last executing test programs: 54.681881977s ago: executing program 1 (id=1315): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0900000004000000e27f00000100000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000410000000000000000000d80f000000000000"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xee}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00', r1}, 0x10) r2 = socket(0x2, 0x3, 0xff) bind$inet(r2, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) connect$inet(r2, &(0x7f00000000c0)={0x2, 0x0, @multicast1}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={0x0}, 0x18) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x3000004, 0x3032, 0xffffffffffffffff, 0x0) r3 = socket(0x10, 0x3, 0x0) r4 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r4) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb7"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x36, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0xd}, 0x0, 0x10000, 0x0, 0x1, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r6 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000d40)=@newqdisc={0x3a8, 0x24, 0x3fe3aa0262d8c783, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {}, {0xffff, 0xffff}, {0x8}}, [@qdisc_kind_options=@q_choke={{0xa}, {0x378, 0x2, [@TCA_CHOKE_PARMS={0x14, 0x1, {0x0, 0x0, 0x0, 0xfd, 0x2}}, @TCA_CHOKE_PARMS={0x14, 0x1, {0x64, 0x2, 0x3, 0x17, 0xd, 0x8, 0x1}}, @TCA_CHOKE_MAX_P={0x8, 0x3, 0x2}, @TCA_CHOKE_PARMS={0x14, 0x1, {0x0, 0x0, 0x0, 0x0, 0xe}}, @TCA_CHOKE_MAX_P={0x8}, @TCA_CHOKE_STAB={0x104, 0x2, "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"}, @TCA_CHOKE_MAX_P={0x8}, @TCA_CHOKE_STAB={0x104, 0x2, "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"}, @TCA_CHOKE_PARMS={0x14, 0x1, {0x2}}, @TCA_CHOKE_STAB={0x104, 0x2, "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"}]}}]}, 0x3a8}}, 0x0) sendmmsg$unix(r2, &(0x7f0000002fc0)=[{{0x0, 0x0, &(0x7f0000000740)=[{&(0x7f0000000200)="643c87cf2bd21d995e613d73613b1e78334efea0", 0x14}], 0x1}}], 0x1, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) 53.993587977s ago: executing program 1 (id=1320): r0 = syz_open_dev$tty1(0xc, 0x4, 0x4) r1 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000800)=@newqdisc={0x48, 0x24, 0xf0b, 0x70bd2e, 0x20000000, {0x0, 0x0, 0x12, 0x0, {}, {0xffff, 0xffff}, {0x2}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x0, '\x00', 0x3, 0x7, 0x9, 0x4}}}}]}, 0x48}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000200)={'ip6_vti0\x00', 0x0}) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b702000002000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r6}, 0x10) ioctl$KDSKBENT(r0, 0x4b47, &(0x7f0000000040)={0x8, 0x4, 0xfff2}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000140)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x2000008, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xfff1, 0xffff}}, [@TCA_INGRESS_BLOCK={0x8, 0xd, 0x8}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x8}]}, 0x34}}, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000a80)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0xe, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r7}, 0x10) ioctl$TIOCL_BLANKSCREEN(r0, 0x4b67, &(0x7f0000000180)) 53.752038961s ago: executing program 1 (id=1321): mknodat$null(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0xb0a54e68b1cd2fdb, 0x103) write$P9_RVERSION(0xffffffffffffffff, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065fffff530000008003950323030302e75"], 0x15) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000300)=ANY=[], 0x15) r2 = dup(r1) write$P9_RLERRORu(r2, &(0x7f0000000540)=ANY=[@ANYBLOB="8b"], 0x53) write$RDMA_USER_CM_CMD_SET_OPTION(r2, &(0x7f0000000100)={0xe, 0x18, 0xfa00, @id_afonly={0x0}}, 0x20) write$binfmt_elf64(r2, &(0x7f0000000340)=ANY=[@ANYBLOB="7f454c4600073f034b0b00000000000003003e00ffffffe93501"], 0x7c8) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000010000000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000008b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='kfree\x00', r3}, 0x10) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) creat(0x0, 0x20) 53.663521502s ago: executing program 1 (id=1323): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000000000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000480)='kfree\x00', r1}, 0x10) socket$nl_route(0x10, 0x3, 0x0) syz_mount_image$msdos(&(0x7f0000000000), &(0x7f0000000080)='./file1\x00', 0x122c0c0, &(0x7f0000000c80)=ANY=[@ANYBLOB="73686f77657865632c747a3d5554432c7379735f696d6d757461626c652c6e6f646f74732c6e6f646f7473531282bc7cc5d3d78e7f2c646f74732c6572726f72733d636f6e74696e75652c646f74732c6e6f646f74732c636865636b3d7374726963742c7379735f696d6d757461626c652c646f74732c646f74732c6e6f636173652c7379735f696d6d757461626c652c646f636b3d7376726963742c646f74732c6e6f646f74732c080065667265652c6e6f646f74732c6e032a77c86d5c3a5edb0950783b197cf6e509361265937d84cb86a9f59491ade6978711bafdc6e4fd59dedbf4a3afcc5accf742bdd669730d9dc1c729f0cb16c3bcfa447776a9726f201b2721f84eb4fd91e55f81825ac2d4c11007cdbad5f870a7436e1002f40cc70d882b1d436160041849f5304c5378209587f313508abcd17df057d21702bc74e3d5495d1e3f5889e9e3f179ef639ab30c414ba282cfb3a912de82995a4d112d4c3c1b8d1f72f49d37454e95991e60ed662a27a7048b4a16f2e0c351d5", @ANYBLOB="ea7805cc5d42a51a2fe373548cfa37a7365b87a9a3b3902733e1dfa1759033bca1362d763931193ede6421d3b8f4e36212b2e68715752d6bcbaeb167de54", @ANYRES32, @ANYRES8=0x0], 0xfd, 0x1d1, &(0x7f00000002c0)="$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") syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x200000, &(0x7f0000000640)={[{@grpjquota}, {@auto_da_alloc_val}, {@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0x9}}, {@norecovery}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@oldalloc}, {@nodelalloc}, {@usrquota}, {@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0x53}}]}, 0xfa, 0x576, &(0x7f0000001480)="$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") process_vm_readv(0x0, &(0x7f0000000240)=[{0x0}, {&(0x7f0000000600)=""/166, 0xa6}], 0x2, 0x0, 0x0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) ioctl$FS_IOC_GETFSMAP(r2, 0xc0c0583b, &(0x7f0000000240)=ANY=[]) mkdir(&(0x7f0000000040)='.\x02\x00', 0xe88022b11028290f) capset(&(0x7f0000000380)={0x20080522}, &(0x7f0000000040)={0x200000, 0x40200003, 0x0, 0x6, 0x7}) setrlimit(0x40000000000008, &(0x7f0000000080)={0x0, 0x6}) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x5, 0xb, &(0x7f0000000940)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020207a2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000001000000b703000000000000850000002d0000009509517d4930d254925ef3c01adb0106a689af78ad4a9bd1c65d9bc8371b6f1a27cbb5889aa31d6467eaf287387ebb5fb258aee449bddd9648851be3d55609f6cba9b40d92b3944d09d0fe80bdcdb566952cd798f33f6c8397317e3e733eade38aa96dcba37d"], &(0x7f00000007c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0xfffffffffffffff4) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000ac0)='kmem_cache_free\x00', r3, 0x0, 0x6}, 0x18) r4 = socket$inet_udp(0x2, 0x2, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x64, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_bp={&(0x7f0000000800), 0x4}, 0x0, 0x0, 0x800000, 0x6, 0x2, 0x2, 0x800, 0x0, 0x0, 0x0, 0x10000c0}, 0x0, 0x3, r2, 0x1) r5 = syz_open_dev$sg(0x0, 0x0, 0x401) syz_mount_image$ext4(&(0x7f0000000040)='ext2\x00', &(0x7f00000001c0)='./bus\x00', 0x41, &(0x7f0000000080), 0x64, 0x50b, &(0x7f0000000200)="$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") fspick(0xffffffffffffff9c, &(0x7f0000000b00)='.\x02\x00', 0x0) r6 = openat$binfmt_register(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) write$binfmt_register(r6, &(0x7f00000000c0)={0x3a, 'syz3', 0x3a, 'M', 0x3a, 0x9, 0x3a, '+\'', 0x3a, '', 0x3a, './file2', 0x3a, [0x46]}, 0x2a) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_int(r7, 0x1, 0x29, &(0x7f0000000140)=0x7fff, 0x4) socket$inet(0x2, 0x4000000000000001, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x36, 0xb, 0x0, 0x1, 0x0, 0x7, 0x12514, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0xd}, 0x0, 0x10000, 0x0, 0x1, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r8 = socket$phonet_pipe(0x23, 0x5, 0x2) flistxattr(r8, &(0x7f0000000840)=""/196, 0xc4) setsockopt$sock_int(r4, 0x1, 0x3c, &(0x7f00000000c0)=0x1, 0x4) sendmmsg$inet(r8, &(0x7f0000000780)=[{{&(0x7f0000000040)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x29}}, 0x10, 0x0, 0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="1c000000000000000000000008000000", @ANYRES64=r5, @ANYBLOB="ac1414aafbffffff0000000010000000000000000000000007"]}}], 0x1, 0x400c000) open(&(0x7f00000001c0)='.\x02\x00', 0x200002, 0x0) 53.573060243s ago: executing program 1 (id=1329): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000340)=ANY=[@ANYBLOB="18000000000000000000000000000000000000000e0028e0f300d4e79181ec46001257cc476ba9cae8337377901450f2672b6d9b04706cd02655766eb394fbdc6150ef89857f591eedca2f5b175f45c704b9f02ece94ef144e5a7e88aa59ab4ecf"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffd}, 0x94) r0 = socket$inet6(0xa, 0x3, 0x8) sendmmsg$inet6(r0, &(0x7f0000004580)=[{{&(0x7f0000000080)={0xa, 0x0, 0x0, @mcast2}, 0x1c, 0x0, 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB='$\x00\x00\x00\x00\x00\x00\x00)\x00\x00\x002\x00\x00\x00'], 0x28}}], 0x1, 0x0) socket$inet6(0xa, 0x80003, 0xff) socket$inet_smc(0x2b, 0x1, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x42}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r1}, 0x0, &(0x7f0000000040)}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a00)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="1804000000000000000000000000000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b100000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0xc94284a3061bb7fe, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7}, 0x94) syz_open_dev$evdev(0x0, 0x0, 0x173540) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000001740)={r2, 0x0, &(0x7f0000001700)=""/53}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000008c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2], 0x0, 0x0, 0x0, 0x0, 0x0, 0x20}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000500)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x1, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000040)='sched_switch\x00', r3}, 0x10) socket$inet_tcp(0x2, 0x1, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) r5 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000340)={'veth0_to_hsr\x00', 0x0}) r7 = socket$nl_route(0x10, 0x3, 0x0) bind$packet(r5, &(0x7f0000000080)={0x11, 0x4, r6, 0x1, 0x6, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x3e}}, 0x14) ioctl$FAT_IOCTL_GET_VOLUME_ID(0xffffffffffffffff, 0x80047213, &(0x7f0000000000)) sendmsg$nl_route_sched(r7, &(0x7f00000003c0)={0x0, 0x300, &(0x7f00000007c0)={&(0x7f0000000780)=@getchain={0x24, 0x11, 0x1, 0x70bd2c, 0x25dfdbff, {0x0, 0x0, 0x0, r6, {0xd}, {0xfff1, 0xfff2}, {0x0, 0xe}}}, 0x24}}, 0x40000) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x20, '\x00', 0x0, @fallback=0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r8, 0x0, 0xffffffffffffffff}, 0x18) socket$nl_netfilter(0x10, 0x3, 0xc) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x11, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) 53.159402929s ago: executing program 1 (id=1332): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000010007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x18) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000005c0)={0xffffffffffffffff, 0xffffffffffffffff}) pwritev2(r2, &(0x7f0000000940)=[{&(0x7f0000000780)="c522c4a86e56e9054a693d4c71ec815a9336ed0fd940c8d4a97e46a899f94bd6c0add50a0f5a66a132c2ff91a2e8573938f389197ec21b436f7e05aece6d5517f50a3f8c52e9fd3a4b0ea7b83702", 0x4e}, {&(0x7f0000000200)="9bf9460ac404c484f8bf4d9de3853998950ffc60e82377d298", 0x19}, {&(0x7f0000000800)="8b1fd3f8934d2443a7de159d61ac3b6664e87a3dddcdc892756d1856cc47c438ababeaed978fb5f0a1cb036220e2ac3b6004f6f50ac5b468131a42d47bfd825686847f286a85e9b372bae55b6b6da6690d3931b356c5dde3d63fc779f2f56965070b0f56443a3a38518b50843f0d985f398e70a0d6295ba8be4b4ef65efd8c21bf946377ecf1b40fe0300db70f6318db1a792e4af0c75153505f", 0x9a}, {&(0x7f0000000a00)="412fef40148c0b50929b1a2ab0cdfb0b62edf0c0522532a67c8b8a81945b4f50c616a57db2fcd2749ad5c6da3fdf3a4c800b13dd687da68784dd00bb39815b4237744f1020621cc78e4b3f9c55c61d472dc203e96a2e1681d5b99b25025e93c45224c5747b586afc85bc74d077ece26d5d9b8260d47272dfb03aee93cf85c242e16a8035028a8dbc84257fc196053bdd05ff11d1d9f8f46c36926fa29405888edd2f7d7fc142c7a8f549cad345bf2a81f2108a69968fb0863038baadff95cc247b3f54932f2adcb5e12ef50d4f805cf17891178dc644aeb6a757836eaf727f85d9", 0xe1}, {&(0x7f0000000b00)="0ed27d1150d5eaa1351e8c51648a05e7e4b58d10d8c0ca764c370ab387d5495caaf4ef58af2126fd04fa3baeb59880f793e960766183e86e299d783708319e8e9984c869aec80f9576204e407a8ab3cbdb82d6f84904cf91d88f162da0ca2cd4f8cbb1dd35e9fb1e2e1d6e048a10750c5fe585e06ffca128a19f305b949eae8544fd650491aff963faacddda6cec1d114b3c", 0x92}, {&(0x7f00000008c0)="9416da71a9afe2", 0x7}], 0x6, 0x3, 0x2, 0x17) sendmsg$inet(r3, &(0x7f0000000f80)={0x0, 0x0, &(0x7f0000000f40)=[{&(0x7f00000042c0)="86", 0x1}], 0x1}, 0x0) recvmsg(r2, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000600)=""/203, 0xcb}], 0x1}, 0x0) syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000000)='./file1\x00', 0x2800400, &(0x7f0000000240)=ANY=[@ANYBLOB="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"], 0xf5, 0x305, &(0x7f0000000440)="$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") 53.0805452s ago: executing program 32 (id=1332): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000010007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x18) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000005c0)={0xffffffffffffffff, 0xffffffffffffffff}) pwritev2(r2, &(0x7f0000000940)=[{&(0x7f0000000780)="c522c4a86e56e9054a693d4c71ec815a9336ed0fd940c8d4a97e46a899f94bd6c0add50a0f5a66a132c2ff91a2e8573938f389197ec21b436f7e05aece6d5517f50a3f8c52e9fd3a4b0ea7b83702", 0x4e}, {&(0x7f0000000200)="9bf9460ac404c484f8bf4d9de3853998950ffc60e82377d298", 0x19}, {&(0x7f0000000800)="8b1fd3f8934d2443a7de159d61ac3b6664e87a3dddcdc892756d1856cc47c438ababeaed978fb5f0a1cb036220e2ac3b6004f6f50ac5b468131a42d47bfd825686847f286a85e9b372bae55b6b6da6690d3931b356c5dde3d63fc779f2f56965070b0f56443a3a38518b50843f0d985f398e70a0d6295ba8be4b4ef65efd8c21bf946377ecf1b40fe0300db70f6318db1a792e4af0c75153505f", 0x9a}, {&(0x7f0000000a00)="412fef40148c0b50929b1a2ab0cdfb0b62edf0c0522532a67c8b8a81945b4f50c616a57db2fcd2749ad5c6da3fdf3a4c800b13dd687da68784dd00bb39815b4237744f1020621cc78e4b3f9c55c61d472dc203e96a2e1681d5b99b25025e93c45224c5747b586afc85bc74d077ece26d5d9b8260d47272dfb03aee93cf85c242e16a8035028a8dbc84257fc196053bdd05ff11d1d9f8f46c36926fa29405888edd2f7d7fc142c7a8f549cad345bf2a81f2108a69968fb0863038baadff95cc247b3f54932f2adcb5e12ef50d4f805cf17891178dc644aeb6a757836eaf727f85d9", 0xe1}, {&(0x7f0000000b00)="0ed27d1150d5eaa1351e8c51648a05e7e4b58d10d8c0ca764c370ab387d5495caaf4ef58af2126fd04fa3baeb59880f793e960766183e86e299d783708319e8e9984c869aec80f9576204e407a8ab3cbdb82d6f84904cf91d88f162da0ca2cd4f8cbb1dd35e9fb1e2e1d6e048a10750c5fe585e06ffca128a19f305b949eae8544fd650491aff963faacddda6cec1d114b3c", 0x92}, {&(0x7f00000008c0)="9416da71a9afe2", 0x7}], 0x6, 0x3, 0x2, 0x17) sendmsg$inet(r3, &(0x7f0000000f80)={0x0, 0x0, &(0x7f0000000f40)=[{&(0x7f00000042c0)="86", 0x1}], 0x1}, 0x0) recvmsg(r2, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000600)=""/203, 0xcb}], 0x1}, 0x0) syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000000)='./file1\x00', 0x2800400, &(0x7f0000000240)=ANY=[@ANYBLOB="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"], 0xf5, 0x305, &(0x7f0000000440)="$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") 51.515437903s ago: executing program 3 (id=1353): bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[], 0x50) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0xe, 0x8, &(0x7f00000002c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x17, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x18) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000001780)=ANY=[@ANYBLOB="020000000400000006000000050000000010"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000260018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='sched_switch\x00', r4}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r5 = getpid() sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x2000000}, 0x6e) sendmmsg$unix(r7, 0x0, 0x0, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r8 = openat$rdma_cm(0xffffff9c, &(0x7f00000006c0), 0x2, 0x0) ioctl$int_in(r8, 0x5421, &(0x7f0000000f00)=0x3) write$RDMA_USER_CM_CMD_GET_EVENT(r8, &(0x7f0000000880)={0xc, 0x8, 0x144, {0x0}}, 0x10) syz_clone(0x6a020000, 0x0, 0x0, 0x0, 0x0, 0x0) r9 = socket$inet_tcp(0x2, 0x1, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r10 = getpid() r11 = syz_pidfd_open(r10, 0x0) setns(r11, 0x0) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000cc0)={&(0x7f00000001c0)=@kern={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000004c0)=[{&(0x7f0000000740)={0x2d8, 0x10, 0x10, 0x70bd25, 0x25dfdbfd, "", [@nested={0x123, 0x13, 0x0, 0x1, [@typed={0x8, 0x46, 0x0, 0x0, @ipv4=@broadcast}, @nested={0x4, 0x14a}, @typed={0x8, 0x35, 0x0, 0x0, @fd=r4}, @nested={0x4, 0xa4}, @generic="368a83b1a1fbc2fce9889662b4d3ad6adf62dbf735d4f5bfbbc1a82295789d239e11b25233fbac2fcf63bb505d4af5cf17f0db348dffae88101e739fbe9036be8fb7740c734d3ba7018d906b7544d92b31b89443fc2973eadaedabfc7e0ba79f65f37d72e49a9c0f234555a92af74b9dbc99c7d943432581f6993ffc995fa7de6dbc2d1374d34c1745fab22e13bb39a8e34b349138d958102e3e8ac07353669d359a7bcf687afabc63e3759a2416ff10bfc80d53d04ec96538d6c7105a95a6a6f9e70e4f06b7b8ac3aacbba185b51337f0343d25f8afa2defc085e09bbfbd0849793d8f11b766a6f3e4f1f571df85d", @generic="56be3b825841e68fdafad8aaeec78955b29a3622cc987f16"]}, @generic="a8e80af4f6c0357b574af3ea8ba7c7291ba915b96cbfd07e", @typed={0x4, 0x13f}, @nested={0x170, 0x17, 0x0, 0x1, [@generic="d59c4662b4af02f6ca0d0f1602ab2b5c21986cfa2348b86de096a62a8210caa9e3e2c3553851197ac2ef35a5c422865a9ba43ddb02d4703eafd4fd50dd02d90eb956e5429bab526bd558597d17bed0021e9f9ed41f2268d006df13998826a5e7099a9b8bcd16365010bd83d360f54fb9eb5a7f6fbeba2f20a3b27f5509c1f26cade58b1d", @typed={0x8, 0xf5, 0x0, 0x0, @uid}, @generic="6aab38099817e8b520ca0aeac52c2e0ba494b9fab1ce9e75e6a08ada8455881bd184a3c0ede40bce65eebb2b62b786614ec29ba437332e26fa7b7a9f114c35aac478ac6eb3f3f647bee2b224dd1afc6c3d62af3cc4fe2fa339049dd707edcdafd7fb00658b57190c4ce537116ab3e0fe4c8c2eddfd1d5a69e3acdf1a22b3431109e4ebc2dfb7d78211faf93c0f3a8d5943d5d5d98d97506cab658fc19bf9cacc67cddd0d9bb9046e52b91ff22a658e170cce33dd766bdb46d5adb2d4464bb93ecb40bbe8e4330e8566bbc133cf1c6522385372c29d85f68e920410d94b9bfe1d"]}, @nested={0x18, 0xc7, 0x0, 0x1, [@generic="a441d42d40fe57b3562ddef796c622b3", @nested={0x4, 0xb5}]}]}, 0x2d8}, {&(0x7f0000000a40)=ANY=[@ANYBLOB="0c0100ad33381fd915a23c00fedbdf252e15b993f3c6a59db80812aa5cb117cbbe5182ffc09de6d60c2303da835b0c1cba4258519d8a2a5e65850e020942d577820556b96e7746577189c9df97b0b1dc95392cae9a9cae24b18c63374394adf0f8a7349623d3be53d6c02ea0caa6c97a6d2cb3faa52e9f8756724fde4d63ce89f3806b33557ac8fc4ebc2f5144fe16031c9df652b3aae21bb81d54afe900397c91c2382b5575e266fe8f8d1a926aec763c4e96ea9ecaa88947d68035832305c12945bfad0d66db61f9632342bfad48ebdc1febb042229533a6b86668c638978dbc00a5305e9ef687754f47c89ca6354d6b6f75ae7d35ba9e8616297c1f3e9104439c65bd1261f182d05f4824"], 0x10c}, {&(0x7f0000000d00)=ANY=[@ANYBLOB="800000001500020029bd7000fedbdf25070055002a2600007a61e9b572df7e3090f9c73571e11b17be506a3c15bc3d1213a464ed39cdad199ca27894f24d12fc478e9afa1b0e3f087d25e7153daff0568b88ea2e24073acdb116db743fe6d822ae9925e646382474bc685f3ac65630a7f754aa6b365359076eb8e5e6053144500a9f0d290e9e21a78356936640df3cc49d7afa3cb80ff318a6716e757b79cd0467bf043d30e401ec2d346e70c20b6f41f3647a089522cd904d35730a5420d399552ced3ad737764b2d10c15a5459aae875571a11ed80dfbe7025d87a3b72eb8b680f05ab"], 0x80}], 0x3, &(0x7f0000000c40)=[@rights={{0x28, 0x1, 0x1, [r6, 0xffffffffffffffff, r3, r1, r3, 0xffffffffffffffff]}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, r9, r2, r6, 0xffffffffffffffff]}}, @rights={{0x2c, 0x1, 0x1, [r3, r7, r7, r11, r7, r7, r2]}}], 0x80, 0x20000010}, 0x2004c000) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xc, &(0x7f0000000280)=ANY=[@ANYBLOB="1800"/13, @ANYRES32, @ANYBLOB="0000000000000000b70800000000ebff7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0xfffffffd, 0x0, 0x0, 0x41100, 0x2, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r12 = openat$rfkill(0xffffffffffffff9c, &(0x7f00000000c0), 0x2642, 0x0) writev(r12, &(0x7f0000000180)=[{&(0x7f0000000040)="93d90400000300", 0x7}, {&(0x7f0000000140)}], 0x2) 50.575533276s ago: executing program 3 (id=1365): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='svcrdma_no_rwctx_err\x00', 0xffffffffffffffff, 0x0, 0x400}, 0x18) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x400, 0x9, 0x1}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000004c0)={r0, &(0x7f0000000340), &(0x7f00000005c0)=""/155}, 0x20) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000980)='mm_page_free\x00', r1}, 0x10) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x6, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18020000000000000000000000000000850000001700000095"], &(0x7f00000005c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000000c0)={r4, r3, 0x25, 0x0, @void}, 0x10) syz_emit_ethernet(0xfdef, &(0x7f0000000540)=ANY=[], 0x0) 50.550029976s ago: executing program 3 (id=1367): socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r0, 0x89f0, &(0x7f0000000900)={'sit0\x00', @random="0000230c1100"}) r1 = openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r4}, &(0x7f00000006c0), &(0x7f0000000700)=r3}, 0x20) recvmsg$unix(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f00000009c0)=""/181, 0xb5}], 0x1, 0x0, 0x0, 0x1000000}, 0x0) shutdown(r2, 0x0) r5 = openat$selinux_policy(0xffffff9c, &(0x7f0000000300), 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x12, r5, 0x0) syz_usb_connect$hid(0x0, 0x6c, &(0x7f0000000080)=ANY=[], 0x0) sendmsg$ETHTOOL_MSG_CHANNELS_SET(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16, @ANYBLOB="01000000000000000000120000000800080000000000080009000300000018000180"], 0x4c}}, 0x0) r6 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000200)=ANY=[@ANYBLOB="1201410130f56920ac05190272f00102030109021b00010000100009045507010349020009"], 0x0) syz_usb_control_io(r6, 0x0, 0x0) socket$key(0xf, 0x3, 0x2) perf_event_open(&(0x7f0000000100)={0x4, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x103, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x7fff}, 0x100002, 0x0, 0xfffffffc, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="040000000400000004000000"], 0x48) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000010000000900010073797a30000000006c000000160a01020000000000000000010000000900010073797a30000000000900020073797a3000000000400003802c00038004000100766c616e3100000000"], 0xfc}}, 0x0) write$selinux_load(r1, &(0x7f0000000000)=ANY=[], 0xffaf) 49.868818776s ago: executing program 3 (id=1380): mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x300000c, 0x50032, 0xffffffffffffffff, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000005c0)={0x11, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18010000f1ff90000000000000100000850000007b00000095"], &(0x7f0000000480)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffd}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000780)='mm_page_free\x00', r0}, 0x18) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x6000000) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'vxcan0\x00'}) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000000c0), &(0x7f0000000100)=0xc) socket(0x10, 0x3, 0x0) socket(0x10, 0x803, 0x0) perf_event_open(&(0x7f0000000380)={0x2, 0x80, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b70300000000a999850000000400000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000640)='fib6_table_lookup\x00', r1}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x0, 0x0, &(0x7f0000000100)='GPL\x00', 0x4000000}, 0x94) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip6tnl0\x00', 0x200}) perf_event_open(&(0x7f00000001c0)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x1, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x7}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x89f1, &(0x7f0000000080)) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="0600000004000000fd0f000002"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000004000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f9ffffffb703000000080000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='mm_page_alloc\x00', r4}, 0x10) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000003c0)='./file1\x00', 0x1c, &(0x7f0000000080)={[{@nombcache}, {@dioread_lock}, {@nodiscard}, {@nomblk_io_submit}, {@noblock_validity}, {@jqfmt_vfsv1}]}, 0x3, 0x44f, &(0x7f0000000500)="$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") open(&(0x7f0000000180)='./bus\x00', 0x14937e, 0x111) mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x5000, 0x0) r5 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS64(r5, 0x4c04, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x8005, 0x0, 0x0, 0x15, 0x0, "ef359f413bb93852f7d6a4ae6dddfbd1ce5d29c2ee5e5ca9000ff8ee09e737ff0edf110ff4117639c2eb4b78c660e677df701905b9aafab4afaaf755a3f6a004", "036c47c6780820d1cbf7966d61fdcf335263bd9bffbcc2542ded71038259ca171ce1a311ef54ec32d71e14ef3dc177e9b48b00", "f28359738e229a4c66810000000000d300e6d602000000000000000000000001", [0x200]}) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f00000005c0)='./file1\x00', 0x1018ed8, &(0x7f0000000180)={[{@sysvgroups}, {@noload}, {@nobh}, {@noload}, {@journal_dev={'journal_dev', 0x3d, 0x4}}, {@norecovery}, {@errors_continue}, {@quota}]}, 0x1, 0x644, &(0x7f00000006c0)="$eJzs3c9rHG0dAPDvzCZ5kzS+6SsiNigGPLQgTZNarHqxrQd7KFiwBxEPDU1SQ7c/SFKwtdAEPCgoiHgt0ov/gHfp3ZsI6s2zUEUqFrR0ZWZnm81mN7ttsrtJ5vOBzT7zzLN5nm9mn8wzM/vsBFBas9mPNOJUxNubScR007qpqK+cLcq9+teTW9kjiVrtu/9MIinyGuWT4vlEsTAeEX+8EvHpyu561x89vrNYrdU9jTi3cffBufVHj8+u3l28vXx7+d7C+a9duDj/9YULC00N/XAniuer177z+V/85IdfXflT9WwSl+LG6I+XoiWOgzIbs/G2CLE5fyQiLmaJNn+Xo+YYhFBqleL9OBoRn43pqORLddOx+vOhNg7oq1olora3pFsB4KjSvaGsGuOAxrF9b8fBN/o8Khmcl5frB0C74x8pTjmM58dGk6+SpiOj+rmNkwdQf1bHmyfjz948mXkWO85DvH63dUYOoJ5ONrci4nPt4k/ytp3MI83iT3cc6ycRMR8RY0X7vrWPNiRN6X6ch9lLj/FXsvibt0MaEZeK5yz/ygfW33paa9DxA1BOLy4XO/LNbGl7/5eNPRrjn9ge/zxtvG5q/5dkcsPe/3Ue/zX29+P5uCdtGYdlY5br7X/laGvG33529Ved6q+P/2aeNR5Z/Y2x4CC83IqYaYn/p1mwxfgniz9pM/7Nity81Fsd3/7zP652Wjfs+GvPI063Pf7ZHpVmqT2uT55bWa0uz9d/tq3j93/4wW871d8+/o/6EGl72faf7BB/0/ZPW1+X/U0etP+VW60Zv7v+/G6n+qe6bv/072NJ/XhzrMj50dbGxtpCxFhyrShS5C9ubKyd3zveepnXtfx5oR7/mS+17/873v8tUU00/mX24MH37rzqtO5D3v9NF5Pf1npsQydZ/Evdt/+u/p/l/bLHOv7z/Ydf6LSuffzJvmICAAAAAACAskrza7BJOvcunaZzc/X5sp+JybR6f33jyyv3H95bijiTfx5yNI00yT8yMl1fTlZWq8sLxedhG8vnW5a/EhGfRMSvKxP58tyt+9WlYQcPAAAAAAAAAAAAAAAAAAAAh8SJYv5/4z7V/67U5/8DJdH9BnO77v8AHBP9vMEkcLjl/X+vXfzHg2sLMFj2/1Be+j+Ul/4P5aX/Q3np/1Be+j+Ul/4P5aX/AwAAAMCx9MkXX/w1iYjNb0zkj8xYsc6kXzjeRt+rdKVv7QAGT4+G8np36d9gH0qnp/H/f4svB+x/c4AhSNpl5oOD2t6d/0XbV27b2n/bAAAAAAAAAAAAAIC606c6z/9/v7nBwFFj2h+U1z7m//vqADjifPU/lJdjfKDLLP4Y77Si2/x/AAAAAAAAAAAAAODATOWPJJ0r5gJPRZrOzUV8KiJOxmiyslpdno+IjyPiL5XRj7LlhWE3GgAAAAAAAAAAAAAAAAAAAI6Z9UeP7yxWq8trzYn/7co53onGXVC7F671UGbPxDfjPV8VyeD/LBMRMfSN0rfESFNOErGZbflD0bC19TgczcgTQ/7HBAAAAAAAAAAAAAAAAAAAJdQ097i9md8MuEUAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMHjb9//vkliarL+gp8I7E8OOEQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA4mv4fAAD//6AzO/k=") r6 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./file1\x00', 0x143142, 0xd4) unlink(&(0x7f0000000000)='./file1\x00') pwritev2(r6, &(0x7f0000000100)=[{&(0x7f0000000080)="ff", 0x1}], 0x1, 0x5404, 0x0, 0x4) 49.61019173s ago: executing program 3 (id=1383): r0 = syz_open_dev$tty1(0xc, 0x4, 0x4) r1 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000800)=@newqdisc={0x48, 0x24, 0xf0b, 0x70bd2e, 0x20000000, {0x0, 0x0, 0x12, 0x0, {}, {0xffff, 0xffff}, {0x2}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x0, '\x00', 0x3, 0x7, 0x9, 0x4}}}}]}, 0x48}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000200)={'ip6_vti0\x00', 0x0}) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b702000002000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r6}, 0x10) ioctl$KDSKBENT(r0, 0x4b47, &(0x7f0000000040)={0x8, 0x4, 0xfff2}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000140)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x2000008, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xfff1, 0xffff}}, [@TCA_INGRESS_BLOCK={0x8, 0xd, 0x8}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x8}]}, 0x34}}, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000a80)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000fdff00000000000000000000180100002020702500000000002120207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0xe, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r7}, 0x10) ioctl$TIOCL_BLANKSCREEN(r0, 0x4b67, &(0x7f0000000180)) 49.396804743s ago: executing program 3 (id=1384): r0 = bpf$MAP_CREATE(0x0, 0x0, 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYRES32=r0], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000003000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r2}, 0x10) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x89a1, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x80}}, './file0\x00'}) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0xc2f00, 0x4d, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000980)='mm_page_free\x00', r6}, 0x18) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="1400000010e7010000000000000000000000000a20000000000a03000000000000000000070000000c00044000000000000000021c000000090a010400000000000000000700000008000a4000000003"], 0x64}, 0x1, 0x0, 0x0, 0x4004001}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="3c00000010000d0425bd7000ffdbff2500000000", @ANYRES32=0x0, @ANYBLOB="10000000000000001c001280a534cc"], 0x3c}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0x1, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0x0, 0xd}, {0xffff, 0xffff}, {0x5, 0x10}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x0) r7 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r7, &(0x7f00000002c0), 0x4000000000000c1, 0xa00) sendmmsg$inet6(r4, &(0x7f0000006a40)=[{{&(0x7f0000000040)={0xa, 0x4e22, 0xa1, @remote, 0x5}, 0x1c, &(0x7f0000000340)=[{&(0x7f0000000080)='{', 0x1}], 0x1}}], 0x1, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x3000003, 0x8c4b815a5465c2b1, 0xffffffffffffffff, 0x0) mount$9p_rdma(&(0x7f00000013c0), &(0x7f0000001400)='.\x00', &(0x7f0000001440), 0x800, &(0x7f0000000080)=ANY=[@ANYBLOB='trans=rdma']) 49.377501474s ago: executing program 33 (id=1384): r0 = bpf$MAP_CREATE(0x0, 0x0, 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYRES32=r0], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000003000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r2}, 0x10) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x89a1, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x80}}, './file0\x00'}) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0xc2f00, 0x4d, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000980)='mm_page_free\x00', r6}, 0x18) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="1400000010e7010000000000000000000000000a20000000000a03000000000000000000070000000c00044000000000000000021c000000090a010400000000000000000700000008000a4000000003"], 0x64}, 0x1, 0x0, 0x0, 0x4004001}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="3c00000010000d0425bd7000ffdbff2500000000", @ANYRES32=0x0, @ANYBLOB="10000000000000001c001280a534cc"], 0x3c}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0x1, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0x0, 0xd}, {0xffff, 0xffff}, {0x5, 0x10}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x0) r7 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r7, &(0x7f00000002c0), 0x4000000000000c1, 0xa00) sendmmsg$inet6(r4, &(0x7f0000006a40)=[{{&(0x7f0000000040)={0xa, 0x4e22, 0xa1, @remote, 0x5}, 0x1c, &(0x7f0000000340)=[{&(0x7f0000000080)='{', 0x1}], 0x1}}], 0x1, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x3000003, 0x8c4b815a5465c2b1, 0xffffffffffffffff, 0x0) mount$9p_rdma(&(0x7f00000013c0), &(0x7f0000001400)='.\x00', &(0x7f0000001440), 0x800, &(0x7f0000000080)=ANY=[@ANYBLOB='trans=rdma']) 3.115401895s ago: executing program 2 (id=2098): unshare(0x6a040000) socket$inet6(0xa, 0x2, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = dup2(r0, r0) seccomp$SECCOMP_SET_MODE_FILTER(0x1, 0x0, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) timer_create(0x0, 0x0, &(0x7f00009b1ffc)) timer_delete(0x0) mkdirat(r1, &(0x7f0000000000)='./file0\x00', 0x21) syz_mount_image$vfat(&(0x7f0000000140), &(0x7f0000000200)='./file0\x00', 0x800, &(0x7f0000000180)=ANY=[@ANYRES8=0x0, @ANYRES16, @ANYRES64, @ANYRES16=0x0], 0x1, 0x36e, &(0x7f0000000c00)="$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") r2 = open(&(0x7f0000000300)='./file0\x00', 0x145142, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000080000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000a3850000007000000095"], &(0x7f0000000200)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x37, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r3}, 0x10) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x20, 0x3, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @netfilter=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r4, 0x2000000, 0x14, 0x0, &(0x7f0000000080)="f6f4e9a10000502468da5eb1c6b2feff8833c000", 0x0, 0x86, 0x0, 0x31, 0x0, &(0x7f00000001c0)="daf9e846ab156efc71b59652333536dbfd26a6d0546366e36eb77dd0aaa2dbe567d168904cf0d5bce1771889c98ffc0abf", 0x0}, 0x50) ftruncate(r2, 0x2007ffb) sendfile(r2, r2, 0x0, 0x800000009) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0, r0}, 0x18) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DESTROY(r5, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000340)={0x28, 0x3, 0x6, 0x801, 0x0, 0x0, {0x0, 0x0, 0x9}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0x4040805}, 0x84) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB="05000000040000000800000008"], 0x50) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r8 = socket(0x400000000010, 0x3, 0x0) r9 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r10, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x8, 0xf}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_RSC={0x10, 0x1, {0x7, 0xa, 0xfffffff3}}}}]}, 0x44}}, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001300)=@newtfilter={0x14ac, 0x2c, 0xd2b, 0x70bd28, 0x25dfdbfb, {0x0, 0x0, 0x0, r10, {0x9}, {}, {0x7, 0xf}}, [@TCA_RATE={0x6, 0x5, {0xae, 0x9}}, @filter_kind_options=@f_flow={{0x9}, {0x1474, 0x2, [@TCA_FLOW_ACT={0x1278, 0x9, 0x0, 0x1, [@m_ife={0xd8, 0x3, 0x0, 0x0, {{0x8}, {0x64, 0x2, 0x0, 0x1, [@TCA_IFE_TYPE={0x6, 0x5, 0x7fff}, @TCA_IFE_TYPE={0x6, 0x5, 0x40}, @TCA_IFE_SMAC={0xa, 0x4, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}, @TCA_IFE_PARMS={0x1c, 0x1, {{0x2, 0xe0c, 0xffffffffffffffff, 0x7, 0x7fff}, 0x1}}, @TCA_IFE_DMAC={0xa}, @TCA_IFE_PARMS={0x1c, 0x1, {{0x2, 0x0, 0x2, 0x200, 0x4}, 0x1}}]}, {0x50, 0x6, "731aa9a987f35416d7646d0663cb9940c623f49e406e40f33c4d6601d24386367eb5278b2d4cecf1c8e35a17fc9bc11cf0d960d565b05ef7d8f9ff13675f3acce071bf8cf65b98c8ddb57f5e"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x2}}}}, @m_tunnel_key={0x1088, 0x1e, 0x0, 0x0, {{0xf}, {0x58, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_ENC_IPV4_DST={0x8, 0x4, @empty}, @TCA_TUNNEL_KEY_ENC_KEY_ID={0x8, 0x7, 0x7}, @TCA_TUNNEL_KEY_ENC_IPV6_SRC={0x14, 0x5, @private0}, @TCA_TUNNEL_KEY_ENC_IPV6_SRC={0x14, 0x5, @private2={0xfc, 0x2, '\x00', 0x1}}, @TCA_TUNNEL_KEY_NO_CSUM={0x5}, @TCA_TUNNEL_KEY_ENC_IPV6_DST={0x14, 0x6, @private0={0xfc, 0x0, '\x00', 0xc}}]}, {0x1004, 0x6, "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"}, {0xc}, {0xc, 0x8, {0x1, 0x3}}}}, @m_gact={0x114, 0x15, 0x0, 0x0, {{0x9}, {0x58, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0x0, 0x1e, 0x6, 0xa, 0xae8a}}, @TCA_GACT_PARMS={0x18, 0x2, {0x260, 0x3, 0x0, 0x60000, 0x9}}, @TCA_GACT_PROB={0xc, 0x3, {0x2, 0x14e8}}, @TCA_GACT_PARMS={0x18, 0x2, {0x1ff, 0x3, 0x4, 0x1009, 0x9}}]}, {0x94, 0x6, "9549e4f77241e0572ba287133d62a24f2760b1e517c0c496844c7fd05d9b739e3fc433db529d0d877a2302429721fdfa81fb975778b292a94bc190099f82b09d0c74f7437f9294fe6dc7d1a9a75fcd2ff445937e839e04e3a5b69c487c654338d8afe9d4a3a085c46f496129c088537cee184fdd9107abc6793dc0fc43cdce71b67822af477d890fdeaf7545e7647622"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x2, 0x3}}}}]}, @TCA_FLOW_MODE={0x8, 0x2, 0x1}, @TCA_FLOW_DIVISOR={0x8, 0x8, 0x5}, @TCA_FLOW_ADDEND={0x8, 0x5, 0xd}, @TCA_FLOW_PERTURB={0x8, 0xc, 0xffff}, @TCA_FLOW_ACT={0x1d0, 0x9, 0x0, 0x1, [@m_mpls={0x68, 0xd, 0x0, 0x0, {{0x9}, {0xc, 0x2, 0x0, 0x1, [@TCA_MPLS_TC={0x5, 0x6, 0x1}]}, {0x33, 0x6, "f8045590eb5987de79436918cc538eb5841b5f2c89098ffeeb4900db46ab16b298989684fb049da0ff83c38712b549"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x2, 0x1}}}}, @m_mpls={0x8c, 0x17, 0x0, 0x0, {{0x9}, {0x1c, 0x2, 0x0, 0x1, [@TCA_MPLS_PROTO={0x6, 0x4, 0xd7bc0869171f1b42}, @TCA_MPLS_LABEL={0x8, 0x5, 0x55db3}, @TCA_MPLS_TTL={0x5, 0x7, 0x9}]}, {0x45, 0x6, "bac85042acfa4254c7c8b380bc643d5bfab897feaaad80946c466e4a8607a87fbca373a48d5127aca40c5c8bc355f304d8aa9a8bc2b811165e702b84a3d09d3dcd"}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}, @m_skbedit={0xd8, 0x1b, 0x0, 0x0, {{0xc}, {0x34, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_PARMS={0x18, 0x2, {0x200, 0x80000000, 0x20000000, 0x2, 0x2}}, @TCA_SKBEDIT_MARK={0x8}, @TCA_SKBEDIT_PTYPE={0x6, 0x7, 0x5}, @TCA_SKBEDIT_PRIORITY={0x8, 0x3, {0x8, 0xffe0}}]}, {0x7a, 0x6, "6651a22282f8c9dc41cf681a68e8885e4feba9a0a3ec64b85f64cb630eddd7736bad2dfa4761777d8326c0b965a52ea658b255bfb2f34db0d02766bbefc55b4d33cbe16fcccf4e67252695c9397754b9bcf24318800dadb56ab5fcd3f7f4899ce7fdd3c26d2dd2820f0eead8fdd80416091dfcac0bf4"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x2}}}}]}, @TCA_FLOW_BASECLASS={0x8, 0x3, {0xffe0, 0x1}}]}}]}, 0x14ac}, 0x1, 0x0, 0x0, 0x2404c044}, 0x24044094) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000a40)={&(0x7f0000000980)='sys_enter\x00', r7}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r6}, &(0x7f0000000000), &(0x7f0000000040)}, 0x20) finit_module(0xffffffffffffffff, 0x0, 0x2) 2.635108912s ago: executing program 2 (id=2099): perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xf1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x90) close(0x3) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r0, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x4000000) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000080)={0xffffffffffffffff, 0x58}, 0x10) 2.231843148s ago: executing program 2 (id=2108): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0x0) write$selinux_attr(0xffffffffffffffff, &(0x7f0000000100)='system_u:object_r:hugetlbfs_t:s0\x00', 0x1d) r1 = syz_mount_image$ext4(&(0x7f00000000c0)='ext2\x00', &(0x7f0000000c40)='./file0\x00', 0x808080, &(0x7f0000000c80)={[{@discard}, {@bh}, {@noblock_validity}]}, 0x2c, 0x52c, &(0x7f0000000640)="$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") bpf$TOKEN_CREATE(0x24, &(0x7f0000000040)={0x0, r1}, 0x8) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xb, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000400000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x1b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kfree\x00', r2}, 0x10) r3 = openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$selinux_load(r3, &(0x7f0000000280)=ANY=[], 0x65) r4 = openat(0xffffffffffffff9c, &(0x7f0000000240)='.\x00', 0x0, 0x0) prlimit64(r0, 0x5, &(0x7f0000000300)={0x3, 0x3}, &(0x7f0000000340)) ioctl$EXT4_IOC_GROUP_EXTEND(r4, 0x40086607, &(0x7f0000000000)=0x2) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x37, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0xd}, 0x4c58, 0x10000, 0x0, 0x1, 0x8, 0x20002, 0xb, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000600)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a3c000000120a09000000000000000000020000000900020073f97a310000000008000440080000000900010073797a3000000000080003400000000114000000110001"], 0x64}, 0x1, 0x0, 0x0, 0x814}, 0x0) sendmsg$NFT_MSG_GETOBJ(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)=ANY=[@ANYBLOB="34000000150a03f5"], 0x34}}, 0x0) getrlimit(0x0, &(0x7f00000001c0)) 2.162005969s ago: executing program 2 (id=2112): prctl$PR_SET_SECCOMP(0x16, 0x1, &(0x7f0000000000)={0x0, &(0x7f0000000040)}) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="1700000000000000040000000201000000000000", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000000000000000000000000000000000e0000000000000000"], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0}, 0x90) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x208, 0xd9}, 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f00000004c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r1, @ANYRES8], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='kfree\x00', r2}, 0x18) r3 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r3, 0x11b, 0x4, &(0x7f0000000240)={0x0, 0x1002000, 0x0, 0x3ff, 0x1}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18010000200180000000000000000000850000007b00000095"], &(0x7f00000001c0)='GPL\x00', 0x4}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0xb, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020782500000000002020207b1af8fe00000000bfa100000000000007010000f8ffffffb702000008000000b703000007000000850000001100000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x61, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000040)='kmem_cache_free\x00', r4, 0x0, 0x4}, 0x18) r5 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) fcntl$notify(r5, 0x402, 0x4) r6 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) fcntl$notify(r6, 0x402, 0xd) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x2040, 0x0) rt_sigsuspend(&(0x7f00000000c0)={[0x9]}, 0x8) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) r7 = syz_open_dev$tty20(0xc, 0x4, 0x0) write$binfmt_misc(r7, &(0x7f0000000240), 0xfffffecc) ioctl$TIOCSTI(r7, 0x5412, &(0x7f0000000040)=0x3) socket$inet_udp(0x2, 0x2, 0x0) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000001440)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r9}, 0x10) r10 = syz_open_dev$sg(&(0x7f0000000c40), 0x0, 0x0) ioctl$SG_SET_RESERVED_SIZE(r10, 0x2275, &(0x7f0000000080)=0x7fffffff) 2.019691331s ago: executing program 6 (id=2113): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000001811", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x400, 0x9, 0x1}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000004c0)={r0, &(0x7f0000000340), &(0x7f00000005c0)=""/155}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000980)='mm_page_free\x00', r1}, 0x10) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x6, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18020000000000000000000000000000850000001700000095"], &(0x7f00000005c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000000c0)={r4, r3, 0x25, 0x0, @void}, 0x10) syz_emit_ethernet(0xfdef, &(0x7f0000000540)=ANY=[], 0x0) 2.008915591s ago: executing program 6 (id=2115): r0 = socket(0x10, 0x3, 0x0) sendto$inet6(r0, &(0x7f0000000080)="7800000018002507b9409b14ffff00000204be04020b06050e020909430009003f00064c0a0000000d0085a168d0bf46d32345653600648d0a000500eb16000049935ade4a460c89b6ec0cff3959547f509058ba86c902000000004a32000400160004000a0000000000e000e218d1ddf66ed538f2523250", 0x78, 0x0, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000002040)=ANY=[@ANYBLOB="1e0000000000000005000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005700000095"], 0x0, 0x8, 0x0, 0x0, 0x0, 0x51}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000007c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2, 0x0, 0xfffffffffffffffe}, 0x18) r3 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x56, 0x1, 0x0, 0x0, 0x0, 0x8, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_bp={0x0, 0x2}, 0x14105, 0x32, 0xfffffbff, 0x3, 0x1, 0x0, 0xfffa, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x40082406, &(0x7f00000001c0)='cpu<-0\t\t\t') 1.941547752s ago: executing program 6 (id=2116): bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0xa3500, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='mm_page_alloc\x00', r1}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kfree\x00'}, 0x18) syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) r2 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r2, 0x0, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x4f0, 0x340, 0x25, 0x148, 0x0, 0x60, 0x458, 0x2a8, 0x2a8, 0x458, 0x2a8, 0x3, 0x0, {[{{@uncond, 0x0, 0x2f8, 0x340, 0x0, {0x200003ae, 0x7f00}, [@common=@inet=@hashlimit1={{0x58}, {'geneve0\x00', {0x44, 0x0, 0x9, 0x0, 0x0, 0xffffffff, 0x7}}}, @common=@unspec=@bpf1={{0x230, 'bpf\x00', 0x0}, @pinned={0x1, 0x0, 0x6, './file0\x00'}}]}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x6, 'syz0\x00'}}}, {{@ip={@broadcast, @multicast1, 0x0, 0x0, 'veth1_to_bond\x00', 'veth0\x00', {0xff}}, 0x0, 0xd0, 0x118, 0x0, {}, [@common=@unspec=@cgroup0={{0x28}, {0x4}}, @common=@unspec=@statistic={{0x38}}]}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x8000, 'syz0\x00', {0x481c}}}}], {{'\x00', 0xc8, 0x70, 0x98}, {0x28}}}}, 0x550) 1.908667753s ago: executing program 5 (id=2117): socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x7, 0x4, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000791010000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) ioctl$TIOCSIG(r0, 0x40045436, 0x16) openat2$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)={0x300, 0x20, 0x1c}, 0x18) syz_open_dev$vcsn(&(0x7f0000000080), 0x1, 0x92040) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x18, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="18000000002c0000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000001000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x62, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000ac0)='kmem_cache_free\x00', r1, 0x0, 0x1}, 0x18) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0xc0ed0040, &(0x7f00000000c0)={[{@resgid={'resgid', 0x3d, 0xee00}}, {@resgid={'resgid', 0x3d, 0xee00}}, {@acl}, {@noload}, {@journal_dev={'journal_dev', 0x3d, 0x8}}, {@dioread_nolock}]}, 0xfe, 0x472, &(0x7f0000000940)="$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") r2 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) connect$inet(0xffffffffffffffff, &(0x7f0000000280)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x1}}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x3, 0x0, 0x0, 0x40f00, 0x42, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = socket(0x10, 0x3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000000001000000000000000000851000000600000018000000", @ANYRES32, @ANYBLOB="00000000000100006608000000000000180000000000000000000000000000009500000000000000360a020000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b50a000000000000850000000600000095"], &(0x7f0000000000)='GPL\x00', 0xd, 0x0, 0x0, 0x0, 0x8}, 0x94) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$devlink(&(0x7f0000008280), r6) sendmsg$DEVLINK_CMD_SB_POOL_GET(r6, &(0x7f00000084c0)={0x0, 0x0, &(0x7f0000008480)={&(0x7f00000082c0)={0x44, r7, 0x1, 0x70bd26, 0x25dfdbfd, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x8001}, {0x6, 0x11, 0x40}}]}, 0x44}, 0x1, 0x0, 0x0, 0x24000084}, 0x40080) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r5}, 0x10) mknod$loop(&(0x7f0000000080)='./file0\x00', 0x100000000000600d, 0x1) creat(&(0x7f00000000c0)='./file0\x00', 0xc9028ba210c11ff0) stat(&(0x7f0000000600)='./file0\x00', &(0x7f0000000680)) r8 = socket$netlink(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r8, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000001200)={&(0x7f00000004c0)=ANY=[@ANYBLOB="38000000031401002dbd7000000000000900020073797a30000000000800410073697700140033006c6f0000fffffffffffffff0000000"], 0xffaf}, 0x1, 0x0, 0x0, 0x854}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x10008}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @gre={{0x8}, {0x10, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}, @IFLA_GRE_OFLAGS={0x6, 0x3, 0x98}]}}}]}, 0x3c}}, 0x0) 1.907681922s ago: executing program 0 (id=2118): r0 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00'}, 0x94) syz_io_uring_setup(0x2487, &(0x7f00000004c0)={0x0, 0xe70, 0x8, 0x2, 0x4d}, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r0, 0xf, 0x25, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) bpf$TOKEN_CREATE(0x24, &(0x7f0000000080), 0x8) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00'}, 0x10) open_tree(0xffffffffffffffff, 0x0, 0x89901) r1 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_FILTER(r1, 0x65, 0x1, &(0x7f0000000140)=[{{0x0, 0x0, 0x1}, {0x0, 0x0, 0x1, 0x1}}], 0x8) r2 = bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r2}, 0x4) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="020000000400"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r3, @ANYBLOB="0000000000000000b704000008000000850000007800000095"], 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000180)=[{0x200000000006, 0x0, 0x0, 0x7ffc0001}]}) wait4(0x0, 0x0, 0x2, 0x0) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r4, 0x1, 0x3e, &(0x7f0000000080)="3a0dc768", 0x4) bind$inet6(r4, &(0x7f0000000040)={0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}, 0x1c) capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x81, 0xffffffff}) r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_SET(r5, 0x4b72, &(0x7f0000000040)={0x4, 0x8000003, 0x9, 0x407, 0x2a, 0x0}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000000)='kmem_cache_free\x00'}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x1, r6}, 0x38) r7 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r7, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r7, 0x84, 0x6f, &(0x7f00000001c0)={0x0, 0x10, &(0x7f0000000280)=[@in={0x2, 0x4e23, @private=0xa010101}]}, &(0x7f0000000180)=0x10) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r7, 0x84, 0x9, &(0x7f00000000c0)={r8, @in={{0x2, 0x4e23, @empty}}, 0x0, 0x2, 0x58fffffe, 0x0, 0x54, 0x1, 0x81}, 0x9c) r9 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r9, &(0x7f0000000680)={0x0, 0x61, &(0x7f0000000040)=[{&(0x7f0000000000)="2e00000010008188e6b62aa73772cc9f1ba1f848430000005e1406ca000000000e000a000f000000028000001294", 0x2e}], 0x1}, 0x0) 1.880819633s ago: executing program 6 (id=2119): r0 = socket$inet6(0x10, 0x3, 0x0) syz_open_dev$sg(&(0x7f00000002c0), 0x0, 0x2000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000085000000230000"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) setxattr(&(0x7f0000000040)='./file0\x00', &(0x7f0000000100)=ANY=[@ANYBLOB='os'], 0x0, 0x0, 0x0) r1 = open(&(0x7f0000000000)='./file0\x00', 0x80140, 0x0) fcntl$setsig(r1, 0xa, 0x21) fcntl$setlease(r1, 0x400, 0x1) open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) creat(&(0x7f0000000100)='./file0\x00', 0x0) close_range(r1, 0xffffffffffffffff, 0x0) listxattr(0x0, 0x0, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=0xffffffffffffffff, @ANYBLOB="0000000000000000b7020000111e6ca5b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b702000002000000850000008500"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={0x0, r2}, 0x18) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="5c0000000206010100000000000000000000000005000100070000000900020073797a300000000014000780050015000000000008001240000000000d000300686173683a6e657400000000050005000a000000050004"], 0x5c}}, 0x0) r5 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000400)=ANY=[@ANYBLOB="380000000314010554439724cd2dcd4fd345002cbd7000fcdbdf250900020073797a32000000000800410073697700140033006c6f0000004736c3401e7cf9e486d7fe57aad261027e0970b0a3d872687503bc6d6aa491d04c9addce91fb6c2c691c"], 0x38}, 0x1, 0x0, 0x0, 0x44}, 0x810) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x40, 0x1, 0x0, 0x0, 0x0, 0x5, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000, 0x2, @perf_bp={0x0}, 0x1500, 0x5dd8, 0x7fffffff, 0x8, 0x0, 0x8, 0xfffb, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000180), 0x0}, 0x20) close_range(r0, 0xffffffffffffffff, 0x2) openat$sndseq(0xffffffffffffff9c, &(0x7f00000018c0), 0xe0c81) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="0200"], 0x50) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x8264, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x367b, 0x8000}, 0x10320, 0x0, 0x8, 0x0, 0x1, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x5, 0x5, &(0x7f00000005c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r8 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0xa4, 0x1589, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x803, 0x0, @perf_config_ext, 0x0, 0x5b, 0x0, 0x4, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x8) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x5, 0x5, &(0x7f00000001c0)=ANY=[@ANYRES8, @ANYRESDEC=r3, @ANYRESDEC=r6, @ANYRES64=r8], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x36, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r7, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r8, 0x40042408, r9) 1.795415084s ago: executing program 0 (id=2121): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000200)='kfree\x00', r1, 0x0, 0x2}, 0x18) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = memfd_create(&(0x7f0000000300)='+\x8b\x8a\x16\x11O\xdd\xdfk(F\x99\xdf\x92\xd5>oJ\x02u\x9b\xafa\xac\x06\x9c&\xf5\xe3j\xfa\tcqM\xb8R\x86\xd9\xd2.\x9f\x12\xed\x10\f\xbd\x1a|\x8a\xbb\xda\xcfY\x98gU@\xf2M\xc0\xb5\xdf\x9a\x8d\xdb,n\xae\x0eT\x80\x8c\xfd\xd7\xb0\x94\x82t\x96\rKx\xc5\x9b\x8c\x87\x96\x8bc\xbc\xee\xcc\x9f\xe3F\x99V4\x8e;M\xa9\x823\xe3\xb3mG\x8f\xdb\xed\x1b\x05\xec\xfc\xd1\xb5\xfd\xec@\xdeU\xdd\xa4\xc1\xe4L)\x8e\xe5\x91\x8e\xd4\x89\xef\x95T\x05G\xac\xb8\xc1: )mh\xc7\xf1?\xbb\x13;\xad\x95\xd70\xb6\x0e\x7f\x84r\x0e\xbf\xc5\xf6\xd4\xdd\t\x14\x18\xf7\xefi\x93\x03\xd2\xf2\bK\"\xd2\xb5\xaa\xb8\xc8\xe0\xac\x99\xe8su\xcd\xc3E\x12\xd7\xdd\x96!\x16Tu\xe3\xf0\x84#R\xd9\xe3~Wj\xb0r\x87\'\xea\a\xcfOeK\x9daW\xf4\x87@\x9c\xf3\xf1K\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x91\xe6\xdb\xc2\xa5h\'\xdfIn\x97\x0263~\xeb\xbe(i\n\xc2k4\x7f\x12\xa9e`SOs\x8c\xb4\xe7FeQ\xc6$\x92j_U\xfa\b\xea\xb0bYkW\xc0\x05\aC{\xcc\x03T\x17\xa5Sk\x87P\xc2\x97D\xb2\xfa\x1b\x9fe\xf4\x10\x1a\xad\x92\xce\x88\x1b\xbc\xe14\x19\xaa\xd3\r\xf4\xa2\xc3\x9e=\xa0 \xe6j\xe5\x85\xf8\x97\x03\x15\xaa\x920\xdcrI\xd8\b\xfb\xc7\xe7xX\x00>d\xbb\xa71\xad\x9a\xfb\xe6\x13\x87\x93\\\xe5W-\xfc\xfd\xb8O\xb9j\xb8\xf2\x9dx\xb2\x86\xad\x92', 0x3) write$binfmt_elf64(r3, &(0x7f0000000180)=ANY=[], 0x78) sendfile(r2, r3, &(0x7f00000001c0), 0x8) fcntl$addseals(r3, 0x409, 0x8) fallocate(r3, 0x3, 0x9100, 0x3) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000400)) sendmsg$BATADV_CMD_TP_METER(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000500)=ANY=[], 0x30}}, 0x0) fsconfig$FSCONFIG_SET_BINARY(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) fsmount(0xffffffffffffffff, 0x0, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000300)=ANY=[@ANYBLOB], 0x5) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) r4 = syz_open_procfs(0x0, 0x0) r5 = socket(0x18, 0x4, 0x0) sendfile(r5, r4, 0x0, 0x7ffff000) 1.769000494s ago: executing program 5 (id=2123): r0 = gettid() r1 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000380)={'ip6_vti0\x00', &(0x7f0000000300)={'syztnl0\x00', 0x0, 0x29, 0xd, 0x0, 0x9, 0x4b, @empty, @private1={0xfc, 0x1, '\x00', 0x1}, 0x7800, 0x10, 0xffff, 0x7}}) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="0f000000ffffff7f650500000600000004020000", @ANYRES32=r1, @ANYBLOB="bc96ad00000000", @ANYRES32=r2, @ANYRES32=r1, @ANYBLOB="03000000010000000500"/28], 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r3, @ANYBLOB="0000000000000000b703000000000001850000001b000000b70000000000070095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000040)='kfree\x00', r4}, 0x18) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x80) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='devpts\x00', 0x0, 0x0) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x200000, &(0x7f0000000440)={[{@bsdgroups}]}, 0xfc, 0x574, &(0x7f0000001980)="$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") r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000a40)={&(0x7f0000000980)='sys_enter\x00', r6}, 0x10) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000006c0)=ANY=[@ANYBLOB="18000000000000000000000095980000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f0ffffffb702000005000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='mm_page_free\x00', r7}, 0x10) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000600)={{r5}, &(0x7f0000000500), &(0x7f0000000540)=r6}, 0x20) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x1) r8 = openat(0xffffffffffffff9c, &(0x7f0000000d80)='./file1\x00', 0x143042, 0x0) pwritev2(r8, &(0x7f00000001c0)=[{&(0x7f0000000080)="ff", 0xfdef}], 0x1, 0xe7b, 0x0, 0x0) r9 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r9, &(0x7f0000000000)={&(0x7f0000000080)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e22, @dev}}, 0x8c, &(0x7f0000000140)=[{&(0x7f0000000ac0)="ee", 0xfffffdef}], 0x1, &(0x7f0000001a00)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000000040500002b24ec10064b6f2f000000fb718aef932f3889d1fdda5b57000000860f5878c37ffe36e1165814d435be5b317c6c8189587d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988ab013f40afe403041323110f62055394412158e7a3adb148d641aa40d4ab077fe34232aa8b31851466d0998a61d7da0c86d70000001010"], 0x10b8}, 0xff00) r10 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r10, &(0x7f0000000080)=ANY=[], 0x10448) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r10, 0x0) r11 = socket$isdn_base(0x22, 0x3, 0x0) ioctl$IMGETDEVINFO(r11, 0x80044944, &(0x7f0000000000)={0xd7de629}) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) 1.559588337s ago: executing program 6 (id=2127): perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) mlockall(0x3) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) socket$inet6_sctp(0xa, 0x1, 0x84) r1 = socket$kcm(0x10, 0x2, 0x0) r2 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x200000006c8b, 0x37}, 0x7, 0x0, 0xfffffffc, 0x3, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) r6 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x90040, 0x0) ioctl$TCSETS(r6, 0x5402, &(0x7f0000000180)={0x0, 0x9, 0x9, 0x7, 0x10, "9bce34cfd30425901db8dd9f6a1f1480abe210"}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="387bf8bf2b23228cdd45830439308b2b0903fe050dc2fd"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x7d}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r3}, &(0x7f00000003c0), &(0x7f00000001c0)=r2}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000580)=ANY=[@ANYBLOB="0d20a42028750f3ac1e4e0868095b08da21861519895b8b56c222d525bfd84c79e85b82d5aaf4db12de31c6c4b60defc9fce41dfc82c66af783420833400aa6dc158047efc9e0a54dbeec8252b5eae9c6a89a26d774bc4753a379b99362d32", @ANYRES8=r5], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r4, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) sendmsg$kcm(r1, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000140)="2e00000011008188040f80ec59acbc0413a1810031000000000f000000028002002d1f00"/46, 0x2e}], 0x1}, 0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b702000002000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r8}, 0x10) r9 = socket(0x10, 0x2, 0x0) sendmsg$nl_route(r9, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000280)=ANY=[@ANYBLOB="540000002000010000000000000000000200200003000000000000001400110076657468305f6d61637674617000000008000200ac1e0001080018"], 0x54}}, 0x20000080) bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81}, 0x94) socket$packet(0x11, 0x3, 0x300) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000a40)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='kmem_cache_free\x00', r10}, 0xb) mmap(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0xa, 0x11, 0xffffffffffffffff, 0x80dc5000) perf_event_open(0x0, 0x0, 0x7, 0xffffffffffffffff, 0x0) r11 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r11, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x8000}, 0x4) r12 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r12, 0x107, 0xf, &(0x7f0000000000)=0x9, 0x4) 1.543201898s ago: executing program 4 (id=2128): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000900)=@mangle={'mangle\x00', 0x44, 0x6, 0x510, 0x3a8, 0x210, 0x210, 0x0, 0x138, 0x478, 0x478, 0x478, 0x478, 0x478, 0x6, 0x0, {[{{@ip={@broadcast, @multicast1=0xe0007600, 0x0, 0x0, 'geneve1\x00', 'ip6gre0\x00'}, 0x0, 0x70, 0x98}, @inet=@DSCP={0x28}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @local, 0x0, 0x0, 'batadv_slave_1\x00', 'veth1_virt_wifi\x00', {}, {}, 0x11}, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x0, 0x0, @local}}}, {{@ip={@broadcast, @multicast2, 0x0, 0x0, 'vlan1\x00', 'nr0\x00'}, 0x0, 0xb0, 0xd8, 0x0, {}, [@common=@unspec=@connlimit={{0x40}}]}, @unspec=@CHECKSUM={0x28}}, {{@ip={@loopback, @empty, 0x0, 0x0, 'syzkaller0\x00', 'veth1_to_team\x00'}, 0x0, 0x70, 0x198}, @common=@unspec=@SECMARK={0x128, 'SECMARK\x00', 0x0, {0x1, 0x0, 'system_u:object_r:dbusd_etc_t:s0\x00'}}}, {{@ip={@broadcast, @multicast2, 0x0, 0x0, 'lo\x00', 'batadv_slave_1\x00'}, 0x0, 0xa0, 0xd0, 0x0, {}, [@common=@unspec=@mac={{0x30}, {@multicast}}]}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x0, 0x0, @loopback}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x570) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001440)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$nl_generic(0x10, 0x3, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0700000004050000080000000100000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) chroot(&(0x7f0000000000)='./file0/../file0\x00') r3 = bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r3], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000000)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f00000002c0)='sys_enter\x00', r4}, 0x10) r5 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r5}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r6 = mq_open(&(0x7f0000000040)='!se\xf7ih,\x17i\xacP\xe6lNnuxselinux\x00', 0x6e93ebbbcc0884f2, 0x2, &(0x7f0000000300)={0x0, 0x1, 0x6}) mq_timedsend(r6, 0x0, 0x0, 0x0, 0x0) mq_timedsend(r6, 0x0, 0x0, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000037c0)={0x0, 0x0, &(0x7f0000003780)={&(0x7f0000003800)=@newtaction={0x6180, 0x30, 0x12f, 0x70bd2b, 0x0, {0x0, 0x0, 0x1be}, [{0x616c, 0x1, [@m_ctinfo={0x80, 0x3, 0x0, 0x0, {{0xb}, {0x3c, 0x2, 0x0, 0x1, [@TCA_CTINFO_PARMS_DSCP_MASK={0x8, 0x5, 0x6}, @TCA_CTINFO_PARMS_DSCP_MASK={0x8, 0x5, 0x5}, @TCA_CTINFO_PARMS_DSCP_STATEMASK={0x8, 0x6, 0x3}, @TCA_CTINFO_ACT={0x18, 0x3, {0x6, 0x10001, 0x1, 0x10000, 0x2}}, @TCA_CTINFO_PARMS_DSCP_STATEMASK={0x8, 0x6, 0x65d}]}, {0x1a, 0x6, "cb62ed22a4811cb5dc810fafa0c081511d015e7573ac"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x1}}}}, @m_pedit={0xdc, 0x4, 0x0, 0x0, {{0xa}, {0x14, 0x2, 0x0, 0x1, [@TCA_PEDIT_KEYS_EX={0x10, 0x5, 0x0, 0x1, [{0xc, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}]}]}]}, {0x9e, 0x6, "c9d58e31d91974ea3a2997b0bf348ab6936b49df12e9f54fa6dbc3b993010017bd7c131684a747a17c9816c7b7d402a028421a7a13699ebb8d254bc2041b42f8c8f5550a2b43d31c7aa776d5affc4967787641a5884ae291f4600170b0f7e177a372adb6b8a58851f43871cda294ee32298e080267302acc86618f8af2b29a730261eb4b6ee3e768855f4f21bd38c6ae5f60baa3f385cf1d1e00"}, {0xc}, {0xc, 0x8, {0x1, 0x2}}}}, @m_police={0x22e8, 0x9, 0x0, 0x0, {{0xb}, {0x21c0, 0x2, 0x0, 0x1, [[@TCA_POLICE_AVRATE={0x8, 0x4, 0x1c41}, @TCA_POLICE_TBF={0x3c, 0x1, {0x4, 0xfffffffffffffffe, 0x10000, 0x4, 0x2, {0x0, 0x0, 0x5, 0xec, 0x8, 0x5}, {0x9, 0x2, 0x0, 0x2000, 0x0, 0x3d9}, 0x80, 0xfffffffe, 0xee}}, @TCA_POLICE_TBF={0x3c, 0x1, {0x100000, 0x10000000, 0xff, 0x4, 0xa6, {0x2, 0x0, 0x4, 0xe00, 0x8, 0x4}, {0x4, 0x2, 0x3, 0x9, 0x10, 0xfffffffe}, 0x7fffffff, 0xfffffffe, 0x81}}], [@TCA_POLICE_PEAKRATE={0x404, 0x3, [0xfffffff8, 0x6, 0x5, 0x5, 0xe6, 0x8b, 0x2, 0xa76a, 0x6, 0x0, 0x200, 0x4, 0xe, 0xb994, 0x0, 0x5, 0x5cad, 0x9, 0x4ddc, 0x7, 0x5, 0x10001, 0x5, 0xa, 0x9, 0x1, 0x1ff, 0x3, 0x4, 0x7f, 0x5, 0x3a551c93, 0xa4, 0x1, 0x81, 0xffffae5b, 0x8, 0x72e, 0x9, 0x8000, 0x7fffffff, 0x7, 0x8, 0x7fffffff, 0x9, 0xfffffffd, 0x3870, 0xef, 0x3, 0xfffffe9a, 0x6, 0x8, 0x7, 0xfffffffc, 0x5, 0x4, 0x5, 0xbec, 0x101, 0x5, 0xfff, 0x1, 0x856, 0xfffffffb, 0x1, 0x1, 0xffffffc8, 0x3, 0x81, 0x2, 0x5bcae1ca, 0x1, 0x1ff, 0x8, 0x3ff, 0xaf9, 0x5, 0x2, 0x2, 0x404, 0xc0000000, 0x3, 0x0, 0x1, 0x6, 0xfffff801, 0x3, 0x9, 0x3, 0x1, 0x0, 0x1, 0x4, 0xd, 0x4, 0x0, 0x80000001, 0x8, 0x5, 0x3d, 0xc, 0x8, 0x8, 0xf9, 0x8, 0x0, 0x5, 0x3, 0x1, 0xffffffad, 0xe2d, 0x8, 0x4, 0x800, 0x3, 0x5, 0xd, 0xa9, 0x7, 0x2, 0x8, 0x8, 0x5f9, 0x1, 0xc, 0x42, 0x4, 0xae20, 0xb1, 0x9, 0x6, 0x81, 0x6, 0x400000, 0x8, 0x8001, 0xe17, 0x8, 0x10, 0x8, 0xc, 0x5, 0x7, 0x8, 0x8000, 0x2, 0x4, 0xf, 0xf, 0x5, 0x4, 0x3ff, 0x304f, 0x47e, 0x990, 0xe6, 0xffff, 0xe43, 0x3, 0x7fffffff, 0x7, 0x1ff, 0x7f, 0x5, 0x7, 0xfff, 0x5, 0xffffffff, 0x0, 0x0, 0x7, 0xd, 0x6978, 0x1000, 0x9, 0x9, 0x0, 0x10, 0x9, 0xfc, 0x3, 0xfffffffe, 0x7, 0x4, 0x0, 0x6, 0x7, 0x849, 0x0, 0x3, 0x4, 0x4, 0xffff8001, 0x8, 0x0, 0x9, 0x9, 0xe, 0x4, 0x7, 0x4, 0xb, 0x3, 0x9, 0x3, 0xfffffb28, 0x9, 0x3, 0x3, 0x7fffffff, 0x6, 0x7, 0x9, 0x4, 0x1, 0x400, 0x3, 0x5, 0x8001, 0x10001, 0x5, 0x1, 0x200, 0x4, 0x5, 0x5, 0x9, 0x1, 0x8, 0xe1, 0x6, 0x8001, 0xe, 0xc0000000, 0xfffffff9, 0xe66, 0x1, 0xfffff484, 0xffff, 0x7, 0x81, 0xfffffff7, 0x29, 0x5, 0x4, 0x5, 0xfffffff7, 0xbf74, 0x9, 0x2, 0x71b8, 0x7, 0xc72, 0x7, 0x8, 0x4]}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x2, 0x8, 0x7fff, 0x3, 0x0, 0x9, 0x2, 0x4, 0x7ff, 0x3, 0x8, 0x8, 0xe5, 0xbe30, 0x2, 0x401, 0x6, 0x7fffffff, 0x9, 0x4917, 0x101, 0x7, 0x3, 0xb, 0x0, 0x10001, 0x8, 0x7fffffff, 0xcf, 0x2, 0x1, 0x4, 0x6, 0x7, 0x6c0, 0x400, 0xfffffffa, 0x4ec, 0x2, 0x5, 0x9, 0xfd04, 0x300, 0x6, 0xe1, 0xf8000000, 0x856, 0x6, 0xffffffff, 0x4, 0x2, 0x9, 0xffffff00, 0xffff8001, 0x0, 0x5, 0x41, 0x2, 0x1ff, 0x4, 0x5, 0x4be7b690, 0x8, 0x8, 0x8000, 0x1, 0x3734, 0x17, 0x5, 0x6, 0x80000000, 0x7, 0x5, 0x10001, 0x5, 0x2, 0xebe5, 0x5, 0xfffffffe, 0x1, 0x532, 0x4, 0x0, 0x2, 0x4, 0xf, 0x81, 0x6, 0x100, 0x4, 0x85, 0x1, 0x4, 0x0, 0x2, 0x7c, 0x120, 0x3, 0x9, 0x3, 0x2, 0x5, 0xfffeffff, 0x7, 0xc, 0x1, 0x0, 0x4, 0x1800000, 0x1, 0x131a, 0x1ff, 0x6, 0xffff, 0xffff665b, 0x0, 0x1ff, 0x6226, 0x0, 0x7, 0x3, 0x9, 0x1, 0x81, 0xa6, 0x8, 0x0, 0x6, 0x0, 0xe364, 0x9, 0x2, 0x80000001, 0x2, 0x52, 0x6, 0xff, 0x9, 0x6, 0x52, 0x9, 0x0, 0x100, 0x0, 0x4, 0x0, 0x58, 0x8, 0x1, 0xfff, 0xfffffc00, 0x2, 0x101, 0x7f, 0x0, 0x1, 0x95140, 0x0, 0x80000000, 0x1600, 0x8, 0x9, 0x965, 0x101, 0x32, 0xfffffff1, 0x6, 0x0, 0x30, 0xd4a7, 0x9, 0xf8, 0xf239, 0x7e99, 0x9, 0xc, 0xd, 0xf, 0x9, 0x5, 0xfffffffa, 0x7, 0x10000, 0x80000001, 0x3, 0xffff, 0x3, 0x89f, 0x5, 0x1, 0x800, 0xfffeffff, 0x7ff, 0x8, 0x10000, 0x40, 0x977c, 0x1, 0x51, 0x2, 0x43edede3, 0x3ff, 0x3ff, 0x4, 0x6, 0x0, 0x6, 0x1, 0x7, 0x3, 0xb00, 0x8, 0x7, 0x81, 0xfffffffa, 0x401, 0xa, 0x9, 0x8, 0x7, 0xcf, 0x4, 0x7bc1, 0x34fa, 0x5, 0xffffffff, 0x400, 0x3ff, 0x9, 0x9, 0x9d, 0x9e, 0xbe, 0x0, 0x8, 0x3, 0xc, 0x7, 0x10000, 0x7, 0x0, 0x1, 0x2, 0x8000, 0x7, 0x9, 0x2e, 0x800, 0x0, 0xd66ae9b, 0x4, 0x82, 0x4b, 0xaa, 0x7, 0x6]}, @TCA_POLICE_RATE64={0xc, 0x8, 0xf}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x5}, @TCA_POLICE_RATE={0x404, 0x2, [0x1000, 0x6, 0x6, 0xfff, 0xffffd1db, 0x4, 0x3, 0x401, 0x0, 0x6, 0x9, 0x2, 0xfffffff1, 0x18a, 0x3, 0x1, 0xd93, 0x1000, 0x6, 0x1ff, 0xffffffff, 0x2, 0x2, 0x6, 0x9, 0x6, 0x72f8, 0x5, 0x8, 0x5000, 0xff, 0x5, 0xa, 0x116d, 0x81, 0x8, 0x80, 0x8, 0x0, 0x80, 0x3, 0x0, 0x10, 0x2, 0x5, 0x0, 0x2, 0x6, 0x7, 0x3, 0x9351, 0x81, 0xffffb321, 0x30, 0x0, 0xbc8, 0x7, 0x5c, 0x3, 0xb, 0x15c86458, 0x973, 0x1, 0x1, 0x10, 0x4, 0x4, 0x4, 0xb615, 0x92cb, 0x8, 0x2, 0x9, 0x1, 0x3, 0x5, 0x8d8, 0x114, 0x2, 0x9, 0x200, 0x8, 0x5, 0x4, 0x6, 0x3, 0xfff, 0xffffffff, 0x1, 0x2, 0x2, 0x3, 0x10d, 0x800, 0xe0a8, 0x949, 0x4f9, 0x5, 0x6, 0x252775c0, 0xfffffff7, 0x400, 0x7, 0x0, 0x6, 0x6, 0x4, 0x0, 0x7, 0x8, 0x8, 0x0, 0xfffffffa, 0x8, 0x8, 0x9, 0x9, 0x40, 0xba, 0x5, 0x6, 0x9, 0x9, 0xb, 0x3, 0x27, 0x6, 0x4, 0x36, 0x80000000, 0x8, 0x8, 0x7, 0x6dbe, 0x9, 0x755, 0x2, 0x178, 0x7, 0x1, 0x1, 0x3, 0x0, 0x6, 0x200, 0x3, 0x6, 0x1, 0x5a7d, 0xe, 0x0, 0x100, 0x2, 0x8, 0x1ff, 0x3, 0xe1b, 0x7, 0x1d2, 0x4, 0xfff, 0x5, 0x3, 0x0, 0x6, 0x9, 0x2b4, 0x1, 0x1, 0x72, 0x3, 0x5, 0x1, 0x2, 0x81, 0xe40, 0x4, 0x1ff, 0x9, 0x8b9, 0x7fffffff, 0x1, 0x7, 0x60, 0x1, 0x7, 0xa, 0x10, 0x0, 0x3, 0x1, 0x5, 0x1, 0x100, 0x588f4b2d, 0x7, 0xe, 0x7f, 0x6, 0x7, 0xbc3, 0x4, 0x8001, 0x6, 0xe130, 0xd2d0, 0xfffffff7, 0x4, 0xffff, 0x7, 0x9cc8, 0x7f, 0x7, 0x7, 0x8, 0xffff, 0x2, 0xe, 0xffffffff, 0x252, 0x9, 0x3, 0x5, 0x40, 0x9, 0x3, 0x57, 0x15, 0xffffffff, 0x7, 0x5, 0x2e4b, 0x2, 0x0, 0x8001, 0xfffffffc, 0x9, 0x1, 0x4, 0x98, 0xff, 0x1ee, 0x1ff, 0x12, 0xb9a, 0x5, 0x200, 0x8, 0x81, 0x6, 0x25db, 0x52cd, 0xffffff23, 0x819, 0x4, 0x1]}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x3}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x8}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x7280, 0x4, 0x7, 0x54, 0x0, 0x2, 0x5, 0x9, 0x3, 0xffffff81, 0x2, 0x9, 0x5, 0x4, 0x5, 0x8, 0x6, 0xed5f, 0x3f33d928, 0xffffffff, 0x8dd, 0xfffffffb, 0x9, 0x9, 0x3, 0xff, 0x1, 0xd, 0x1ff, 0x1, 0xd4f, 0x1, 0x4cdcd9c3, 0x8, 0x401, 0x0, 0x4, 0x3, 0x68d, 0x0, 0x5, 0x80, 0x4, 0x2, 0x1, 0x9, 0x6f7, 0x6, 0xd524, 0x2, 0x1, 0x6, 0xfffffc00, 0xfffffff9, 0x1, 0x8, 0x4, 0xe, 0x0, 0xfffffffd, 0x5, 0x4, 0x2, 0x1, 0x6, 0x3, 0x5, 0x71, 0x7, 0x3ff, 0x0, 0x10, 0xfffff458, 0xfffffff7, 0x4, 0x9, 0xe, 0xd, 0x7, 0x1, 0x0, 0x99, 0xb, 0x401, 0x3, 0x2e, 0x101, 0x7fff, 0x535, 0x1, 0x1, 0x3800, 0x3ff, 0x6, 0x8, 0x8, 0x4, 0x9, 0xb, 0xe4, 0x7, 0x6d, 0x9, 0x6, 0x0, 0x4, 0xf, 0xfffffff9, 0x0, 0x2, 0x9, 0x0, 0x80000001, 0x43, 0x4, 0x9, 0x8000, 0x8001, 0xfffffffe, 0x200, 0x8, 0x4, 0x200, 0x1, 0xfeb, 0x1, 0xf, 0x0, 0x10, 0x41, 0x8, 0x11a, 0x400, 0x7, 0x9, 0xf347, 0x98, 0x8, 0x0, 0x80000001, 0x0, 0x1, 0xc, 0x6e6138ac, 0x2, 0x9, 0x8, 0x0, 0x1, 0x8, 0x80000001, 0x6, 0x937, 0x87, 0x7, 0x2, 0x9, 0x41b, 0x6, 0x8, 0x2, 0x5, 0x7, 0xb2, 0xfffffff7, 0x0, 0x7, 0x9, 0x8, 0x9, 0x35f6, 0x5, 0x4a60, 0x5, 0x8, 0xc8, 0x60ea, 0x5c2f, 0x8, 0x8, 0xc, 0x7e, 0x9, 0x759, 0x5, 0x2, 0x5, 0x8, 0x8, 0x2, 0x3, 0x10, 0x6, 0x9, 0xa, 0x9, 0x8, 0x2, 0x8001, 0x8000, 0x8, 0x2, 0x2, 0x3, 0x92, 0x1, 0x5, 0x2, 0x626b, 0x2, 0xf50, 0x8, 0x4, 0x6, 0xb64, 0x7ff, 0x1, 0x6, 0x1, 0x3, 0xd9ec, 0x8, 0x1, 0x3, 0xc, 0x10000, 0x4, 0x4, 0x3ff, 0x200, 0x5, 0x81, 0x7, 0x3, 0x5d47, 0x4, 0x0, 0x80, 0x7fffffff, 0xffff3403, 0x8, 0x8, 0x7, 0x200, 0x2, 0x4ef6, 0x8, 0x2, 0x7ff, 0x5, 0x3, 0x0, 0x9, 0x3, 0x1, 0x1000]}], [@TCA_POLICE_RESULT={0x8, 0x5, 0x3}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x8000000000000001}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x2}, @TCA_POLICE_AVRATE={0x8}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x8}], [@TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x2}, @TCA_POLICE_TBF={0x3c, 0x1, {0xf, 0xffffffffffffffff, 0x1c7, 0x7, 0x9, {0x80, 0x2, 0x5, 0x6, 0xffff, 0x7}, {0x5, 0x0, 0x8, 0x1ff, 0x2, 0x81}, 0x4, 0x95, 0x7}}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x7}, @TCA_POLICE_RATE={0x404, 0x2, [0xc, 0x7, 0x80000000, 0x3, 0x3, 0x2, 0xfff, 0x1, 0xfffffffa, 0x37fe, 0x0, 0x1, 0x8000, 0x5, 0x1, 0x0, 0x9, 0x7, 0x80, 0x4, 0x0, 0x2, 0xc1d, 0x8, 0x8, 0xffffffff, 0x200, 0x0, 0x8, 0xf, 0x4, 0x9, 0x6, 0x4, 0xfffffffb, 0x6, 0x2, 0x2, 0x4, 0xd, 0xf9, 0x10, 0x9, 0xd, 0x7, 0x5, 0x7, 0x5, 0x9, 0x0, 0x7, 0x5, 0xfe8, 0x1, 0x10001, 0x5, 0x3, 0x5, 0x2, 0x8, 0x1, 0x2, 0x7, 0x0, 0x9, 0x7, 0x7, 0x7fffffff, 0x9, 0x80000000, 0x4a6, 0xf, 0x3, 0x10001, 0x3, 0x56, 0x4, 0x4, 0x6, 0x5, 0x4, 0x0, 0xd, 0x9e43, 0xbf, 0x8, 0x8, 0x3, 0x7ff, 0x4, 0x9, 0x8, 0x7, 0xf223, 0x337, 0x6, 0x8, 0xd6, 0x23ad, 0x3, 0x9, 0xfff, 0xd, 0x48d, 0x9487, 0x4f, 0x3, 0xb2, 0x2, 0xffff, 0x7be1dfa1, 0x4, 0x3, 0xc000, 0x5, 0x6, 0xd37, 0x3, 0x0, 0x40, 0x8001, 0x401, 0x3, 0x6, 0x4, 0x1, 0x7, 0x9, 0x0, 0xa, 0x8, 0xa, 0x0, 0x4, 0x5, 0x8a, 0xe, 0x6, 0x3, 0x8, 0x1000, 0x8, 0x2, 0x7d190eb4, 0x9, 0x8, 0x7, 0x2, 0x1, 0x100, 0x4, 0xffffffff, 0x3, 0x42b8, 0x5, 0x539, 0xf1, 0x6, 0x3ff, 0x7f, 0x9, 0x80, 0x200, 0xd, 0x9, 0x0, 0x9, 0xb55, 0x2, 0x7, 0x1, 0x8, 0x80, 0xc, 0x6, 0x9, 0x3, 0x3, 0x2, 0x5, 0x1, 0xa, 0x1, 0xff, 0xc5, 0x0, 0xf, 0x2, 0x9, 0x5, 0x3ff, 0x29, 0x81, 0x9, 0x4, 0x5, 0x0, 0x1, 0x7, 0x6, 0x4, 0x6, 0x3, 0x67, 0x8, 0x0, 0x2, 0xcde7, 0x3426, 0xfffffff9, 0x7fff, 0x1, 0x29, 0x2281, 0x6, 0x1, 0x292, 0x8001, 0x7ff, 0x6, 0x8, 0x445e, 0x1, 0x0, 0x5, 0x8, 0x40, 0x4, 0xe, 0x9, 0x914, 0xfffffffe, 0x5, 0x4, 0x9, 0xb90, 0x0, 0x8, 0xe0000000, 0xa, 0x0, 0x80000001, 0xfffffffe, 0x9, 0x400, 0x5e225f83, 0xffff, 0xfffffff8, 0x6, 0xfffffe01, 0xe, 0x3, 0xd2, 0x9, 0x8, 0x1]}], [@TCA_POLICE_RATE={0x404, 0x2, [0xb6, 0x7, 0x5, 0x2, 0x4, 0xdd, 0x0, 0xfffeffff, 0x3, 0x7, 0x800, 0x4, 0x4, 0x3, 0x0, 0xf, 0x5, 0x0, 0x0, 0x7, 0xe8a, 0x401, 0x593b, 0x80, 0xa2e, 0x6, 0x140c0000, 0x1000, 0xffffffff, 0x2, 0x81, 0x4, 0x2, 0x9, 0x0, 0x5, 0x7, 0x25b, 0x1c000000, 0x4, 0x5, 0x7, 0x906, 0x3, 0x7, 0xa, 0x7, 0x4, 0x4, 0x401, 0xff, 0x0, 0xd77, 0x7, 0xe2f, 0x8, 0x8475, 0x3, 0x320, 0x2745e3aa, 0xb, 0xfffffff2, 0x4e0e, 0x6, 0xb97, 0x7, 0x122, 0x1, 0x670, 0x6, 0x80000000, 0x90000, 0x7f, 0xb466, 0x6, 0x8, 0x8, 0x9, 0x3ff, 0x9, 0x6, 0xbf51, 0xfffff6d2, 0x7, 0xf, 0x80, 0xffff0e26, 0xffff, 0x7, 0x8, 0x1, 0x7, 0x5, 0x6, 0x8, 0x1ff, 0x6, 0xfffffff8, 0x1409, 0x1, 0x94, 0x6, 0x3, 0x9, 0x1ff, 0x49, 0xc91, 0x5, 0x2, 0x8000, 0x200000, 0x67, 0xb6, 0x8, 0x0, 0x5, 0x1, 0x80000001, 0x4, 0x6, 0x5, 0x8, 0x1000, 0x7, 0x4, 0xd, 0x7, 0xffffffff, 0xfff, 0x747ca93b, 0x272, 0x52e, 0x4ddb, 0x8, 0x6, 0x10000, 0x2, 0x9, 0xd7, 0x7, 0x56, 0x9, 0x7fffffff, 0x6, 0xdfdc, 0x8, 0x68, 0x982, 0x1, 0x9, 0xfffffffa, 0x9, 0x1000, 0x6, 0x6, 0xd, 0x6, 0x6, 0x325, 0x200, 0x6, 0x1ff, 0x0, 0x7, 0x7, 0x2, 0x6, 0x98e, 0x5d, 0x7, 0x7, 0x7, 0x3, 0x6, 0x0, 0x80000000, 0x9, 0x0, 0x1, 0x5, 0x8, 0x4, 0x8, 0x4, 0x67, 0x4, 0x3, 0x33, 0x8, 0x7, 0x6, 0x1, 0xf, 0x1, 0x80000000, 0x4, 0x2f, 0x8, 0x2, 0x0, 0x2, 0x8, 0xfffff4e6, 0x7, 0x1, 0x400, 0x8, 0x2, 0x5, 0x7f8, 0xfffff001, 0x5, 0xfff, 0x5, 0x7, 0x1, 0xb, 0x1000, 0x80000001, 0x2, 0x9, 0x7, 0x80, 0x7, 0x7, 0xb, 0x5, 0x7, 0xc, 0x3, 0x63, 0x3, 0x8, 0xf, 0x40, 0x8, 0x6, 0x9, 0x4, 0x7ff, 0xffffffff, 0x2ef0, 0x5, 0xd989, 0xfffffff1, 0x4, 0x79085583, 0x200, 0x7, 0x6, 0x4, 0x5, 0x8, 0x0, 0x7, 0xfffffffa]}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x100, 0xffffffc0, 0x3ff, 0x3, 0x5, 0x604, 0x79, 0x5, 0x81, 0x254e5e50, 0x6c, 0xffffffff, 0x3, 0x10, 0xb2, 0x7fff, 0x5, 0x8, 0x4, 0x2, 0x6, 0x1000, 0x9, 0x9, 0x1, 0x800, 0xfd42, 0x6, 0x8, 0x3, 0xc, 0x2, 0x10000, 0xffffffff, 0x7fff, 0x5, 0x7ff, 0xd, 0x6, 0x6, 0x321, 0x5, 0x8, 0x0, 0x1000, 0x0, 0x2, 0x7, 0x3, 0x7fff, 0x3, 0x0, 0x4, 0xfffffffd, 0x4, 0x1, 0xe, 0x5, 0x0, 0x2, 0x5, 0x6, 0x3, 0x80, 0x8972, 0x7f, 0x200, 0x1, 0x9, 0x7, 0x90f, 0xd7, 0x3, 0x1000, 0xffff, 0x2, 0x9, 0x9e2, 0x4, 0x0, 0x9, 0x101, 0x0, 0x3, 0x4, 0xb, 0x9, 0x9, 0x3, 0x6, 0x3, 0x5c, 0x7, 0x2, 0x80000000, 0x7f, 0x8, 0x9, 0x6, 0x8edf, 0xf4, 0xfff, 0x0, 0x4, 0x80000001, 0x7a, 0x4, 0x0, 0x8, 0x2, 0x3, 0x5, 0x5, 0x1, 0x401, 0x6, 0x0, 0x2, 0x4, 0x5, 0x0, 0x205, 0xffff6fb0, 0x80000000, 0x1ff, 0x100, 0x6, 0x5, 0x6, 0xfffffb4c, 0x10000, 0xfffffffc, 0x1d9, 0x1, 0x400, 0x3, 0x2, 0x7e5, 0x4, 0x8, 0x4, 0x2, 0x1, 0xfe22, 0x4, 0x1, 0xd, 0x50, 0x7, 0x2, 0x7, 0xfffffff7, 0x9, 0x9ed, 0x3, 0x200, 0x5, 0x4, 0x9, 0x3, 0x73f, 0x6, 0x4, 0x8, 0x4, 0x7e0, 0x0, 0x7fffffff, 0x0, 0x59, 0x7d8, 0x7b1cb7e9, 0xd31, 0x1, 0x2, 0x8, 0x3, 0x2ae9, 0x7f, 0x8, 0x400000, 0xb6, 0x8, 0x1, 0xae, 0x0, 0x41, 0xa0c3, 0x2, 0x5, 0xffffffff, 0x9, 0xfffffd90, 0x401, 0x5, 0xfffffffc, 0x8, 0xffffffff, 0x0, 0x7, 0x69, 0x1, 0xd470, 0x0, 0x0, 0x4, 0x5, 0x9, 0xfffffff9, 0x5, 0x7, 0x6, 0xffffffff, 0x8, 0x5, 0x2, 0x5, 0xdf90, 0xfa, 0x3, 0x200, 0x4, 0x72, 0xe, 0x0, 0x200, 0x40, 0x0, 0x0, 0x8000, 0x9, 0x95, 0x101, 0x4, 0x4e8d, 0x2, 0x5, 0x8, 0x0, 0x0, 0xf, 0x100, 0x9, 0x8, 0x463, 0x10f, 0x4, 0x8, 0x3, 0xc955d6c8, 0x70f, 0x5, 0x7, 0x400, 0x1, 0x2]}], [@TCA_POLICE_RATE64={0xc, 0x8, 0x20}, @TCA_POLICE_RATE={0x404, 0x2, [0x800, 0x7, 0x3, 0x7, 0x1, 0xffff, 0xffffffff, 0x6e6, 0x7f, 0xffff9049, 0x1, 0x100, 0xe, 0x9, 0x5, 0x5, 0x4, 0x6, 0xfffffffa, 0x6000, 0xfffffff6, 0x9, 0x0, 0x5, 0xd0, 0x2, 0xb1f5, 0x4, 0x211fe82d, 0x3ff00, 0x7, 0x9, 0x1, 0x6, 0x7af, 0x8001, 0x2, 0xff, 0xce980, 0x1, 0x5, 0x6, 0x4, 0x7f, 0xedb, 0x4, 0x8, 0x67b2, 0x4, 0xd30a, 0x30, 0x6, 0x80000, 0xe, 0x7, 0x1e0, 0x8, 0x3, 0x2, 0x0, 0x2, 0x7, 0x1ded, 0xffffffff, 0x2, 0x9, 0x4, 0x4, 0x2f, 0x1ff, 0x800, 0x0, 0x3, 0x0, 0x80, 0x6, 0x400, 0xc34, 0x3, 0x2, 0x2, 0xd85, 0x2, 0x80000001, 0x8, 0x7b4, 0x4, 0x8c7, 0x2, 0x9, 0x800, 0x1, 0x515d, 0x4, 0x9, 0x0, 0xb8, 0x1, 0x1, 0x6, 0x7, 0xffffb0d4, 0xffffffff, 0x2, 0x3, 0x1, 0x5, 0x3ff, 0x40fe302c, 0xfff, 0x8, 0x5, 0x4, 0x80000001, 0x3, 0x3, 0x0, 0xd946, 0xf073, 0x4, 0x7fff, 0x5, 0x0, 0x1ff, 0xc, 0x8, 0x2, 0x1, 0x77, 0x0, 0xfffffffb, 0x500, 0x0, 0x7, 0x8, 0x7, 0x5a, 0x7, 0x3, 0x715, 0x0, 0x7, 0x2, 0x9, 0xbc46, 0xc5e, 0xe, 0xfff, 0x6, 0x8, 0xff, 0x2, 0x9, 0x10000, 0xfffff2e8, 0x0, 0x6, 0x0, 0x8, 0xf, 0xfff, 0x0, 0x401, 0x2, 0x2, 0x5, 0xfffffff8, 0x0, 0xd, 0x10001, 0x80000, 0x4, 0x5, 0x2, 0x7, 0x800, 0x0, 0x5, 0x8, 0x2, 0x8, 0x9, 0x4, 0x3435, 0x40, 0x2, 0xfffffffc, 0xb, 0xffffe266, 0x34, 0x2, 0x7fffffff, 0x40, 0x2, 0x4, 0x8000, 0x7ff, 0xff, 0x0, 0x7, 0x99400000, 0x1, 0x3, 0x1000, 0x0, 0x7, 0x9, 0x7, 0xc, 0x35006c7b, 0xce7a, 0x6, 0x1676, 0xd3, 0x2b, 0x31f, 0x40, 0x5, 0x7fff, 0x7, 0x7f, 0x16, 0x80000, 0x7, 0x1373, 0x7e1, 0xbed, 0x9b7b, 0x4, 0x7fffffff, 0x5, 0x80000000, 0x10, 0x9, 0x0, 0x8, 0x3, 0x9, 0x5, 0x3, 0x3, 0xf, 0x4, 0x1, 0x9, 0x0, 0xa, 0x3, 0x9, 0x40, 0x2, 0x2, 0x1, 0x3, 0x7, 0xbd]}, @TCA_POLICE_RATE64={0xc, 0x8, 0xffffffffffffffff}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x5}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x7}, @TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x20000000, 0x2, 0x6, 0x6, {0x9, 0x1, 0xffff, 0x6, 0x723, 0x9}, {0xc5, 0x1, 0x7ff, 0x3db8, 0x7f, 0x2}, 0x10001, 0xfffffffd, 0x9}}]]}, {0xff, 0x6, "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"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x2}}}}, @m_pedit={0x3b6c, 0x7, 0x0, 0x0, {{0xa}, {0x3af8, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS_EX={0xec8, 0x4, {{{0x8, 0x4, 0x7, 0x7, 0x3}, 0x18, 0x6, [{0x4, 0x9, 0x7, 0x14, 0x8, 0xfffffffd}, {0x5, 0xa, 0x5, 0x1, 0x2, 0x7fff}, {0x89, 0xfffff000, 0x7, 0xc7ad, 0xffffffff, 0x4}, {0xfffffffb, 0x6, 0x6, 0x200, 0x10, 0xd}, {0x1, 0x7, 0xc60000, 0x8000, 0x8, 0x10001}, {0x0, 0x8001, 0x4, 0x1, 0xb8e, 0x7fffffff}, {0x0, 0x1, 0x8, 0x3ff, 0x5, 0x392d9671}]}, [{0x345, 0x4, 0x3ff, 0x6, 0x80000000, 0x4}, {0x2, 0x1, 0x67a7, 0xfd, 0x2, 0x3}, {0x3, 0x8, 0x101, 0x8, 0x8e3c, 0x8}, {0x6, 0x9, 0x514, 0x6, 0xffffffff, 0x401}, {0x5, 0xa032, 0x7, 0x9, 0xd51, 0x28a}, {0x3, 0x21b, 0x5, 0xa, 0x0, 0x9}, {0x9, 0x2, 0x3, 0x1, 0x58, 0x5}, {0xc1e5, 0x9, 0x986, 0xc75, 0x3, 0x100}, {0x58c, 0xf, 0x8, 0x5, 0x1, 0x6}, {0x5, 0x3, 0x6, 0x8, 0x8, 0xd4}, {0x4fc5, 0x84, 0x79, 0x3, 0x1ff, 0x5}, {0x6, 0x8, 0x2, 0xb, 0x5, 0x7}, {0xfff, 0x2, 0x2, 0x8, 0xf}, {0x200, 0x0, 0x7, 0x1, 0x3, 0xf3a6}, {0x7f, 0xfffffff9, 0x401, 0x2e6, 0x7, 0xd}, {0x1, 0x5, 0x0, 0x200, 0x80, 0xa}, {0x4, 0x2, 0x1, 0x7, 0x1fb, 0x2}, {0x8, 0x4, 0x3, 0x1ff, 0x5, 0xd}, {0x7, 0x3, 0xfffff0d0, 0x4, 0x15ff, 0x5}, {0xfffffff7, 0x9, 0x8, 0x43, 0x3, 0x3ff}, {0x5e20, 0x3, 0x98b9, 0x400, 0x0, 0x7}, {0x81, 0x1, 0x1dd, 0x4, 0x5, 0xb62}, {0x9, 0xf32, 0x44, 0xd64, 0x9, 0xb0}, {0x2, 0x8, 0x0, 0x10000, 0x88, 0x44}, {0x9, 0x3a9c, 0x7ff, 0x3, 0x6, 0x1}, {0x2, 0x9, 0x10000, 0x920, 0x5ec, 0x5}, {0x7b6, 0x0, 0x7ff, 0x2, 0x7, 0xf57f}, {0x3, 0xed, 0x200, 0xa761, 0x6, 0x7}, {0x4, 0x0, 0x4, 0x6, 0x7, 0x7}, {0x1, 0x7, 0x0, 0x7fff, 0x0, 0xffffffff}, {0xfffffff7, 0x0, 0x9, 0x6, 0x868, 0x81}, {0xcc5, 0x1, 0x9, 0x6, 0x2, 0x5}, {0x7, 0x6, 0x6, 0xffffffff, 0x1, 0x1}, {0x2, 0x7, 0x9, 0x2, 0x3, 0x22}, {0x1, 0x1, 0x3, 0x80000000, 0x1, 0x1}, {0x0, 0x7fffffff, 0x200, 0xf, 0x2, 0xa567}, {0x3, 0x2, 0x606c, 0x46, 0xfffffeb2, 0xac}, {0x2, 0x5, 0x0, 0x5cda, 0x6, 0xffffffff}, {0x6, 0x7, 0x8, 0x3, 0x6, 0x9000000}, {0x6, 0x6, 0x5, 0xfff, 0x6, 0x4}, {0x1, 0x2000000, 0x3, 0xffff, 0xfffffffd, 0x9}, {0x9, 0xc, 0x3, 0x5, 0x5, 0x4}, {0x9, 0xfffffffd, 0x4, 0x0, 0xff, 0xe0}, {0x1000, 0x8, 0x6, 0x200, 0x4f83, 0x803}, {0xffff18c5, 0x26b1, 0x7, 0x841, 0x9, 0xffff}, {0x8c, 0x6, 0x98, 0xc78, 0x2, 0x2}, {0xfffffff8, 0x7ff, 0x8001, 0xf4d5, 0x4, 0x6}, {0x4, 0x0, 0x1, 0x10001, 0x10001}, {0xc0, 0x1, 0x6, 0x10001, 0x5, 0xe06}, {0x8, 0xd86, 0x5, 0x9, 0xfefc, 0x4}, {0x0, 0x1, 0x0, 0x3, 0x90, 0x3}, {0x7, 0x80000000, 0x100, 0x9, 0x404000, 0x2}, {0x8000, 0x4, 0x26, 0x7, 0x2, 0x10001}, {0x1, 0x2, 0xf, 0x8, 0x3, 0x1}, {0x9, 0x4, 0x5, 0x800, 0xfff, 0x5}, {0x3, 0x0, 0x7, 0x2, 0x5, 0xc}, {0x1ac8, 0x9, 0x8, 0x9, 0x1, 0x9}, {0x374, 0x8, 0x0, 0x4, 0x7ff, 0x9}, {0x6, 0x40, 0x6, 0x1, 0x9, 0x1ff}, {0x10000, 0x649, 0x5, 0xfffffff7, 0x800, 0xfffffff7}, {0x200, 0xf, 0xb6, 0xfffffe00, 0x3, 0x7}, {0x0, 0x9, 0xfffffffe, 0x5, 0xffffffff, 0xd}, {0x5, 0x800, 0x800, 0x83, 0x10001, 0xe8}, {0x3, 0x8, 0x4185, 0x4, 0x5, 0x3}, {0x40, 0x0, 0x4, 0x101, 0x8, 0x5}, {0x4, 0x5, 0x7, 0x68977e45, 0x10001, 0x1000}, {0x2, 0x9d86, 0x4, 0x1, 0x7ff, 0x1ff}, {0x4, 0x6, 0xb, 0xba, 0x8, 0xecb}, {0x4, 0x7fff, 0x9, 0x4, 0xffffffff, 0x8}, {0x8, 0xfffffffa, 0x1, 0x71, 0x3, 0x9}, {0x1, 0x8, 0x9, 0x2, 0x9, 0x401}, {0x6, 0x9, 0xffffffff, 0xc35, 0x6, 0xfe}, {0x9, 0x9, 0xdb9c, 0x7, 0xfffffffd, 0x9c}, {0xfffffffe, 0x2, 0xe, 0xfffffff3, 0x5, 0x2}, {0x8001, 0x19, 0x2, 0xe64a, 0x0, 0x9}, {0x2, 0x3, 0x3, 0x7, 0x3bc, 0x4}, {0x5, 0x3, 0x80000001, 0xd5, 0xe, 0x1}, {0x4, 0xfffffffc, 0x6, 0x9d, 0x5b, 0xa}, {0x7, 0x4abc, 0x6, 0xfffffff9, 0x9, 0x16a}, {0x7, 0x40, 0xff, 0xfad9, 0xd, 0x3}, {0x7, 0x2, 0x3, 0x8, 0x10000, 0x90000000}, {0x95, 0x36, 0x4, 0x9, 0x2, 0xfff}, {0x8, 0xd8cf, 0xc743, 0x3, 0x6bcc, 0x61}, {0xc716, 0x7, 0x1, 0x36, 0x2, 0x1ff}, {0x6, 0x840, 0x9, 0x9f18, 0x489e4c6d}, {0xb0, 0x2, 0x3, 0xa, 0x0, 0xd0}, {0x1, 0x6, 0xc, 0x3, 0x8, 0x7ce}, {0x6, 0xe1, 0x8000, 0x4, 0x8, 0x3}, {0x10, 0x3, 0x1, 0x5, 0x2, 0x2}, {0x8001, 0x317, 0x6, 0x2, 0x5, 0x1}, {0x8, 0x101, 0xf6bd, 0x1000, 0xa9, 0x80000001}, {0x4, 0x1000, 0x7fff, 0x1000, 0x6, 0xffffffff}, {0x5, 0x8fef, 0x7, 0x4, 0x0, 0x1}, {0x0, 0x1, 0x1, 0x4, 0x7b800000, 0x3800000}, {0xffffffff, 0x5, 0x9796, 0x4, 0x6, 0x7}, {0xfc000000, 0x0, 0x4a4c, 0x7, 0x9, 0x1}, {0x5, 0x9, 0x3, 0x200, 0x400}, {0x3, 0x7, 0x3, 0x1, 0x0, 0x4}, {0x6, 0x9, 0x4, 0xe, 0x80000001, 0xfffeffff}, {0x7fffffff, 0xfffffff7, 0x4, 0x72, 0xfffffff0, 0x9}, {0x0, 0xcd, 0x3, 0x3, 0x3ff, 0x7fff}, {0xc6c5, 0x0, 0xfff, 0x1, 0x6, 0x1}, {0x6, 0xb, 0x8, 0x1ff, 0x1, 0x8}, {0x6, 0x3, 0x39ace28, 0xfffffffd, 0x9, 0x101}, {0x1108, 0xdc, 0xfffffffb, 0x21a6, 0xffff}, {0x6, 0x9, 0xe8d8, 0x0, 0x2, 0xe7}, {0x0, 0x5, 0x200, 0x9c4, 0x1, 0x6}, {0x5, 0x44, 0x3, 0x3cc, 0x4, 0x4f600000}, {0x101, 0xfffffff7, 0x2, 0xffffffff, 0x1, 0x2}, {0x6, 0x9, 0xc796, 0x2, 0x3, 0x985}, {0xb53000, 0xe295, 0xb8e, 0x8, 0x4, 0x81}, {0x6, 0x9, 0x4, 0x200, 0x47c1, 0x4}, {0xe589, 0x6, 0x8, 0x8, 0x10000, 0x4}, {0x0, 0x7, 0x5, 0x9, 0x8, 0x9}, {0x7d, 0x10000, 0x4e6, 0x1, 0x8, 0x10001}, {0x393, 0x400, 0x8, 0xfffffff9, 0x5, 0x400}, {0xa, 0x7, 0x2, 0x5, 0x4, 0x100}, {0x3, 0x8, 0x5, 0x9c00000, 0x6, 0x6}, {0x1, 0xd1, 0x7f, 0x6, 0x8, 0x6}, {0x6, 0x7, 0xff, 0x2, 0x2, 0xbc}, {0xffff, 0x3, 0x2, 0x3, 0x7fff, 0x8}, {0x1, 0x1, 0x401, 0x0, 0x0, 0x8}, {0x8, 0x51e, 0x7, 0x5, 0x1400000, 0xae09}, {0x5, 0x7fff, 0x9, 0x88b, 0x5bf6}, {0x8b, 0x39e0, 0x6, 0x8, 0x9, 0x3}, {0x31b424cd, 0xe2, 0x10001, 0xb, 0x8aa, 0x1}, {0x5, 0x8, 0x4c88, 0x400, 0x3}, {0x4, 0x80000001, 0x3b74, 0x69f, 0xd727, 0x7}], [{0x2, 0x1}, {0x4, 0x1}, {0x3}, {0x5, 0x1}, {0x0, 0x1}, {0x4, 0x1}, {0x1}, {0x4}, {0x0, 0x1}, {0x1}, {0x3, 0x1}, {0x1}, {0x4, 0x1}, {0x4, 0x1}, {0x3}, {0x5}, {0x4, 0x1}, {0x3}, {0x5}, {0x1, 0x1}, {0x3, 0x1}, {0x4, 0x1}, {}, {}, {0x5, 0x1}, {0x3}, {0x5, 0x1}, {0x3, 0x1}, {0x5, 0x1}, {0x2, 0x1}, {0x7, 0x1}, {}, {0x2, 0x1}, {0x4}, {0x5, 0x1}, {0x4}, {0x1}, {0x1}, {0x6e2b6a947c80156e}, {0x5}, {}, {0x1}, {0x5, 0x1}, {}, {0x3}, {0x4, 0x1}, {0x4}, {0x3, 0x1}, {0x4}, {0x1}, {0x4}, {0x1}, {0x2}, {0x4, 0x1}, {}, {0x4}, {0x5}, {0x4, 0x1}, {0x4, 0x1}, {}, {0x0, 0x1}, {0x3}, {0x4, 0x1}, {0x3}, {0x1}, {0x2, 0x1}, {0x4, 0x1}, {0x4, 0x1}, {0x1, 0x1}, {0x2, 0x1}, {0x3}, {0xc229b62701970544}, {0x2, 0x1}, {0x3}, {0x2, 0x1}, {0x5, 0x1}, {0x5, 0x3}, {0x0, 0x1}, {}, {0x334b96a39f692038}, {0x4, 0x1}, {0x3, 0x1}, {0x2, 0x1}, {0x3, 0x1}, {0x3, 0x1}, {}, {}, {}, {0x1}, {0x5}, {0x2}, {0x5, 0x1}, {0x3, 0x1}, {0x2}, {0x2, 0x1}, {0x4}, {0x4, 0x1}, {0x1}, {0x1}, {0x1}, {0x5}, {0x0, 0x1}, {0x3, 0x1}, {0x5}, {0x3, 0x1}, {}, {0x1, 0x1}, {0x2}, {0x5}, {0x3, 0x1}, {0x2}, {0x2, 0x1}, {0x3, 0x1}, {0x2}, {0x1, 0x1}, {0x2, 0x1}, {0x1, 0x1}, {}, {0x4}, {0x1, 0x1}, {0x3, 0x1}, {0x4}, {0x5, 0x1}, {0x0, 0x1}, {0x4, 0x1}, {0x7}, {0x1, 0x1}, {0x3, 0x1}], 0x1}}, @TCA_PEDIT_PARMS={0xe20, 0x2, {{{0x4, 0x0, 0x10000000, 0x1, 0xab}, 0x80, 0x13}, [{0x8, 0x66e, 0xfffff635, 0x1800, 0xfffffe00, 0x7}, {0x1, 0xc1, 0x4, 0x1, 0x9, 0xdcb}, {0xff, 0x2, 0x6, 0x8e, 0x7, 0xffff8000}, {0x5, 0x1, 0x905b, 0x1, 0x800, 0x6}, {0x3, 0x7fffffff, 0x101, 0x100000, 0x6, 0x3}, {0x8, 0x0, 0x7, 0x2, 0x1, 0x4}, {0x2000000, 0xf, 0xfffffffa, 0x8, 0xb5, 0x4}, {0xbd, 0x2, 0xfff, 0x738, 0x1, 0x200}, {0xc0000000, 0x0, 0x7, 0x4, 0x80000001, 0x8000}, {0x1, 0x0, 0x8, 0x0, 0x4, 0x101}, {0x7fffffff, 0x7fff, 0xc, 0x2, 0x1, 0xffff}, {0x1, 0x8, 0xffffffff, 0x5, 0x3, 0xfffffffb}, {0x9, 0x7, 0x7ff, 0x6, 0x4, 0x401}, {0x3, 0x5, 0xa0, 0x6, 0xffffbbc0, 0x2}, {0xffffffff, 0x6, 0x8e72, 0x7, 0x4, 0x80000000}, {0x7fff, 0x3, 0x100, 0x4, 0xaf4, 0x2}, {0x8000, 0x8000, 0x3, 0x1, 0x1, 0xffff07e3}, {0x7, 0x5, 0x1, 0x3, 0x65, 0xd}, {0x100, 0x8001, 0x2, 0xbc1, 0x3ff, 0x1}, {0x3, 0x2, 0x8000, 0x2, 0x0, 0x8}, {0x8, 0x4, 0xf, 0x7, 0x418, 0x1}, {0x9, 0x2, 0x5, 0xbb8, 0x1, 0x1}, {0x40, 0xd4a, 0x3, 0x800, 0x8, 0x3}, {0x5c, 0x4, 0x9, 0xea, 0x30, 0xd}, {0x8, 0x2, 0x10000, 0x0, 0x40000, 0xffff}, {0x2, 0x1ff, 0xcb, 0x10, 0xfffffffa, 0x5}, {0x5, 0xaae7, 0x6, 0x8, 0x4, 0x3}, {0x8, 0x1, 0x8, 0x3b60, 0x7, 0xe7}, {0x1a, 0x6ad93627, 0x4, 0x7fff, 0x120, 0xa}, {0x40, 0x7, 0x80000000, 0x0, 0x0, 0x4}, {0xb, 0x101, 0x0, 0x80000000, 0x1, 0xaf7}, {0x7, 0x7, 0x3, 0x8169, 0x24f, 0x96}, {0x7f, 0x6, 0x4, 0x7, 0x0, 0x65ce}, {0x28, 0x903, 0x0, 0x2, 0xff, 0x1000000}, {0x7f, 0x0, 0xaee, 0x7, 0x5, 0x5}, {0x7fff, 0x3, 0x80000001, 0x8, 0x4, 0xe06}, {0x3, 0x8, 0xc3, 0x5, 0x1, 0x3}, {0x9e, 0x0, 0x5, 0x2, 0xffffffff, 0xff}, {0x2, 0x7, 0xd, 0x9, 0x2, 0x1}, {0x279, 0x2e0e, 0x5, 0x9, 0x98e}, {0x7f, 0x40, 0x6, 0x5, 0xfffffffa}, {0x7a750f51, 0x442, 0x6, 0x71f, 0x7, 0xfffffffe}, {0x2, 0x8, 0x5, 0x80000001, 0xfffffa40, 0x5}, {0x3ff, 0x1, 0x200, 0x6, 0x7d31, 0x80000000}, {0x4, 0x3, 0x3, 0x3, 0x77, 0x6}, {0xc424, 0x4000000, 0x6b4a, 0x0, 0x3, 0x3}, {0x10000, 0x1000, 0x3, 0x1, 0x2, 0xffffffff}, {0x0, 0x7fff, 0xe, 0x1ff, 0x2, 0x9}, {0x401, 0xff, 0x8, 0x3, 0x200, 0x4}, {0xaf, 0x4, 0x3, 0x0, 0xa84, 0x578}, {0xffffff80, 0x0, 0x0, 0x4, 0x5, 0xfff}, {0xfffffff9, 0x2, 0x800, 0xfffffffe, 0x5, 0x101}, {0x2, 0x0, 0x6, 0x3, 0x2, 0x4}, {0x0, 0x4, 0x2, 0x4, 0xfff, 0x10}, {0x8247, 0x0, 0x10001, 0x7b2, 0x3, 0x81}, {0x3, 0x8, 0x10, 0xe, 0x4, 0xd}, {0x5, 0x2, 0xffff85ab, 0x3ff, 0x6, 0x2}, {0x7a, 0x5, 0x7f, 0xffff, 0x6, 0x5}, {0x5, 0x88da, 0x6, 0x9, 0x1e9e485d, 0x200}, {0x0, 0xc, 0x1, 0xa38, 0xa, 0x7}, {0x10001, 0xc6e, 0x6, 0x1, 0x7, 0x3ff}, {0x4, 0x2, 0x80000001, 0x4607, 0x7be0}, {0x8, 0x6, 0x3, 0x7, 0x2, 0x7}, {0x2, 0x5, 0xffff, 0x2, 0x5, 0x3}, {0x8, 0x40, 0x1, 0x30000, 0x1, 0x40}, {0x6, 0x2, 0xfffffffb, 0x4, 0x8, 0x69}, {0xfffffffa, 0x27, 0x8, 0x7, 0x2, 0x4c0}, {0x7fff, 0x6, 0xe4d, 0x0, 0x401, 0x9}, {0x9, 0xfffffffd, 0x6, 0xfffffe01, 0x7, 0x9}, {0x8001, 0x0, 0x0, 0x43e5, 0x7, 0x2}, {0x7, 0x1, 0xfffffffa, 0x5, 0x81, 0xffffffff}, {0xd4000000, 0xd, 0x8, 0x400, 0xa, 0x1ff}, {0x9, 0xffff0e42, 0x3, 0x30, 0x0, 0xffffff4d}, {0x0, 0x8, 0x7, 0x10, 0x6, 0x7fffffff}, {0x11a, 0x1, 0x0, 0x2, 0x1, 0xcb6}, {0x80000001, 0xffffffff, 0xe, 0x7, 0x5, 0x80}, {0x0, 0x5, 0x400, 0x52e, 0xffff7fff, 0x7}, {0xfe0, 0x3, 0x6, 0xa54, 0x6, 0x5}, {0x8001, 0x4, 0x1, 0x10001, 0x35}, {0x81e, 0x6, 0xfffffffe, 0x2, 0xc, 0x8}, {0x0, 0x2340, 0x7, 0xfffffe00, 0x80000000, 0x7}, {0x9, 0x0, 0x1, 0x7fffffff, 0x4, 0xa24}, {0x0, 0x7f, 0x9, 0x3ff, 0x9, 0xe}, {0x5, 0x8000, 0x5, 0x1, 0x80000000, 0x7}, {0x8, 0x5, 0x1, 0x3, 0x5}, {0x10000, 0x200, 0x6, 0xcedb, 0xfffffff5, 0xc4000000}, {0x5, 0x6, 0x1000, 0xffff, 0x6, 0x7}, {0x6, 0x72b, 0x51d, 0x5, 0xe4a, 0x6}, {0xb, 0x0, 0x4e, 0x2, 0x2, 0xffffff01}, {0x7, 0xffffffff, 0xffffffff, 0x1, 0x81, 0x200}, {0x4, 0x81c, 0xfffffff9, 0x2, 0xff, 0xfffffff0}, {0xb06, 0x8000, 0x80000000, 0x6, 0x6, 0x6}, {0x6, 0x7, 0x800, 0x40, 0x200, 0x7}, {0x1, 0x0, 0x2, 0x3, 0xfb, 0x323c}, {0xfffffff9, 0x2, 0x5, 0x372f}, {0x7, 0x8, 0xfffffff7, 0xb4d, 0x7, 0x1}, {0x5, 0x7, 0x1, 0x6, 0x3, 0xffff0001}, {0x5, 0x10, 0x55b, 0x410, 0x6, 0x9}, {0x9, 0x1, 0x2, 0x5, 0x4, 0xe}, {0x8, 0xc, 0x2, 0x1, 0x0, 0x7}, {0x40, 0x10000, 0x401, 0xaed9, 0x1, 0x4eb0}, {0x9, 0x2, 0x4, 0x1, 0xfff, 0x3ff}, {0x3, 0x1, 0x7, 0x5, 0xc660, 0x4de2a0fc}, {0x3, 0x6, 0x9, 0x7fff, 0x8, 0x7}, {0x1, 0xffffff81, 0x2, 0x60, 0x7, 0x10001}, {0x7, 0x0, 0x6, 0x7, 0x3, 0xd10}, {0xb0, 0x4, 0x1000, 0xffffffff, 0x6, 0xef4}, {0x19bc, 0x10, 0x200, 0x3, 0x4, 0x2}, {0xffff, 0x1, 0x8, 0x9, 0x0, 0x1b}, {0x5, 0x9, 0x200, 0x8, 0x8000, 0x3ff}, {0xfffffff9, 0xd7, 0xe, 0x4, 0x8000, 0x5}, {0x40, 0x8, 0xffffff7d, 0x9, 0x9, 0xa8a5}, {0x9, 0x7, 0x3, 0x3, 0xa, 0x3}, {0x9, 0x0, 0xffff, 0x8, 0x7, 0x8}, {0x4f913e96, 0xfffffffb, 0x0, 0x101, 0x6, 0x9}, {0x3, 0x6, 0xffffffff, 0x6, 0x0, 0x7}, {0x400000, 0x0, 0x6, 0xb, 0x8, 0x6}, {0x1, 0x0, 0x2, 0x1, 0x2, 0x29b1}, {0xa3a9, 0x9, 0x10, 0x8, 0xc854, 0xf8}, {0x2, 0x2, 0xffff, 0x7fffffff, 0x2}, {0x0, 0x3d3, 0x9, 0x8f4a, 0x0, 0x4}, {0x7fb7, 0x1, 0x4, 0x1, 0x9, 0x6}, {0x4, 0x9, 0xe, 0x2, 0x9ea, 0xe}, {0x1533, 0x527, 0xe, 0x60000, 0x7f, 0x8}, {0x57, 0x4b, 0x53, 0x7, 0x0, 0x7}, {0x10001, 0x7, 0x1, 0xfffffff1, 0x1, 0x3}, {0x3, 0x5, 0x7fffffff, 0x2, 0x2, 0x1}, {0x9, 0x80000000, 0x1000, 0x7, 0xb, 0xffffff80}], [{0x5, 0x1}, {0x5}, {0x5, 0x1}, {0x3, 0x1}, {0x5, 0x1}, {0x3, 0x1}, {0x4, 0x1}, {}, {0x2}, {0x2}, {0x2}, {0x4, 0x1}, {0x4, 0x1}, {0x4}, {0x5}, {}, {0x5, 0x1}, {}, {0x2}, {}, {0x4}, {0x4, 0x1}, {0x5, 0x1}, {0x3}, {0x5}, {0x5, 0x1}, {0x2}, {0x0, 0x1}, {0x1, 0x1}, {0x5, 0x1}, {0x1}, {0x0, 0x1}, {0x1}, {0x3, 0x1}, {0x5}, {0x1, 0x1}, {0x5}, {0x4, 0x1}, {0x3}, {0x0, 0x1}, {0x5, 0x1}, {0x3}, {0x3}, {}, {0x4}, {0x1}, {0x3, 0x1}, {0x1}, {0x5, 0x1}, {0x2, 0x1}, {0x5, 0x1}, {0x4}, {0x4, 0x1}, {0x4}, {0x5, 0x1}, {0x2}, {0x5}, {0x5}, {}, {}, {0x0, 0x647ff200ececd7cc}, {0x3, 0x1}, {0x2, 0x1}, {0xddfae17aee0e4e9d}, {0x4}, {0x4, 0x1}, {}, {0x0, 0x1}, {0x1}, {}, {0x3, 0x1}, {0x4, 0x1}, {0x0, 0x1}, {}, {0x0, 0x1}, {0x4, 0x1}, {0x3, 0x1}, {0x1, 0x1}, {0x0, 0x1}, {0x5, 0x1}, {}, {0x3}, {0x4}, {}, {0x4, 0x1}, {0x1}, {0x4, 0x1}, {0x3}, {0x3, 0x1}, {0x2}, {0x4, 0x1}, {0x0, 0x1}, {0x5}, {0x3, 0x1}, {0x0, 0x1}, {0x0, 0x1}, {0x3, 0x1}, {0x0, 0x1}, {0x1}, {0x4, 0x1}, {0x3}, {}, {0x2, 0x1}, {0x4, 0x1}, {0x0, 0x1}, {}, {0x4}, {0x4, 0x1}, {0x1, 0xc799386e28a5c46e}, {0x2, 0x1}, {0x0, 0x1}, {0x1, 0x1}, {0x3, 0x1}, {0x2, 0x1}, {0x0, 0x1}, {0x4, 0x1}, {0x3}, {0x4}, {}, {0x2}, {0x5}, {0x2}, {0x7, 0x1}, {0x1, 0x599fc84b4dc283bf}, {0x4, 0x1}, {0x3}, {0x5}, {0x3, 0x1}], 0x1}}, @TCA_PEDIT_KEYS_EX={0x20, 0x5, 0x0, 0x1, [{0x1c, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_HTYPE={0x6}, @TCA_PEDIT_KEY_EX_CMD={0x6}]}]}, @TCA_PEDIT_PARMS_EX={0xeb0, 0x4, {{{0x1, 0x8, 0x5, 0x9, 0x3}, 0x80, 0xc, [{0x4, 0x8, 0x0, 0x7f, 0x6, 0x7}, {0x3ff, 0x10000, 0x100, 0xffff, 0x5, 0xffffffad}, {0x5, 0x7ff, 0xfffffffa, 0x4, 0x9, 0x400}, {0x2, 0x4, 0x4, 0x3ff, 0x15, 0x2}, {0x4, 0xffffffff, 0xa, 0x7fff, 0x0, 0x1000}, {0x0, 0x0, 0x7, 0x5, 0x5, 0x5}]}, [{0xb6a, 0x1, 0x1, 0x2, 0x5, 0x200}, {0x5f35, 0x7fff, 0x391, 0x2, 0x1, 0x3ff}, {0x2, 0x6440, 0xffffffff, 0x7a2, 0x5, 0xd}, {0x1, 0x5, 0x12, 0x8, 0x2, 0x3}, {0x4, 0xff, 0x30c0, 0x10, 0x2, 0xffffffff}, {0x3, 0x2, 0x74, 0x6, 0x1}, {0xff, 0x4, 0x1, 0x3, 0x3f, 0x80000000}, {0x9, 0xcc, 0xb31, 0x3, 0x592, 0x5}, {0x100, 0x3, 0x1, 0xfffffff4, 0x6, 0x1ff}, {0x5, 0x9, 0x5, 0x400, 0x101, 0x4}, {0x4, 0x0, 0x6, 0x5, 0x4, 0x1}, {0x3ff, 0x8, 0x6, 0x2, 0x100, 0x4}, {0x45, 0x5, 0x3, 0xffffffff, 0x7, 0x7}, {0x2, 0x7, 0x62, 0x3, 0x5, 0x4}, {0x10000, 0x8, 0x9, 0x0, 0x8, 0x7}, {0x0, 0x0, 0x8, 0x0, 0x8, 0x5}, {0x72, 0x5, 0x5, 0xffff, 0x1000, 0x8}, {0x6, 0x9, 0x3, 0x1521, 0x8, 0x5}, {0x365, 0x7fff, 0x3, 0x4, 0x9, 0xa}, {0x7, 0x9, 0x19, 0x10000, 0x57, 0x9}, {0x67a, 0x1, 0x4, 0x8, 0x2, 0x598d}, {0x2, 0x4, 0x4, 0x5, 0x9, 0x9}, {0x3, 0x8, 0x5, 0x4, 0xa7b1, 0x401}, {0xac, 0x7fff, 0x1ff, 0x8, 0x1, 0x4}, {0x3, 0x4, 0x0, 0xfffffffc, 0x2d6c, 0x3ff}, {0x0, 0x0, 0x4, 0x1, 0x10, 0x7}, {0x6, 0x5, 0x6, 0x1, 0x9, 0xc8}, {0x5, 0x5, 0x6, 0x32fb5b61, 0x0, 0x100}, {0x0, 0x4, 0x4, 0x1, 0x5df, 0x2}, {0x8, 0x2, 0x1, 0x6, 0xd733, 0x8}, {0x4, 0x1, 0x5, 0x5, 0x6, 0x7}, {0x6, 0x9, 0xfffffff9, 0xfffffffb, 0x3, 0xde}, {0x8, 0x8, 0x10, 0x1000, 0x9, 0xc0}, {0x10, 0x4, 0x7, 0x805e, 0x8, 0x6c}, {0x7fff, 0x8, 0x3, 0x6, 0x2, 0x367f}, {0x0, 0x7, 0x5, 0x3ff, 0x8}, {0x6e, 0x1, 0x200, 0x3, 0x0, 0x9ac}, {0x368, 0x7, 0x1, 0xfffffffd, 0x320}, {0x101, 0xf, 0x1a, 0x5, 0x8001, 0x5f1a0e5f}, {0x8b5, 0xe, 0x6, 0x5, 0x6, 0x80d}, {0x3, 0xfffffffd, 0x9ef1, 0x7, 0x4, 0x2}, {0x0, 0x5, 0x0, 0xa, 0x9, 0x5}, {0x10, 0x10000, 0x9, 0x7, 0x4, 0x6}, {0x401, 0x7b3, 0x3, 0x1, 0x2, 0x4}, {0x7, 0x7fff, 0x1, 0xffffffec, 0xb4, 0x401}, {0xe, 0xb, 0xffffffff, 0x0, 0x9, 0x6}, {0x0, 0x7, 0x3ff, 0x8, 0x0, 0x2}, {0x2, 0x2, 0x7ff, 0x3, 0x0, 0x6cb98}, {0x1000, 0xd, 0x3, 0x6, 0x8, 0x9}, {0x7, 0x8, 0xb, 0x0, 0x1, 0x603}, {0xffffa40b, 0x1af3ac6f, 0x9, 0x7, 0x9, 0x1}, {0x400, 0x5, 0x6, 0xfffffff9, 0x56, 0x270}, {0x4, 0x8, 0x9, 0x5, 0xa8b, 0x1}, {0x8001, 0x1, 0x9, 0x7, 0x3b}, {0x9, 0x9, 0xf, 0x6, 0x4e1, 0x73}, {0x8, 0x0, 0x8, 0x2, 0xfffffffc, 0x7}, {0x1, 0x2, 0x2, 0x4, 0x6, 0x4}, {0x6, 0x1, 0xfffffffe, 0x0, 0x6, 0x6}, {0x8001, 0x5, 0x1, 0xa, 0x6, 0x5}, {0xa0, 0x30, 0x5, 0x7, 0x10001, 0xff}, {0x7fffffff, 0x2, 0x5, 0x10000, 0x1, 0x5}, {0x9, 0x2, 0x2, 0xf, 0x4, 0xc}, {0x8, 0xf8, 0x100, 0x2, 0x7, 0xffffffff}, {0xf, 0x9, 0x6, 0x9, 0x2, 0x5}, {0x1, 0x3, 0xffffffff, 0x8, 0xfff}, {0xb, 0x0, 0x3, 0xfffffff9, 0x3534, 0x80}, {0x5, 0x8, 0x8, 0x8, 0x80000001}, {0xed, 0x4, 0xa, 0x8, 0x1382, 0x1}, {0x3, 0x4, 0x7f, 0x3, 0x800, 0x1}, {0xfffffe01, 0xfffffff7, 0x1, 0x4, 0x8, 0x100}, {0x100, 0x1, 0xa, 0x9, 0x5, 0xf1}, {0x78, 0xdef, 0x3, 0x6, 0x1, 0x2}, {0x8, 0xffffffc0, 0x5, 0x6, 0x6, 0xe6}, {0xfffffff1, 0x16, 0x3, 0x4, 0xfffffffb, 0x1980387a}, {0x6d7, 0x0, 0x7, 0x274d, 0xfffffc00, 0xf9}, {0x10, 0x0, 0x7fff, 0xfffffffb, 0x7, 0x6}, {0x4, 0x7, 0x900000, 0x994a, 0x9, 0x464}, {0x6, 0xfff, 0x3, 0x0, 0x6, 0x9}, {0x39e, 0x5, 0xe7, 0xb3d, 0x6, 0x8}, {0x5385, 0x7ff, 0x9, 0x2a57, 0x2, 0x10000}, {0x7, 0x10001, 0xff, 0xffffffff, 0x9, 0x77}, {0xde90, 0x2, 0x27, 0x7, 0x7, 0x32}, {0x8001, 0x0, 0x101, 0x3ff, 0xce3, 0x6}, {0x1ff, 0x5, 0xae, 0x0, 0xfff}, {0x10001, 0x7ff, 0x8, 0xfffffff7, 0x200, 0x80000000}, {0x3ff, 0x7ff, 0x5, 0x6, 0xa, 0x8000}, {0xc8, 0x8, 0xd27, 0x5, 0x2, 0x8}, {0x72, 0x9, 0x6, 0xe, 0x2, 0x9}, {0x3, 0x6, 0x9, 0x1, 0xffffffff, 0x4}, {0x48, 0x9, 0x6, 0x1800, 0xfff, 0x2}, {0x6, 0x6, 0x8, 0x3, 0x8000000, 0x2000000}, {0x9, 0x1, 0x3, 0x2, 0x0, 0xfffffffc}, {0x47, 0x7, 0x2d, 0x5, 0x3, 0x7}, {0x2, 0x5, 0x8001, 0x0, 0x180, 0x6}, {0x7, 0xffffffff, 0x1, 0x6a29a286, 0x4, 0x7}, {0x6, 0x0, 0xffffffcd, 0x101, 0x45, 0x7fff}, {0x4, 0x5, 0x7, 0x5, 0x1000, 0xdcd}, {0x5, 0xffffffff, 0x50d, 0x3, 0x2, 0x14}, {0x5, 0xc, 0x200, 0x7, 0x200, 0x9}, {0x7f, 0x9, 0xf, 0x0, 0x3, 0x7fffffff}, {0x0, 0xfff, 0x6, 0x5, 0x3, 0xe}, {0xc, 0x1, 0x1, 0x576, 0x28, 0x4}, {0xf, 0xffffffff, 0x5, 0x9, 0x1, 0x5}, {0x0, 0xdb6, 0x0, 0x1, 0x80, 0x25fa}, {0x2, 0x880, 0xe, 0xd, 0x4, 0xec4d}, {0x9, 0xfff, 0x3ff, 0x2c1, 0xe, 0x9}, {0xbfa, 0x8, 0x0, 0x8001, 0x3, 0x5}, {0x2, 0x7d, 0x80000000, 0xe353, 0x2, 0xecb0}, {0xfffffffe, 0xfffffffd, 0x3, 0xfffffff8, 0x5, 0x3}, {0x2, 0x7, 0x1b1, 0x80, 0x3, 0xb}, {0x5, 0x47bd, 0x3, 0x4, 0x6, 0x4}, {0xff, 0x0, 0x3, 0x6, 0xffffff62, 0x80000}, {0xf41, 0x6, 0x2, 0x3ff, 0xe1d, 0x84}, {0x6, 0x80000000, 0x4c, 0x9, 0x0, 0x3}, {0x5, 0xffffff89, 0xe26, 0x2, 0xf, 0x800}, {0x3ff, 0xb1, 0x7c, 0x0, 0x81f}, {0x0, 0x0, 0x7ff, 0x427, 0x7f, 0x8}, {0x401, 0x2, 0x4f, 0x3, 0xe374, 0x8}, {0xf592, 0x2, 0xc, 0x6, 0x7, 0xfffffffe}, {0x3, 0x400, 0x400, 0x8c2, 0x3, 0x5}, {0x6, 0x101, 0x8, 0x8, 0x1, 0x2}, {0x2, 0x7, 0x8, 0x7fffffff, 0xffffffff, 0x3}, {0x4b15, 0x0, 0x400, 0x6, 0x4971, 0x5}, {0x0, 0x80000001, 0x4, 0x3, 0x5, 0xfffff001}, {0x2fa, 0x10001, 0x0, 0x0, 0xf, 0x7}, {0x8, 0x66e, 0x2, 0x3, 0x7a}, {0x200, 0x72, 0xfffffffb, 0x350, 0x9, 0x9}, {0x4, 0x8, 0x4, 0xf0e0, 0x10, 0x2}], [{0x1}, {0x1, 0x1}, {0x5, 0x1}, {0x4}, {0x1}, {}, {0x3, 0x1}, {0x0, 0x1}, {0x1, 0x1}, {0x0, 0x2}, {}, {0x5}, {0x4}, {0x4, 0x1}, {}, {0x2, 0x1}, {0x1, 0x1}, {0x4}, {0x3}, {0x3, 0x1}, {0x4}, {0x4}, {0x0, 0x1}, {0x2}, {0x0, 0x1}, {0x3}, {0x0, 0x1}, {0x1, 0x1}, {}, {0x5, 0x1}, {0x3}, {0x0, 0x1}, {0x3}, {0x1}, {0x5}, {0x0, 0x1}, {0x3, 0x1}, {0x3}, {0x3, 0x1}, {0x5}, {0x5}, {0x0, 0x1}, {0x3}, {0x4}, {0x2}, {0x0, 0x1}, {0x5}, {0x1, 0x1}, {0x5}, {0x4, 0x1}, {0x4, 0x1}, {0x5}, {}, {0x3, 0x1}, {0x0, 0x1}, {0x5}, {0x2, 0xde31d5f5de396f27}, {0x1}, {0x3}, {0x4, 0x1}, {0x3, 0x1}, {0x2, 0x2}, {0x3}, {0x2, 0x1}, {0x1}, {0x3, 0x1}, {0x5, 0x1}, {0x4, 0x1}, {0x1}, {}, {0x3, 0x1}, {0x5, 0x1}, {0x5, 0x1}, {0x1, 0x1}, {0x1, 0x1}, {0x2, 0x1}, {0x1}, {0x0, 0x1}, {0x5, 0x1}, {0x3}, {0x4}, {0x2}, {0x4, 0x1}, {}, {0x2}, {0x1}, {0x4, 0x1}, {0x1, 0x1}, {}, {0x2}, {0x5}, {}, {0x1, 0x1}, {0x1}, {0x5}, {0x0, 0x1}, {}, {0x4, 0x1}, {0x0, 0x1}, {0x1}, {0x4}, {0x2}, {0x4, 0x1}, {0x5}, {0x1}, {0x3, 0x1}, {0x5, 0x1}, {0x2}, {0x4, 0x1}, {0x3}, {0x5, 0x1}, {0x1, 0x1}, {0x1, 0x1}, {0x2}, {0x3, 0x1}, {0x2, 0x1}, {0x3, 0x1}, {0x2}, {0x4}, {}, {0x5}, {0x1, 0x1}, {0x3}, {0x5, 0x1}, {0x3, 0x1}, {0x4}, {0x3, 0x1}, {0x0, 0x1}], 0x1}}, @TCA_PEDIT_KEYS_EX={0x104, 0x5, 0x0, 0x1, [{0xc, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}]}, {0xc, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x2}]}, {0x4c, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x3}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x2}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_HTYPE={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x2}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x1}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x2}, @TCA_PEDIT_KEY_EX_HTYPE={0x6}]}, {0x1c, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x1}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x2}]}, {0x2c, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_CMD={0x6}]}, {0xc, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6}]}, {0x1c, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x5}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x3}]}, {0x2c, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x3}]}]}, @TCA_PEDIT_PARMS={0xe38, 0x2, {{{0x101, 0x48e, 0x8, 0x9, 0x4}, 0x10, 0x7f, [{0x7, 0x7fffffff, 0x8000, 0x3, 0x0, 0x9}]}, [{0x36, 0x8, 0xc, 0x9, 0x3}, {0x3ff, 0x8000, 0x4, 0x4, 0x0, 0x2}, {0x8, 0x1, 0x10000, 0xfffffff8, 0x1, 0x80}, {0x80000000, 0x2, 0x96f, 0x1, 0x0, 0x1}, {0x3, 0x40, 0x80000001, 0x2, 0x3, 0x2}, {0xffffffff, 0x4, 0x5, 0x2, 0x800}, {0x4, 0x5fbfd9d0, 0x4, 0x906, 0xa23b, 0x2}, {0x0, 0x0, 0x4, 0x4, 0x100, 0xc13}, {0xffffffff, 0x5ff, 0x8, 0x0, 0x5, 0x6}, {0x9, 0x401, 0x839, 0xfff, 0x1cf, 0x404}, {0x401, 0x5, 0x9, 0x1, 0x876, 0x401}, {0x7, 0x69c7e4f6, 0x78489026, 0xfffffff9, 0x7fffffff, 0x6}, {0xffffffff, 0x29b4, 0x1, 0x6, 0x9, 0xffffff78}, {0xea, 0x9, 0x8, 0x81, 0x5, 0x5c000000}, {0x1ff, 0x3, 0x80000001, 0x9, 0x5, 0x3}, {0x1, 0x9, 0x8, 0x7, 0xffffeb52, 0x2}, {0x7800, 0x8001, 0x5, 0x7f, 0x200, 0xc}, {0x7, 0x1, 0x81, 0xbe6, 0x8, 0x8}, {0x2, 0x8, 0xd, 0x9, 0x80000001, 0x9}, {0x4, 0x100, 0x8, 0x2, 0x80000000, 0x5}, {0x480000, 0x4, 0x4, 0x8, 0x5, 0xf}, {0xc, 0x400, 0x5, 0x1e, 0x8, 0x3}, {0x7, 0x2, 0x2, 0x2, 0x1, 0xfffffffd}, {0x4, 0x6, 0x3, 0x10000, 0x7, 0x7}, {0x80000001, 0x4, 0x9, 0x3, 0x3, 0x2ad}, {0xb3, 0x5, 0x74, 0x4, 0x0, 0x8}, {0x1, 0x80000001, 0xff, 0xd, 0x9, 0x10000}, {0x4, 0x4, 0x24, 0x6, 0x8001, 0x9}, {0x3, 0x47f, 0x0, 0x6, 0xfff, 0x800}, {0x4, 0x40, 0x2, 0x692, 0x9, 0x4}, {0x3, 0x5, 0x6, 0x3, 0x2, 0x5562c278}, {0x9, 0x9, 0x2, 0x9c5, 0x4, 0x3}, {0x3, 0x1000, 0x0, 0x2, 0x3a, 0x67a2}, {0x1, 0x80000000, 0x4, 0x1684, 0x9, 0x100}, {0x8000, 0x3, 0x1, 0x2, 0x0, 0xf}, {0x3, 0x101, 0x7, 0x5, 0x9, 0x3}, {0xfffffff6, 0x0, 0x80, 0x5b44, 0x0, 0xfffffffc}, {0x5, 0x0, 0x1, 0x1, 0x2, 0xa3c}, {0x10001, 0xe, 0x10, 0x3, 0x7, 0x8}, {0x400, 0x0, 0x3, 0x81, 0x3, 0x9}, {0x9, 0x4, 0x0, 0x8000, 0x5, 0x16f}, {0x2, 0x6, 0x8, 0x0, 0x8001, 0xfffeffff}, {0x7fff, 0x0, 0x6, 0x1, 0x7}, {0x1, 0xdc36, 0x3, 0x954, 0x1, 0x9}, {0x4, 0x9, 0x80000001, 0x10000, 0x2, 0x5}, {0x3, 0x7, 0x9, 0x9, 0x1, 0x94b}, {0x6, 0x3b132e4d, 0xffffff21, 0xffffffff, 0x7, 0x8}, {0x8, 0x1, 0x5, 0xd0, 0x5, 0x1}, {0x200, 0x4, 0x5, 0x86, 0x3, 0x1}, {0x7, 0x7ff, 0x380, 0x7fff, 0x6, 0x800}, {0x7, 0x7, 0xc, 0x200, 0xd2d5, 0x2}, {0x9, 0x4, 0x347, 0xc, 0x5, 0x6}, {0x8, 0x2, 0x4, 0xffff, 0xc92d, 0x65a3506d}, {0x18, 0x5, 0x1, 0x0, 0x6, 0x5c}, {0x7, 0x279, 0x1, 0x9, 0xff, 0xfffffffe}, {0x3, 0x5, 0x9, 0x3, 0x7498, 0x594}, {0x23e, 0x6, 0x7, 0x7fffffff, 0x7fc000, 0xf4}, {0x8, 0x1280, 0x3, 0xfffffff7, 0xb}, {0x1, 0x800, 0x4, 0x8, 0xe, 0x3}, {0xa, 0x2, 0x1, 0x7fffffff, 0x9, 0x5}, {0x1, 0x236ccd41, 0x5559, 0x6, 0xb3fb, 0xfffffffa}, {0x654, 0xfffffff9, 0x0, 0x7, 0x1, 0x80}, {0x3, 0x4, 0xdf, 0xfffffff8, 0x7, 0x8001}, {0x6, 0x36, 0x7f, 0x4, 0x10001, 0x7}, {0x1, 0x5, 0x8, 0x9, 0x8, 0x2}, {0x7dd9, 0x1, 0x5, 0x80000000, 0x9, 0x3}, {0x3, 0x7ff, 0x4, 0x2, 0x80, 0x6}, {0x9, 0xfff, 0x100, 0xb, 0x7, 0x9}, {0x1c00, 0x7f, 0x4, 0x0, 0x0, 0x4b}, {0x0, 0x5, 0x9, 0x9, 0xe, 0x6}, {0xe, 0x4, 0x3, 0x0, 0x7, 0xb}, {0x0, 0x0, 0x5, 0x7ff, 0x7, 0x3}, {0x7, 0x3, 0x0, 0xcb, 0x4, 0xb}, {0x1821, 0x5, 0x7, 0x8, 0x58, 0x6}, {0x5, 0x7, 0x10000, 0x1, 0xcc, 0x7fff}, {0x2, 0x5, 0x3, 0xffff, 0x6, 0xa}, {0x5452df03, 0xea, 0x1, 0x7fffffff, 0x1, 0x2}, {0x6, 0x6, 0x7, 0x0, 0x1, 0x5}, {0x1, 0x7, 0x7, 0xfa, 0x2, 0x1}, {0x3, 0x9, 0x400, 0xa21, 0x1000, 0xfff}, {0x7e24, 0x5, 0x8001, 0xc0000000, 0x69, 0x4}, {0x8, 0x0, 0x5, 0x80, 0x6, 0x3}, {0xffffffff, 0x4, 0x80000000, 0xd0, 0x56, 0x5}, {0x58, 0x6e70, 0x2, 0x1, 0xd5, 0x8}, {0x1, 0x1c0, 0x4, 0x9c, 0x9, 0x7fff}, {0x7, 0x5, 0x2, 0x3, 0xfffffff9, 0x1881}, {0xfffffffc, 0x1, 0x2, 0xe57, 0x6, 0x400}, {0xf699, 0x3, 0x5, 0x1, 0x9a, 0x6}, {0x70000, 0x7, 0x2, 0x8, 0x3, 0x6}, {0x0, 0x1ff, 0x4, 0x1, 0x67, 0x3a08}, {0x6, 0x2, 0x9, 0x1000, 0xe, 0x8}, {0x5, 0x101, 0xc0, 0x7, 0xa2eb, 0xffff6f13}, {0x5, 0x2, 0x8, 0xfffffffe, 0x7944, 0x5}, {0x6, 0xffffffff, 0xe0de, 0x1, 0x5, 0x8}, {0x8, 0xc, 0x7, 0x7, 0x83, 0x8001}, {0x4, 0x270, 0xd, 0xf987, 0x2, 0x8}, {0x4, 0x0, 0x81, 0x5, 0x10, 0x881}, {0x6, 0x9, 0x2, 0x96, 0x100, 0x49}, {0x606c, 0x5b, 0x6, 0x222, 0xfffffffa}, {0x10001, 0x0, 0x2d, 0x5, 0x9, 0x398}, {0x4, 0xe53, 0x80, 0x4, 0x6, 0xd}, {0x7, 0x3, 0xa0, 0x2, 0x0, 0x81}, {0x10000, 0x3, 0x6, 0x8, 0x800, 0xfff}, {0x18355625, 0xd, 0xf911, 0x3, 0x9, 0x1}, {0x7, 0x1, 0x80000000, 0x7, 0x7, 0x2}, {0xe0000000, 0x836e4fd, 0x2, 0x0, 0x3, 0x6}, {0x19, 0xffffffff, 0x5d, 0x1, 0x6143}, {0x7f, 0x931e, 0x4, 0x6, 0x1, 0x3}, {0x7, 0xba85, 0x25, 0xe, 0xffffffff, 0x6}, {0x9, 0x3, 0xe7, 0x6, 0x53ac, 0x5}, {0x7fffffff, 0x2, 0x10001, 0x800, 0x80000001, 0x8}, {0x6, 0x0, 0x2, 0x81, 0x1, 0x200}, {0x6, 0x6, 0x8, 0x1, 0x8}, {0xfff, 0x0, 0x9, 0x10, 0x8, 0xba}, {0x2, 0x6, 0x5, 0x4, 0x1000000, 0xffff36ae}, {0x9, 0x7, 0x4ef7, 0xfffffff8, 0x5, 0x2}, {0x7, 0x7, 0x6, 0xfffffff8, 0x3, 0x7fffffff}, {0x1000000, 0x4, 0x9, 0x3, 0x2, 0x9}, {0x3, 0x0, 0x7, 0xffffffad, 0x5, 0x9}, {0x8, 0x3, 0x5, 0x5, 0xf, 0x8}, {0x86, 0x5, 0x6, 0x401, 0x0, 0x6}, {0x9, 0xfff, 0xffffffff, 0x0, 0x3, 0xfffffe00}, {0x4, 0xfffff777, 0x31ac, 0x9, 0x2, 0x7fff}, {0x4, 0x1, 0x16ce4aef, 0x3, 0x6, 0xa28}, {0x3, 0x288, 0x7fffffff, 0x2, 0x30, 0x7}, {0xffffff2e, 0x2, 0x4000, 0xffffff01, 0xfffffffa, 0x8}, {0x8, 0x9b7, 0x4, 0x8, 0x2, 0x200}, {0x343, 0xd, 0x9, 0x2, 0x6, 0x6}], [{}, {0x4, 0x1}, {0x5, 0x1}, {0x3}, {0x2, 0x1}, {0x4, 0x1}, {0x4, 0x1}, {0x4}, {0x0, 0x1}, {0x4, 0x1}, {0x5, 0x1}, {}, {0x1}, {0x4}, {0x0, 0x1}, {0x1}, {0x2}, {0x5, 0x1}, {0x1}, {0x4}, {0x3}, {0x4}, {0x3, 0x1}, {0x5}, {0x2}, {0x2}, {0x4}, {0x5}, {0x1, 0x1}, {0x5, 0x1}, {0x5}, {0x3}, {0x2, 0x1}, {0x4, 0x1}, {0x1}, {0x0, 0x1}, {}, {0x3}, {0x2}, {0x5}, {0x2, 0x1}, {0x4, 0x1}, {}, {0x4}, {0x4, 0x1}, {0x4, 0x1}, {}, {}, {0x1, 0x1}, {0x5}, {}, {0x3}, {0x4}, {0x3}, {0x3}, {0x1, 0x1}, {0x3}, {0x2}, {}, {0x5}, {0x2}, {0x4, 0x1}, {0x3}, {0x0, 0x1}, {0x1, 0x1}, {0x2}, {0x3, 0x1}, {0x2, 0x1}, {0x4, 0x1}, {0x5, 0x1}, {}, {0x1}, {0x2}, {0x5, 0x1}, {0x1, 0x2}, {}, {0x3, 0x1}, {0x1, 0x1}, {0x5, 0x1}, {0x3}, {0x0, 0x1}, {0x4}, {0x5, 0x1}, {0x5, 0x1}, {0x2}, {0x4, 0x1}, {0x4}, {0x4}, {0x4, 0x1}, {0x4}, {0x4}, {0x1}, {0x2, 0x1}, {0x1}, {}, {0x5, 0x1}, {0x2}, {0x4, 0x1}, {0x0, 0x1}, {0x1}, {0x6}, {0x4, 0x1}, {}, {0x0, 0x1}, {0x0, 0x1}, {0x5}, {0x2, 0x1}, {0x2, 0x1}, {0x5}, {0x3, 0x1}, {0x1}, {0x1}, {0x1}, {0x5, 0x1}, {0x1, 0x1}, {0x1}, {0x5}, {0x3, 0x1}, {0x3, 0x1}, {0x3, 0x1}, {0x0, 0x1}, {0x3}, {0x2, 0x1}, {0x4, 0x1}, {0x2, 0x1f65a9c608c560b8}, {0x4}, {0x5, 0x1}, {0x2, 0x1}]}}]}, {0x49, 0x6, "6ac5ebbea4d2f912622d729ddf751c50a6c8ca375dffb955bbb9428ed6dddc1562b760f8504aa3091a56696bb9de5936288204d4162595c34c3b117e47669c0a0efd70033e"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x2}}}}, @m_skbmod={0xf0, 0x1c, 0x0, 0x0, {{0xb}, {0x34, 0x2, 0x0, 0x1, [@TCA_SKBMOD_SMAC={0xa, 0x4, @remote}, @TCA_SKBMOD_PARMS={0x24, 0x2, {{0x4, 0x6, 0x8, 0x80000000, 0xfffffffd}, 0x2}}]}, {0x93, 0x6, "2a0a419f772c26dce23b8ba7dfafa5672efa1964dad1c56315d98eb5d9d1d55ddb54efd0718ec03f98c8f82167e5a27c8e11159cf0ee6508066f16dd52ef0ac260e792c98b646720aed691e9584c6ee063eab4794dd0e03e690bca76157c18e9080ef2f0dad58824abd8eb5dbcefe5893202e47096766448692a41686330e8b81bfb8415847a91d288529487b01543"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x0, 0x3}}}}, @m_mirred={0xc8, 0x10, 0x0, 0x0, {{0xb}, {0x4}, {0x99, 0x6, "10e5bc4cf7374409e60f102de992c7213bd44beeea79704b583e970e251e6a95df98be2ca7e73cf307fecb2f2409c0cfae9bd63739a4e79e3245cf97eca8d68d60fa8df4b860f49f95746fc88680fc78dd915bc94e27e3137dafe130c4fc72b7802a6347241748974daf4b61716e6c787a57dd41db4211d336e549f70625561367fd39e40ae6152f7e46c2226123646680b4de969a"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x2, 0x1}}}}]}]}, 0x6180}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc9ffb}]}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2}, 0x10) add_key(&(0x7f0000000040)='ceph\x00', 0x0, &(0x7f00000000c0)="010001000000000000001000015b097ead85847817353d2dbad05dd5", 0x1c, 0xfffffffffffffffd) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000940), r7) sendmsg$IEEE802154_ASSOCIATE_REQ(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000002c0)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="01002dbd7000fbdbdf250100004006000a00020000008500110001000000050007000942e33b6ef5541814bad372"], 0x34}, 0x1, 0x0, 0x0, 0x4880}, 0x20040000) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000000)) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB], 0x50) socket$pppl2tp(0x18, 0x1, 0x1) 1.536132507s ago: executing program 0 (id=2129): r0 = syz_io_uring_setup(0x221d, &(0x7f0000000080)={0x0, 0xa3a3, 0x8, 0x3, 0x339}, &(0x7f0000000100), &(0x7f0000000140)) syz_io_uring_setup(0x10f, &(0x7f00000001c0)={0x0, 0x0, 0x1, 0x2, 0x311, 0x0, r0}, 0x0, 0x0) mprotect(&(0x7f0000000000/0x2000)=nil, 0x2000, 0xc) r1 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, 0x0, &(0x7f0000000180)) 1.395788799s ago: executing program 0 (id=2130): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000001811", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x400, 0x9, 0x1}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000004c0)={r0, &(0x7f0000000340), &(0x7f00000005c0)=""/155}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000980)='mm_page_free\x00', r1}, 0x10) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x6, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18020000000000000000000000000000850000001700000095"], &(0x7f00000005c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000000c0)={r4, r3, 0x25, 0x0, @void}, 0x10) syz_emit_ethernet(0xfdef, &(0x7f0000000540)=ANY=[], 0x0) 1.36909226s ago: executing program 0 (id=2131): socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000400)=0x14) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1a, &(0x7f0000000000)={0x0, 0x59, "e1541d6372b0c64de13172c1d961039e7410c2a2e02c1190f9d9bb7c649841f9049b6772c37accede19b39ac162d9f7223cedd2e44b62a75ba1ba37832176f9d627a8a83316639c31661cb2cf7fef3b35173b00ea7bf580e92"}, &(0x7f0000000100)=0x61) getsockopt$inet_sctp_SCTP_ASSOCINFO(r0, 0x84, 0x1, &(0x7f0000000240)={r1, 0x3, 0x1, 0x1, 0x9, 0x9}, &(0x7f00000002c0)=0x14) syz_io_uring_setup(0x497, &(0x7f0000000a40)={0x0, 0x465d, 0x8, 0x200002, 0x80014a}, &(0x7f00000000c0), &(0x7f0000000280)) r2 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x41100, 0x42, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xf, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000000000000000000000000001811", @ANYRES32=r6, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b700000000000000"], &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r7}, 0x2d) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x40000000, 0x0, 0x0}, 0x0) sendmmsg(0xffffffffffffffff, 0x0, 0xfffffffffffffefa, 0x0) r8 = inotify_init() r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="380000001800010028bd7000fcdbdf251d01020005000d00a0"], 0x38}, 0x1, 0x0, 0x0, 0xc1}, 0x4008000) creat(&(0x7f0000000100)='./file0\x00', 0xd931d3864d39dcca) inotify_add_watch(r8, &(0x7f0000000200)='./file0\x00', 0x400008bf) 1.200981613s ago: executing program 2 (id=2132): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) unshare(0x22020600) r1 = fsopen(&(0x7f0000000080)='autofs\x00', 0x0) socket$qrtr(0x2a, 0x2, 0x0) r2 = socket$qrtr(0x2a, 0x2, 0x0) connect$qrtr(r2, &(0x7f0000000040)={0x2a, 0x1, 0x4000}, 0xc) r3 = syz_io_uring_setup(0x6167, &(0x7f0000000380)={0x0, 0x5867, 0x10, 0x2, 0x2ba}, &(0x7f00000006c0)=0x0, &(0x7f00000001c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f00000002c0)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x4007, @fd_index=0x4, 0x0, &(0x7f0000000100)=[{&(0x7f0000001800)=""/216, 0xd8}], 0x1}) (async) syz_io_uring_submit(r4, r5, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x4007, @fd_index=0x4, 0x0, &(0x7f0000000100)=[{&(0x7f0000001800)=""/216, 0xd8}], 0x1}) io_uring_enter(r3, 0x120847c0, 0xb3b, 0x1, 0x0, 0x0) fsconfig$FSCONFIG_SET_FD(r1, 0x5, &(0x7f00000005c0)='fd', 0x0, r1) (async) fsconfig$FSCONFIG_SET_FD(r1, 0x5, &(0x7f00000005c0)='fd', 0x0, r1) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xf, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008586000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b70200000000000085000000a6000000b70000000000000095000000000000003ff92958d5029223b437f0757666e5ce758b757c33de730d621d36e4ca32852865ea5d0afa431595a1771d0fe31873d701a1ccc29e2471f064c37faf7df2ec25713b1375817193854c0731a45d21503bcaa0e1bef41d64fa31049e"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r6}, 0x10) socket(0x25, 0x1, 0x0) ptrace(0x4206, 0x0) (async) ptrace(0x4206, 0x0) sync() (async) sync() prctl$PR_SCHED_CORE(0x3e, 0x2, 0x0, 0x0, &(0x7f0000000000)) (async) prctl$PR_SCHED_CORE(0x3e, 0x2, 0x0, 0x0, &(0x7f0000000000)) syz_mount_image$vfat(&(0x7f0000000ec0), &(0x7f0000000180)='./file2\x00', 0x420c, &(0x7f0000003240)=ANY=[], 0x6, 0x360, &(0x7f0000000b00)="$eJzs3c1rO0UYwPEnaZImKW1yEEVBOtiLXpY2ehaDtCAELG0jtoKwbTcasiYlG6oRse3Jq3j3JHgovVnwUND+A71404sI3noRPFhBXdm3ZPPWl5g0/trvB0omM/PszmQn5dm0m718+/MPKiVLK+kNiSaVRERErkSyEpVAxH+MuuWEhB3KSzO///j8+mYx6VWolfzGyzml1Nz8dx9+kvK7nU3LRfbdy99yv148ffHs5T8b75ctVbZUtdZQutqu/dzQt01D7ZatiqbUqmnolqHKVcuoe+3f+Nsxa3t7TaVXd2fTe3XDspRebaqK0VSNmmrUm0p/Ty9XlaZpajYtuEnxeG1Nzw8ZvDPiwWBM6vW8PiUiqZ6W4vFEBgQAACaqO/+POin9MPn/lswVCstryunczv9PXjhvzLx1Oufn/2eJfvn/Kz952+rI/53TiXb+X/POD0o35/9fyh3y/96M6HEZOv/PjmEwGM58oqcq0vHMyf/T/vvXdfTOyaJbIP8HAAAAAAAAAAAAAAAAAAAAAOBJcGXbGdu2M8Fj8NO+hMB/jgdp0PGfFpGkc/Rtjv9Dtr65JUn3wj3nGJuf7Rf3i96j3+FcREwx/ra7OWsjuPJIObLyvXngxx/sF6fclnxJyk68LElGsu56CsXb9sobheUl5fHjW5cppcPxOcnIU+H4b93V6cTnOuP9/SfkxYVQvCYZ+WFHamLKrhvZ3v+nS0q9/mahKz7l9hORX+79oAAAAAAAMGKaaul7/q5pg9q9bxnJl9yPiQxZlIz81f/8frHv+Xks81xs0rMHAAAAAOBxsJofV3SJGnW3YJr9CikZ2DSCQqyjJi4ifTsnumri1215KjTD244nId4dTP7rvL4KXtW7RAX/SOEMvNXk31FFhhtPMH+3JhJrNf1513lFDsVdAIfhpqjcIjzWPfh5p0L17bwwcDtH/kRaNcHHRokBr7Os9m4nes1KiPfU2JHhFsAzX3z9x+jeIK+e+ivgo5s7H5mGfSC3OShdBWcXvU3xsf/iAQAAAHDv2kl/UPNauDl8I5HwzXL4yz0AAAAAAAAAAAAAAAAAAAAAAAAAAAAAACM0lq/06ypMeo4AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADA/8W/AQAA//9/d/Qh") (async) syz_mount_image$vfat(&(0x7f0000000ec0), &(0x7f0000000180)='./file2\x00', 0x420c, &(0x7f0000003240)=ANY=[], 0x6, 0x360, &(0x7f0000000b00)="$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") r7 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file2\x00', 0x105042, 0x40) write$cgroup_subtree(r7, &(0x7f0000000300)=ANY=[], 0x32600) (async) write$cgroup_subtree(r7, &(0x7f0000000300)=ANY=[], 0x32600) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) (async) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) ioctl$SIOCSIFHWADDR(r8, 0x8924, 0x0) (async) ioctl$SIOCSIFHWADDR(r8, 0x8924, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x18, 0x0, 0x0, 0x0}, 0x94) 678.05377ms ago: executing program 6 (id=2133): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0a000000020000000110000007"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0xfdef) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r1 = openat(0xffffffffffffff9c, 0x0, 0x42, 0x1ff) close(r1) bpf$PROG_LOAD(0x5, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x0, 0x0}) rseq(&(0x7f00000004c0), 0x20, 0xfffffffffffffffd, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_GET(r2, 0x0, 0x80) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x5) ioctl$USBDEVFS_FORBID_SUSPEND(r1, 0x5521) futex(&(0x7f000000cffc), 0x0, 0x0, 0x0, 0x0, 0x0) r4 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r4) ptrace$cont(0x20, r4, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x39, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000a40)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x24, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={0x0, r5, 0x0, 0x100000010000}, 0x18) r6 = socket(0x10, 0x3, 0x9) connect$netlink(r6, &(0x7f00000014c0)=@proc={0x10, 0x0, 0x25dfdbfc}, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f00000001c0)={&(0x7f0000000080), 0xc, &(0x7f0000000180)={&(0x7f0000000b00)=ANY=[@ANYBLOB="14000000100a00000a140000001100010000090000000300000200000a"], 0x28}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="200000006800e9780000000000"], 0x20}}, 0x0) r7 = socket$unix(0x1, 0x1, 0x0) socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000380)={'bond0\x00'}) 615.598281ms ago: executing program 4 (id=2134): socket$igmp(0x2, 0x3, 0x2) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='net/arp\x00') preadv(r0, &(0x7f0000000040)=[{&(0x7f0000000200)=""/233, 0xe9}], 0x1, 0xfff, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) r2 = bpf$PROG_LOAD(0x5, 0x0, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) uname(&(0x7f0000000000)=""/174) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000880)={r1, 0xe0, &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000580)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x1, 0x4, &(0x7f00000005c0)=[0x0], &(0x7f0000000600)=[0x0, 0x0, 0x0, 0x0], 0x0, 0x1c, &(0x7f0000000640)=[{}, {}], 0x10, 0x10, &(0x7f0000000680), &(0x7f00000006c0), 0x8, 0xa9, 0x8, 0x8, &(0x7f0000000740)}}, 0x10) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000900)={0x3, 0x0}, 0x8) r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000b40)={0x6, 0xa, &(0x7f0000000940)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0xbb7}, [@func={0x85, 0x0, 0x1, 0x0, 0x4}, @func={0x85, 0x0, 0x1, 0x0, 0x6}, @tail_call={{0x18, 0x2, 0x1, 0x0, r0}}]}, &(0x7f00000009c0)='syzkaller\x00', 0x9, 0x0, 0x0, 0x40f00, 0x24, '\x00', 0x0, 0x25, r1, 0x8, &(0x7f0000000a00)={0x8, 0x3}, 0x8, 0x10, &(0x7f0000000a40)={0x4, 0xa, 0x7, 0x5}, 0x10, 0x0, 0x0, 0x8, &(0x7f0000000a80)=[r1, r0], &(0x7f0000000ac0)=[{0x4, 0x1, 0x9, 0x7}, {0x4, 0x3, 0xd}, {0x2, 0x3, 0xe, 0x8}, {0x2, 0x2, 0x10, 0x1}, {0x0, 0x5, 0xa, 0x8}, {0x4, 0x4, 0xb, 0x6}, {0x4, 0x3, 0x6, 0x4}, {0x1, 0x1, 0x3, 0xa}], 0x10, 0x3}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000c80)={0xa, 0x2a, &(0x7f0000000380)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0xe9ba, 0x0, 0x0, 0x0, 0x3}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [@cb_func={0x18, 0x9, 0x4, 0x0, 0xfffffffffffffffa}, @tail_call={{0x18, 0x2, 0x1, 0x0, r1}}, @map_idx={0x18, 0x5, 0x5, 0x0, 0xf}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x3}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r1}}, @alu={0x4, 0x1, 0xc, 0xa, 0x8, 0x1, 0x1}, @map_fd={0x18, 0x1, 0x1, 0x0, r0}, @exit, @jmp={0x5, 0x1, 0x3, 0x6, 0x3, 0x4}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000180)='syzkaller\x00', 0x4, 0x0, 0x0, 0x40f00, 0x2, '\x00', r3, @fallback=0x25, r0, 0x8, 0x0, 0x0, 0x10, &(0x7f00000008c0)={0x2, 0x9, 0x4, 0xfa0}, 0x10, r4, r5, 0x3, &(0x7f0000000c00)=[r1, r0, r1, r1, r0], &(0x7f0000000c40)=[{0x2, 0x5, 0x0, 0x5}, {0x4, 0x4, 0xe, 0x6}, {0x2, 0x4, 0x7, 0xc}], 0x10, 0x56}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xc, &(0x7f00000000c0)=ANY=[@ANYBLOB, @ANYRES64=r1, @ANYRES64=r2, @ANYRES64=r1, @ANYRESDEC=r2, @ANYRES8=r1, @ANYRESHEX=r2], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000700)='signal_generate\x00', r6}, 0x10) r7 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r8 = openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x40b00, 0x88) faccessat(r8, &(0x7f0000000140)='./file1\x00', 0x14) arch_prctl$ARCH_GET_FS(0x1003, &(0x7f0000001c00)) r9 = syz_pidfd_open(r7, 0x0) sendmsg$TIPC_CMD_GET_LINKS(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000500)={0x0}, 0x1, 0x0, 0x0, 0x8040}, 0x0) pidfd_send_signal(r9, 0x2, 0x0, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x3938700}, {0x0, 0x9}}, 0x0) r10 = socket$key(0xf, 0x3, 0x2) mmap(&(0x7f0000910000/0x4000)=nil, 0x4000, 0x3, 0x4010, 0xffffffffffffffff, 0x0) sendmmsg(r10, &(0x7f0000000180), 0x3ef, 0x0) acct(&(0x7f0000000080)='./file1\x00') r11 = socket(0x848000000015, 0x805, 0x0) sendto$inet6(r11, 0x0, 0x0, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @broadcast}}, 0x1c) acct(0x0) munmap(&(0x7f00003fe000/0xc00000)=nil, 0xc00000) 600.919191ms ago: executing program 4 (id=2135): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x17, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18020000ffffffff00000000000000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000004000000850000007d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x0, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000181100"/20, @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001000036001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000002085000000"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020097b1af8ff00000000bfa100000000000007010000b8ffffffb702000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) get_mempolicy(&(0x7f00000001c0), &(0x7f0000000200), 0x80000001, &(0x7f0000ffd000/0x1000)=nil, 0x6) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000300)='fib_table_lookup\x00', r1}, 0x10) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x8, 0xff}, 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=@framed={{}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r2}, {}, {0x85, 0x0, 0x0, 0x1b}}]}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x18) r4 = syz_io_uring_setup(0x49a, &(0x7f0000000400)={0x0, 0x79af, 0x3180, 0x7fff, 0x40024e}, &(0x7f0000000340)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4) syz_io_uring_submit(r5, r6, &(0x7f00000002c0)=@IORING_OP_MSG_RING={0x28, 0x6, 0x0, r4, 0x0, 0x0, 0x0, 0x2}) io_uring_enter(r4, 0x627, 0x4c1, 0x43, 0x0, 0x0) shutdown(r0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f00000006c0)={0x0, 0x10, &(0x7f0000000000)=[@in={0x2, 0x4e23, @loopback}]}, &(0x7f0000000180)=0x10) r8 = socket$inet6_sctp(0xa, 0x0, 0x84) getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r8, 0x84, 0x76, &(0x7f0000000540)={r7, 0x7}, &(0x7f0000000580)=0x8) socket$nl_xfrm(0x10, 0x3, 0x6) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000500)={&(0x7f00000004c0)='xen_mc_extend_args\x00', r3, 0x0, 0xe}, 0x18) 417.090033ms ago: executing program 4 (id=2136): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x11, 0xb, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020782500000000002020207b1af8fe00000000bfa100000000000007010000f8ffffffb702000008000000b703000007000000850000001100000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r1}, 0x18) (async, rerun: 64) r2 = open(&(0x7f0000000740)='./bus\x00', 0x143c62, 0x0) (async, rerun: 64) mount(&(0x7f0000000100), &(0x7f0000000280)='./bus\x00', &(0x7f00000002c0)='9p\x00', 0x0, &(0x7f0000000300)='trans=rdma,') (async, rerun: 64) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x13, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000080000000000000000001801000020786c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000100000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (rerun: 64) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f00000005c0)='sys_enter\x00', r3}, 0x10) (async) utime(0x0, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={{0x14, 0x10, 0x1, 0x2}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x50, 0x9, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0x1}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_DESC={0xc, 0x9, 0x0, 0x1, [@NFTA_SET_DESC_SIZE={0x8, 0x1, 0x1, 0x0, 0x2080}]}, @NFTA_SET_POLICY={0x8, 0x8, 0x1, 0x0, 0x1}]}], {0x14, 0x10}}, 0x98}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) setsockopt$RXRPC_UPGRADEABLE_SERVICE(r2, 0x110, 0x5, &(0x7f0000000000)=[0x3, 0x3], 0x2) 339.551385ms ago: executing program 4 (id=2137): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) sched_setscheduler(0x0, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a5df850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$tipc(0x1e, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020097b1af8ff00000000bfa100000000000007010000b8ffffffb702000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='br_fdb_add\x00', r1}, 0x10) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'bridge0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="280000001c000100000000000000000007000000", @ANYRES32=r4, @ANYBLOB="4000aa000a0002"], 0x28}}, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000018c0)={&(0x7f00000017c0)=ANY=[@ANYBLOB="9feb010018000000000000005500000055000000080000000500000000000007000000000a0000000100000f010000000300000004000000ade40000500f0000000028bb0b0500000000000000000000030000000005000000010000000800000004000000000000090100000000000000612e00005f7f00"], &(0x7f0000001840)=""/115, 0x78, 0x73, 0x1, 0x9, 0x10000}, 0x28) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000500000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r6}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000000)={{r5}, &(0x7f0000000380), &(0x7f00000003c0)=r6}, 0x20) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000003c0)=@newtaction={0xe68, 0x30, 0x871a15abc695fa3d, 0x70bd27, 0x0, {}, [{0xe54, 0x1, [@m_pedit={0xe50, 0x1, 0x0, 0x0, {{0xa}, {0xe24, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS={0xe20, 0x2, {{{}, 0x93}, [{0x0, 0x0, 0x0, 0x0, 0xfffffffd}, {}, {0x1, 0x0, 0x0, 0x4000000, 0x7, 0x80000}, {0x8, 0x5, 0x0, 0xfffffffc, 0x5}, {}, {0x0, 0x0, 0x800000, 0x0, 0x6}, {0x0, 0xc3}, {0x0, 0x5}, {0x5}, {}, {0x0, 0x10}, {0x0, 0x4, 0x0, 0x8000000}, {0x0, 0x0, 0x0, 0x0, 0x800}, {0x2, 0x0, 0x0, 0x0, 0x6}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfff}, {0x0, 0x0, 0x0, 0x8000000}, {}, {0x0, 0x0, 0x0, 0x0, 0x20}, {}, {}, {0x0, 0x0, 0x0, 0xfffffffc}, {}, {}, {0x0, 0x7, 0x0, 0x0, 0xffffffff}, {0x0, 0x0, 0x0, 0x2, 0x0, 0x3}, {0x0, 0x0, 0x0, 0x0, 0x5}, {0xffffffff}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, {0xffffffff, 0x9}, {0x0, 0x0, 0x0, 0x0, 0xfffff800}, {}, {}, {0xffffffff}, {}, {}, {0x0, 0x9, 0x0, 0x0, 0x0, 0x2}, {}, {0x80}, {0x80}, {0x0, 0x0, 0x0, 0x5, 0x5}, {}, {0x0, 0x0, 0x8}, {0x0, 0x0, 0x0, 0x0, 0x9}, {0x0, 0x0, 0x0, 0x0, 0x3}, {}, {}, {0x0, 0x0, 0x0, 0x8510}, {0xffff}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, {}, {}, {0x0, 0xfffefffd}, {0x0, 0x0, 0x0, 0x1}, {}, {0x5}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x400003}, {0x0, 0xfffffffc, 0x200}, {}, {}, {0x7}, {}, {}, {}, {0x0, 0x101, 0x0, 0x0, 0x0, 0xffffffff}, {}, {}, {0x0, 0x0, 0x0, 0x4, 0x9}, {}, {0x0, 0x0, 0x0, 0x0, 0x1, 0x7}, {0x0, 0x2}, {0x0, 0x0, 0x0, 0x4f8}, {}, {0x0, 0x5}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x56}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x4}, {}, {}, {0x0, 0xfffffffd}, {0x6}, {0x7f, 0x0, 0x0, 0x4}, {}, {0x0, 0x0, 0x0, 0x0, 0xfffffffe}, {0x0, 0x2, 0x0, 0x0, 0x0, 0xfffffffe}, {}, {}, {0x2, 0x9, 0x20000000}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x292}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, {0x0, 0x0, 0xe600, 0x0, 0x0, 0x2}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x101}, {0x0, 0x5, 0x0, 0x7, 0x1}, {0x0, 0x5}, {0x0, 0x0, 0x0, 0x0, 0x80}, {0x10000000, 0x0, 0x0, 0x0, 0x4}, {}, {0x0, 0x0, 0x0, 0x0, 0xfffffffc}, {0x3}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff}, {}, {0x0, 0x0, 0x0, 0x8}, {}, {}, {}, {0xfffffffb, 0x0, 0x0, 0x0, 0x8000}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, {0x2d}, {}, {0x0, 0x8000}, {0x0, 0x0, 0x10000}, {0x0, 0x80000000, 0x0, 0x7fff800}, {}, {0x0, 0x0, 0x0, 0x0, 0xd}], [{}, {}, {}, {0x1}, {}, {0x3}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {0x0, 0x1}, {}, {}, {}, {0x4}, {0x3}, {}, {}, {}, {}, {}, {}, {}, {0x5}, {}, {0x4}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {0x4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {0x1}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {0x0, 0x1}, {}, {0x5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {0x1}, {}, {0x5}, {}, {}, {}, {}, {}, {}, {}, {0x2, 0x1}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {0x2}, {}, {}, {0x4}, {0x3}]}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xe68}}, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x3, r0}, 0x38) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2d, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r8, 0x0, 0x3}, 0x18) r9 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r9, &(0x7f0000000940)={0x0, 0x1400, &(0x7f0000000180)=[{&(0x7f00000001c0)="d80000001c0081064e81f782db44b9040a1d08040e00000000000aa1180002000600142603600e1208000f0000810401a8001605200001400200000803600cfab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a985162756aa5e8d7ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43", 0xd8}], 0x1, 0x0, 0x0, 0x7400}, 0x0) 329.401225ms ago: executing program 5 (id=2138): prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f0000002580)=ANY=[@ANYBLOB="18010000000800000000001ce10b75000000000070de2ffe8064a0652e95319415b3ae670000000095"], &(0x7f0000000100)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) add_key$keyring(&(0x7f0000000540), &(0x7f0000000180)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r1 = open(&(0x7f00000005c0)='./bus\x00', 0x64842, 0x0) r2 = socket$kcm(0x10, 0x2, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x37, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0xd}, 0x4c58, 0x10000, 0x0, 0x1, 0x8, 0x20002, 0xb, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) sendmsg$kcm(r2, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f00000001c0)="d8000000180081064e81f782db4cb904021d080006007c09e8fe55a10a0015000600142603600e1208000f0000000401a80016002000024006000200035c0461c1d60008000000000000fb8000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f0f49e119c849ea6e5a0fc55e4cde205a214d6102d6dcbf33fb5ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6cc", 0xd8}], 0x1}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'ipvlan0\x00', 0x0}) seccomp$SECCOMP_SET_MODE_FILTER(0x1, 0x1, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) sendmsg$ETHTOOL_MSG_DEBUG_SET(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000000fedbdf25080000001800028014000380100001800400030008000100050000000c00018008000100", @ANYRES32=r5], 0x38}, 0x1, 0x0, 0x0, 0x4000814}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000007c0)={0x6, 0x14, &(0x7f0000000480)=@framed={{0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x3042bb28}, [@map_idx={0x18, 0x7, 0x5, 0x0, 0x7}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r0}}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x9}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}, @map_idx={0x18, 0x1, 0x5, 0x0, 0xb}]}, &(0x7f0000000080)='GPL\x00', 0x7, 0x0, 0x0, 0x41000, 0x9, '\x00', r5, 0x25, 0xffffffffffffffff, 0x8, &(0x7f00000000c0)={0x8, 0x5}, 0x8, 0x10, &(0x7f0000000700)={0x2, 0x4, 0x5, 0x5}, 0x10, 0x0, 0x0, 0x4, &(0x7f0000000740)=[r1, r1], &(0x7f0000000780)=[{0x0, 0x2, 0xe, 0x7}, {0x0, 0x5, 0xa, 0x9}, {0x1, 0x2, 0xa, 0x2}, {0x3, 0x3, 0x5, 0x9}], 0x10, 0x462}, 0x94) bind$rds(0xffffffffffffffff, 0x0, 0x0) write$selinux_validatetrans(0xffffffffffffffff, 0x0, 0x72) setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f00000002c0)={{{@in6=@dev, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x2}, {0x8000000000000000, 0x0, 0x0, 0x2, 0x6167}, {0x0, 0x0, 0x200, 0xf}, 0x0, 0x0, 0x1}, {{@in=@empty, 0x0, 0x33}, 0x0, @in=@loopback, 0x0, 0x0, 0x0, 0xb7, 0xffffffff, 0x0, 0x418ace6b}}, 0xe8) unlink(&(0x7f0000000180)='./file1\x00') 249.040316ms ago: executing program 4 (id=2139): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$gtp(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$GTP_CMD_NEWPDP(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000200)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010027bd7000fedbdf25000000000800020000000000"], 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x4000000) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB="09000000030000000800000004"], 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000003000000000000000000000018110000", @ANYRES32=r2, @ANYRESOCT=r1], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kfree\x00', r3}, 0x18) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0c00000004000000040000001500000000000000", @ANYRES32=r4], 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000024c0), &(0x7f0000001280), 0x2, r5}, 0x38) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000001c6a000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a64000000060a09040000000000000000020000000900010073797a30000000000900020073797a320000000038000480340001800c000100706108006f616400240002800800044000000000080002400000000208000340000000000800014000000016140000001100010000000000000000000700000a"], 0x8c}}, 0x2000c000) prctl$PR_SET_SECCOMP(0x16, 0x0, &(0x7f0000000740)={0xa, &(0x7f00000006c0)=[{0x8, 0x58, 0x7, 0x5}, {0x0, 0x1, 0x2, 0x6}, {0x3, 0x7, 0x5, 0xaa4}, {0x1ff, 0x9, 0x4, 0x60000000}, {0x6, 0x0, 0x1a, 0x800}, {0x81, 0xf, 0x3, 0x1}, {0x7, 0x6, 0x7, 0x6}, {0x200, 0x1, 0x4, 0x8}, {0x2f, 0xb, 0x9, 0x60000000}, {0xa, 0x1f, 0x5}]}) r7 = open_tree(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x800) setresuid(0x0, 0xee00, 0x0) syz_usbip_server_init(0x5) sendmsg$NL80211_CMD_RELOAD_REGDB(r7, &(0x7f0000000640)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000580)={&(0x7f0000000300)={0x14, 0x0, 0x400, 0x70bd2d, 0x25dfdbfd, {}, ["", "", "", "", "", ""]}, 0x14}}, 0x4000044) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x42}, 0x90) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x7, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r9}, 0x10) r10 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r10, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) sendto$inet6(r10, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) r11 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r12 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000002e80)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r11, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000095"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f00000005c0)='sys_enter\x00', r12}, 0x18) r13 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r13}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x18, 0x13, &(0x7f0000000500)=ANY=[@ANYRESOCT=r11, @ANYRES32, @ANYBLOB="180800001bc81a000000000002000001851000000600000018000000", @ANYRESDEC=r12, @ANYRES64=r13], &(0x7f0000000000)='GPL\x00', 0x3}, 0x94) 150.650727ms ago: executing program 0 (id=2140): socket$nl_route(0x10, 0x3, 0x0) (async) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000180), r0) sendmsg$NLBL_CIPSOV4_C_ADD(r0, &(0x7f0000001740)={0x0, 0x0, &(0x7f0000001700)={&(0x7f0000000600)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100000000000000000001000000080002000100000008000100000000000400088034000480050003000000000005000300000000000500030000000000050003000000000005000300000000000500030000000000"], 0x5c}, 0x1, 0x0, 0x0, 0x4000000}, 0x4008010) (async) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000380), 0x40241, 0x0) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000540)=ANY=[@ANYBLOB="02070005020000002dbd7000fedbdf25e99cef370b3231b1d15418813003944a332e29d6b0f5c281013adb5be5709bc50a5ad07c690d2c8684b75f873c3c6eaf13fb5b5ef5b4dfa746ff44176ee6721b33350a2a2d88d61c1a4e861e6bf6f252cdec8ad08094881d675e164391160b4909427c524d435a4c2a629bc397bfb0d2734a2963d560fe7a328abf5754363aafaf3f7721363a9dc2b599e8e0bf917eb1fe16822aff3992b8af67535f7601800000e0"], 0x10}}, 0x4) (async) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, 0x0, &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffff000}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r4}, 0x10) r5 = open$dir(&(0x7f00000000c0)='./file1\x00', 0x402001, 0x78) r6 = openat(r5, &(0x7f0000000040)='./file1\x00', 0x143142, 0x40) pwritev2(r6, &(0x7f0000000100)=[{&(0x7f0000000080)="ff", 0xabfb}], 0x1, 0x5405, 0x0, 0x0) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r6, 0x8983, &(0x7f0000000000)={0x0, 'batadv0\x00', {0x1}, 0x563}) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000001b80)=ANY=[@ANYBLOB="0600000004000000080000000a"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000b2e900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x94) (async) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r6, 0x89f1, &(0x7f0000000280)={'syztnl2\x00', &(0x7f0000000980)={'erspan0\x00', 0x0, 0x700, 0x8, 0x90a, 0x19800000, {{0x10, 0x4, 0x3, 0x36, 0x40, 0x65, 0x0, 0x0, 0x2f, 0x0, @dev={0xac, 0x14, 0x14, 0x36}, @loopback, {[@end, @noop, @ra={0x94, 0x4, 0x1}, @timestamp={0x44, 0x8, 0xcd, 0x0, 0x6, [0x4]}, @timestamp_addr={0x44, 0x1c, 0x94, 0x1, 0x4, [{@remote, 0xff}, {@private=0xa010102, 0x92}, {@empty, 0x1}]}]}}}}}) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000500)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r8, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r6, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x94) (async) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r6, 0xc018937c, &(0x7f00000003c0)={{0x1, 0x1, 0x18, r6, {0x8fce235682f67884}}, './file1\x00'}) r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000802000021"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f00000008c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r10, @ANYBLOB="6600000000000000b703000000000000850000e920b76300b7000000000001000100a2169634085c126fcbf20169a69f75c24314f5d72098a23d60c618295c0685ed1b14ee936de3f89765f735ec68b4e5f8b326542cb50b652eabd455e63bf41679c9b2443cb354e9028cf131861336900d8703e339b998012faaf1b670948b1ccf9888a20074cbfb7a000000000000"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r11 = syz_open_dev$tty1(0xc, 0x4, 0x3) ioctl$KDFONTOP_SET(r11, 0x4b72, &(0x7f0000000080)={0x0, 0x3000000, 0x8, 0x1b, 0x100, &(0x7f00000000c0)="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"}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f00000002c0)='kfree\x00', r9, 0x0, 0x34f}, 0x18) r12 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r12, &(0x7f0000005c40)={0x0, 0x0, &(0x7f0000000880)={&(0x7f0000000000)=@newtaction={0xa0, 0x30, 0x9, 0x1000000, 0x0, {}, [{0x8c, 0x1, [@m_bpf={0x88, 0x1, 0x0, 0x0, {{0x8}, {0x60, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_OPS_LEN={0x6, 0x3, 0x7}, @TCA_ACT_BPF_OPS={0x3c, 0x4, [{}, {0x39, 0x0, 0x5}, {0xfffe}, {0x0, 0x1, 0x0, 0xfffffffc}, {}, {}, {}]}, @TCA_ACT_BPF_PARMS={0x18, 0x2, {0x0, 0x0, 0x0, 0x7c}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa0}, 0x1, 0x0, 0x0, 0xf0}, 0x0) (async) r13 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000480)=ANY=[@ANYBLOB="18060000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000003000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f0000000080)='sys_enter\x00', r13}, 0x10) (async) removexattr(0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) 150.113247ms ago: executing program 5 (id=2141): bpf$MAP_CREATE(0x0, &(0x7f0000001700)=ANY=[@ANYBLOB="160000000000000061b1000002"], 0x48) (async) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001700)=ANY=[@ANYBLOB="160000000000000061b1000002"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r0}, 0x0, &(0x7f0000000040)}, 0x20) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)=@ipv4_newroute={0x3c, 0x18, 0x100, 0x70bd26, 0x25dfdbfc, {0x2, 0x80, 0x10, 0x8, 0xfc, 0x4, 0xfd, 0x8, 0x1000}, [@RTA_DST={0x8, 0x1, @remote}, @RTA_PREFSRC={0x8, 0x7, @empty}, @RTA_GATEWAY={0x8, 0x5, @private=0xa010101}, @RTA_FLOW={0x8, 0xb, 0xc}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000000}, 0x60008091) bpf$MAP_LOOKUP_ELEM(0x15, &(0x7f0000000200)={r0, 0x0, &(0x7f0000002740)=""/4078}, 0x20) 55.793359ms ago: executing program 5 (id=2142): r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x107042, 0x0) openat(0xffffffffffffff9c, 0x0, 0x187842, 0x167) r1 = memfd_secret(0x0) write$P9_RLINK(r1, &(0x7f0000000040)={0x7, 0x47, 0x2}, 0x7) bind$bt_hci(r0, 0x0, 0x0) io_uring_setup(0xad5, &(0x7f0000000100)={0x0, 0x9371}) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x5, 0xb, 0x0, &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x8946, &(0x7f0000000400)='{\x05T\x82\x89\x98Yi:') (fail_nth: 9) rseq(&(0x7f00000004c0), 0x20, 0x0, 0x0) r3 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000300)={r3, 0x18000000000002a0, 0x0, 0x0, &(0x7f0000000280), 0x0, 0x2, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) 54.836989ms ago: executing program 2 (id=2143): r0 = openat$selinux_load(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) r1 = openat$selinux_policy(0xffffff9c, &(0x7f0000000080), 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x12, r1, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000001740)=ANY=[], 0x48) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x0, 0x0}) r2 = syz_clone(0xa0000280, 0x0, 0x0, 0x0, 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, 0x0, 0x41, 0x0) ptrace$PTRACE_SECCOMP_GET_METADATA(0x420d, r2, 0x0, 0x0) r3 = socket$igmp6(0xa, 0x3, 0x2) r4 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000080)={'bond_slave_1\x00', 0x0}) ioctl$sock_inet6_SIOCADDRT(r3, 0x890b, &(0x7f00000005c0)={@dev={0xfe, 0x80, '\x00', 0x42}, @remote, @remote, 0x3, 0x2, 0xd, 0x400, 0xb7, 0xc20022, r5}) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000080000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000a3850000007000000095"], &(0x7f0000000080)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r6}, 0x10) r7 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r7, 0x84, 0x17, &(0x7f0000000380)=ANY=[@ANYBLOB], 0x9) setsockopt$inet_sctp6_SCTP_AUTH_DELETE_KEY(r7, 0x84, 0x19, &(0x7f0000000340)={0x0, 0x1}, 0x8) syz_emit_ethernet(0x5e, &(0x7f00000004c0)=ANY=[@ANYBLOB="aaaaaaaaaaaabbbbbbbbbbbb86dd603000bb00282b00fc020000000000000000000000000000fe8000000000000000000000000000aa"], 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000001800)={0x11, 0xc, 0x0, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$key(0xffffffffffffffff, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={0x0, 0x68}, 0x1, 0x7}, 0x0) write$selinux_load(r0, &(0x7f0000000000)=ANY=[], 0x2000) 0s ago: executing program 5 (id=2144): r0 = socket$tipc(0x1e, 0x5, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000d40)=ANY=[@ANYBLOB="180000000000e3ff000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001000000850000000e00000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f00000005c0)='sys_enter\x00', r2}, 0x10) bind$tipc(r0, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x41}}, 0x10) listen(r0, 0x0) r3 = socket$tipc(0x1e, 0x5, 0x0) sendmsg$tipc(r3, &(0x7f00000002c0)={&(0x7f0000000080)=@nameseq={0x1e, 0x2, 0x0, {0x41}}, 0x10, 0x0}, 0x0) accept4(r0, 0x0, 0x0, 0x400000000000000) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x37, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0xd}, 0x4c58, 0x10000, 0x0, 0x1, 0x8, 0x20002, 0xb, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r4 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f00000000c0)="d800000018008103e00312ba0d8105040a600300ff0f040b067c55a1bc000900b80006990700000015000500fef32702d3001500030001400200000901ac040098007f6f94007100a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4b11602b2a10c11ce1b14d6d930dfe1d9d322fe04000000730d7a5025ccca262f3d40fad95667e04adcdf634c1f215ce3bb9ad809d5e1cace81ed0b66bce0b42a9ecbee5de6ccd40dd6e4edef3d93452a92307f00000e970300"/216, 0xd8}], 0x1}, 0x48002) fcntl$setlease(0xffffffffffffffff, 0x400, 0x0) getsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x7, 0x0, 0x0) socket$inet_sctp(0x2, 0x1, 0x84) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x36, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0xd}, 0x0, 0x10000, 0x0, 0x1, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r5 = accept4$llc(0xffffffffffffffff, &(0x7f0000000000)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @dev}, &(0x7f00000001c0)=0x10, 0x0) ioctl$sock_SIOCSIFVLAN_GET_VLAN_REALDEV_NAME_CMD(r5, 0x8983, &(0x7f0000000280)={0x8, 'vcan0\x00', {'wg1\x00'}, 0x9}) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000b00)=ANY=[], 0x548}}, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0x0) r6 = socket$igmp(0x2, 0x3, 0x2) setsockopt$EBT_SO_SET_ENTRIES(r6, 0x0, 0x80, 0x0, 0x108) write$RDMA_USER_CM_CMD_JOIN_IP_MCAST(0xffffffffffffffff, &(0x7f0000000300)={0x10, 0x30, 0xfa00, {&(0x7f0000000200), 0x0, {0xa, 0x4e21, 0x5, @private1={0xfc, 0x1, '\x00', 0x1}, 0x40}}}, 0x38) kernel console output (not intermixed with test programs): late+0x347/0x3a0 [ 107.148626][ T7607] __secure_computing+0x82/0x150 [ 107.148645][ T7607] syscall_trace_enter+0xcf/0x1e0 [ 107.148667][ T7607] do_syscall_64+0xac/0x200 [ 107.148683][ T7607] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 107.148727][ T7607] ? clear_bhb_loop+0x40/0x90 [ 107.148745][ T7607] ? clear_bhb_loop+0x40/0x90 [ 107.148764][ T7607] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 107.148783][ T7607] RIP: 0033:0x7fbb57c8d33c [ 107.148797][ T7607] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 107.148867][ T7607] RSP: 002b:00007fbb562f7030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 107.148883][ T7607] RAX: ffffffffffffffda RBX: 00007fbb57eb5fa0 RCX: 00007fbb57c8d33c [ 107.148894][ T7607] RDX: 000000000000000f RSI: 00007fbb562f70a0 RDI: 0000000000000006 [ 107.148905][ T7607] RBP: 00007fbb562f7090 R08: 0000000000000000 R09: 0000000000000000 [ 107.148915][ T7607] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 107.148926][ T7607] R13: 0000000000000000 R14: 00007fbb57eb5fa0 R15: 00007ffdd3b482a8 [ 107.148943][ T7607] [ 107.149475][ T6263] team0 (unregistering): Port device team_slave_1 removed [ 107.374673][ T6263] team0 (unregistering): Port device team_slave_0 removed [ 107.431852][ T7553] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 107.444055][ T7553] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 107.503247][ T7553] team0: Port device team_slave_0 added [ 107.512550][ T7553] team0: Port device team_slave_1 added [ 107.521306][ T7618] loop5: detected capacity change from 0 to 128 [ 107.528206][ T7617] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=61 sclass=netlink_route_socket pid=7617 comm=syz.4.1402 [ 107.570724][ T7553] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 107.577726][ T7553] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 107.603951][ T7553] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 107.622838][ T7553] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 107.629891][ T7553] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 107.657224][ T7553] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 107.678461][ T7625] syz_tun: entered allmulticast mode [ 107.751062][ T7553] hsr_slave_0: entered promiscuous mode [ 107.813426][ T7629] Cannot find del_set index 0 as target [ 107.821174][ T7553] hsr_slave_1: entered promiscuous mode [ 107.827776][ T7553] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 107.836059][ T7553] Cannot create hsr debugfs directory [ 107.931559][ T7620] syz_tun: left allmulticast mode [ 108.184164][ T7641] netlink: 'syz.4.1410': attribute type 1 has an invalid length. [ 108.199134][ T7553] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 108.215196][ T7641] 8021q: adding VLAN 0 to HW filter on device bond0 [ 108.224008][ T7553] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 108.236558][ T7553] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 108.243476][ T7641] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 108.266423][ T7553] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 108.338344][ T7645] __nla_validate_parse: 4 callbacks suppressed [ 108.338359][ T7645] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1409'. [ 108.394413][ T7553] 8021q: adding VLAN 0 to HW filter on device bond0 [ 108.413604][ T7553] 8021q: adding VLAN 0 to HW filter on device team0 [ 108.430556][ T6233] bridge0: port 1(bridge_slave_0) entered blocking state [ 108.437738][ T6233] bridge0: port 1(bridge_slave_0) entered forwarding state [ 108.450344][ T6233] bridge0: port 2(bridge_slave_1) entered blocking state [ 108.457496][ T6233] bridge0: port 2(bridge_slave_1) entered forwarding state [ 108.477604][ T7657] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 108.485317][ T7657] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 108.493974][ T7659] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=61 sclass=netlink_route_socket pid=7659 comm=syz.4.1413 [ 108.510984][ T7657] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 108.518455][ T7657] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 108.607338][ T7553] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 108.628397][ T7661] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 108.646348][ T7661] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 108.664284][ T7661] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 108.682989][ T7661] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 108.704052][ T7661] SELinux: policydb magic number 0x240 does not match expected magic number 0xf97cff8c [ 108.717688][ T7661] SELinux: failed to load policy [ 108.825430][ T7553] veth0_vlan: entered promiscuous mode [ 108.843190][ T7687] program syz.5.1417 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 108.847698][ T7553] veth1_vlan: entered promiscuous mode [ 108.866975][ T7687] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 108.869590][ T7553] veth0_macvtap: entered promiscuous mode [ 108.885612][ T7553] veth1_macvtap: entered promiscuous mode [ 108.907201][ T7553] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 108.928549][ T7553] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 108.939696][ T7689] program syz.5.1418 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 108.947098][ T7553] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.958087][ T7553] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.962739][ T7689] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 108.966823][ T7553] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.984204][ T7553] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.049674][ T7691] loop5: detected capacity change from 0 to 2048 [ 109.108049][ T7691] loop5: p2 p3 p7 [ 109.113714][ T7694] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1420'. [ 109.147845][ T7696] loop6: detected capacity change from 0 to 1024 [ 109.162073][ T7696] EXT4-fs: Ignoring removed nobh option [ 109.167884][ T7696] EXT4-fs: Ignoring removed bh option [ 109.179958][ T7698] netlink: 3 bytes leftover after parsing attributes in process `syz.0.1422'. [ 109.193903][ T7696] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 109.206787][ T7698] 0ªX¹¦À: renamed from caif0 [ 109.220899][ T7698] 0ªX¹¦À: entered allmulticast mode [ 109.226177][ T7698] A link change request failed with some changes committed already. Interface 60ªX¹¦À may have been left with an inconsistent configuration, please check. [ 109.245661][ T7700] loop5: detected capacity change from 0 to 512 [ 109.273219][ T7700] EXT4-fs error (device loop5): ext4_acquire_dquot:6933: comm syz.5.1421: Failed to acquire dquot type 1 [ 109.323332][ T7700] EXT4-fs (loop5): 1 truncate cleaned up [ 109.340136][ T7700] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 109.370990][ T7700] ext4 filesystem being mounted at /11/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 109.381122][ T7711] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=61 sclass=netlink_route_socket pid=7711 comm=syz.0.1424 [ 109.489885][ T7716] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1425'. [ 109.498979][ T7716] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1425'. [ 109.508595][ T7715] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1425'. [ 109.610406][ T7721] syz_tun: entered allmulticast mode [ 109.640364][ T7721] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1426'. [ 109.672830][ T7721] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap0 [ 109.730988][ T7720] syz_tun: left allmulticast mode [ 109.892317][ T7553] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 109.919801][ T7734] loop6: detected capacity change from 0 to 128 [ 109.996998][ T7738] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1429'. [ 110.112914][ T7360] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 110.307358][ T7747] loop5: detected capacity change from 0 to 2048 [ 110.335922][ T7747] loop5: p2 p3 p7 [ 110.365274][ T7749] FAULT_INJECTION: forcing a failure. [ 110.365274][ T7749] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 110.378384][ T7749] CPU: 0 UID: 0 PID: 7749 Comm: syz.5.1433 Not tainted 6.16.0-rc5-syzkaller-00121-gbc9ff192a6c9 #0 PREEMPT(voluntary) [ 110.378421][ T7749] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 110.378433][ T7749] Call Trace: [ 110.378439][ T7749] [ 110.378446][ T7749] __dump_stack+0x1d/0x30 [ 110.378505][ T7749] dump_stack_lvl+0xe8/0x140 [ 110.378522][ T7749] dump_stack+0x15/0x1b [ 110.378536][ T7749] should_fail_ex+0x265/0x280 [ 110.378563][ T7749] should_fail+0xb/0x20 [ 110.378646][ T7749] should_fail_usercopy+0x1a/0x20 [ 110.378674][ T7749] _copy_to_iter+0xcf/0xe30 [ 110.378701][ T7749] ? kmem_cache_free+0xdf/0x300 [ 110.378745][ T7749] ? __skb_try_recv_from_queue+0x3d6/0x440 [ 110.378775][ T7749] ? __rcu_read_unlock+0x34/0x70 [ 110.378795][ T7749] ? __pfx_simple_copy_to_iter+0x10/0x10 [ 110.378828][ T7749] __skb_datagram_iter+0xc6/0x690 [ 110.378891][ T7749] ? __pfx_simple_copy_to_iter+0x10/0x10 [ 110.378923][ T7749] skb_copy_datagram_iter+0x3d/0x110 [ 110.379001][ T7749] netlink_recvmsg+0x1a8/0x550 [ 110.379022][ T7749] ? __pfx_netlink_recvmsg+0x10/0x10 [ 110.379039][ T7749] sock_recvmsg+0x139/0x170 [ 110.379061][ T7749] __sys_recvfrom+0x122/0x1f0 [ 110.379130][ T7749] __x64_sys_recvfrom+0x76/0x90 [ 110.379170][ T7749] x64_sys_call+0x1a52/0x2fb0 [ 110.379196][ T7749] do_syscall_64+0xd2/0x200 [ 110.379286][ T7749] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 110.379310][ T7749] ? clear_bhb_loop+0x40/0x90 [ 110.379328][ T7749] ? clear_bhb_loop+0x40/0x90 [ 110.379348][ T7749] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 110.379375][ T7749] RIP: 0033:0x7f2a683406f4 [ 110.379388][ T7749] Code: 89 4c 24 1c e8 ed 5f 02 00 44 8b 54 24 1c 8b 3c 24 45 31 c9 89 c5 48 8b 54 24 10 48 8b 74 24 08 45 31 c0 b8 2d 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 34 89 ef 48 89 04 24 e8 39 60 02 00 48 8b 04 [ 110.379404][ T7749] RSP: 002b:00007f2a669a5ed0 EFLAGS: 00000246 ORIG_RAX: 000000000000002d [ 110.379421][ T7749] RAX: ffffffffffffffda RBX: 00007f2a669a5fc0 RCX: 00007f2a683406f4 [ 110.379470][ T7749] RDX: 0000000000001000 RSI: 00007f2a669a6010 RDI: 0000000000000007 [ 110.379481][ T7749] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 110.379495][ T7749] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000007 [ 110.379506][ T7749] R13: 00007f2a669a5f68 R14: 00007f2a669a6010 R15: 0000000000000000 [ 110.379523][ T7749] [ 110.651975][ T7751] syzkaller0: entered promiscuous mode [ 110.657581][ T7751] syzkaller0: entered allmulticast mode [ 110.860332][ T7757] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 110.869368][ T7757] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 110.896581][ T29] kauditd_printk_skb: 378 callbacks suppressed [ 110.896597][ T29] audit: type=1326 audit(2000000042.850:4316): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7750 comm="syz.5.1434" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2a6833e929 code=0x7ffc0000 [ 110.927944][ T29] audit: type=1326 audit(2000000042.850:4317): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7750 comm="syz.5.1434" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2a6833e929 code=0x7ffc0000 [ 110.951897][ T29] audit: type=1326 audit(2000000042.850:4318): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7750 comm="syz.5.1434" exe="/root/syz-executor" sig=0 arch=c000003e syscall=246 compat=0 ip=0x7f2a6833e929 code=0x7ffc0000 [ 110.976044][ T29] audit: type=1326 audit(2000000042.850:4319): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7750 comm="syz.5.1434" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2a6833e929 code=0x7ffc0000 [ 110.999588][ T29] audit: type=1326 audit(2000000042.850:4320): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7750 comm="syz.5.1434" exe="/root/syz-executor" sig=0 arch=c000003e syscall=322 compat=0 ip=0x7f2a6833e929 code=0x7ffc0000 [ 111.023096][ T29] audit: type=1326 audit(2000000042.850:4321): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7750 comm="syz.5.1434" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2a6833e929 code=0x7ffc0000 [ 111.046882][ T29] audit: type=1326 audit(2000000042.850:4322): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7750 comm="syz.5.1434" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2a6833e929 code=0x7ffc0000 [ 111.071150][ T7759] SET target dimension over the limit! [ 111.628719][ T7769] netlink: 'syz.2.1440': attribute type 1 has an invalid length. [ 111.670285][ T7769] 8021q: adding VLAN 0 to HW filter on device bond2 [ 111.689949][ T7771] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 111.775239][ T7773] program syz.5.1442 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 111.811465][ T29] audit: type=1326 audit(2000000043.760:4323): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7768 comm="syz.2.1440" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbb57c8e929 code=0x7ffc0000 [ 111.821278][ T7773] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 111.835096][ T29] audit: type=1326 audit(2000000043.760:4324): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7768 comm="syz.2.1440" exe="/root/syz-executor" sig=0 arch=c000003e syscall=22 compat=0 ip=0x7fbb57c8e929 code=0x7ffc0000 [ 111.867041][ T29] audit: type=1326 audit(2000000043.760:4325): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7768 comm="syz.2.1440" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbb57c8e929 code=0x7ffc0000 [ 111.941635][ T7779] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1444'. [ 111.946530][ T7781] loop5: detected capacity change from 0 to 128 [ 112.003232][ T7779] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1444'. [ 112.003790][ T7784] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=61 sclass=netlink_route_socket pid=7784 comm=syz.5.1446 [ 112.182481][ T7795] FAULT_INJECTION: forcing a failure. [ 112.182481][ T7795] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 112.195741][ T7795] CPU: 0 UID: 0 PID: 7795 Comm: syz.6.1450 Not tainted 6.16.0-rc5-syzkaller-00121-gbc9ff192a6c9 #0 PREEMPT(voluntary) [ 112.195777][ T7795] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 112.195794][ T7795] Call Trace: [ 112.195803][ T7795] [ 112.195868][ T7795] __dump_stack+0x1d/0x30 [ 112.195894][ T7795] dump_stack_lvl+0xe8/0x140 [ 112.195969][ T7795] dump_stack+0x15/0x1b [ 112.195989][ T7795] should_fail_ex+0x265/0x280 [ 112.196027][ T7795] should_fail+0xb/0x20 [ 112.196061][ T7795] should_fail_usercopy+0x1a/0x20 [ 112.196112][ T7795] _copy_from_iter+0xcf/0xe40 [ 112.196147][ T7795] ? __build_skb_around+0x1a0/0x200 [ 112.196184][ T7795] ? __alloc_skb+0x223/0x320 [ 112.196221][ T7795] netlink_sendmsg+0x471/0x6b0 [ 112.196326][ T7795] ? __pfx_netlink_sendmsg+0x10/0x10 [ 112.196367][ T7795] __sock_sendmsg+0x142/0x180 [ 112.196422][ T7795] ____sys_sendmsg+0x31e/0x4e0 [ 112.196466][ T7795] ___sys_sendmsg+0x17b/0x1d0 [ 112.196544][ T7795] __x64_sys_sendmsg+0xd4/0x160 [ 112.196591][ T7795] x64_sys_call+0x2999/0x2fb0 [ 112.196616][ T7795] do_syscall_64+0xd2/0x200 [ 112.196645][ T7795] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 112.196671][ T7795] ? clear_bhb_loop+0x40/0x90 [ 112.196733][ T7795] ? clear_bhb_loop+0x40/0x90 [ 112.196825][ T7795] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 112.196845][ T7795] RIP: 0033:0x7f09ff74e929 [ 112.196861][ T7795] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 112.196921][ T7795] RSP: 002b:00007f09fddb7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 112.196976][ T7795] RAX: ffffffffffffffda RBX: 00007f09ff975fa0 RCX: 00007f09ff74e929 [ 112.197071][ T7795] RDX: 0000000000008840 RSI: 0000200000000740 RDI: 0000000000000007 [ 112.197083][ T7795] RBP: 00007f09fddb7090 R08: 0000000000000000 R09: 0000000000000000 [ 112.197095][ T7795] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 112.197140][ T7795] R13: 0000000000000000 R14: 00007f09ff975fa0 R15: 00007ffc127a19a8 [ 112.197164][ T7795] [ 112.450866][ T7800] FAULT_INJECTION: forcing a failure. [ 112.450866][ T7800] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 112.464190][ T7800] CPU: 1 UID: 0 PID: 7800 Comm: syz.6.1452 Not tainted 6.16.0-rc5-syzkaller-00121-gbc9ff192a6c9 #0 PREEMPT(voluntary) [ 112.464218][ T7800] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 112.464232][ T7800] Call Trace: [ 112.464238][ T7800] [ 112.464245][ T7800] __dump_stack+0x1d/0x30 [ 112.464271][ T7800] dump_stack_lvl+0xe8/0x140 [ 112.464293][ T7800] dump_stack+0x15/0x1b [ 112.464312][ T7800] should_fail_ex+0x265/0x280 [ 112.464342][ T7800] should_fail_alloc_page+0xf2/0x100 [ 112.464365][ T7800] __alloc_frozen_pages_noprof+0xff/0x360 [ 112.464497][ T7800] alloc_pages_mpol+0xb3/0x250 [ 112.464555][ T7800] vma_alloc_folio_noprof+0x1aa/0x300 [ 112.464597][ T7800] handle_mm_fault+0xec2/0x2be0 [ 112.464617][ T7800] ? __rcu_read_unlock+0x4f/0x70 [ 112.464661][ T7800] do_user_addr_fault+0x3fe/0x1090 [ 112.464721][ T7800] exc_page_fault+0x62/0xa0 [ 112.464750][ T7800] asm_exc_page_fault+0x26/0x30 [ 112.464823][ T7800] RIP: 0010:rep_stos_alternative+0x40/0x80 [ 112.464901][ T7800] Code: c9 75 f6 e9 d2 fe 01 00 48 89 07 48 83 c7 08 83 e9 08 74 ef 83 f9 08 73 ef eb de 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 <48> 89 07 48 89 47 08 48 89 47 10 48 89 47 18 48 89 47 20 48 89 47 [ 112.464919][ T7800] RSP: 0018:ffffc9000f037d98 EFLAGS: 00050246 [ 112.465000][ T7800] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 0000000000000040 [ 112.465012][ T7800] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000200000001000 [ 112.465024][ T7800] RBP: 0000200000000040 R08: 0001ffff858ac9bf R09: 0000000000000000 [ 112.465035][ T7800] R10: 0000000000000000 R11: ffffffff821e7140 R12: 0000000000001000 [ 112.465049][ T7800] R13: 00007ffffffff000 R14: 000000007ffff000 R15: ffffffff821e7140 [ 112.465064][ T7800] ? __pfx_read_zero+0x10/0x10 [ 112.465148][ T7800] ? __pfx_read_zero+0x10/0x10 [ 112.465183][ T7800] read_zero+0x77/0x160 [ 112.465211][ T7800] ? __pfx_read_zero+0x10/0x10 [ 112.465274][ T7800] vfs_read+0x1a0/0x6f0 [ 112.465306][ T7800] ? __rcu_read_unlock+0x4f/0x70 [ 112.465331][ T7800] ? __fget_files+0x184/0x1c0 [ 112.465350][ T7800] ksys_read+0xda/0x1a0 [ 112.465397][ T7800] __x64_sys_read+0x40/0x50 [ 112.465499][ T7800] x64_sys_call+0x2d77/0x2fb0 [ 112.465525][ T7800] do_syscall_64+0xd2/0x200 [ 112.465628][ T7800] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 112.465696][ T7800] ? clear_bhb_loop+0x40/0x90 [ 112.465783][ T7800] ? clear_bhb_loop+0x40/0x90 [ 112.465804][ T7800] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 112.465858][ T7800] RIP: 0033:0x7f09ff74e929 [ 112.465875][ T7800] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 112.465897][ T7800] RSP: 002b:00007f09fddb7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 112.465945][ T7800] RAX: ffffffffffffffda RBX: 00007f09ff975fa0 RCX: 00007f09ff74e929 [ 112.466017][ T7800] RDX: 00000000ffffff96 RSI: 0000200000000040 RDI: 0000000000000004 [ 112.466029][ T7800] RBP: 00007f09fddb7090 R08: 0000000000000000 R09: 0000000000000000 [ 112.466098][ T7800] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 112.466113][ T7800] R13: 0000000000000000 R14: 00007f09ff975fa0 R15: 00007ffc127a19a8 [ 112.466135][ T7800] [ 112.901852][ T7810] netlink: 'syz.4.1456': attribute type 21 has an invalid length. [ 112.926368][ T7808] program syz.2.1455 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 112.943616][ T7808] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 112.967995][ T7814] loop6: detected capacity change from 0 to 764 [ 113.055294][ T7826] loop6: detected capacity change from 0 to 512 [ 113.082697][ T7826] EXT4-fs (loop6): revision level too high, forcing read-only mode [ 113.091624][ T7826] EXT4-fs (loop6): orphan cleanup on readonly fs [ 113.099271][ T7833] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=61 sclass=netlink_route_socket pid=7833 comm=syz.4.1465 [ 113.103141][ T7826] EXT4-fs error (device loop6): ext4_do_update_inode:5568: inode #16: comm syz.6.1462: corrupted inode contents [ 113.124603][ T7826] EXT4-fs (loop6): Remounting filesystem read-only [ 113.131402][ T7826] EXT4-fs (loop6): 1 truncate cleaned up [ 113.137348][ T6288] EXT4-fs (loop6): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 113.148179][ T6288] EXT4-fs (loop6): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 113.164015][ T6288] EXT4-fs (loop6): Quota write (off=8, len=24) cancelled because transaction is not started [ 113.199362][ T7826] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 113.322754][ T7850] netlink: 'syz.0.1469': attribute type 21 has an invalid length. [ 113.505101][ T7553] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 113.531844][ T7855] loop6: detected capacity change from 0 to 1024 [ 113.539344][ T7855] EXT4-fs: Ignoring removed nobh option [ 113.545199][ T7855] EXT4-fs: inline encryption not supported [ 113.575973][ T7855] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 113.650671][ T7553] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 113.704252][ T7872] bond0: entered promiscuous mode [ 113.711575][ T7872] batadv0: entered promiscuous mode [ 113.717615][ T7872] hsr1: Slave A (bond0) is not up; please bring it up to get a fully working HSR network [ 113.727584][ T7872] hsr1: Slave B (batadv0) is not up; please bring it up to get a fully working HSR network [ 113.739118][ T7872] 8021q: adding VLAN 0 to HW filter on device hsr1 [ 113.748414][ T7872] bond0: left promiscuous mode [ 113.755055][ T7872] batadv0: left promiscuous mode [ 113.815847][ T7876] loop6: detected capacity change from 0 to 2048 [ 113.885238][ T7876] loop6: p2 p3 p7 [ 114.024651][ T7883] __nla_validate_parse: 3 callbacks suppressed [ 114.024669][ T7883] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1482'. [ 114.075838][ T7887] netlink: 'syz.2.1483': attribute type 21 has an invalid length. [ 114.083985][ T7887] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1483'. [ 114.248024][ T7900] loop7: detected capacity change from 0 to 16384 [ 114.306521][ T7900] I/O error, dev loop7, sector 6656 op 0x0:(READ) flags 0x80700 phys_seg 17 prio class 0 [ 114.318321][ T7900] I/O error, dev loop7, sector 6912 op 0x0:(READ) flags 0x80700 phys_seg 32 prio class 0 [ 114.333433][ T7900] I/O error, dev loop7, sector 6656 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 114.342925][ T7900] buffer_io_error: 15460 callbacks suppressed [ 114.342941][ T7900] Buffer I/O error on dev loop7, logical block 832, async page read [ 114.362186][ T7899] I/O error, dev loop7, sector 0 op 0x1:(WRITE) flags 0x4800 phys_seg 128 prio class 0 [ 114.371925][ T7899] Buffer I/O error on dev loop7, logical block 0, lost async page write [ 114.380287][ T7899] Buffer I/O error on dev loop7, logical block 1, lost async page write [ 114.388655][ T7899] Buffer I/O error on dev loop7, logical block 2, lost async page write [ 114.397084][ T7899] Buffer I/O error on dev loop7, logical block 3, lost async page write [ 114.405444][ T7899] Buffer I/O error on dev loop7, logical block 4, lost async page write [ 114.413828][ T7899] Buffer I/O error on dev loop7, logical block 5, lost async page write [ 114.422216][ T7899] Buffer I/O error on dev loop7, logical block 6, lost async page write [ 114.430671][ T7899] Buffer I/O error on dev loop7, logical block 7, lost async page write [ 114.439134][ T7899] Buffer I/O error on dev loop7, logical block 8, lost async page write [ 114.450485][ T7899] I/O error, dev loop7, sector 1024 op 0x1:(WRITE) flags 0x4800 phys_seg 128 prio class 0 [ 114.464245][ T7899] I/O error, dev loop7, sector 2048 op 0x1:(WRITE) flags 0x4800 phys_seg 128 prio class 0 [ 114.477441][ T7899] I/O error, dev loop7, sector 3072 op 0x1:(WRITE) flags 0x4800 phys_seg 128 prio class 0 [ 114.497556][ T7899] I/O error, dev loop7, sector 4096 op 0x1:(WRITE) flags 0x4800 phys_seg 128 prio class 0 [ 114.518402][ T7899] I/O error, dev loop7, sector 5120 op 0x1:(WRITE) flags 0x4800 phys_seg 128 prio class 0 [ 114.529592][ T7909] 9pnet_fd: Insufficient options for proto=fd [ 114.536899][ T7899] I/O error, dev loop7, sector 6144 op 0x1:(WRITE) flags 0x800 phys_seg 64 prio class 0 [ 114.566409][ T7914] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1492'. [ 114.586453][ T7916] netlink: 'syz.2.1493': attribute type 10 has an invalid length. [ 114.595171][ T7916] team0: Device macvtap0 failed to register rx_handler [ 115.246653][ T7938] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 115.276534][ T7938] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1501'. [ 115.285556][ T7938] netlink: 108 bytes leftover after parsing attributes in process `syz.5.1501'. [ 115.294808][ T7938] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1501'. [ 115.303872][ T7938] netlink: 108 bytes leftover after parsing attributes in process `syz.5.1501'. [ 115.313113][ T7938] netlink: 84 bytes leftover after parsing attributes in process `syz.5.1501'. [ 115.322592][ T7939] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1501'. [ 115.331663][ T7939] netlink: 108 bytes leftover after parsing attributes in process `syz.5.1501'. [ 115.557915][ T7961] loop5: detected capacity change from 0 to 128 [ 115.596803][ T7962] netlink: 'syz.2.1508': attribute type 1 has an invalid length. [ 115.607052][ T7962] workqueue: Failed to create a rescuer kthread for wq "bond3": -EINTR [ 115.737445][ T7974] netlink: 'syz.5.1511': attribute type 21 has an invalid length. [ 115.865153][ T7981] loop5: detected capacity change from 0 to 1024 [ 115.872495][ T7981] EXT4-fs: Ignoring removed orlov option [ 115.878601][ T7981] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 115.888511][ T7981] EXT4-fs (loop5): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 115.968418][ T7981] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e840e01c, mo2=0000] [ 116.009539][ T7981] System zones: 0-1, 3-12 [ 116.015075][ T7981] EXT4-fs error (device loop5): ext4_map_blocks:816: inode #3: block 1: comm syz.5.1514: lblock 1 mapped to illegal pblock 1 (length 1) [ 116.030397][ T7981] __quota_error: 208 callbacks suppressed [ 116.030463][ T7981] Quota error (device loop5): write_blk: dquota write failed [ 116.043673][ T7981] Quota error (device loop5): qtree_write_dquot: Error -117 occurred while creating quota [ 116.064978][ T7981] EXT4-fs error (device loop5): ext4_acquire_dquot:6933: comm syz.5.1514: Failed to acquire dquot type 0 [ 116.077831][ T7981] EXT4-fs error (device loop5): ext4_free_blocks:6587: comm syz.5.1514: Freeing blocks not in datazone - block = 0, count = 4096 [ 116.092912][ T7981] EXT4-fs error (device loop5): ext4_read_inode_bitmap:139: comm syz.5.1514: Invalid inode bitmap blk 0 in block_group 0 [ 116.106277][ T7981] EXT4-fs error (device loop5) in ext4_free_inode:361: Corrupt filesystem [ 116.115200][ T6266] EXT4-fs error (device loop5): ext4_map_blocks:780: inode #3: block 1: comm kworker/u8:38: lblock 1 mapped to illegal pblock 1 (length 1) [ 116.130748][ T7981] EXT4-fs (loop5): 1 orphan inode deleted [ 116.137003][ T7981] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 116.150844][ T6266] Quota error (device loop5): remove_tree: Can't read quota data block 1 [ 116.159333][ T6266] EXT4-fs error (device loop5): ext4_release_dquot:6969: comm kworker/u8:38: Failed to release dquot type 0 [ 116.180515][ T7981] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 116.192240][ T29] audit: type=1326 audit(2000000048.150:4528): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7980 comm="syz.5.1514" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f2a6833d290 code=0x7ffc0000 [ 116.217475][ T29] audit: type=1326 audit(2000000048.150:4529): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7980 comm="syz.5.1514" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f2a6833e52b code=0x7ffc0000 [ 116.241007][ T29] audit: type=1326 audit(2000000048.150:4530): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7980 comm="syz.5.1514" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f2a6833d58a code=0x7ffc0000 [ 116.264583][ T29] audit: type=1326 audit(2000000048.150:4531): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7980 comm="syz.5.1514" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2a6833e929 code=0x7ffc0000 [ 116.288461][ T29] audit: type=1326 audit(2000000048.150:4532): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7980 comm="syz.5.1514" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2a6833e929 code=0x7ffc0000 [ 116.314232][ T29] audit: type=1326 audit(2000000048.270:4533): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7980 comm="syz.5.1514" exe="/root/syz-executor" sig=0 arch=c000003e syscall=248 compat=0 ip=0x7f2a6833e929 code=0x7ffc0000 [ 116.338310][ T29] audit: type=1326 audit(2000000048.270:4534): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7980 comm="syz.5.1514" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2a6833e929 code=0x7ffc0000 [ 116.392517][ T7992] loop6: detected capacity change from 0 to 128 [ 116.401639][ T7981] loop5: detected capacity change from 0 to 2048 [ 116.406743][ T7996] vhci_hcd: default hub control req: 0000 v0000 i0000 l31125 [ 116.409619][ T7992] EXT4-fs (loop6): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 116.428970][ T7992] ext4 filesystem being mounted at /17/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 116.463529][ T7981] Alternate GPT is invalid, using primary GPT. [ 116.469963][ T7981] loop5: p1 p2 p3 [ 116.497523][ T7553] EXT4-fs (loop6): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 116.563555][ T8013] x_tables: ip6_tables: tcpmss match: only valid for protocol 6 [ 116.566831][ T8015] syz_tun: entered allmulticast mode [ 116.579883][ T8013] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 116.595077][ T8015] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 116.607979][ T8011] syz_tun: left allmulticast mode [ 116.634063][ T8013] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 116.695932][ T8013] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 116.758505][ T8034] loop5: detected capacity change from 0 to 256 [ 116.775600][ T8013] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 116.870245][ T8046] netlink: 'syz.5.1536': attribute type 21 has an invalid length. [ 116.928584][ T8053] syz_tun: entered allmulticast mode [ 116.930143][ T8052] loop5: detected capacity change from 0 to 128 [ 116.936231][ T8051] syz_tun: left allmulticast mode [ 117.110441][ T8013] netdevsim netdevsim6 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 117.348634][ T8013] netdevsim netdevsim6 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 117.394017][ T8013] netdevsim netdevsim6 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 117.405611][ T8013] netdevsim netdevsim6 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 117.528567][ T8076] sctp: [Deprecated]: syz.6.1545 (pid 8076) Use of struct sctp_assoc_value in delayed_ack socket option. [ 117.528567][ T8076] Use struct sctp_sack_info instead [ 118.257065][ T8095] netlink: 'syz.5.1550': attribute type 21 has an invalid length. [ 118.294302][ T8099] syz_tun: entered allmulticast mode [ 118.310860][ T8098] syz_tun: left allmulticast mode [ 118.344166][ T8103] netlink: 'syz.6.1554': attribute type 1 has an invalid length. [ 118.363226][ T8103] 8021q: adding VLAN 0 to HW filter on device bond1 [ 118.375951][ T8103] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 118.550354][ T8115] SELinux: Context system_u:object_r:mouse_device_t:s0 is not valid (left unmapped). [ 118.718936][ T8128] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=8128 comm=syz.5.1562 [ 118.742968][ T8130] loop6: detected capacity change from 0 to 128 [ 118.872918][ T8132] syz_tun: entered allmulticast mode [ 118.879393][ T8131] syz_tun: left allmulticast mode [ 118.913293][ T1036] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 118.926219][ T8140] loop5: detected capacity change from 0 to 1024 [ 118.934526][ T8140] EXT4-fs: Ignoring removed nomblk_io_submit option [ 118.941524][ T1036] hid-generic 0000:0000:0000.0003: hidraw0: HID v0.00 Device [syz1] on syz0 [ 118.952714][ T8140] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 119.014063][ T8141] Cannot find del_set index 0 as target [ 119.160411][ T8145] netlink: 'syz.4.1567': attribute type 1 has an invalid length. [ 119.170987][ T8140] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 119.273216][ T8154] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 119.368431][ T8157] __nla_validate_parse: 11 callbacks suppressed [ 119.368486][ T8157] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1569'. [ 119.383654][ T8145] 8021q: adding VLAN 0 to HW filter on device bond2 [ 119.481126][ T7360] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 119.512260][ T8165] xt_TCPMSS: Only works on TCP SYN packets [ 119.627226][ T8173] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1574'. [ 119.713207][ T8183] program syz.6.1579 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 119.722951][ T8183] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 119.775043][ T8187] syz_tun: entered allmulticast mode [ 119.784227][ T8189] loop5: detected capacity change from 0 to 512 [ 119.792551][ T8189] EXT4-fs (loop5): orphan cleanup on readonly fs [ 119.794328][ T8186] syz_tun: left allmulticast mode [ 119.799542][ T8189] EXT4-fs error (device loop5): ext4_acquire_dquot:6933: comm syz.5.1582: Failed to acquire dquot type 1 [ 119.818889][ T8189] EXT4-fs (loop5): 1 truncate cleaned up [ 119.826821][ T8189] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 119.883988][ T8197] netlink: 'syz.6.1585': attribute type 1 has an invalid length. [ 119.898371][ T8197] 8021q: adding VLAN 0 to HW filter on device bond2 [ 119.912610][ T8197] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 119.946579][ T7360] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 119.999176][ T8203] xt_AUDIT: Audit type out of range (valid range: 0..2) [ 120.091991][ T8210] loop6: detected capacity change from 0 to 1024 [ 120.132224][ T8210] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 120.176520][ T8216] program syz.0.1591 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 120.186485][ T8216] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 120.247273][ T8221] loop5: detected capacity change from 0 to 2048 [ 120.255037][ T7553] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 120.285168][ T8226] syz_tun: entered allmulticast mode [ 120.295331][ T8221] loop5: p2 p3 p7 [ 120.300575][ T8225] syz_tun: left allmulticast mode [ 120.573900][ T8240] SET target dimension over the limit! [ 121.314888][ T8251] program syz.5.1602 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 121.332981][ T8251] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 121.380643][ T29] kauditd_printk_skb: 255 callbacks suppressed [ 121.380661][ T29] audit: type=1326 audit(2000000053.330:4788): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8255 comm="syz.5.1605" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2a6833e929 code=0x7ffc0000 [ 121.410432][ T29] audit: type=1326 audit(2000000053.330:4789): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8255 comm="syz.5.1605" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2a6833e929 code=0x7ffc0000 [ 121.434137][ T29] audit: type=1326 audit(2000000053.330:4790): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8255 comm="syz.5.1605" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f2a6833e929 code=0x7ffc0000 [ 121.457654][ T29] audit: type=1326 audit(2000000053.330:4791): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8255 comm="syz.5.1605" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2a6833e929 code=0x7ffc0000 [ 121.481664][ T29] audit: type=1326 audit(2000000053.330:4792): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8255 comm="syz.5.1605" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f2a6833e929 code=0x7ffc0000 [ 121.487948][ T8260] loop5: detected capacity change from 0 to 2048 [ 121.505336][ T29] audit: type=1326 audit(2000000053.330:4793): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8255 comm="syz.5.1605" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2a6833e929 code=0x7ffc0000 [ 121.536841][ T29] audit: type=1326 audit(2000000053.330:4794): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8255 comm="syz.5.1605" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2a6833e929 code=0x7ffc0000 [ 121.561022][ T29] audit: type=1326 audit(2000000053.340:4795): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8255 comm="syz.5.1605" exe="/root/syz-executor" sig=0 arch=c000003e syscall=42 compat=0 ip=0x7f2a6833e929 code=0x7ffc0000 [ 121.584441][ T29] audit: type=1326 audit(2000000053.340:4796): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8255 comm="syz.5.1605" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2a6833e929 code=0x7ffc0000 [ 121.608073][ T29] audit: type=1326 audit(2000000053.340:4797): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8255 comm="syz.5.1605" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2a6833e929 code=0x7ffc0000 [ 121.617922][ T8260] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 121.663223][ T8260] EXT4-fs (loop5): shut down requested (0) [ 121.691823][ T8270] syz_tun: entered allmulticast mode [ 121.698232][ T8268] syz_tun: left allmulticast mode [ 121.731068][ T8271] pim6reg1: entered promiscuous mode [ 121.791262][ T2959] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 121.798749][ T2959] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 121.807063][ T2959] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 121.814538][ T2959] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 121.821979][ T2959] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 121.829398][ T2959] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 121.836853][ T2959] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 121.844291][ T2959] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 121.851971][ T2959] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 121.859400][ T2959] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 121.866912][ T2959] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 121.874415][ T2959] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 121.883605][ T2959] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 121.891094][ T2959] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 121.898522][ T2959] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 121.906013][ T2959] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 121.913561][ T2959] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 121.920976][ T2959] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 121.928475][ T2959] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 121.935946][ T2959] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 121.943469][ T2959] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 121.951030][ T2959] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 121.958448][ T2959] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 121.965906][ T2959] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 121.973337][ T2959] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 121.980759][ T2959] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 121.988267][ T2959] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 121.996420][ T2959] hid-generic 0000:0000:0000.0004: hidraw0: HID v0.00 Device [syz0] on syz1 [ 122.200956][ T8315] program syz.2.1627 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 122.210535][ T8315] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 122.233329][ T7360] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 122.243181][ T8317] netlink: 16402 bytes leftover after parsing attributes in process `syz.4.1626'. [ 122.253792][ T8313] netlink: 16402 bytes leftover after parsing attributes in process `syz.4.1626'. [ 122.290516][ T8322] loop5: detected capacity change from 0 to 256 [ 122.297677][ T8322] FAT-fs (loop5): bogus number of FAT sectors [ 122.303850][ T8322] FAT-fs (loop5): Can't find a valid FAT filesystem [ 122.377457][ T8332] loop5: detected capacity change from 0 to 2048 [ 122.425975][ T8332] loop5: p2 p3 p7 [ 122.507760][ T8339] bond3: entered promiscuous mode [ 122.512918][ T8339] bond3: entered allmulticast mode [ 122.519213][ T8339] 8021q: adding VLAN 0 to HW filter on device bond3 [ 122.526500][ T8338] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 122.535051][ T8338] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 122.543824][ T8338] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 122.543920][ T8339] bond3 (unregistering): Released all slaves [ 122.552509][ T8338] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 122.567924][ T8338] SELinux: policydb magic number 0x240 does not match expected magic number 0xf97cff8c [ 122.569359][ T3478] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 122.577911][ T8338] SELinux: failed to load policy [ 122.587106][ T3478] hid-generic 0000:0000:0000.0005: hidraw0: HID v0.00 Device [syz1] on syz0 [ 123.061236][ T8345] program syz.6.1639 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 123.070718][ T8345] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 123.138955][ T8356] netlink: 'syz.5.1643': attribute type 21 has an invalid length. [ 123.156021][ T8357] loop6: detected capacity change from 0 to 2048 [ 123.162904][ T8356] netlink: 132 bytes leftover after parsing attributes in process `syz.5.1643'. [ 123.172660][ T8357] EXT4-fs: Ignoring removed nobh option [ 123.173565][ T8359] tipc: Enabled bearer , priority 10 [ 123.192370][ T8357] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 123.214144][ T8363] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1647'. [ 123.223263][ T8363] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1647'. [ 123.449860][ T8373] wg2: entered allmulticast mode [ 123.528357][ T8376] Cannot find del_set index 0 as target [ 123.564743][ T7553] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 124.155154][ T8381] program syz.6.1652 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 124.165775][ T8381] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 124.232239][ T8379] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1654'. [ 124.241668][ T8379] netem: change failed [ 124.288748][ T8404] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1663'. [ 124.290690][ T3386] tipc: Node number set to 3741548174 [ 124.523590][ T8417] netlink: 'syz.4.1668': attribute type 21 has an invalid length. [ 124.531769][ T8417] netlink: 132 bytes leftover after parsing attributes in process `syz.4.1668'. [ 124.931547][ T8437] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1672'. [ 124.961794][ T8437] netem: change failed [ 125.028998][ T8439] SELinux: Context system_u:object_r:dpkg_lock_t:s0 is not valid (left unmapped). [ 125.377408][ T8445] hub 9-0:1.0: USB hub found [ 125.383080][ T8445] hub 9-0:1.0: 8 ports detected [ 125.502328][ T8451] program syz.6.1678 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 125.524633][ T8451] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 125.642743][ T8453] SET target dimension over the limit! [ 125.706149][ T8458] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 125.764754][ T8469] loop6: detected capacity change from 0 to 128 [ 125.787794][ T8473] syz_tun: entered allmulticast mode [ 125.795375][ T8471] loop5: detected capacity change from 0 to 1024 [ 125.815807][ T8471] EXT4-fs: Ignoring removed nobh option [ 125.821658][ T8471] EXT4-fs: inline encryption not supported [ 125.843308][ T8471] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 125.858264][ T8471] EXT4-fs error (device loop5): ext4_mb_mark_diskspace_used:4113: comm syz.5.1686: Allocating blocks 385-513 which overlap fs metadata [ 125.884915][ T8471] EXT4-fs (loop5): pa ffff888106a74850: logic 16, phys. 129, len 24 [ 125.893082][ T8471] EXT4-fs error (device loop5): ext4_mb_release_inode_pa:5364: group 0, free 0, pa_free 8 [ 125.910913][ T8471] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 1 with error 28 [ 125.923365][ T8471] EXT4-fs (loop5): This should not happen!! Data will be lost [ 125.923365][ T8471] [ 125.933129][ T8471] EXT4-fs (loop5): Total free blocks count 0 [ 125.939277][ T8471] EXT4-fs (loop5): Free/Dirty block details [ 125.945257][ T8471] EXT4-fs (loop5): free_blocks=128 [ 125.950479][ T8471] EXT4-fs (loop5): dirty_blocks=0 [ 125.955652][ T8471] EXT4-fs (loop5): Block reservation details [ 125.962376][ T8471] EXT4-fs (loop5): i_reserved_data_blocks=0 [ 125.968505][ T8469] x_tables: ip6_tables: TRACE target: only valid in raw table, not [ 126.065555][ T8489] lo speed is unknown, defaulting to 1000 [ 126.070010][ T8493] xt_CT: You must specify a L4 protocol and not use inversions on it [ 126.072503][ T8489] lo speed is unknown, defaulting to 1000 [ 126.086715][ T8489] lo speed is unknown, defaulting to 1000 [ 126.091396][ T8493] FAULT_INJECTION: forcing a failure. [ 126.091396][ T8493] name failslab, interval 1, probability 0, space 0, times 0 [ 126.094859][ T8489] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 126.105146][ T8493] CPU: 1 UID: 0 PID: 8493 Comm: syz.5.1691 Not tainted 6.16.0-rc5-syzkaller-00121-gbc9ff192a6c9 #0 PREEMPT(voluntary) [ 126.105182][ T8493] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 126.105264][ T8493] Call Trace: [ 126.105274][ T8493] [ 126.105284][ T8493] __dump_stack+0x1d/0x30 [ 126.105314][ T8493] dump_stack_lvl+0xe8/0x140 [ 126.105341][ T8493] dump_stack+0x15/0x1b [ 126.105428][ T8493] should_fail_ex+0x265/0x280 [ 126.105471][ T8493] should_failslab+0x8c/0xb0 [ 126.105501][ T8493] __kvmalloc_node_noprof+0x123/0x4e0 [ 126.105590][ T8493] ? __nf_hook_entries_try_shrink+0x260/0x450 [ 126.105678][ T8493] __nf_hook_entries_try_shrink+0x260/0x450 [ 126.105741][ T8493] __nf_unregister_net_hook+0x2d1/0x3b0 [ 126.105787][ T8493] nf_unregister_net_hooks+0xab/0xe0 [ 126.105896][ T8493] nf_ct_netns_do_put+0x1e9/0x260 [ 126.105938][ T8493] nf_ct_netns_put+0xea/0x1f0 [ 126.105979][ T8493] xt_ct_tg_check+0x56e/0x660 [ 126.106093][ T8493] xt_ct_tg_check_v1+0x4a/0x60 [ 126.106224][ T8493] xt_check_target+0x28d/0x4c0 [ 126.106267][ T8493] ? xt_find_match+0x1d1/0x210 [ 126.106303][ T8493] ? strnlen+0x28/0x50 [ 126.106328][ T8493] ? strcmp+0x22/0x50 [ 126.106417][ T8493] ? xt_find_target+0x1cd/0x200 [ 126.106522][ T8493] translate_table+0xcf5/0x1070 [ 126.106570][ T8493] do_ip6t_set_ctl+0x678/0x840 [ 126.106596][ T8493] ? kstrtoull+0x111/0x140 [ 126.106623][ T8493] ? __rcu_read_unlock+0x4f/0x70 [ 126.106667][ T8493] nf_setsockopt+0x199/0x1b0 [ 126.106697][ T8493] ipv6_setsockopt+0x11a/0x130 [ 126.106731][ T8493] tcp_setsockopt+0x95/0xb0 [ 126.106775][ T8493] sock_common_setsockopt+0x69/0x80 [ 126.106870][ T8493] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 126.106904][ T8493] __sys_setsockopt+0x184/0x200 [ 126.106997][ T8493] __x64_sys_setsockopt+0x64/0x80 [ 126.107039][ T8493] x64_sys_call+0x2bd5/0x2fb0 [ 126.107108][ T8493] do_syscall_64+0xd2/0x200 [ 126.107133][ T8493] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 126.107181][ T8493] ? clear_bhb_loop+0x40/0x90 [ 126.107209][ T8493] ? clear_bhb_loop+0x40/0x90 [ 126.107242][ T8493] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 126.107273][ T8493] RIP: 0033:0x7f2a6833e929 [ 126.107294][ T8493] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 126.107318][ T8493] RSP: 002b:00007f2a669a7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 126.107345][ T8493] RAX: ffffffffffffffda RBX: 00007f2a68565fa0 RCX: 00007f2a6833e929 [ 126.107363][ T8493] RDX: 0000000000000040 RSI: 0000000000000029 RDI: 0000000000000004 [ 126.107379][ T8493] RBP: 00007f2a669a7090 R08: 0000000000000440 R09: 0000000000000000 [ 126.107454][ T8493] R10: 0000200000001240 R11: 0000000000000246 R12: 0000000000000002 [ 126.107471][ T8493] R13: 0000000000000000 R14: 00007f2a68565fa0 R15: 00007ffd58881028 [ 126.107497][ T8493] [ 126.399417][ T8489] lo speed is unknown, defaulting to 1000 [ 126.405668][ T8489] lo speed is unknown, defaulting to 1000 [ 126.412010][ T8489] lo speed is unknown, defaulting to 1000 [ 126.418279][ T8489] lo speed is unknown, defaulting to 1000 [ 126.424940][ T8489] lo speed is unknown, defaulting to 1000 [ 126.485989][ T8502] loop5: detected capacity change from 0 to 1024 [ 126.494382][ T8502] EXT4-fs (loop5): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 126.504210][ T8502] EXT4-fs (loop5): ext4_check_descriptors: Checksum for group 0 failed (42152!=20869) [ 126.514048][ T8502] EXT4-fs (loop5): stripe (2) is not aligned with cluster size (16), stripe is disabled [ 126.524350][ T8498] SET target dimension over the limit! [ 126.578378][ T8502] EXT4-fs error (device loop5): ext4_get_journal_inode:5796: inode #5: comm syz.5.1695: unexpected bad inode w/o EXT4_IGET_BAD [ 126.594446][ T8502] EXT4-fs (loop5): no journal found [ 126.599809][ T8502] EXT4-fs (loop5): can't get journal size [ 126.606800][ T8502] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 126.613873][ T8512] netlink: 404 bytes leftover after parsing attributes in process `syz.6.1699'. [ 126.789770][ T8514] SET target dimension over the limit! [ 126.881288][ T8521] program syz.0.1703 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 126.883931][ T7360] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 126.900594][ T8521] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 126.935225][ T8525] netlink: 'syz.5.1704': attribute type 1 has an invalid length. [ 126.946853][ T29] kauditd_printk_skb: 694 callbacks suppressed [ 126.946868][ T29] audit: type=1400 audit(2000000058.900:5492): avc: denied { override_creds } for pid=8526 comm="syz.0.1707" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 126.956188][ T8525] 8021q: adding VLAN 0 to HW filter on device bond1 [ 126.989176][ T8525] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 127.004254][ T8533] loop6: detected capacity change from 0 to 128 [ 127.014488][ T8525] lo speed is unknown, defaulting to 1000 [ 127.042319][ T8534] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 127.058449][ T8534] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 127.074461][ T29] audit: type=1326 audit(2000000059.030:5493): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8524 comm="syz.5.1704" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2a6833e929 code=0x7ffc0000 [ 127.098158][ T29] audit: type=1326 audit(2000000059.030:5494): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8524 comm="syz.5.1704" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2a6833e929 code=0x7ffc0000 [ 127.121705][ T29] audit: type=1326 audit(2000000059.030:5495): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8524 comm="syz.5.1704" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7f2a6833e929 code=0x7ffc0000 [ 127.145214][ T29] audit: type=1326 audit(2000000059.030:5496): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8524 comm="syz.5.1704" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2a6833e929 code=0x7ffc0000 [ 127.168737][ T29] audit: type=1326 audit(2000000059.030:5497): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8524 comm="syz.5.1704" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2a6833e929 code=0x7ffc0000 [ 127.192153][ T29] audit: type=1326 audit(2000000059.030:5498): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8524 comm="syz.5.1704" exe="/root/syz-executor" sig=0 arch=c000003e syscall=22 compat=0 ip=0x7f2a6833e929 code=0x7ffc0000 [ 127.215548][ T29] audit: type=1326 audit(2000000059.030:5499): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8524 comm="syz.5.1704" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2a6833e929 code=0x7ffc0000 [ 127.239189][ T29] audit: type=1326 audit(2000000059.030:5500): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8524 comm="syz.5.1704" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2a6833e929 code=0x7ffc0000 [ 127.262860][ T29] audit: type=1326 audit(2000000059.030:5501): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8524 comm="syz.5.1704" exe="/root/syz-executor" sig=0 arch=c000003e syscall=190 compat=0 ip=0x7f2a6833e929 code=0x7ffc0000 [ 127.294265][ T8533] Cannot find del_set index 0 as target [ 127.354668][ T8539] loop5: detected capacity change from 0 to 8192 [ 127.393755][ T8544] netlink: 'syz.6.1712': attribute type 21 has an invalid length. [ 127.396090][ T8546] loop5: detected capacity change from 0 to 164 [ 127.402704][ T8544] netlink: 132 bytes leftover after parsing attributes in process `syz.6.1712'. [ 127.421398][ T8546] iso9660: Corrupted directory entry in block 4 of inode 1792 [ 127.465908][ T8550] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1714'. [ 127.475004][ T8550] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1714'. [ 127.502178][ T8550] veth5: entered promiscuous mode [ 127.523838][ T8556] openvswitch: netlink: Message has 6 unknown bytes. [ 127.563740][ T8562] loop6: detected capacity change from 0 to 128 [ 127.645608][ T8566] Cannot find del_set index 0 as target [ 127.793266][ T8560] netlink: '+}[@': attribute type 13 has an invalid length. [ 127.830251][ T8560] syz_tun: left promiscuous mode [ 127.852540][ T8560] 8021q: adding VLAN 0 to HW filter on device  [ 127.871808][ T8560] 8021q: adding VLAN 0 to HW filter on device team0 [ 127.930903][ T8560] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 128.477294][ T8572] netlink: 56 bytes leftover after parsing attributes in process `syz.6.1723'. [ 128.639854][ T8582] loop5: detected capacity change from 0 to 2048 [ 128.659594][ T8586] netlink: 24 bytes leftover after parsing attributes in process `syz.6.1728'. [ 128.675937][ T8586] veth3: entered allmulticast mode [ 128.698210][ T8582] loop5: p2 p3 p7 [ 128.710310][ T8590] SELinux: Context system_u:object_r:lastlog_t:s0 is not valid (left unmapped). [ 128.720052][ T8590] Invalid ELF header magic: != ELF [ 128.773688][ T8599] loop5: detected capacity change from 0 to 128 [ 128.843225][ T8605] Cannot find del_set index 0 as target [ 128.948144][ T8611] x_tables: duplicate underflow at hook 2 [ 128.955152][ T8611] x_tables: ip6_tables: tcpmss match: only valid for protocol 6 [ 129.233735][ T8623] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1742'. [ 129.647860][ T8633] netlink: 'syz.5.1745': attribute type 1 has an invalid length. [ 129.677234][ T8633] 8021q: adding VLAN 0 to HW filter on device bond2 [ 129.687956][ T8640] netlink: 'syz.6.1747': attribute type 21 has an invalid length. [ 129.702537][ T8640] netlink: 132 bytes leftover after parsing attributes in process `syz.6.1747'. [ 129.714266][ T8633] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 129.723758][ T8642] lo speed is unknown, defaulting to 1000 [ 129.751531][ T8633] lo speed is unknown, defaulting to 1000 [ 129.854469][ T8649] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1750'. [ 130.140367][ T8661] lo speed is unknown, defaulting to 1000 [ 130.367619][ T8651] netlink: 664 bytes leftover after parsing attributes in process `syz.5.1751'. [ 130.588568][ T8669] Cannot find del_set index 0 as target [ 130.627385][ T8673] : renamed from bond0 (while UP) [ 130.663221][ T8626] syz.4.1743 (8626) used greatest stack depth: 5656 bytes left [ 130.682454][ T8675] netlink: 'syz.4.1757': attribute type 1 has an invalid length. [ 130.717012][ T8677] netlink: 24 bytes leftover after parsing attributes in process `syz.6.1758'. [ 130.736422][ T8677] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=8677 comm=syz.6.1758 [ 130.834965][ T8679] netlink: 'syz.4.1759': attribute type 21 has an invalid length. [ 130.850727][ T8679] netlink: 132 bytes leftover after parsing attributes in process `syz.4.1759'. [ 130.927041][ T8684] netlink: 'syz.4.1761': attribute type 1 has an invalid length. [ 130.950716][ T8684] 8021q: adding VLAN 0 to HW filter on device bond3 [ 130.976628][ T8684] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 131.002200][ T8689] loop6: detected capacity change from 0 to 2048 [ 131.018323][ T8684] lo speed is unknown, defaulting to 1000 [ 131.074867][ T8696] loop6: detected capacity change from 0 to 2048 [ 131.084826][ T3478] hid-generic 0000:3000000:0000.0006: unknown main item tag 0x4 [ 131.092759][ T3478] hid-generic 0000:3000000:0000.0006: unknown main item tag 0x2 [ 131.094119][ T8696] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 131.100559][ T3478] hid-generic 0000:3000000:0000.0006: unknown main item tag 0x0 [ 131.120242][ T3478] hid-generic 0000:3000000:0000.0006: unknown main item tag 0x0 [ 131.128032][ T3478] hid-generic 0000:3000000:0000.0006: unknown main item tag 0x0 [ 131.135957][ T3478] hid-generic 0000:3000000:0000.0006: unknown main item tag 0x0 [ 131.143780][ T3478] hid-generic 0000:3000000:0000.0006: unknown main item tag 0x0 [ 131.145326][ T8702] netlink: 'syz.0.1767': attribute type 1 has an invalid length. [ 131.151768][ T3478] hid-generic 0000:3000000:0000.0006: unknown main item tag 0x0 [ 131.167959][ T8702] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1767'. [ 131.177029][ T3478] hid-generic 0000:3000000:0000.0006: unknown main item tag 0x0 [ 131.184873][ T3478] hid-generic 0000:3000000:0000.0006: unknown main item tag 0x0 [ 131.192643][ T3478] hid-generic 0000:3000000:0000.0006: unknown main item tag 0x0 [ 131.200887][ T3478] hid-generic 0000:3000000:0000.0006: unknown main item tag 0x0 [ 131.208846][ T3478] hid-generic 0000:3000000:0000.0006: unknown main item tag 0x0 [ 131.216626][ T3478] hid-generic 0000:3000000:0000.0006: unknown main item tag 0x0 [ 131.224329][ T3478] hid-generic 0000:3000000:0000.0006: unknown main item tag 0x0 [ 131.232108][ T3478] hid-generic 0000:3000000:0000.0006: unknown main item tag 0x0 [ 131.240786][ T3478] hid-generic 0000:3000000:0000.0006: hidraw0: HID v0.00 Device [sy] on syz0 [ 131.279110][ T7553] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 131.323495][ T8710] netlink: 'syz.4.1771': attribute type 21 has an invalid length. [ 131.349974][ T8710] netlink: 132 bytes leftover after parsing attributes in process `syz.4.1771'. [ 131.372670][ T8716] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1774'. [ 131.504584][ T8729] loop5: detected capacity change from 0 to 128 [ 131.513354][ T8725] lo speed is unknown, defaulting to 1000 [ 131.778078][ T8736] Cannot find del_set index 0 as target [ 132.380649][ T2959] hid-generic 0000:3000000:0000.0007: unknown main item tag 0x4 [ 132.388361][ T2959] hid-generic 0000:3000000:0000.0007: unknown main item tag 0x2 [ 132.418529][ T2959] hid-generic 0000:3000000:0000.0007: unknown main item tag 0x0 [ 132.426296][ T2959] hid-generic 0000:3000000:0000.0007: unknown main item tag 0x0 [ 132.434701][ T2959] hid-generic 0000:3000000:0000.0007: unknown main item tag 0x0 [ 132.442393][ T2959] hid-generic 0000:3000000:0000.0007: unknown main item tag 0x0 [ 132.450134][ T2959] hid-generic 0000:3000000:0000.0007: unknown main item tag 0x0 [ 132.457836][ T2959] hid-generic 0000:3000000:0000.0007: unknown main item tag 0x0 [ 132.466234][ T2959] hid-generic 0000:3000000:0000.0007: unknown main item tag 0x0 [ 132.474105][ T2959] hid-generic 0000:3000000:0000.0007: unknown main item tag 0x0 [ 132.481788][ T2959] hid-generic 0000:3000000:0000.0007: unknown main item tag 0x0 [ 132.489457][ T2959] hid-generic 0000:3000000:0000.0007: unknown main item tag 0x0 [ 132.497858][ T2959] hid-generic 0000:3000000:0000.0007: unknown main item tag 0x0 [ 132.505574][ T2959] hid-generic 0000:3000000:0000.0007: unknown main item tag 0x0 [ 132.513353][ T2959] hid-generic 0000:3000000:0000.0007: unknown main item tag 0x0 [ 132.521693][ T2959] hid-generic 0000:3000000:0000.0007: unknown main item tag 0x0 [ 132.581837][ T8740] netlink: 'syz.2.1781': attribute type 1 has an invalid length. [ 132.614410][ T8740] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1781'. [ 132.680932][ T2959] hid-generic 0000:3000000:0000.0007: hidraw0: HID v0.00 Device [sy] on syz0 [ 132.735563][ T29] kauditd_printk_skb: 173 callbacks suppressed [ 132.735643][ T29] audit: type=1326 audit(2000000064.690:5675): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8744 comm="syz.2.1784" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbb57c8e929 code=0x7ffc0000 [ 132.766423][ T29] audit: type=1326 audit(2000000064.690:5676): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8744 comm="syz.2.1784" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbb57c8e929 code=0x7ffc0000 [ 132.789894][ T29] audit: type=1326 audit(2000000064.690:5677): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8744 comm="syz.2.1784" exe="/root/syz-executor" sig=0 arch=c000003e syscall=109 compat=0 ip=0x7fbb57c8e929 code=0x7ffc0000 [ 132.814334][ T29] audit: type=1326 audit(2000000064.690:5678): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8744 comm="syz.2.1784" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbb57c8e929 code=0x7ffc0000 [ 132.838125][ T29] audit: type=1326 audit(2000000064.690:5679): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8744 comm="syz.2.1784" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbb57c8e929 code=0x7ffc0000 [ 132.862752][ T29] audit: type=1326 audit(2000000064.690:5680): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8744 comm="syz.2.1784" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fbb57c8e929 code=0x7ffc0000 [ 132.886256][ T29] audit: type=1326 audit(2000000064.690:5681): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8744 comm="syz.2.1784" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbb57c8e929 code=0x7ffc0000 [ 132.910352][ T29] audit: type=1326 audit(2000000064.690:5682): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8744 comm="syz.2.1784" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbb57c8e929 code=0x7ffc0000 [ 132.934586][ T29] audit: type=1326 audit(2000000064.690:5683): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8744 comm="syz.2.1784" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fbb57c8e929 code=0x7ffc0000 [ 132.958131][ T29] audit: type=1326 audit(2000000064.690:5684): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8744 comm="syz.2.1784" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbb57c8e929 code=0x7ffc0000 [ 133.012860][ T8748] netlink: 260 bytes leftover after parsing attributes in process `syz.6.1785'. [ 133.071761][ T8750] xt_hashlimit: max too large, truncated to 1048576 [ 133.311129][ T8773] loop6: detected capacity change from 0 to 2048 [ 133.366652][ T8773] loop6: p2 p3 p7 [ 133.395854][ T8779] FAULT_INJECTION: forcing a failure. [ 133.395854][ T8779] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 133.410299][ T8779] CPU: 1 UID: 0 PID: 8779 Comm: syz.0.1798 Not tainted 6.16.0-rc5-syzkaller-00121-gbc9ff192a6c9 #0 PREEMPT(voluntary) [ 133.410326][ T8779] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 133.410441][ T8779] Call Trace: [ 133.410448][ T8779] [ 133.410457][ T8779] __dump_stack+0x1d/0x30 [ 133.410491][ T8779] dump_stack_lvl+0xe8/0x140 [ 133.410514][ T8779] dump_stack+0x15/0x1b [ 133.410591][ T8779] should_fail_ex+0x265/0x280 [ 133.410637][ T8779] should_fail+0xb/0x20 [ 133.410670][ T8779] should_fail_usercopy+0x1a/0x20 [ 133.410710][ T8779] strncpy_from_user+0x25/0x230 [ 133.410734][ T8779] ? __kmalloc_cache_noprof+0x189/0x320 [ 133.410820][ T8779] __se_sys_memfd_create+0x1ff/0x590 [ 133.410860][ T8779] __x64_sys_memfd_create+0x31/0x40 [ 133.410923][ T8779] x64_sys_call+0x122f/0x2fb0 [ 133.411023][ T8779] do_syscall_64+0xd2/0x200 [ 133.411043][ T8779] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 133.411067][ T8779] ? clear_bhb_loop+0x40/0x90 [ 133.411125][ T8779] ? clear_bhb_loop+0x40/0x90 [ 133.411154][ T8779] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 133.411278][ T8779] RIP: 0033:0x7fc50e0de929 [ 133.411294][ T8779] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 133.411311][ T8779] RSP: 002b:00007fc50c746d68 EFLAGS: 00000202 ORIG_RAX: 000000000000013f [ 133.411331][ T8779] RAX: ffffffffffffffda RBX: 000000000000106a RCX: 00007fc50e0de929 [ 133.411344][ T8779] RDX: 00007fc50c746dec RSI: 0000000000000000 RDI: 00007fc50e1614cc [ 133.411414][ T8779] RBP: 0000200000000000 R08: 00007fc50c746b07 R09: 0000000000000000 [ 133.411474][ T8779] R10: 000000000000000a R11: 0000000000000202 R12: 0000000000000001 [ 133.411495][ T8779] R13: 00007fc50c746dec R14: 00007fc50c746df0 R15: 00007ffc501bdb38 [ 133.411515][ T8779] [ 133.660991][ T8782] FAULT_INJECTION: forcing a failure. [ 133.660991][ T8782] name failslab, interval 1, probability 0, space 0, times 0 [ 133.673843][ T8782] CPU: 1 UID: 0 PID: 8782 Comm: syz.6.1799 Not tainted 6.16.0-rc5-syzkaller-00121-gbc9ff192a6c9 #0 PREEMPT(voluntary) [ 133.673872][ T8782] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 133.673962][ T8782] Call Trace: [ 133.673969][ T8782] [ 133.673977][ T8782] __dump_stack+0x1d/0x30 [ 133.673998][ T8782] dump_stack_lvl+0xe8/0x140 [ 133.674016][ T8782] dump_stack+0x15/0x1b [ 133.674037][ T8782] should_fail_ex+0x265/0x280 [ 133.674116][ T8782] should_failslab+0x8c/0xb0 [ 133.674161][ T8782] kmem_cache_alloc_node_noprof+0x57/0x320 [ 133.674188][ T8782] ? __alloc_skb+0x101/0x320 [ 133.674225][ T8782] __alloc_skb+0x101/0x320 [ 133.674277][ T8782] sctp_packet_transmit+0x1c8/0x1510 [ 133.674313][ T8782] ? sctp_packet_append_chunk+0x735/0x850 [ 133.674355][ T8782] sctp_outq_flush+0x807/0x1970 [ 133.674414][ T8782] ? sctp_ulpq_tail_event+0x35f/0x9d0 [ 133.674441][ T8782] ? __alloc_skb+0x223/0x320 [ 133.674472][ T8782] sctp_outq_uncork+0x56/0x70 [ 133.674577][ T8782] sctp_do_sm+0x1228/0x3230 [ 133.674624][ T8782] sctp_primitive_ABORT+0x74/0x90 [ 133.674660][ T8782] sctp_sendmsg_check_sflags+0x19b/0x1e0 [ 133.674721][ T8782] sctp_sendmsg+0x75f/0x18d0 [ 133.674754][ T8782] ? __pfx_sctp_sendmsg+0x10/0x10 [ 133.674780][ T8782] inet_sendmsg+0xc2/0xd0 [ 133.674819][ T8782] __sock_sendmsg+0x102/0x180 [ 133.674862][ T8782] ____sys_sendmsg+0x345/0x4e0 [ 133.674908][ T8782] ___sys_sendmsg+0x17b/0x1d0 [ 133.674986][ T8782] __sys_sendmmsg+0x178/0x300 [ 133.675070][ T8782] __x64_sys_sendmmsg+0x57/0x70 [ 133.675110][ T8782] x64_sys_call+0x2f2f/0x2fb0 [ 133.675208][ T8782] do_syscall_64+0xd2/0x200 [ 133.675251][ T8782] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 133.675315][ T8782] ? clear_bhb_loop+0x40/0x90 [ 133.675344][ T8782] ? clear_bhb_loop+0x40/0x90 [ 133.675372][ T8782] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 133.675397][ T8782] RIP: 0033:0x7f09ff74e929 [ 133.675497][ T8782] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 133.675516][ T8782] RSP: 002b:00007f09fddb7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 133.675535][ T8782] RAX: ffffffffffffffda RBX: 00007f09ff975fa0 RCX: 00007f09ff74e929 [ 133.675618][ T8782] RDX: 0000000000000001 RSI: 00002000000032c0 RDI: 0000000000000003 [ 133.675641][ T8782] RBP: 00007f09fddb7090 R08: 0000000000000000 R09: 0000000000000000 [ 133.675655][ T8782] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 133.675666][ T8782] R13: 0000000000000000 R14: 00007f09ff975fa0 R15: 00007ffc127a19a8 [ 133.675685][ T8782] [ 133.974760][ T8787] team0 (unregistering): Port device team_slave_0 removed [ 133.992603][ T8787] team0 (unregistering): Port device team_slave_1 removed [ 134.058333][ T8794] macvtap0: entered promiscuous mode [ 134.071270][ T8794] macvtap0: left promiscuous mode [ 134.088046][ T8788] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1539 sclass=netlink_route_socket pid=8788 comm=syz.6.1801 [ 134.125640][ T8798] netlink: 'syz.0.1803': attribute type 21 has an invalid length. [ 134.139150][ T8802] FAULT_INJECTION: forcing a failure. [ 134.139150][ T8802] name failslab, interval 1, probability 0, space 0, times 0 [ 134.152065][ T8802] CPU: 0 UID: 0 PID: 8802 Comm: syz.5.1805 Not tainted 6.16.0-rc5-syzkaller-00121-gbc9ff192a6c9 #0 PREEMPT(voluntary) [ 134.152096][ T8802] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 134.152108][ T8802] Call Trace: [ 134.152115][ T8802] [ 134.152123][ T8802] __dump_stack+0x1d/0x30 [ 134.152145][ T8802] dump_stack_lvl+0xe8/0x140 [ 134.152175][ T8802] dump_stack+0x15/0x1b [ 134.152191][ T8802] should_fail_ex+0x265/0x280 [ 134.152251][ T8802] should_failslab+0x8c/0xb0 [ 134.152278][ T8802] __kmalloc_node_track_caller_noprof+0xa4/0x410 [ 134.152378][ T8802] ? security_context_to_sid_core+0x69/0x3b0 [ 134.152402][ T8802] kmemdup_nul+0x36/0xc0 [ 134.152503][ T8802] security_context_to_sid_core+0x69/0x3b0 [ 134.152530][ T8802] ? avc_has_perm_noaudit+0x1b1/0x200 [ 134.152610][ T8802] security_context_to_sid+0x2e/0x40 [ 134.152630][ T8802] selinux_inode_setxattr+0x4af/0x6e0 [ 134.152769][ T8802] ? mntput+0x4b/0x80 [ 134.152793][ T8802] security_inode_setxattr+0x13a/0x1b0 [ 134.152850][ T8802] __vfs_setxattr_locked+0x83/0x1d0 [ 134.152932][ T8802] vfs_setxattr+0x132/0x270 [ 134.153002][ T8802] file_setxattr+0x139/0x1b0 [ 134.153079][ T8802] path_setxattrat+0x290/0x310 [ 134.153126][ T8802] __x64_sys_fsetxattr+0x6b/0x80 [ 134.153151][ T8802] x64_sys_call+0x2f7c/0x2fb0 [ 134.153174][ T8802] do_syscall_64+0xd2/0x200 [ 134.153267][ T8802] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 134.153300][ T8802] ? clear_bhb_loop+0x40/0x90 [ 134.153326][ T8802] ? clear_bhb_loop+0x40/0x90 [ 134.153430][ T8802] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 134.153455][ T8802] RIP: 0033:0x7f2a6833e929 [ 134.153474][ T8802] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 134.153496][ T8802] RSP: 002b:00007f2a669a7038 EFLAGS: 00000246 ORIG_RAX: 00000000000000be [ 134.153515][ T8802] RAX: ffffffffffffffda RBX: 00007f2a68565fa0 RCX: 00007f2a6833e929 [ 134.153527][ T8802] RDX: 00002000000004c0 RSI: 0000200000000480 RDI: 0000000000000006 [ 134.153538][ T8802] RBP: 00007f2a669a7090 R08: 0000000000000000 R09: 0000000000000000 [ 134.153601][ T8802] R10: 000000000000001a R11: 0000000000000246 R12: 0000000000000001 [ 134.153615][ T8802] R13: 0000000000000000 R14: 00007f2a68565fa0 R15: 00007ffd58881028 [ 134.153634][ T8802] [ 134.653462][ T8826] loop6: detected capacity change from 0 to 512 [ 134.681279][ T8826] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 134.693942][ T8826] ext4 filesystem being mounted at /88/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 135.208402][ T8836] program syz.0.1817 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 135.243505][ T8836] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 135.576673][ T8853] Invalid ELF header magic: != ELF [ 135.897492][ T8869] syzkaller0: entered promiscuous mode [ 135.903193][ T8869] syzkaller0: entered allmulticast mode [ 136.119320][ T8876] siw: device registration error -23 [ 136.148995][ T1036] hid-generic 0000:3000000:0000.0008: unknown main item tag 0x4 [ 136.156742][ T1036] hid-generic 0000:3000000:0000.0008: unknown main item tag 0x2 [ 136.180466][ T1036] hid-generic 0000:3000000:0000.0008: unknown main item tag 0x0 [ 136.188577][ T1036] hid-generic 0000:3000000:0000.0008: unknown main item tag 0x0 [ 136.196555][ T1036] hid-generic 0000:3000000:0000.0008: unknown main item tag 0x0 [ 136.204261][ T1036] hid-generic 0000:3000000:0000.0008: unknown main item tag 0x0 [ 136.212039][ T1036] hid-generic 0000:3000000:0000.0008: unknown main item tag 0x0 [ 136.220024][ T1036] hid-generic 0000:3000000:0000.0008: unknown main item tag 0x0 [ 136.227720][ T1036] hid-generic 0000:3000000:0000.0008: unknown main item tag 0x0 [ 136.235432][ T1036] hid-generic 0000:3000000:0000.0008: unknown main item tag 0x0 [ 136.243320][ T1036] hid-generic 0000:3000000:0000.0008: unknown main item tag 0x0 [ 136.251157][ T1036] hid-generic 0000:3000000:0000.0008: unknown main item tag 0x0 [ 136.259008][ T1036] hid-generic 0000:3000000:0000.0008: unknown main item tag 0x0 [ 136.266773][ T1036] hid-generic 0000:3000000:0000.0008: unknown main item tag 0x0 [ 136.274516][ T1036] hid-generic 0000:3000000:0000.0008: unknown main item tag 0x0 [ 136.282216][ T1036] hid-generic 0000:3000000:0000.0008: unknown main item tag 0x0 [ 136.297665][ T8885] netlink: 'syz.2.1833': attribute type 1 has an invalid length. [ 136.350737][ T1036] hid-generic 0000:3000000:0000.0008: hidraw0: HID v0.00 Device [sy] on syz0 [ 136.438378][ T8895] xt_TPROXY: Can be used only with -p tcp or -p udp [ 136.915145][ T8904] __nla_validate_parse: 7 callbacks suppressed [ 136.915160][ T8904] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1841'. [ 136.962043][ T8904] 8021q: adding VLAN 0 to HW filter on device bond1 [ 137.342402][ T3410] hid-generic 0000:3000000:0000.0009: unknown main item tag 0x4 [ 137.350267][ T3410] hid-generic 0000:3000000:0000.0009: unknown main item tag 0x2 [ 137.383397][ T3410] hid-generic 0000:3000000:0000.0009: unknown main item tag 0x0 [ 137.391227][ T3410] hid-generic 0000:3000000:0000.0009: unknown main item tag 0x0 [ 137.398950][ T3410] hid-generic 0000:3000000:0000.0009: unknown main item tag 0x0 [ 137.406880][ T3410] hid-generic 0000:3000000:0000.0009: unknown main item tag 0x0 [ 137.415205][ T3410] hid-generic 0000:3000000:0000.0009: unknown main item tag 0x0 [ 137.422926][ T3410] hid-generic 0000:3000000:0000.0009: unknown main item tag 0x0 [ 137.430669][ T3410] hid-generic 0000:3000000:0000.0009: unknown main item tag 0x0 [ 137.438452][ T3410] hid-generic 0000:3000000:0000.0009: unknown main item tag 0x0 [ 137.446804][ T3410] hid-generic 0000:3000000:0000.0009: unknown main item tag 0x0 [ 137.454521][ T3410] hid-generic 0000:3000000:0000.0009: unknown main item tag 0x0 [ 137.463029][ T3410] hid-generic 0000:3000000:0000.0009: unknown main item tag 0x0 [ 137.471623][ T3410] hid-generic 0000:3000000:0000.0009: unknown main item tag 0x0 [ 137.479483][ T3410] hid-generic 0000:3000000:0000.0009: unknown main item tag 0x0 [ 137.487342][ T3410] hid-generic 0000:3000000:0000.0009: unknown main item tag 0x0 [ 137.525819][ T8921] netlink: 'syz.5.1847': attribute type 1 has an invalid length. [ 137.581740][ T8926] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1849'. [ 137.592870][ T8925] netlink: 68 bytes leftover after parsing attributes in process `syz.0.1850'. [ 137.651433][ T8925] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1850'. [ 137.660467][ T8925] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1850'. [ 137.711804][ T3410] hid-generic 0000:3000000:0000.0009: hidraw0: HID v0.00 Device [sy] on syz0 [ 137.796482][ T8930] loop5: detected capacity change from 0 to 512 [ 137.829277][ T8930] EXT4-fs warning (device loop5): read_mmp_block:115: Error -117 while reading MMP block 8 [ 138.094072][ T8946] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1859'. [ 138.128027][ T8940] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1857'. [ 138.191888][ T8955] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1860'. [ 138.285048][ T29] kauditd_printk_skb: 308 callbacks suppressed [ 138.285065][ T29] audit: type=1326 audit(2000000070.240:5993): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8960 comm="syz.2.1864" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbb57c8e929 code=0x7ffc0000 [ 138.336694][ T8965] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=102 sclass=netlink_tcpdiag_socket pid=8965 comm=syz.0.1865 [ 138.350590][ T29] audit: type=1326 audit(2000000070.270:5994): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8960 comm="syz.2.1864" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fbb57c858e7 code=0x7ffc0000 [ 138.374898][ T29] audit: type=1326 audit(2000000070.270:5995): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8960 comm="syz.2.1864" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fbb57c2ab19 code=0x7ffc0000 [ 138.398352][ T29] audit: type=1326 audit(2000000070.270:5996): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8960 comm="syz.2.1864" exe="/root/syz-executor" sig=0 arch=c000003e syscall=282 compat=0 ip=0x7fbb57c8e929 code=0x7ffc0000 [ 138.422526][ T29] audit: type=1326 audit(2000000070.270:5997): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8960 comm="syz.2.1864" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbb57c8e929 code=0x7ffc0000 [ 138.446041][ T29] audit: type=1326 audit(2000000070.270:5998): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8960 comm="syz.2.1864" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbb57c8e929 code=0x7ffc0000 [ 138.470090][ T29] audit: type=1326 audit(2000000070.270:5999): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8960 comm="syz.2.1864" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fbb57c8e929 code=0x7ffc0000 [ 138.494385][ T29] audit: type=1326 audit(2000000070.270:6000): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8960 comm="syz.2.1864" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fbb57c858e7 code=0x7ffc0000 [ 138.517804][ T29] audit: type=1326 audit(2000000070.270:6001): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8960 comm="syz.2.1864" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fbb57c2ab19 code=0x7ffc0000 [ 138.541884][ T29] audit: type=1326 audit(2000000070.270:6002): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8960 comm="syz.2.1864" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbb57c8e929 code=0x7ffc0000 [ 138.683170][ T7553] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 138.745700][ T8977] netlink: 'syz.6.1868': attribute type 21 has an invalid length. [ 138.753647][ T8977] netlink: 132 bytes leftover after parsing attributes in process `syz.6.1868'. [ 139.129783][ T8988] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 139.138543][ T8988] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 139.148455][ T8988] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1871'. [ 139.227574][ T9001] lo speed is unknown, defaulting to 1000 [ 139.253842][ T9005] loop5: detected capacity change from 0 to 256 [ 139.289494][ T9005] FAT-fs (loop5): Directory bread(block 64) failed [ 139.297023][ T9005] FAT-fs (loop5): Directory bread(block 65) failed [ 139.304763][ T9005] FAT-fs (loop5): Directory bread(block 66) failed [ 139.311949][ T9005] FAT-fs (loop5): Directory bread(block 67) failed [ 139.318842][ T9005] FAT-fs (loop5): Directory bread(block 68) failed [ 139.327073][ T9005] FAT-fs (loop5): Directory bread(block 69) failed [ 139.333935][ T9005] FAT-fs (loop5): Directory bread(block 70) failed [ 139.340677][ T9005] FAT-fs (loop5): Directory bread(block 71) failed [ 139.347686][ T9005] FAT-fs (loop5): Directory bread(block 72) failed [ 139.355240][ T9005] FAT-fs (loop5): Directory bread(block 73) failed [ 139.693412][ T9029] netlink: 'syz.4.1883': attribute type 1 has an invalid length. [ 140.123086][ T3410] hid-generic 0000:3000000:0000.000A: unknown main item tag 0x4 [ 140.131579][ T3410] hid-generic 0000:3000000:0000.000A: unknown main item tag 0x2 [ 140.154386][ T3410] hid-generic 0000:3000000:0000.000A: unknown main item tag 0x0 [ 140.162915][ T3410] hid-generic 0000:3000000:0000.000A: unknown main item tag 0x0 [ 140.170754][ T3410] hid-generic 0000:3000000:0000.000A: unknown main item tag 0x0 [ 140.178433][ T3410] hid-generic 0000:3000000:0000.000A: unknown main item tag 0x0 [ 140.186432][ T3410] hid-generic 0000:3000000:0000.000A: unknown main item tag 0x0 [ 140.194897][ T3410] hid-generic 0000:3000000:0000.000A: unknown main item tag 0x0 [ 140.202690][ T3410] hid-generic 0000:3000000:0000.000A: unknown main item tag 0x0 [ 140.210547][ T3410] hid-generic 0000:3000000:0000.000A: unknown main item tag 0x0 [ 140.218485][ T3410] hid-generic 0000:3000000:0000.000A: unknown main item tag 0x0 [ 140.226953][ T3410] hid-generic 0000:3000000:0000.000A: unknown main item tag 0x0 [ 140.234676][ T3410] hid-generic 0000:3000000:0000.000A: unknown main item tag 0x0 [ 140.242392][ T3410] hid-generic 0000:3000000:0000.000A: unknown main item tag 0x0 [ 140.250087][ T3410] hid-generic 0000:3000000:0000.000A: unknown main item tag 0x0 [ 140.258522][ T3410] hid-generic 0000:3000000:0000.000A: unknown main item tag 0x0 [ 140.268614][ T3410] hid-generic 0000:3000000:0000.000A: hidraw0: HID v0.00 Device [sy] on syz0 [ 140.332513][ T9058] netlink: 'syz.6.1894': attribute type 1 has an invalid length. [ 140.366734][ T9071] bridge0: port 3(syz_tun) entered blocking state [ 140.374148][ T9071] bridge0: port 3(syz_tun) entered disabled state [ 140.382313][ T9071] syz_tun: entered promiscuous mode [ 140.422726][ T9077] netdevsim netdevsim6 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 140.508170][ T9086] FAULT_INJECTION: forcing a failure. [ 140.508170][ T9086] name failslab, interval 1, probability 0, space 0, times 0 [ 140.520978][ T9086] CPU: 0 UID: 0 PID: 9086 Comm: syz.0.1901 Not tainted 6.16.0-rc5-syzkaller-00121-gbc9ff192a6c9 #0 PREEMPT(voluntary) [ 140.521075][ T9086] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 140.521090][ T9086] Call Trace: [ 140.521098][ T9086] [ 140.521108][ T9086] __dump_stack+0x1d/0x30 [ 140.521134][ T9086] dump_stack_lvl+0xe8/0x140 [ 140.521155][ T9086] dump_stack+0x15/0x1b [ 140.521238][ T9086] should_fail_ex+0x265/0x280 [ 140.521271][ T9086] should_failslab+0x8c/0xb0 [ 140.521374][ T9086] __kmalloc_node_track_caller_noprof+0xa4/0x410 [ 140.521468][ T9086] ? gnet_stats_copy_app+0x43/0x160 [ 140.521501][ T9086] kmemdup_noprof+0x2b/0x70 [ 140.521598][ T9086] gnet_stats_copy_app+0x43/0x160 [ 140.521620][ T9086] hfsc_dump_class_stats+0x175/0x1c0 [ 140.521657][ T9086] tc_fill_tclass+0x381/0x4b0 [ 140.521808][ T9086] tc_ctl_tclass+0x8b5/0xc70 [ 140.521862][ T9086] ? __pfx_tc_ctl_tclass+0x10/0x10 [ 140.521894][ T9086] rtnetlink_rcv_msg+0x65a/0x6d0 [ 140.521921][ T9086] ? avc_has_perm_noaudit+0x1b1/0x200 [ 140.521957][ T9086] netlink_rcv_skb+0x123/0x220 [ 140.522109][ T9086] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 140.522148][ T9086] rtnetlink_rcv+0x1c/0x30 [ 140.522171][ T9086] netlink_unicast+0x5a5/0x680 [ 140.522202][ T9086] netlink_sendmsg+0x58b/0x6b0 [ 140.522222][ T9086] ? __pfx_netlink_sendmsg+0x10/0x10 [ 140.522276][ T9086] __sock_sendmsg+0x142/0x180 [ 140.522306][ T9086] ____sys_sendmsg+0x31e/0x4e0 [ 140.522365][ T9086] ___sys_sendmsg+0x17b/0x1d0 [ 140.522428][ T9086] __x64_sys_sendmsg+0xd4/0x160 [ 140.522475][ T9086] x64_sys_call+0x2999/0x2fb0 [ 140.522512][ T9086] do_syscall_64+0xd2/0x200 [ 140.522531][ T9086] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 140.522556][ T9086] ? clear_bhb_loop+0x40/0x90 [ 140.522576][ T9086] ? clear_bhb_loop+0x40/0x90 [ 140.522601][ T9086] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 140.522635][ T9086] RIP: 0033:0x7fc50e0de929 [ 140.522655][ T9086] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 140.522748][ T9086] RSP: 002b:00007fc50c747038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 140.522775][ T9086] RAX: ffffffffffffffda RBX: 00007fc50e305fa0 RCX: 00007fc50e0de929 [ 140.522791][ T9086] RDX: 00000000000048c0 RSI: 0000200000000440 RDI: 0000000000000006 [ 140.522807][ T9086] RBP: 00007fc50c747090 R08: 0000000000000000 R09: 0000000000000000 [ 140.522822][ T9086] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 140.522837][ T9086] R13: 0000000000000000 R14: 00007fc50e305fa0 R15: 00007ffc501bdb38 [ 140.522869][ T9086] [ 140.524147][ T9086] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 140.683355][ T9096] netlink: 'syz.2.1906': attribute type 21 has an invalid length. [ 140.690745][ T9086] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 140.695843][ T9077] netdevsim netdevsim6 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 140.923225][ T9077] netdevsim netdevsim6 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 140.983114][ T9077] netdevsim netdevsim6 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 141.026338][ T9109] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2566 sclass=netlink_route_socket pid=9109 comm=syz.4.1910 [ 141.039145][ T9109] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2578 sclass=netlink_route_socket pid=9109 comm=syz.4.1910 [ 141.051856][ T9109] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2560 sclass=netlink_route_socket pid=9109 comm=syz.4.1910 [ 141.064753][ T9109] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2572 sclass=netlink_route_socket pid=9109 comm=syz.4.1910 [ 141.077671][ T9109] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2562 sclass=netlink_route_socket pid=9109 comm=syz.4.1910 [ 141.090550][ T9109] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2580 sclass=netlink_route_socket pid=9109 comm=syz.4.1910 [ 141.103362][ T9109] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2582 sclass=netlink_route_socket pid=9109 comm=syz.4.1910 [ 141.130934][ T9077] netdevsim netdevsim6 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 141.144577][ T9077] netdevsim netdevsim6 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 141.144872][ T9116] xt_CT: You must specify a L4 protocol and not use inversions on it [ 141.173615][ T9077] netdevsim netdevsim6 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 141.183255][ T9117] loop5: detected capacity change from 0 to 1024 [ 141.186892][ T9077] netdevsim netdevsim6 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 141.226792][ T9117] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 141.261565][ T3410] hid-generic 0000:3000000:0000.000B: unknown main item tag 0x4 [ 141.269314][ T3410] hid-generic 0000:3000000:0000.000B: unknown main item tag 0x2 [ 141.282361][ T3410] hid-generic 0000:3000000:0000.000B: unknown main item tag 0x0 [ 141.290087][ T3410] hid-generic 0000:3000000:0000.000B: unknown main item tag 0x0 [ 141.297854][ T3410] hid-generic 0000:3000000:0000.000B: unknown main item tag 0x0 [ 141.306436][ T3410] hid-generic 0000:3000000:0000.000B: unknown main item tag 0x0 [ 141.314210][ T3410] hid-generic 0000:3000000:0000.000B: unknown main item tag 0x0 [ 141.321971][ T3410] hid-generic 0000:3000000:0000.000B: unknown main item tag 0x0 [ 141.329801][ T3410] hid-generic 0000:3000000:0000.000B: unknown main item tag 0x0 [ 141.338201][ T3410] hid-generic 0000:3000000:0000.000B: unknown main item tag 0x0 [ 141.346005][ T3410] hid-generic 0000:3000000:0000.000B: unknown main item tag 0x0 [ 141.353797][ T3410] hid-generic 0000:3000000:0000.000B: unknown main item tag 0x0 [ 141.362291][ T3410] hid-generic 0000:3000000:0000.000B: unknown main item tag 0x0 [ 141.370098][ T3410] hid-generic 0000:3000000:0000.000B: unknown main item tag 0x0 [ 141.378009][ T3410] hid-generic 0000:3000000:0000.000B: unknown main item tag 0x0 [ 141.385745][ T3410] hid-generic 0000:3000000:0000.000B: unknown main item tag 0x0 [ 141.402469][ T3410] hid-generic 0000:3000000:0000.000B: hidraw0: HID v0.00 Device [sy] on syz0 [ 141.420100][ T9129] netlink: 'syz.6.1918': attribute type 1 has an invalid length. [ 141.428943][ T9132] netlink: 'syz.2.1919': attribute type 21 has an invalid length. [ 141.613176][ T9160] syz_tun: entered allmulticast mode [ 141.619864][ T9157] syz_tun: left allmulticast mode [ 141.689216][ T9163] SET target dimension over the limit! [ 141.928986][ T9169] __nla_validate_parse: 11 callbacks suppressed [ 141.929020][ T9169] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1932'. [ 142.003905][ T7360] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 142.059173][ T9176] netlink: 'syz.2.1936': attribute type 21 has an invalid length. [ 142.073137][ T9177] loop5: detected capacity change from 0 to 128 [ 142.075961][ T9176] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1936'. [ 142.154807][ T9182] tipc: New replicast peer: 255.255.255.83 [ 142.160854][ T9182] tipc: Enabled bearer , priority 10 [ 142.234141][ T9185] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1938'. [ 142.530584][ T9190] syz_tun: entered allmulticast mode [ 142.541992][ T9189] syz_tun: left allmulticast mode [ 142.574195][ T9192] netlink: 'syz.2.1941': attribute type 1 has an invalid length. [ 142.602964][ T9192] 8021q: adding VLAN 0 to HW filter on device bond3 [ 142.621071][ T9192] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 142.647470][ T9192] lo speed is unknown, defaulting to 1000 [ 142.702512][ T9199] : renamed from bond0 (while UP) [ 142.959205][ T9206] SELinux: syz.5.1946 (9206) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 143.017942][ T9209] $Hÿ: renamed from  [ 143.028013][ T9214] netlink: 'syz.5.1948': attribute type 21 has an invalid length. [ 143.038099][ T9209] $Hÿ: entered promiscuous mode [ 143.043239][ T9209] bond_slave_0: entered promiscuous mode [ 143.049200][ T9209] bond_slave_1: entered promiscuous mode [ 143.055594][ T9214] netlink: 132 bytes leftover after parsing attributes in process `syz.5.1948'. [ 143.167253][ T9231] bridge: RTM_NEWNEIGH with invalid ether address [ 143.192641][ T9231] netlink: 132 bytes leftover after parsing attributes in process `syz.5.1954'. [ 143.196482][ T9234] serio: Serial port ptm0 [ 143.226031][ T9235] lo speed is unknown, defaulting to 1000 [ 143.280640][ T3410] tipc: Node number set to 1228859672 [ 143.321020][ T9242] netlink: 132 bytes leftover after parsing attributes in process `syz.4.1959'. [ 143.387732][ T9252] syz_tun: entered allmulticast mode [ 143.388415][ T9251] syz_tun: left allmulticast mode [ 143.428324][ T9256] xt_recent: hitcount (16777216) is larger than allowed maximum (65535) [ 143.514249][ T29] kauditd_printk_skb: 333 callbacks suppressed [ 143.514267][ T29] audit: type=1400 audit(2000000075.470:6336): avc: denied { ioctl } for pid=9261 comm="syz.4.1968" path="socket:[24071]" dev="sockfs" ino=24071 ioctlcmd=0x89e0 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 143.582685][ T29] audit: type=1326 audit(2000000075.470:6337): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9261 comm="syz.4.1968" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdf9b89e929 code=0x7ffc0000 [ 143.606498][ T29] audit: type=1326 audit(2000000075.470:6338): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9261 comm="syz.4.1968" exe="/root/syz-executor" sig=0 arch=c000003e syscall=213 compat=0 ip=0x7fdf9b89e929 code=0x7ffc0000 [ 143.630285][ T9273] IPv6: NLM_F_CREATE should be specified when creating new route [ 143.638821][ T29] audit: type=1326 audit(2000000075.470:6339): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9261 comm="syz.4.1968" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdf9b89e929 code=0x7ffc0000 [ 143.662469][ T29] audit: type=1326 audit(2000000075.470:6340): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9261 comm="syz.4.1968" exe="/root/syz-executor" sig=0 arch=c000003e syscall=90 compat=0 ip=0x7fdf9b89e929 code=0x7ffc0000 [ 143.686990][ T29] audit: type=1326 audit(2000000075.470:6341): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9261 comm="syz.4.1968" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdf9b89e929 code=0x7ffc0000 [ 143.710788][ T29] audit: type=1326 audit(2000000075.470:6342): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9261 comm="syz.4.1968" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fdf9b89e929 code=0x7ffc0000 [ 143.734376][ T29] audit: type=1326 audit(2000000075.470:6343): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9261 comm="syz.4.1968" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdf9b89e929 code=0x7ffc0000 [ 143.739738][ T9277] x_tables: ip6_tables: mh match: only valid for protocol 135 [ 143.758161][ T29] audit: type=1326 audit(2000000075.470:6344): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9261 comm="syz.4.1968" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fdf9b89e929 code=0x7ffc0000 [ 143.758285][ T29] audit: type=1326 audit(2000000075.470:6345): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9261 comm="syz.4.1968" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdf9b89e929 code=0x7ffc0000 [ 143.816229][ T9280] netlink: 2036 bytes leftover after parsing attributes in process `syz.5.1973'. [ 143.825605][ T9280] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1973'. [ 143.848738][ T9278] lo speed is unknown, defaulting to 1000 [ 143.857952][ T9284] syz_tun: entered allmulticast mode [ 143.866888][ T9279] syz_tun: left allmulticast mode [ 143.889074][ T9285] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1974'. [ 144.154153][ T9300] lo speed is unknown, defaulting to 1000 [ 145.091864][ T9308] loop5: detected capacity change from 0 to 164 [ 145.117122][ T9308] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 145.144542][ T9308] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 145.166759][ T9308] Symlink component flag not implemented [ 145.172639][ T9308] Symlink component flag not implemented [ 145.196633][ T9308] Symlink component flag not implemented (7) [ 145.202957][ T9308] Symlink component flag not implemented (116) [ 145.259035][ T9317] syz_tun: entered allmulticast mode [ 145.281428][ T9316] syz_tun: left allmulticast mode [ 145.366394][ T9331] netlink: 'syz.4.1994': attribute type 21 has an invalid length. [ 145.380663][ T9331] netlink: 132 bytes leftover after parsing attributes in process `syz.4.1994'. [ 145.389787][ T9331] netlink: 'syz.4.1994': attribute type 1 has an invalid length. [ 145.426218][ T9333] loop6: detected capacity change from 0 to 512 [ 145.442551][ T9333] EXT4-fs (loop6): too many log groups per flexible block group [ 145.450371][ T9333] EXT4-fs (loop6): failed to initialize mballoc (-12) [ 145.464266][ T9333] EXT4-fs (loop6): mount failed [ 145.577451][ T9337] FAULT_INJECTION: forcing a failure. [ 145.577451][ T9337] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 145.590785][ T9337] CPU: 0 UID: 0 PID: 9337 Comm: syz.5.1997 Not tainted 6.16.0-rc5-syzkaller-00121-gbc9ff192a6c9 #0 PREEMPT(voluntary) [ 145.590814][ T9337] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 145.590826][ T9337] Call Trace: [ 145.590833][ T9337] [ 145.590843][ T9337] __dump_stack+0x1d/0x30 [ 145.590897][ T9337] dump_stack_lvl+0xe8/0x140 [ 145.590916][ T9337] dump_stack+0x15/0x1b [ 145.590937][ T9337] should_fail_ex+0x265/0x280 [ 145.590995][ T9337] should_fail+0xb/0x20 [ 145.591027][ T9337] should_fail_usercopy+0x1a/0x20 [ 145.591067][ T9337] _copy_to_iter+0xcf/0xe30 [ 145.591150][ T9337] ? _raw_spin_unlock+0x14/0x50 [ 145.591259][ T9337] ? finish_task_switch+0xb6/0x2b0 [ 145.591293][ T9337] copy_page_to_iter+0x18f/0x2d0 [ 145.591333][ T9337] sk_msg_recvmsg+0x1e7/0x8c0 [ 145.591371][ T9337] ? __list_del_entry_valid_or_report+0x65/0x130 [ 145.591397][ T9337] unix_bpf_recvmsg+0x272/0x730 [ 145.591448][ T9337] ? __pfx_woken_wake_function+0x10/0x10 [ 145.591473][ T9337] unix_dgram_recvmsg+0x67/0x90 [ 145.591502][ T9337] ? __pfx_unix_dgram_recvmsg+0x10/0x10 [ 145.591531][ T9337] sock_recvmsg+0x139/0x170 [ 145.591574][ T9337] ____sys_recvmsg+0xf5/0x280 [ 145.591626][ T9337] ___sys_recvmsg+0x11f/0x370 [ 145.591672][ T9337] __x64_sys_recvmsg+0xd1/0x160 [ 145.591735][ T9337] x64_sys_call+0xf19/0x2fb0 [ 145.591758][ T9337] do_syscall_64+0xd2/0x200 [ 145.591777][ T9337] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 145.591818][ T9337] ? clear_bhb_loop+0x40/0x90 [ 145.591849][ T9337] ? clear_bhb_loop+0x40/0x90 [ 145.591908][ T9337] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 145.591956][ T9337] RIP: 0033:0x7f2a6833e929 [ 145.591974][ T9337] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 145.591994][ T9337] RSP: 002b:00007f2a669a7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002f [ 145.592015][ T9337] RAX: ffffffffffffffda RBX: 00007f2a68565fa0 RCX: 00007f2a6833e929 [ 145.592028][ T9337] RDX: 0000000000000000 RSI: 00002000000004c0 RDI: 0000000000000003 [ 145.592041][ T9337] RBP: 00007f2a669a7090 R08: 0000000000000000 R09: 0000000000000000 [ 145.592055][ T9337] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 145.592133][ T9337] R13: 0000000000000000 R14: 00007f2a68565fa0 R15: 00007ffd58881028 [ 145.592155][ T9337] [ 145.827078][ T9347] loop6: detected capacity change from 0 to 2048 [ 145.883147][ T9351] SET target dimension over the limit! [ 145.899736][ T9347] EXT4-fs (loop6): failed to initialize system zone (-117) [ 145.907121][ T9347] EXT4-fs (loop6): mount failed [ 145.929246][ T9353] SET target dimension over the limit! [ 146.775216][ T9393] loop6: detected capacity change from 0 to 512 [ 146.816237][ T9393] EXT4-fs error (device loop6): ext4_orphan_get:1419: comm syz.6.2016: bad orphan inode 11 [ 146.869545][ T9393] ext4_test_bit(bit=10, block=4) = 1 [ 146.875811][ T9393] is_bad_inode(inode)=0 [ 146.880020][ T9393] NEXT_ORPHAN(inode)=2080374784 [ 146.884979][ T9393] max_ino=32 [ 146.888194][ T9393] i_nlink=0 [ 146.908582][ T9398] netlink: 'syz.0.2017': attribute type 30 has an invalid length. [ 146.937850][ T9398] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 146.946304][ T9398] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 146.954635][ T9398] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 146.963504][ T9398] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 146.994865][ T9393] EXT4-fs (loop6): 1 truncate cleaned up [ 147.005178][ T9393] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 147.041347][ T9398] __nla_validate_parse: 2 callbacks suppressed [ 147.041362][ T9398] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2017'. [ 147.057175][ T9398] netlink: 'syz.0.2017': attribute type 30 has an invalid length. [ 147.137649][ T7553] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 147.201467][ T9406] dummy0: entered promiscuous mode [ 147.211728][ T9410] loop5: detected capacity change from 0 to 128 [ 147.212797][ T9406] dummy0: left promiscuous mode [ 147.383481][ T9419] IPv6: NLM_F_CREATE should be specified when creating new route [ 147.415566][ T9419] loop6: detected capacity change from 0 to 512 [ 147.431992][ T9419] EXT4-fs (loop6): mounting ext2 file system using the ext4 subsystem [ 147.456049][ T9419] EXT4-fs (loop6): orphan cleanup on readonly fs [ 147.480928][ T9419] EXT4-fs error (device loop6): ext4_orphan_get:1419: comm syz.6.2026: bad orphan inode 15 [ 147.524949][ T9419] ext4_test_bit(bit=14, block=18) = 1 [ 147.530370][ T9419] is_bad_inode(inode)=0 [ 147.535398][ T9419] NEXT_ORPHAN(inode)=1023 [ 147.539761][ T9419] max_ino=32 [ 147.543266][ T9419] i_nlink=0 [ 147.598185][ T9419] EXT4-fs error (device loop6): ext4_xattr_delete_inode:2962: inode #15: comm syz.6.2026: corrupted xattr block 19: e_value size too large [ 147.622742][ T2959] hid-generic 0000:3000000:0000.000C: unknown main item tag 0x4 [ 147.630674][ T2959] hid-generic 0000:3000000:0000.000C: unknown main item tag 0x2 [ 147.678282][ T9427] Cannot find del_set index 0 as target [ 147.738870][ T9429] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2028'. [ 147.775958][ T9430] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=9430 comm=syz.4.2029 [ 147.862090][ T9428] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2029'. [ 148.584879][ T9419] EXT4-fs warning (device loop6): ext4_evict_inode:274: xattr delete (err -117) [ 148.589644][ T2959] hid-generic 0000:3000000:0000.000C: unknown main item tag 0x0 [ 148.601904][ T2959] hid-generic 0000:3000000:0000.000C: unknown main item tag 0x0 [ 148.609571][ T2959] hid-generic 0000:3000000:0000.000C: unknown main item tag 0x0 [ 148.615048][ T9419] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 148.618018][ T2959] hid-generic 0000:3000000:0000.000C: unknown main item tag 0x0 [ 148.636894][ T2959] hid-generic 0000:3000000:0000.000C: unknown main item tag 0x0 [ 148.645387][ T2959] hid-generic 0000:3000000:0000.000C: unknown main item tag 0x0 [ 148.653129][ T2959] hid-generic 0000:3000000:0000.000C: unknown main item tag 0x0 [ 148.660816][ T2959] hid-generic 0000:3000000:0000.000C: unknown main item tag 0x0 [ 148.668525][ T2959] hid-generic 0000:3000000:0000.000C: unknown main item tag 0x0 [ 148.676978][ T2959] hid-generic 0000:3000000:0000.000C: unknown main item tag 0x0 [ 148.684680][ T2959] hid-generic 0000:3000000:0000.000C: unknown main item tag 0x0 [ 148.692441][ T2959] hid-generic 0000:3000000:0000.000C: unknown main item tag 0x0 [ 148.700228][ T2959] hid-generic 0000:3000000:0000.000C: unknown main item tag 0x0 [ 148.708682][ T2959] hid-generic 0000:3000000:0000.000C: unknown main item tag 0x0 [ 148.717072][ T7553] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 148.745334][ T9453] infiniband srz1: RDMA CMA: cma_listen_on_dev, error -98 [ 148.807459][ T29] kauditd_printk_skb: 2736 callbacks suppressed [ 148.807473][ T29] audit: type=1326 audit(2000000080.760:9082): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9452 comm="syz.2.2040" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbb57c8e929 code=0x7ffc0000 [ 148.851956][ T29] audit: type=1326 audit(2000000080.800:9083): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9452 comm="syz.2.2040" exe="/root/syz-executor" sig=0 arch=c000003e syscall=186 compat=0 ip=0x7fbb57c8e929 code=0x7ffc0000 [ 148.875481][ T29] audit: type=1326 audit(2000000080.800:9084): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9452 comm="syz.2.2040" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbb57c8e929 code=0x7ffc0000 [ 148.899647][ T29] audit: type=1326 audit(2000000080.800:9085): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9452 comm="syz.2.2040" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbb57c8e929 code=0x7ffc0000 [ 148.923262][ T29] audit: type=1326 audit(2000000080.800:9086): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9452 comm="syz.2.2040" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fbb57c858e7 code=0x7ffc0000 [ 148.923301][ T29] audit: type=1326 audit(2000000080.800:9087): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9452 comm="syz.2.2040" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fbb57c2ab19 code=0x7ffc0000 [ 148.923331][ T29] audit: type=1326 audit(2000000080.800:9088): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9452 comm="syz.2.2040" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbb57c8e929 code=0x7ffc0000 [ 148.978541][ T9456] loop6: detected capacity change from 0 to 128 [ 148.995122][ T2959] hid-generic 0000:3000000:0000.000C: hidraw0: HID v0.00 Device [sy] on syz0 [ 149.012340][ T29] audit: type=1326 audit(2000000080.860:9089): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9452 comm="syz.2.2040" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fbb57c858e7 code=0x7ffc0000 [ 149.036599][ T29] audit: type=1326 audit(2000000080.860:9090): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9452 comm="syz.2.2040" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fbb57c2ab19 code=0x7ffc0000 [ 149.059966][ T29] audit: type=1326 audit(2000000080.860:9091): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9452 comm="syz.2.2040" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fbb57c8e929 code=0x7ffc0000 [ 149.122978][ T9458] netlink: 'syz.4.2042': attribute type 2 has an invalid length. [ 149.130768][ T9458] netlink: 48 bytes leftover after parsing attributes in process `syz.4.2042'. [ 149.156067][ T9466] netlink: 'syz.0.2043': attribute type 11 has an invalid length. [ 149.164104][ T9466] netlink: 132 bytes leftover after parsing attributes in process `syz.0.2043'. [ 149.197637][ T9471] FAULT_INJECTION: forcing a failure. [ 149.197637][ T9471] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 149.211530][ T9471] CPU: 1 UID: 0 PID: 9471 Comm: syz.5.2045 Not tainted 6.16.0-rc5-syzkaller-00121-gbc9ff192a6c9 #0 PREEMPT(voluntary) [ 149.211565][ T9471] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 149.211646][ T9471] Call Trace: [ 149.211653][ T9471] [ 149.211661][ T9471] __dump_stack+0x1d/0x30 [ 149.211684][ T9471] dump_stack_lvl+0xe8/0x140 [ 149.211708][ T9471] dump_stack+0x15/0x1b [ 149.211727][ T9471] should_fail_ex+0x265/0x280 [ 149.211757][ T9471] should_fail+0xb/0x20 [ 149.211840][ T9471] should_fail_usercopy+0x1a/0x20 [ 149.211874][ T9471] _copy_from_iter+0xcf/0xe40 [ 149.211917][ T9471] ? __build_skb_around+0x1a0/0x200 [ 149.211951][ T9471] ? __alloc_skb+0x223/0x320 [ 149.212057][ T9471] netlink_sendmsg+0x471/0x6b0 [ 149.212084][ T9471] ? __pfx_netlink_sendmsg+0x10/0x10 [ 149.212119][ T9471] __sock_sendmsg+0x142/0x180 [ 149.212142][ T9471] ____sys_sendmsg+0x31e/0x4e0 [ 149.212186][ T9471] ___sys_sendmsg+0x17b/0x1d0 [ 149.212303][ T9471] __x64_sys_sendmsg+0xd4/0x160 [ 149.212430][ T9471] x64_sys_call+0x2999/0x2fb0 [ 149.212457][ T9471] do_syscall_64+0xd2/0x200 [ 149.212501][ T9471] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 149.212612][ T9471] ? clear_bhb_loop+0x40/0x90 [ 149.212638][ T9471] ? clear_bhb_loop+0x40/0x90 [ 149.212666][ T9471] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 149.212692][ T9471] RIP: 0033:0x7f2a6833e929 [ 149.212708][ T9471] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 149.212749][ T9471] RSP: 002b:00007f2a669a7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 149.212800][ T9471] RAX: ffffffffffffffda RBX: 00007f2a68565fa0 RCX: 00007f2a6833e929 [ 149.212883][ T9471] RDX: 0000000020008844 RSI: 00002000000000c0 RDI: 0000000000000003 [ 149.212897][ T9471] RBP: 00007f2a669a7090 R08: 0000000000000000 R09: 0000000000000000 [ 149.212908][ T9471] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 149.212922][ T9471] R13: 0000000000000000 R14: 00007f2a68565fa0 R15: 00007ffd58881028 [ 149.212947][ T9471] [ 149.326263][ T9474] Cannot find del_set index 0 as target [ 149.478996][ T9485] netlink: 'syz.5.2049': attribute type 21 has an invalid length. [ 149.487540][ T9485] netlink: 132 bytes leftover after parsing attributes in process `syz.5.2049'. [ 149.603023][ T9495] netlink: 'syz.2.2052': attribute type 1 has an invalid length. [ 149.619234][ T9495] 8021q: adding VLAN 0 to HW filter on device bond4 [ 149.643519][ T9495] 8021q: adding VLAN 0 to HW filter on device bond4 [ 149.652175][ T9495] bond4: (slave vxcan3): The slave device specified does not support setting the MAC address [ 149.665009][ T9495] bond4: (slave vxcan3): Error -95 calling set_mac_address [ 149.692308][ T9507] gretap0: entered promiscuous mode [ 149.699824][ T9507] bond4: (slave gretap0): making interface the new active one [ 149.707889][ T9507] bond4: (slave gretap0): Enslaving as an active interface with an up link [ 149.734154][ T9495] bond4: (slave vlan0): the slave hw address is in use by the bond; giving it the hw address of gretap0 [ 149.770552][ T9514] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2055'. [ 149.780714][ T9514] netlink: 44 bytes leftover after parsing attributes in process `syz.4.2055'. [ 149.844502][ T9516] netlink: 'syz.6.2057': attribute type 1 has an invalid length. [ 149.860025][ T9516] 8021q: adding VLAN 0 to HW filter on device bond0 [ 149.888663][ T9516] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 149.916103][ T9516] lo speed is unknown, defaulting to 1000 [ 150.329449][ T9562] netlink: 'syz.0.2073': attribute type 13 has an invalid length. [ 150.350528][ T9562] netdevsim netdevsim0 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 150.359325][ T9562] netdevsim netdevsim0 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 150.367830][ T9562] netdevsim netdevsim0 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 150.376277][ T9562] netdevsim netdevsim0 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 150.416375][ T9564] bridge: RTM_NEWNEIGH with invalid ether address [ 150.429654][ T9564] netlink: 132 bytes leftover after parsing attributes in process `syz.0.2074'. [ 150.462576][ T9567] netlink: 16 bytes leftover after parsing attributes in process `syz.5.2076'. [ 150.826069][ T9585] syz_tun: entered allmulticast mode [ 150.866368][ T9589] block device autoloading is deprecated and will be removed. [ 150.875265][ T9587] loop5: detected capacity change from 0 to 2048 [ 150.905194][ T9592] netlink: 'syz.2.2081': attribute type 10 has an invalid length. [ 150.924888][ T9587] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 150.997812][ T7360] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 151.061154][ T3478] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0 [ 151.069413][ T3478] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0 [ 151.087025][ T3478] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0 [ 151.094570][ T3478] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0 [ 151.102083][ T3478] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0 [ 151.109532][ T3478] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0 [ 151.116966][ T3478] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0 [ 151.124535][ T3478] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0 [ 151.131988][ T3478] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0 [ 151.139404][ T3478] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0 [ 151.146859][ T3478] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0 [ 151.154747][ T3478] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0 [ 151.195672][ T9608] lo speed is unknown, defaulting to 1000 [ 151.218876][ T3478] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0 [ 151.226454][ T3478] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0 [ 151.233889][ T3478] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0 [ 151.241317][ T3478] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0 [ 151.248739][ T3478] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0 [ 151.256252][ T3478] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0 [ 151.263751][ T3478] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0 [ 151.271194][ T3478] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0 [ 151.278653][ T3478] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0 [ 151.286079][ T3478] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0 [ 151.293514][ T3478] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0 [ 151.300979][ T3478] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0 [ 151.308388][ T3478] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0 [ 151.315806][ T3478] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0 [ 151.323308][ T3478] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0 [ 151.341678][ T3478] hid-generic 0000:0000:0000.000D: hidraw0: HID v0.00 Device [syz0] on syz1 [ 151.574322][ T9629] loop5: detected capacity change from 0 to 512 [ 151.661691][ T9584] syz_tun: left allmulticast mode [ 151.738688][ T9632] SELinux: security_context_str_to_sid (Ð-šXܘ7.H\¹ÿ %ºu@) failed with errno=-22 [ 151.996912][ T9642] lo speed is unknown, defaulting to 1000 [ 152.572825][ T9650] netlink: 'syz.5.2101': attribute type 21 has an invalid length. [ 152.613848][ T9650] __nla_validate_parse: 10 callbacks suppressed [ 152.613927][ T9650] netlink: 132 bytes leftover after parsing attributes in process `syz.5.2101'. [ 152.696839][ T9659] xt_SECMARK: invalid security context 'system_u:object_r:dbusd_etc_t:s0' [ 152.827883][ T9666] netlink: 104 bytes leftover after parsing attributes in process `syz.4.2106'. [ 152.854601][ T9670] SELinux: policydb magic number 0x18 does not match expected magic number 0xf97cff8c [ 152.865129][ T9670] SELinux: failed to load policy [ 152.873908][ T9670] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2108'. [ 152.875512][ T9669] netlink: 'syz.6.2109': attribute type 3 has an invalid length. [ 152.891427][ T9670] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2108'. [ 152.895137][ T9669] netlink: 'syz.6.2109': attribute type 3 has an invalid length. [ 152.985278][ T9680] 9pnet: p9_errstr2errno: server reported unknown error [ 153.094341][ T9691] netlink: 'syz.6.2115': attribute type 4 has an invalid length. [ 153.255730][ T9701] loop5: detected capacity change from 0 to 512 [ 153.266774][ T9701] EXT4-fs error (device loop5): ext4_orphan_get:1393: inode #15: comm syz.5.2117: iget: bad extended attribute block 1 [ 153.267000][ T9701] EXT4-fs error (device loop5): ext4_orphan_get:1398: comm syz.5.2117: couldn't read orphan inode 15 (err -117) [ 153.267689][ T9701] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 153.295908][ T9701] EXT4-fs error (device loop5): ext4_map_blocks:780: inode #2: block 13: comm syz.5.2117: lblock 0 mapped to illegal pblock 13 (length 1) [ 153.296301][ T9701] EXT4-fs error (device loop5): ext4_map_blocks:780: inode #2: block 13: comm syz.5.2117: lblock 0 mapped to illegal pblock 13 (length 1) [ 153.296609][ T9701] EXT4-fs error (device loop5): ext4_map_blocks:780: inode #2: block 13: comm syz.5.2117: lblock 0 mapped to illegal pblock 13 (length 1) [ 153.297306][ T9701] siw: device registration error -23 [ 153.328001][ T7360] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 153.406736][ T9712] netlink: 'syz.4.2124': attribute type 10 has an invalid length. [ 153.418313][ T9716] loop5: detected capacity change from 0 to 1024 [ 153.469420][ T9716] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 153.496982][ T9723] netlink: 'syz.4.2126': attribute type 21 has an invalid length. [ 153.497019][ T9723] netlink: 132 bytes leftover after parsing attributes in process `syz.4.2126'. [ 153.600203][ T9728] xt_SECMARK: invalid security context 'system_u:object_r:dbusd_etc_t:s0' [ 153.647425][ T9730] netlink: 14 bytes leftover after parsing attributes in process `syz.6.2127'. [ 153.667544][ T9730] hsr_slave_0: left promiscuous mode [ 153.683621][ T9730] hsr_slave_1: left promiscuous mode [ 153.710135][ T9734] netlink: 20 bytes leftover after parsing attributes in process `syz.6.2127'. [ 153.871520][ T9735] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4278190105 free clusters [ 153.915782][ T9738] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2131'. [ 153.929808][ T9735] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 153.942189][ T9735] EXT4-fs (loop5): This should not happen!! Data will be lost [ 153.942189][ T9735] [ 153.951890][ T9735] EXT4-fs (loop5): Total free blocks count 0 [ 153.957911][ T9735] EXT4-fs (loop5): Free/Dirty block details [ 153.963895][ T9735] EXT4-fs (loop5): free_blocks=68451041280 [ 153.969721][ T9735] EXT4-fs (loop5): dirty_blocks=80 [ 153.974883][ T9735] EXT4-fs (loop5): Block reservation details [ 153.980906][ T9735] EXT4-fs (loop5): i_reserved_data_blocks=5 [ 154.017227][ T29] kauditd_printk_skb: 343 callbacks suppressed [ 154.017243][ T29] audit: type=1400 audit(2000000085.880:9435): avc: denied { watch watch_reads } for pid=9736 comm="syz.0.2131" path="/436/file0" dev="tmpfs" ino=2326 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 154.139647][ T6295] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 4 with max blocks 64 with error 28 [ 154.455704][ T1036] Process accounting resumed [ 154.730218][ T9767] bridge: RTM_NEWNEIGH with invalid ether address [ 154.781347][ T9767] netlink: 132 bytes leftover after parsing attributes in process `syz.4.2137'. [ 154.816618][ T9769] netlink: 'syz.5.2138': attribute type 21 has an invalid length. [ 154.851456][ T9769] netlink: 132 bytes leftover after parsing attributes in process `syz.5.2138'. [ 155.047911][ T9788] FAULT_INJECTION: forcing a failure. [ 155.047911][ T9788] name failslab, interval 1, probability 0, space 0, times 0 [ 155.060705][ T9788] CPU: 0 UID: 0 PID: 9788 Comm: syz.5.2142 Not tainted 6.16.0-rc5-syzkaller-00121-gbc9ff192a6c9 #0 PREEMPT(voluntary) [ 155.060771][ T9788] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 155.060786][ T9788] Call Trace: [ 155.060795][ T9788] [ 155.060819][ T9788] __dump_stack+0x1d/0x30 [ 155.060845][ T9788] dump_stack_lvl+0xe8/0x140 [ 155.060868][ T9788] dump_stack+0x15/0x1b [ 155.060889][ T9788] should_fail_ex+0x265/0x280 [ 155.060967][ T9788] ? dev_ethtool+0x96/0x1650 [ 155.060989][ T9788] should_failslab+0x8c/0xb0 [ 155.061015][ T9788] __kmalloc_cache_noprof+0x4c/0x320 [ 155.061107][ T9788] dev_ethtool+0x96/0x1650 [ 155.061138][ T9788] dev_ioctl+0x2e0/0x960 [ 155.061161][ T9788] sock_do_ioctl+0x197/0x220 [ 155.061198][ T9788] sock_ioctl+0x41b/0x610 [ 155.061226][ T9788] ? __pfx_sock_ioctl+0x10/0x10 [ 155.061250][ T9788] __se_sys_ioctl+0xce/0x140 [ 155.061351][ T9788] __x64_sys_ioctl+0x43/0x50 [ 155.061400][ T9788] x64_sys_call+0x19a8/0x2fb0 [ 155.061427][ T9788] do_syscall_64+0xd2/0x200 [ 155.061465][ T9788] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 155.061496][ T9788] ? clear_bhb_loop+0x40/0x90 [ 155.061597][ T9788] ? clear_bhb_loop+0x40/0x90 [ 155.061622][ T9788] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 155.061725][ T9788] RIP: 0033:0x7f2a6833e929 [ 155.061741][ T9788] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 155.061762][ T9788] RSP: 002b:00007f2a669a7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 155.061782][ T9788] RAX: ffffffffffffffda RBX: 00007f2a68565fa0 RCX: 00007f2a6833e929 [ 155.061795][ T9788] RDX: 0000200000000400 RSI: 0000000000008946 RDI: 0000000000000007 [ 155.061810][ T9788] RBP: 00007f2a669a7090 R08: 0000000000000000 R09: 0000000000000000 [ 155.061837][ T9788] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 155.061851][ T9788] R13: 0000000000000000 R14: 00007f2a68565fa0 R15: 00007ffd58881028 [ 155.061873][ T9788] [ 155.062699][ T9791] SELinux: policydb magic number 0x6572666b does not match expected magic number 0xf97cff8c [ 155.107725][ T9799] IPv6: Can't replace route, no match found [ 155.120845][ T9791] SELinux: failed to load policy [ 155.370138][ T7553] ================================================================== [ 155.378291][ T7553] BUG: KCSAN: data-race in shmem_getattr / shmem_recalc_inode [ 155.385798][ T7553] [ 155.388146][ T7553] read-write to 0xffff88811e3562f0 of 8 bytes by task 9753 on cpu 0: [ 155.396238][ T7553] shmem_recalc_inode+0x36/0x1c0 [ 155.401230][ T7553] shmem_get_folio_gfp+0x7a3/0xd60 [ 155.406394][ T7553] shmem_write_begin+0xa8/0x190 [ 155.411299][ T7553] generic_perform_write+0x181/0x490 [ 155.416612][ T7553] shmem_file_write_iter+0xc5/0xf0 [ 155.421764][ T7553] __kernel_write_iter+0x256/0x4c0 [ 155.426926][ T7553] dump_user_range+0x407/0x8c0 [ 155.431746][ T7553] elf_core_dump+0x1dc2/0x1f80 [ 155.436537][ T7553] do_coredump+0x1dfa/0x27b0 [ 155.441158][ T7553] get_signal+0xd85/0xf70 [ 155.445524][ T7553] arch_do_signal_or_restart+0x96/0x480 [ 155.451198][ T7553] exit_to_user_mode_loop+0x7a/0x100 [ 155.456520][ T7553] do_syscall_64+0x1d6/0x200 [ 155.461174][ T7553] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 155.467126][ T7553] [ 155.469483][ T7553] read to 0xffff88811e3562f0 of 8 bytes by task 7553 on cpu 1: [ 155.477056][ T7553] shmem_getattr+0x41/0x200 [ 155.481603][ T7553] vfs_getattr_nosec+0x146/0x1e0 [ 155.486590][ T7553] vfs_statx+0x113/0x390 [ 155.490947][ T7553] vfs_fstatat+0x115/0x170 [ 155.495579][ T7553] __se_sys_newfstatat+0x55/0x260 [ 155.501269][ T7553] __x64_sys_newfstatat+0x55/0x70 [ 155.506380][ T7553] x64_sys_call+0x2c22/0x2fb0 [ 155.511097][ T7553] do_syscall_64+0xd2/0x200 [ 155.515635][ T7553] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 155.521737][ T7553] [ 155.524081][ T7553] value changed: 0x0000000000000aca -> 0x0000000000000acc [ 155.531211][ T7553] [ 155.533562][ T7553] Reported by Kernel Concurrency Sanitizer on: [ 155.539754][ T7553] CPU: 1 UID: 0 PID: 7553 Comm: syz-executor Not tainted 6.16.0-rc5-syzkaller-00121-gbc9ff192a6c9 #0 PREEMPT(voluntary) [ 155.552385][ T7553] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 155.562910][ T7553] ================================================================== [ 155.731222][ T29] audit: type=1400 audit(2000000087.620:9436): avc: denied { relabelto } for pid=9816 comm="syz.6.2145" name="134" dev="tmpfs" ino=736 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:fsadm_exec_t:s0" [ 155.758340][ T29] audit: type=1400 audit(2000000087.620:9437): avc: denied { associate } for pid=9816 comm="syz.6.2145" name="134" dev="tmpfs" ino=736 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 srawcon="system_u:object_r:fsadm_exec_t:s0" [ 155.990278][ T29] audit: type=1400 audit(2000000087.940:9438): avc: denied { remove_name } for pid=7553 comm="syz-executor" name="binderfs" dev="tmpfs" ino=740 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:fsadm_exec_t:s0" [ 156.018172][ T29] audit: type=1400 audit(2000000087.940:9439): avc: denied { rmdir } for pid=7553 comm="syz-executor" name="134" dev="tmpfs" ino=736 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:fsadm_exec_t:s0"