 0x0, 0x0, {{0x9}, {0x90, 0x2, 0x0, 0x1, [@TCA_MPLS_PARMS={0x1c, 0x2, {{0x7e34, 0x7, 0x8, 0x2, 0xcc}, 0x2}}, @TCA_MPLS_TC={0x5, 0x6, 0x3}, @TCA_MPLS_PROTO={0x6, 0x4, 0x7}, @TCA_MPLS_PARMS={0x1c, 0x2, {{0x4, 0x1000, 0x7, 0xf004, 0xffffff10}, 0x4}}, @TCA_MPLS_BOS={0x5, 0x8, 0x1}, @TCA_MPLS_TTL={0x5, 0x7, 0x2b}, @TCA_MPLS_TC={0x5, 0x6, 0x7}, @TCA_MPLS_BOS={0x5, 0x8, 0x1}, @TCA_MPLS_BOS={0x5, 0x8, 0x1}, @TCA_MPLS_PARMS={0x1c, 0x2, {{0x36, 0xa4000000, 0x4, 0x4, 0x2}, 0x4}}]}, {0x101, 0x6, "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"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x3}}}}]}, @TCA_BPF_CLASSID={0x8, 0x3, {0x9, 0xffe0}}, @TCA_BPF_OPS={{0x6, 0x4, 0x3}, {0x1c, 0x5, [{0x4, 0x0, 0x2, 0x4}, {0x0, 0xe7, 0x4, 0xc}, {0x3b8c, 0x5, 0xf8, 0x98}]}}, @TCA_BPF_FD={0x8, 0x6, r1}, @TCA_BPF_OPS={{0x6, 0x4, 0x1}, {0xc, 0x5, [{0xe43, 0xfc, 0x7, 0x9}]}}, @TCA_BPF_FLAGS_GEN={0x8}, @TCA_BPF_FLAGS={0x8, 0x8, 0x1}]}}]}, 0x405c}, 0x1, 0x0, 0x0, 0x81}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000300)=@newtfilter={0x3c, 0x2c, 0xd27, 0x70bd28, 0x8000, {0x0, 0x0, 0x0, 0x0, {0x9, 0xfff2}, {}, {0xb, 0x5}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_KEY_CT_STATE={0x6, 0x5b, 0x2}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x84}, 0x20000000) socket(0x10, 0x803, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0006}]}) r2 = semget$private(0x0, 0x6, 0x0) semtimedop(r2, &(0x7f00000003c0)=[{0x2, 0x4, 0x1800}], 0x1, 0x0) pipe2(&(0x7f0000001cc0), 0x800) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) openat$ptp0(0xffffffffffffff9c, &(0x7f0000000140), 0x2001, 0x0) clock_adjtime(0xffffffd3, &(0x7f0000000000)={0xb, 0x6, 0x0, 0x9, 0x9, 0xb, 0x651, 0xfffffffffffffffc, 0x9647, 0x0, 0x7fffffff, 0x0, 0x8, 0xb, 0x80000000000000, 0xcc1, 0x1, 0x1, 0x94d6, 0x0, 0x0, 0x5, 0x0, 0xfffffffffffffffa, 0x3, 0x3fd7}) socket$inet_udplite(0x2, 0x2, 0x88) mkdir(&(0x7f0000000540)='./file0\x00', 0x20) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x40, 0x1, 0x0, 0x0, 0x0, 0x5, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000, 0x2, @perf_config_ext={0xf60, 0xffffffff}, 0x1100, 0x5dd8, 0x3a65, 0x5, 0x0, 0x8, 0xfffb, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r3 = add_key$fscrypt_v1(&(0x7f0000000040), &(0x7f00000001c0)={'fscrypt:', @desc2}, &(0x7f00000000c0)={0x0, "f1a1173fb9462d3589e67197f90be6e423ceb0ab4912f9f6a31854ec98e950cfed21fcad7ff0fbcb566a0982f8938caa52dd8d39af14c31ed56ad59300", 0xffffffff}, 0x48, 0xffffffffffffffff) r4 = add_key$fscrypt_v1(&(0x7f0000000040), &(0x7f0000000080)={'fscrypt:', @desc2}, &(0x7f00000000c0)={0x0, "f1a1173fb9462d3589e67197f90be6e423ceb0ab4912f9f6a31854ec98e950cfed21fcad7ff0fbcb566a0982f8938caa52dd8d39af14c31ed56ad59300"}, 0x52ba, 0xffffffffffffffff) r5 = add_key$fscrypt_v1(&(0x7f0000000400), &(0x7f0000000440)={'fscrypt:', @desc1}, &(0x7f0000000480)={0x0, "6035ae1e0fe721441705322225930e6c1e3e2a51a92fd796bc34d7cf6e0236805b4377f7ab1a9b01c103a4c6a7ef54e6763fd7264c39ea00c508ba6062696138"}, 0x48, 0xfffffffffffffffe) keyctl$KEYCTL_MOVE(0x4, r5, r4, r4, 0x0) keyctl$KEYCTL_MOVE(0x4, r3, r3, 0x0, 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r7, &(0x7f00000002c0)=ANY=[@ANYBLOB="1500000065ffff018000000800395032303030"], 0x15) r8 = dup(r7) write$P9_RLERRORu(r8, &(0x7f0000000480)=ANY=[@ANYBLOB="530000000700004600f531132067043b2d877e09"], 0x53) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r6}, 0x2c, {'wfdno', 0x3d, r8}, 0x2c, {[], [], 0x6b}}) 123.205238ms ago: executing program 6 (id=2757): r0 = socket$vsock_stream(0x28, 0x1, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000005c0)={0x11, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x4, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x400000, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0xc, &(0x7f0000000300)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x62, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r1 = syz_genetlink_get_family_id$smc(&(0x7f0000000000), 0xffffffffffffffff) getsockopt(r0, 0x8, 0x8, &(0x7f00000000c0)=""/178, &(0x7f0000000200)=0xb2) getsockopt$inet_sctp6_SCTP_CONTEXT(0xffffffffffffffff, 0x84, 0x11, &(0x7f0000000380)={0x0, 0x7}, &(0x7f00000003c0)=0x8) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000680)={r2, 0xdc, &(0x7f0000000400)=[@in6={0xa, 0x0, 0x9, @private1, 0x3}, @in6={0xa, 0x4e23, 0x8, @dev={0xfe, 0x80, '\x00', 0x44}, 0x85b}, @in={0x2, 0x4e22, @loopback}, @in={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0xe}}, @in={0x2, 0x4e23, @rand_addr=0x64010102}, @in={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x3e}}, @in6={0xa, 0x4e20, 0xa, @empty, 0x400}, @in6={0xa, 0x4e20, 0x9, @dev={0xfe, 0x80, '\x00', 0x17}, 0x8000}, @in6={0xa, 0x4e20, 0x0, @private0={0xfc, 0x0, '\x00', 0x1}, 0x3}, @in={0x2, 0x4e23, @loopback}]}, &(0x7f00000006c0)=0x10) r3 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000400000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b70300000000000085000000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='sys_enter\x00', r4}, 0x10) readlink(0x0, 0x0, 0x0) sendmsg$SMC_PNETID_ADD(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)={0x40, r1, 0x1, 0x0, 0x0, {}, [@SMC_PNETID_ETHNAME={0x14, 0x2, 'bond0\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz0\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz1\x00'}]}, 0x40}}, 0x0) sendmsg$SMC_PNETID_DEL(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)={0x44, r1, 0xe27, 0x0, 0x0, {0x4, 0x7, 0x2}, [@SMC_PNETID_IBNAME={0x9, 0x3, 'syz2\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz0\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz1\x00'}]}, 0x44}, 0x1, 0x40030000000000}, 0x0) close_range(r0, r0, 0x2) 116.208768ms ago: executing program 5 (id=2808): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000181100"/20, @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000020850000000400000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x19, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000007"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @cgroup_sockopt=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, @void, @value}, 0x94) ioctl$F2FS_IOC_RESIZE_FS(r0, 0x4008f510, &(0x7f0000000300)=0x5) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000580)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000200)='fdb_delete\x00', r1}, 0x10) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r2, 0x8924, &(0x7f0000000000)={'bridge_slave_0\x00', @random="010000201000"}) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0xfc, 0x0, 0x7ffc0002}]}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=@newlink={0x38, 0x10, 0x401, 0x70bd2d, 0x0, {}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @gre={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_ENCAP_DPORT={0x6, 0x11, 0x4e20}]}}}]}, 0x38}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000240)=ANY=[@ANYBLOB="380000001800010000000000000000000200000000000006000000000c00090008000000", @ANYRES32, @ANYBLOB="08000400", @ANYRES32, @ANYBLOB="080005"], 0x38}}, 0x0) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000800)=ANY=[@ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x0, 0x10, &(0x7f0000000580)=@framed={{0x18, 0x5}, [@snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r4}, {0x7, 0x0, 0xb, 0x4}, {0x85, 0x0, 0x0, 0x95}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) connect$inet6(0xffffffffffffffff, &(0x7f0000000100)={0xa, 0x0, 0x4, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x11a, 0x1, &(0x7f00000001c0)=@gcm_256={{0x304}, "6ae04425ace3f60c", "acba84f0a6731f234db1cc7f3f382ad796bd667cb12ea99509873931d2873103", "0f9dafb4", "ec3fff9afd96e6c0"}, 0x38) writev(0xffffffffffffffff, &(0x7f0000000280)=[{&(0x7f00000002c0)="ec", 0x1}, {&(0x7f0000000200)="9c78", 0x2}], 0x2) r5 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000240)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@gettclass={0x24, 0x2a, 0x129, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {0xe, 0x3}, {}, {0x5, 0xfff1}}}, 0x24}, 0x1, 0x400000000000000}, 0x40004) setsockopt$inet6_IPV6_PKTINFO(0xffffffffffffffff, 0x29, 0x32, &(0x7f00000001c0)={@ipv4={'\x00', '\xff\xff', @empty}, r6}, 0x14) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) syz_mount_image$iso9660(&(0x7f0000000fc0), &(0x7f0000001000)='./file1\x00', 0x0, &(0x7f0000000d80)=ANY=[], 0x3, 0x7b6, &(0x7f0000001040)="$eJzs3U9oHOfZAPBn9Emxo4AJ+T7yGeM4Yzsf2HyusrtKlIoc0s1qJE0i7YrdVbEpJQmxXIyVP8SENj408SVpS0vpqcc015BLb4UeCj20PRWaQy89FAI5lRRaKC2loDKzu9ZK1j/Hkp2kv5+I3tl3nnnnmdnJPDtr7WwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAJE0ZiqVanIkIpbPp9trzLRbizvMH4z3iw3NDuuNSIr/4vDhONrrOvo/67MfLH6diuO9R8fjcNEcjmv3PXj/k/89OjJYfoeEPq2Te4xLIt4qkrrywurqymsHkMgd9L2f3/Ii/1grfs9lzbzTyhfrc1mad1rp9NRU5dH52U46my9knQudbraYNtpZvdtqp2caZ9Pq9PRkmk1caC0352bqC9mg84kv1SqVqfSZiaWs3u60mo8+M9FpzOcLC3lzroypVb4ZRcwTxYH4bN5Nu1l9MU0vXV5dmdwt1SKouqHn0IYD5/gj93/8+kd/vbxSHJDbDZL0D8xatVqrVacen378iUpltFapbeyobBI3ImIkoog4kIOWz5H9O3nDbRrp1f+IhcijGctxPtJIY6T8vf4zFodjJtrRisXi8e/HNs2/qf7/36N//u1O6x2u/4Mqf3R99rEo6/+J3qMT29T/4qS8OY+D+2l+0MtmuO9qvBHX4kq8EKuxGivx2h3M51P9jOzveHORRTPy6EQr8liMetmT9nvSmI6pmIpKPBfzMRudSGM28liILDpxITrRjaw8ohrRjizq0Y1WtCONM9GIs5FGNaZjOiYjjSwm4kK0YjmaMRczUS9HuRSXy/0+uSmvB7/9fPLW7z5+t5i+EVTdYUOS4sVcEfSXHYL6xfzh2FP9v7d/LG+MUP+/aA73n+e9xu/XqRtu21pZ/0fvdhoAAADAAUrKd9+TiBiLh8qp2Xwh+9rdTgsAAADYR+XfNR8vmrFi6qFIiuv/yhaRH97x3AAAAID9kZSfsUsiYjwe7k0NPi611ZsAAAAAwOdQ+e//J4pmPOLNssP1PwAAAHzBfGe7e+x/dE//Hr2dpUPJf/Wjl84/krxUL6bqL/X7+s1Xb4zYnT2WHOkPUjZTo9fuSyJitJEdTwZ3v/zXoV77STnCsfUbEG53r/+k3R5Lrm+fQOycQPkovh8nezEnL/bai4M5vbWMz+YL2USjtfBkNem/OdJ9/eXL34oo1v7d5uKRJC5dXl2ZePGV1YtlLteLUa6/1L89fHILuaz190A8tPUWj5UfxOivd7y33srw9o/0Fh/ZeZ3J8DrfjlO9mFPjvXZ84/YfLtZZnXiyGvX6kZFudr77+trQ1vezqN7mlr8dp3sxp8+c7jVbZFHbkMXLN2dRG85ib/tiz1m8e/LN83/7VSvJJnfLYvI2swC4Wy6Vd/1Zr0L3llXon2s9Rf3fVHcHdzW/pbPcpfVXGYPlh2rdaOxPdX87zvRizvReT4we26KuVLY4o796+dVf98/oj73/4598/cRvfrp9dVtLds7i/TjbC+w38cAvb8qiGKJa7tkfbKqq7xVLvLdtVe0s1JIYi5HenMHslW+svFyrTU5VHqtUHq/FWPlSod+oPQBsYdfv2NnDt/A8tvVVdQwq3gM3/qRgIl6MV2I1Lsa58tMGEfHw1qOOD/0ZwrldrlrHh77h5dwu15brsbXNsYdOJ7FN7OTQHvvfH5XN3w/uOQGAg3Zqlzq8l/p/bpfr7o21/Gzvi3MHV8exfS3fypcPeocAwH+ArP1JMt59J2m386XnqtPT1Xp3PkvbrcazaTufmcvSvNnN2o35enMuS5farW6rMXjjeCbrpJ3lpaVWu5vOttrpUquTny+/+T3tf/V7J1usN7t5o7O0kNU7WdpoNbv1RjedyTuNdGn56YW8M5+1y4U7S1kjn80b9W7eaqad1nK7kU2kaSfLhgLzmazZzWfzYrKZLrXzxXr7ekQsLC9m6UzWabTzpW6rN+BgXXlzttVeLIeduHnz/3Sn9zcAfBZcfePalRdWV1de2zixlmzu2XriD3uIuRqxdrc3EwAYMlylAQAAAAAAAAAAAACAz6abP65X9O76kb7hibG4heBNE4fi0yz1xZ34/w96T8t+DHg749y74Tm9p3+w3P39c8sTzz/11JXtYp5+8+j8H7OI3cfZ+v+Uq/fddPTGO0ci7vnZD3s9X7lTW/ph9LYiRm9p8bVkh5i7dkoCAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgG39OwAA///BfU8u") socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) ioctl$IMCLEAR_L2(r3, 0x80044946, &(0x7f00000000c0)) connect$unix(r7, &(0x7f000057eff8)=@file={0x1, './file0\x00'}, 0x6e) openat(0xffffffffffffff9c, 0x0, 0x141042, 0x0) mknodat(0xffffffffffffff9c, &(0x7f0000000140)='./file4\x00', 0x0, 0x0) 56.676649ms ago: executing program 6 (id=2809): r0 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x40, 0x1, 0x0, 0x0, 0x0, 0x5, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000, 0x2, @perf_bp={0x0, 0x1}, 0x1100, 0x5dd8, 0x3a65, 0x9, 0x0, 0x8, 0x5, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000b40)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) r2 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/sync_retries\x00', 0x2, 0x0) fgetxattr(r2, 0x0, &(0x7f0000000340)=""/190, 0xbe) 41.932679ms ago: executing program 3 (id=2810): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000a00)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r0}, 0x4) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x18, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa4000000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000000000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], &(0x7f0000000180)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000000)='kfree\x00', r1}, 0x10) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = socket$unix(0x1, 0x1, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000001c0)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {0x0, 0xb}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mq={0x7}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) 40.806109ms ago: executing program 5 (id=2811): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xb, &(0x7f0000000c00)=ANY=[@ANYBLOB="18000000000000000000000023ed0000180100002820702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000007100000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0xffffffff, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000400)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x3122}, {{0x18, 0x1, 0x1, 0x0, r2}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r3}, 0x10) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="5c0000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000340012800e00010069703665727370616e0000002000028006000200300000001400060000000000000000000000ffff7f00000108000a00", @ANYRES32], 0x5c}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x10) r4 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000000c0)={'bridge_slave_0\x00', 0x0}) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r6, 0x6, 0xe, &(0x7f0000000400)={@in6={{0xa, 0x4e24, 0x8000091, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x2}}, 0x0, 0x0, 0x32, 0x0, "0c9e089c9b4a04000bde79090003c458187eb46c2d996aff287154e786455261c425a7519cc253d04e6205abd307a0c4fa3838bf399ad5bd35f21907c7988d1300"}, 0xd8) setsockopt$inet6_tcp_TCP_MD5SIG(r6, 0x6, 0xe, &(0x7f0000000200)={@in6={{0xa, 0x4e24, 0x0, @private1={0xfc, 0x1, '\x00', 0xfe}, 0x2}}, 0x0, 0x0, 0x4, 0x0, "a1c1dd75a6843e10951cd4b347113e55eb499519becf7542c90bc21470e441225642855b5f2faed4a18d67efd5f2fdf98328de94410300"}, 0xd8) setsockopt$inet6_tcp_TCP_MD5SIG(r6, 0x6, 0xe, &(0x7f0000000300)={@in6={{0xa, 0x4e21, 0x1, @mcast2, 0x4}}, 0x0, 0x0, 0x11, 0x0, "2b20a9a47cddc63b223be606d7fa19f22a369ae751de81ca4d11e10450d766feb63b382d54ba4bb57a219cad5ddfc1e4fe760a1ce2ca64196953e92a07b3937730a33b6deca160d8c2fbff48eb964283"}, 0xd8) r7 = socket$nl_route(0x10, 0x3, 0x0) io_setup(0x8, &(0x7f0000000100)=0x0) r9 = accept$unix(0xffffffffffffffff, &(0x7f0000000540)=@abs, &(0x7f00000001c0)=0x6e) io_submit(r8, 0x3, &(0x7f0000000640)=[&(0x7f0000000140)={0x0, 0x0, 0x0, 0x5, 0x2, r7, &(0x7f0000000480)="4ee6426b78e82de7f25217c4695cbb9acd14dcc3b3e1bc0c39de9d53d67a6010b111e1b5b0e37362016e3ab0e5aeeeace92fd8fe5e7c5d0945f742ef0e3d866650dcc38e606a691537826e965c64b355a284c60bb1586bfb66b702498611cc21980e30a43682e5420ccd95e909d7ddbaf7a753d9d3af471c0648b0306c3763b248103ed0a099360e35b558320a09173478aa848233", 0x95, 0x8000000000000001, 0x0, 0x2, r1}, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x5, 0xe, r9, &(0x7f0000000240)="e13c678bf8d937cb32492004a3375af1bfc342623b6897b90f8ad1f83be7d3d28b1a02162b1db862ce6156c2b3f48c7c804a900d135f", 0x36, 0x5cac, 0x0, 0x2}, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x8, 0x0, r0, &(0x7f00000005c0)="de14c83542ca2ba4787ff383685f1501954eb6b865aa9474f7af2c235201e7fa6b98b54f5f89191dc2baeef748a152cfeb251600e9470d87c575c6c9990d8c0caebe650fb0ecf8f3fc88774666a79688cfd3e7e60f00618813a056d8a3a4952bff493c82c0a5c46b26e5df1de5ef6892", 0x70, 0x5}]) sendmsg$nl_route(r7, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000005a40)=ANY=[@ANYBLOB="b400000010000904000000000000000000002200", @ANYRES32=0x0, @ANYBLOB="fffffffed9526cfd8400128009000100766c616e000000007400028006000100000600000c000200367da1650e000000280003800c00010001800000002000000c000100a1000000c84200000c0001000800000008000000340004800c00010006000000ff0300000c00010004000000080000000c00010004000000020000000c000100050000000300000008000500", @ANYRES32=r5, @ANYBLOB='\b\x00\n\x00', @ANYRESOCT], 0xb4}}, 0x0) 0s ago: executing program 4 (id=2812): r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x3e, &(0x7f00000000c0)=0x1, 0x4) connect$llc(r0, &(0x7f0000000180)={0x1a, 0x1, 0x65, 0xc, 0x2, 0x4, @multicast}, 0x10) unshare(0x20000400) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x48) r2 = socket$igmp6(0xa, 0x3, 0x2) sendmmsg$inet6(r2, &(0x7f0000000000)=[{{&(0x7f00000019c0)={0xa, 0x0, 0x0, @local, 0xfffffffb}, 0x1c, 0x0, 0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB="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"], 0x138}}], 0x1, 0x24005efe) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x14, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x7a, 0x0, 0x0, 0x41000, 0x38, '\x00', 0x0, @lirc_mode2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r3}, 0x10) syz_clone(0x2c302080, 0x0, 0x0, 0x0, 0x0, 0x0) kernel console output (not intermixed with test programs): :sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=0 [ 117.469836][ T29] audit: type=1400 audit(1745598303.826:3395): avc: denied { append } for pid=7909 comm="syz.0.1688" name="001" dev="devtmpfs" ino=159 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=0 [ 117.492804][ T29] audit: type=1400 audit(1745598303.836:3396): avc: denied { map_create } for pid=7909 comm="syz.0.1688" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 117.512136][ T29] audit: type=1400 audit(1745598303.836:3397): avc: denied { prog_load } for pid=7909 comm="syz.0.1688" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 117.531257][ T29] audit: type=1400 audit(1745598303.836:3398): avc: denied { prog_load } for pid=7909 comm="syz.0.1688" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 117.550384][ T29] audit: type=1400 audit(1745598303.836:3399): avc: denied { mounton } for pid=7909 comm="syz.0.1688" path="/329/file0" dev="tmpfs" ino=1807 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=0 [ 117.573086][ T29] audit: type=1400 audit(1745598303.846:3400): avc: denied { read write } for pid=3310 comm="syz-executor" name="loop0" dev="devtmpfs" ino=100 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 117.634515][ T29] audit: type=1400 audit(1745598303.856:3401): avc: denied { create } for pid=7912 comm="syz.0.1689" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=0 [ 117.655270][ T29] audit: type=1400 audit(1745598303.856:3402): avc: denied { mounton } for pid=7912 comm="syz.0.1689" path="/330/file0" dev="tmpfs" ino=1813 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=0 [ 117.678082][ T29] audit: type=1400 audit(1745598303.876:3403): avc: denied { read write } for pid=3310 comm="syz-executor" name="loop0" dev="devtmpfs" ino=100 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 117.845860][ T7927] binfmt_misc: register: failed to install interpreter file ./file0 [ 118.012922][ T7933] lo speed is unknown, defaulting to 1000 [ 118.036592][ T7951] FAULT_INJECTION: forcing a failure. [ 118.036592][ T7951] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 118.049928][ T7951] CPU: 1 UID: 0 PID: 7951 Comm: syz.2.1707 Not tainted 6.15.0-rc3-syzkaller-00094-g02ddfb981de8 #0 PREEMPT(voluntary) [ 118.049964][ T7951] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 118.050042][ T7951] Call Trace: [ 118.050049][ T7951] [ 118.050058][ T7951] __dump_stack+0x1d/0x30 [ 118.050083][ T7951] dump_stack_lvl+0xe8/0x140 [ 118.050107][ T7951] dump_stack+0x15/0x1b [ 118.050127][ T7951] should_fail_ex+0x265/0x280 [ 118.050163][ T7951] should_fail+0xb/0x20 [ 118.050240][ T7951] should_fail_usercopy+0x1a/0x20 [ 118.050275][ T7951] _copy_to_user+0x20/0xa0 [ 118.050351][ T7951] simple_read_from_buffer+0xcb/0x140 [ 118.050412][ T7951] proc_fail_nth_read+0x100/0x140 [ 118.050453][ T7951] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 118.050477][ T7951] vfs_read+0x19d/0x6f0 [ 118.050498][ T7951] ? putname+0xda/0x100 [ 118.050526][ T7951] ? __rcu_read_unlock+0x4f/0x70 [ 118.050566][ T7951] ? __fget_files+0x184/0x1c0 [ 118.050589][ T7951] ksys_read+0xda/0x1a0 [ 118.050682][ T7951] __x64_sys_read+0x40/0x50 [ 118.050705][ T7951] x64_sys_call+0x2d77/0x2fb0 [ 118.050764][ T7951] do_syscall_64+0xd0/0x1a0 [ 118.050838][ T7951] ? clear_bhb_loop+0x25/0x80 [ 118.050863][ T7951] ? clear_bhb_loop+0x25/0x80 [ 118.050883][ T7951] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 118.050920][ T7951] RIP: 0033:0x7f55daeed37c [ 118.050933][ T7951] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 118.051030][ T7951] RSP: 002b:00007f55d9557030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 118.051053][ T7951] RAX: ffffffffffffffda RBX: 00007f55db115fa0 RCX: 00007f55daeed37c [ 118.051068][ T7951] RDX: 000000000000000f RSI: 00007f55d95570a0 RDI: 0000000000000004 [ 118.051083][ T7951] RBP: 00007f55d9557090 R08: 0000000000000000 R09: 0000000000000000 [ 118.051098][ T7951] R10: 52abe154ad664f64 R11: 0000000000000246 R12: 0000000000000001 [ 118.051113][ T7951] R13: 0000000000000000 R14: 00007f55db115fa0 R15: 00007ffc4d337328 [ 118.051136][ T7951] [ 118.489859][ T7967] lo speed is unknown, defaulting to 1000 [ 118.613701][ T7979] SELinux: syz.4.1720 (7979) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 118.975699][ T8013] x_tables: unsorted underflow at hook 1 [ 119.365456][ T8038] x_tables: duplicate underflow at hook 1 [ 119.761697][ T8057] lo speed is unknown, defaulting to 1000 [ 119.762466][ T8077] FAULT_INJECTION: forcing a failure. [ 119.762466][ T8077] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 119.780568][ T8077] CPU: 1 UID: 0 PID: 8077 Comm: syz.2.1761 Not tainted 6.15.0-rc3-syzkaller-00094-g02ddfb981de8 #0 PREEMPT(voluntary) [ 119.780655][ T8077] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 119.780670][ T8077] Call Trace: [ 119.780679][ T8077] [ 119.780688][ T8077] __dump_stack+0x1d/0x30 [ 119.780709][ T8077] dump_stack_lvl+0xe8/0x140 [ 119.780804][ T8077] dump_stack+0x15/0x1b [ 119.780825][ T8077] should_fail_ex+0x265/0x280 [ 119.780866][ T8077] should_fail+0xb/0x20 [ 119.780902][ T8077] should_fail_usercopy+0x1a/0x20 [ 119.780933][ T8077] strncpy_from_user+0x25/0x230 [ 119.780980][ T8077] ? __kmalloc_cache_noprof+0x189/0x320 [ 119.781020][ T8077] __se_sys_memfd_create+0x1ff/0x590 [ 119.781047][ T8077] __x64_sys_memfd_create+0x31/0x40 [ 119.781069][ T8077] x64_sys_call+0x122f/0x2fb0 [ 119.781123][ T8077] do_syscall_64+0xd0/0x1a0 [ 119.781184][ T8077] ? clear_bhb_loop+0x25/0x80 [ 119.781210][ T8077] ? clear_bhb_loop+0x25/0x80 [ 119.781248][ T8077] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 119.781268][ T8077] RIP: 0033:0x7f55daeee969 [ 119.781282][ T8077] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 119.781323][ T8077] RSP: 002b:00007f55d9535e18 EFLAGS: 00000202 ORIG_RAX: 000000000000013f [ 119.781341][ T8077] RAX: ffffffffffffffda RBX: 000000000000045c RCX: 00007f55daeee969 [ 119.781353][ T8077] RDX: 00007f55d9535ef0 RSI: 0000000000000000 RDI: 00007f55daf71444 [ 119.781365][ T8077] RBP: 0000200000002400 R08: 00007f55d9535bb7 R09: 00007f55d9535e40 [ 119.781376][ T8077] R10: 000000000000000a R11: 0000000000000202 R12: 0000200000000000 [ 119.781388][ T8077] R13: 00007f55d9535ef0 R14: 00007f55d9535eb0 R15: 0000200000000680 [ 119.781408][ T8077] [ 120.727693][ T8169] lo speed is unknown, defaulting to 1000 [ 120.944731][ T8202] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1820'. [ 121.115823][ T8202] lo speed is unknown, defaulting to 1000 [ 121.315421][ T8217] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1825'. [ 121.596541][ T8217] lo speed is unknown, defaulting to 1000 [ 121.706305][ T8246] can0: slcan on ttyS3. [ 121.814569][ T8246] can0 (unregistered): slcan off ttyS3. [ 121.881386][ T8256] FAULT_INJECTION: forcing a failure. [ 121.881386][ T8256] name failslab, interval 1, probability 0, space 0, times 0 [ 121.894236][ T8256] CPU: 0 UID: 0 PID: 8256 Comm: syz.3.1841 Not tainted 6.15.0-rc3-syzkaller-00094-g02ddfb981de8 #0 PREEMPT(voluntary) [ 121.894361][ T8256] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 121.894379][ T8256] Call Trace: [ 121.894385][ T8256] [ 121.894393][ T8256] __dump_stack+0x1d/0x30 [ 121.894416][ T8256] dump_stack_lvl+0xe8/0x140 [ 121.894437][ T8256] dump_stack+0x15/0x1b [ 121.894455][ T8256] should_fail_ex+0x265/0x280 [ 121.894600][ T8256] should_failslab+0x8c/0xb0 [ 121.894632][ T8256] kmem_cache_alloc_noprof+0x50/0x310 [ 121.894657][ T8256] ? security_inode_alloc+0x37/0x100 [ 121.894691][ T8256] security_inode_alloc+0x37/0x100 [ 121.894788][ T8256] inode_init_always_gfp+0x4b7/0x500 [ 121.894807][ T8256] ? __pfx_hugetlbfs_alloc_inode+0x10/0x10 [ 121.894824][ T8256] alloc_inode+0x58/0x170 [ 121.894864][ T8256] new_inode+0x1d/0xe0 [ 121.894888][ T8256] hugetlbfs_get_inode+0x7b/0x370 [ 121.894923][ T8256] hugetlb_file_setup+0x192/0x3d0 [ 121.895000][ T8256] ksys_mmap_pgoff+0x157/0x310 [ 121.895025][ T8256] x64_sys_call+0x1602/0x2fb0 [ 121.895047][ T8256] do_syscall_64+0xd0/0x1a0 [ 121.895072][ T8256] ? clear_bhb_loop+0x25/0x80 [ 121.895091][ T8256] ? clear_bhb_loop+0x25/0x80 [ 121.895109][ T8256] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 121.895126][ T8256] RIP: 0033:0x7fec064fe969 [ 121.895142][ T8256] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 121.895171][ T8256] RSP: 002b:00007fec04b67038 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 121.895191][ T8256] RAX: ffffffffffffffda RBX: 00007fec06725fa0 RCX: 00007fec064fe969 [ 121.895201][ T8256] RDX: 0000000000000000 RSI: 0000000000ff5000 RDI: 0000200000000000 [ 121.895211][ T8256] RBP: 00007fec04b67090 R08: ffffffffffffffff R09: 00000000d85fd000 [ 121.895222][ T8256] R10: 000200000005c831 R11: 0000000000000246 R12: 0000000000000001 [ 121.895232][ T8256] R13: 0000000000000000 R14: 00007fec06725fa0 R15: 00007ffc618fe2f8 [ 121.895287][ T8256] [ 121.956814][ T8263] FAULT_INJECTION: forcing a failure. [ 121.956814][ T8263] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 122.109789][ T8263] CPU: 1 UID: 0 PID: 8263 Comm: syz.0.1844 Not tainted 6.15.0-rc3-syzkaller-00094-g02ddfb981de8 #0 PREEMPT(voluntary) [ 122.109825][ T8263] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 122.109870][ T8263] Call Trace: [ 122.109878][ T8263] [ 122.109887][ T8263] __dump_stack+0x1d/0x30 [ 122.109908][ T8263] dump_stack_lvl+0xe8/0x140 [ 122.109926][ T8263] dump_stack+0x15/0x1b [ 122.109950][ T8263] should_fail_ex+0x265/0x280 [ 122.109979][ T8263] should_fail_alloc_page+0xf2/0x100 [ 122.110011][ T8263] __alloc_frozen_pages_noprof+0xff/0x360 [ 122.110040][ T8263] alloc_pages_mpol+0xb3/0x250 [ 122.110144][ T8263] vma_alloc_folio_noprof+0x1aa/0x300 [ 122.110185][ T8263] do_wp_page+0x673/0x23e0 [ 122.110246][ T8263] ? __rcu_read_lock+0x37/0x50 [ 122.110286][ T8263] handle_mm_fault+0x6dc/0x2ae0 [ 122.110395][ T8263] ? mas_walk+0xf2/0x120 [ 122.110492][ T8263] do_user_addr_fault+0x636/0x1090 [ 122.110595][ T8263] ? fpregs_assert_state_consistent+0x84/0xa0 [ 122.110632][ T8263] exc_page_fault+0x54/0xc0 [ 122.110655][ T8263] asm_exc_page_fault+0x26/0x30 [ 122.110677][ T8263] RIP: 0033:0x7eff9f1c0cc3 [ 122.110690][ T8263] Code: 1f 84 00 00 00 00 00 3d 00 01 00 00 75 29 45 31 f6 48 83 c4 18 44 89 f0 5b 5d 41 5c 41 5d 41 5e 41 5f c3 0f 1f 40 00 49 8b 0f <44> 88 34 01 49 83 47 10 01 eb 92 66 90 8d 90 ff fe ff ff 83 fa 1c [ 122.110771][ T8263] RSP: 002b:00007eff9d9664a0 EFLAGS: 00010202 [ 122.110789][ T8263] RAX: 0000000000005005 RBX: 00007eff9d966540 RCX: 00007eff95547000 [ 122.110865][ T8263] RDX: 00007eff9d9666e0 RSI: 0000000000000000 RDI: 00007eff9d9665e0 [ 122.110879][ T8263] RBP: 00000000000000cf R08: 0000000000000008 R09: 00000000000000a8 [ 122.110893][ T8263] R10: 00000000000000c4 R11: 00007eff9d966540 R12: 0000000000000001 [ 122.110926][ T8263] R13: 00007eff9f39bfc0 R14: 0000000000000010 R15: 00007eff9d9665e0 [ 122.110949][ T8263] [ 122.110961][ T8263] Huh VM_FAULT_OOM leaked out to the #PF handler. Retrying PF [ 122.450940][ T29] kauditd_printk_skb: 5797 callbacks suppressed [ 122.450955][ T29] audit: type=1400 audit(1745598308.856:9174): avc: denied { open } for pid=8285 comm="syz.3.1855" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=0 [ 122.455298][ T8286] SELinux: syz.2.1852 (8286) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 122.457420][ T29] audit: type=1400 audit(1745598308.856:9175): avc: denied { open } for pid=8285 comm="syz.3.1855" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=0 [ 122.509539][ T29] audit: type=1400 audit(1745598308.856:9176): avc: denied { map_create } for pid=8285 comm="syz.3.1855" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 122.533976][ T29] audit: type=1400 audit(1745598308.856:9177): avc: denied { create } for pid=8282 comm="syz.2.1852" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=0 [ 122.553686][ T29] audit: type=1400 audit(1745598308.856:9178): avc: denied { map_create } for pid=8282 comm="syz.2.1852" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 122.572916][ T29] audit: type=1400 audit(1745598308.886:9179): avc: denied { open } for pid=8283 comm="syz.0.1854" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=0 [ 122.592218][ T29] audit: type=1400 audit(1745598308.886:9180): avc: denied { prog_load } for pid=8283 comm="syz.0.1854" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 122.611326][ T29] audit: type=1400 audit(1745598308.886:9181): avc: denied { prog_load } for pid=8283 comm="syz.0.1854" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 122.630405][ T29] audit: type=1400 audit(1745598308.896:9182): avc: denied { create } for pid=8285 comm="syz.3.1855" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=0 [ 122.650171][ T29] audit: type=1400 audit(1745598308.896:9183): avc: denied { prog_load } for pid=8285 comm="syz.3.1855" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 122.675105][ T8286] FAULT_INJECTION: forcing a failure. [ 122.675105][ T8286] name failslab, interval 1, probability 0, space 0, times 0 [ 122.687790][ T8286] CPU: 0 UID: 0 PID: 8286 Comm: syz.2.1852 Not tainted 6.15.0-rc3-syzkaller-00094-g02ddfb981de8 #0 PREEMPT(voluntary) [ 122.687900][ T8286] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 122.687916][ T8286] Call Trace: [ 122.687925][ T8286] [ 122.688001][ T8286] __dump_stack+0x1d/0x30 [ 122.688028][ T8286] dump_stack_lvl+0xe8/0x140 [ 122.688051][ T8286] dump_stack+0x15/0x1b [ 122.688071][ T8286] should_fail_ex+0x265/0x280 [ 122.688148][ T8286] should_failslab+0x8c/0xb0 [ 122.688276][ T8286] __kmalloc_node_track_caller_noprof+0xa4/0x410 [ 122.688322][ T8286] ? security_context_to_sid_core+0x69/0x3b0 [ 122.688353][ T8286] kmemdup_nul+0x36/0xc0 [ 122.688387][ T8286] security_context_to_sid_core+0x69/0x3b0 [ 122.688481][ T8286] security_context_str_to_sid+0x33/0x40 [ 122.688513][ T8286] sel_write_user+0x1ee/0x440 [ 122.688561][ T8286] selinux_transaction_write+0xc3/0x110 [ 122.688587][ T8286] ? __pfx_selinux_transaction_write+0x10/0x10 [ 122.688618][ T8286] vfs_write+0x266/0x8d0 [ 122.688688][ T8286] ? __rcu_read_unlock+0x4f/0x70 [ 122.688718][ T8286] ? __fget_files+0x184/0x1c0 [ 122.688782][ T8286] ksys_write+0xda/0x1a0 [ 122.688829][ T8286] __x64_sys_write+0x40/0x50 [ 122.688853][ T8286] x64_sys_call+0x2cdd/0x2fb0 [ 122.688874][ T8286] do_syscall_64+0xd0/0x1a0 [ 122.688897][ T8286] ? clear_bhb_loop+0x25/0x80 [ 122.688987][ T8286] ? clear_bhb_loop+0x25/0x80 [ 122.689013][ T8286] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 122.689038][ T8286] RIP: 0033:0x7f55daeee969 [ 122.689110][ T8286] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 122.689131][ T8286] RSP: 002b:00007f55d9557038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 122.689151][ T8286] RAX: ffffffffffffffda RBX: 00007f55db115fa0 RCX: 00007f55daeee969 [ 122.689162][ T8286] RDX: 0000000000000027 RSI: 0000200000000080 RDI: 0000000000000003 [ 122.689174][ T8286] RBP: 00007f55d9557090 R08: 0000000000000000 R09: 0000000000000000 [ 122.689186][ T8286] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 122.689197][ T8286] R13: 0000000000000000 R14: 00007f55db115fa0 R15: 00007ffc4d337328 [ 122.689228][ T8286] [ 123.043145][ T8288] lo speed is unknown, defaulting to 1000 [ 123.134804][ T8309] FAULT_INJECTION: forcing a failure. [ 123.134804][ T8309] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 123.147972][ T8309] CPU: 1 UID: 0 PID: 8309 Comm: syz.4.1862 Not tainted 6.15.0-rc3-syzkaller-00094-g02ddfb981de8 #0 PREEMPT(voluntary) [ 123.148009][ T8309] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 123.148020][ T8309] Call Trace: [ 123.148025][ T8309] [ 123.148031][ T8309] __dump_stack+0x1d/0x30 [ 123.148072][ T8309] dump_stack_lvl+0xe8/0x140 [ 123.148093][ T8309] dump_stack+0x15/0x1b [ 123.148112][ T8309] should_fail_ex+0x265/0x280 [ 123.148216][ T8309] should_fail+0xb/0x20 [ 123.148305][ T8309] should_fail_usercopy+0x1a/0x20 [ 123.148332][ T8309] _copy_from_iter+0xcf/0xdd0 [ 123.148361][ T8309] ? __build_skb_around+0x1a0/0x200 [ 123.148393][ T8309] ? __alloc_skb+0x223/0x320 [ 123.148483][ T8309] ? __virt_addr_valid+0x1d1/0x240 [ 123.148512][ T8309] ? __check_object_size+0x37b/0x520 [ 123.148576][ T8309] netlink_sendmsg+0x47e/0x6b0 [ 123.148610][ T8309] ? __pfx_netlink_sendmsg+0x10/0x10 [ 123.148666][ T8309] __sock_sendmsg+0x142/0x180 [ 123.148688][ T8309] ____sys_sendmsg+0x329/0x4d0 [ 123.148717][ T8309] ___sys_sendmsg+0x17b/0x1d0 [ 123.148760][ T8309] __x64_sys_sendmsg+0xd4/0x160 [ 123.148882][ T8309] x64_sys_call+0x2999/0x2fb0 [ 123.148906][ T8309] do_syscall_64+0xd0/0x1a0 [ 123.149072][ T8309] ? clear_bhb_loop+0x25/0x80 [ 123.149100][ T8309] ? clear_bhb_loop+0x25/0x80 [ 123.149126][ T8309] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 123.149201][ T8309] RIP: 0033:0x7f654599e969 [ 123.149219][ T8309] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 123.149248][ T8309] RSP: 002b:00007f6544007038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 123.149269][ T8309] RAX: ffffffffffffffda RBX: 00007f6545bc5fa0 RCX: 00007f654599e969 [ 123.149310][ T8309] RDX: 0000000000000000 RSI: 0000200000006040 RDI: 0000000000000004 [ 123.149323][ T8309] RBP: 00007f6544007090 R08: 0000000000000000 R09: 0000000000000000 [ 123.149338][ T8309] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 123.149352][ T8309] R13: 0000000000000000 R14: 00007f6545bc5fa0 R15: 00007ffe3451ec28 [ 123.149375][ T8309] [ 124.570516][ T8423] lo speed is unknown, defaulting to 1000 [ 125.130362][ T8455] lo speed is unknown, defaulting to 1000 [ 125.277034][ T8456] lo speed is unknown, defaulting to 1000 [ 125.545423][ T8484] lo speed is unknown, defaulting to 1000 [ 126.533791][ T8533] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1962'. [ 126.633794][ T8487] lo speed is unknown, defaulting to 1000 [ 126.773130][ T8497] lo speed is unknown, defaulting to 1000 [ 127.072511][ T8560] lo speed is unknown, defaulting to 1000 [ 127.459360][ T29] kauditd_printk_skb: 1053 callbacks suppressed [ 127.459378][ T29] audit: type=1400 audit(1745598313.866:10237): avc: denied { prog_load } for pid=8579 comm="syz.1.1982" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 127.522481][ T29] audit: type=1400 audit(1745598313.896:10238): avc: denied { map_create } for pid=8579 comm="syz.1.1982" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 127.541827][ T29] audit: type=1400 audit(1745598313.896:10239): avc: denied { prog_load } for pid=8579 comm="syz.1.1982" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 127.560983][ T29] audit: type=1400 audit(1745598313.896:10240): avc: denied { prog_load } for pid=8579 comm="syz.1.1982" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 127.580228][ T29] audit: type=1400 audit(1745598313.896:10241): avc: denied { map_create } for pid=8579 comm="syz.1.1982" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 127.599566][ T29] audit: type=1400 audit(1745598313.896:10242): avc: denied { read write } for pid=3309 comm="syz-executor" name="loop3" dev="devtmpfs" ino=103 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 127.623887][ T29] audit: type=1400 audit(1745598313.906:10243): avc: denied { map_create } for pid=8581 comm="syz.3.1983" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 127.643189][ T29] audit: type=1400 audit(1745598313.906:10244): avc: denied { prog_load } for pid=8581 comm="syz.3.1983" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 127.662428][ T29] audit: type=1400 audit(1745598313.906:10245): avc: denied { prog_load } for pid=8581 comm="syz.3.1983" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 127.681648][ T29] audit: type=1400 audit(1745598313.906:10246): avc: denied { allowed } for pid=8581 comm="syz.3.1983" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=0 [ 127.874117][ T8595] lo speed is unknown, defaulting to 1000 [ 128.083996][ T8609] futex_wake_op: syz.1.1995 tries to shift op by 32; fix this program [ 129.229363][ T8653] lo speed is unknown, defaulting to 1000 [ 130.078470][ T8725] lo speed is unknown, defaulting to 1000 [ 130.875910][ T8777] lo speed is unknown, defaulting to 1000 [ 131.004330][ T8786] FAULT_INJECTION: forcing a failure. [ 131.004330][ T8786] name failslab, interval 1, probability 0, space 0, times 0 [ 131.017103][ T8786] CPU: 0 UID: 0 PID: 8786 Comm: syz.0.2074 Not tainted 6.15.0-rc3-syzkaller-00094-g02ddfb981de8 #0 PREEMPT(voluntary) [ 131.017198][ T8786] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 131.017211][ T8786] Call Trace: [ 131.017218][ T8786] [ 131.017226][ T8786] __dump_stack+0x1d/0x30 [ 131.017307][ T8786] dump_stack_lvl+0xe8/0x140 [ 131.017330][ T8786] dump_stack+0x15/0x1b [ 131.017348][ T8786] should_fail_ex+0x265/0x280 [ 131.017395][ T8786] ? __pfx_cond_bools_destroy+0x10/0x10 [ 131.017461][ T8786] should_failslab+0x8c/0xb0 [ 131.017484][ T8786] __kmalloc_noprof+0xa5/0x3e0 [ 131.017577][ T8786] ? hashtab_duplicate+0x55/0x360 [ 131.017604][ T8786] ? __pfx_cond_bools_destroy+0x10/0x10 [ 131.017639][ T8786] hashtab_duplicate+0x55/0x360 [ 131.017663][ T8786] ? __kmalloc_noprof+0x1dd/0x3e0 [ 131.017741][ T8786] ? cond_policydb_dup+0xa3/0x4e0 [ 131.017868][ T8786] ? __pfx_cond_bools_copy+0x10/0x10 [ 131.017962][ T8786] cond_policydb_dup+0xd2/0x4e0 [ 131.018013][ T8786] security_set_bools+0xa0/0x340 [ 131.018109][ T8786] sel_commit_bools_write+0x1ea/0x270 [ 131.018142][ T8786] vfs_writev+0x3eb/0x870 [ 131.018225][ T8786] ? __pfx_sel_commit_bools_write+0x10/0x10 [ 131.018260][ T8786] ? mutex_lock+0xd/0x30 [ 131.018280][ T8786] do_writev+0xe7/0x210 [ 131.018319][ T8786] __x64_sys_writev+0x45/0x50 [ 131.018419][ T8786] x64_sys_call+0x2006/0x2fb0 [ 131.018442][ T8786] do_syscall_64+0xd0/0x1a0 [ 131.018471][ T8786] ? clear_bhb_loop+0x25/0x80 [ 131.018496][ T8786] ? clear_bhb_loop+0x25/0x80 [ 131.018532][ T8786] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 131.018551][ T8786] RIP: 0033:0x7eff9f2fe969 [ 131.018565][ T8786] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 131.018583][ T8786] RSP: 002b:00007eff9d967038 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 131.018600][ T8786] RAX: ffffffffffffffda RBX: 00007eff9f525fa0 RCX: 00007eff9f2fe969 [ 131.018613][ T8786] RDX: 0000000000000001 RSI: 0000200000000080 RDI: 0000000000000003 [ 131.018683][ T8786] RBP: 00007eff9d967090 R08: 0000000000000000 R09: 0000000000000000 [ 131.018697][ T8786] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 131.018773][ T8786] R13: 0000000000000000 R14: 00007eff9f525fa0 R15: 00007fff9254ff68 [ 131.018799][ T8786] [ 131.408331][ T8795] lo speed is unknown, defaulting to 1000 [ 131.764932][ T8813] lo speed is unknown, defaulting to 1000 [ 132.414813][ T8847] FAULT_INJECTION: forcing a failure. [ 132.414813][ T8847] name failslab, interval 1, probability 0, space 0, times 0 [ 132.427519][ T8847] CPU: 0 UID: 0 PID: 8847 Comm: syz.4.2100 Not tainted 6.15.0-rc3-syzkaller-00094-g02ddfb981de8 #0 PREEMPT(voluntary) [ 132.427550][ T8847] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 132.427561][ T8847] Call Trace: [ 132.427567][ T8847] [ 132.427574][ T8847] __dump_stack+0x1d/0x30 [ 132.427593][ T8847] dump_stack_lvl+0xe8/0x140 [ 132.427609][ T8847] dump_stack+0x15/0x1b [ 132.427628][ T8847] should_fail_ex+0x265/0x280 [ 132.427735][ T8847] should_failslab+0x8c/0xb0 [ 132.427763][ T8847] __kmalloc_node_track_caller_noprof+0xa4/0x410 [ 132.427846][ T8847] ? sidtab_sid2str_get+0xa0/0x130 [ 132.427874][ T8847] kmemdup_noprof+0x2b/0x70 [ 132.428029][ T8847] sidtab_sid2str_get+0xa0/0x130 [ 132.428091][ T8847] security_sid_to_context_core+0x1eb/0x2e0 [ 132.428116][ T8847] security_sid_to_context+0x27/0x40 [ 132.428183][ T8847] avc_audit_post_callback+0x10f/0x520 [ 132.428220][ T8847] ? __pfx_avc_audit_post_callback+0x10/0x10 [ 132.428248][ T8847] common_lsm_audit+0x1b8/0x230 [ 132.428267][ T8847] ? __pfx_avc_audit_post_callback+0x10/0x10 [ 132.428386][ T8847] slow_avc_audit+0x104/0x140 [ 132.428417][ T8847] avc_has_perm+0x128/0x150 [ 132.428504][ T8847] sel_write_validatetrans+0xe3/0x370 [ 132.428538][ T8847] ? __pfx_sel_write_validatetrans+0x10/0x10 [ 132.428572][ T8847] vfs_write+0x266/0x8d0 [ 132.428596][ T8847] ? __rcu_read_unlock+0x4f/0x70 [ 132.428710][ T8847] ? __fget_files+0x184/0x1c0 [ 132.428741][ T8847] ksys_write+0xda/0x1a0 [ 132.428766][ T8847] __x64_sys_write+0x40/0x50 [ 132.428785][ T8847] x64_sys_call+0x2cdd/0x2fb0 [ 132.428858][ T8847] do_syscall_64+0xd0/0x1a0 [ 132.428942][ T8847] ? clear_bhb_loop+0x25/0x80 [ 132.428968][ T8847] ? clear_bhb_loop+0x25/0x80 [ 132.428995][ T8847] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 132.429088][ T8847] RIP: 0033:0x7f654599e969 [ 132.429105][ T8847] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 132.429128][ T8847] RSP: 002b:00007f6544007038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 132.429150][ T8847] RAX: ffffffffffffffda RBX: 00007f6545bc5fa0 RCX: 00007f654599e969 [ 132.429165][ T8847] RDX: 0000000000000061 RSI: 0000000000000000 RDI: 0000000000000003 [ 132.429180][ T8847] RBP: 00007f6544007090 R08: 0000000000000000 R09: 0000000000000000 [ 132.429256][ T8847] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 132.429271][ T8847] R13: 0000000000000000 R14: 00007f6545bc5fa0 R15: 00007ffe3451ec28 [ 132.429293][ T8847] [ 132.726531][ T29] kauditd_printk_skb: 1009 callbacks suppressed [ 132.726607][ T29] audit: type=1400 audit(1745598319.136:11256): avc: denied { read write } for pid=3309 comm="syz-executor" name="loop3" dev="devtmpfs" ino=103 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 132.814503][ T29] audit: type=1400 audit(1745598319.186:11257): avc: denied { wake_alarm } for pid=8848 comm="syz.1.2102" capability=35 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=0 [ 132.835979][ T29] audit: type=1400 audit(1745598319.186:11258): avc: denied { prog_load } for pid=8848 comm="syz.1.2102" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 132.855281][ T29] audit: type=1400 audit(1745598319.186:11259): avc: denied { prog_load } for pid=8848 comm="syz.1.2102" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 132.874565][ T29] audit: type=1400 audit(1745598319.186:11260): avc: denied { create } for pid=8848 comm="syz.1.2102" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=0 [ 132.894328][ T29] audit: type=1400 audit(1745598319.186:11261): avc: denied { prog_load } for pid=8848 comm="syz.1.2102" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 132.913832][ T29] audit: type=1400 audit(1745598319.186:11262): avc: denied { prog_load } for pid=8849 comm="syz.0.2101" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 132.933022][ T29] audit: type=1400 audit(1745598319.216:11263): avc: denied { prog_load } for pid=8852 comm="syz.1.2104" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 132.952246][ T29] audit: type=1400 audit(1745598319.216:11264): avc: denied { create } for pid=8852 comm="syz.1.2104" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=0 [ 132.971861][ T29] audit: type=1400 audit(1745598319.216:11265): avc: denied { prog_load } for pid=8852 comm="syz.1.2104" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 133.047581][ T8865] serio: Serial port ptm0 [ 133.440048][ T8891] FAULT_INJECTION: forcing a failure. [ 133.440048][ T8891] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 133.453236][ T8891] CPU: 0 UID: 0 PID: 8891 Comm: syz.0.2119 Not tainted 6.15.0-rc3-syzkaller-00094-g02ddfb981de8 #0 PREEMPT(voluntary) [ 133.453264][ T8891] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 133.453280][ T8891] Call Trace: [ 133.453287][ T8891] [ 133.453334][ T8891] __dump_stack+0x1d/0x30 [ 133.453359][ T8891] dump_stack_lvl+0xe8/0x140 [ 133.453439][ T8891] dump_stack+0x15/0x1b [ 133.453459][ T8891] should_fail_ex+0x265/0x280 [ 133.453537][ T8891] should_fail+0xb/0x20 [ 133.453562][ T8891] should_fail_usercopy+0x1a/0x20 [ 133.453597][ T8891] fpu__restore_sig+0x122/0xa60 [ 133.453633][ T8891] ? should_fail_ex+0xdb/0x280 [ 133.453702][ T8891] __ia32_sys_rt_sigreturn+0x29f/0x350 [ 133.453760][ T8891] x64_sys_call+0x2e8a/0x2fb0 [ 133.453779][ T8891] do_syscall_64+0xd0/0x1a0 [ 133.453807][ T8891] ? clear_bhb_loop+0x25/0x80 [ 133.453847][ T8891] ? clear_bhb_loop+0x25/0x80 [ 133.453872][ T8891] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 133.453961][ T8891] RIP: 0033:0x7eff9f2fe967 [ 133.453975][ T8891] Code: ff ff ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 <0f> 05 48 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 [ 133.454003][ T8891] RSP: 002b:00007eff9d967038 EFLAGS: 00000246 [ 133.454017][ T8891] RAX: 0000000000000013 RBX: 00007eff9f525fa0 RCX: 00007eff9f2fe969 [ 133.454028][ T8891] RDX: 0000000000000001 RSI: 0000200000001b00 RDI: 0000000000000004 [ 133.454039][ T8891] RBP: 00007eff9d967090 R08: 0000000000000000 R09: 0000000000000000 [ 133.454053][ T8891] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 133.454067][ T8891] R13: 0000000000000000 R14: 00007eff9f525fa0 R15: 00007fff9254ff68 [ 133.454089][ T8891] [ 133.746144][ T8884] lo speed is unknown, defaulting to 1000 Apr 25 16:25:20 syzkaller daemon.err dhcpcd[3043]: ps_sendpsmmsg: Connection refused Apr 25 16:25:20 syzkaller daemon.err dhcpcd[3043]: ps_root_recvmsgcb: failed to send message to pid 5543: Connection refused Apr 25 16:25:21 syzkaller daemon.err dhcpcd[3043]: ps_sendpsmmsg: Connection refused Apr 25 16:25:21 syzkaller daemon.err dhcpcd[3043]: ps_root_recvmsgcb: failed to send message to pid 5636: Connection refused Apr 25 16:25:21 syzkaller daemon.err dhcpcd[3043]: ps_sendpsmmsg: Connection refused Apr 25 16:25:21 syzkaller daemon.err dhcpcd[3043]: ps_root_recvmsgcb: failed to send message to pid 5687: Connection refused [ 135.689968][ T9009] lo speed is unknown, defaulting to 1000 Apr 25 16:25:23 syzkaller daemon.err dhcpcd[3043]: ps_sendpsmmsg: Connection refused Apr 25 16:25:23 syzkaller daemon.err dhcpcd[3043]: ps_root_recvmsgcb: failed to send message to pid 5659: Connection refused [ 136.941089][ T9090] FAULT_INJECTION: forcing a failure. [ 136.941089][ T9090] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 136.954217][ T9090] CPU: 0 UID: 0 PID: 9090 Comm: syz.1.2206 Not tainted 6.15.0-rc3-syzkaller-00094-g02ddfb981de8 #0 PREEMPT(voluntary) [ 136.954259][ T9090] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 136.954302][ T9090] Call Trace: [ 136.954309][ T9090] [ 136.954316][ T9090] __dump_stack+0x1d/0x30 [ 136.954338][ T9090] dump_stack_lvl+0xe8/0x140 [ 136.954426][ T9090] dump_stack+0x15/0x1b [ 136.954444][ T9090] should_fail_ex+0x265/0x280 [ 136.954474][ T9090] should_fail+0xb/0x20 [ 136.954560][ T9090] should_fail_usercopy+0x1a/0x20 [ 136.954593][ T9090] _copy_from_user+0x1c/0xb0 [ 136.954609][ T9090] ___sys_recvmsg+0xaa/0x370 [ 136.954705][ T9090] ? _parse_integer+0x27/0x40 [ 136.954740][ T9090] do_recvmmsg+0x1ef/0x540 [ 136.954780][ T9090] ? fput+0x8f/0xc0 [ 136.954812][ T9090] __x64_sys_recvmmsg+0xe5/0x170 [ 136.954845][ T9090] x64_sys_call+0x1c6a/0x2fb0 [ 136.954928][ T9090] do_syscall_64+0xd0/0x1a0 [ 136.954966][ T9090] ? clear_bhb_loop+0x25/0x80 [ 136.955079][ T9090] ? clear_bhb_loop+0x25/0x80 [ 136.955104][ T9090] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 136.955127][ T9090] RIP: 0033:0x7efedc15e969 [ 136.955142][ T9090] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 136.955198][ T9090] RSP: 002b:00007efeda7c7038 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 136.955217][ T9090] RAX: ffffffffffffffda RBX: 00007efedc385fa0 RCX: 00007efedc15e969 [ 136.955228][ T9090] RDX: 0000000000000001 RSI: 00002000000037c0 RDI: 0000000000000003 [ 136.955237][ T9090] RBP: 00007efeda7c7090 R08: 0000000000000000 R09: 0000000000000000 [ 136.955247][ T9090] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 136.955256][ T9090] R13: 0000000000000000 R14: 00007efedc385fa0 R15: 00007ffce7f98f38 [ 136.955271][ T9090] [ 137.184300][ T9073] lo speed is unknown, defaulting to 1000 [ 137.744477][ T29] kauditd_printk_skb: 739 callbacks suppressed [ 137.744495][ T29] audit: type=1400 audit(1745598324.136:12003): avc: denied { prog_load } for pid=9131 comm="syz.3.2224" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 137.807049][ T29] audit: type=1326 audit(1745598324.176:12004): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9129 comm="syz.0.2223" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7eff9f2fe969 code=0x0 [ 137.830017][ T29] audit: type=1400 audit(1745598324.176:12005): avc: denied { map_create } for pid=9133 comm="syz.1.2225" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 137.849346][ T29] audit: type=1400 audit(1745598324.176:12006): avc: denied { prog_load } for pid=9133 comm="syz.1.2225" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 137.868574][ T29] audit: type=1400 audit(1745598324.176:12007): avc: denied { prog_load } for pid=9133 comm="syz.1.2225" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 137.887914][ T29] audit: type=1400 audit(1745598324.176:12008): avc: denied { prog_load } for pid=9133 comm="syz.1.2225" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 137.907102][ T29] audit: type=1400 audit(1745598324.176:12009): avc: denied { create } for pid=9133 comm="syz.1.2225" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=0 [ 137.926951][ T29] audit: type=1400 audit(1745598324.176:12010): avc: denied { map_create } for pid=9133 comm="syz.1.2225" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 137.946338][ T29] audit: type=1400 audit(1745598324.176:12011): avc: denied { prog_load } for pid=9133 comm="syz.1.2225" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 137.965584][ T29] audit: type=1326 audit(1745598324.176:12012): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9133 comm="syz.1.2225" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efedc15e969 code=0x7ffc0000 [ 139.684449][ T9252] FAULT_INJECTION: forcing a failure. [ 139.684449][ T9252] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 139.697768][ T9252] CPU: 0 UID: 0 PID: 9252 Comm: syz.1.2275 Not tainted 6.15.0-rc3-syzkaller-00094-g02ddfb981de8 #0 PREEMPT(voluntary) [ 139.697804][ T9252] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 139.697819][ T9252] Call Trace: [ 139.697826][ T9252] [ 139.697858][ T9252] __dump_stack+0x1d/0x30 [ 139.697886][ T9252] dump_stack_lvl+0xe8/0x140 [ 139.697911][ T9252] dump_stack+0x15/0x1b [ 139.697937][ T9252] should_fail_ex+0x265/0x280 [ 139.697975][ T9252] should_fail+0xb/0x20 [ 139.698008][ T9252] should_fail_usercopy+0x1a/0x20 [ 139.698067][ T9252] copy_fpstate_to_sigframe+0x62b/0x7d0 [ 139.698122][ T9252] ? copy_fpstate_to_sigframe+0xe5/0x7d0 [ 139.698165][ T9252] get_sigframe+0x34d/0x490 [ 139.698230][ T9252] ? get_signal+0xdc8/0xf70 [ 139.698325][ T9252] x64_setup_rt_frame+0xa8/0x580 [ 139.698390][ T9252] arch_do_signal_or_restart+0x26e/0x480 [ 139.698432][ T9252] syscall_exit_to_user_mode+0x68/0xb0 [ 139.698458][ T9252] do_syscall_64+0xdd/0x1a0 [ 139.698558][ T9252] ? clear_bhb_loop+0x25/0x80 [ 139.698583][ T9252] ? clear_bhb_loop+0x25/0x80 [ 139.698612][ T9252] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 139.698690][ T9252] RIP: 0033:0x7efedc15e967 [ 139.698707][ T9252] Code: ff ff ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 <0f> 05 48 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 [ 139.698747][ T9252] RSP: 002b:00007efeda7c7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000113 [ 139.698771][ T9252] RAX: 0000000000000113 RBX: 00007efedc385fa0 RCX: 00007efedc15e969 [ 139.698786][ T9252] RDX: 0000000000000006 RSI: 0000000000000000 RDI: 0000000000000003 [ 139.698800][ T9252] RBP: 00007efeda7c7090 R08: 0000000000000007 R09: 0000000000000009 [ 139.698816][ T9252] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 139.698897][ T9252] R13: 0000000000000000 R14: 00007efedc385fa0 R15: 00007ffce7f98f38 [ 139.698931][ T9252] [ 140.107443][ T9272] smc: net device bond0 erased user defined pnetid SYZ2 [ 140.305653][ T9276] smc: net device bond0 applied user defined pnetid SYZ2 [ 140.305854][ T9276] smc: net device bond0 erased user defined pnetid SYZ2 [ 140.852681][ T9289] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2290'. [ 140.852699][ T9289] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2290'. [ 141.265848][ T9322] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2303'. [ 141.274793][ T9322] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2303'. [ 141.358823][ T9325] loop3: detected capacity change from 0 to 128 [ 141.385384][ T9325] syz.3.2304: attempt to access beyond end of device [ 141.385384][ T9325] loop3: rw=2049, sector=145, nr_sectors = 8 limit=128 [ 141.409053][ T9325] syz.3.2304: attempt to access beyond end of device [ 141.409053][ T9325] loop3: rw=2049, sector=161, nr_sectors = 8 limit=128 [ 141.433198][ T9325] syz.3.2304: attempt to access beyond end of device [ 141.433198][ T9325] loop3: rw=2049, sector=177, nr_sectors = 8 limit=128 [ 141.453584][ T9325] syz.3.2304: attempt to access beyond end of device [ 141.453584][ T9325] loop3: rw=2049, sector=193, nr_sectors = 8 limit=128 [ 141.467272][ T9325] syz.3.2304: attempt to access beyond end of device [ 141.467272][ T9325] loop3: rw=2049, sector=209, nr_sectors = 8 limit=128 [ 141.500350][ T9325] syz.3.2304: attempt to access beyond end of device [ 141.500350][ T9325] loop3: rw=2049, sector=225, nr_sectors = 8 limit=128 [ 141.544625][ T9325] syz.3.2304: attempt to access beyond end of device [ 141.544625][ T9325] loop3: rw=2049, sector=241, nr_sectors = 8 limit=128 [ 141.579922][ T9325] syz.3.2304: attempt to access beyond end of device [ 141.579922][ T9325] loop3: rw=2049, sector=257, nr_sectors = 8 limit=128 [ 141.595778][ T9325] syz.3.2304: attempt to access beyond end of device [ 141.595778][ T9325] loop3: rw=2049, sector=273, nr_sectors = 8 limit=128 [ 141.613044][ T9325] syz.3.2304: attempt to access beyond end of device [ 141.613044][ T9325] loop3: rw=2049, sector=289, nr_sectors = 8 limit=128 [ 141.647054][ T9325] Buffer I/O error on dev loop3, logical block 345, lost async page write [ 141.684129][ T9325] Buffer I/O error on dev loop3, logical block 346, lost async page write [ 141.693535][ T9325] Buffer I/O error on dev loop3, logical block 347, lost async page write [ 141.702196][ T9325] Buffer I/O error on dev loop3, logical block 348, lost async page write [ 141.711476][ T9325] Buffer I/O error on dev loop3, logical block 349, lost async page write [ 141.720246][ T9325] Buffer I/O error on dev loop3, logical block 350, lost async page write [ 141.731163][ T9325] Buffer I/O error on dev loop3, logical block 351, lost async page write [ 142.101396][ T9358] loop0: detected capacity change from 0 to 4096 [ 142.108468][ T9358] EXT4-fs: Ignoring removed nomblk_io_submit option [ 142.119879][ T9358] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 142.292502][ T9360] lo speed is unknown, defaulting to 1000 [ 142.822278][ T29] kauditd_printk_skb: 561 callbacks suppressed [ 142.822295][ T29] audit: type=1400 audit(1745598329.226:12562): avc: denied { create } for pid=9368 comm="syz.3.2322" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 142.874426][ T29] audit: type=1400 audit(1745598329.256:12563): avc: denied { ioctl } for pid=9368 comm="syz.3.2322" path="socket:[24378]" dev="sockfs" ino=24378 ioctlcmd=0x4942 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 143.085540][ T29] audit: type=1400 audit(1745598329.496:12564): avc: denied { mount } for pid=9375 comm="syz.2.2325" name="/" dev="9p" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 143.119552][ T29] audit: type=1400 audit(1745598329.516:12565): avc: denied { mounton } for pid=9375 comm="syz.2.2325" path="/415/file0" dev="9p" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 143.142215][ T29] audit: type=1400 audit(1745598329.526:12566): avc: denied { unmount } for pid=3310 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 143.181775][ T3310] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 143.193858][ T29] audit: type=1400 audit(1745598329.596:12567): avc: denied { unmount } for pid=3312 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 143.704070][ T9414] netlink: 'syz.0.2341': attribute type 10 has an invalid length. [ 143.733815][ T29] audit: type=1326 audit(1745598330.066:12568): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9411 comm="syz.0.2341" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7eff9f2fe969 code=0x7ffc0000 [ 143.757392][ T29] audit: type=1326 audit(1745598330.076:12569): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9411 comm="syz.0.2341" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7eff9f2fe969 code=0x7ffc0000 [ 143.781190][ T29] audit: type=1326 audit(1745598330.076:12570): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9411 comm="syz.0.2341" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7eff9f2fe969 code=0x7ffc0000 [ 143.787009][ T9417] loop4: detected capacity change from 0 to 512 [ 143.804931][ T29] audit: type=1326 audit(1745598330.076:12571): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9411 comm="syz.0.2341" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7eff9f2fe969 code=0x7ffc0000 [ 143.915833][ T9417] EXT4-fs (loop4): too many log groups per flexible block group [ 143.923643][ T9417] EXT4-fs (loop4): failed to initialize mballoc (-12) [ 143.973478][ T9417] EXT4-fs (loop4): mount failed [ 144.130068][ T9435] 9pnet_fd: Insufficient options for proto=fd [ 144.456885][ T9461] smc: net device bond0 applied user defined pnetid SYZ2 [ 144.504627][ T9461] smc: net device bond0 erased user defined pnetid SYZ2 [ 144.545233][ T9460] loop0: detected capacity change from 0 to 2048 [ 144.575730][ T9460] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 144.949013][ T9481] FAULT_INJECTION: forcing a failure. [ 144.949013][ T9481] name failslab, interval 1, probability 0, space 0, times 0 [ 144.961882][ T9481] CPU: 1 UID: 0 PID: 9481 Comm: syz.3.2365 Not tainted 6.15.0-rc3-syzkaller-00094-g02ddfb981de8 #0 PREEMPT(voluntary) [ 144.961917][ T9481] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 144.961936][ T9481] Call Trace: [ 144.961944][ T9481] [ 144.961954][ T9481] __dump_stack+0x1d/0x30 [ 144.961979][ T9481] dump_stack_lvl+0xe8/0x140 [ 144.962004][ T9481] dump_stack+0x15/0x1b [ 144.962032][ T9481] should_fail_ex+0x265/0x280 [ 144.962069][ T9481] should_failslab+0x8c/0xb0 [ 144.962108][ T9481] __kmalloc_node_track_caller_noprof+0xa4/0x410 [ 144.962178][ T9481] ? v9fs_session_init+0x4b/0xde0 [ 144.962203][ T9481] kstrdup+0x3e/0xd0 [ 144.962227][ T9481] v9fs_session_init+0x4b/0xde0 [ 144.962396][ T9481] ? __rcu_read_unlock+0x4f/0x70 [ 144.962431][ T9481] ? v9fs_mount+0x51/0x590 [ 144.962455][ T9481] ? __kmalloc_cache_noprof+0x299/0x320 [ 144.962537][ T9481] v9fs_mount+0x67/0x590 [ 144.962562][ T9481] ? __pfx_v9fs_mount+0x10/0x10 [ 144.962608][ T9481] legacy_get_tree+0x75/0xd0 [ 144.962630][ T9481] vfs_get_tree+0x54/0x1d0 [ 144.962651][ T9481] do_new_mount+0x207/0x680 [ 144.962671][ T9481] path_mount+0x4a4/0xb20 [ 144.962741][ T9481] ? user_path_at+0x109/0x130 [ 144.962767][ T9481] __se_sys_mount+0x28f/0x2e0 [ 144.962814][ T9481] ? fput+0x8f/0xc0 [ 144.962845][ T9481] __x64_sys_mount+0x67/0x80 [ 144.962862][ T9481] x64_sys_call+0xd36/0x2fb0 [ 144.962879][ T9481] do_syscall_64+0xd0/0x1a0 [ 144.962967][ T9481] ? clear_bhb_loop+0x25/0x80 [ 144.963006][ T9481] ? clear_bhb_loop+0x25/0x80 [ 144.963031][ T9481] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 144.963070][ T9481] RIP: 0033:0x7fec064fe969 [ 144.963088][ T9481] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 144.963145][ T9481] RSP: 002b:00007fec04b46038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 144.963163][ T9481] RAX: ffffffffffffffda RBX: 00007fec06726080 RCX: 00007fec064fe969 [ 144.963180][ T9481] RDX: 0000200000000280 RSI: 0000200000000300 RDI: 0000000000000000 [ 144.963192][ T9481] RBP: 00007fec04b46090 R08: 0000200000000600 R09: 0000000000000000 [ 144.963202][ T9481] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 144.963216][ T9481] R13: 0000000000000000 R14: 00007fec06726080 R15: 00007ffc618fe2f8 [ 144.963238][ T9481] [ 145.086312][ T9483] netlink: 96 bytes leftover after parsing attributes in process `syz.2.2367'. [ 145.211024][ T9460] lo speed is unknown, defaulting to 1000 [ 145.587579][ T9500] smc: net device bond0 applied user defined pnetid SYZ2 [ 145.629482][ T9500] smc: net device bond0 erased user defined pnetid SYZ2 [ 145.645274][ T9502] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2375'. [ 145.664836][ T3310] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 146.155800][ T9520] 9pnet_fd: Insufficient options for proto=fd [ 146.580767][ T9539] netlink: 'syz.3.2392': attribute type 4 has an invalid length. [ 146.914900][ T9532] lo speed is unknown, defaulting to 1000 [ 147.396481][ T9551] FAULT_INJECTION: forcing a failure. [ 147.396481][ T9551] name failslab, interval 1, probability 0, space 0, times 0 [ 147.409303][ T9551] CPU: 1 UID: 0 PID: 9551 Comm: syz.4.2397 Not tainted 6.15.0-rc3-syzkaller-00094-g02ddfb981de8 #0 PREEMPT(voluntary) [ 147.409335][ T9551] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 147.409399][ T9551] Call Trace: [ 147.409405][ T9551] [ 147.409413][ T9551] __dump_stack+0x1d/0x30 [ 147.409435][ T9551] dump_stack_lvl+0xe8/0x140 [ 147.409470][ T9551] dump_stack+0x15/0x1b [ 147.409490][ T9551] should_fail_ex+0x265/0x280 [ 147.409573][ T9551] should_failslab+0x8c/0xb0 [ 147.409600][ T9551] __kmalloc_noprof+0xa5/0x3e0 [ 147.409625][ T9551] ? io_cache_alloc_new+0x2a/0xb0 [ 147.409653][ T9551] io_cache_alloc_new+0x2a/0xb0 [ 147.409726][ T9551] io_sendmsg_prep+0x286/0x600 [ 147.409807][ T9551] io_submit_sqes+0x5cb/0x1000 [ 147.409941][ T9551] __se_sys_io_uring_enter+0x1c1/0x1b70 [ 147.409970][ T9551] ? __rcu_read_unlock+0x4f/0x70 [ 147.410017][ T9551] ? get_pid_task+0x96/0xd0 [ 147.410047][ T9551] ? proc_fail_nth_write+0x12d/0x160 [ 147.410068][ T9551] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 147.410088][ T9551] ? vfs_write+0x75e/0x8d0 [ 147.410113][ T9551] ? __rcu_read_unlock+0x4f/0x70 [ 147.410142][ T9551] ? __fget_files+0x184/0x1c0 [ 147.410230][ T9551] ? fput+0x8f/0xc0 [ 147.410260][ T9551] __x64_sys_io_uring_enter+0x78/0x90 [ 147.410288][ T9551] x64_sys_call+0x28c8/0x2fb0 [ 147.410371][ T9551] do_syscall_64+0xd0/0x1a0 [ 147.410406][ T9551] ? clear_bhb_loop+0x25/0x80 [ 147.410427][ T9551] ? clear_bhb_loop+0x25/0x80 [ 147.410447][ T9551] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 147.410467][ T9551] RIP: 0033:0x7f654599e969 [ 147.410481][ T9551] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 147.410498][ T9551] RSP: 002b:00007f6544007038 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 147.410574][ T9551] RAX: ffffffffffffffda RBX: 00007f6545bc5fa0 RCX: 00007f654599e969 [ 147.410586][ T9551] RDX: 0000000000000000 RSI: 00000000000047f6 RDI: 0000000000000003 [ 147.410598][ T9551] RBP: 00007f6544007090 R08: 0000000000000000 R09: 0000000000000000 [ 147.410610][ T9551] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 147.410621][ T9551] R13: 0000000000000000 R14: 00007f6545bc5fa0 R15: 00007ffe3451ec28 [ 147.410639][ T9551] [ 147.411146][ T9552] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2395'. [ 148.070479][ T9579] smc: net device bond0 applied user defined pnetid SYZ2 [ 148.079199][ T9581] smc: net device bond0 erased user defined pnetid SYZ2 [ 148.099123][ T29] kauditd_printk_skb: 78 callbacks suppressed [ 148.099188][ T29] audit: type=1400 audit(1745598334.506:12650): avc: denied { write } for pid=9572 comm="syz.1.2404" name="file0" dev="tmpfs" ino=2647 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 148.164647][ T29] audit: type=1400 audit(1745598334.536:12651): avc: denied { open } for pid=9572 comm="syz.1.2404" path="/491/file0" dev="tmpfs" ino=2647 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 148.187624][ T29] audit: type=1400 audit(1745598334.536:12652): avc: denied { create } for pid=9572 comm="syz.1.2404" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 148.289358][ T29] audit: type=1400 audit(1745598334.576:12653): avc: denied { ioctl } for pid=9572 comm="syz.1.2404" path="socket:[25823]" dev="sockfs" ino=25823 ioctlcmd=0x890c scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 148.314166][ T29] audit: type=1400 audit(1745598334.576:12654): avc: denied { ioctl } for pid=9572 comm="syz.1.2404" path="/491/file0" dev="tmpfs" ino=2647 ioctlcmd=0x1276 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 148.412714][ T9592] bond1: entered promiscuous mode [ 148.417990][ T9592] bond1: entered allmulticast mode [ 148.435206][ T9592] 8021q: adding VLAN 0 to HW filter on device bond1 [ 148.448044][ T9592] bond1 (unregistering): Released all slaves [ 148.454195][ T29] audit: type=1400 audit(1745598334.816:12655): avc: denied { create } for pid=9591 comm="syz.3.2410" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 148.474190][ T29] audit: type=1400 audit(1745598334.816:12656): avc: denied { read } for pid=9591 comm="syz.3.2410" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 148.526354][ T9595] loop3: detected capacity change from 0 to 128 [ 148.595651][ T9577] block device autoloading is deprecated and will be removed. [ 148.618985][ T9577] bio_check_eod: 19 callbacks suppressed [ 148.619001][ T9577] syz.0.2405: attempt to access beyond end of device [ 148.619001][ T9577] md33: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 148.628823][ T9603] 9pnet_fd: Insufficient options for proto=fd [ 148.681236][ T29] audit: type=1326 audit(1745598335.086:12657): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9606 comm="syz.3.2416" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fec064fe969 code=0x7ffc0000 [ 148.741733][ T29] audit: type=1326 audit(1745598335.086:12658): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9606 comm="syz.3.2416" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fec064fe969 code=0x7ffc0000 [ 148.765461][ T29] audit: type=1326 audit(1745598335.086:12659): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9606 comm="syz.3.2416" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fec064fe969 code=0x7ffc0000 [ 148.973036][ T9607] netlink: 'syz.3.2416': attribute type 10 has an invalid length. [ 149.225982][ T9636] loop4: detected capacity change from 0 to 512 [ 149.267231][ T9636] EXT4-fs (loop4): too many log groups per flexible block group [ 149.275036][ T9636] EXT4-fs (loop4): failed to initialize mballoc (-12) [ 149.342272][ T9636] EXT4-fs (loop4): mount failed [ 149.416838][ T9646] loop3: detected capacity change from 0 to 2048 [ 149.458284][ T9646] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 149.536360][ T9646] lo speed is unknown, defaulting to 1000 [ 149.745977][ T9654] EXT4-fs (loop3): Delayed block allocation failed for inode 18 at logical offset 1 with max blocks 1 with error 28 [ 149.758311][ T9654] EXT4-fs (loop3): This should not happen!! Data will be lost [ 149.758311][ T9654] [ 149.768078][ T9654] EXT4-fs (loop3): Total free blocks count 0 [ 149.774080][ T9654] EXT4-fs (loop3): Free/Dirty block details [ 149.780090][ T9654] EXT4-fs (loop3): free_blocks=0 [ 149.785060][ T9654] EXT4-fs (loop3): dirty_blocks=0 [ 149.790105][ T9654] EXT4-fs (loop3): Block reservation details [ 149.796207][ T9654] EXT4-fs (loop3): i_reserved_data_blocks=0 [ 149.899429][ T9662] bond1: entered promiscuous mode [ 149.904537][ T9662] bond1: entered allmulticast mode [ 149.942620][ T9662] 8021q: adding VLAN 0 to HW filter on device bond1 [ 149.952432][ T3309] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 149.962287][ T9660] netlink: 'syz.4.2438': attribute type 10 has an invalid length. [ 149.972225][ T9662] bond1 (unregistering): Released all slaves [ 150.049807][ T9676] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2442'. [ 150.197799][ T9689] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 150.254288][ T9689] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 150.345403][ T9689] SELinux: ebitmap: truncated map [ 150.387063][ T9689] SELinux: failed to load policy [ 150.495295][ T9696] xt_addrtype: ipv6 PROHIBIT (THROW, NAT ..) matching not supported [ 150.675660][ T9715] netlink: 96 bytes leftover after parsing attributes in process `syz.3.2458'. [ 150.967035][ T9735] loop3: detected capacity change from 0 to 512 [ 151.116206][ T9735] EXT4-fs (loop3): too many log groups per flexible block group [ 151.123907][ T9735] EXT4-fs (loop3): failed to initialize mballoc (-12) [ 151.160093][ T9735] EXT4-fs (loop3): mount failed [ 151.413536][ T9757] netlink: 'syz.3.2475': attribute type 4 has an invalid length. [ 151.434593][ T9749] loop4: detected capacity change from 0 to 4096 [ 151.465047][ T9749] EXT4-fs: Ignoring removed nomblk_io_submit option [ 151.607115][ T9749] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 152.200662][ T3303] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 152.212846][ T9778] lo speed is unknown, defaulting to 1000 [ 152.382551][ T9793] loop4: detected capacity change from 0 to 256 [ 152.509895][ T9805] netlink: 'syz.4.2490': attribute type 4 has an invalid length. [ 152.520900][ T1034] lo speed is unknown, defaulting to 1000 [ 152.526707][ T1034] syz0: Port: 1 Link DOWN [ 152.668757][ T9812] smc: net device bond0 applied user defined pnetid SYZ0 [ 152.676059][ T9812] smc: ib device syz1 ibport 1 applied user defined pnetid SYZ0 [ 152.693209][ T9812] smc: net device bond0 erased user defined pnetid SYZ0 [ 152.716051][ T9812] smc: ib device syz1 ibport 1 erased user defined pnetid SYZ0 [ 152.726965][ T9816] hub 9-0:1.0: USB hub found [ 152.744783][ T9816] hub 9-0:1.0: 8 ports detected [ 152.750401][ T9814] smc: net device bond0 applied user defined pnetid SYZ0 [ 152.757696][ T9814] smc: ib device syz1 ibport 1 applied user defined pnetid SYZ0 [ 152.765570][ T9814] smc: net device bond0 erased user defined pnetid SYZ0 [ 152.772537][ T9814] smc: ib device syz1 ibport 1 erased user defined pnetid SYZ0 [ 152.820622][ T9827] loop0: detected capacity change from 0 to 256 [ 152.899277][ T9835] netlink: 'syz.3.2509': attribute type 4 has an invalid length. [ 152.943201][ T9843] netlink: 33924 bytes leftover after parsing attributes in process `syz.0.2510'. [ 153.047969][ T9853] smc: net device bond0 applied user defined pnetid SYZ0 [ 153.055427][ T9853] smc: ib device syz1 ibport 1 applied user defined pnetid SYZ0 [ 153.063314][ T9853] smc: net device bond0 erased user defined pnetid SYZ0 [ 153.063725][ T9852] FAULT_INJECTION: forcing a failure. [ 153.063725][ T9852] name failslab, interval 1, probability 0, space 0, times 0 [ 153.070355][ T9853] smc: ib device syz1 ibport 1 erased user defined pnetid SYZ0 [ 153.082973][ T9852] CPU: 0 UID: 0 PID: 9852 Comm: +}[@ Not tainted 6.15.0-rc3-syzkaller-00094-g02ddfb981de8 #0 PREEMPT(voluntary) [ 153.083013][ T9852] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 153.083032][ T9852] Call Trace: [ 153.083040][ T9852] [ 153.083049][ T9852] __dump_stack+0x1d/0x30 [ 153.083077][ T9852] dump_stack_lvl+0xe8/0x140 [ 153.083101][ T9852] dump_stack+0x15/0x1b [ 153.083147][ T9852] should_fail_ex+0x265/0x280 [ 153.083240][ T9852] should_failslab+0x8c/0xb0 [ 153.083272][ T9852] __kmalloc_node_track_caller_noprof+0xa4/0x410 [ 153.083312][ T9852] ? kstrdup_const+0x3e/0x50 [ 153.083350][ T9852] kstrdup+0x3e/0xd0 [ 153.083437][ T9852] kstrdup_const+0x3e/0x50 [ 153.083472][ T9852] __kernfs_new_node+0x3f/0x350 [ 153.083509][ T9852] ? selinux_file_open+0x31c/0x370 [ 153.083578][ T9852] ? __rcu_read_unlock+0x4f/0x70 [ 153.083617][ T9852] kernfs_new_node+0xd0/0x140 [ 153.083707][ T9852] kernfs_create_link+0x70/0x130 [ 153.083739][ T9852] sysfs_do_create_link_sd+0x6a/0x100 [ 153.083787][ T9852] sysfs_create_link+0x51/0x70 [ 153.083882][ T9852] driver_sysfs_add+0x54/0x160 [ 153.083907][ T9852] really_probe+0xf6/0x5a0 [ 153.083960][ T9852] ? __driver_probe_device+0x116/0x190 [ 153.083988][ T9852] __driver_probe_device+0x121/0x190 [ 153.084058][ T9852] driver_probe_device+0x37/0x2f0 [ 153.084093][ T9852] __device_attach_driver+0x205/0x310 [ 153.084121][ T9852] ? __pfx___device_attach_driver+0x10/0x10 [ 153.084150][ T9852] bus_for_each_drv+0x1bd/0x230 [ 153.084187][ T9852] __device_attach+0x1c7/0x290 [ 153.084282][ T9852] device_attach+0x17/0x20 [ 153.084306][ T9852] proc_ioctl+0x304/0x400 [ 153.084399][ T9852] proc_ioctl_default+0x71/0xa0 [ 153.084433][ T9852] usbdev_ioctl+0xe97/0x1710 [ 153.084463][ T9852] ? __pfx_usbdev_ioctl+0x10/0x10 [ 153.084489][ T9852] __se_sys_ioctl+0xcb/0x140 [ 153.084578][ T9852] __x64_sys_ioctl+0x43/0x50 [ 153.084613][ T9852] x64_sys_call+0x19a8/0x2fb0 [ 153.084717][ T9852] do_syscall_64+0xd0/0x1a0 [ 153.084760][ T9852] ? clear_bhb_loop+0x25/0x80 [ 153.084790][ T9852] ? clear_bhb_loop+0x25/0x80 [ 153.084815][ T9852] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 153.084839][ T9852] RIP: 0033:0x7f55daeee969 [ 153.084918][ T9852] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 153.084938][ T9852] RSP: 002b:00007f55d9557038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 153.084961][ T9852] RAX: ffffffffffffffda RBX: 00007f55db115fa0 RCX: 00007f55daeee969 [ 153.084975][ T9852] RDX: 0000200000000000 RSI: 00000000c0105512 RDI: 0000000000000005 [ 153.084989][ T9852] RBP: 00007f55d9557090 R08: 0000000000000000 R09: 0000000000000000 [ 153.085003][ T9852] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 153.085017][ T9852] R13: 0000000000000000 R14: 00007f55db115fa0 R15: 00007ffc4d337328 [ 153.085040][ T9852] [ 153.085178][ T9852] hub 9-0:1.0: really_probe: driver_sysfs_add failed [ 153.402063][ T29] kauditd_printk_skb: 126 callbacks suppressed [ 153.402080][ T29] audit: type=1326 audit(1745598339.796:12786): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9858 comm="syz.3.2516" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fec064fe969 code=0x7ffc0000 [ 153.431834][ T29] audit: type=1326 audit(1745598339.796:12787): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9858 comm="syz.3.2516" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fec064fe969 code=0x7ffc0000 [ 153.455393][ T29] audit: type=1326 audit(1745598339.796:12788): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9858 comm="syz.3.2516" exe="/root/syz-executor" sig=0 arch=c000003e syscall=249 compat=0 ip=0x7fec064fe969 code=0x7ffc0000 [ 153.479033][ T29] audit: type=1326 audit(1745598339.796:12789): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9858 comm="syz.3.2516" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fec064fe969 code=0x7ffc0000 [ 153.502691][ T29] audit: type=1326 audit(1745598339.796:12790): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9858 comm="syz.3.2516" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fec064fe969 code=0x7ffc0000 [ 153.526450][ T29] audit: type=1326 audit(1745598339.796:12791): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9858 comm="syz.3.2516" exe="/root/syz-executor" sig=0 arch=c000003e syscall=240 compat=0 ip=0x7fec064fe969 code=0x7ffc0000 [ 153.550024][ T29] audit: type=1326 audit(1745598339.796:12792): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9858 comm="syz.3.2516" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fec064fe969 code=0x7ffc0000 [ 153.573753][ T29] audit: type=1326 audit(1745598339.796:12793): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9858 comm="syz.3.2516" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fec064fe969 code=0x7ffc0000 [ 153.597350][ T29] audit: type=1326 audit(1745598339.796:12794): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9858 comm="syz.3.2516" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fec064fe969 code=0x7ffc0000 [ 153.620983][ T29] audit: type=1326 audit(1745598339.806:12795): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9858 comm="syz.3.2516" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fec064fe969 code=0x7ffc0000 [ 153.665786][ T9849] FAULT_INJECTION: forcing a failure. [ 153.665786][ T9849] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 153.682575][ T9849] CPU: 0 UID: 0 PID: 9849 Comm: syz.0.2512 Not tainted 6.15.0-rc3-syzkaller-00094-g02ddfb981de8 #0 PREEMPT(voluntary) [ 153.682604][ T9849] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 153.682632][ T9849] Call Trace: [ 153.682639][ T9849] [ 153.682647][ T9849] __dump_stack+0x1d/0x30 [ 153.682671][ T9849] dump_stack_lvl+0xe8/0x140 [ 153.682693][ T9849] dump_stack+0x15/0x1b [ 153.682711][ T9849] should_fail_ex+0x265/0x280 [ 153.682800][ T9849] should_fail+0xb/0x20 [ 153.682844][ T9849] should_fail_usercopy+0x1a/0x20 [ 153.682881][ T9849] strncpy_from_user+0x25/0x230 [ 153.682907][ T9849] ? kmem_cache_alloc_noprof+0x186/0x310 [ 153.682933][ T9849] ? getname_flags+0x80/0x3b0 [ 153.682997][ T9849] getname_flags+0xae/0x3b0 [ 153.683027][ T9849] path_setxattrat+0x22c/0x300 [ 153.683077][ T9849] __x64_sys_setxattr+0x6e/0x90 [ 153.683104][ T9849] x64_sys_call+0x28a7/0x2fb0 [ 153.683186][ T9849] do_syscall_64+0xd0/0x1a0 [ 153.683215][ T9849] ? clear_bhb_loop+0x25/0x80 [ 153.683264][ T9849] ? clear_bhb_loop+0x25/0x80 [ 153.683284][ T9849] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 153.683302][ T9849] RIP: 0033:0x7eff9f2fe969 [ 153.683318][ T9849] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 153.683390][ T9849] RSP: 002b:00007eff9d967038 EFLAGS: 00000246 ORIG_RAX: 00000000000000bc [ 153.683408][ T9849] RAX: ffffffffffffffda RBX: 00007eff9f525fa0 RCX: 00007eff9f2fe969 [ 153.683419][ T9849] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000200000000000 [ 153.683430][ T9849] RBP: 00007eff9d967090 R08: 0000000000000003 R09: 0000000000000000 [ 153.683441][ T9849] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 153.683451][ T9849] R13: 0000000000000000 R14: 00007eff9f525fa0 R15: 00007fff9254ff68 [ 153.683478][ T9849] [ 153.937189][ T9869] netlink: 33924 bytes leftover after parsing attributes in process `syz.3.2522'. [ 154.032754][ T9880] hub 9-0:1.0: USB hub found [ 154.055523][ T9880] hub 9-0:1.0: 8 ports detected [ 154.182854][ T9892] FAULT_INJECTION: forcing a failure. [ 154.182854][ T9892] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 154.195960][ T9892] CPU: 0 UID: 0 PID: 9892 Comm: syz.3.2532 Not tainted 6.15.0-rc3-syzkaller-00094-g02ddfb981de8 #0 PREEMPT(voluntary) [ 154.196050][ T9892] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 154.196065][ T9892] Call Trace: [ 154.196072][ T9892] [ 154.196080][ T9892] __dump_stack+0x1d/0x30 [ 154.196118][ T9892] dump_stack_lvl+0xe8/0x140 [ 154.196136][ T9892] dump_stack+0x15/0x1b [ 154.196155][ T9892] should_fail_ex+0x265/0x280 [ 154.196188][ T9892] should_fail+0xb/0x20 [ 154.196212][ T9892] should_fail_usercopy+0x1a/0x20 [ 154.196297][ T9892] _copy_from_user+0x1c/0xb0 [ 154.196315][ T9892] kstrtouint_from_user+0x76/0xe0 [ 154.196348][ T9892] ? avc_policy_seqno+0x15/0x30 [ 154.196383][ T9892] proc_fail_nth_write+0x50/0x160 [ 154.196434][ T9892] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 154.196457][ T9892] vfs_write+0x266/0x8d0 [ 154.196479][ T9892] ? vfs_read+0x47f/0x6f0 [ 154.196505][ T9892] ? __rcu_read_unlock+0x4f/0x70 [ 154.196555][ T9892] ? __fget_files+0x184/0x1c0 [ 154.196578][ T9892] ksys_write+0xda/0x1a0 [ 154.196599][ T9892] __x64_sys_write+0x40/0x50 [ 154.196629][ T9892] x64_sys_call+0x2cdd/0x2fb0 [ 154.196650][ T9892] do_syscall_64+0xd0/0x1a0 [ 154.196681][ T9892] ? clear_bhb_loop+0x25/0x80 [ 154.196700][ T9892] ? clear_bhb_loop+0x25/0x80 [ 154.196724][ T9892] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 154.196748][ T9892] RIP: 0033:0x7fec064fd41f [ 154.196761][ T9892] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48 [ 154.196776][ T9892] RSP: 002b:00007fec04b67030 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 154.196866][ T9892] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007fec064fd41f [ 154.196881][ T9892] RDX: 0000000000000001 RSI: 00007fec04b670a0 RDI: 0000000000000006 [ 154.196894][ T9892] RBP: 00007fec04b67090 R08: 0000000000000000 R09: 0000000000000000 [ 154.196907][ T9892] R10: 000000000000009a R11: 0000000000000293 R12: 0000000000000001 [ 154.196981][ T9892] R13: 0000000000000000 R14: 00007fec06725fa0 R15: 00007ffc618fe2f8 [ 154.197003][ T9892] [ 154.464246][ T37] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 154.486385][ T9894] netlink: 'syz.1.2533': attribute type 10 has an invalid length. [ 154.528447][ T37] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 154.545383][ T9897] netlink: 33924 bytes leftover after parsing attributes in process `syz.4.2536'. [ 154.577999][ T37] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 154.628856][ T37] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 154.705991][ T9920] smc: net device bond0 applied user defined pnetid SYZ2 [ 154.714276][ T9922] smc: ib device syz1 ibport 1 applied user defined pnetid SYZ0 [ 154.722731][ T9922] smc: net device bond0 erased user defined pnetid SYZ2 [ 154.730538][ T9922] smc: ib device syz1 ibport 1 erased user defined pnetid SYZ0 [ 154.826817][ T37] bond0 (unregistering): (slave batadv0): Releasing backup interface [ 154.836035][ T37] bond0 (unregistering): Released all slaves [ 154.856621][ T9900] lo speed is unknown, defaulting to 1000 [ 154.915577][ T37] hsr_slave_0: left promiscuous mode [ 154.921297][ T37] hsr_slave_1: left promiscuous mode [ 154.940905][ T37] veth1_macvtap: left promiscuous mode [ 154.958137][ T37] veth0_macvtap: left promiscuous mode [ 154.963671][ T37] veth1_vlan: left promiscuous mode [ 154.970379][ T37] veth0_vlan: left promiscuous mode [ 154.990495][ T9939] netlink: 'syz.4.2548': attribute type 10 has an invalid length. [ 155.031757][ T3310] block device autoloading is deprecated and will be removed. [ 155.050006][ T9946] loop3: detected capacity change from 0 to 2048 [ 155.148520][ T9950] smc: net device bond0 applied user defined pnetid SYZ2 [ 155.169622][ T9946] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 155.191233][ T9954] smc: net device bond0 erased user defined pnetid SYZ2 [ 155.236686][ T9900] chnl_net:caif_netlink_parms(): no params data found [ 155.282459][ T9958] smc: net device bond0 applied user defined pnetid SYZ0 [ 155.291251][ T9958] smc: ib device syz1 ibport 1 applied user defined pnetid SYZ0 [ 155.300291][ T9958] smc: net device bond0 erased user defined pnetid SYZ0 [ 155.308608][ T9958] smc: ib device syz1 ibport 1 erased user defined pnetid SYZ0 [ 155.332816][ T9900] bridge0: port 1(bridge_slave_0) entered blocking state [ 155.339997][ T9900] bridge0: port 1(bridge_slave_0) entered disabled state [ 155.349983][ T9963] loop0: detected capacity change from 0 to 256 [ 155.363798][ T9900] bridge_slave_0: entered allmulticast mode [ 155.371197][ T9900] bridge_slave_0: entered promiscuous mode [ 155.378136][ T9900] bridge0: port 2(bridge_slave_1) entered blocking state [ 155.385274][ T9900] bridge0: port 2(bridge_slave_1) entered disabled state [ 155.392434][ T9900] bridge_slave_1: entered allmulticast mode [ 155.398944][ T9900] bridge_slave_1: entered promiscuous mode [ 155.405994][ T9946] lo speed is unknown, defaulting to 1000 [ 155.430192][ T9900] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 155.451213][ T9900] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 155.493327][ T9900] team0: Port device team_slave_0 added [ 155.510466][ T9964] EXT4-fs (loop3): Delayed block allocation failed for inode 18 at logical offset 1 with max blocks 1 with error 28 [ 155.513328][ T9900] team0: Port device team_slave_1 added [ 155.522990][ T9964] EXT4-fs (loop3): This should not happen!! Data will be lost [ 155.522990][ T9964] [ 155.538243][ T9964] EXT4-fs (loop3): Total free blocks count 0 [ 155.544411][ T9964] EXT4-fs (loop3): Free/Dirty block details [ 155.550316][ T9964] EXT4-fs (loop3): free_blocks=0 [ 155.555347][ T9964] EXT4-fs (loop3): dirty_blocks=0 [ 155.560420][ T9964] EXT4-fs (loop3): Block reservation details [ 155.566479][ T9964] EXT4-fs (loop3): i_reserved_data_blocks=0 [ 155.580240][ T9900] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 155.587238][ T9900] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 155.613253][ T9900] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 155.624917][ T9900] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 155.631970][ T9900] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 155.658009][ T9900] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 155.673887][ T3309] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 155.694792][ T9900] hsr_slave_0: entered promiscuous mode [ 155.702879][ T9900] hsr_slave_1: entered promiscuous mode [ 155.709787][ T9900] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 155.717437][ T9900] Cannot create hsr debugfs directory [ 155.724912][ T9978] netlink: 'syz.3.2561': attribute type 4 has an invalid length. [ 155.778124][ T9984] netem: incorrect ge model size [ 155.823804][ T9989] 9pnet: p9_errstr2errno: server reported unknown error õ1 g;-‡~ >*Q©/×–¼4×Ïn6€[Cw÷«›Á¤Æ§ïTæv?×&L9ê [ 155.885115][ T9900] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 155.893673][ T9900] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 155.903550][ T9900] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 155.933461][ T9900] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 155.970490][ T9998] loop3: detected capacity change from 0 to 2048 [ 155.982615][ T9900] 8021q: adding VLAN 0 to HW filter on device bond0 [ 155.993179][ T9998] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 156.011084][ T9900] 8021q: adding VLAN 0 to HW filter on device team0 [ 156.021556][ T4333] bridge0: port 1(bridge_slave_0) entered blocking state [ 156.028696][ T4333] bridge0: port 1(bridge_slave_0) entered forwarding state [ 156.068816][ T4333] bridge0: port 2(bridge_slave_1) entered blocking state [ 156.076085][ T4333] bridge0: port 2(bridge_slave_1) entered forwarding state [ 156.109980][ T9998] lo speed is unknown, defaulting to 1000 [ 156.194916][T10002] syz.1.2571: attempt to access beyond end of device [ 156.194916][T10002] md33: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 156.211717][ T9900] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 156.222114][T10003] EXT4-fs (loop3): Delayed block allocation failed for inode 18 at logical offset 1 with max blocks 1 with error 28 [ 156.234349][T10003] EXT4-fs (loop3): This should not happen!! Data will be lost [ 156.234349][T10003] [ 156.244021][T10003] EXT4-fs (loop3): Total free blocks count 0 [ 156.250066][T10003] EXT4-fs (loop3): Free/Dirty block details [ 156.256142][T10003] EXT4-fs (loop3): free_blocks=0 [ 156.261097][T10003] EXT4-fs (loop3): dirty_blocks=0 [ 156.266193][T10003] EXT4-fs (loop3): Block reservation details [ 156.272184][T10003] EXT4-fs (loop3): i_reserved_data_blocks=0 [ 156.292416][T10017] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2572'. [ 156.310565][ T3309] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 156.384088][T10028] netlink: 'syz.1.2576': attribute type 10 has an invalid length. [ 156.429392][ T9900] veth0_vlan: entered promiscuous mode [ 156.444008][ T9900] veth1_vlan: entered promiscuous mode [ 156.444163][T10034] loop3: detected capacity change from 0 to 256 [ 156.473218][ T9900] veth0_macvtap: entered promiscuous mode [ 156.486981][T10039] 9pnet: p9_errstr2errno: server reported unknown error õ1 g;-‡~ >*Q©/×–¼4×Ïn6€[Cw÷«›Á¤Æ§ïTæv?×&L9ê [ 156.490974][ T9900] veth1_macvtap: entered promiscuous mode [ 156.515287][ T9900] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 156.525896][ T9900] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 156.535734][ T9900] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 156.546220][ T9900] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 156.556218][ T9900] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 156.566784][ T9900] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 156.579904][ T9900] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 156.599359][ T9900] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 156.609911][ T9900] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 156.619828][ T9900] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 156.630292][ T9900] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 156.640178][ T9900] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 156.650857][ T9900] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 156.666710][ T9900] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 156.678811][ T9900] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 156.687743][ T9900] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 156.696501][ T9900] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 156.705281][ T9900] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 156.773587][T10057] netem: incorrect ge model size [ 156.837475][T10062] netem: incorrect ge model size [ 156.895410][T10050] syz.1.2584: attempt to access beyond end of device [ 156.895410][T10050] md33: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 156.980417][T10072] loop5: detected capacity change from 0 to 256 [ 157.132920][T10083] smc: net device bond0 applied user defined pnetid SYZ0 [ 157.141315][T10083] smc: ib device syz1 ibport 1 applied user defined pnetid SYZ0 [ 157.151506][T10083] smc: net device bond0 erased user defined pnetid SYZ0 [ 157.159681][T10083] smc: ib device syz1 ibport 1 erased user defined pnetid SYZ0 [ 157.161467][T10085] netem: incorrect ge model size [ 157.250572][T10093] loop0: detected capacity change from 0 to 764 [ 157.276722][T10063] syz.3.2586: attempt to access beyond end of device [ 157.276722][T10063] md33: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 157.297063][T10099] smc: net device bond0 applied user defined pnetid SYZ2 [ 157.305816][T10099] smc: net device bond0 erased user defined pnetid SYZ2 [ 157.318407][T10101] netem: incorrect ge model size [ 157.323392][T10101] netem: change failed [ 157.415534][T10111] netem: incorrect ge model size [ 157.462323][T10114] smc: net device bond0 applied user defined pnetid SYZ0 [ 157.477173][T10097] lo speed is unknown, defaulting to 1000 [ 157.483051][T10114] smc: ib device syz1 ibport 1 applied user defined pnetid SYZ0 [ 157.523793][T10114] smc: net device bond0 erased user defined pnetid SYZ0 [ 157.554605][T10114] smc: ib device syz1 ibport 1 erased user defined pnetid SYZ0 [ 157.616611][T10124] netlink: 96 bytes leftover after parsing attributes in process `syz.0.2615'. [ 157.678972][T10131] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2618'. [ 157.687999][T10131] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2618'. [ 157.719839][T10134] netlink: 33912 bytes leftover after parsing attributes in process `syz.0.2620'. [ 157.774985][T10137] loop4: detected capacity change from 0 to 1024 [ 157.782026][T10137] EXT4-fs (loop4): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 157.793074][T10137] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 157.812654][T10139] netem: incorrect ge model size [ 157.835819][T10137] JBD2: no valid journal superblock found [ 157.841584][T10137] EXT4-fs (loop4): Could not load journal inode [ 157.944573][T10150] loop5: detected capacity change from 0 to 128 [ 157.969678][T10150] FAULT_INJECTION: forcing a failure. [ 157.969678][T10150] name failslab, interval 1, probability 0, space 0, times 0 [ 157.982379][T10150] CPU: 1 UID: 0 PID: 10150 Comm: syz.5.2626 Not tainted 6.15.0-rc3-syzkaller-00094-g02ddfb981de8 #0 PREEMPT(voluntary) [ 157.982480][T10150] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 157.982492][T10150] Call Trace: [ 157.982498][T10150] [ 157.982504][T10150] __dump_stack+0x1d/0x30 [ 157.982640][T10150] dump_stack_lvl+0xe8/0x140 [ 157.982720][T10150] dump_stack+0x15/0x1b [ 157.982739][T10150] should_fail_ex+0x265/0x280 [ 157.982814][T10150] should_failslab+0x8c/0xb0 [ 157.982837][T10150] kmem_cache_alloc_noprof+0x50/0x310 [ 157.982864][T10150] ? fat_parse_long+0x5d/0x430 [ 157.982944][T10150] fat_parse_long+0x5d/0x430 [ 157.983004][T10150] fat_search_long+0x1cc/0x9c0 [ 157.983035][T10150] ? d_set_d_op+0x1a4/0x1d0 [ 157.983065][T10150] vfat_lookup+0xd5/0x2d0 [ 157.983138][T10150] lookup_one_qstr_excl_raw+0xc4/0x1b0 [ 157.983183][T10150] do_renameat2+0x3e0/0xab0 [ 157.983239][T10150] ? proc_fail_nth_write+0x12d/0x160 [ 157.983271][T10150] __x64_sys_renameat2+0x7e/0x90 [ 157.983300][T10150] x64_sys_call+0x2bf6/0x2fb0 [ 157.983319][T10150] do_syscall_64+0xd0/0x1a0 [ 157.983429][T10150] ? clear_bhb_loop+0x25/0x80 [ 157.983455][T10150] ? clear_bhb_loop+0x25/0x80 [ 157.983481][T10150] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 157.983552][T10150] RIP: 0033:0x7f83a867e969 [ 157.983570][T10150] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 157.983587][T10150] RSP: 002b:00007f83a6ce7038 EFLAGS: 00000246 ORIG_RAX: 000000000000013c [ 157.983609][T10150] RAX: ffffffffffffffda RBX: 00007f83a88a5fa0 RCX: 00007f83a867e969 [ 157.983624][T10150] RDX: 0000000000000004 RSI: 0000200000000140 RDI: 0000000000000004 [ 157.983639][T10150] RBP: 00007f83a6ce7090 R08: 0000000000000001 R09: 0000000000000000 [ 157.983698][T10150] R10: 0000200000000240 R11: 0000000000000246 R12: 0000000000000002 [ 157.983709][T10150] R13: 0000000000000000 R14: 00007f83a88a5fa0 R15: 00007ffee6aef928 [ 157.983733][T10150] [ 157.983994][T10152] smc: net device bond0 applied user defined pnetid SYZ2 [ 158.192525][T10153] smc: net device bond0 erased user defined pnetid SYZ2 [ 158.226699][T10160] 9pnet_fd: Insufficient options for proto=fd [ 158.261330][T10158] loop0: detected capacity change from 0 to 764 [ 158.300767][T10162] loop5: detected capacity change from 0 to 4096 [ 158.308582][T10162] EXT4-fs: Ignoring removed nomblk_io_submit option [ 158.318826][T10164] netem: incorrect ge model size [ 158.332905][T10162] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 158.395738][T10173] loop4: detected capacity change from 0 to 256 [ 158.476049][T10171] loop3: detected capacity change from 0 to 4096 [ 158.490637][T10171] EXT4-fs: Ignoring removed nomblk_io_submit option [ 158.506344][T10171] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 158.897595][T10192] 9pnet_fd: Insufficient options for proto=fd [ 159.020927][T10195] smc: net device bond0 applied user defined pnetid SYZ0 [ 159.059126][T10195] smc: ib device syz1 ibport 1 applied user defined pnetid SYZ0 [ 159.089432][T10196] smc: net device bond0 erased user defined pnetid SYZ0 [ 159.115431][T10196] smc: ib device syz1 ibport 1 erased user defined pnetid SYZ0 [ 159.190382][T10198] loop0: detected capacity change from 0 to 128 [ 159.219242][ T29] kauditd_printk_skb: 307 callbacks suppressed [ 159.219259][ T29] audit: type=1400 audit(1745598345.616:13103): avc: denied { getopt } for pid=10197 comm="syz.0.2644" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 159.300511][T10200] loop0: detected capacity change from 0 to 764 [ 159.305003][T10202] netem: incorrect ge model size [ 159.311676][ T29] audit: type=1326 audit(1745598345.686:13104): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10199 comm="syz.0.2645" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7eff9f2fe969 code=0x7ffc0000 [ 159.335436][ T29] audit: type=1326 audit(1745598345.686:13105): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10199 comm="syz.0.2645" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7eff9f2fe969 code=0x7ffc0000 [ 159.359014][ T29] audit: type=1326 audit(1745598345.686:13106): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10199 comm="syz.0.2645" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7eff9f2fe969 code=0x7ffc0000 [ 159.382670][ T29] audit: type=1326 audit(1745598345.686:13107): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10199 comm="syz.0.2645" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7eff9f2fe969 code=0x7ffc0000 [ 159.406454][ T29] audit: type=1326 audit(1745598345.686:13108): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10199 comm="syz.0.2645" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7eff9f2fe969 code=0x7ffc0000 [ 159.430106][ T29] audit: type=1326 audit(1745598345.686:13109): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10199 comm="syz.0.2645" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7eff9f2fe969 code=0x7ffc0000 [ 159.453594][ T29] audit: type=1326 audit(1745598345.686:13110): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10199 comm="syz.0.2645" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7eff9f2fe969 code=0x7ffc0000 [ 159.477192][ T29] audit: type=1326 audit(1745598345.686:13111): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10199 comm="syz.0.2645" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7eff9f2fe969 code=0x7ffc0000 [ 159.500811][ T29] audit: type=1326 audit(1745598345.686:13112): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10199 comm="syz.0.2645" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7eff9f2fe969 code=0x7ffc0000 [ 159.529804][ T3309] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 159.534087][ T9900] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 159.612334][T10216] 9pnet_fd: Insufficient options for proto=fd [ 159.638056][T10222] netlink: 'syz.1.2655': attribute type 1 has an invalid length. [ 159.653094][T10224] netlink: 'syz.5.2648': attribute type 10 has an invalid length. [ 159.687156][T10224] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 159.699512][T10224] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 159.714501][T10232] netlink: 96 bytes leftover after parsing attributes in process `syz.1.2659'. [ 159.728476][T10235] loop0: detected capacity change from 0 to 256 [ 159.843722][T10243] netlink: 'syz.1.2663': attribute type 4 has an invalid length. [ 159.952521][T10221] lo speed is unknown, defaulting to 1000 [ 160.074267][T10258] loop0: detected capacity change from 0 to 2048 [ 160.096421][T10258] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 160.099087][T10264] loop3: detected capacity change from 0 to 256 [ 160.127299][T10266] loop5: detected capacity change from 0 to 256 [ 160.136202][T10268] netlink: 96 bytes leftover after parsing attributes in process `syz.1.2673'. [ 160.162733][T10270] netem: incorrect ge model size [ 160.223505][T10277] loop5: detected capacity change from 0 to 4096 [ 160.232850][T10278] netlink: 'syz.3.2675': attribute type 10 has an invalid length. [ 160.233778][T10277] EXT4-fs: Ignoring removed nomblk_io_submit option [ 160.270100][T10258] lo speed is unknown, defaulting to 1000 [ 160.280341][T10277] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 160.397074][T10290] loop3: detected capacity change from 0 to 2048 [ 160.403807][T10290] EXT4-fs: inline encryption not supported [ 160.420419][ T9900] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 160.444737][T10290] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 160.461094][T10290] EXT4-fs error (device loop3): ext4_find_extent:938: inode #2: comm syz.3.2682: pblk 1 bad header/extent: invalid magic - magic 2, entries 0, max 3(0), depth 0(4) [ 160.475548][T10279] EXT4-fs (loop0): Delayed block allocation failed for inode 18 at logical offset 1 with max blocks 1 with error 28 [ 160.478724][T10290] EXT4-fs (loop3): Remounting filesystem read-only [ 160.489700][T10279] EXT4-fs (loop0): This should not happen!! Data will be lost [ 160.489700][T10279] [ 160.506234][T10279] EXT4-fs (loop0): Total free blocks count 0 [ 160.510970][T10290] netlink: 132 bytes leftover after parsing attributes in process `syz.3.2682'. [ 160.512216][T10279] EXT4-fs (loop0): Free/Dirty block details [ 160.527300][T10279] EXT4-fs (loop0): free_blocks=0 [ 160.532314][T10279] EXT4-fs (loop0): dirty_blocks=0 [ 160.537535][T10279] EXT4-fs (loop0): Block reservation details [ 160.543600][T10279] EXT4-fs (loop0): i_reserved_data_blocks=0 [ 160.543631][T10299] loop5: detected capacity change from 0 to 512 [ 160.570732][ T3310] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 160.592196][T10301] netem: incorrect ge model size [ 160.610182][ T3309] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 160.624108][T10304] netem: incorrect ge model size [ 160.659142][T10307] loop3: detected capacity change from 0 to 256 [ 160.728334][T10318] 9pnet_fd: Insufficient options for proto=fd [ 160.778743][T10326] netlink: 96 bytes leftover after parsing attributes in process `syz.3.2697'. [ 160.825217][T10332] netem: incorrect ge model size [ 160.856864][T10334] netlink: 'syz.1.2701': attribute type 4 has an invalid length. [ 160.909794][T10341] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2704'. [ 160.918750][T10341] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2704'. [ 161.011006][T10350] loop3: detected capacity change from 0 to 1024 [ 161.028590][T10350] EXT4-fs (loop3): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 161.039550][T10350] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 161.062248][T10350] JBD2: no valid journal superblock found [ 161.068136][T10350] EXT4-fs (loop3): Could not load journal inode [ 161.190765][T10362] loop4: detected capacity change from 0 to 128 [ 161.206068][T10362] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 161.238025][T10368] netem: incorrect ge model size [ 161.248807][T10370] netlink: 96 bytes leftover after parsing attributes in process `syz.3.2715'. [ 161.279656][T10374] netlink: 'syz.3.2717': attribute type 4 has an invalid length. [ 161.299994][T10362] ext4 filesystem being mounted at /557/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 161.357391][T10362] SELinux: Context : is not valid (left unmapped). [ 161.382452][T10378] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2720'. [ 161.403015][ T3303] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 161.466867][T10387] SELinux: Context system_u:object_r:semanage_store_t:s0 is not valid (left unmapped). [ 161.469352][T10386] netem: incorrect ge model size [ 161.481605][T10386] netem: change failed [ 161.583425][T10390] loop5: detected capacity change from 0 to 512 [ 161.606799][T10390] SELinux: security_context_str_to_sid (root) failed with errno=-22 [ 161.800339][T10407] netlink: 96 bytes leftover after parsing attributes in process `syz.4.2728'. [ 161.803734][T10410] loop5: detected capacity change from 0 to 128 [ 161.822237][T10391] lo speed is unknown, defaulting to 1000 [ 161.873479][T10413] 9pnet_fd: Insufficient options for proto=fd [ 161.917821][T10419] loop4: detected capacity change from 0 to 512 [ 161.930866][T10391] chnl_net:caif_netlink_parms(): no params data found [ 161.963138][ T37] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 162.034537][ T37] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 162.071722][T10391] bridge0: port 1(bridge_slave_0) entered blocking state [ 162.078885][T10391] bridge0: port 1(bridge_slave_0) entered disabled state [ 162.131029][T10391] bridge_slave_0: entered allmulticast mode [ 162.140135][T10391] bridge_slave_0: entered promiscuous mode [ 162.146823][T10432] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 162.154141][T10432] IPv6: NLM_F_CREATE should be set when creating new route [ 162.161468][T10432] IPv6: NLM_F_CREATE should be set when creating new route [ 162.168701][T10432] IPv6: NLM_F_CREATE should be set when creating new route [ 162.178822][T10391] bridge0: port 2(bridge_slave_1) entered blocking state [ 162.185951][T10391] bridge0: port 2(bridge_slave_1) entered disabled state [ 162.193799][T10391] bridge_slave_1: entered allmulticast mode [ 162.201815][T10391] bridge_slave_1: entered promiscuous mode [ 162.231060][ T37] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 162.259857][T10391] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 162.273457][T10438] loop0: detected capacity change from 0 to 256 [ 162.275111][T10391] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 162.293967][ T37] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 162.306052][T10440] netlink: 96 bytes leftover after parsing attributes in process `syz.5.2740'. [ 162.336957][T10443] loop0: detected capacity change from 0 to 2048 [ 162.347660][T10391] team0: Port device team_slave_0 added [ 162.357154][T10391] team0: Port device team_slave_1 added [ 162.367701][T10443] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 162.388426][T10391] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 162.395556][T10391] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 162.421473][T10391] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 162.421809][T10447] FAULT_INJECTION: forcing a failure. [ 162.421809][T10447] name failslab, interval 1, probability 0, space 0, times 0 [ 162.432937][T10391] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 162.444850][T10447] CPU: 0 UID: 0 PID: 10447 Comm: syz.1.2742 Not tainted 6.15.0-rc3-syzkaller-00094-g02ddfb981de8 #0 PREEMPT(voluntary) [ 162.444881][T10447] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 162.444895][T10447] Call Trace: [ 162.444901][T10447] [ 162.444938][T10447] __dump_stack+0x1d/0x30 [ 162.444962][T10447] dump_stack_lvl+0xe8/0x140 [ 162.444983][T10447] dump_stack+0x15/0x1b [ 162.445020][T10447] should_fail_ex+0x265/0x280 [ 162.445053][T10447] should_failslab+0x8c/0xb0 [ 162.445079][T10447] kmem_cache_alloc_noprof+0x50/0x310 [ 162.445136][T10447] ? flock_lock_inode+0x135/0xf60 [ 162.445157][T10447] ? finish_task_switch+0xad/0x2b0 [ 162.445271][T10447] flock_lock_inode+0x135/0xf60 [ 162.445291][T10447] ? schedule+0x5f/0xd0 [ 162.445364][T10447] locks_lock_inode_wait+0x6f/0x2a0 [ 162.445410][T10447] ? __pfx_autoremove_wake_function+0x10/0x10 [ 162.445445][T10447] __se_sys_flock+0x2f1/0x3b0 [ 162.445487][T10447] __x64_sys_flock+0x31/0x40 [ 162.445641][T10447] x64_sys_call+0x2eed/0x2fb0 [ 162.445667][T10447] do_syscall_64+0xd0/0x1a0 [ 162.445696][T10447] ? clear_bhb_loop+0x25/0x80 [ 162.445722][T10447] ? clear_bhb_loop+0x25/0x80 [ 162.445795][T10447] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 162.445820][T10447] RIP: 0033:0x7efedc15e969 [ 162.445839][T10447] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 162.445911][T10447] RSP: 002b:00007efeda7c7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000049 [ 162.445934][T10447] RAX: ffffffffffffffda RBX: 00007efedc385fa0 RCX: 00007efedc15e969 [ 162.446008][T10447] RDX: 0000000000000000 RSI: 0000000000000002 RDI: 0000000000000008 [ 162.446022][T10447] RBP: 00007efeda7c7090 R08: 0000000000000000 R09: 0000000000000000 [ 162.446037][T10447] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 162.446052][T10447] R13: 0000000000000000 R14: 00007efedc385fa0 R15: 00007ffce7f98f38 [ 162.446139][T10447] [ 162.514428][T10443] loop0: detected capacity change from 2048 to 0 [ 162.518413][T10391] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 162.599781][T10461] xt_hashlimit: max too large, truncated to 1048576 [ 162.605273][T10391] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 162.613708][T10462] xt_hashlimit: max too large, truncated to 1048576 [ 162.622309][T10463] Illegal XDP return value 3694159902 on prog (id 1507) dev syz_tun, expect packet loss! [ 162.708381][T10443] syz.0.2741: attempt to access beyond end of device [ 162.708381][T10443] loop0: rw=524288, sector=384, nr_sectors = 20 limit=0 [ 162.728399][T10443] syz.0.2741: attempt to access beyond end of device [ 162.728399][T10443] loop0: rw=0, sector=384, nr_sectors = 8 limit=0 [ 162.758159][T10391] hsr_slave_0: entered promiscuous mode [ 162.764255][T10391] hsr_slave_1: entered promiscuous mode [ 162.771691][T10391] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 162.779765][T10391] Cannot create hsr debugfs directory [ 162.789437][ T37] bridge_slave_1: left allmulticast mode [ 162.795196][ T37] bridge_slave_1: left promiscuous mode [ 162.800902][ T37] bridge0: port 2(bridge_slave_1) entered disabled state [ 162.800952][T10463] loop5: detected capacity change from 0 to 128 [ 162.816374][ T37] bridge_slave_0: left promiscuous mode [ 162.822068][ T37] bridge0: port 1(bridge_slave_0) entered disabled state [ 162.835701][T10443] syz.0.2741: attempt to access beyond end of device [ 162.835701][T10443] loop0: rw=12288, sector=64, nr_sectors = 4 limit=0 [ 162.849104][T10443] EXT4-fs error (device loop0): __ext4_find_entry:1617: inode #2: comm syz.0.2741: reading directory lblock 0 [ 162.860910][T10443] syz.0.2741: attempt to access beyond end of device [ 162.860910][T10443] loop0: rw=145409, sector=0, nr_sectors = 4 limit=0 [ 162.874248][T10443] Buffer I/O error on dev loop0, logical block 0, lost sync page write [ 162.882526][T10443] EXT4-fs (loop0): I/O error while writing superblock [ 162.902864][ T3310] syz-executor: attempt to access beyond end of device [ 162.902864][ T3310] loop0: rw=12288, sector=64, nr_sectors = 4 limit=0 [ 162.917240][ T3310] syz-executor: attempt to access beyond end of device [ 162.917240][ T3310] loop0: rw=524288, sector=20, nr_sectors = 4 limit=0 [ 162.932748][ T3310] syz-executor: attempt to access beyond end of device [ 162.932748][ T3310] loop0: rw=524288, sector=24, nr_sectors = 4 limit=0 [ 162.946753][ T3310] syz-executor: attempt to access beyond end of device [ 162.946753][ T3310] loop0: rw=524288, sector=28, nr_sectors = 4 limit=0 [ 162.960402][ T3310] syz-executor: attempt to access beyond end of device [ 162.960402][ T3310] loop0: rw=524288, sector=32, nr_sectors = 4 limit=0 [ 162.974086][ T3310] syz-executor: attempt to access beyond end of device [ 162.974086][ T3310] loop0: rw=12288, sector=16, nr_sectors = 4 limit=0 [ 162.989651][ T3310] EXT4-fs error (device loop0): ext4_get_inode_loc:4588: inode #2: block 4: comm syz-executor: unable to read itable block [ 162.989888][ T37] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 163.002711][ T3310] Buffer I/O error on dev loop0, logical block 0, lost sync page write [ 163.019365][ T3310] EXT4-fs (loop0): I/O error while writing superblock [ 163.026232][ T3310] EXT4-fs error (device loop0) in ext4_reserve_inode_write:5899: IO failure [ 163.034994][ T3310] Buffer I/O error on dev loop0, logical block 0, lost sync page write [ 163.035208][ T37] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 163.043237][ T3310] EXT4-fs (loop0): I/O error while writing superblock [ 163.043251][ T3310] EXT4-fs error (device loop0): ext4_dirty_inode:6103: inode #2: comm syz-executor: mark_inode_dirty error [ 163.070145][ T3310] Buffer I/O error on dev loop0, logical block 0, lost sync page write [ 163.071074][ T37] bond0 (unregistering): Released all slaves [ 163.078446][ T3310] EXT4-fs (loop0): I/O error while writing superblock [ 163.093351][ T51] EXT4-fs error (device loop0): __ext4_get_inode_loc_noinmem:4573: inode #2: block 4: comm kworker/u8:3: unable to read itable block [ 163.107203][ T51] Buffer I/O error on dev loop0, logical block 0, lost sync page write [ 163.120794][ T51] EXT4-fs (loop0): I/O error while writing superblock [ 163.132793][ T3310] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 163.142883][ T3310] Buffer I/O error on dev loop0, logical block 0, lost sync page write [ 163.143405][T10463] team0 (unregistering): Port device team_slave_0 removed [ 163.152548][ T3310] EXT4-fs (loop0): I/O error while writing superblock [ 163.166984][T10448] Buffer I/O error on dev loop0, logical block 64, lost sync page write [ 163.177676][T10463] team0 (unregistering): Port device team_slave_1 removed [ 163.209724][T10479] FAULT_INJECTION: forcing a failure. [ 163.209724][T10479] name failslab, interval 1, probability 0, space 0, times 0 [ 163.222508][T10479] CPU: 0 UID: 0 PID: 10479 Comm: +}[@ Not tainted 6.15.0-rc3-syzkaller-00094-g02ddfb981de8 #0 PREEMPT(voluntary) [ 163.222619][T10479] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 163.222636][T10479] Call Trace: [ 163.222644][T10479] [ 163.222654][T10479] __dump_stack+0x1d/0x30 [ 163.222692][T10479] dump_stack_lvl+0xe8/0x140 [ 163.222714][T10479] dump_stack+0x15/0x1b [ 163.222772][T10479] should_fail_ex+0x265/0x280 [ 163.222840][T10479] ? __request_module+0x1c4/0x3e0 [ 163.222874][T10479] should_failslab+0x8c/0xb0 [ 163.222900][T10479] ? dev_load+0x61/0xc0 [ 163.222932][T10479] __kmalloc_cache_noprof+0x4c/0x320 [ 163.223015][T10479] ? dev_load+0x61/0xc0 [ 163.223046][T10479] __request_module+0x1c4/0x3e0 [ 163.223080][T10479] ? capable+0x7c/0xb0 [ 163.223179][T10479] dev_load+0x61/0xc0 [ 163.223212][T10479] dev_ioctl+0x4fe/0x960 [ 163.223245][T10479] sock_do_ioctl+0x197/0x220 [ 163.223271][T10479] sock_ioctl+0x41b/0x610 [ 163.223306][T10479] ? __pfx_sock_ioctl+0x10/0x10 [ 163.223327][T10479] __se_sys_ioctl+0xcb/0x140 [ 163.223388][T10479] __x64_sys_ioctl+0x43/0x50 [ 163.223421][T10479] x64_sys_call+0x19a8/0x2fb0 [ 163.223443][T10479] do_syscall_64+0xd0/0x1a0 [ 163.223469][T10479] ? clear_bhb_loop+0x25/0x80 [ 163.223533][T10479] ? clear_bhb_loop+0x25/0x80 [ 163.223556][T10479] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 163.223669][T10479] RIP: 0033:0x7efedc15e969 [ 163.223686][T10479] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 163.223705][T10479] RSP: 002b:00007efeda7c7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 163.223787][T10479] RAX: ffffffffffffffda RBX: 00007efedc385fa0 RCX: 00007efedc15e969 [ 163.223828][T10479] RDX: 0000200000000540 RSI: 0000000000008933 RDI: 0000000000000006 [ 163.223837][T10479] RBP: 00007efeda7c7090 R08: 0000000000000000 R09: 0000000000000000 [ 163.223846][T10479] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 163.223900][T10479] R13: 0000000000000000 R14: 00007efedc385fa0 R15: 00007ffce7f98f38 [ 163.223915][T10479] [ 163.440591][ T37] tipc: Disabling bearer [ 163.445647][ T37] tipc: Left network mode [ 163.512755][ T37] hsr_slave_0: left promiscuous mode [ 163.521854][ T37] hsr_slave_1: left promiscuous mode [ 163.538069][ T37] veth1_macvtap: left promiscuous mode [ 163.543649][ T37] veth0_macvtap: left promiscuous mode [ 163.549315][ T37] veth1_vlan: left promiscuous mode [ 163.554762][ T37] veth0_vlan: left promiscuous mode [ 163.567832][T10489] loop4: detected capacity change from 0 to 512 [ 163.643845][ T37] team0 (unregistering): Port device team_slave_1 removed [ 163.653798][ T37] team0 (unregistering): Port device team_slave_0 removed [ 163.817027][T10490] lo speed is unknown, defaulting to 1000 [ 163.869690][T10490] chnl_net:caif_netlink_parms(): no params data found [ 163.908609][T10490] bridge0: port 1(bridge_slave_0) entered blocking state [ 163.915798][T10490] bridge0: port 1(bridge_slave_0) entered disabled state [ 163.923281][T10490] bridge_slave_0: entered allmulticast mode [ 163.930596][T10490] bridge_slave_0: entered promiscuous mode [ 163.939448][T10490] bridge0: port 2(bridge_slave_1) entered blocking state [ 163.946854][T10490] bridge0: port 2(bridge_slave_1) entered disabled state [ 163.955564][T10490] bridge_slave_1: entered allmulticast mode [ 163.962067][T10490] bridge_slave_1: entered promiscuous mode [ 163.987097][T10490] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 163.998908][T10490] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 164.020779][T10490] team0: Port device team_slave_0 added [ 164.029502][T10490] team0: Port device team_slave_1 added [ 164.050379][T10490] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 164.057438][T10490] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 164.083413][T10490] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 164.095630][T10391] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 164.105904][T10391] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 164.114963][T10490] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 164.121920][T10490] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 164.147949][T10490] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 164.169977][ T37] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 164.181162][T10391] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 164.195236][T10391] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 164.206823][T10490] hsr_slave_0: entered promiscuous mode [ 164.212900][T10490] hsr_slave_1: entered promiscuous mode [ 164.219137][T10490] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 164.226845][T10490] Cannot create hsr debugfs directory [ 164.234328][T10534] FAULT_INJECTION: forcing a failure. [ 164.234328][T10534] name failslab, interval 1, probability 0, space 0, times 0 [ 164.247133][T10534] CPU: 0 UID: 0 PID: 10534 Comm: syz.1.2771 Not tainted 6.15.0-rc3-syzkaller-00094-g02ddfb981de8 #0 PREEMPT(voluntary) [ 164.247166][T10534] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 164.247194][T10534] Call Trace: [ 164.247203][T10534] [ 164.247208][T10534] __dump_stack+0x1d/0x30 [ 164.247226][T10534] dump_stack_lvl+0xe8/0x140 [ 164.247242][T10534] dump_stack+0x15/0x1b [ 164.247255][T10534] should_fail_ex+0x265/0x280 [ 164.247291][T10534] should_failslab+0x8c/0xb0 [ 164.247312][T10534] __kmalloc_noprof+0xa5/0x3e0 [ 164.247447][T10534] ? alloc_pipe_info+0x1c9/0x350 [ 164.247486][T10534] alloc_pipe_info+0x1c9/0x350 [ 164.247505][T10534] splice_direct_to_actor+0x592/0x680 [ 164.247532][T10534] ? kstrtouint_from_user+0xac/0xe0 [ 164.247555][T10534] ? __pfx_direct_splice_actor+0x10/0x10 [ 164.247730][T10534] ? __rcu_read_unlock+0x4f/0x70 [ 164.247756][T10534] ? get_pid_task+0x96/0xd0 [ 164.247793][T10534] ? avc_policy_seqno+0x15/0x30 [ 164.247831][T10534] do_splice_direct+0xda/0x150 [ 164.247857][T10534] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 164.247904][T10534] do_sendfile+0x380/0x640 [ 164.247955][T10534] __x64_sys_sendfile64+0x105/0x150 [ 164.247976][T10534] x64_sys_call+0xb39/0x2fb0 [ 164.247993][T10534] do_syscall_64+0xd0/0x1a0 [ 164.248012][T10534] ? clear_bhb_loop+0x25/0x80 [ 164.248069][T10534] ? clear_bhb_loop+0x25/0x80 [ 164.248086][T10534] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 164.248102][T10534] RIP: 0033:0x7efedc15e969 [ 164.248113][T10534] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 164.248146][T10534] RSP: 002b:00007efeda7c7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 164.248239][T10534] RAX: ffffffffffffffda RBX: 00007efedc385fa0 RCX: 00007efedc15e969 [ 164.248250][T10534] RDX: 0000000000000000 RSI: 0000000000000006 RDI: 0000000000000006 [ 164.248260][T10534] RBP: 00007efeda7c7090 R08: 0000000000000000 R09: 0000000000000000 [ 164.248270][T10534] R10: 0000000800000009 R11: 0000000000000246 R12: 0000000000000001 [ 164.248351][T10534] R13: 0000000000000000 R14: 00007efedc385fa0 R15: 00007ffce7f98f38 [ 164.248367][T10534] [ 164.480890][ T37] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 164.529157][ T37] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 164.549206][T10541] loop4: detected capacity change from 0 to 2048 [ 164.556037][T10541] EXT4-fs: inline encryption not supported [ 164.580446][T10391] 8021q: adding VLAN 0 to HW filter on device bond0 [ 164.593560][T10391] 8021q: adding VLAN 0 to HW filter on device team0 [ 164.626306][ T31] bridge0: port 1(bridge_slave_0) entered blocking state [ 164.633394][ T31] bridge0: port 1(bridge_slave_0) entered forwarding state [ 164.644091][T10541] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 164.661404][T10541] EXT4-fs error (device loop4): ext4_find_extent:938: inode #2: comm syz.4.2774: pblk 1 bad header/extent: invalid magic - magic 2, entries 0, max 3(0), depth 0(4) [ 164.680215][T10541] EXT4-fs (loop4): Remounting filesystem read-only [ 164.734426][ T29] kauditd_printk_skb: 299 callbacks suppressed [ 164.734443][ T29] audit: type=1326 audit(1745598351.136:13412): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10545 comm="syz.5.2775" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f83a867e969 code=0x7ffc0000 [ 164.764246][ T29] audit: type=1326 audit(1745598351.136:13413): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10545 comm="syz.5.2775" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f83a867e969 code=0x7ffc0000 [ 164.787848][ T29] audit: type=1326 audit(1745598351.136:13414): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10545 comm="syz.5.2775" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f83a867e969 code=0x7ffc0000 [ 164.811387][ T29] audit: type=1326 audit(1745598351.136:13415): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10545 comm="syz.5.2775" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f83a867e969 code=0x7ffc0000 [ 164.834978][ T29] audit: type=1326 audit(1745598351.136:13416): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10545 comm="syz.5.2775" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f83a867e969 code=0x7ffc0000 [ 164.858561][ T29] audit: type=1326 audit(1745598351.136:13417): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10545 comm="syz.5.2775" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f83a867e969 code=0x7ffc0000 [ 164.882071][ T29] audit: type=1326 audit(1745598351.136:13418): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10545 comm="syz.5.2775" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f83a867e969 code=0x7ffc0000 [ 164.905742][ T29] audit: type=1326 audit(1745598351.136:13419): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10545 comm="syz.5.2775" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f83a867e969 code=0x7ffc0000 [ 164.929447][ T29] audit: type=1326 audit(1745598351.136:13420): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10545 comm="syz.5.2775" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f83a867e969 code=0x7ffc0000 [ 165.058056][ T37] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 165.070230][ T31] bridge0: port 2(bridge_slave_1) entered blocking state [ 165.077372][ T31] bridge0: port 2(bridge_slave_1) entered forwarding state [ 165.093860][ T29] audit: type=1326 audit(1745598351.496:13421): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10545 comm="syz.5.2775" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f83a867e969 code=0x7ffc0000 [ 165.115727][T10490] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 165.126504][T10552] __nla_validate_parse: 3 callbacks suppressed [ 165.126517][T10552] netlink: 132 bytes leftover after parsing attributes in process `syz.4.2774'. [ 165.144148][T10490] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 165.164219][ T3303] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 165.165142][T10490] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 165.191176][T10490] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 165.253451][ T37] bridge_slave_1: left allmulticast mode [ 165.259408][ T37] bridge_slave_1: left promiscuous mode [ 165.265158][ T37] bridge0: port 2(bridge_slave_1) entered disabled state [ 165.273837][ T37] bridge_slave_0: left allmulticast mode [ 165.279633][ T37] bridge_slave_0: left promiscuous mode [ 165.285557][ T37] bridge0: port 1(bridge_slave_0) entered disabled state [ 165.460613][ T37]  (unregistering): (slave bond_slave_0): Releasing backup interface [ 165.470662][ T37]  (unregistering): (slave bond_slave_1): Releasing backup interface [ 165.480166][ T37]  (unregistering): (slave batadv0): Releasing backup interface [ 165.488536][ T37]  (unregistering): Released all slaves [ 165.503698][T10579] netlink: 96 bytes leftover after parsing attributes in process `syz.1.2785'. [ 165.540503][T10490] 8021q: adding VLAN 0 to HW filter on device bond0 [ 165.550746][T10391] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 165.564998][T10490] 8021q: adding VLAN 0 to HW filter on device team0 [ 165.580067][T10582] loop5: detected capacity change from 0 to 764 [ 165.583714][ T57] bridge0: port 1(bridge_slave_0) entered blocking state [ 165.593467][ T57] bridge0: port 1(bridge_slave_0) entered forwarding state [ 165.602522][ T57] bridge0: port 2(bridge_slave_1) entered blocking state [ 165.609606][ T57] bridge0: port 2(bridge_slave_1) entered forwarding state [ 165.645438][ T37] hsr_slave_0: left promiscuous mode [ 165.651698][ T37] hsr_slave_1: left promiscuous mode [ 165.658803][ T37] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 165.666351][ T37] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 165.673886][ T37] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 165.681501][ T37] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 165.692078][ T37] veth1_macvtap: left promiscuous mode [ 165.697829][ T37] veth0_macvtap: left promiscuous mode [ 165.703412][ T37] veth1_vlan: left promiscuous mode [ 165.703519][T10595] xt_CT: You must specify a L4 protocol and not use inversions on it [ 165.708721][ T37] veth0_vlan: left promiscuous mode [ 165.725143][T10595] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2788'. [ 165.762992][ T51] smc: removing ib device syz1 [ 165.790747][ T37] team0 (unregistering): Port device team_slave_1 removed [ 165.801338][ T37] team0 (unregistering): Port device team_slave_0 removed [ 165.879025][T10490] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 165.892289][T10595] delete_channel: no stack [ 165.929512][T10614] loop4: detected capacity change from 0 to 256 [ 165.937162][T10391] veth0_vlan: entered promiscuous mode [ 165.960270][T10391] veth1_vlan: entered promiscuous mode [ 165.974888][T10616] loop5: detected capacity change from 0 to 764 [ 165.998798][T10490] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 166.078221][T10391] veth0_macvtap: entered promiscuous mode [ 166.090558][T10391] veth1_macvtap: entered promiscuous mode [ 166.110435][T10391] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 166.120918][T10391] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 166.130913][T10391] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 166.141457][T10391] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 166.151307][T10391] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 166.161755][T10391] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 166.172384][T10391] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 166.208756][T10636] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2802'. [ 166.220580][T10636] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2802'. [ 166.221522][T10634] bridge0: port 2(bridge_slave_1) entered disabled state [ 166.236757][T10634] bridge0: port 1(bridge_slave_0) entered disabled state [ 166.270104][T10634] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 166.280335][T10634] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 166.306007][T10634] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 166.315076][T10634] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 166.323983][T10634] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 166.333059][T10634] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 166.346935][T10391] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 166.357500][T10391] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 166.367417][T10391] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 166.377864][T10391] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 166.385478][T10640] netlink: 16 bytes leftover after parsing attributes in process `syz.5.2802'. [ 166.396718][T10391] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 166.452655][T10391] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 166.461549][T10391] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 166.470581][T10391] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 166.479526][T10391] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 166.482088][T10647] loop4: detected capacity change from 0 to 2048 [ 166.512944][T10647] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 166.543740][T10490] veth0_vlan: entered promiscuous mode [ 166.559871][T10490] veth1_vlan: entered promiscuous mode [ 166.581074][T10490] veth0_macvtap: entered promiscuous mode [ 166.589691][T10490] veth1_macvtap: entered promiscuous mode [ 166.599816][T10490] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 166.610531][T10490] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 166.620439][T10490] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 166.631123][T10490] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 166.641121][T10490] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 166.651684][T10490] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 166.667028][T10490] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 166.681752][T10490] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 166.692340][T10490] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 166.702205][T10490] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 166.712686][T10490] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 166.722547][T10490] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 166.733190][T10490] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 166.744796][T10490] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 166.752469][T10647] lo speed is unknown, defaulting to 1000 [ 166.760682][T10490] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 166.769579][T10490] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 166.778384][T10490] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 166.785075][T10663] EXT4-fs (loop4): Delayed block allocation failed for inode 18 at logical offset 1 with max blocks 1 with error 28 [ 166.787199][T10490] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 166.799362][T10663] EXT4-fs (loop4): This should not happen!! Data will be lost [ 166.799362][T10663] [ 166.816932][T10668] 9pnet: p9_errstr2errno: server reported unknown error õ1 g;-‡~ >*Q©/×–¼4×Ïn6€[Cw÷«›Á¤Æ§ïTæv?×&L9ê [ 166.817861][T10663] EXT4-fs (loop4): Total free blocks count 0 [ 166.835457][T10663] EXT4-fs (loop4): Free/Dirty block details [ 166.841408][T10663] EXT4-fs (loop4): free_blocks=0 [ 166.846358][T10663] EXT4-fs (loop4): dirty_blocks=0 [ 166.851397][T10663] EXT4-fs (loop4): Block reservation details [ 166.857477][T10663] EXT4-fs (loop4): i_reserved_data_blocks=0 [ 166.927552][T10671] smc: net device bond0 applied user defined pnetid SYZ0 [ 166.938857][T10673] loop5: detected capacity change from 0 to 764 [ 166.945971][T10671] smc: net device bond0 erased user defined pnetid SYZ0 [ 167.028628][ T3303] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 167.039289][ T3303] ================================================================== [ 167.047376][ T3303] BUG: KCSAN: data-race in kick_pool / wq_worker_running [ 167.054451][ T3303] [ 167.056763][ T3303] read-write to 0xffff888237c299a4 of 4 bytes by task 3381 on cpu 0: [ 167.064831][ T3303] wq_worker_running+0x95/0x120 [ 167.069685][ T3303] schedule_preempt_disabled+0x10/0x20 [ 167.075150][ T3303] __mutex_lock+0x414/0xa50 [ 167.079647][ T3303] __mutex_lock_slowpath+0xa/0x10 [ 167.084674][ T3303] mutex_lock+0x27/0x30 [ 167.088821][ T3303] synchronize_rcu_expedited+0x18a/0x790 [ 167.094454][ T3303] synchronize_rcu+0x45/0x320 [ 167.099139][ T3303] key_garbage_collector+0x77f/0x8f0 [ 167.104421][ T3303] process_scheduled_works+0x4cb/0x9d0 [ 167.109877][ T3303] worker_thread+0x582/0x770 [ 167.114473][ T3303] kthread+0x486/0x510 [ 167.118546][ T3303] ret_from_fork+0x4b/0x60 [ 167.122988][ T3303] ret_from_fork_asm+0x1a/0x30 [ 167.127744][ T3303] [ 167.130056][ T3303] read to 0xffff888237c299a4 of 4 bytes by task 3303 on cpu 1: [ 167.137586][ T3303] kick_pool+0x49/0x2d0 [ 167.141741][ T3303] __queue_work+0x8d6/0xb60 [ 167.146242][ T3303] queue_work_on+0xd1/0x160 [ 167.150736][ T3303] __lru_add_drain_all+0x2c6/0x3f0 [ 167.155834][ T3303] lru_add_drain_all+0x10/0x20 [ 167.160586][ T3303] invalidate_bdev+0x47/0x70 [ 167.165160][ T3303] ext4_put_super+0x624/0x7d0 [ 167.169831][ T3303] generic_shutdown_super+0xe3/0x210 [ 167.175116][ T3303] kill_block_super+0x2a/0x70 [ 167.179781][ T3303] ext4_kill_sb+0x42/0x80 [ 167.184101][ T3303] deactivate_locked_super+0x72/0x1c0 [ 167.189475][ T3303] deactivate_super+0x97/0xa0 [ 167.194153][ T3303] cleanup_mnt+0x269/0x2e0 [ 167.198582][ T3303] __cleanup_mnt+0x19/0x20 [ 167.203003][ T3303] task_work_run+0x12e/0x1a0 [ 167.207593][ T3303] resume_user_mode_work+0x6a/0x70 [ 167.212705][ T3303] syscall_exit_to_user_mode+0x77/0xb0 [ 167.218155][ T3303] do_syscall_64+0xdd/0x1a0 [ 167.222680][ T3303] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 167.228572][ T3303] [ 167.230878][ T3303] value changed: 0x00000000 -> 0x00000001 [ 167.236580][ T3303] [ 167.238888][ T3303] Reported by Kernel Concurrency Sanitizer on: [ 167.245021][ T3303] CPU: 1 UID: 0 PID: 3303 Comm: syz-executor Not tainted 6.15.0-rc3-syzkaller-00094-g02ddfb981de8 #0 PREEMPT(voluntary) [ 167.257680][ T3303] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 167.267726][ T3303] ================================================================== [ 167.303895][T10680] vlan2: entered allmulticast mode