last executing test programs: 1m9.57675477s ago: executing program 1 (id=2464): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r2, 0x107, 0x14, &(0x7f0000000000)=0xf3f, 0x4) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r4, 0x0, 0x0) getsockname$packet(r4, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000400)=0x14) bind$netlink(0xffffffffffffffff, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x8, &(0x7f0000000000), 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, &(0x7f0000000100)=0x1800, 0x4) r6 = getpid() r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RELOAD(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x3c, r8, 0x1, 0x70bd27, 0x25dfdbfb, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r6}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4040010}, 0x30) openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x1c1341, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) r9 = perf_event_open(&(0x7f0000000000)={0x8, 0x80, 0x0, 0xfe, 0x0, 0xff, 0x0, 0x0, 0x5022, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}, 0x0, 0x2, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0x0, 0xffffffffffffffff, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) close(r9) r10 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50) r11 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r11, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000480)=@newlink={0x44, 0x10, 0x403, 0x0, 0xfffffffd, {0x0, 0x0, 0x4, 0x0, 0x1bc60, 0x2a704}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bond={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BOND_ARP_INTERVAL={0x8, 0x7, 0xe}, @IFLA_BOND_MIIMON={0x8, 0x3, 0x2ee4}]}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x11}, 0x4000044) r12 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000380)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r10, @ANYBLOB="0000000000000000b702000014000080b70300000000edff8400000083000000bf090000000000005509010000000000950000b7020000000000008500000084000000b72f0d6344cd632a2600000000000000000000000000edb8e44b8234e574cddec83c6d035f9b3793e6aaf13ad10dd7f68d3fda13c85d1269ad2631c55747aab7a6e80e6e87302df15401826b9aeff826aa071853d161e712200ad2b84a533d5c49d96fba86b886f01a613b54fd50dfafe3c1a94ea215d7a815428e8f028480761fe594c65730243ecf85dd9b2381a58a9f5ce408a9e450896a828e3f5c6fbdac0629f6a2977d"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x26, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r12}, 0x10) r13 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000000c0), 0x0) ioctl$SNDRV_TIMER_IOCTL_GINFO(r13, 0xc0f85403, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000006c0)=ANY=[@ANYBLOB="400000001000390400"/20, @ANYRES32=r5, @ANYBLOB="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"], 0x40}}, 0x0) 1m8.65424591s ago: executing program 1 (id=2482): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000280)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kfree\x00', r0}, 0x10) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000200)='attr/fscreate\x00') writev(r1, &(0x7f00000000c0)=[{&(0x7f0000000040)="dc", 0x1}], 0x8) 1m8.634756622s ago: executing program 1 (id=2483): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0) write$UHID_CREATE2(r0, &(0x7f0000000040)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x12, r0, 0x0) r1 = socket$inet6(0xa, 0x3, 0x8000000003c) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000802000021"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70300001d000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000080)='kmem_cache_free\x00', r0, 0x0, 0x6}, 0x18) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x2, 0x0, @dev={0xfe, 0x80, '\x00', 0x3c}, 0x4}, 0x1c) sendmsg(r1, &(0x7f00000000c0)={0x0, 0x9504, &(0x7f0000000100)=[{&(0x7f0000000000)="2b10", 0xffbd}], 0x1, 0x0, 0x0, 0x2c}, 0x4) 1m8.616300424s ago: executing program 1 (id=2484): bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$inet6(0xa, 0x800000000000002, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = fcntl$dupfd(r0, 0x406, r0) getsockopt$IPT_SO_GET_ENTRIES(r1, 0x0, 0x41, 0x0, &(0x7f0000000840)) 1m8.591284606s ago: executing program 1 (id=2485): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r1 = socket(0x40000000015, 0x5, 0x0) connect$inet6(r1, &(0x7f0000000200)={0xa, 0x4e21, 0x7, @ipv4={'\x00', '\xff\xff', @private=0xa010102}, 0xff}, 0x1c) getsockopt$sock_buf(r1, 0x1, 0x1c, 0x0, &(0x7f00000001c0)=0x3b) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r2, 0x84, 0x75, &(0x7f0000000040)={0x0, 0xaf1}, 0x8) bind$inet6(r2, &(0x7f00000002c0)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendmmsg$inet6(r2, &(0x7f0000000200)=[{{&(0x7f00000000c0)={0xa, 0x4e23, 0x5, @loopback, 0x1}, 0x1c, &(0x7f0000000580)=[{&(0x7f0000001680)='\t', 0x1}], 0x1}}], 0x1, 0x0) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r2, 0x84, 0x77, &(0x7f0000000700)=ANY=[@ANYRES32=0x0, @ANYBLOB="23205096cb5de0e78ac12ffc329b9e722654f3ff"], 0x8) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0, 0x0, 0x2}, 0x18) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000340)=@delchain={0x23, 0x64, 0xf31, 0xfffffffb, 0x400, {0x0, 0x0, 0x0, 0x0, {0x0, 0xfff1}, {0xfff3, 0xb}, {0xa, 0x1b}}}, 0x24}, 0x1, 0x0, 0x0, 0x4008051}, 0x4000) mkdir(&(0x7f0000001a80)='./file0\x00', 0x18b) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={0x0, 0xffffffffffffffff, 0x0, 0x29, &(0x7f0000000000)='//sys\x00\x00\x00\x00\x00\x00\x80\x004\x00\x00s/\x92ync_\x93\x96\xff\x92\xaf\x00Se\xf44.\x00\x00\x00\x00\x00\x00\x00'}, 0x30) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000001c0), r4) sendmsg$NLBL_UNLABEL_C_LIST(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)={0x14, r5, 0x1}, 0x14}}, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18060000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000003000000b703000000000000850000007300000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000400)='kfree\x00', r7, 0x0, 0x1}, 0x18) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0xc, &(0x7f0000002000)=ANY=[@ANYRESOCT, @ANYBLOB="9ddf3eee0e5f0bb7c1"], 0x0, 0x4000002, 0x0, 0x0, 0x0, 0x6, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) request_key(&(0x7f00000006c0)='asymmetric\x00', &(0x7f0000001ffb)={'syz', 0x1}, &(0x7f0000001fee)='R\x10rust\xe3c*sgrVdn:Dd', 0x0) recvmsg$unix(r6, &(0x7f0000000440)={&(0x7f0000000140)=@abs, 0x6e, &(0x7f00000001c0), 0x0, &(0x7f0000000400)=[@cred={{0x1c}}], 0x20}, 0x10000) mount$bpf(0x200000000000, &(0x7f0000000200)='./file0\x00', 0x0, 0x206002, 0x0) r8 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='attr/exec\x00') writev(r8, &(0x7f0000000240)=[{&(0x7f0000000080)='=', 0x1}], 0x1) symlinkat(&(0x7f0000000040)='./file0\x00', r8, &(0x7f0000000080)='./file0\x00') r9 = openat(0xffffffffffffff9c, &(0x7f0000000100)='.\x00', 0x0, 0x0) fcntl$lock(r9, 0x24, &(0x7f0000000200)={0x0, 0x2, 0x0, 0x7fffffffffffffff}) ioctl$VFAT_IOCTL_READDIR_SHORT(r0, 0x82307202, &(0x7f0000000480)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) 1m8.443858801s ago: executing program 1 (id=2487): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001440)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0xffffffffffffffbe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0, r1}, 0x18) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x3000010, &(0x7f0000000340)={[{@errors_remount}, {@nodioread_nolock}]}, 0x1, 0x512, &(0x7f0000000380)="$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") 53.286610851s ago: executing program 32 (id=2487): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001440)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0xffffffffffffffbe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0, r1}, 0x18) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x3000010, &(0x7f0000000340)={[{@errors_remount}, {@nodioread_nolock}]}, 0x1, 0x512, &(0x7f0000000380)="$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") 2.077841575s ago: executing program 0 (id=3356): setpriority(0x3, 0x0, 0xfffffffd) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x1800403, &(0x7f0000000940), 0x2, 0x5ba, &(0x7f0000000b00)="$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") r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f00000000c0), 0x2642, 0x0) writev(r1, &(0x7f0000000180)=[{0x0}, {&(0x7f0000000a00)="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", 0xfb}], 0x2) getsockopt$IP_VS_SO_GET_SERVICE(0xffffffffffffffff, 0x0, 0x483, &(0x7f0000000280), &(0x7f00000000c0)=0x68) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000500000002"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x10, 0xc, &(0x7f00000007c0)=ANY=[@ANYBLOB="e64a00000000000000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000010007b8af8ff00000000bfa2000000"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) r4 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sys_enter\x00', r3}, 0x10) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="3000000010000100000000000001000000000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=0x0, @ANYBLOB="08001b"], 0x30}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x4008000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x1010, r4, 0x7b793000) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="07000000040000000800000001"], 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r5, @ANYBLOB="0000000000000000b703000000030000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r6}, 0x18) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRESDEC, @ANYBLOB="0f00000000000000b703000000000000850000001b000000b70000000000"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r7, 0x11b, 0x4, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x0, 0x0}) socket(0x10, 0x3, 0x3a) unlinkat$binderfs_device(0xffffffffffffff9c, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) 1.880849314s ago: executing program 0 (id=3358): r0 = syz_clone(0x920000, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) (async, rerun: 64) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) (rerun: 64) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r1, 0x1, &(0x7f0000000040)={{0x77359400}}, 0x0) (async) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000300)={'bridge0\x00', 0x0}) (async) r4 = socket$nl_route(0x10, 0x3, 0x0) (async, rerun: 64) r5 = socket$can_raw(0x1d, 0x3, 0x1) (rerun: 64) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f0000000080)={'vxcan1\x00', 0x0}) bind$can_raw(r5, &(0x7f0000000180)={0x1d, r6}, 0x10) ioctl$ifreq_SIOCGIFINDEX_vcan(r5, 0x8933, &(0x7f0000000000)={'vxcan0\x00', 0x0}) bind$can_raw(r5, &(0x7f0000000040)={0x1d, r7}, 0x10) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@bridge_newvlan={0x24, 0x70, 0x239, 0x70bd2a, 0x25dfdbfb, {0x7, 0x0, 0x0, r3}, [@BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_INFO={0x8, 0x1, {0x40, 0x4}}}]}, 0x24}, 0x1, 0x0, 0x0, 0x800}, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) (async, rerun: 64) ptrace(0x10, r0) (rerun: 64) ptrace$peeksig(0x4209, r0, &(0x7f0000000140)={0x0, 0x0, 0x4e}, &(0x7f0000000fc0)) 1.076872463s ago: executing program 3 (id=3369): r0 = socket$packet(0x11, 0x2, 0x300) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000280)={'vxcan1\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="440100001800010000000000fddbdf251d01030008000a00", @ANYRES32=r2, @ANYBLOB='\b\x00\t\x00', @ANYRES32=r2], 0x144}, 0x1, 0x0, 0x0, 0x10}, 0x40000) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x1c, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000180)=r3, 0x4) r4 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[], 0x30}, 0x1, 0x0, 0x0, 0x4000}, 0x0) 944.716017ms ago: executing program 0 (id=3371): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0xf, &(0x7f0000000140)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0xfffffffc}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000000)='GPL\x00', 0xa, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f00000004c0)=r2, 0x4) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000000000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x2, '\x00', 0x0, @fallback=0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001000)={&(0x7f0000000140)='kmem_cache_free\x00', r3, 0x0, 0x2}, 0x18) sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=@newtaction={0x84, 0x30, 0xffff, 0xfffffffe, 0x0, {}, [{0x70, 0x1, [@m_police={0x6c, 0x1, 0x0, 0x0, {{0xb}, {0x40, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x5, 0x0, 0x0, 0x4, {0xfd}, {0x0, 0x0, 0x0, 0x6}}}]]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x84}, 0x1, 0x0, 0x0, 0x20004000}, 0x0) 930.383558ms ago: executing program 5 (id=3372): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000940)=ANY=[@ANYBLOB="140000001000010400000000000000000100000a74000000060a0b04000000000000000002000008400004803c000180080001006c6f670030000280060004400001000008000340fffffffa0a0002407d5def2e21000000080003400000000806000140000100000900010073797a30000000000900020073797a320000000008000b400000000314000000110001"], 0x9c}, 0x1, 0x0, 0x0, 0x8010}, 0x0) close(r0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x80, 0x4, 0x28}, 0x50) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$NL80211_CMD_PROBE_MESH_LINK(r2, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000f80)={0x450, r3, 0x300, 0x70bd2c, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_FRAME={0x76, 0x33, @ctrl_frame=@ba={{}, {0x6bb7}, @device_a, @broadcast, @multi={{0x0, 0x1, 0x1, 0x0, 0x7}, [{0x0, 0xe, {0x9, 0x40}, "8175566dffd3ca07"}, {0x0, 0x0, {0xd, 0x22}, "7fac4b1a051cf3b8"}, {0x0, 0x7, {0x9, 0x75}, "7718a6fce9bca459"}, {0x0, 0x5, {0x3, 0x1}, "c19cbdcc007f5f7e"}, {0x0, 0xd, {0x8, 0x1}, "b3409344c1ae17a1"}, {0x0, 0x2, {0x8, 0xffe}, "a34a632b21ff154c"}, {0x0, 0xa, {0x1, 0x4}, "53f9662a51efd34d"}], {0x0, 0x7, {0xf, 0x1}, "3d590bddc3fe1373"}}}}, @NL80211_ATTR_FRAME={0x14, 0x33, @ctrl_frame=@cf_end_cf_ack={{}, {0x76}, @broadcast}}, @NL80211_ATTR_FRAME={0x270, 0x33, @data_frame={@a_msdu=@type00={{0x0, 0x2, 0x5, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1}, {0xf}, @broadcast, @device_b, @from_mac=@device_b, {0x0, 0xc00}, "", @void, @value=@ver_80211n={0x0, 0xd0, 0x0, 0x0, 0x0, 0x2, 0x1, 0x0, 0x1}}, @a_msdu=[{@device_b, @broadcast, 0xc6, "421a2a12f02914dcc376aeb501fcb42756796dddfbe0fa23133cbf89b23cc9b849b9a8231e9e9a5d08784b23be75f25ca25b8c54de3ba9beb72149734a1da63765223b52c9f6f31080733473b472dbd6fe1e7b541205c24e936091e9beff406c6545ebcb88b7114555b49167aa213128970e2b0bf4d628ec3c7421011909a7e8b56249bcd26e559454e27b0beb069d0c78350b7b1a165de7ea00c27b46508fc1c95973773a47989cb4e6d68b66a328bf9435abca0ad18d4178a1e39c12b67c6276f4b01193f8"}, {@broadcast, @device_a, 0x57, "6cd04c61ec60055dc81a890099f59650a2fe784fe4b54b63037aab84ea7d45bddfb284707adffee2a3d199de52f43142fd75ff3550175d5c9a5c5f26d61d533f2434f79c12b9fa1f0f91fb7c561519e9efc21e59cb77e0"}, {@device_a, @broadcast, 0xbd, "4402ae5a94fb6ed08a31033ea745f31565974d8c6e000e0f5b3a7bdc02ab4c3b7d89be82c4265be21d8b2171cacdc85ec33c26d37b3b0bda2d55aa6a96592ef97b1ad03c9807c486ed2cf7ba362fd361d3c4cccd376493ded5823c1b75861cc522efb3082a73f1d5d8f677fe0788d2eeb4123b9d7e35a4acf2a650e1d2d77c348a965ae675bbd995516fe1fa6df99aad53434a5c77081c54b7fbae944f146efcaf418deed89b2d23c5ae627c7499c7730904592ef1307706b4e6c630af"}, {@device_b, @broadcast, 0x37, "80904889e65a8b77238a1ca6f4eee55569cedf5f0c50aed3ebdba5a2e40c914ab2a003b5e9b17af0a0b01e2d4165973c97960c5d95b998"}]}}, @NL80211_ATTR_FRAME={0x125, 0x33, @mgmt_frame=@assoc_resp={{{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1}, {0x5}, @device_a, @device_b, @random="14c0c874fecf", {0xf, 0x7}}, 0x2, 0x42, @default, @val={0x1, 0x3, [{0x2}, {0x36}, {0x12, 0x1}]}, @void, [{0xdd, 0xaa, "f080300f91f9b030db7c44382752471a293bfb31cac7fd7be36e2847ae51f1107baa1022a4f3d89acbc7ea2843a475fc45fa975bac83240adf0208d4b206983945ebc527b989263d5b3923628f08e24316d927f81e4ee2ef5bc7eb806419f7ce837ee9f2424ac615d5c139f9fbd79819a724e4ea9ac4633f90a3cc2bf4358288cbe4e37fb5e577302585332d4eb3ba314b276ea0b24316a07d0bbd93046659be81199e645d8abc2bd416"}, {0xdd, 0x50, "26dc86496204374a96740be5ce0e854d091825f5e35bf95126e6bbacc80170d58ac0fec5152c647e1bda03591cf77c616b10964fdb2057c5c65d7038ba3b23da9ef3d2bbab11e0527f64349854bb126e"}]}}]}, 0x450}, 0x1, 0x0, 0x0, 0x11}, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r1}, {}, {0x85, 0x0, 0x0, 0x1b}}]}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41002, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r4}, 0x18) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000050000000000000000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000059"], 0x0}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00', r6}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r7 = inotify_init1(0x0) inotify_add_watch(r7, &(0x7f0000000200)='.\x00', 0x50000a0) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f00000001c0)='./bus\x00', 0x41, &(0x7f0000000080), 0x67, 0x53c, &(0x7f0000000f40)="$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") r8 = fspick(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0) fsconfig$FSCONFIG_CMD_RECONFIGURE(r8, 0x7, 0x0, 0x0, 0x0) mount$bind(0x0, &(0x7f0000000100)='.\x00', 0x0, 0x21, 0x0) 916.607459ms ago: executing program 0 (id=3373): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000001740)={r0, 0x0, &(0x7f0000001700)=""/53}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x3, 0xc, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000014c0)={&(0x7f0000000040)='mm_page_alloc\x00', r1}, 0x18) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000000c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x50) 904.65968ms ago: executing program 3 (id=3374): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000014c0)={&(0x7f0000000040)='mm_page_alloc\x00', r1}, 0x18) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000000c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x50) 904.23076ms ago: executing program 2 (id=3375): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000000001000000000000000000851000000600000018000000", @ANYRES32, @ANYBLOB], &(0x7f0000000000)='GPL\x00', 0xa, 0x0, 0x0, 0x0, 0x8}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000a80)='kfree\x00', r0, 0x0, 0x6}, 0x18) r1 = socket$inet6(0xa, 0x1, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f00000004c0)={'ip6_vti0\x00', &(0x7f0000000740)={'syztnl1\x00', 0x0, 0x29, 0x0, 0x3, 0x0, 0x4e, @local, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x10, 0x7, 0x0, 0x4}}) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff}, 0x84000) r3 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/rt_cache\x00') mount$9p_fd(0x0, &(0x7f0000000040)='.\x00', &(0x7f0000000080), 0x0, &(0x7f0000000180)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r3}}) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000140)={0x0, 0xffffffffffffff34, &(0x7f0000000080)={0x0, 0xb8}}, 0x0) getsockname$packet(r5, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="34000000100081eee80000040000000010000000", @ANYRES32=r7, @ANYBLOB="ddfffffdff000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)=@ipv4_newaddr={0x20, 0x14, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0xff, r7}, [@IFA_LOCAL={0x8, 0x2, @local}]}, 0x20}}, 0x0) r8 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_mreqsrc(r8, 0x0, 0x27, &(0x7f0000000040)={@multicast2, @local}, 0xc) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r9, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000400)=@delchain={0x24, 0x11, 0x1, 0x0, 0x1000000, {0x0, 0x0, 0x0, r7, {}, {}, {0x9}}}, 0x24}}, 0x0) 884.071983ms ago: executing program 3 (id=3376): creat(&(0x7f0000000040)='./file0\x00', 0x38) r0 = syz_open_dev$loop(&(0x7f0000000240), 0xffffffff7ffffffd, 0x160862) r1 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_SET_BINARY(r1, 0x6, 0x0, 0x0, 0x0) r2 = fsmount(r1, 0x0, 0x2) r3 = openat$cgroup_subtree(r2, &(0x7f0000000100), 0x2, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x589b}, 0x50) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000200)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r4}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r5}, 0x10) write$cgroup_subtree(r3, &(0x7f0000000300)=ANY=[@ANYBLOB='-cpu'], 0x5) write$cgroup_subtree(r3, &(0x7f00000001c0)={[{0x2b, 'cpu'}]}, 0x5) r6 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/pm_freeze_timeout', 0x22842, 0x8d) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f0000000080)={r6, 0x7ff, {0x0, 0x0, 0x0, 0x3, 0x4000000000000bfd, 0x0, 0x1, 0x1a, 0xc, "faf98317e5a1149989fc8dbe43ea6acc96e3a2503dc3bd3fe37d58128bbad0099cebdc25f5ab60c9e6d680f985881a7beda9d69098c8b534464c516bdd8a0f35", "32d8cc26f7061a74df2cfc06c89f8cda234b30c50987d3bef409ff2176ff7bfe55cd4a5d83cd4a524bd3ffe70cc50a1fcaed1e831fa79a00", "715237601a03a5b07dcc141802c4dacf162e43ac61f7ad330000000000a04100", [0x7, 0x8]}}) ioctl$LOOP_CLR_FD(r0, 0x4c01) 876.812853ms ago: executing program 0 (id=3377): r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x2060, 0x0) fcntl$setlease(r0, 0x400, 0x0) fsetxattr$trusted_overlay_redirect(r0, &(0x7f0000000040), 0x0, 0x0, 0x0) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x34, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000}, 0x94) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0x8, &(0x7f0000000a80)=ANY=[@ANYBLOB="180000008674bd00000000000000000000000018120000", @ANYRES32=r3, @ANYRESDEC=r1], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x18) r5 = socket(0x18, 0x1, 0x0) perf_event_open(&(0x7f0000001100)={0x5, 0x80, 0x9, 0x8, 0xb, 0xfb, 0x0, 0x3c, 0xc002, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x1}, 0x18842, 0x0, 0x7fffffff, 0x1, 0x8, 0x3, 0x7, 0x0, 0x0, 0x0, 0x7}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x2) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001f40)={0xffffffffffffffff}) recvmsg$unix(r6, &(0x7f0000000700)={0x0, 0x0, 0x0}, 0x0) close_range(r5, 0xffffffffffffffff, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000a00)={&(0x7f0000000d00)='sched_switch\x00', r2}, 0x6c) prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="18020000000000000000000000000000850000009b000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000730000009500"], &(0x7f0000000a40)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r7, 0x0, 0x6, 0x0, &(0x7f0000000000)="e0b9547ed387", 0x0, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) ioctl$USBDEVFS_IOCTL(0xffffffffffffffff, 0xc0105512, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000580)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x50) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6004, 0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="18020000000000000000000086000000a15e824e800000009500000000000000"], &(0x7f0000000000)='syzkaller\x00', 0x5}, 0x94) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[], 0xe4}}, 0x0) sendmsg$DEVLINK_CMD_RATE_GET(0xffffffffffffffff, &(0x7f0000000700)={0x0, 0x0, 0x0}, 0x0) r9 = creat(&(0x7f00000000c0)='./file0\x00', 0xf4) dup2(r9, r9) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000000c0)='./file1\x00', 0x58, &(0x7f0000000980)={[{@inode_readahead_blks}, {@grpquota}, {@nomblk_io_submit}, {@stripe={'stripe', 0x3d, 0x4ffff}}, {@norecovery}, {@errors_remount}, {@max_batch_time={'max_batch_time', 0x3d, 0x814}}]}, 0xfe, 0x799, &(0x7f00000001c0)="$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") mkdirat(0xffffffffffffff9c, &(0x7f0000001dc0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000802000021"], 0x50) 818.846579ms ago: executing program 4 (id=3378): bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='net_dev_xmit\x00', r0}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000640)=ANY=[@ANYBLOB="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"/2566], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r1, 0x18000000000002a0, 0xe40, 0x0, &(0x7f0000000100)="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", 0x0, 0x8, 0x60000000}, 0x1e) 768.251544ms ago: executing program 4 (id=3379): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000009c0000000b"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000780)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x18) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000780)='./bus\x00', 0x41, &(0x7f0000000b00)={[{@bsdgroups}, {@resgid}, {@noblock_validity}, {@grpjquota}, {@grpjquota}, {@resuid}, {@auto_da_alloc}, {@noload}, {@jqfmt_vfsv1}]}, 0x64, 0x50a, &(0x7f0000000200)="$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") 727.764878ms ago: executing program 5 (id=3380): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000fdff00000000000000000000180100002020702500000000002120207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000002d00000095"], &(0x7f0000000200)='GPL\x00', 0x3, 0x0, 0x0, 0x41100, 0xe, '\x00', 0x0, @fallback=0x8, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r1}, 0x10) r2 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_buf(r2, 0x29, 0x39, 0x0, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r4}, 0x10) r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xf, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b702000014fa0000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r6}, 0x18) r7 = socket$netlink(0x10, 0x3, 0x0) getsockopt$sock_cred(r7, 0x1, 0x11, &(0x7f0000000040)={0x0, 0x0}, &(0x7f00000000c0)=0xc) sendmsg$nl_generic(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000100)={0x28, 0x18, 0x1, 0x0, 0x0, {0x2}, [@typed={0x8, 0x800, 0x0, 0x0, @ipv4=@multicast2}, @nested={0xc, 0x8, 0x0, 0x1, [@typed={0x8, 0xc, 0x0, 0x0, @uid=r8}]}]}, 0x28}}, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000040)={{r3}, &(0x7f0000000000), &(0x7f00000005c0)=r4}, 0x20) socket$inet6_udp(0xa, 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) close(r0) 655.921835ms ago: executing program 2 (id=3381): r0 = socket$vsock_stream(0x28, 0x1, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) r1 = syz_io_uring_setup(0x8d2, &(0x7f00000000c0)={0x0, 0xfffffffe, 0x400, 0x0, 0x379}, &(0x7f0000000040)=0x0, &(0x7f0000000080)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f0000000140)=@IORING_OP_ACCEPT={0xd, 0x40, 0x0, r0, 0x0, 0x0, 0x0, 0x80000, 0x1}) io_uring_enter(r1, 0x47ba, 0x3e80, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) r5 = dup(r4) r6 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000b80)=ANY=[@ANYBLOB="1b00000000000000000000000020"], 0x50) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r6}}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc}, 0x94) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x6, 0x8, &(0x7f0000000880)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, 0x0, 0xd, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x15}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r8, 0x2800000002000000, 0xe, 0x55, &(0x7f0000000140)="a06ad876d56a0064d082778c3938", &(0x7f0000000380)=""/85, 0x0, 0x4000000}, 0x28) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r7}, 0x10) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x2010008, &(0x7f00000001c0), 0xff, 0x52e, &(0x7f0000000640)="$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") r9 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r9, &(0x7f0000000200)={0x28, 0x0, 0xffffffff, @my=0x1}, 0x10) connect$vsock_stream(r9, &(0x7f0000000600)={0x28, 0x0, 0x0, @local}, 0x10) r10 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000080"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x94) close(r10) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000029c0)) r11 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r12 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0f0000ee030000000400000052c12cb1be283019", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$BPF_PROG_DETACH(0x8, &(0x7f00000002c0)=ANY=[@ANYRES32=r12, @ANYRES32=r11, @ANYBLOB='&\x00'/12, @ANYRES32, @ANYBLOB="57366328648a2fb1e5cfadb901ac19e3037e68fa6e34669aa99910333f3c1ec8dcf9765972998cf0e854657077a99e91a29549bbff812dc9388ef0f101b88a1e03d0b39ac49bc7ed5457122850515b2c"], 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r12}, &(0x7f0000000000), &(0x7f0000000080)=r10}, 0x20) ioctl$TIOCL_SETSEL(r5, 0x541c, &(0x7f0000000100)={0x2, {0x2, 0x13d, 0x0, 0xd6f, 0x3}}) 655.461275ms ago: executing program 3 (id=3382): bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020207025000000002dba513d7b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000008fd8850000000400000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x27, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x6a855000) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000140)='kmem_cache_free\x00', r0, 0x0, 0xffffffffffffffff}, 0x18) r1 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r1, 0x107, 0xf, &(0x7f0000000000), 0x4) sendmsg$kcm(r1, &(0x7f00000000c0)={&(0x7f0000000100)=@hci={0x1f, 0x3802, 0x4}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)="27030200590214000600002fb96dbcf706e10500000086ddffff1144ee163cd4b8bf4a31accbe1ba0777cfbf6ae77256da82f6184b8a34f9015cc99e570000002b21c90b000000000000721a5dbb56a3d9e16e7c2179c9b5b24722944820e624fc5b17d0822ca4232c98a9936ba722475ca5", 0x72}, {&(0x7f0000001400)="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", 0x206}], 0x2}, 0x0) 511.538459ms ago: executing program 4 (id=3383): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) (async) pipe(0x0) (async) r1 = fsopen(0x0, 0x0) fsconfig$FSCONFIG_SET_FD(r1, 0x5, 0x0, 0x0, 0xffffffffffffffff) (async) r2 = fsmount(r1, 0x0, 0x2) (async) r3 = perf_event_open(&(0x7f00000004c0)={0x1, 0x80, 0x4, 0x0, 0x4, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}, 0x100002, 0x0, 0xfffffffc, 0x0, 0x0, 0x5}, 0x0, 0x1, 0xffffffffffffffff, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0xa, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) (async) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x18, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="180237d05c11d42c7754"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x40}, 0x94) (async) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r4}, &(0x7f0000000180), &(0x7f00000001c0)=r3}, 0x20) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000640)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r6}, 0x10) unlinkat(r2, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) (async) r7 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000002c0)="2e00000011008108090f9becdb4cb92e264831371900000069bd6efb2502eaf60d002700020400bf050005001201e5", 0x2f}], 0x1}, 0x48000) (async) bpf$PROG_LOAD(0x5, 0x0, 0x0) (async) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x3000002, 0x5d031, 0xffffffffffffffff, 0x0) (async) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x600, 0x0) (async) munmap(&(0x7f00003fe000/0xc00000)=nil, 0xc00000) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000df00000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xf862d9e2c7ca0a19, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000400)={{r0}, &(0x7f0000000380), &(0x7f00000003c0)=r8}, 0x20) bpf$MAP_CREATE(0x0, &(0x7f0000001440)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x3, 0xc, &(0x7f0000000c80)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES64=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095", @ANYRES16=r6, @ANYBLOB="769caf6c3ef2a243c3a6035f6e31b5cb4b277a84a2ad7d696c1c3760974a738b4d0849671d7efee8359f4c58c16395c9c24003ea8fae419b2b4dc44c011f2ca54aa3d14a556ad2adeaea8bdad83824cf4dc4cf79170310569ef274dc4f031b1a67b954cec5cee5040599be08c8c98b56c28221ec730b34c7fbcb2a2012b887283b40d19cb7d6e122e40dfdac2e89f38fa87357cd8bf3cc7dce1423efc46d8af08d0c0657fa73d6e248dafc22c9"], 0x0, 0xffffffef, 0x0, 0x0, 0x40f00, 0x4, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c}, 0x94) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r10 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000300)='spmi_read_begin\x00', r9}, 0x18) bpf$MAP_CREATE(0x0, &(0x7f0000000a00)=ANY=[@ANYBLOB="2100000000000000000000000000100000040000", @ANYRES32, @ANYRES32=r10, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000000000200000000000000000000000200000000000000004e02e4352e4abc868fd4d8df9572044427e356450c01cc5228f6f038d37636493a21621d1c5b5f1caa2dcc284ae7abbfb40bc9e44c831a8fc3fe93e1e30c08dfcf87d503b8ea14b5d44042f9120b400bee26d002c028e9e3c9cdf3c9c636a034d4df51ea569b8b88197a27d2701ef7cf8f17f841f4d0f07e4ec04b51d1428937ec6351b1f91efa51c9e47401e64cc799d32e854a9d0456745b3fcb97b54e7d77f9dbbff86f1e7e50075830bc8b5d956d0d2669c59c98b7543566b5ebefd36046b29f34c67c35a277"], 0x50) openat$vcsu(0xffffffffffffff9c, &(0x7f0000000000), 0x40a002, 0x0) (async) r11 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r11, 0x0, 0x7098}, 0x18) 448.465585ms ago: executing program 5 (id=3384): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0xf, &(0x7f0000000140)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0xfffffffc}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000000)='GPL\x00', 0xa, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f00000004c0)=r2, 0x4) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000000000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x2, '\x00', 0x0, @fallback=0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001000)={&(0x7f0000000140)='kmem_cache_free\x00', r3, 0x0, 0x2}, 0x18) sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=@newtaction={0x84, 0x30, 0xffff, 0xfffffffe, 0x0, {}, [{0x70, 0x1, [@m_police={0x6c, 0x1, 0x0, 0x0, {{0xb}, {0x40, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x5, 0x0, 0x0, 0x4, {0xfd}, {0x0, 0x0, 0x0, 0x6}}}]]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x84}, 0x1, 0x0, 0x0, 0x20004000}, 0x0) 417.430658ms ago: executing program 5 (id=3385): r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') getdents64(r0, 0x0, 0x0) getsockopt$inet_mreqsrc(r0, 0x0, 0x26, &(0x7f0000000000)={@loopback, @broadcast, @multicast2}, &(0x7f0000000040)=0xc) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000a00)={0x0, 0x4, &(0x7f00000003c0)=ANY=[@ANYRESHEX=r0], &(0x7f0000000140)='GPL\x00', 0x1, 0x0, 0x0, 0x41000, 0x20, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xb904}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x18) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000540)=@raw={'raw\x00', 0x3c1, 0x3, 0x2d8, 0x0, 0x1170, 0x1170, 0x118, 0x1170, 0x208, 0x1398, 0x1398, 0x208, 0x1398, 0x3, 0x0, {[{{@ipv6={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @private2={0xfc, 0x2, '\x00', 0x1}, [0xffffffff, 0xff000000, 0xffffff00], [0x0, 0x0, 0x0, 0xffffff00], 'vcan0\x00', 'veth0_to_hsr\x00', {}, {}, 0x2e, 0x0, 0x0, 0x46}, 0x0, 0xf8, 0x118, 0x0, {}, [@common=@inet=@socket2={{0x28}, 0x1}, @common=@hl={{0x28}, {0x3, 0x65}}]}, @unspec=@NOTRACK={0x20}}, {{@ipv6={@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @private1, [0xff, 0xff000000, 0xffffff00], [0xffffffff], 'rose0\x00', 'bond0\x00', {}, {0xff}, 0x2, 0x2, 0x5, 0x68}, 0x0, 0xa8, 0xf0}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x6, 'snmp_trap\x00', {0x8001}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x338) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) preadv2(r2, &(0x7f0000000380)=[{0x0}, {&(0x7f0000000100)=""/32, 0x20}, {&(0x7f0000000240)=""/57, 0x39}, {&(0x7f0000000280)=""/235, 0xeb}], 0x4, 0xffff, 0x1, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x85, 0x7, 0x7ffc0001}]}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='kmem_cache_free\x00', 0xffffffffffffffff, 0x0, 0x4}, 0x18) socket(0x1e, 0x2, 0x0) fsync(0xffffffffffffffff) clock_getres(0x2, &(0x7f0000000080)) socket$kcm(0x29, 0x2, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a500850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x4, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x48, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000200)='qdisc_reset\x00', r4}, 0x10) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000ac0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000054850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x7, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x28, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) umount2(&(0x7f00000002c0)='./file0\x00', 0x0) r5 = syz_open_dev$usbfs(&(0x7f0000000240), 0xc, 0x101101) ioctl$USBDEVFS_IOCTL(r5, 0xc0105512, &(0x7f0000000200)) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x5, &(0x7f0000000000)=@framed={{0x18, 0x2, 0x0, 0x0, 0xfffffffb}, [@call={0x85, 0x0, 0x0, 0xbc}, @call={0x85, 0x0, 0x0, 0x50}]}, &(0x7f0000000480)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r6, 0x0, 0xe, 0x0, &(0x7f00000003c0)="443b6164ec0faec6180fe94d61d4", 0x0, 0x5008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) ioctl$USBDEVFS_IOCTL(r5, 0x80045505, &(0x7f0000000040)=@usbdevfs_disconnect={0xffffffff}) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) statfs(&(0x7f00000000c0)='./cgroup/../file0\x00', &(0x7f0000000100)=""/5) 394.762331ms ago: executing program 2 (id=3386): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000014c0)={&(0x7f0000000040)='mm_page_alloc\x00', r1}, 0x18) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000000c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x50) 342.078835ms ago: executing program 4 (id=3387): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000001740)={r0, 0x0, &(0x7f0000001700)=""/53}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x3, 0xc, &(0x7f0000000440)=ANY=[], 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000014c0)={&(0x7f0000000040)='mm_page_alloc\x00', r1}, 0x18) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000000c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x50) 341.434876ms ago: executing program 2 (id=3388): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r1, 0x0, 0x3}, 0x18) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r3 = bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000980)={{r3, 0xffffffffffffffff}, &(0x7f0000000900), &(0x7f0000000940)=r2}, 0x20) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000080)={r4, &(0x7f0000000640)="aacaf1ae7c49028c98fd9323659027e31ebf8fc933891a4db37b47723ce01805e2ec853666c63ddc49dc58e4f44dbddc580a4f65f8d931839954703193cf0990d668435dc8aa938bfaee661927ad23013cfa331bfce98bac841f37ff1be3b3b0f00752b500000000d9451d1923b2cbb079f658c80284d77271ae6ffaa3b7214b3e706b11bfb5047d17f5d1f58b5e49034b0dbd705b4b90989738469d1727c0133d910687af", 0x0}, 0x20) 313.844508ms ago: executing program 4 (id=3389): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000540)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x10) nanosleep(0x0, 0x0) 286.519871ms ago: executing program 2 (id=3390): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) r1 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={0x0}}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x20000044) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000240)=ANY=[@ANYRES32=r0, @ANYBLOB="0000000000000000b702000000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r4}, 0x10) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a05000000000000000000010000000900010073797a300000000048000000030a05020000000000000000010000000900030073797a320000000014000480080002400000000008000140000000000900010073797a3000000000080007006e6174"], 0xcc}, 0x1, 0x0, 0x0, 0x880}, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(r5, 0x8933, &(0x7f00000001c0)={'wg1\x00', 0x0}) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f00000002c0)={'gre0\x00', &(0x7f0000000280)={'gretap0\x00', r3, 0x8, 0x7, 0xfff, 0x3, {{0x6, 0x4, 0x3, 0x1, 0x18, 0x68, 0x0, 0x4, 0x0, 0x0, @private=0xa010102, @initdev={0xac, 0x1e, 0x1, 0x0}, {[@end]}}}}}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f0000000380)={'ip6tnl0\x00', &(0x7f0000000300)={'ip6_vti0\x00', r3, 0x2f, 0x4, 0x7f, 0x7fff, 0x35, @mcast1, @loopback, 0x0, 0x700, 0x4, 0x80}}) r9 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f00000000c0)={'bridge0\x00', 0x0}) sendmsg$nl_route(r9, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newlink={0x44, 0x10, 0x401, 0xfffffffc, 0x80, {0x0, 0x0, 0x0, 0x0, 0x24403}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macsec={{0xb}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r10}, @IFLA_MASTER={0x8, 0xa, r10}]}, 0x44}, 0x1, 0x0, 0x0, 0x2004d808}, 0x0) r11 = socket(0x2, 0x2, 0x1) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000040)={'batadv_slave_1\x00', 0x0}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000004000000000000000100feff95"], &(0x7f0000000040)='GPL\x00', 0x5, 0x0, 0x0, 0x40f00, 0x40, '\x00', r12, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xff}, 0x94) r13 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r13, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=@getchain={0x24, 0x11, 0x43d, 0x0, 0x0, {0x0, 0x0, 0x0, r12, {0xe, 0x1}, {0x0, 0x3}}}, 0x24}}, 0x800) r14 = socket$unix(0x1, 0x1, 0x0) r15 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r14, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r15, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000001c0)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r16, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_mq={0x7}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) sendmsg$nl_route_sched_retired(r1, &(0x7f0000000400)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000003c0)={&(0x7f00000007c0)=@newtfilter={0x532c, 0x2c, 0x400, 0x70bd27, 0x25dfdbfb, {0x0, 0x0, 0x0, r6, {0x10, 0xffec}, {0xfff2, 0x4}, {0xfff1, 0x8}}, [@f_rsvp6={{0xa}, {0x680, 0x2, [@TCA_RSVP_CLASSID={0x8, 0x1, {0x1, 0x1}}, @TCA_RSVP_ACT={0x620, 0x6, [@m_police={0x4cc, 0x1f, 0x0, 0x0, {{0xb}, {0x438, 0x2, 0x0, 0x1, [[@TCA_POLICE_RESULT={0x8, 0x5, 0x8}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x1c, 0x1, 0xfff, 0x10000, 0x1, 0x8, 0x1ff, 0x0, 0x6, 0x8, 0x0, 0xc94, 0xfff, 0x10, 0x4, 0x8, 0x6, 0x3, 0x7e6d, 0x4, 0x7, 0x6b92, 0x8, 0x8, 0x2, 0x1, 0x6, 0xb, 0xfffffff9, 0x1, 0x6, 0x2, 0x9, 0x9, 0x3ff, 0x72d, 0x5, 0x8, 0x1, 0x10, 0x1, 0xd, 0x1, 0x2c69, 0x6, 0x9, 0xfff, 0x7, 0x89, 0x0, 0x7, 0x7fff, 0x6, 0x3, 0xf, 0x1, 0x3, 0x7, 0xffffffff, 0x7, 0x10000, 0x3, 0x7, 0x9, 0xfffffffa, 0x3, 0x6, 0x40, 0x8, 0x3, 0x2, 0x10000, 0xfffffffa, 0x80, 0x5, 0x5, 0x7, 0x7, 0xffffffff, 0x8000, 0x1032, 0x7, 0x1, 0xffffffe6, 0x200, 0x9, 0x64a5, 0x8000, 0x14000, 0x8, 0x1ff, 0x2, 0xb, 0x9, 0x1, 0x4, 0x1e0, 0x0, 0x7, 0x6, 0x5, 0x0, 0x800, 0xffffffff, 0x9, 0xc, 0x7, 0x3, 0x98ca, 0xa0000, 0x3, 0x6, 0x6, 0x3ff, 0x6, 0x5, 0x8000, 0x9, 0x1, 0x7fff, 0x401, 0x457, 0x3ff, 0x200, 0xfff, 0x9, 0x8, 0x200, 0x8, 0x80000000, 0x7, 0x3, 0x1, 0x5, 0x0, 0x4, 0xfffffffd, 0x2, 0x3, 0x6, 0x2, 0x8001, 0x8, 0x0, 0x4, 0x0, 0x0, 0xffff, 0x2, 0x3, 0x280, 0x0, 0x4, 0x2, 0x8, 0x2, 0x4, 0xed4c, 0x705, 0x4, 0x5, 0x8, 0x6, 0x406, 0x7, 0xbc, 0x2, 0x6, 0x4, 0x7, 0x6, 0x8, 0xb, 0x6, 0x1000, 0x6, 0x8000, 0x5, 0x100, 0x9, 0x0, 0x1, 0x0, 0x9, 0x3, 0xff, 0x3, 0x0, 0x4e5, 0x4, 0x9, 0x6, 0x3e, 0x81, 0x7, 0x2, 0x4, 0x1d54, 0x1, 0x0, 0x2, 0x47, 0x4, 0x4, 0xff, 0x1000, 0xfffffffc, 0x6, 0x401, 0x1, 0x6, 0x80000000, 0x1c0, 0x3, 0x5, 0x6, 0x8, 0xfffffff8, 0x9, 0xffffffff, 0x0, 0xfffffff7, 0x6, 0x4, 0x3, 0xfffffff7, 0x4, 0x8, 0x100, 0x3, 0x100000, 0x401, 0x6, 0x80, 0x7a2, 0x8, 0x5f, 0x3, 0xe, 0xa8e40000, 0x1, 0xfffffff2, 0xe, 0xc, 0xb, 0x82, 0x2, 0x81, 0x2, 0xfffffffa, 0x4, 0x7, 0x8000, 0xd, 0x0, 0x7]}, @TCA_POLICE_RESULT={0x8, 0x5, 0x2}, @TCA_POLICE_RATE64={0xc, 0x8, 0xfff}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0xfffffffffffffffa}], [@TCA_POLICE_AVRATE={0x8, 0x4, 0x3}]]}, {0x6b, 0x6, "bd6733d2802624801d8eaca4e72f1f6f96b6e61101abb95973a0a55f025b78812d61c39f9d591c0de80a080e86c270b56b8de94a20a4cf895a00228e00a24a6892d7e2f95fc8fd2e781f72e77eb643606cff913d12ff9bb28dfd72bbf7a4ff2ab8fbe9fed01980"}, {0xc}, {0xc, 0x8, {0x1}}}}, @m_ctinfo={0x150, 0x20, 0x0, 0x0, {{0xb}, {0x3c, 0x2, 0x0, 0x1, [@TCA_CTINFO_PARMS_CPMARK_MASK={0x8, 0x7, 0x2}, @TCA_CTINFO_PARMS_CPMARK_MASK={0x8, 0x7, 0x3ef9}, @TCA_CTINFO_PARMS_DSCP_MASK={0x8, 0x5, 0x7}, @TCA_CTINFO_ACT={0x18, 0x3, {0x4, 0x314, 0x6, 0x1, 0x10000}}, @TCA_CTINFO_ZONE={0x6, 0x4, 0x101}]}, {0xea, 0x6, "6ba6672680f908fef18b2c833bef57c17a6377dfd0f77398d9e53d1dc8b136b64d67215bca45c374c12d957b7098bdc947a0ef03ecd5fb61623ee0038525e4bc1e1b7ecb21d7535fb1d40c4173efec2887f90f02782204cdea69c05d6d97eaabc0016dbdfd00c857c4c895e11feae1a0fd41d3b518e7ff4673179da379b492c6138d41c8c735671124cbd2f8ab8a8414e92f9ba0ba6d2290a6cee8e247e028d4bed7ea5b81cfa8a5a2fbbd100da7b9ec278df54877cc04ad3be61952234381f62a47284ff4b7e47ee082102ff020322d0de19d4160ba36ce4171addd9e1cf06a57bf40678de9"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x3}}}}]}, @TCA_RSVP_DST={0x14, 0x2, @empty}, @TCA_RSVP_PINFO={0x20, 0x4, {{0xd4, 0x80000001, 0x2}, {0x8, 0x1, 0x6}, 0x2e, 0xf7, 0x6}}, @TCA_RSVP_PINFO={0x20, 0x4, {{0x5, 0x7, 0x61}, {0x489c, 0x1, 0x3}, 0x4, 0x0, 0x8}}]}}, @f_rsvp6={{0xa}, {0x1d34, 0x2, [@TCA_RSVP_DST={0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0x38}}, @TCA_RSVP_POLICE={0x8e0, 0x5, [@TCA_POLICE_TBF={0x3c, 0x1, {0x400, 0x67c7fd6c897cca5f, 0x5, 0x5, 0x5, {0x7, 0x1, 0xfff, 0x8, 0x4, 0x7}, {0x6, 0x2, 0x6, 0x4, 0x5, 0x2}, 0x9, 0x7fffffff, 0x3}}, @TCA_POLICE_RATE={0x404, 0x2, [0x9, 0x1, 0x2, 0x3ff0, 0x7, 0x9, 0xfffffff0, 0x3, 0xaa, 0xffff9b1e, 0x4, 0xc, 0x8, 0x3, 0xffffffe5, 0x6, 0x6, 0x2, 0x6, 0x10000, 0x3ff, 0x0, 0x4, 0x7, 0x0, 0x6, 0x4, 0x8, 0x10000, 0x7, 0x2, 0x1, 0x460a, 0xccf, 0xe103, 0x5, 0x9, 0x1000, 0x8, 0x9, 0x5b, 0x2, 0x9, 0x0, 0x3, 0x8, 0x2, 0x8e, 0x45, 0xfffffff5, 0x6, 0xfffffffb, 0x4c4, 0x825, 0x1ff, 0xe, 0x1, 0xdd, 0x400, 0x1, 0x9, 0x9, 0x0, 0xe, 0xd, 0x4, 0x4, 0x6, 0x401, 0xc9633b77, 0x17b, 0x0, 0xfff, 0xbd, 0x0, 0x241659e9, 0x2, 0x1, 0x0, 0x18a, 0x4, 0x0, 0xfffffffa, 0x101, 0x5, 0x7, 0x7, 0x3, 0x4, 0xa6e, 0xa0, 0x447, 0xf, 0x1, 0x5, 0x4, 0x37b, 0x1, 0xfffffff8, 0x0, 0x35, 0x344, 0x80000001, 0x3, 0xff6, 0xfffffffa, 0x9, 0x4b34, 0x6, 0xc067, 0x5, 0x9b, 0x66c3, 0x5, 0x28, 0x9, 0x1, 0xffff, 0x5e, 0x2, 0x7fff, 0x101, 0x0, 0x1, 0xffffff80, 0x0, 0x7, 0x9, 0x1, 0x8, 0xffffffff, 0x1, 0x1, 0x100, 0x1, 0x4, 0x7, 0x3, 0xfffffffc, 0x9, 0xdeb, 0xffff, 0x1, 0x8, 0x8, 0x8, 0x0, 0x2, 0x9, 0xb1, 0xe515, 0x2, 0x9, 0xb, 0x9, 0x8, 0x3, 0x8, 0x60c8289, 0x0, 0x9, 0x6, 0x5, 0x1, 0x2, 0xffff, 0x7f, 0xb, 0x1, 0x1, 0x6, 0x7, 0x8000, 0x4, 0x3, 0xfffffff7, 0x3, 0x6, 0x8a, 0x4, 0x2, 0x9, 0x10, 0x4, 0x3, 0x6, 0x5, 0x4, 0xd91, 0x4, 0x7, 0x2, 0xff8, 0x6, 0x5, 0x5, 0x0, 0x1cc28756, 0x200, 0x6, 0x80000000, 0x6, 0x9, 0x3, 0x6b8, 0x3, 0x0, 0x4, 0x0, 0xdecd, 0x8, 0x1, 0x774b, 0x9035, 0x4, 0x9, 0x7, 0x3, 0x7fffffff, 0x0, 0x2, 0xaa6e, 0x8, 0x5, 0x4bbe7854, 0x2, 0xfffffffe, 0x269, 0xfffffff8, 0x9, 0x5, 0x7, 0x435, 0x80000000, 0x6, 0x83, 0xfffffffb, 0xf1aa, 0xbb0, 0x8, 0x100, 0x5, 0xc, 0x5, 0x80000001, 0x1, 0x81, 0x1, 0x1, 0x1000, 0xff, 0x100, 0x7, 0x0, 0x2, 0x3]}, @TCA_POLICE_RESULT={0x8, 0x5, 0x3}, @TCA_POLICE_TBF={0x3c, 0x1, {0x7ff, 0x1, 0x4, 0x6, 0xffff, {0x0, 0x2, 0x3, 0x7d1d, 0xffff, 0x8}, {0x1, 0x0, 0x7, 0x2, 0x8}, 0x11a, 0x4}}, @TCA_POLICE_RATE={0x404, 0x2, [0x5, 0x8001, 0x2, 0x2, 0x7, 0x9, 0x1, 0x3, 0x0, 0x6, 0xf, 0x8, 0x18, 0x0, 0x0, 0x1, 0x99, 0x10000, 0x1ff, 0xd9, 0x3, 0xffff, 0x3, 0x89b, 0x3d, 0x2, 0x5c1b, 0x5, 0x8, 0x8, 0x1000, 0x5, 0x4, 0x0, 0x7, 0x9, 0xfffffff9, 0x1f90, 0x20, 0x8, 0x1, 0x4, 0x0, 0x6, 0x7, 0x2, 0x5, 0x0, 0xffff35a9, 0x8, 0xb, 0x4, 0x9, 0xff, 0x81d, 0x8, 0x7f, 0x9193, 0x1, 0x22d3, 0x4, 0x1, 0x200, 0x2, 0x4, 0xffff4c7d, 0xfffffff9, 0x2, 0x3, 0x80, 0x3, 0x4, 0x1ff, 0x5, 0x2, 0x666, 0x9, 0x8001, 0x5, 0x2, 0xfe000000, 0x4, 0x9c, 0x100, 0xf452, 0x8, 0xee, 0x5, 0x33e5f6ec, 0x7fffffff, 0x2ca5d6cf, 0x5, 0x3f, 0x3d240a2d, 0x8, 0xa, 0x10, 0x7, 0x0, 0x10, 0x0, 0x7, 0xb7, 0x8000, 0x4, 0x7, 0x7ff, 0xf62f, 0x4, 0x9, 0x4, 0xfffffffe, 0x2e8, 0xfff, 0xfffffff8, 0x8, 0x7, 0x3, 0x1, 0xeb7, 0x101, 0x4, 0x216b, 0x8, 0x7, 0x6, 0x9, 0x2, 0x9, 0x5, 0x6, 0x3, 0x1, 0x6, 0x4, 0x2, 0x6, 0x983, 0xffe0000, 0x5, 0x1, 0x2, 0x80000000, 0x5, 0x8, 0x2, 0x1, 0x80000001, 0x40000, 0x0, 0x7b, 0x101, 0x4, 0x6, 0xe1d, 0x4f0, 0x0, 0xffffffff, 0xae, 0x6, 0x4, 0x3, 0x810, 0xd, 0x2, 0x5, 0x100, 0x5, 0x8, 0x3400, 0x3f, 0x1, 0x1, 0x8, 0xfffffff9, 0x6, 0x8, 0xffff, 0x5dcb, 0x1, 0x5d6070ee, 0x7, 0x7, 0x8, 0x2, 0x4f, 0x6, 0xe5e6, 0x8, 0x0, 0xffffffff, 0x3071, 0xfffffffb, 0x3ff, 0x6a4e5f8c, 0x7ff, 0x2c8, 0x31f6, 0x401, 0x725, 0x7, 0x24000000, 0x9cb, 0x9, 0x0, 0xca, 0x9, 0x8, 0x80000001, 0x7, 0x5, 0x4, 0x5, 0x5, 0x401, 0x3, 0x2, 0x4, 0x5, 0x798, 0x5, 0x81, 0xa, 0x6, 0x10000, 0x4, 0xf46, 0x9, 0x238, 0x8, 0x0, 0x8da5, 0x80000000, 0x5, 0xf88, 0x6, 0x6, 0x3, 0xe3, 0x200, 0x40, 0x5, 0x8, 0x3, 0x3ff, 0x4, 0x3, 0x7, 0xa, 0x9, 0x101, 0xbbbb, 0x0, 0xc, 0x0, 0x1000]}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x6}, @TCA_POLICE_RATE64={0xc, 0x8, 0xa3}, @TCA_POLICE_TBF={0x3c, 0x1, {0x7fffffff, 0x2, 0x8, 0x97, 0xfffffff4, {0x2, 0x1, 0xa246, 0x8, 0x6, 0x6}, {0x5, 0x1, 0xfff7, 0x7, 0xc, 0x3}, 0x2, 0x7, 0x5}}]}, @TCA_RSVP_CLASSID={0x8, 0x1, {0xf, 0xffff}}, @TCA_RSVP_PINFO={0x20, 0x4, {{0xfff, 0x10001, 0x1000}, {0x4, 0x2, 0x7}, 0x89, 0xc}}, @TCA_RSVP_ACT={0x136c, 0x6, [@m_mirred={0x1e0, 0x3, 0x0, 0x0, {{0xb}, {0x124, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x3, 0x5, 0x8}, 0x4, r3}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x80, 0xfffffffc, 0x3, 0x3f9, 0x101}, 0x1, r3}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x9, 0x4ac4, 0x2, 0x3, 0x7}, 0x3, r7}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x8, 0xff, 0x1, 0xa, 0xfff}, 0x4, r3}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x9, 0x5, 0x7, 0x9}, 0x2, r8}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x4, 0x80000000, 0x5, 0x3, 0x2}, 0x1, r3}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0xff, 0x4, 0x10000000, 0xffff0001, 0x3}, 0x3, r10}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x8, 0xc, 0x4, 0x2, 0x48000}, 0x1, r12}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x1, 0x5, 0x8, 0x1911, 0x3}, 0x2, r3}}]}, {0x94, 0x6, "c7c486df154c000b41d42333ff3aa3412e1b4c343cade0cc68742800df8e09d090ceb12fc4a411d1ac21dcc29db915e790c489296805beea0fdc317ce70dca9eb6cd5b1401d71e3951576cd53a8b25b4b64f9ca4ed0c87e0ea44ea3446647dd8608a8c28607d3c209596c753271a05af267e3daf69da5342f28eab583ca9987e6828d6887acb65fa44d66de40fdecc0f"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x6, 0x1}}}}, @m_ife={0xf0, 0xa, 0x0, 0x0, {{0x8}, {0x50, 0x2, 0x0, 0x1, [@TCA_IFE_TYPE={0x6, 0x5, 0xd61}, @TCA_IFE_PARMS={0x1c, 0x1, {{0x9, 0xa, 0xffffffffffffffff, 0xfb, 0x6}, 0x1}}, @TCA_IFE_METALST={0x10, 0x6, [@IFE_META_SKBMARK={0x4, 0x1, @void}, @IFE_META_PRIO={0x8, 0x3, @val=0x7}]}, @TCA_IFE_DMAC={0xa, 0x3, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}, @TCA_IFE_SMAC={0xa, 0x4, @broadcast}]}, {0x79, 0x6, "9ffae48ac945d2bcab333b53d29109247c017ad8fb4061fcc70017e749426ca7e77af20581246647b5ed35149e81a7b86c16491583ae9e239dee532f5edaabf65e0946c484767297d7aef3b8fe60465fa27c7ad82ba464e9b1b73ceab6d4841cfb5995595cbbc96bdae22f21a34edc84a317e959d9"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1}}}}, @m_vlan={0x1098, 0x9, 0x0, 0x0, {{0x9}, {0x6c, 0x2, 0x0, 0x1, [@TCA_VLAN_PUSH_VLAN_PRIORITY={0x5, 0x6, 0x2}, @TCA_VLAN_PUSH_VLAN_ID={0x6, 0x3, 0xde0}, @TCA_VLAN_PUSH_VLAN_PROTOCOL={0x6, 0x4, 0x88a8}, @TCA_VLAN_PARMS={0x1c, 0x2, {{0x2, 0x0, 0x20000000, 0x4, 0x1}, 0x1}}, @TCA_VLAN_PUSH_VLAN_PRIORITY={0x5, 0x6, 0x7}, @TCA_VLAN_PARMS={0x1c, 0x2, {{0x9, 0x80, 0x0, 0x2, 0x4}, 0x1}}, @TCA_VLAN_PUSH_VLAN_PRIORITY={0x5, 0x6, 0x3}, @TCA_VLAN_PUSH_VLAN_PRIORITY={0x5}]}, {0x1004, 0x6, "2b82e6b2cd32b2e4e54c0abac907047b94b5f977e9c2b5a7f20f587831d0e2dbd07ebbbca387db8a8568dad69236a5363ce980a0dadb22e418b8640a9db4cecdef70a14cc6e8516b2ac5f74c26b8cfcb42f81b807910241710c9cc9fa975e7f968d81e73974384360fecbd12d035b80191b0fdfe2b382b1efda2240805ac7554031c033cda57f567c1dc33c7dce3ecedac75ffd73876cbf927966d915ad98721f0f7929376eee9486c20f379d01ccd7ccd97b9beb056d8959912831d478dae3b83ba22df9a32f1d51654b01fba58a3d380b9b83d0afad4a7371e8a04d8f59d58ead427108188bfd128f60c2f15f8402936ed8cc2e6ae3746deb243817a48f4644340b4f9c4a0067579cf208754e8da4f0ed8a3e795622bd6bd86fe1b07935566a7f36ece4d2c1e0ab28a0ed59c6d1767e3692def7579fc7a8569f2a31b65f25169773c5332e4ff9ee593905f4bfeb196ce0758eb8f338f39e61dca79708c0084b8780dba0221c8912e59de504d479984e8bb077c4e423ae24055b0428943cd90af8568fb5e7297ce9b777a4fad6a96270c4007ba115f74f0c157359082a64fc7d0dc96a22615fb6e1110ef46d46534d75f794aebe36699582d1d669c0970314159362d2a96a739740a7b99f2e332b778fccd07ce7dc549358b7508bd842d3ab3d7141bc224f4449e054a669c386ba17ecfdcdf11aa09c66a6ef9a7e054f92c745c00f9264aa1c1361cd6897838be5916c95ff6e71f30706875d4de70c828c0172bbf4974dc3eac44c552478b962a2464a33c9e4fdb9b2c2f4039dffaf168e1fa20c109ecac8cee77a6b23f6ebdbf04b4a57ed372528e2a7d4c17c9560ca927dd18b5b9251e41177585f1d893807407943ab2eff77cb7c8bba186d1102030236902a377ab0429cdbf4b1a2c43782e79097a2f2643d68156af87ff8117047c388597ae8ccda262ca9eb6b8a35b48517192c0ec5c0fb34b2c0b38ddb098bcbb5f9daf7dece12e679da845eb3037d2c171c2f157355862c2c636172e849f9f5887ba95ff09e125732d0b11bf3de5a1711be728d7eb5438efed6b3472dcc076bf8d9276617056009352328a617278fc2175fa0c16beaa7d23365b49a0f3d106e7fadcd0eb3e9119110686bd25f398c96bfb41d0e3fd536fb1e6e3624f56208133830e39ca4c20d89a6d55254d68f4f3319217e7ac84f09be4d3cc2aea34b9b7b12347f5597798135803a34c6c9f1d3ee7f835b5bc9c4e874a18d4fb840ddf26d6dbaf88a8803c249ac17a45af5b6e7d379806d32f93ec2501a353283ebd48a86b80e380b7825827d61f3b43175fcd16b612078df09a1b01329cb0bc803114e748d62a0acda65f307bdc5b65172dfee0553f4758b6fa3a246849ddfef62db97a9f5221485a5393cafa9161ae917e320a358094fa9cba1a409a63ee62464fc08bf038ecc3bf7a1269335efe7c23b9b026ab96ed0bc04d53bd9aec7f50f1fe7be92d63cf3039405551b79840d6e392d703bd5ff6aad7b9bb56634692fbc5e278c6031ed355eca62147b34feb2ec9ec8f8c22b252ea19dcf6299e04dc4ecd2dbced20a6ef18e1d3cf915d1befa2b4626c7810c7eda7ec4197c983c178772bdd6845fffe23f5fe30788d348ede264310a30a4a3a7fec26f85bd850ca02b324aa4dd65f32b9c8dc1c40791378490568ac7b07ad1f2561532ad5e751536b530c6e6b763d932bbc4616b85d18a721a29414b289efdd10dcf9c42216f9367de136274d2f03bf41ebcf62ff63f12894f82b39a6e8f4a8cc516f9e2a1520aa186130a983ae42ba1842876a5c7d0b391aa706a19712fc82f8d820cf2d5d963f96dc2dbc766c8548466bf7a17cba5a43316b8028d03d5af055266591a31718eeaf6f5b8231308b78f4f5b3b9df2e846e575139ab83e9e2ea47aa4140de11351f835e0b89634e19b528b35a6fdc897bd18f3ec0462ade631ab205d68b51f2c7b8648f9685695372ed98d8e57d5aa8cf0a7e9e6bc3a6d34041ce07f251a0297417f12e7d6391d78d5973493846d0f646a5f0501b199d7e69761a664cccb7244cdfa3343922632c2bf5157fd9ec3d2eebf4a0d8f32aad536f7349e759959d0275eda3a5af743b89659f65b95c36e8bdd8737c2d3da5a485c80992717ebc8700064551d3b673e11168d82983d4c7c500345ced30c0fdbf39c0494708dca36b8f19bcf59bd91a89e0e8278cc67e7f00a83af2a4ae092c9ccbabcda0fd6632c6e5043841279939a36f8f7c39af7af95c9da97a9c41ee8d8c66b01f7290afcefa7a9272d19da0f9367422ceae062454aa1270349ca717bcb00ee507c0e901ae2c7676fb21803c3c2f5842324beb452bdd098a088f47226e8926b368977092a1d4beef61064481e38aa9f21497bbad149953795f45ba1a0cefb489df448d262e706efa23f3be7ed807be24588efb3a1b5d153f3b825797a69a74f4189c01c071b5c1ef646cccb55b70ad5193684718d223d1905414e6b6527e86c4e48b8cb1b80f3987db27a0d78a7c03b881d16f8ebe359a79504ab97f317a8f318d397dada9af1654a0b0fa9e2c73fdcdeb068e1e950083373b5e89b08ca379bdf903858ba195f9dfb8d3dbd5575ca08bedb8705f6595b80d99316c603f2198185bcda84da40e7d47c1dbcceb723ccf21c862fafa0c4c05b3ad1ad83f380b33f61aa6ced652b241520710c9638d2836562b72b88b7d6887b9a767a2a90c7989499759b17de943f5f73a78eaca549e149ea75e4b2972d0582d46b33fef05cd6c943abed8fb8c26cf72fcbd50447d5b0969b2939ffc03b8ec3f8961b404a9b76ad9d65d65878b0d25cda4cb19dc00f90c618cf1827f1a1a84cb6e02d78f5b2eb0ee209a5a99b8fc97e98182914947290cdf382ec4d382ae55de782b42ba7508e57ad2e71d3b46e3817a1c8584dbe35ea684460c1369ebd79a0bf579a3244c7fe27016d35f23bc977671dae10dfdeb15081923b260bc745e6e6c5be510807add24aa1d5f372ce7669cfd5e6ce7e04251897042dfa17013a543da34f29bc9aaacfc1969d13f9d669c66c2a848f3f2c918f45a82e1254dd6fbec33f6b519f60059d403f728d9ea51626cc0fbce00dc4d7c08058346d3aada86ec6f937b677857ba4e3411380e1923ec63cbfee453382679ef3b4241e32da69f96030fa3d50cf48c4010299c944d297a2ee8610a9ef03302f99c24c1a3916494982e5debed876626ac75f9fc832353d909e6d1b283bb1a0521c586db486f330c75f62e3c9c9e39fbb3eb23c554f243f1a979d236a91bc1332d3d09ce2138995b23bdfd741c2a755752be2148cc841eacc7fe77c12efe94f9d075d85eec31468e28ca85c197607c71d9eda4af6419cbade64993fcbd9bfc7d95a57b8dedf56181e0ed4717eb185ad18217a9bf8d4a1f2af9e48a2f90c73da879e820f7f0d49ee9d3a12032f87f9643d6ed5e086cc6e3cfdaa507d18a7152a1e4c1bb67873e7f096f05f1682f3ffde59564d32c9477b957cdae4a6066d9b426dc17970b331b6529a010e5d6248c44596f0ae2101735dfe7f19d13d90763352ae26c83e12712b5b034d64f04b3ab6abd4b90f6d63f8cd45a8cd2a748b641257bc554d34426f5f4ab06509910a2898886995b835fd7d595027f71b47f801afa4264667fc3c157ab303132db873a52d32c0c039a6f55ad46bf28c78817511c2482b8deafa3c7e79fa37736014f518a2d45e8f11033f8a42ddd77a94d170bde8a8851111b6983e6c8218c5e75d6b732a3e1f8678d99c833d9e3fcfd72ccf3ce760056c923bd297822b935ef5d2d54dd47201890bb7f1bac6b155aae832e30e4959f5cfaa0bec4e025523b368a1752044e774b0221f2946fa51c06ce71d84872918755d844749ca81dfd3202a0e62a1185b14045e9d6a999b7ccec4859d8c9eea438b4f2eb075eed31cb1ae7522dcf07bd092eda945ccc797421702fa44fe0002873c3cfd7c9811912c1c9204e0ec00dfc74afd68ce25d4ae257770435ed49c80278c2dc9c678c7d742c058e158a8c75a63b538e021410ebd1da19923c79786d54ccc931c53e00b942dfed85b3769eb743d1f7b1db33c71ac0a88a49e8850b6b8f4f0b6ecc59a32bb1a2d4a6e6eab644da3d7475d76f5bc6d7719a5f951ff27966d11f0235afd2628efca0fa718ef76925c9bf7711f0424724eab8adb08c2ce9d61895f1eea7b1623b93e0e06f1a8ead566f8c01aa04d88f8d0b9bcf3348b34e82e41cc6900ee8f5f085094ee55cf1a344139fff97d1bfbbd216e2bc3131ae67b9ff99603dd9aa48838a6e0d7b52585f317b2512fb57cd41bc0c7121b9dd9e22a8a2caea411c9b4b82e4266298d48fdee5bed896fb6c413a70e0701480b5e87534d98c46e2c0fdc37482685cdb5a798d217282a4edb49d6b6466c918671cedc1a089a7d7702a26c59b05b06897f025e22ba05dbf0704cad514ceb295cd69b8c4320825cbf50129bbc6c6f923598b0e94f229ab8ecda32e382d301489266604b0873fa3f33898c707f709a475e6cf71c5a573d4ba718b5c1921b7c32911c2ab1cebdea86f1bd9d7e1eb9c20b9fd02175a2fbf09a625e64cdf40b33d2df77bf91936a881a76a2deba0b0196a11a6ea7a56307b4baa605842c1d8ed827c1bd92b68a49addc2bcc049e275070640ea860ef587d29055e05986165dde39f13bac36edff8d75c6d1bf37f293f842fc390be1ed99f4a5ebdcd58b406889b2983be04620653a961c0a97145e38a2e210fbabc66e27751f761d8c5ab49060cbc135a4481ec5d5646eab4ba1ce367f4d1c463624abcbce633b343ca39ae70c3554b877f04d56ee703589881ddd97ddef00a38e77b539e2dfb2ad534c0b123dcb2e11a353100cb40647f55921a36533be2913b3dbabebdbcda608498398e1109be1ef5e3dc6926ea49af872459ff80f3d779fb07aeeede39083a2e2f3988a75e5093e086da7a93a2dd6ffc812fd82155a2317adbfd356aa1d5816c6f4c3114b78ff309863e027507d815932bbd0be79e8f30b124251316412efb3ff086ecc2db5b7cc166fe50d1dc47efc92bbc2aa3ebea90cca598c5d8b8f1fcba94fc5fe2fc87644ec5a64d1b6bb35fac5cb7cc672d898f42c848a34053a2dedca53e6751b5f1442a913806ec0d55c4fc7d5dd3ffe6d47138d047999ebe85fc6788d5edaa7a107f9e558cd4d96b8a558cf88267f0d6fcd294755d60c2e846ba1cac38ebd07f270b58c04ab8ec629c273aa17c08e7a9aa7888a3074828f58f3fc93c585092e4c254501757b3592b23dd02e0e1f9e917932d115416867ef2eac9ec247596daaa40ae15875adf613ae8685cb9dba5f83993f944c9c5fd054c8fb792e013f2d969e808a1c5e4712fa9e56f0ddcdebccb5c15fcfa25d0953fc0aee0cb54cdc8882a2f9b6b62e2e2fd9d32ec88be0f30bede7b2b9e4709ea416c4e9654971fc75e76bb62405e38f34de32f94db64900df68406e60be438bdf1d601b8d3c87a46a48eef3722095282511c7f6ee37acc9ee7b5b499a519e9a53fe15b6b6d6de32bc78efa9f34a7b03070fb2b91ffe6b21561ca4db13dbd3f2c1f282957be310f0af32a6aaae6f68bb11a24a8f03b629fc319f18ed1b7cfa2b20ae3c464ecd5fa720593ccf4cd0a8f64ae7fd043e9d61fb05574b925b6aac404a99cee67973c9f52cd3e631aac2639757d724b735bc9fdf375dab4899580eae8fd6c55bd9d1d7b0f82ab1aae2e85da914d79cbe559bd26672ebc0b23365c84922e0a1a69f7476aefc6897b1be0c69f078f896026052"}, {0xc}, {0xc, 0x8, {0x1, 0x2}}}}]}, @TCA_RSVP_POLICE={0xa8, 0x5, [@TCA_POLICE_RATE64={0xc, 0x8, 0x8}, @TCA_POLICE_TBF={0x3c, 0x1, {0x7, 0x6, 0x1, 0x5, 0x0, {0x2, 0x0, 0xc, 0x9, 0x8, 0x2}, {0x0, 0x2, 0x2, 0xffff, 0x200, 0x10}, 0x2, 0x101, 0x401}}, @TCA_POLICE_AVRATE={0x8, 0x4, 0xaad}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x6}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x3c9b8608}, @TCA_POLICE_TBF={0x3c, 0x1, {0x4, 0x5, 0xc84, 0x5, 0x4, {0x9, 0x0, 0x4, 0x7, 0x3ff, 0x8}, {0xb, 0x2, 0x0, 0x2, 0x25ba, 0x81}, 0x6, 0x6, 0x1000}}]}]}}, @f_rsvp6={{0xa}, {0x25f8, 0x2, [@TCA_RSVP_POLICE={0x14, 0x5, [@TCA_POLICE_RESULT={0x8, 0x5, 0x5}, @TCA_POLICE_AVRATE={0x8}]}, @TCA_RSVP_ACT={0x2538, 0x6, [@m_xt={0x10c, 0x1a, 0x0, 0x0, {{0x7}, {0x98, 0x2, 0x0, 0x1, [@TCA_IPT_TARG={0x91, 0x6, {0x8, 'nat\x00', 0x66, 0xa, "de55eb0cd0a9dbc27c00e25bba6d0d70dc31460158dc0cb7c2907c34ac6fa2d2918df3a70bf91fc20897b5b9e2ebca1f527b3dbb6c5b1eae8842be7006208a1a72da4fac35c9506701acc162ec5666179537949ad954525294ed67c1e8ed5358488272204ba7f8"}}]}, {0x4d, 0x6, "7aa9464f7ee1bbaa11106a467caaf67cfdff17e8decfc8244bb100e6066598b2bf67611e0ade0aa7c736710936b3162633e0516c7061e92b96abba98e59ea4c1e926a6452b2997cca8"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x0, 0x2}}}}, @m_gact={0xc0, 0x0, 0x0, 0x0, {{0x9}, {0x1c, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0x1, 0x80000000, 0xffffffffffffffff, 0x2, 0xbd}}]}, {0x7a, 0x6, "852a4053a25f03101297eb82adaf41b25aa2af7fdd7b5f952ada92165eed0b50beaf07bbfb3a0394b84677d47b62c2e6fec628091d5b4c82f12d33e856af0338b5167f172e4c9b3a5ae3e18167e414f533fa74c7e13991ace171b2e4e9821250d685523e72eb304ae060f04f7513d5f3016b9c56d146"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3, 0x9b30361b836e8888}}}}, @m_skbedit={0xa0, 0x1e, 0x0, 0x0, {{0xc}, {0x14, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_PTYPE={0x6, 0x7, 0x4}, @TCA_SKBEDIT_QUEUE_MAPPING={0x6, 0x4, 0x8}]}, {0x61, 0x6, "8a361f45c4995ca8ebcadfd43dc26e0cedfcad06374543270a2e2111457e890180d9e227d1af3808fda4b33d22a1afe97152162cdd64e922eb4854f730b37c9d4b108575b94d34ec9135ad55a987cea32a9c9c1601f081b3a8e11624fc"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x2, 0x2}}}}, @m_mirred={0xf4, 0x16, 0x0, 0x0, {{0xb}, {0x44, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x9, 0x9, 0x7, 0x5, 0x8}, 0x3, r3}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x9, 0x3ff, 0x20000000, 0xc, 0x3ff}, 0x4, r16}}]}, {0x85, 0x6, "c9a1eb65655cefa33988271418ed0ab0cf56de8ca869f287988edd04483463900ed168fe11adaffd8873cd12304b993929f922d747c97d376f9e8781534a61f1da29a0e73496ba7d0bcf3be9b40c419a4bf362ca5bed1167852ade18a3336c4c16db938a34a4dac6c463bf71ec84b803c4440962e71083d14ce74e18bf4ab1b80d"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x2}}}}, @m_skbedit={0xcc, 0x7, 0x0, 0x0, {{0xc}, {0x3c, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_PARMS={0x18, 0x2, {0x6, 0xa, 0x4, 0xd, 0x6}}, @TCA_SKBEDIT_PRIORITY={0x8, 0x3, {0x9, 0xe}}, @TCA_SKBEDIT_PTYPE={0x6, 0x7, 0x4}, @TCA_SKBEDIT_QUEUE_MAPPING={0x6, 0x4, 0x6}, @TCA_SKBEDIT_PRIORITY={0x8, 0x3, {0xffea}}]}, {0x65, 0x6, "4b24cfb1503e4d8abe2a16dacc24cd8378e0c222167ac5eb6e378c748016bd44a31b91880a14233f78d73d4380ab498be36f68c18892b303968349b6d45cae9771055b5940c0ee236c9938d35fde0acf18849d99b66c9e55fe3abb215956aec7e8"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x2, 0x1}}}}, @m_mirred={0xe8, 0x18, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x27d5ae0c, 0x6, 0xffffffffffffffff, 0x17fced2a, 0x4}, 0x4, r3}}]}, {0x9c, 0x6, "24e229ca274f60d6e1434c2b53925b7334991d8f3e0725d10f9b42f3267aa0cf42093216a54f7818c22a151d94ae6b79beb73609d9fc94662fa31c2d6ffd03d878c9180de6d65d1c44abc93a01084ce687f604196e45467559b47663dde072b50f23f1dadc05617d2b42a5a0f81fd40fceb6caebe99ed123724d6d09bcf6431268eb48c8810cac1fe4d26d8a8c5a284d66bc0f1b295b413f"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x2, 0x2}}}}, @m_mirred={0x190, 0x20, 0x0, 0x0, {{0xb}, {0xc4, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x9, 0xfffffffc, 0x1, 0x1}, 0x1, r3}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0xf, 0x6, 0x2000000c, 0xd, 0x2}, 0x1, r3}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x1, 0x5, 0x1, 0xfff, 0xfc}, 0x4, r3}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0xfd72, 0xb, 0x4, 0x8}, 0x3, r3}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x9, 0x10a6, 0x0, 0x4, 0x7}, 0x3, r3}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x9, 0xf9bc, 0x4, 0xfffffffc, 0xde}, 0x3, r3}}]}, {0xa4, 0x6, "2e57388ee5c6620a1951d3521db55d28329992eb5fe04d8fcb97d1b72f928798da207159c5630d1bb526e04ee0b3fb390954345b695838b2fd946872ee7affe88e31d2c2228da4a98556023b0915eed98da1da84c2f3bad7a79c3c8df445eeb4ccb5ae4e8b168e7a98d87be62788c3341462514462db75d241b07e79279d01f6583390c9ae12a54353d45401d3deaa18dc31abf2a7eefaf39352fb12465843b2"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x1, 0x2258bb2cac8ab73c}}}}, @m_police={0x1d48, 0x0, 0x0, 0x0, {{0xb}, {0x1ca4, 0x2, 0x0, 0x1, [[@TCA_POLICE_AVRATE={0x8, 0x4, 0x10001}, @TCA_POLICE_RATE64={0xc, 0x8, 0x8}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0xa, 0x3fa5920d, 0x4, 0x40, 0xf2, 0x0, 0xfffffffe, 0x3, 0x5, 0x3, 0x8000, 0xd78400, 0xffff, 0x6, 0x7ff, 0x6, 0x2, 0x2, 0x3, 0xc7f, 0xffff7fff, 0x9, 0x0, 0x1, 0x15c, 0x7, 0x3, 0x80, 0x1, 0x3, 0x6, 0x16, 0x3ff, 0x7fff, 0x6, 0x9, 0x400, 0x40, 0x401, 0x67c8c7d8, 0x20000000, 0x1d6, 0x3, 0xe000000, 0x78, 0x57, 0x44ec, 0x8, 0x10001, 0x6, 0x2b4, 0x6, 0x81, 0x0, 0x401, 0x8, 0x8, 0x2, 0x3, 0x6, 0x800, 0xb, 0x1, 0x4000000, 0xe0, 0x5, 0x8000, 0x4e69acf3, 0x80, 0x3, 0x4, 0x9, 0x2, 0x4, 0x2, 0x1000, 0xf5, 0x8, 0xd7, 0xfff, 0x590, 0x3, 0x0, 0x0, 0x3, 0x85, 0x7, 0xf97, 0x3, 0x1004, 0x1, 0x0, 0x200, 0x9, 0x3, 0xa, 0x1, 0x9, 0x7fff, 0xff, 0x9, 0x62c2, 0x3, 0x6, 0x6, 0x8e, 0x9, 0x352, 0x10000, 0xffffffff, 0x5, 0x4, 0x0, 0x1d20, 0x2aad, 0x10000000, 0x401, 0x7, 0xbf0, 0x6, 0x5, 0x9, 0x6, 0x10000, 0x3, 0x6, 0x4, 0xc, 0x4, 0x8, 0x0, 0x71d, 0x0, 0xffffe3fc, 0x8, 0x6, 0x1ff, 0x7fffffff, 0x0, 0x5, 0x8, 0x2, 0x6, 0x3, 0x2, 0x1ff, 0x7, 0x80000000, 0x7fffffff, 0x8, 0x9, 0x401, 0x7, 0xb, 0x4, 0x4138452d, 0x80000, 0x5, 0x9, 0x6de, 0x8001, 0x1, 0x7, 0x1, 0x7, 0x9, 0x1, 0x9, 0x5, 0x5, 0x0, 0x401, 0xa9, 0x800, 0x3, 0x8, 0x8e, 0x9, 0x6cd, 0x9, 0xc, 0x2, 0x2, 0x4, 0x1000, 0x6, 0x0, 0x4, 0x8, 0x1, 0x9, 0x8563, 0x200, 0x2, 0x9, 0x6, 0xf679, 0x2, 0x8, 0x3ff, 0x2, 0x1, 0x9, 0x9, 0xb4c7, 0x9, 0x5, 0x4, 0x2, 0xffff, 0xfffffc01, 0x3, 0x4, 0x6, 0xfffffffc, 0x5, 0x8000, 0x5, 0x9, 0xfffff9cf, 0x8, 0xffffff81, 0xe7e, 0x2, 0x2, 0x10001, 0x2, 0x4, 0x2, 0x80000000, 0x5, 0xb, 0xffff, 0x9, 0x0, 0x0, 0x401, 0xffffffff, 0x6, 0x4798, 0x8, 0x2, 0x0, 0xd, 0x9, 0x6, 0x4b561433, 0x0, 0x69fd, 0x10000, 0x8, 0xffffffff, 0x2, 0xbd2, 0xfffffff9, 0x401]}], [@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x56d7, 0x7, 0xb, 0x8, 0x6, 0x0, 0x4, 0x1, 0x9, 0x24, 0x8, 0x6, 0xcf84, 0x4, 0x9, 0x6, 0xfffffffe, 0x4, 0x3, 0x5, 0x8, 0x4, 0x2, 0x3, 0x3, 0xfffffffc, 0xb0, 0x7, 0xb, 0x100, 0x8, 0x4, 0x0, 0x9, 0xff, 0x1, 0x1ff, 0x0, 0xfff, 0x4, 0x10, 0x80000001, 0x58dbe417, 0x0, 0x8, 0x9, 0x7fffffff, 0x3, 0x7, 0x3, 0x3, 0x4, 0x1f4, 0x3, 0x7f, 0xf3, 0xa15b, 0x9, 0x3d3b, 0x251b, 0x1, 0x8, 0x4, 0x7451, 0xf, 0x5, 0x7, 0x0, 0x6, 0x400, 0xff, 0x4, 0x7, 0x2, 0x42, 0x8355, 0xfffffffd, 0xd, 0xb64, 0x8000, 0xa8f5, 0x10, 0x2f, 0x5, 0x7ff, 0x9, 0x4, 0x200, 0x6, 0xfffffff7, 0x74, 0x2eda, 0x6, 0x7f, 0x8, 0xfffffff7, 0xb233, 0x9, 0x5, 0x8, 0x10001, 0x8000, 0x0, 0xffffffc0, 0x10001, 0x1, 0xfffffff7, 0x5, 0x3, 0x5, 0x7, 0x6, 0x6, 0x10000000, 0x10, 0x5, 0x4, 0x0, 0x2, 0x800, 0x2, 0xfffffffd, 0x1, 0xa3, 0x9, 0x1, 0x59, 0x9, 0x0, 0x1, 0x5, 0xffffffc9, 0x1, 0x8000, 0x4, 0x6, 0xefe2, 0x8, 0x7, 0xfffffffa, 0x3bf2, 0x2, 0x200, 0x80000001, 0x6, 0x5, 0x8a, 0x4, 0x4, 0x9, 0x400, 0xc803, 0x1, 0x3, 0x0, 0xfffffff2, 0x3, 0x6, 0x9, 0xeb9, 0x1, 0x7, 0x9, 0x3, 0x6, 0x51a3, 0x8, 0x3, 0x4, 0x0, 0x6, 0xecfb, 0x7, 0x100000, 0x7fffffff, 0x2, 0xfffffaaa, 0x0, 0x1ff, 0x2, 0x81, 0x8, 0x7, 0x1, 0x400, 0x0, 0x6, 0xe60, 0x1, 0x3, 0x0, 0x3, 0x0, 0xfffffff8, 0x9, 0x101, 0x400, 0x7, 0x2, 0x8001, 0xa418, 0xffff, 0x9, 0x7, 0x80, 0x37, 0x2, 0x7, 0x2, 0x9, 0x9, 0x4, 0x8, 0x5, 0x4b3f, 0x7fffffff, 0x3, 0xead7, 0x7fff, 0xe, 0x6, 0x3, 0x6, 0x8001, 0x6, 0x94aa, 0xff, 0x7, 0x5, 0x3e, 0xfffffff9, 0xf, 0x5, 0x101, 0x80000001, 0x0, 0x5, 0x9, 0x9, 0x3, 0x0, 0x9, 0x4, 0x10, 0x9, 0x6, 0x7, 0x100, 0xfffffffd, 0x80000000, 0xc6d6, 0xe14, 0x3, 0x5, 0x200000, 0x2]}, @TCA_POLICE_RESULT={0x8, 0x5, 0x3}, @TCA_POLICE_RESULT={0x8, 0x5, 0x8}, @TCA_POLICE_RATE64={0xc, 0x8, 0x80}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x7fffffff}, @TCA_POLICE_RATE={0x404, 0x2, [0x6, 0x8000, 0x3, 0x2, 0x3, 0x8, 0x9, 0x0, 0x5, 0x6e70, 0x4, 0x6, 0xfc000000, 0x5, 0x80000001, 0x8, 0xfffffff8, 0x40, 0x4, 0x2, 0x39, 0x800, 0x6, 0xfffffffb, 0x400, 0x80000001, 0x9, 0x3, 0x1, 0x9, 0x4, 0x2, 0x7, 0x200, 0x80, 0xffffffff, 0x8, 0x7, 0x4, 0x7, 0x3, 0x1, 0x4, 0x9, 0xff, 0x0, 0x84d4, 0x2ae, 0x6, 0x7, 0x8, 0x6, 0x7, 0x6, 0xfffffffe, 0xd, 0x40, 0x3, 0x1, 0x1a4d, 0x6, 0x38ef1db3, 0x8, 0x9e2c, 0x7, 0x0, 0x5, 0x7, 0xc, 0xbe, 0x9, 0x4, 0xffffffff, 0x0, 0x3, 0x10001, 0x0, 0xc48c, 0x8, 0x8000, 0x7, 0x40, 0x9, 0x5, 0x8, 0xb1a8, 0x6a, 0x4, 0x40, 0x3, 0xb, 0x0, 0x5, 0x8, 0xc471, 0x4, 0x4, 0x1, 0x0, 0x3, 0x47e4, 0x3, 0x9, 0x0, 0x8, 0x6, 0x0, 0x2, 0x1, 0x2, 0x7fff, 0x8, 0x5, 0x5, 0x9, 0x515, 0x5, 0x8, 0x9, 0x2, 0x1, 0x4, 0x401, 0x81, 0x5, 0x1ff, 0x6, 0x5, 0x3, 0x0, 0x4, 0x6, 0x8, 0x101, 0x3cd, 0x200, 0x5, 0x1, 0x6c98, 0x3, 0x6, 0xe6d, 0x0, 0x1653, 0x401, 0x3ff, 0x1, 0x5, 0xfffffff9, 0x6, 0x7fff, 0x2, 0x3ff, 0xea4, 0x2, 0x3a7905dc, 0x14ad, 0x10001, 0x9, 0x3, 0x5, 0xec, 0x612, 0x6, 0x8, 0x6, 0x9, 0xea6d, 0x8, 0x1, 0x9, 0xfab, 0x3, 0x7fffffff, 0x7, 0xfffffffc, 0xfff, 0x8, 0xa, 0x7, 0x3, 0x3, 0xfffffff7, 0x8c, 0x1, 0x4, 0x9, 0x4, 0x100, 0xffffffff, 0x2, 0x0, 0x5, 0x200, 0x80000001, 0x4, 0x6, 0x8, 0xaf7, 0x101, 0x4, 0x8001, 0x401, 0xfffffff9, 0x5fa8, 0x8, 0x8, 0xffff8000, 0x3, 0x6, 0xac1d, 0xfffffffe, 0x5, 0x92, 0xffff, 0xffffffff, 0x6, 0x6, 0x8, 0x1, 0x1000, 0x0, 0x7, 0x7, 0x80, 0x8, 0x2, 0xf, 0xa, 0x5, 0x8, 0x100, 0x8, 0x1, 0x8103, 0x7ff, 0x0, 0x6b53, 0x0, 0x0, 0x4, 0x0, 0x7fffffff, 0xb, 0xf, 0x1, 0xffffff4b, 0x3, 0x1, 0x32763457, 0x80000000, 0x1, 0x4, 0x5, 0x4, 0x5]}], [@TCA_POLICE_RESULT={0x8, 0x5, 0xffffffff}, @TCA_POLICE_RATE={0x404, 0x2, [0x2, 0x80000001, 0xe, 0x800, 0x3, 0x9, 0x3, 0x10000, 0x2, 0x411, 0x8, 0x3dd, 0x10000, 0x0, 0xcf7, 0x1ff, 0x6, 0x7, 0x0, 0x8, 0x5, 0x7, 0x101, 0x6, 0xffffffff, 0x5, 0x1, 0xfffffffb, 0x9, 0x9, 0xc1, 0x6, 0x8, 0xfffffffc, 0x4, 0x2, 0x80000000, 0x8, 0x8, 0x4, 0x54ac773c, 0xfff, 0x4, 0x5, 0x40, 0x3, 0x7, 0x3, 0xc9ef, 0x6, 0x1, 0x6d5, 0x8, 0xffffffff, 0x6, 0x4, 0x9, 0x7, 0x7f, 0xffff, 0x1, 0x0, 0x9, 0x3, 0x5, 0x7fff, 0x7, 0x373, 0x6b, 0x4, 0x3, 0xffffff0e, 0xfffffffb, 0x2, 0xfffffff4, 0x0, 0x3, 0x0, 0xf, 0xffffffc3, 0x2, 0x1, 0x8e1, 0x3, 0x401, 0x19b, 0x7fffffff, 0x0, 0x8, 0x13c, 0x101, 0x2, 0x4, 0x2, 0x6, 0xffffffff, 0x81, 0x1, 0x4, 0x9, 0x8, 0x2, 0x2, 0x6, 0x7, 0x8077592, 0x8, 0xe3e, 0x3, 0x7, 0x3, 0x0, 0x8, 0x200, 0x3, 0x80000001, 0x10, 0x6, 0xa3, 0x1, 0x0, 0x8, 0x9, 0x4, 0x3, 0x44, 0x6, 0x9, 0x45ae, 0xffffffff, 0x766b6463, 0x3, 0x6, 0x40, 0x1, 0x9, 0x7fff, 0x5, 0x70, 0x9, 0xfffffffc, 0x1, 0x2, 0x9, 0x0, 0xb6, 0x4, 0xfffffff9, 0xffff3fbc, 0x883, 0xffffffff, 0x0, 0x0, 0x3, 0x8, 0x1ffa, 0x8, 0x7fff, 0xa, 0x8001, 0x5, 0x2, 0x2, 0xfb3, 0xe, 0x2, 0x6, 0x9, 0x4, 0x7ff, 0x3, 0x7, 0x4, 0x80, 0xfffffe00, 0xcb, 0x80, 0x6, 0x1, 0x5, 0x1, 0x8, 0xcfd, 0x7fffffff, 0x1, 0x9, 0x1ff, 0x99, 0x7fffffff, 0x7, 0xd, 0x6, 0x3, 0xf4, 0x3, 0xc, 0x8, 0xdc4, 0x80, 0xb, 0x3, 0x1, 0x58, 0x4000000, 0x6, 0x8000, 0x8, 0x6, 0x7, 0x3ff, 0xe34, 0x12c, 0x3, 0x10000, 0x2, 0x7, 0x6, 0x10000, 0x10001, 0x3, 0xf85e, 0x3, 0x4, 0xe, 0x7, 0x6, 0x9, 0x9, 0xffff, 0x2, 0x4, 0x7ff, 0x9, 0x6, 0x42e8b2b1, 0x949, 0x8000, 0x3, 0xfd7, 0x2, 0x7fff, 0x8, 0x401, 0x4, 0x6, 0x3, 0x8, 0x28, 0x8, 0x7, 0x8001, 0x3, 0x7f, 0x361, 0x9c7, 0x2]}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x3ff}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x7, 0x5, 0x0, 0x8, 0x80000001, 0x1, 0x4, 0x0, 0x2, 0x8, 0xfffffff8, 0x6, 0x3, 0x2, 0x2, 0xfffffffe, 0x9, 0x3, 0x3, 0xa, 0x4, 0x8, 0x80000001, 0x2, 0x7f, 0xd371, 0x80, 0x9, 0x25b, 0x80000000, 0x6aea1323, 0x3, 0x8, 0xf, 0x2, 0x4, 0x97, 0x80000000, 0x7, 0x1, 0x4, 0x7, 0x1d, 0x7, 0x400, 0x7, 0x1, 0x0, 0x1b, 0x14d5, 0x6, 0x0, 0x8000, 0x159615d0, 0x101, 0x44f4, 0x9, 0xffff, 0x800, 0xcc8, 0x3, 0x4, 0x7f, 0x1, 0x2, 0x3, 0xcfb, 0x8, 0x3, 0x4, 0x2, 0x8, 0x3, 0xf, 0x1000, 0x691, 0x100, 0x333, 0x6, 0x2, 0xb, 0x9, 0x48, 0x973d, 0x5a, 0x37, 0x0, 0xfffff61b, 0x9, 0x9, 0xfffffff5, 0x6, 0x3, 0x0, 0x40, 0x2, 0x8, 0x5273, 0x5f16ec56, 0x4d, 0x3, 0x2, 0xeac, 0x5, 0x1, 0x2, 0xf475, 0x5, 0x1, 0x4, 0x9, 0xa, 0x7, 0xc, 0x5, 0x3, 0xd, 0x8001, 0xd, 0x5, 0x0, 0x4, 0x1, 0x6, 0x6, 0x101, 0x401, 0x7, 0xbe5e, 0xed, 0x0, 0xfffffffd, 0x800, 0x8001, 0x2, 0x900000, 0x6, 0x2, 0xffffffff, 0xffff8000, 0x6, 0x9, 0xc34, 0x2, 0x7fffffff, 0x0, 0x24, 0x9, 0x5, 0x3, 0x1, 0x40, 0xef, 0x10001, 0xff, 0xfff, 0x1d94, 0x7, 0x7, 0x2, 0x0, 0xd54d, 0x3, 0x8, 0x3, 0x1, 0x8, 0x9fd, 0x0, 0x5, 0x9, 0x8, 0x308, 0xde2f, 0x5, 0x2, 0x7, 0x10000, 0x7f, 0x7, 0x200, 0x0, 0x8, 0xffff, 0x80000001, 0xfffffff7, 0x401, 0x40, 0xfffffffb, 0x8917, 0x2, 0xfff, 0x7, 0x9, 0x7, 0xd7ee11f, 0x0, 0x7, 0x2ebe96d8, 0x5, 0x1, 0xea91, 0x0, 0x6, 0x7fffffff, 0x10001, 0x3, 0x8000, 0x8, 0x1, 0x7, 0x5, 0x80000000, 0x2, 0xd3b6, 0x10001, 0x3ff, 0xfffeffff, 0x6, 0xd38a, 0x7, 0x3, 0x8001, 0x9, 0x0, 0x5f5, 0x10000, 0x1, 0x8, 0xcb3, 0xffffff7c, 0x6, 0x3ff, 0x3, 0x80000000, 0x4, 0x200, 0x6, 0x3, 0x7f, 0xffffffff, 0x1, 0x101, 0x81, 0x4, 0x6d, 0x2, 0x40, 0x3, 0x7, 0x1, 0x2d0c, 0xb6e, 0x8, 0x2, 0xd]}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x4}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x8, 0x7, 0xfffffffc, 0x200, 0x9, 0x0, 0x920, 0xffff8000, 0x5, 0x3, 0x7ff, 0x400, 0xfffffffd, 0x2, 0x80000001, 0xfffffffb, 0xffffff7f, 0x8, 0x6, 0x65b8, 0xfffffffc, 0x400, 0x4, 0xb86, 0x0, 0x800, 0x8, 0x73db408, 0x4, 0x2, 0x7fff, 0x2, 0x3, 0xe, 0xd, 0x7ff, 0x5, 0x5, 0x0, 0xc, 0x3, 0x5, 0x1, 0x100, 0xd047, 0x9, 0x883, 0x2, 0xec3, 0xfffffff9, 0x3, 0x9, 0x1f40, 0xfffffb7f, 0x0, 0x4, 0xe31, 0xfffffffa, 0xfffffc01, 0xffffffff, 0x2, 0x8000, 0xe6, 0xed1, 0x3, 0x0, 0x5, 0x1, 0x7, 0x0, 0x40d4, 0x5, 0x9, 0x4, 0x2ebca049, 0x6, 0x498, 0x7fffffff, 0x993, 0x7, 0x0, 0x8, 0x4, 0x6, 0x4, 0x9, 0x47da3dac, 0x0, 0x9, 0x8, 0x3ff, 0x3, 0xfffffff6, 0xd851, 0xfffffff9, 0x3c6, 0xfffffffd, 0x2, 0x3, 0xffff, 0x8, 0x5, 0xffffffff, 0x100, 0x3, 0x5000, 0x7f, 0x6, 0xffffffff, 0x6, 0x9, 0x3f, 0x7ff, 0x5, 0x80, 0x6, 0x6, 0x4c, 0x81, 0x3, 0x3, 0x800, 0x7, 0x5, 0x6, 0x732, 0x14a, 0x8001, 0x40, 0x5, 0xfffffff9, 0x1, 0x3, 0x51b, 0x6, 0x0, 0xd6f, 0xfffffffd, 0x5, 0x7, 0x7, 0x6, 0x9, 0x2, 0x6, 0x845, 0x374d, 0x1, 0x5, 0x101, 0x0, 0x9, 0x7, 0x50, 0x3ff, 0x6fbf9696, 0x7, 0x3, 0x8, 0x208, 0x4, 0x400, 0x9, 0x9, 0x8, 0x0, 0x7f, 0x0, 0x1f, 0x100, 0xff, 0xd20, 0x6, 0x3b8, 0x7, 0xbb, 0xfff, 0xfffffffe, 0xffff, 0xff, 0xff, 0x5, 0xb, 0xfa8a, 0x6, 0x1, 0x133f1d93, 0x40, 0x81c, 0x5cd2, 0x4, 0x200, 0x4293, 0x4, 0x2, 0x2000, 0x8, 0x6, 0x8000, 0x4, 0x40, 0xc5cc, 0x5, 0xfffffff8, 0x3, 0x0, 0x0, 0x9, 0x1, 0x8, 0x0, 0xa5, 0x2, 0x5, 0x1, 0xfb, 0x2, 0xfffffff9, 0x3, 0x8, 0x7, 0x10001, 0x2, 0x6, 0x0, 0x9, 0xc, 0x0, 0x5, 0xfffffff7, 0x8, 0x4, 0x7, 0x6, 0xe, 0x7ff, 0xfff, 0x7, 0xffffffff, 0x8, 0xd2, 0x3, 0x6357, 0x1, 0x0, 0x7, 0x7eff, 0x7fffffff, 0x7fffffff, 0xa023, 0x0, 0x9c, 0x18000, 0x9, 0x3, 0xfff]}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x1}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x4}], [@TCA_POLICE_RATE64={0xc, 0x8, 0x8}, @TCA_POLICE_RATE={0x404, 0x2, [0x7ce, 0x10, 0x5cd, 0x125a, 0xc, 0x89a4, 0x8, 0x7, 0x0, 0x6, 0xe511, 0x401, 0xe, 0xfff, 0x8, 0xffff, 0x6, 0x3, 0x1, 0x7, 0x8000, 0x101, 0x6ef, 0x8001, 0x40, 0x3, 0x4, 0xe7e, 0x4, 0x1, 0x7, 0x2, 0x14d2, 0x7fff, 0x401, 0x0, 0x8, 0xf2c5, 0xd, 0x10001, 0x3, 0x101, 0x3, 0x6ae9a276, 0x80, 0x7, 0x2, 0x9, 0x7, 0x7eca, 0x6, 0x7, 0x0, 0x6f1, 0x6, 0x3, 0xf1d, 0x2, 0x3, 0x2e4c, 0x9, 0x1, 0x5, 0x9, 0x9, 0x3, 0x800, 0x3, 0x5, 0xfffffffc, 0x8, 0xf96, 0x4b, 0xfffffeff, 0xa9, 0x10001, 0xe7d1, 0x6, 0x2, 0x8000, 0x2, 0x80000000, 0x6, 0x1, 0x4, 0x1, 0x800, 0x5, 0x1000, 0x9, 0x6, 0x40, 0x100, 0x6, 0xfffffffa, 0xffffffff, 0x8, 0x3, 0xffffffe0, 0x7, 0x625, 0x400, 0x1ff, 0x7, 0xfffffffe, 0x7, 0x9795, 0x20, 0x2, 0x2, 0x2, 0x0, 0x1, 0x80, 0xd, 0x7ff, 0x1f7, 0x6, 0x8, 0x6, 0x10001, 0x1, 0x7, 0x101, 0xc, 0x4, 0x3, 0x7, 0x8, 0x8, 0x7, 0x3, 0x6, 0x5, 0x7, 0x9, 0xfffffe9e, 0x800, 0x1, 0x5, 0x200, 0x8, 0x9, 0x2, 0x4, 0x4, 0x9, 0x5, 0x0, 0x4, 0x7, 0x9, 0x6, 0x8001, 0x1, 0x5, 0xfffffffa, 0x8, 0x101, 0xfffffffe, 0xf65, 0x3, 0x0, 0x7fffffff, 0x54b, 0x7, 0xffffff80, 0x8, 0xffff066a, 0x5, 0xa3bf, 0x3, 0xbc4, 0x382, 0x5, 0x8, 0x0, 0x1, 0x400, 0xc224, 0x7, 0x6, 0x4, 0x3f, 0x5, 0x2, 0x7fffffff, 0x2, 0x5, 0x4, 0x0, 0x80000001, 0x6a, 0x1000, 0x596, 0x101, 0x1, 0x6, 0x9028, 0x7, 0x0, 0x7, 0x33408e2a, 0x2, 0x5, 0x400, 0xffffffff, 0x6, 0x7, 0x2, 0x6, 0x22a, 0x0, 0x9, 0x5, 0xffffffc8, 0x9, 0xea3e, 0x3, 0x2, 0x6, 0x6, 0x4, 0x1, 0x0, 0x4, 0x8, 0xb, 0xfffffff9, 0x9, 0x7fffffff, 0x400, 0x401, 0x1, 0x0, 0x5c5f5332, 0x4, 0x46a, 0x401, 0x683, 0xc28, 0xa3, 0x741, 0xb, 0x4, 0x0, 0x6, 0x0, 0x5, 0x1ff, 0x3, 0x8001, 0x2, 0xd, 0x4, 0xd]}, @TCA_POLICE_RATE64={0xc, 0x8, 0x5}]]}, {0x7c, 0x6, "6e41d82226fc4d46b5e45a312f984b6cb43cb8a3e5adb2bf21a631e9dbf3bc6387a98a0c11b0126ec8a4702e7bb0687f7d12c189f2c69ce37fcb08952405e446b767b6366bedcdefddaa2594ce4155745db75ceabfcdccba06f26078d45f19ea336deb7bd17ace032da3bec8beca187542ab33c3cfe65894"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x2}}}}, @m_simple={0x148, 0x1e, 0x0, 0x0, {{0xb}, {0xa4, 0x2, 0x0, 0x1, [@TCA_DEF_PARMS={0x18, 0x2, {0x3, 0xbd, 0x1, 0xc, 0x3}}, @TCA_DEF_DATA={0x5, 0x3, '\x00'}, @TCA_DEF_PARMS={0x18, 0x2, {0xb5, 0x0, 0xf, 0x4, 0x8}}, @TCA_DEF_PARMS={0x18, 0x2, {0x3, 0x7, 0x10000000, 0x1c00, 0xd}}, @TCA_DEF_DATA={0x5, 0x3, '\x00'}, @TCA_DEF_PARMS={0x18, 0x2, {0x7, 0x6, 0x4, 0x3, 0x64f}}, @TCA_DEF_PARMS={0x18, 0x2, {0x6, 0xfff, 0x2, 0x9, 0xc}}, @TCA_DEF_PARMS={0x18, 0x2, {0xa, 0x5, 0x4, 0xffffff00, 0xcfa5}}]}, {0x7c, 0x6, "21ce784b1fb845e2bf6d8f528c601b2a3ddb37ab228af1acd23ea3911b92b43782425cb59ca1dd950edb93e87760faef2265c7713944545a542b7a1c5ac28d290a1f67b47d8102e11b48f421080452330e68fc0529055e907b3acd14958df216a98a1d12dc8418fa88ffd6c9da474489aec3a69695d24647"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x1}}}}]}, @TCA_RSVP_SRC={0x14, 0x3, @empty}, @TCA_RSVP_SRC={0x14, 0x3, @dev={0xfe, 0x80, '\x00', 0x37}}, @TCA_RSVP_PINFO={0x20, 0x4, {{0x3, 0x3, 0x4}, {0x5, 0xd, 0x2}, 0x2, 0x5, 0xf4}}, @TCA_RSVP_PINFO={0x20, 0x4, {{0x10, 0x9, 0x4}, {0x7ff, 0x1, 0x975c}, 0x84, 0x3, 0x7}}, @TCA_RSVP_PINFO={0x20, 0x4, {{0x7, 0x92, 0xe}, {0xfffffff9, 0x7f, 0x10000}, 0x29, 0x2, 0xff}}, @TCA_RSVP_PINFO={0x20, 0x4, {{0x80000001, 0x1, 0x508}, {0xfffffffa, 0x0, 0x7}, 0x89, 0x5, 0x3}}]}}, @f_rsvp6={{0xa}, {0xc, 0x2, [@TCA_RSVP_CLASSID={0x8, 0x1, {0x0, 0xa}}]}}, @f_rsvp6={{0xa}, {0x8a4, 0x2, [@TCA_RSVP_POLICE={0x878, 0x5, [@TCA_POLICE_RATE64={0xc, 0x8, 0x4}, @TCA_POLICE_RESULT={0x8, 0x5, 0x1}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x9}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x5, 0x0, 0x4, 0x5, 0xf, 0x4, 0xffffffff, 0x0, 0x5, 0x0, 0x1, 0xfffff184, 0x7, 0x6, 0x6f67, 0x8, 0x0, 0x6, 0x9, 0x8, 0x4, 0x3, 0x4, 0x68, 0x9, 0x2, 0x9, 0x0, 0x7, 0x5, 0x0, 0x4, 0x5, 0xd, 0x7fffffff, 0x5, 0x2, 0x3ff, 0x101, 0x7ff, 0x1, 0x4, 0x8, 0x0, 0x5, 0x80000000, 0xf0000000, 0x74c, 0x2c, 0x2, 0x1a0, 0x3, 0x7fffffff, 0xc, 0x8, 0x0, 0x0, 0x8, 0x5, 0x80000000, 0x43, 0x1, 0x5, 0x7f, 0x3, 0xd33e, 0x6, 0x4, 0x8, 0x5, 0x3ff, 0x2, 0xe7, 0x1, 0x2, 0xd, 0x4, 0x9, 0xc41, 0x7, 0x0, 0xffff, 0x1a, 0xd4, 0x81, 0x1, 0xe16, 0xa, 0xfffffff9, 0x2, 0x4, 0x6, 0x6, 0x5, 0xfffffffe, 0x3, 0x200, 0x96dd, 0x1, 0x3d, 0x7, 0x7, 0x800, 0x9, 0x7, 0x9e30, 0x0, 0x7, 0x6, 0x7dc, 0x8, 0x9, 0x10000, 0x7, 0x0, 0x9, 0x80000001, 0x7, 0x5fe, 0x4, 0x6, 0xffff5890, 0x9, 0x1000, 0x1, 0x6, 0x7fff, 0xffffff7f, 0x4, 0x8, 0x8, 0x14000, 0x6, 0x1a9b, 0x8001, 0xf, 0x92d1, 0x0, 0x10001, 0x5, 0xc, 0x1, 0x7f, 0xa3, 0x5, 0xf, 0x8, 0x6, 0x3, 0x364102de, 0x101, 0x80, 0xb, 0x10, 0xffffffff, 0x80000001, 0x1000, 0x9, 0x4, 0x1, 0xc, 0x511, 0xd1a, 0x7, 0x8000, 0x6, 0x4, 0x7, 0x7, 0x1, 0x8001, 0xa98b, 0x1, 0x9, 0x8001, 0x3, 0x5, 0x6, 0x3, 0x80000000, 0x2, 0x8, 0x5c92, 0x81, 0x8, 0x5, 0x1, 0x7, 0x80000001, 0xd9, 0x80000000, 0x8, 0x5258, 0xffffffe2, 0x4, 0x1, 0x81, 0x80000001, 0x61f2, 0x6ac, 0x6, 0x7, 0x4, 0x3, 0x5, 0x0, 0x3, 0x23, 0x9fe5, 0x1, 0x3, 0x4, 0x1, 0x8000, 0xe000, 0xfffffffa, 0x1, 0x4, 0x2d1, 0x5, 0x5, 0xfffffff1, 0x10001, 0x7fff, 0xc7d, 0x3, 0xb94, 0x9, 0x1, 0x10001, 0x7, 0xfffffe01, 0x8, 0xdf, 0x10, 0xfffff801, 0x1, 0x589777dc, 0x9, 0x7, 0x8341, 0x7fff, 0x8, 0xdac, 0x4, 0x6, 0x1, 0x8001, 0x2, 0x3, 0x3, 0x80000001, 0x8, 0x0, 0x8, 0x80]}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x1, 0x81, 0x6, 0xfba5, 0x5, 0x10, 0x8, 0x8, 0xfff, 0x8, 0x90, 0x9, 0x4, 0x6, 0x0, 0x400, 0x1, 0x40, 0x8, 0x4, 0x1, 0x800, 0x0, 0x0, 0x2, 0x1ff, 0xf9, 0x100, 0x8, 0x200, 0xf6, 0x0, 0x2, 0x2, 0x2760, 0x9, 0xd, 0x3c76, 0x3, 0x8, 0x5, 0x10, 0x0, 0x781, 0x8, 0x401, 0x2, 0x7fff, 0xc84e, 0x4, 0x8, 0x1, 0x4, 0x8, 0x800, 0x8001, 0x7, 0x1, 0x80, 0xfffffff9, 0x3, 0x4, 0x1, 0x8, 0x6, 0x8, 0x0, 0x3ff, 0x7, 0x4, 0x80000001, 0xf8, 0x10, 0x5, 0x1, 0x58f, 0x7fff, 0x7, 0x3, 0x4, 0x7, 0x6b1b, 0x3f5a, 0x8000, 0x8, 0x7fffffff, 0xfffffff0, 0x2, 0x3, 0x0, 0x24a, 0x3800, 0x1, 0x2, 0x93, 0x2, 0x9f4, 0x4ccf6497, 0x9, 0xffffffff, 0x3, 0x0, 0x2, 0x6, 0x28, 0x5, 0x7f, 0x401, 0x3e0, 0x6, 0x8, 0x4, 0x4, 0x5c3, 0x9, 0x2, 0x9145, 0xffffff7f, 0x1, 0x1f000000, 0xffff0000, 0x0, 0x6, 0xfffffff5, 0x1, 0x4d, 0x9, 0x5, 0x80000001, 0xfff, 0x7, 0xfffffff7, 0x9, 0x6, 0x6, 0x1000, 0x2, 0xf95, 0x80000000, 0x80, 0x5, 0x0, 0x6, 0xdc55, 0x8000, 0x1, 0x2, 0xd, 0x5, 0x8, 0x4, 0x7fffffff, 0x3, 0x0, 0x2, 0xfffffff9, 0x3, 0x5, 0xa, 0x1, 0x0, 0x8001, 0x9, 0x6, 0x9, 0x9, 0x4, 0x9, 0x5, 0x1, 0x0, 0x566, 0x10d4, 0xe, 0x0, 0x7f, 0xb2d8, 0x6, 0x8, 0xfffffff9, 0x5, 0xff, 0x4000000, 0x9, 0x3, 0xffff81f7, 0x7f, 0x0, 0x7, 0x0, 0xa, 0x74, 0x10, 0x709f, 0x3ff, 0x5, 0x10000, 0x5, 0x7, 0x9, 0xc97, 0x0, 0x2, 0x1, 0x2, 0x0, 0x6, 0x997b, 0x8, 0x8, 0x101, 0x1, 0xec1, 0x101, 0x81, 0x3, 0xfffffffd, 0x411, 0x6, 0x7b7, 0x1ff, 0x5, 0x1, 0xff, 0x8, 0x101, 0x7, 0xfffffff7, 0x22, 0x10, 0x10001, 0x8, 0xff, 0xfffffff8, 0xa, 0x4b5, 0x1000, 0x3, 0x9, 0xfffff115, 0x0, 0x17d, 0x6, 0x4, 0x1a12, 0x9, 0x5, 0x7d2e, 0x6, 0x603, 0x0, 0x6, 0x40, 0x7f, 0x81, 0xaa]}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x1}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x2}, @TCA_POLICE_TBF={0x3c, 0x1, {0x27c, 0x0, 0x6, 0x0, 0x8, {0xe5, 0x2, 0x7, 0x5, 0x9, 0xd}, {0x1, 0x0, 0xb, 0x0, 0x6, 0xd3}, 0x4, 0x10000, 0x1}}]}, @TCA_RSVP_POLICE={0x28, 0x5, [@TCA_POLICE_AVRATE={0x8, 0x4, 0x2e}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x4}, @TCA_POLICE_RESULT={0x8, 0x5, 0x8}, @TCA_POLICE_RESULT={0x8, 0x5, 0x10000}]}]}}, @f_rsvp6={{0xa}, {0x64, 0x2, [@TCA_RSVP_PINFO={0x20, 0x4, {{0x4, 0x4, 0x8}, {0x10, 0x1000, 0x8f9}, 0x2, 0x7f, 0x5}}, @TCA_RSVP_PINFO={0x20, 0x4, {{0x1, 0x80, 0x6}, {0x3, 0x401, 0x7fff}, 0xff, 0x5, 0x19}}, @TCA_RSVP_PINFO={0x20, 0x4, {{0x6, 0x8, 0xff}, {0x0, 0x2a, 0x1c8b}, 0x29, 0x1, 0x67}}]}}]}, 0x532c}, 0x1, 0x0, 0x0, 0x9000}, 0x2000) 283.402262ms ago: executing program 3 (id=3391): mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x101091, 0x0) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018", @ANYRES32=r0, @ANYBLOB="0000000000000000b704000008000000850000009500000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x60, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r3, {0x0, 0xa}, {0xffff, 0xffff}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0xea, 0x2, 0x0, 0x0, 0x9, 0x5}, {0x12, 0x2, 0x0, 0x401, 0x8001, 0x1400}, 0xa5, 0x5, 0xffffffd}}, @TCA_TBF_BURST={0x8, 0x6, 0x8057}]}}]}, 0x60}, 0x1, 0x0, 0x0, 0x40000}, 0x44080) sendmsg$nl_route_sched(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)=@newqdisc={0x44, 0x24, 0xd0f, 0x70bd29, 0x0, {0x60, 0x0, 0x0, r3, {}, {0xffe0, 0xa}, {0x1, 0x10}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x14, 0x2, [@TCA_CAKE_ATM={0x8, 0x4, 0x2}, @TCA_CAKE_FLOW_MODE={0x8, 0x5, 0x5}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x55}, 0x4000) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r4, &(0x7f0000000000)={0xa, 0x3, 0x0, @loopback}, 0x1c) connect$inet6(r4, &(0x7f0000000040)={0xa, 0x3, 0x7, @loopback, 0x800000}, 0x1c) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000000)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000080)='rxrpc_client\x00', r5, 0x0, 0x3}, 0x18) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f00000004c0)=ANY=[@ANYBLOB="180000000000000000000000000000008500000023000000850000005000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r7}, 0x10) sendmsg$IPSET_CMD_CREATE(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="5c0000000206010100000000000000000000000005000100070000000900020073797a300000000014000780050015000000000008001240000000000d000300686173683a6e657400000000050005000a000000050004"], 0x5c}}, 0x0) sendmsg$IPSET_CMD_DESTROY(r6, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)={0x1c, 0x3, 0x6, 0x5, 0x0, 0x0, {0x0, 0x0, 0x6}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x24040800}, 0x8d0) fchownat(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1000) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b70300000000a999850000000400000095"], &(0x7f0000000380)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r8 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r8}, &(0x7f0000bbdffc)) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000037c0)={0x0, 0x0, &(0x7f0000003780)={&(0x7f0000000cc0)=@newtaction={0x84, 0x30, 0x12f, 0x0, 0x0, {0x0, 0x0, 0x1be}, [{0x70, 0x1, [@m_police={0x6c, 0x1, 0x0, 0x0, {{0xb}, {0x5c, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x4}}]]}, {0x4}, {0xc, 0xb}, {0xc, 0xa}}}]}]}, 0x84}}, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r9, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000001e80)=@newtaction={0x48, 0x31, 0x1, 0xfffffffd, 0x25dfdbfb, {0x0, 0x0, 0x11}, [{0x34, 0x1, [@m_police={0x30, 0x1, 0x0, 0x0, {{0xb}, {0x4}, {0x4}, {0xc, 0x3, {0x1}}, {0xc}}}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x8800}, 0x0) 282.858501ms ago: executing program 4 (id=3392): mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x101091, 0x0) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018", @ANYRES32=r0, @ANYBLOB="0000000000000000b704000008000000850000009500000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x60, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r3, {0x0, 0xa}, {0xffff, 0xffff}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0xea, 0x2, 0x0, 0x0, 0x9, 0x5}, {0x12, 0x2, 0x0, 0x401, 0x8001, 0x1400}, 0xa5, 0x5, 0xffffffd}}, @TCA_TBF_BURST={0x8, 0x6, 0x8057}]}}]}, 0x60}, 0x1, 0x0, 0x0, 0x40000}, 0x44080) sendmsg$nl_route_sched(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)=@newqdisc={0x44, 0x24, 0xd0f, 0x70bd29, 0x0, {0x60, 0x0, 0x0, r3, {}, {0xffe0, 0xa}, {0x1, 0x10}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x14, 0x2, [@TCA_CAKE_ATM={0x8, 0x4, 0x2}, @TCA_CAKE_FLOW_MODE={0x8, 0x5, 0x5}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x55}, 0x4000) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r4, &(0x7f0000000000)={0xa, 0x3, 0x0, @loopback}, 0x1c) connect$inet6(r4, &(0x7f0000000040)={0xa, 0x3, 0x7, @loopback, 0x800000}, 0x1c) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000000)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000080)='rxrpc_client\x00', r5, 0x0, 0x3}, 0x18) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f00000004c0)=ANY=[@ANYBLOB="180000000000000000000000000000008500000023000000850000005000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r7}, 0x10) sendmsg$IPSET_CMD_CREATE(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="5c0000000206010100000000000000000000000005000100070000000900020073797a300000000014000780050015000000000008001240000000000d000300686173683a6e657400000000050005000a000000050004"], 0x5c}}, 0x0) sendmsg$IPSET_CMD_DESTROY(r6, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)={0x1c, 0x3, 0x6, 0x5, 0x0, 0x0, {0x0, 0x0, 0x6}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x24040800}, 0x8d0) fchownat(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1000) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b70300000000a999850000000400000095"], &(0x7f0000000380)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r8 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r8}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000037c0)={0x0, 0x0, &(0x7f0000003780)={&(0x7f0000000cc0)=@newtaction={0x84, 0x30, 0x12f, 0x0, 0x0, {0x0, 0x0, 0x1be}, [{0x70, 0x1, [@m_police={0x6c, 0x1, 0x0, 0x0, {{0xb}, {0x5c, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x4}}]]}, {0x4}, {0xc, 0xb}, {0xc, 0xa}}}]}]}, 0x84}}, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r9, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000001e80)=@newtaction={0x48, 0x31, 0x1, 0xfffffffd, 0x25dfdbfb, {0x0, 0x0, 0x11}, [{0x34, 0x1, [@m_police={0x30, 0x1, 0x0, 0x0, {{0xb}, {0x4}, {0x4}, {0xc, 0x3, {0x1}}, {0xc}}}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x8800}, 0x0) 200.117709ms ago: executing program 5 (id=3393): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000940)=ANY=[@ANYBLOB="140000001000010400000000000000000100000a74000000060a0b04000000000000000002000008400004803c000180080001006c6f670030000280060004400001000008000340fffffffa0a0002407d5def2e21000000080003400000000806000140000100000900010073797a30000000000900020073797a320000000008000b400000000314000000110001"], 0x9c}, 0x1, 0x0, 0x0, 0x8010}, 0x0) close(r0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x80, 0x4, 0x28}, 0x50) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$NL80211_CMD_PROBE_MESH_LINK(r2, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000f80)={0x450, r3, 0x300, 0x70bd2c, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_FRAME={0x76, 0x33, @ctrl_frame=@ba={{}, {0x6bb7}, @device_a, @broadcast, @multi={{0x0, 0x1, 0x1, 0x0, 0x7}, [{0x0, 0xe, {0x9, 0x40}, "8175566dffd3ca07"}, {0x0, 0x0, {0xd, 0x22}, "7fac4b1a051cf3b8"}, {0x0, 0x7, {0x9, 0x75}, "7718a6fce9bca459"}, {0x0, 0x5, {0x3, 0x1}, "c19cbdcc007f5f7e"}, {0x0, 0xd, {0x8, 0x1}, "b3409344c1ae17a1"}, {0x0, 0x2, {0x8, 0xffe}, "a34a632b21ff154c"}, {0x0, 0xa, {0x1, 0x4}, "53f9662a51efd34d"}], {0x0, 0x7, {0xf, 0x1}, "3d590bddc3fe1373"}}}}, @NL80211_ATTR_FRAME={0x14, 0x33, @ctrl_frame=@cf_end_cf_ack={{}, {0x76}, @broadcast}}, @NL80211_ATTR_FRAME={0x270, 0x33, @data_frame={@a_msdu=@type00={{0x0, 0x2, 0x5, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1}, {0xf}, @broadcast, @device_b, @from_mac=@device_b, {0x0, 0xc00}, "", @void, @value=@ver_80211n={0x0, 0xd0, 0x0, 0x0, 0x0, 0x2, 0x1, 0x0, 0x1}}, @a_msdu=[{@device_b, @broadcast, 0xc6, "421a2a12f02914dcc376aeb501fcb42756796dddfbe0fa23133cbf89b23cc9b849b9a8231e9e9a5d08784b23be75f25ca25b8c54de3ba9beb72149734a1da63765223b52c9f6f31080733473b472dbd6fe1e7b541205c24e936091e9beff406c6545ebcb88b7114555b49167aa213128970e2b0bf4d628ec3c7421011909a7e8b56249bcd26e559454e27b0beb069d0c78350b7b1a165de7ea00c27b46508fc1c95973773a47989cb4e6d68b66a328bf9435abca0ad18d4178a1e39c12b67c6276f4b01193f8"}, {@broadcast, @device_a, 0x57, "6cd04c61ec60055dc81a890099f59650a2fe784fe4b54b63037aab84ea7d45bddfb284707adffee2a3d199de52f43142fd75ff3550175d5c9a5c5f26d61d533f2434f79c12b9fa1f0f91fb7c561519e9efc21e59cb77e0"}, {@device_a, @broadcast, 0xbd, "4402ae5a94fb6ed08a31033ea745f31565974d8c6e000e0f5b3a7bdc02ab4c3b7d89be82c4265be21d8b2171cacdc85ec33c26d37b3b0bda2d55aa6a96592ef97b1ad03c9807c486ed2cf7ba362fd361d3c4cccd376493ded5823c1b75861cc522efb3082a73f1d5d8f677fe0788d2eeb4123b9d7e35a4acf2a650e1d2d77c348a965ae675bbd995516fe1fa6df99aad53434a5c77081c54b7fbae944f146efcaf418deed89b2d23c5ae627c7499c7730904592ef1307706b4e6c630af"}, {@device_b, @broadcast, 0x37, "80904889e65a8b77238a1ca6f4eee55569cedf5f0c50aed3ebdba5a2e40c914ab2a003b5e9b17af0a0b01e2d4165973c97960c5d95b998"}]}}, @NL80211_ATTR_FRAME={0x125, 0x33, @mgmt_frame=@assoc_resp={{{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1}, {0x5}, @device_a, @device_b, @random="14c0c874fecf", {0xf, 0x7}}, 0x2, 0x42, @default, @val={0x1, 0x3, [{0x2}, {0x36}, {0x12, 0x1}]}, @void, [{0xdd, 0xaa, "f080300f91f9b030db7c44382752471a293bfb31cac7fd7be36e2847ae51f1107baa1022a4f3d89acbc7ea2843a475fc45fa975bac83240adf0208d4b206983945ebc527b989263d5b3923628f08e24316d927f81e4ee2ef5bc7eb806419f7ce837ee9f2424ac615d5c139f9fbd79819a724e4ea9ac4633f90a3cc2bf4358288cbe4e37fb5e577302585332d4eb3ba314b276ea0b24316a07d0bbd93046659be81199e645d8abc2bd416"}, {0xdd, 0x50, "26dc86496204374a96740be5ce0e854d091825f5e35bf95126e6bbacc80170d58ac0fec5152c647e1bda03591cf77c616b10964fdb2057c5c65d7038ba3b23da9ef3d2bbab11e0527f64349854bb126e"}]}}]}, 0x450}, 0x1, 0x0, 0x0, 0x11}, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r1}, {}, {0x85, 0x0, 0x0, 0x1b}}]}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41002, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r4}, 0x18) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000050000000000000000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000059"], 0x0}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00', r6}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r7 = inotify_init1(0x0) inotify_add_watch(r7, &(0x7f0000000200)='.\x00', 0x50000a0) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800006, 0x7000001, 0x6e073, 0xffffffffffffffff, 0x2000) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f00000001c0)='./bus\x00', 0x41, &(0x7f0000000080), 0x67, 0x53c, &(0x7f0000000f40)="$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") fspick(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000300)='./file0\x00', 0x0, 0x2125099, 0x0) mount$bind(0x0, &(0x7f0000000100)='.\x00', 0x0, 0x21, 0x0) 199.24359ms ago: executing program 3 (id=3394): socket$inet_sctp(0x2, 0x0, 0x84) r0 = socket$inet_sctp(0x2, 0x5, 0x84) close(r0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000300)={0x0, 0x10, &(0x7f0000000280)=[@in={0x2, 0x4e24, @private=0xa010100}]}, &(0x7f0000000080)=0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x1d, &(0x7f0000000140)={0x1, [0x0]}, &(0x7f0000000240)=0x8) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000003000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000040)='kmem_cache_free\x00', r3}, 0x10) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000b40)={{{@in=@private, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@private1}}}, &(0x7f0000000900)=0xe8) newfstatat(0xffffffffffffff9c, &(0x7f00000006c0)='./file1\x00', &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x4000) setreuid(r5, r5) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000100)='./file1\x00', 0x80, &(0x7f0000000c40)={[], [{@smackfsfloor}, {@euid_lt={'euid<', r5}}, {@fsmagic={'fsmagic', 0x3d, 0x9}}, {@fowner_gt={'fowner>', r4}}, {@euid_gt={'euid>', r5}}, {@obj_role={'obj_role', 0x3d, '-*'}}, {@appraise_type}, {@fsmagic={'fsmagic', 0x3d, 0x3}}]}, 0x1, 0x4dd, &(0x7f0000000240)="$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") getsockopt$inet_sctp6_SCTP_HMAC_IDENT(r1, 0x84, 0x16, &(0x7f0000000940)={0x3, [0xf8cc, 0x81, 0x0]}, &(0x7f0000000980)=0xa) socket$igmp(0x2, 0x3, 0x2) r6 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r6, 0x1, 0x3c, &(0x7f0000000040)=0x1, 0x4) sendmmsg$inet(r6, &(0x7f0000000480)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000180)="ca", 0x1}], 0x1}}], 0x1, 0x4000000) 26.899207ms ago: executing program 5 (id=3395): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0xf, &(0x7f0000000140)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0xfffffffc}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000000)='GPL\x00', 0xa, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f00000004c0)=r2, 0x4) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000000000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x2, '\x00', 0x0, @fallback=0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001000)={&(0x7f0000000140)='kmem_cache_free\x00', r3, 0x0, 0x2}, 0x18) sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=@newtaction={0x84, 0x30, 0xffff, 0xfffffffe, 0x0, {}, [{0x70, 0x1, [@m_police={0x6c, 0x1, 0x0, 0x0, {{0xb}, {0x40, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x5, 0x0, 0x0, 0x4, {0xfd}, {0x0, 0x0, 0x0, 0x6}}}]]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x84}, 0x1, 0x0, 0x0, 0x20004000}, 0x0) 15.126898ms ago: executing program 2 (id=3396): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0x4041}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)={0xa0, 0x0, 0x1, 0x505, 0x0, 0x0, {0xa, 0x0, 0x5}, [@CTA_TUPLE_ORIG={0x44, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast1}, {0x14, 0x4, @mcast2}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_ZONE={0x6}]}, @CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast2}, {0x14, 0x4, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}}}]}, @CTA_TIMEOUT={0x8}, @CTA_NAT_SRC={0x4}]}, 0xa0}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) r2 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000400), 0x101201, 0x0) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x15, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020692500000000002020207b1a00fe00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000650000000600000085100000010000009500000000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x9}, 0x94) ioctl$IMADDTIMER(r2, 0x80044940, &(0x7f0000000080)=0x14) close(r2) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0de8325a040000002400000006"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000700000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f00000003c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x64, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000080)='kfree\x00', r5, 0x0, 0x2}, 0x18) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='devpts\x00', 0x5, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000001d00)=ANY=[@ANYBLOB="0b00000005000000050000000900000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r6], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000680)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x38, r3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffff000}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r7}, 0x10) r8 = syz_io_uring_setup(0x88f, &(0x7f0000000140)={0x0, 0xaee2, 0x80, 0x2, 0x1f9}, &(0x7f0000000000)=0x0, &(0x7f0000000300)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r9, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r9, r10, &(0x7f00000002c0)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, r8, 0x0, &(0x7f0000000040)='./file0\x00', 0x64, 0x183000, 0x12345}) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x42002) io_uring_enter(r8, 0x47f6, 0x0, 0x0, 0x0, 0x0) mount$bind(0x0, &(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000800)='./file0\x00', &(0x7f0000000080)='./file0/../file0\x00', 0x0, 0x1a9851, 0x0) mount$tmpfs(0x0, &(0x7f0000000400)='./file0/../file0\x00', &(0x7f00000003c0), 0x200044, 0x0) umount2(&(0x7f00000002c0)='./file0/../file0\x00', 0x9) bpf$MAP_CREATE(0x0, 0x0, 0x50) 0s ago: executing program 0 (id=3397): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18060000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000003000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10) add_key$fscrypt_v1(&(0x7f0000000040), &(0x7f00000001c0)={'fscrypt:', @desc2}, &(0x7f00000000c0)={0x0, "f1a1173fb9462d3589e67197f90be6e423ceb0ab4912f9f6a31854ec98e950cfed21fcad7ff0fbcb566a0982f8938caa52dd8d39af14c31ed56ad59300", 0xfffffffb}, 0x48, 0xffffffffffffffff) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000180)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = socket$packet(0x11, 0x3, 0x300) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r5, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x92}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYRES32=r6, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}, 0x1, 0x0, 0x0, 0xc000}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000007c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000001500)=@newqdisc={0x70, 0x24, 0xe0b, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {0x0, 0x9}, {0xffff, 0xffff}, {0xfff1}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x40, 0x2, {{0x1ff, 0x4, 0x0, 0x0, 0xfffffffd, 0x8}, [@TCA_NETEM_ECN={0x8, 0x7, 0x1}, @TCA_NETEM_LOSS={0x1c, 0x5, 0x0, 0x1, [@NETEM_LOSS_GI={0x18, 0x1, {0x80000001, 0x20006, 0x8, 0x0, 0xd99d}}]}]}}}]}, 0x70}}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) sendto$packet(r3, &(0x7f00000002c0)="44c33b69ebc9e05e9bdec0c288a8", 0x36, 0x830, &(0x7f0000000440)={0x11, 0x8100, r6, 0x1, 0x2, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xe}}, 0x14) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2}, 0x10) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000400)={'erspan0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000004c0)=@newqdisc={0x38, 0x24, 0xf0b, 0x0, 0x0, {0x60, 0x0, 0x0, r8, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq={{0x7}, {0xc, 0x2, [@TCA_FQ_FLOW_PLIMIT={0x8, 0x800e}]}}]}, 0x38}}, 0x0) kernel console output (not intermixed with test programs): _1 [ 193.209047][T11610] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 193.258140][T11630] netlink: 32 bytes leftover after parsing attributes in process `syz.3.2945'. [ 193.273441][T11624] macvtap0: entered promiscuous mode [ 193.283455][T11624] macvtap0: left promiscuous mode [ 193.404034][T11537] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 193.436114][T11537] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 193.447760][T11537] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 193.457820][T11537] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 193.492942][T11641] tap0: tun_chr_ioctl cmd 1074025681 [ 193.534849][T11537] 8021q: adding VLAN 0 to HW filter on device bond0 [ 193.613067][T11537] 8021q: adding VLAN 0 to HW filter on device team0 [ 193.628980][T11417] bridge0: port 1(bridge_slave_0) entered blocking state [ 193.636343][T11417] bridge0: port 1(bridge_slave_0) entered forwarding state [ 193.666779][ T2754] bridge0: port 2(bridge_slave_1) entered blocking state [ 193.674229][ T2754] bridge0: port 2(bridge_slave_1) entered forwarding state [ 193.715572][ T44] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 193.715743][ T3491] Bluetooth: hci0: command 0x1003 tx timeout [ 193.765193][T11657] FAULT_INJECTION: forcing a failure. [ 193.765193][T11657] name failslab, interval 1, probability 0, space 0, times 0 [ 193.778605][T11657] CPU: 0 UID: 0 PID: 11657 Comm: syz.0.2954 Not tainted syzkaller #0 PREEMPT(voluntary) [ 193.778638][T11657] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 193.778655][T11657] Call Trace: [ 193.778676][T11657] [ 193.778732][T11657] __dump_stack+0x1d/0x30 [ 193.778764][T11657] dump_stack_lvl+0xe8/0x140 [ 193.778850][T11653] loop5: detected capacity change from 0 to 1024 [ 193.778874][T11657] dump_stack+0x15/0x1b [ 193.778905][T11657] should_fail_ex+0x265/0x280 [ 193.778949][T11657] should_failslab+0x8c/0xb0 [ 193.779013][T11657] __kmalloc_node_track_caller_noprof+0xa5/0x580 [ 193.779048][T11657] ? sidtab_sid2str_get+0xa0/0x130 [ 193.779076][T11657] kmemdup_noprof+0x2b/0x70 [ 193.779173][T11657] sidtab_sid2str_get+0xa0/0x130 [ 193.779284][T11657] security_sid_to_context_core+0x1eb/0x2e0 [ 193.779329][T11657] security_sid_to_context+0x27/0x40 [ 193.779359][T11657] selinux_lsmprop_to_secctx+0x67/0xf0 [ 193.779410][T11657] security_lsmprop_to_secctx+0x1a3/0x1c0 [ 193.779632][T11657] audit_log_subj_ctx+0xa4/0x3e0 [ 193.779675][T11657] ? skb_put+0xa9/0xf0 [ 193.779707][T11657] audit_log_task_context+0x48/0x70 [ 193.779787][T11657] audit_log_task+0xf4/0x250 [ 193.779817][T11657] ? kstrtouint+0x76/0xc0 [ 193.779914][T11657] audit_seccomp+0x61/0x100 [ 193.779946][T11657] ? __seccomp_filter+0x82d/0x1250 [ 193.780010][T11657] __seccomp_filter+0x83e/0x1250 [ 193.780039][T11657] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 193.780072][T11657] ? vfs_write+0x7e8/0x960 [ 193.780104][T11657] __secure_computing+0x82/0x150 [ 193.780132][T11657] syscall_trace_enter+0xcf/0x1e0 [ 193.780252][T11657] do_syscall_64+0xac/0x200 [ 193.780294][T11657] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 193.780351][T11657] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 193.780394][T11657] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 193.780426][T11657] RIP: 0033:0x7f41e595efc9 [ 193.780450][T11657] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 193.780482][T11657] RSP: 002b:00007f41e43bf038 EFLAGS: 00000246 ORIG_RAX: 00000000000001b9 [ 193.780569][T11657] RAX: ffffffffffffffda RBX: 00007f41e5bb5fa0 RCX: 00007f41e595efc9 [ 193.780585][T11657] RDX: 0000000000000006 RSI: 0000200000000400 RDI: ffffffffffffffff [ 193.780602][T11657] RBP: 00007f41e43bf090 R08: 00002000000004c0 R09: 0000000000000008 [ 193.780771][T11657] R10: 0000200000000480 R11: 0000000000000246 R12: 0000000000000001 [ 193.780790][T11657] R13: 00007f41e5bb6038 R14: 00007f41e5bb5fa0 R15: 00007ffd4bfe9778 [ 193.780815][T11657] [ 194.060668][T11653] EXT4-fs: inline encryption not supported [ 194.077876][T11653] EXT4-fs (loop5): can't mount with data=, fs mounted w/o journal [ 194.101281][T11537] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 194.116684][T11672] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2958'. [ 194.130737][T11672] netlink: 'syz.5.2958': attribute type 1 has an invalid length. [ 194.138872][T11672] netlink: 'syz.5.2958': attribute type 2 has an invalid length. [ 194.205200][T11676] loop5: detected capacity change from 0 to 512 [ 194.274271][T11686] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2960'. [ 194.295218][T11686] FAULT_INJECTION: forcing a failure. [ 194.295218][T11686] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 194.309181][T11686] CPU: 1 UID: 0 PID: 11686 Comm: syz.3.2960 Not tainted syzkaller #0 PREEMPT(voluntary) [ 194.309213][T11686] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 194.309228][T11686] Call Trace: [ 194.309235][T11686] [ 194.309244][T11686] __dump_stack+0x1d/0x30 [ 194.309281][T11686] dump_stack_lvl+0xe8/0x140 [ 194.309316][T11686] dump_stack+0x15/0x1b [ 194.309432][T11686] should_fail_ex+0x265/0x280 [ 194.309473][T11686] should_fail+0xb/0x20 [ 194.309557][T11686] should_fail_usercopy+0x1a/0x20 [ 194.309594][T11686] _copy_from_iter+0xd2/0xe80 [ 194.309617][T11686] ? __build_skb_around+0x1ab/0x200 [ 194.309702][T11686] ? __alloc_skb+0x223/0x320 [ 194.309735][T11686] netlink_sendmsg+0x471/0x6b0 [ 194.309769][T11686] ? __pfx_netlink_sendmsg+0x10/0x10 [ 194.309798][T11686] __sock_sendmsg+0x145/0x180 [ 194.309820][T11686] ____sys_sendmsg+0x31e/0x4e0 [ 194.309960][T11686] ___sys_sendmsg+0x17b/0x1d0 [ 194.310058][T11686] __x64_sys_sendmsg+0xd4/0x160 [ 194.310110][T11686] x64_sys_call+0x191e/0x3000 [ 194.310141][T11686] do_syscall_64+0xd2/0x200 [ 194.310315][T11686] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 194.310351][T11686] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 194.310410][T11686] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 194.310436][T11686] RIP: 0033:0x7fbabe27efc9 [ 194.310455][T11686] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 194.310488][T11686] RSP: 002b:00007fbabcce7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 194.310512][T11686] RAX: ffffffffffffffda RBX: 00007fbabe4d5fa0 RCX: 00007fbabe27efc9 [ 194.310529][T11686] RDX: 0000000000000000 RSI: 0000200000000140 RDI: 0000000000000004 [ 194.310618][T11686] RBP: 00007fbabcce7090 R08: 0000000000000000 R09: 0000000000000000 [ 194.310634][T11686] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 194.310648][T11686] R13: 00007fbabe4d6038 R14: 00007fbabe4d5fa0 R15: 00007ffc283db6d8 [ 194.310667][T11686] [ 194.392012][T11537] veth0_vlan: entered promiscuous mode [ 194.628804][T11696] can: request_module (can-proto-0) failed. [ 194.666849][T11537] veth1_vlan: entered promiscuous mode [ 194.702985][T11701] tap0: tun_chr_ioctl cmd 1074025677 [ 194.709728][T11701] tap0: linktype set to 804 [ 194.724304][T11537] veth0_macvtap: entered promiscuous mode [ 194.740409][T11537] veth1_macvtap: entered promiscuous mode [ 194.751298][T11701] loop0: detected capacity change from 0 to 1024 [ 194.763681][T11537] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 194.771545][T11701] EXT4-fs: Invalid want_extra_isize 127 [ 194.792514][T11537] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 194.809657][T11465] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 194.819342][T11465] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 194.853551][T11705] netlink: 'syz.3.2965': attribute type 1 has an invalid length. [ 194.865502][T11465] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 194.880380][T11465] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 194.943476][T11705] 8021q: adding VLAN 0 to HW filter on device bond1 [ 194.961550][T11714] loop4: detected capacity change from 0 to 512 [ 194.971414][T11714] EXT4-fs error (device loop4): ext4_orphan_get:1392: inode #15: comm syz.4.2916: inode has both inline data and extents flags [ 194.988052][T11714] EXT4-fs error (device loop4): ext4_orphan_get:1397: comm syz.4.2916: couldn't read orphan inode 15 (err -117) [ 195.011261][T11714] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 195.032305][T11714] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 7934 vs 220 free clusters [ 195.074950][T11724] netlink: 'syz.2.2969': attribute type 4 has an invalid length. [ 195.104836][T11537] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 195.114735][T11720] loop5: detected capacity change from 0 to 2048 [ 195.122971][T11724] netlink: 'syz.2.2969': attribute type 4 has an invalid length. [ 195.146654][T11720] EXT4-fs: Ignoring removed nomblk_io_submit option [ 195.180933][T11726] loop3: detected capacity change from 0 to 2048 [ 195.196051][T11731] FAULT_INJECTION: forcing a failure. [ 195.196051][T11731] name failslab, interval 1, probability 0, space 0, times 0 [ 195.196733][T11720] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 195.209340][T11731] CPU: 1 UID: 0 PID: 11731 Comm: syz.4.2971 Not tainted syzkaller #0 PREEMPT(voluntary) [ 195.209372][T11731] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 195.209386][T11731] Call Trace: [ 195.209468][T11731] [ 195.209479][T11731] __dump_stack+0x1d/0x30 [ 195.209561][T11731] dump_stack_lvl+0xe8/0x140 [ 195.209602][T11731] dump_stack+0x15/0x1b [ 195.209709][T11731] should_fail_ex+0x265/0x280 [ 195.209751][T11731] ? resv_map_alloc+0x57/0x190 [ 195.209820][T11731] should_failslab+0x8c/0xb0 [ 195.209850][T11731] __kmalloc_cache_noprof+0x4c/0x4a0 [ 195.209897][T11731] resv_map_alloc+0x57/0x190 [ 195.209985][T11731] hugetlbfs_get_inode+0x67/0x370 [ 195.210019][T11731] hugetlb_file_setup+0x192/0x3d0 [ 195.210049][T11731] ksys_mmap_pgoff+0x157/0x310 [ 195.210094][T11731] x64_sys_call+0x14a3/0x3000 [ 195.210199][T11731] do_syscall_64+0xd2/0x200 [ 195.210268][T11731] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 195.210297][T11731] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 195.210334][T11731] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 195.210430][T11731] RIP: 0033:0x7fcf8df5efc9 [ 195.210453][T11731] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 195.210477][T11731] RSP: 002b:00007fcf8c9c7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 195.210503][T11731] RAX: ffffffffffffffda RBX: 00007fcf8e1b5fa0 RCX: 00007fcf8df5efc9 [ 195.210520][T11731] RDX: 000000000300000c RSI: 0000000000c00000 RDI: 0000200000400000 [ 195.210537][T11731] RBP: 00007fcf8c9c7090 R08: ffffffffffffffff R09: 0000000000000000 [ 195.210623][T11731] R10: 0000000000050032 R11: 0000000000000246 R12: 0000000000000001 [ 195.210654][T11731] R13: 00007fcf8e1b6038 R14: 00007fcf8e1b5fa0 R15: 00007fff9ed0d408 [ 195.210687][T11731] [ 195.238449][T11726] EXT4-fs: Ignoring removed nomblk_io_submit option [ 195.320632][T11734] loop2: detected capacity change from 0 to 128 [ 195.342871][T11720] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 195.478549][T11726] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 195.495521][T11726] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 195.548464][T11465] netdevsim netdevsim0 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 195.559705][T11465] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 195.598163][T11728] ip6_vti0 speed is unknown, defaulting to 1000 [ 195.638152][T11465] netdevsim netdevsim0 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 195.648565][T11465] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 195.685559][T11734] bio_check_eod: 624 callbacks suppressed [ 195.685579][T11734] syz.2.2972: attempt to access beyond end of device [ 195.685579][T11734] loop2: rw=0, sector=145, nr_sectors = 8 limit=128 [ 195.710861][T11465] netdevsim netdevsim0 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 195.722636][T11465] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 195.737034][T11734] syz.2.2972: attempt to access beyond end of device [ 195.737034][T11734] loop2: rw=0, sector=145, nr_sectors = 8 limit=128 [ 195.754752][T11734] syz.2.2972: attempt to access beyond end of device [ 195.754752][T11734] loop2: rw=0, sector=145, nr_sectors = 8 limit=128 [ 195.800525][T11734] syz.2.2972: attempt to access beyond end of device [ 195.800525][T11734] loop2: rw=0, sector=145, nr_sectors = 8 limit=128 [ 195.815952][T11465] netdevsim netdevsim0 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 195.826782][T11465] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 195.835594][T11734] syz.2.2972: attempt to access beyond end of device [ 195.835594][T11734] loop2: rw=0, sector=145, nr_sectors = 8 limit=128 [ 195.855012][T11734] syz.2.2972: attempt to access beyond end of device [ 195.855012][T11734] loop2: rw=0, sector=145, nr_sectors = 8 limit=128 [ 195.864617][T11757] FAULT_INJECTION: forcing a failure. [ 195.864617][T11757] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 195.886244][T11757] CPU: 0 UID: 0 PID: 11757 Comm: syz.5.2977 Not tainted syzkaller #0 PREEMPT(voluntary) [ 195.886271][T11757] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 195.886283][T11757] Call Trace: [ 195.886345][T11757] [ 195.886353][T11757] __dump_stack+0x1d/0x30 [ 195.886384][T11757] dump_stack_lvl+0xe8/0x140 [ 195.886426][T11757] dump_stack+0x15/0x1b [ 195.886457][T11757] should_fail_ex+0x265/0x280 [ 195.886489][T11757] should_fail+0xb/0x20 [ 195.886556][T11757] should_fail_usercopy+0x1a/0x20 [ 195.886594][T11757] _copy_to_user+0x20/0xa0 [ 195.886620][T11757] simple_read_from_buffer+0xb5/0x130 [ 195.886662][T11757] proc_fail_nth_read+0x10e/0x150 [ 195.886708][T11757] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 195.886798][T11757] vfs_read+0x1a8/0x770 [ 195.886850][T11757] ? __rcu_read_unlock+0x4f/0x70 [ 195.886949][T11757] ? __fget_files+0x184/0x1c0 [ 195.887010][T11757] ksys_read+0xda/0x1a0 [ 195.887032][T11757] __x64_sys_read+0x40/0x50 [ 195.887055][T11757] x64_sys_call+0x27c0/0x3000 [ 195.887093][T11757] do_syscall_64+0xd2/0x200 [ 195.887149][T11757] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 195.887175][T11757] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 195.887206][T11757] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 195.887227][T11757] RIP: 0033:0x7f220adcd9dc [ 195.887242][T11757] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 195.887314][T11757] RSP: 002b:00007f2209837030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 195.887369][T11757] RAX: ffffffffffffffda RBX: 00007f220b025fa0 RCX: 00007f220adcd9dc [ 195.887385][T11757] RDX: 000000000000000f RSI: 00007f22098370a0 RDI: 0000000000000004 [ 195.887400][T11757] RBP: 00007f2209837090 R08: 0000000000000000 R09: 0000000000000000 [ 195.887415][T11757] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 195.887430][T11757] R13: 00007f220b026038 R14: 00007f220b025fa0 R15: 00007ffcb5d34348 [ 195.887533][T11757] [ 195.894465][T11734] syz.2.2972: attempt to access beyond end of device [ 195.894465][T11734] loop2: rw=0, sector=145, nr_sectors = 8 limit=128 [ 195.978435][T11728] chnl_net:caif_netlink_parms(): no params data found [ 195.982983][T11734] syz.2.2972: attempt to access beyond end of device [ 195.982983][T11734] loop2: rw=0, sector=145, nr_sectors = 8 limit=128 [ 196.149676][T11734] syz.2.2972: attempt to access beyond end of device [ 196.149676][T11734] loop2: rw=0, sector=145, nr_sectors = 8 limit=128 [ 196.163583][T11734] syz.2.2972: attempt to access beyond end of device [ 196.163583][T11734] loop2: rw=0, sector=145, nr_sectors = 8 limit=128 [ 196.315879][T11728] bridge0: port 1(bridge_slave_0) entered blocking state [ 196.324468][T11728] bridge0: port 1(bridge_slave_0) entered disabled state [ 196.345066][T11728] bridge_slave_0: entered allmulticast mode [ 196.353503][T11728] bridge_slave_0: entered promiscuous mode [ 196.388009][T11728] bridge0: port 2(bridge_slave_1) entered blocking state [ 196.395340][T11728] bridge0: port 2(bridge_slave_1) entered disabled state [ 196.407585][T11728] bridge_slave_1: entered allmulticast mode [ 196.422807][T11728] bridge_slave_1: entered promiscuous mode [ 196.496788][T11788] FAULT_INJECTION: forcing a failure. [ 196.496788][T11788] name failslab, interval 1, probability 0, space 0, times 0 [ 196.509975][T11788] CPU: 0 UID: 0 PID: 11788 Comm: syz.4.2988 Not tainted syzkaller #0 PREEMPT(voluntary) [ 196.510016][T11788] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 196.510066][T11788] Call Trace: [ 196.510073][T11788] [ 196.510160][T11788] __dump_stack+0x1d/0x30 [ 196.510197][T11788] dump_stack_lvl+0xe8/0x140 [ 196.510298][T11788] dump_stack+0x15/0x1b [ 196.510412][T11788] should_fail_ex+0x265/0x280 [ 196.510443][T11788] should_failslab+0x8c/0xb0 [ 196.510542][T11788] __kmalloc_noprof+0xa5/0x570 [ 196.510564][T11788] ? genl_family_rcv_msg_attrs_parse+0x75/0x190 [ 196.510598][T11788] genl_family_rcv_msg_attrs_parse+0x75/0x190 [ 196.510661][T11788] genl_family_rcv_msg_doit+0x48/0x1b0 [ 196.510750][T11788] ? selinux_capable+0x31/0x40 [ 196.510810][T11788] ? security_capable+0x83/0x90 [ 196.510844][T11788] ? ns_capable+0x7d/0xb0 [ 196.510880][T11788] genl_rcv_msg+0x422/0x460 [ 196.510902][T11788] ? __pfx_l2tp_nl_cmd_tunnel_create+0x10/0x10 [ 196.511006][T11788] netlink_rcv_skb+0x123/0x220 [ 196.511042][T11788] ? __pfx_genl_rcv_msg+0x10/0x10 [ 196.511156][T11788] genl_rcv+0x28/0x40 [ 196.511173][T11788] netlink_unicast+0x5c0/0x690 [ 196.511200][T11788] netlink_sendmsg+0x58b/0x6b0 [ 196.511281][T11788] ? __pfx_netlink_sendmsg+0x10/0x10 [ 196.511317][T11788] __sock_sendmsg+0x145/0x180 [ 196.511343][T11788] ____sys_sendmsg+0x31e/0x4e0 [ 196.511433][T11788] ___sys_sendmsg+0x17b/0x1d0 [ 196.511474][T11788] __x64_sys_sendmsg+0xd4/0x160 [ 196.511513][T11788] x64_sys_call+0x191e/0x3000 [ 196.511549][T11788] do_syscall_64+0xd2/0x200 [ 196.511635][T11788] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 196.511658][T11788] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 196.511694][T11788] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 196.511721][T11788] RIP: 0033:0x7fcf8df5efc9 [ 196.511804][T11788] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 196.511828][T11788] RSP: 002b:00007fcf8c9c7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 196.511851][T11788] RAX: ffffffffffffffda RBX: 00007fcf8e1b5fa0 RCX: 00007fcf8df5efc9 [ 196.511863][T11788] RDX: 0000000020000810 RSI: 00002000000005c0 RDI: 0000000000000003 [ 196.511875][T11788] RBP: 00007fcf8c9c7090 R08: 0000000000000000 R09: 0000000000000000 [ 196.511938][T11788] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 196.511957][T11788] R13: 00007fcf8e1b6038 R14: 00007fcf8e1b5fa0 R15: 00007fff9ed0d408 [ 196.512074][T11788] [ 196.869463][T11465] bond0 (unregistering): Released all slaves [ 196.894767][T11465] bond1 (unregistering): Released all slaves [ 197.098173][T11794] ip6_vti0 speed is unknown, defaulting to 1000 [ 197.239778][T11728] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 197.250021][T11465] tipc: Disabling bearer [ 197.255021][T11465] tipc: Left network mode [ 197.318357][T11728] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 197.417461][T11728] team0: Port device team_slave_0 added [ 197.433432][T11465] hsr_slave_0: left promiscuous mode [ 197.448703][T11465] hsr_slave_1: left promiscuous mode [ 197.479268][T11465] veth1_macvtap: left promiscuous mode [ 197.484903][T11465] veth0_macvtap: left promiscuous mode [ 197.494584][T11465] veth1_vlan: left promiscuous mode [ 197.500137][T11465] veth0_vlan: left promiscuous mode [ 197.570329][T11465] pim6reg (unregistering): left allmulticast mode [ 197.579403][T11816] loop3: detected capacity change from 0 to 512 [ 197.591902][T11816] EXT4-fs error (device loop3): ext4_orphan_get:1392: inode #15: comm syz.3.2998: inode has both inline data and extents flags [ 197.609773][T11816] EXT4-fs error (device loop3): ext4_orphan_get:1397: comm syz.3.2998: couldn't read orphan inode 15 (err -117) [ 197.629353][T11821] FAULT_INJECTION: forcing a failure. [ 197.629353][T11821] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 197.643113][T11821] CPU: 1 UID: 0 PID: 11821 Comm: syz.2.2999 Not tainted syzkaller #0 PREEMPT(voluntary) [ 197.643172][T11821] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 197.643187][T11821] Call Trace: [ 197.643193][T11821] [ 197.643202][T11821] __dump_stack+0x1d/0x30 [ 197.643236][T11821] dump_stack_lvl+0xe8/0x140 [ 197.643264][T11821] dump_stack+0x15/0x1b [ 197.643351][T11821] should_fail_ex+0x265/0x280 [ 197.643381][T11821] should_fail+0xb/0x20 [ 197.643414][T11821] should_fail_usercopy+0x1a/0x20 [ 197.643454][T11821] _copy_to_user+0x20/0xa0 [ 197.643501][T11821] simple_read_from_buffer+0xb5/0x130 [ 197.643538][T11821] proc_fail_nth_read+0x10e/0x150 [ 197.643569][T11821] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 197.643594][T11821] vfs_read+0x1a8/0x770 [ 197.643630][T11821] ? __rcu_read_unlock+0x4f/0x70 [ 197.643737][T11821] ? __fget_files+0x184/0x1c0 [ 197.643761][T11821] ksys_read+0xda/0x1a0 [ 197.643784][T11821] __x64_sys_read+0x40/0x50 [ 197.643806][T11821] x64_sys_call+0x27c0/0x3000 [ 197.643871][T11821] do_syscall_64+0xd2/0x200 [ 197.643953][T11821] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 197.643980][T11821] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 197.644013][T11821] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 197.644098][T11821] RIP: 0033:0x7f49d150d9dc [ 197.644117][T11821] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 197.644136][T11821] RSP: 002b:00007f49cff77030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 197.644186][T11821] RAX: ffffffffffffffda RBX: 00007f49d1765fa0 RCX: 00007f49d150d9dc [ 197.644200][T11821] RDX: 000000000000000f RSI: 00007f49cff770a0 RDI: 0000000000000007 [ 197.644215][T11821] RBP: 00007f49cff77090 R08: 0000000000000000 R09: 0000000000000000 [ 197.644230][T11821] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 197.644245][T11821] R13: 00007f49d1766038 R14: 00007f49d1765fa0 R15: 00007fff6a5cdbc8 [ 197.644269][T11821] [ 197.694927][T11816] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 197.715478][ T29] kauditd_printk_skb: 324 callbacks suppressed [ 197.715497][ T29] audit: type=1326 audit(197.675:7687): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11811 comm="syz.4.2996" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7fcf8df5efc9 code=0x7ffc0000 [ 197.724724][T11816] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1289: group 0, [ 197.728490][ T29] audit: type=1326 audit(197.675:7688): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11811 comm="syz.4.2996" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcf8df5efc9 code=0x7ffc0000 [ 197.733060][T11816] block bitmap and bg descriptor inconsistent: 7934 vs 220 free clusters [ 197.737305][ T29] audit: type=1326 audit(197.675:7689): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11811 comm="syz.4.2996" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcf8df5efc9 code=0x7ffc0000 [ 197.926602][T11728] team0: Port device team_slave_1 added [ 197.972430][T11825] loop2: detected capacity change from 0 to 1024 [ 197.979328][T11825] EXT4-fs: inline encryption not supported [ 198.001479][T11824] loop4: detected capacity change from 0 to 1024 [ 198.015743][T10838] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 198.076016][T11728] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 198.083106][T11728] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 198.109240][T11728] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 198.157211][T11825] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 198.186824][T11824] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 198.215650][ T29] audit: type=1400 audit(198.185:7690): avc: denied { map } for pid=11822 comm="syz.4.3000" path="/10/file1/file1" dev="loop4" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 198.220039][T11728] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 198.238233][ T29] audit: type=1400 audit(198.185:7691): avc: denied { execute } for pid=11822 comm="syz.4.3000" path="/10/file1/file1" dev="loop4" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 198.245163][T11728] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 198.294685][T11728] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 198.346625][T11537] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 198.390561][ T29] audit: type=1326 audit(198.365:7692): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11839 comm="syz.4.3004" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcf8df5efc9 code=0x7ffc0000 [ 198.413644][ T29] audit: type=1326 audit(198.365:7693): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11839 comm="syz.4.3004" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcf8df5efc9 code=0x7ffc0000 [ 198.441073][ T29] audit: type=1326 audit(198.365:7694): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11839 comm="syz.4.3004" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fcf8df5efc9 code=0x7ffc0000 [ 198.464106][ T29] audit: type=1326 audit(198.365:7695): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11839 comm="syz.4.3004" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcf8df5efc9 code=0x7ffc0000 [ 198.487826][ T29] audit: type=1326 audit(198.365:7696): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11839 comm="syz.4.3004" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcf8df5efc9 code=0x7ffc0000 [ 198.489608][T11836] netlink: 136 bytes leftover after parsing attributes in process `syz.5.3003'. [ 198.515209][T11288] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 198.540837][T11728] hsr_slave_0: entered promiscuous mode [ 198.550769][T11728] hsr_slave_1: entered promiscuous mode [ 198.561299][T11728] debugfs: 'hsr0' already exists in 'hsr' [ 198.567226][T11728] Cannot create hsr debugfs directory [ 198.681857][T11465] IPVS: stop unused estimator thread 0... [ 198.847332][T11859] FAULT_INJECTION: forcing a failure. [ 198.847332][T11859] name failslab, interval 1, probability 0, space 0, times 0 [ 198.860577][T11859] CPU: 1 UID: 0 PID: 11859 Comm: syz.4.3013 Not tainted syzkaller #0 PREEMPT(voluntary) [ 198.860626][T11859] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 198.860643][T11859] Call Trace: [ 198.860652][T11859] [ 198.860662][T11859] __dump_stack+0x1d/0x30 [ 198.860777][T11859] dump_stack_lvl+0xe8/0x140 [ 198.860812][T11859] dump_stack+0x15/0x1b [ 198.860842][T11859] should_fail_ex+0x265/0x280 [ 198.860888][T11859] should_failslab+0x8c/0xb0 [ 198.860972][T11859] kmem_cache_alloc_noprof+0x50/0x480 [ 198.860999][T11859] ? alloc_empty_file+0x76/0x200 [ 198.861071][T11859] alloc_empty_file+0x76/0x200 [ 198.861103][T11859] path_openat+0x68/0x2170 [ 198.861141][T11859] ? mntput+0x4b/0x80 [ 198.861171][T11859] ? terminate_walk+0x27f/0x2a0 [ 198.861206][T11859] ? path_openat+0x1bf8/0x2170 [ 198.861251][T11859] ? _parse_integer_limit+0x170/0x190 [ 198.861310][T11859] do_filp_open+0x109/0x230 [ 198.861350][T11859] do_open_execat+0xd8/0x260 [ 198.861389][T11859] alloc_bprm+0x25/0x350 [ 198.861463][T11859] do_execveat_common+0x12e/0x750 [ 198.861506][T11859] __x64_sys_execve+0x5c/0x70 [ 198.861620][T11859] x64_sys_call+0x271a/0x3000 [ 198.861650][T11859] do_syscall_64+0xd2/0x200 [ 198.861728][T11859] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 198.861762][T11859] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 198.861819][T11859] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 198.861840][T11859] RIP: 0033:0x7fcf8df5efc9 [ 198.861856][T11859] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 198.861875][T11859] RSP: 002b:00007fcf8c9c7038 EFLAGS: 00000246 ORIG_RAX: 000000000000003b [ 198.861898][T11859] RAX: ffffffffffffffda RBX: 00007fcf8e1b5fa0 RCX: 00007fcf8df5efc9 [ 198.861914][T11859] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000200000000300 [ 198.861984][T11859] RBP: 00007fcf8c9c7090 R08: 0000000000000000 R09: 0000000000000000 [ 198.861997][T11859] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 198.862009][T11859] R13: 00007fcf8e1b6038 R14: 00007fcf8e1b5fa0 R15: 00007fff9ed0d408 [ 198.862034][T11859] [ 199.193920][T11728] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 199.388803][T11728] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 199.407499][T11728] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 199.416955][T11728] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 199.538037][T11728] 8021q: adding VLAN 0 to HW filter on device bond0 [ 199.549702][T11728] 8021q: adding VLAN 0 to HW filter on device team0 [ 199.577939][T11465] bridge0: port 1(bridge_slave_0) entered blocking state [ 199.585152][T11465] bridge0: port 1(bridge_slave_0) entered forwarding state [ 199.615032][T11465] bridge0: port 2(bridge_slave_1) entered blocking state [ 199.622172][T11465] bridge0: port 2(bridge_slave_1) entered forwarding state [ 199.708003][T11892] FAULT_INJECTION: forcing a failure. [ 199.708003][T11892] name failslab, interval 1, probability 0, space 0, times 0 [ 199.721093][T11892] CPU: 0 UID: 0 PID: 11892 Comm: syz.3.3019 Not tainted syzkaller #0 PREEMPT(voluntary) [ 199.721130][T11892] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 199.721146][T11892] Call Trace: [ 199.721154][T11892] [ 199.721163][T11892] __dump_stack+0x1d/0x30 [ 199.721222][T11892] dump_stack_lvl+0xe8/0x140 [ 199.721285][T11892] dump_stack+0x15/0x1b [ 199.721318][T11892] should_fail_ex+0x265/0x280 [ 199.721356][T11892] should_failslab+0x8c/0xb0 [ 199.721384][T11892] kmem_cache_alloc_node_noprof+0x57/0x4a0 [ 199.721492][T11892] ? __alloc_skb+0x101/0x320 [ 199.721522][T11892] ? __account_obj_stock+0x211/0x350 [ 199.721549][T11892] __alloc_skb+0x101/0x320 [ 199.721581][T11892] _sctp_make_chunk+0x59/0x210 [ 199.721671][T11892] sctp_make_abort_user+0x4c/0x3a0 [ 199.721703][T11892] sctp_sendmsg_check_sflags+0x17e/0x1e0 [ 199.721839][T11892] sctp_sendmsg+0x10bb/0x18d0 [ 199.721870][T11892] ? __pfx_sctp_sendmsg+0x10/0x10 [ 199.721894][T11892] inet_sendmsg+0xc5/0xd0 [ 199.721987][T11892] __sock_sendmsg+0x102/0x180 [ 199.722014][T11892] ____sys_sendmsg+0x31e/0x4e0 [ 199.722056][T11892] ___sys_sendmsg+0x17b/0x1d0 [ 199.722104][T11892] __x64_sys_sendmsg+0xd4/0x160 [ 199.722168][T11892] x64_sys_call+0x191e/0x3000 [ 199.722327][T11892] do_syscall_64+0xd2/0x200 [ 199.722364][T11892] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 199.722392][T11892] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 199.722426][T11892] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 199.722467][T11892] RIP: 0033:0x7fbabe27efc9 [ 199.722485][T11892] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 199.722505][T11892] RSP: 002b:00007fbabccc6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 199.722528][T11892] RAX: ffffffffffffffda RBX: 00007fbabe4d6090 RCX: 00007fbabe27efc9 [ 199.722540][T11892] RDX: 0000000000000000 RSI: 0000200000000400 RDI: 0000000000000003 [ 199.722605][T11892] RBP: 00007fbabccc6090 R08: 0000000000000000 R09: 0000000000000000 [ 199.722616][T11892] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 199.722627][T11892] R13: 00007fbabe4d6128 R14: 00007fbabe4d6090 R15: 00007ffc283db6d8 [ 199.722645][T11892] [ 199.968813][T11728] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 200.168117][T11728] veth0_vlan: entered promiscuous mode [ 200.185128][T11728] veth1_vlan: entered promiscuous mode [ 200.226552][T11728] veth0_macvtap: entered promiscuous mode [ 200.246820][T11728] veth1_macvtap: entered promiscuous mode [ 200.274972][T11728] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 200.298269][T11728] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 200.324001][T11465] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 200.352284][T11465] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 200.383127][T11465] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 200.395334][T11907] netlink: 'syz.2.3023': attribute type 2 has an invalid length. [ 200.410768][T11465] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 200.458581][T11911] tmpfs: Unknown parameter 'w' [ 200.550608][T11914] tipc: Started in network mode [ 200.556764][T11914] tipc: Node identity 328938cfe742, cluster identity 4711 [ 200.564147][T11914] tipc: Enabled bearer , priority 0 [ 200.586716][T11914] tipc: Disabling bearer [ 200.848205][T11921] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3026'. [ 201.074917][T11927] loop4: detected capacity change from 0 to 764 [ 201.491638][T11941] bridge0: entered allmulticast mode [ 201.512016][T11943] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3035'. [ 201.523559][T11943] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3035'. [ 201.620339][T11951] loop2: detected capacity change from 0 to 512 [ 201.706552][T11951] ------------[ cut here ]------------ [ 201.712726][T11951] EA inode 11 i_nlink=2 [ 201.713054][T11951] WARNING: CPU: 0 PID: 11951 at fs/ext4/xattr.c:1058 ext4_xattr_inode_update_ref+0x36a/0x380 [ 201.728476][T11951] Modules linked in: [ 201.732634][T11951] CPU: 0 UID: 0 PID: 11951 Comm: syz.2.3034 Not tainted syzkaller #0 PREEMPT(voluntary) [ 201.742611][T11951] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 201.752943][T11951] RIP: 0010:ext4_xattr_inode_update_ref+0x36a/0x380 [ 201.760101][T11951] Code: 90 49 8d 7e 40 e8 c6 fe b8 ff 4d 8b 6e 40 4c 89 e7 e8 da f9 b8 ff 41 8b 56 48 48 c7 c7 ce f6 61 86 4c 89 ee e8 37 dd 67 ff 90 <0f> 0b 90 90 e9 ff fe ff ff e8 38 a8 b8 03 0f 1f 84 00 00 00 00 00 [ 201.782150][T11951] RSP: 0018:ffffc900028d35a0 EFLAGS: 00010246 [ 201.788510][T11951] RAX: 862023fe66784800 RBX: ffff88811a650600 RCX: 0000000000080000 [ 201.796843][T11951] RDX: ffffc90005c47000 RSI: 0000000000004282 RDI: 0000000000004283 [ 201.805302][T11951] RBP: 0000000000000002 R08: 0001c900028d3427 R09: 0000000000000000 [ 201.813577][T11951] R10: 00000000ffffffff R11: 0000000000000002 R12: ffff88811a6505b0 [ 201.821698][T11951] R13: 000000000000000b R14: ffff88811a650568 R15: 0000000000000001 [ 201.830083][T11951] FS: 00007f49cff566c0(0000) GS:ffff8882aebfa000(0000) knlGS:0000000000000000 [ 201.839196][T11951] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 201.846531][T11951] CR2: 0000000000000000 CR3: 000000012ef86000 CR4: 00000000003506f0 [ 201.853664][T11952] loop0: detected capacity change from 0 to 2048 [ 201.854942][T11951] DR0: 0000200000000300 DR1: 0000200000000300 DR2: 0000000000000000 [ 201.861739][T11952] EXT4-fs: Ignoring removed nomblk_io_submit option [ 201.870488][T11951] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000600 [ 201.870517][T11951] Call Trace: [ 201.870526][T11951] [ 201.870540][T11951] ext4_xattr_set_entry+0x77f/0x1020 [ 201.898057][T11951] ext4_xattr_ibody_set+0x184/0x3c0 [ 201.903444][T11951] ext4_expand_extra_isize_ea+0xcbb/0x11f0 [ 201.907308][T11952] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 201.909340][T11951] __ext4_expand_extra_isize+0x246/0x280 [ 201.927864][T11951] __ext4_mark_inode_dirty+0x29d/0x3f0 [ 201.933565][T11951] ext4_evict_inode+0x80e/0xd90 [ 201.938920][T11951] ? __pfx_ext4_evict_inode+0x10/0x10 [ 201.944475][T11951] evict+0x2e3/0x550 [ 201.948760][T11951] ? __dquot_initialize+0x146/0x7c0 [ 201.954203][T11951] iput+0x4ed/0x650 [ 201.958843][T11951] ext4_process_orphan+0x1a9/0x1c0 [ 201.964076][T11951] ext4_orphan_cleanup+0x6a8/0xa00 [ 201.969496][T11951] ext4_fill_super+0x3483/0x3810 [ 201.974704][T11951] ? set_blocksize+0x1a8/0x310 [ 201.979637][T11951] ? sb_set_blocksize+0xe3/0x100 [ 201.984633][T11951] ? setup_bdev_super+0x30e/0x370 [ 201.989948][T11951] ? __pfx_ext4_fill_super+0x10/0x10 [ 201.995686][T11951] get_tree_bdev_flags+0x291/0x300 [ 202.001119][T11951] ? __pfx_ext4_fill_super+0x10/0x10 [ 202.006625][T11951] get_tree_bdev+0x1f/0x30 [ 202.011076][T11951] ext4_get_tree+0x1c/0x30 [ 202.015585][T11951] vfs_get_tree+0x57/0x1d0 [ 202.020073][T11951] do_new_mount+0x24d/0x660 [ 202.025133][T11951] path_mount+0x4a5/0xb70 [ 202.029589][T11951] ? user_path_at+0x109/0x130 [ 202.034478][T11951] __se_sys_mount+0x28c/0x2e0 [ 202.039801][T11951] ? do_mkdirat+0x3ac/0x3f0 [ 202.044556][T11951] __x64_sys_mount+0x67/0x80 [ 202.049242][T11951] x64_sys_call+0x2b51/0x3000 [ 202.054291][T11951] do_syscall_64+0xd2/0x200 [ 202.059018][T11951] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 202.066156][T11951] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 202.072506][T11951] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 202.078913][T11951] RIP: 0033:0x7f49d151076a [ 202.083463][T11951] Code: d8 64 89 02 48 c7 c0 ff ff ff ff eb a6 e8 de 1a 00 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 202.104429][T11951] RSP: 002b:00007f49cff55e68 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 202.113350][T11951] RAX: ffffffffffffffda RBX: 00007f49cff55ef0 RCX: 00007f49d151076a [ 202.123108][T11951] RDX: 0000200000000180 RSI: 00002000000001c0 RDI: 00007f49cff55eb0 [ 202.132700][T11951] RBP: 0000200000000180 R08: 00007f49cff55ef0 R09: 0000000001800700 [ 202.141383][T11951] R10: 0000000001800700 R11: 0000000000000246 R12: 00002000000001c0 [ 202.149604][T11951] R13: 00007f49cff55eb0 R14: 000000000000047c R15: 00002000000004c0 [ 202.157755][T11951] [ 202.160856][T11951] ---[ end trace 0000000000000000 ]--- [ 202.168484][T11951] EXT4-fs (loop2): 1 orphan inode deleted [ 202.174927][T11952] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 202.184604][T11951] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 202.311083][T11288] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 202.328694][T11966] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 202.427854][T11966] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 202.507914][T11966] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 202.582163][T11983] loop5: detected capacity change from 0 to 512 [ 202.589528][T11983] EXT4-fs: Ignoring removed mblk_io_submit option [ 202.598124][T11983] EXT4-fs (loop5): failed to initialize system zone (-117) [ 202.607189][T11983] EXT4-fs (loop5): mount failed [ 202.626877][T11966] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 202.704107][T11418] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 202.720726][T11418] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 202.756193][T11437] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 202.780709][T11437] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 202.817334][T11992] loop2: detected capacity change from 0 to 512 [ 202.828284][ T29] kauditd_printk_skb: 271 callbacks suppressed [ 202.828302][ T29] audit: type=1326 audit(202.805:7968): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11995 comm="syz.4.3051" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcf8df5efc9 code=0x7ffc0000 [ 202.860551][ T29] audit: type=1326 audit(202.805:7969): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11995 comm="syz.4.3051" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcf8df5efc9 code=0x7ffc0000 [ 202.884813][ T29] audit: type=1326 audit(202.805:7970): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11995 comm="syz.4.3051" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcf8df5efc9 code=0x7ffc0000 [ 202.908448][ T29] audit: type=1326 audit(202.805:7971): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11995 comm="syz.4.3051" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcf8df5efc9 code=0x7ffc0000 [ 202.916441][T11992] EXT4-fs error (device loop2): ext4_orphan_get:1392: inode #15: comm syz.2.3050: inode has both inline data and extents flags [ 202.932586][ T29] audit: type=1326 audit(202.805:7972): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11995 comm="syz.4.3051" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcf8df5efc9 code=0x7ffc0000 [ 202.932624][ T29] audit: type=1326 audit(202.805:7973): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11995 comm="syz.4.3051" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fcf8df5efc9 code=0x7ffc0000 [ 202.932657][ T29] audit: type=1326 audit(202.805:7974): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11995 comm="syz.4.3051" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcf8df5efc9 code=0x7ffc0000 [ 203.020254][ T29] audit: type=1326 audit(202.805:7975): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11995 comm="syz.4.3051" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcf8df5efc9 code=0x7ffc0000 [ 203.043698][ T29] audit: type=1326 audit(202.805:7976): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11995 comm="syz.4.3051" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fcf8df5efc9 code=0x7ffc0000 [ 203.067051][ T29] audit: type=1326 audit(202.805:7977): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11995 comm="syz.4.3051" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcf8df5efc9 code=0x7ffc0000 [ 203.094692][T11992] EXT4-fs error (device loop2): ext4_orphan_get:1397: comm syz.2.3050: couldn't read orphan inode 15 (err -117) [ 203.146964][T11992] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 203.220213][T11288] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 203.384525][T12007] ip6_vti0 speed is unknown, defaulting to 1000 [ 203.398058][T12014] loop4: detected capacity change from 0 to 2048 [ 203.425945][T12014] EXT4-fs: Ignoring removed nomblk_io_submit option [ 203.520235][T12023] loop7: detected capacity change from 0 to 7 [ 203.521609][T12014] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 203.542243][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 203.551562][ C1] buffer_io_error: 34470 callbacks suppressed [ 203.551576][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 203.571659][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 203.581289][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 203.589833][T12023] loop7: unable to read partition table [ 203.652803][T12014] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 203.667313][T12023] loop_reread_partitions: partition scan of loop7 (Cj̖P=ý?}X %`ր{֐ȵ4FLQk݊) failed (rc=-5) [ 203.697944][T12025] 8021q: adding VLAN 0 to HW filter on device bond1 [ 203.897202][T12029] loop0: detected capacity change from 0 to 1024 [ 203.915896][T12029] EXT4-fs: Ignoring removed nobh option [ 203.921693][T12029] EXT4-fs: Ignoring removed bh option [ 203.941241][T12029] EXT4-fs (loop0): stripe (8) is not aligned with cluster size (16), stripe is disabled [ 203.969327][T12029] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 204.280522][T12040] ip6_vti0 speed is unknown, defaulting to 1000 [ 204.773669][T12052] netlink: 'syz.2.3063': attribute type 3 has an invalid length. [ 204.793182][T11728] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 204.837051][T12058] netlink: 120 bytes leftover after parsing attributes in process `syz.4.3067'. [ 204.904169][T12067] netlink: 'syz.0.3069': attribute type 2 has an invalid length. [ 204.914241][T12067] tmpfs: Unknown parameter 'w' [ 205.035545][T12080] FAULT_INJECTION: forcing a failure. [ 205.035545][T12080] name failslab, interval 1, probability 0, space 0, times 0 [ 205.048466][T12080] CPU: 0 UID: 0 PID: 12080 Comm: syz.0.3075 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 205.048508][T12080] Tainted: [W]=WARN [ 205.048515][T12080] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 205.048527][T12080] Call Trace: [ 205.048534][T12080] [ 205.048598][T12080] __dump_stack+0x1d/0x30 [ 205.048643][T12080] dump_stack_lvl+0xe8/0x140 [ 205.048744][T12080] dump_stack+0x15/0x1b [ 205.048812][T12080] should_fail_ex+0x265/0x280 [ 205.048874][T12080] should_failslab+0x8c/0xb0 [ 205.048895][T12080] __kmalloc_noprof+0xa5/0x570 [ 205.048916][T12080] ? genl_family_rcv_msg_attrs_parse+0x75/0x190 [ 205.048950][T12080] genl_family_rcv_msg_attrs_parse+0x75/0x190 [ 205.048993][T12080] genl_family_rcv_msg_doit+0x48/0x1b0 [ 205.049079][T12080] ? selinux_capable+0x31/0x40 [ 205.049156][T12080] ? security_capable+0x83/0x90 [ 205.049190][T12080] ? ns_capable+0x7d/0xb0 [ 205.049230][T12080] genl_rcv_msg+0x422/0x460 [ 205.049269][T12080] ? __pfx_ieee802154_add_iface+0x10/0x10 [ 205.049312][T12080] netlink_rcv_skb+0x123/0x220 [ 205.049346][T12080] ? __pfx_genl_rcv_msg+0x10/0x10 [ 205.049377][T12080] genl_rcv+0x28/0x40 [ 205.049402][T12080] netlink_unicast+0x5c0/0x690 [ 205.049435][T12080] netlink_sendmsg+0x58b/0x6b0 [ 205.049474][T12080] ? __pfx_netlink_sendmsg+0x10/0x10 [ 205.049585][T12080] __sock_sendmsg+0x145/0x180 [ 205.049691][T12080] ____sys_sendmsg+0x31e/0x4e0 [ 205.049729][T12080] ___sys_sendmsg+0x17b/0x1d0 [ 205.049814][T12080] __x64_sys_sendmsg+0xd4/0x160 [ 205.049852][T12080] x64_sys_call+0x191e/0x3000 [ 205.049889][T12080] do_syscall_64+0xd2/0x200 [ 205.049968][T12080] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 205.049994][T12080] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 205.050087][T12080] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 205.050178][T12080] RIP: 0033:0x7f1d6d44efc9 [ 205.050197][T12080] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 205.050218][T12080] RSP: 002b:00007f1d6beaf038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 205.050271][T12080] RAX: ffffffffffffffda RBX: 00007f1d6d6a5fa0 RCX: 00007f1d6d44efc9 [ 205.050296][T12080] RDX: 0000000000000000 RSI: 0000200000000280 RDI: 0000000000000004 [ 205.050313][T12080] RBP: 00007f1d6beaf090 R08: 0000000000000000 R09: 0000000000000000 [ 205.050329][T12080] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 205.050344][T12080] R13: 00007f1d6d6a6038 R14: 00007f1d6d6a5fa0 R15: 00007ffde8f50e48 [ 205.050362][T12080] [ 205.057922][T12082] FAULT_INJECTION: forcing a failure. [ 205.057922][T12082] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 205.091792][T12079] loop4: detected capacity change from 0 to 2048 [ 205.096187][T12082] CPU: 1 UID: 0 PID: 12082 Comm: syz.5.3076 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 205.096226][T12082] Tainted: [W]=WARN [ 205.096236][T12082] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 205.096253][T12082] Call Trace: [ 205.096265][T12082] [ 205.096275][T12082] __dump_stack+0x1d/0x30 [ 205.096320][T12082] dump_stack_lvl+0xe8/0x140 [ 205.096476][T12082] dump_stack+0x15/0x1b [ 205.096512][T12082] should_fail_ex+0x265/0x280 [ 205.096561][T12082] should_fail+0xb/0x20 [ 205.096598][T12082] should_fail_usercopy+0x1a/0x20 [ 205.096664][T12082] _copy_to_user+0x20/0xa0 [ 205.096694][T12082] simple_read_from_buffer+0xb5/0x130 [ 205.096741][T12082] proc_fail_nth_read+0x10e/0x150 [ 205.096797][T12082] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 205.096829][T12082] vfs_read+0x1a8/0x770 [ 205.096872][T12082] ? __rcu_read_unlock+0x4f/0x70 [ 205.096984][T12082] ? __fget_files+0x184/0x1c0 [ 205.097015][T12082] ksys_read+0xda/0x1a0 [ 205.097042][T12082] __x64_sys_read+0x40/0x50 [ 205.097112][T12082] x64_sys_call+0x27c0/0x3000 [ 205.097155][T12082] do_syscall_64+0xd2/0x200 [ 205.097257][T12082] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 205.097285][T12082] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 205.097321][T12082] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 205.097351][T12082] RIP: 0033:0x7f220adcd9dc [ 205.097372][T12082] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 205.097439][T12082] RSP: 002b:00007f2209837030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 205.097465][T12082] RAX: ffffffffffffffda RBX: 00007f220b025fa0 RCX: 00007f220adcd9dc [ 205.097481][T12082] RDX: 000000000000000f RSI: 00007f22098370a0 RDI: 0000000000000004 [ 205.097498][T12082] RBP: 00007f2209837090 R08: 0000000000000000 R09: 0000000000000000 [ 205.097515][T12082] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 205.097538][T12082] R13: 00007f220b026038 R14: 00007f220b025fa0 R15: 00007ffcb5d34348 [ 205.097571][T12082] [ 205.536303][T12079] EXT4-fs: Ignoring removed nomblk_io_submit option [ 205.557951][T12079] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 205.571626][T12079] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 205.657244][T12100] loop2: detected capacity change from 0 to 2048 [ 205.668114][T12100] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000900 r/w without journal. Quota mode: none. [ 205.703977][T12094] loop0: detected capacity change from 0 to 1024 [ 205.798320][T11288] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000900. [ 205.888368][T12094] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 205.942559][T12094] FAULT_INJECTION: forcing a failure. [ 205.942559][T12094] name failslab, interval 1, probability 0, space 0, times 0 [ 205.955277][T12094] CPU: 1 UID: 0 PID: 12094 Comm: syz.0.3080 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 205.955385][T12094] Tainted: [W]=WARN [ 205.955394][T12094] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 205.955410][T12094] Call Trace: [ 205.955423][T12094] [ 205.955433][T12094] __dump_stack+0x1d/0x30 [ 205.955469][T12094] dump_stack_lvl+0xe8/0x140 [ 205.955571][T12094] dump_stack+0x15/0x1b [ 205.955602][T12094] should_fail_ex+0x265/0x280 [ 205.955638][T12094] should_failslab+0x8c/0xb0 [ 205.955731][T12094] kmem_cache_alloc_noprof+0x50/0x480 [ 205.955756][T12094] ? audit_log_start+0x342/0x720 [ 205.955789][T12094] audit_log_start+0x342/0x720 [ 205.955826][T12094] audit_seccomp+0x48/0x100 [ 205.955916][T12094] ? __seccomp_filter+0x82d/0x1250 [ 205.955937][T12094] __seccomp_filter+0x83e/0x1250 [ 205.955967][T12094] __secure_computing+0x82/0x150 [ 205.956000][T12094] syscall_trace_enter+0xcf/0x1e0 [ 205.956022][T12094] do_syscall_64+0xac/0x200 [ 205.956053][T12094] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 205.956074][T12094] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 205.956101][T12094] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 205.956133][T12094] RIP: 0033:0x7f1d6d44d9dc [ 205.956149][T12094] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 205.956175][T12094] RSP: 002b:00007f1d6beaf030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 205.956194][T12094] RAX: ffffffffffffffda RBX: 00007f1d6d6a5fa0 RCX: 00007f1d6d44d9dc [ 205.956207][T12094] RDX: 000000000000000f RSI: 00007f1d6beaf0a0 RDI: 0000000000000007 [ 205.956260][T12094] RBP: 00007f1d6beaf090 R08: 0000000000000000 R09: 0000000000000000 [ 205.956278][T12094] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 205.956291][T12094] R13: 00007f1d6d6a6038 R14: 00007f1d6d6a5fa0 R15: 00007ffde8f50e48 [ 205.956310][T12094] [ 206.240902][T12111] loop2: detected capacity change from 0 to 8192 [ 206.295747][T12111] loop2: p1 p2 p4 [ 206.299681][T12111] loop2: p1 size 196608 extends beyond EOD, truncated [ 206.316292][T11728] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 206.340805][T12111] loop2: p2 start 590207 is beyond EOD, truncated [ 206.347333][T12111] loop2: p4 size 50331648 extends beyond EOD, truncated [ 206.371478][T12117] pim6reg: entered allmulticast mode [ 206.380144][T12117] pim6reg: left allmulticast mode [ 206.436981][T12123] loop3: detected capacity change from 0 to 512 [ 206.455712][T12126] FAULT_INJECTION: forcing a failure. [ 206.455712][T12126] name failslab, interval 1, probability 0, space 0, times 0 [ 206.468717][T12126] CPU: 1 UID: 0 PID: 12126 Comm: syz.0.3090 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 206.468799][T12126] Tainted: [W]=WARN [ 206.468807][T12126] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 206.468820][T12126] Call Trace: [ 206.468827][T12126] [ 206.468835][T12126] __dump_stack+0x1d/0x30 [ 206.468874][T12126] dump_stack_lvl+0xe8/0x140 [ 206.468927][T12126] dump_stack+0x15/0x1b [ 206.468997][T12126] should_fail_ex+0x265/0x280 [ 206.469032][T12126] ? rtnl_newlink+0x5c/0x12d0 [ 206.469051][T12126] should_failslab+0x8c/0xb0 [ 206.469108][T12126] __kmalloc_cache_noprof+0x4c/0x4a0 [ 206.469173][T12126] rtnl_newlink+0x5c/0x12d0 [ 206.469195][T12126] ? css_rstat_updated+0xb7/0x240 [ 206.469224][T12126] ? bpf_send_signal_common+0x2ce/0x300 [ 206.469292][T12126] ? css_rstat_updated+0xb7/0x240 [ 206.469318][T12126] ? refill_stock+0x32f/0x390 [ 206.469411][T12126] ? x86_call_depth_emit_accounting+0x128/0x2e0 [ 206.469439][T12126] ? bpf_perf_event_read+0x137/0x150 [ 206.469481][T12126] ? __rcu_read_unlock+0x34/0x70 [ 206.469524][T12126] ? bpf_trace_run3+0x12c/0x1d0 [ 206.469552][T12126] ? __memcg_slab_free_hook+0x135/0x230 [ 206.469637][T12126] ? __rcu_read_unlock+0x4f/0x70 [ 206.469680][T12126] ? avc_has_perm_noaudit+0x1b1/0x200 [ 206.469768][T12126] ? cred_has_capability+0x210/0x280 [ 206.469802][T12126] ? selinux_capable+0x31/0x40 [ 206.469892][T12126] ? security_capable+0x83/0x90 [ 206.469916][T12126] ? ns_capable+0x7d/0xb0 [ 206.470013][T12126] ? __pfx_rtnl_newlink+0x10/0x10 [ 206.470030][T12126] rtnetlink_rcv_msg+0x5fe/0x6d0 [ 206.470076][T12126] netlink_rcv_skb+0x123/0x220 [ 206.470223][T12126] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 206.470286][T12126] rtnetlink_rcv+0x1c/0x30 [ 206.470324][T12126] netlink_unicast+0x5c0/0x690 [ 206.470365][T12126] netlink_sendmsg+0x58b/0x6b0 [ 206.470401][T12126] ? __pfx_netlink_sendmsg+0x10/0x10 [ 206.470430][T12126] __sock_sendmsg+0x145/0x180 [ 206.470457][T12126] ____sys_sendmsg+0x31e/0x4e0 [ 206.470577][T12126] ___sys_sendmsg+0x17b/0x1d0 [ 206.470630][T12126] __x64_sys_sendmsg+0xd4/0x160 [ 206.470668][T12126] x64_sys_call+0x191e/0x3000 [ 206.470698][T12126] do_syscall_64+0xd2/0x200 [ 206.470734][T12126] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 206.470760][T12126] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 206.470818][T12126] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 206.470841][T12126] RIP: 0033:0x7f1d6d44efc9 [ 206.470860][T12126] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 206.470883][T12126] RSP: 002b:00007f1d6beaf038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 206.470902][T12126] RAX: ffffffffffffffda RBX: 00007f1d6d6a5fa0 RCX: 00007f1d6d44efc9 [ 206.470955][T12126] RDX: 0000000000000000 RSI: 0000200000000240 RDI: 0000000000000005 [ 206.470970][T12126] RBP: 00007f1d6beaf090 R08: 0000000000000000 R09: 0000000000000000 [ 206.470982][T12126] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 206.470994][T12126] R13: 00007f1d6d6a6038 R14: 00007f1d6d6a5fa0 R15: 00007ffde8f50e48 [ 206.471018][T12126] [ 206.790551][T12128] netlink: 'syz.2.3091': attribute type 2 has an invalid length. [ 206.802152][T12128] tmpfs: Unknown parameter 'w' [ 206.824145][T12123] EXT4-fs warning (device loop3): ext4_enable_quotas:7180: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 206.841979][T12123] EXT4-fs (loop3): mount failed [ 206.876120][T11465] Bluetooth: hci0: Frame reassembly failed (-84) [ 206.946841][T12137] xt_connbytes: Forcing CT accounting to be enabled [ 206.964215][T12137] Cannot find set identified by id 0 to match [ 207.067560][T12156] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 207.080577][T12156] C: renamed from team_slave_0 (while UP) [ 207.090433][T12156] netlink: 152 bytes leftover after parsing attributes in process `syz.0.3102'. [ 207.138242][T12156] netlink: 'syz.0.3102': attribute type 13 has an invalid length. [ 207.197695][T12161] netlink: 60 bytes leftover after parsing attributes in process `syz.0.3102'. [ 207.221792][T12156] bridge0: port 2(bridge_slave_1) entered disabled state [ 207.229449][T12156] bridge0: port 1(bridge_slave_0) entered disabled state [ 207.256343][T12163] loop3: detected capacity change from 0 to 128 [ 207.263600][T12163] FAT-fs (loop3): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 207.288656][T12163] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 207.337759][T12156] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 207.358549][T12156] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 207.435112][T11437] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 207.437495][T12169] IPv6: NLM_F_CREATE should be specified when creating new route [ 207.445082][T11437] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 207.478473][T11437] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 207.484311][T12173] cgroup: name respecified [ 207.497687][T11437] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 207.560721][T12173] loop3: detected capacity change from 0 to 512 [ 207.569264][T12173] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 207.590705][T12173] EXT4-fs (loop3): 1 truncate cleaned up [ 207.598522][T12173] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 207.727177][T12173] ip6_vti0 speed is unknown, defaulting to 1000 [ 207.859681][ T29] kauditd_printk_skb: 284 callbacks suppressed [ 207.859696][ T29] audit: type=1400 audit(207.835:8257): avc: denied { unmount } for pid=10838 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 207.916206][T10838] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 207.982922][ T29] audit: type=1400 audit(207.955:8258): avc: denied { execute } for pid=12193 comm="syz.3.3115" path="/79/cpu.stat" dev="tmpfs" ino=435 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 208.028819][ T29] audit: type=1400 audit(207.995:8259): avc: denied { read } for pid=12191 comm="syz.4.3116" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 208.078839][ T29] audit: type=1400 audit(208.055:8260): avc: denied { create } for pid=12191 comm="syz.4.3116" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 208.098427][ T29] audit: type=1400 audit(208.055:8261): avc: denied { write } for pid=12191 comm="syz.4.3116" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 208.260759][ T29] audit: type=1400 audit(208.235:8262): avc: denied { create } for pid=12193 comm="syz.3.3115" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 208.290015][ T29] audit: type=1400 audit(208.265:8263): avc: denied { write } for pid=12193 comm="syz.3.3115" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 208.406190][T12200] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3117'. [ 208.492639][ T29] audit: type=1400 audit(208.465:8264): avc: denied { connect } for pid=12202 comm="syz.3.3118" lport=255 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 208.553731][ T29] audit: type=1400 audit(208.525:8265): avc: denied { ioctl } for pid=12205 comm="syz.0.3119" path="/dev/sg0" dev="devtmpfs" ino=137 ioctlcmd=0x2285 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 208.579373][ T29] audit: type=1400 audit(208.525:8266): avc: denied { create } for pid=12202 comm="syz.3.3118" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 208.696516][T12206] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in; [ 208.696516][T12206] program syz.0.3119 not setting count and/or reply_len properly [ 208.810524][T12220] loop3: detected capacity change from 0 to 512 [ 208.828216][T12220] ext4: Unknown parameter 'smackfsfloor' [ 208.915546][ T3491] Bluetooth: hci0: command 0x1003 tx timeout [ 208.922572][ T44] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 208.983604][T11418] Bluetooth: hci0: Frame reassembly failed (-84) [ 208.990646][T11418] Bluetooth: hci0: Frame reassembly failed (-84) [ 208.996705][T12222] ip6_vti0 speed is unknown, defaulting to 1000 [ 209.359999][T12231] loop0: detected capacity change from 0 to 512 [ 209.386110][T12231] EXT4-fs (loop0): orphan cleanup on readonly fs [ 209.400748][T12231] EXT4-fs error (device loop0): ext4_orphan_get:1418: comm syz.0.3128: bad orphan inode 13 [ 209.411152][T12231] ext4_test_bit(bit=12, block=18) = 1 [ 209.416949][T12231] is_bad_inode(inode)=0 [ 209.421341][T12231] NEXT_ORPHAN(inode)=2130706432 [ 209.426337][T12231] max_ino=32 [ 209.430053][T12231] i_nlink=1 [ 209.434944][T12231] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 209.471441][T12231] EXT4-fs error (device loop0): ext4_lookup:1791: inode #2: comm syz.0.3128: deleted inode referenced: 12 [ 209.489521][T12231] EXT4-fs (loop0): warning: mounting fs with errors, running e2fsck is recommended [ 209.505884][T12231] EXT4-fs (loop0): re-mounted 00000000-0000-0000-0000-000000000000 r/w. [ 209.521903][T12231] EXT4-fs (loop0): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 209.554437][T11728] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 209.604993][T12241] FAULT_INJECTION: forcing a failure. [ 209.604993][T12241] name failslab, interval 1, probability 0, space 0, times 0 [ 209.620480][T12241] CPU: 0 UID: 0 PID: 12241 Comm: syz.3.3130 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 209.620654][T12241] Tainted: [W]=WARN [ 209.620662][T12241] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 209.620702][T12241] Call Trace: [ 209.620710][T12241] [ 209.620719][T12241] __dump_stack+0x1d/0x30 [ 209.621167][T12241] dump_stack_lvl+0xe8/0x140 [ 209.621201][T12241] dump_stack+0x15/0x1b [ 209.621245][T12241] should_fail_ex+0x265/0x280 [ 209.621407][T12241] ? dev_ingress_queue_create+0x58/0x120 [ 209.621440][T12241] should_failslab+0x8c/0xb0 [ 209.621520][T12241] __kmalloc_cache_noprof+0x4c/0x4a0 [ 209.621551][T12241] dev_ingress_queue_create+0x58/0x120 [ 209.621640][T12241] tc_modify_qdisc+0x413/0x1420 [ 209.621685][T12241] ? __pfx_tc_modify_qdisc+0x10/0x10 [ 209.621711][T12241] rtnetlink_rcv_msg+0x65a/0x6d0 [ 209.621773][T12241] netlink_rcv_skb+0x123/0x220 [ 209.621942][T12241] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 209.621989][T12241] rtnetlink_rcv+0x1c/0x30 [ 209.622028][T12241] netlink_unicast+0x5c0/0x690 [ 209.622062][T12241] netlink_sendmsg+0x58b/0x6b0 [ 209.622265][T12241] ? __pfx_netlink_sendmsg+0x10/0x10 [ 209.622303][T12241] __sock_sendmsg+0x145/0x180 [ 209.622326][T12241] ____sys_sendmsg+0x31e/0x4e0 [ 209.622441][T12241] ___sys_sendmsg+0x17b/0x1d0 [ 209.622492][T12241] __x64_sys_sendmsg+0xd4/0x160 [ 209.622536][T12241] x64_sys_call+0x191e/0x3000 [ 209.622625][T12241] do_syscall_64+0xd2/0x200 [ 209.622665][T12241] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 209.622695][T12241] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 209.622791][T12241] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 209.622814][T12241] RIP: 0033:0x7fbabe27efc9 [ 209.622839][T12241] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 209.622885][T12241] RSP: 002b:00007fbabcce7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 209.622912][T12241] RAX: ffffffffffffffda RBX: 00007fbabe4d5fa0 RCX: 00007fbabe27efc9 [ 209.622928][T12241] RDX: 0000000000000000 RSI: 00002000000012c0 RDI: 0000000000000005 [ 209.622942][T12241] RBP: 00007fbabcce7090 R08: 0000000000000000 R09: 0000000000000000 [ 209.623363][T12241] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 209.623377][T12241] R13: 00007fbabe4d6038 R14: 00007fbabe4d5fa0 R15: 00007ffc283db6d8 [ 209.623405][T12241] [ 210.269422][T12243] netlink: 64 bytes leftover after parsing attributes in process `syz.0.3131'. [ 210.284797][T12246] loop3: detected capacity change from 0 to 1024 [ 210.291931][T12246] EXT4-fs: Ignoring removed orlov option [ 210.320668][T12246] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 210.358898][T12243] team0: No ports can be present during mode change [ 210.369097][T12251] netlink: 52 bytes leftover after parsing attributes in process `syz.2.3134'. [ 210.380604][T12253] loop4: detected capacity change from 0 to 1024 [ 210.397569][T12253] EXT4-fs (loop4): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 210.409076][T12253] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 210.468055][T10838] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 210.490918][T12253] JBD2: no valid journal superblock found [ 210.496843][T12253] EXT4-fs (loop4): Could not load journal inode [ 210.569900][T12253] bridge_slave_0: left allmulticast mode [ 210.576358][T12253] bridge_slave_0: left promiscuous mode [ 210.582359][T12253] bridge0: port 1(bridge_slave_0) entered disabled state [ 210.633189][T12253] bridge_slave_1: left allmulticast mode [ 210.639386][T12253] bridge_slave_1: left promiscuous mode [ 210.645640][T12253] bridge0: port 2(bridge_slave_1) entered disabled state [ 210.658171][T12263] loop2: detected capacity change from 0 to 2048 [ 210.666212][T12263] EXT4-fs: Ignoring removed nomblk_io_submit option [ 210.689054][T12253] bond0: (slave bond_slave_0): Releasing backup interface [ 210.713680][T12263] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 210.727006][T12253] bond0: (slave bond_slave_1): Releasing backup interface [ 210.755941][T12253] team0: Port device team_slave_0 removed [ 210.757570][T12263] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 210.806259][T12253] team0: Port device team_slave_1 removed [ 210.824057][T12253] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 210.832654][T12253] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 210.842990][T12253] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 210.851071][T12253] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 210.868215][T12253] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 210.949580][T12277] ip6_vti0 speed is unknown, defaulting to 1000 [ 210.995520][ T44] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 211.437268][T12304] ip6_vti0 speed is unknown, defaulting to 1000 [ 211.699466][T11417] Bluetooth: hci0: Frame reassembly failed (-84) [ 211.714207][T12299] bridge0: port 3(ipvlan2) entered blocking state [ 211.721451][T12299] bridge0: port 3(ipvlan2) entered disabled state [ 211.730131][T12313] Cannot find add_set index 0 as target [ 211.739015][T12299] ipvlan2: entered allmulticast mode [ 211.744357][T12299] bridge0: entered allmulticast mode [ 211.750510][T12299] ipvlan2: left allmulticast mode [ 211.755654][T12299] bridge0: left allmulticast mode [ 211.818646][T12318] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 211.946823][T12318] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 211.985884][T12323] FAULT_INJECTION: forcing a failure. [ 211.985884][T12323] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 211.999051][T12323] CPU: 1 UID: 0 PID: 12323 Comm: syz.3.3157 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 211.999104][T12323] Tainted: [W]=WARN [ 211.999111][T12323] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 211.999127][T12323] Call Trace: [ 211.999136][T12323] [ 211.999147][T12323] __dump_stack+0x1d/0x30 [ 211.999182][T12323] dump_stack_lvl+0xe8/0x140 [ 211.999315][T12323] dump_stack+0x15/0x1b [ 211.999413][T12323] should_fail_ex+0x265/0x280 [ 211.999453][T12323] should_fail+0xb/0x20 [ 211.999489][T12323] should_fail_usercopy+0x1a/0x20 [ 211.999526][T12323] strncpy_from_user+0x25/0x230 [ 211.999612][T12323] ? __kmalloc_cache_noprof+0x249/0x4a0 [ 211.999639][T12323] __se_sys_memfd_create+0x1ff/0x590 [ 211.999746][T12323] __x64_sys_memfd_create+0x31/0x40 [ 211.999784][T12323] x64_sys_call+0x2ac2/0x3000 [ 211.999824][T12323] do_syscall_64+0xd2/0x200 [ 211.999891][T12323] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 211.999918][T12323] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 211.999953][T12323] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 211.999979][T12323] RIP: 0033:0x7fbabe27efc9 [ 211.999999][T12323] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 212.000089][T12323] RSP: 002b:00007fbabcce6e18 EFLAGS: 00000202 ORIG_RAX: 000000000000013f [ 212.000113][T12323] RAX: ffffffffffffffda RBX: 00000000000005b3 RCX: 00007fbabe27efc9 [ 212.000203][T12323] RDX: 00007fbabcce6ef0 RSI: 0000000000000000 RDI: 00007fbabe302960 [ 212.000219][T12323] RBP: 0000200000000680 R08: 00007fbabcce6bb7 R09: 00007fbabcce6e40 [ 212.000236][T12323] R10: 000000000000000a R11: 0000000000000202 R12: 0000200000000600 [ 212.000252][T12323] R13: 00007fbabcce6ef0 R14: 00007fbabcce6eb0 R15: 0000200000000640 [ 212.000277][T12323] [ 212.391265][T12318] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 212.428156][T12327] loop5: detected capacity change from 0 to 512 [ 212.458573][T12327] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 212.605105][T12323] Set syz1 is full, maxelem 65536 reached [ 212.674416][T12333] loop3: detected capacity change from 0 to 1024 [ 212.683000][T12318] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 212.716612][T12333] EXT4-fs: Ignoring removed orlov option [ 212.755732][T12333] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 212.858343][T12340] loop4: detected capacity change from 0 to 2048 [ 212.864944][T12340] EXT4-fs: Ignoring removed nomblk_io_submit option [ 212.926930][T12340] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 212.956366][T12340] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 212.998875][T12327] Set syz1 is full, maxelem 65536 reached [ 213.008643][ T29] kauditd_printk_skb: 522 callbacks suppressed [ 213.008676][ T29] audit: type=1326 audit(212.975:8789): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12326 comm="syz.5.3158" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f220adcefc9 code=0x7ffc0000 [ 213.038151][ T29] audit: type=1326 audit(212.975:8790): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12326 comm="syz.5.3158" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f220adcefc9 code=0x7ffc0000 [ 213.080101][T11418] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 213.095566][T11418] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 213.127955][T11418] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 213.155682][T11418] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 213.201686][T10639] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 213.242495][T12349] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in; [ 213.242495][T12349] program syz.2.3164 not setting count and/or reply_len properly [ 213.295022][T12352] loop2: detected capacity change from 0 to 1024 [ 213.302476][T12352] EXT4-fs (loop2): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 213.313444][T12352] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 213.324568][T12352] JBD2: no valid journal superblock found [ 213.330518][T12352] EXT4-fs (loop2): Could not load journal inode [ 213.347154][ T29] audit: type=1400 audit(213.325:8791): avc: denied { remove_name } for pid=12332 comm="syz.3.3159" name="file0" dev="loop3" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 213.367642][T12352] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 213.369366][ T29] audit: type=1400 audit(213.325:8792): avc: denied { rename } for pid=12332 comm="syz.3.3159" name="file0" dev="loop3" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 213.407660][ T29] audit: type=1400 audit(213.325:8793): avc: denied { unlink } for pid=12332 comm="syz.3.3159" name="file1" dev="loop3" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 213.431197][T12354] SELinux: ebitmap: truncated map [ 213.436883][T12354] SELinux: failed to load policy [ 213.443123][ T29] audit: type=1400 audit(213.405:8794): avc: denied { load_policy } for pid=12353 comm="syz.5.3166" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 213.464627][ T29] audit: type=1400 audit(213.445:8795): avc: denied { write } for pid=12353 comm="syz.5.3166" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 213.485820][T10838] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 213.514257][ T29] audit: type=1326 audit(213.485:8796): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12357 comm="syz.3.3167" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbabe27efc9 code=0x7ffc0000 [ 213.537575][ T29] audit: type=1326 audit(213.485:8797): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12357 comm="syz.3.3167" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbabe27efc9 code=0x7ffc0000 [ 213.600558][T12360] netlink: 52 bytes leftover after parsing attributes in process `syz.5.3169'. [ 213.611206][T12360] netlink: 52 bytes leftover after parsing attributes in process `syz.5.3169'. [ 213.644205][ T29] audit: type=1326 audit(213.545:8798): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12357 comm="syz.3.3167" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fbabe27efc9 code=0x7ffc0000 [ 213.689605][T12360] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3169'. [ 213.694146][T12370] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in; [ 213.694146][T12370] program syz.3.3174 not setting count and/or reply_len properly [ 213.716928][ T3491] Bluetooth: hci0: command 0x1003 tx timeout [ 213.726864][ T44] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 213.749755][T12372] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in; [ 213.749755][T12372] program syz.2.3175 not setting count and/or reply_len properly [ 213.783519][T12380] netlink: 'syz.0.3179': attribute type 2 has an invalid length. [ 213.806103][T12380] tmpfs: Unknown parameter 'w' [ 213.822728][T12388] loop3: detected capacity change from 0 to 128 [ 213.836470][T12388] FAT-fs (loop3): Directory bread(block 414) failed [ 213.845314][T12392] netlink: 36 bytes leftover after parsing attributes in process `syz.2.3183'. [ 213.854444][T12388] FAT-fs (loop3): Directory bread(block 415) failed [ 213.880133][T12388] FAT-fs (loop3): Directory bread(block 416) failed [ 213.897702][T12388] FAT-fs (loop3): Directory bread(block 417) failed [ 213.930675][T12388] FAT-fs (loop3): Directory bread(block 418) failed [ 213.945593][T12388] FAT-fs (loop3): Directory bread(block 419) failed [ 213.959899][T12388] FAT-fs (loop3): Directory bread(block 420) failed [ 213.976775][T12388] FAT-fs (loop3): Directory bread(block 421) failed [ 214.074780][T11418] Bluetooth: hci0: Frame reassembly failed (-84) [ 214.087058][T12403] FAT-fs (loop3): FAT read failed (blocknr 128) [ 214.167179][T12414] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3191'. [ 214.176363][T12414] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3191'. [ 214.185475][T12414] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3191'. [ 214.198779][T12419] netlink: 'syz.2.3193': attribute type 4 has an invalid length. [ 214.215178][T12414] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3191'. [ 214.224309][T12420] netlink: 'syz.2.3193': attribute type 4 has an invalid length. [ 214.244839][T12424] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in; [ 214.244839][T12424] program syz.0.3194 not setting count and/or reply_len properly [ 214.298521][T12431] loop0: detected capacity change from 0 to 1024 [ 214.306280][T12431] EXT4-fs (loop0): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 214.317351][T12431] EXT4-fs (loop0): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 214.330762][T12435] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 214.366795][T12431] JBD2: no valid journal superblock found [ 214.372585][T12431] EXT4-fs (loop0): Could not load journal inode [ 214.433551][T12431] bridge_slave_0: left allmulticast mode [ 214.439589][T12431] bridge_slave_0: left promiscuous mode [ 214.445460][T12431] bridge0: port 1(bridge_slave_0) entered disabled state [ 214.464082][T12431] bridge_slave_1: left allmulticast mode [ 214.469943][T12431] bridge_slave_1: left promiscuous mode [ 214.475694][T12431] bridge0: port 2(bridge_slave_1) entered disabled state [ 214.486119][T12431] bond0: (slave bond_slave_0): Releasing backup interface [ 214.494376][T12431] bond0: (slave bond_slave_1): Releasing backup interface [ 214.503318][T12431] team0: Port device C removed [ 214.525097][T12431] team0: Port device team_slave_1 removed [ 214.531275][T12431] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 214.546097][T12431] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 214.556055][T12431] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 214.581772][T12436] netlink: 'syz.5.3197': attribute type 3 has an invalid length. [ 214.741221][T12442] loop0: detected capacity change from 0 to 2048 [ 214.748217][T12442] EXT4-fs: Ignoring removed nomblk_io_submit option [ 214.767352][T12442] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 214.782313][T12442] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 215.041810][T12466] netlink: 'syz.3.3208': attribute type 10 has an invalid length. [ 215.049833][T12466] hsr_slave_0: left promiscuous mode [ 215.055821][T12466] hsr_slave_1: left promiscuous mode [ 215.176069][T12469] loop3: detected capacity change from 0 to 1024 [ 215.184860][T12469] EXT4-fs (loop3): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 215.196849][T12469] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 215.207546][T12469] JBD2: no valid journal superblock found [ 215.213582][T12469] EXT4-fs (loop3): Could not load journal inode [ 215.230931][T12473] loop5: detected capacity change from 0 to 2048 [ 215.238585][T12473] EXT4-fs: Ignoring removed mblk_io_submit option [ 215.245343][T12473] EXT4-fs: Ignoring removed i_version option [ 215.256990][T12473] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 215.282749][T10639] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 215.301485][T12477] loop3: detected capacity change from 0 to 512 [ 215.319790][T12477] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 215.343462][T12483] loop5: detected capacity change from 0 to 128 [ 215.366243][T12483] FAT-fs (loop5): error, invalid access to FAT (entry 0x00000100) [ 215.374167][T12483] FAT-fs (loop5): Filesystem has been set read-only [ 215.381054][T12483] bio_check_eod: 2013 callbacks suppressed [ 215.381071][T12483] syz.5.3214: attempt to access beyond end of device [ 215.381071][T12483] loop5: rw=524288, sector=2065, nr_sectors = 8 limit=128 [ 215.390700][T12477] netlink: 'syz.3.3213': attribute type 13 has an invalid length. [ 215.402674][T12483] FAT-fs (loop5): error, invalid access to FAT (entry 0x00000100) [ 215.418447][T12483] FAT-fs (loop5): error, invalid access to FAT (entry 0x00000100) [ 215.427991][T12483] syz.5.3214: attempt to access beyond end of device [ 215.427991][T12483] loop5: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 215.443202][T12483] syz.5.3214: attempt to access beyond end of device [ 215.443202][T12483] loop5: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 215.459695][T12483] syz.5.3214: attempt to access beyond end of device [ 215.459695][T12483] loop5: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 215.473540][T12483] syz.5.3214: attempt to access beyond end of device [ 215.473540][T12483] loop5: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 215.487924][T12485] SELinux: Context system_u:object_r:fsadm_exec_t:s0 is not valid (left unmapped). [ 215.508939][T12483] syz.5.3214: attempt to access beyond end of device [ 215.508939][T12483] loop5: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 215.523306][T12483] syz.5.3214: attempt to access beyond end of device [ 215.523306][T12483] loop5: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 215.538292][T12483] syz.5.3214: attempt to access beyond end of device [ 215.538292][T12483] loop5: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 215.552337][T12483] syz.5.3214: attempt to access beyond end of device [ 215.552337][T12483] loop5: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 215.567194][T12483] syz.5.3214: attempt to access beyond end of device [ 215.567194][T12483] loop5: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 216.115707][ T3491] Bluetooth: hci0: command 0x1003 tx timeout [ 216.121871][ T44] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 216.249097][T12499] loop5: detected capacity change from 0 to 128 [ 216.257254][T12500] loop4: detected capacity change from 0 to 512 [ 216.289006][T12500] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 216.307028][T12500] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 216.316091][T12500] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 216.331862][T12500] EXT4-fs error (device loop4): ext4_xattr_block_get:597: inode #15: comm syz.4.3219: corrupted xattr block 33: e_value out of bounds [ 216.346836][T12500] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop4 ino=15 [ 216.371360][T12500] EXT4-fs error (device loop4): ext4_xattr_block_get:597: inode #15: comm syz.4.3219: corrupted xattr block 33: e_value out of bounds [ 216.388789][T12500] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop4 ino=15 [ 216.819015][T12487] FAULT_INJECTION: forcing a failure. [ 216.819015][T12487] name failslab, interval 1, probability 0, space 0, times 0 [ 216.832015][T12487] CPU: 0 UID: 0 PID: 12487 Comm: syz.0.3215 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 216.832055][T12487] Tainted: [W]=WARN [ 216.832080][T12487] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 216.832098][T12487] Call Trace: [ 216.832105][T12487] [ 216.832113][T12487] __dump_stack+0x1d/0x30 [ 216.832233][T12487] dump_stack_lvl+0xe8/0x140 [ 216.832308][T12487] dump_stack+0x15/0x1b [ 216.832341][T12487] should_fail_ex+0x265/0x280 [ 216.832425][T12487] should_failslab+0x8c/0xb0 [ 216.832448][T12487] kmem_cache_alloc_node_noprof+0x57/0x4a0 [ 216.832531][T12487] ? __alloc_skb+0x101/0x320 [ 216.832567][T12487] __alloc_skb+0x101/0x320 [ 216.832590][T12487] netlink_ack+0xfd/0x500 [ 216.832664][T12487] ? __pfx_ethnl_tunnel_info_doit+0x10/0x10 [ 216.832702][T12487] netlink_rcv_skb+0x192/0x220 [ 216.832725][T12487] ? __pfx_genl_rcv_msg+0x10/0x10 [ 216.832761][T12487] genl_rcv+0x28/0x40 [ 216.832860][T12487] netlink_unicast+0x5c0/0x690 [ 216.832884][T12487] netlink_sendmsg+0x58b/0x6b0 [ 216.832950][T12487] ? __pfx_netlink_sendmsg+0x10/0x10 [ 216.832976][T12487] __sock_sendmsg+0x145/0x180 [ 216.833038][T12487] ____sys_sendmsg+0x31e/0x4e0 [ 216.833102][T12487] ___sys_sendmsg+0x17b/0x1d0 [ 216.833283][T12487] __x64_sys_sendmsg+0xd4/0x160 [ 216.833329][T12487] x64_sys_call+0x191e/0x3000 [ 216.833361][T12487] do_syscall_64+0xd2/0x200 [ 216.833590][T12487] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 216.833613][T12487] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 216.833638][T12487] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 216.833658][T12487] RIP: 0033:0x7f1d6d44efc9 [ 216.833672][T12487] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 216.833733][T12487] RSP: 002b:00007f1d6beaf038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 216.833750][T12487] RAX: ffffffffffffffda RBX: 00007f1d6d6a5fa0 RCX: 00007f1d6d44efc9 [ 216.833761][T12487] RDX: 0000000000040006 RSI: 0000200000000700 RDI: 0000000000000005 [ 216.833772][T12487] RBP: 00007f1d6beaf090 R08: 0000000000000000 R09: 0000000000000000 [ 216.833841][T12487] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 216.833851][T12487] R13: 00007f1d6d6a6038 R14: 00007f1d6d6a5fa0 R15: 00007ffde8f50e48 [ 216.833892][T12487] [ 217.073531][T12514] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 217.093653][T12500] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 217.103356][T11417] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 217.124265][T11417] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 217.133410][T11417] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 217.135553][T10838] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 217.143449][T11417] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 217.306485][T12540] loop3: detected capacity change from 0 to 512 [ 217.356697][T12540] EXT4-fs (loop3): orphan cleanup on readonly fs [ 217.474221][T12540] EXT4-fs error (device loop3): ext4_orphan_get:1418: comm syz.3.3227: bad orphan inode 13 [ 217.486010][T12540] ext4_test_bit(bit=12, block=18) = 1 [ 217.492121][T12540] is_bad_inode(inode)=0 [ 217.496538][T12540] NEXT_ORPHAN(inode)=2130706432 [ 217.501662][T12540] max_ino=32 [ 217.505866][T12540] i_nlink=1 [ 217.509953][T12540] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 217.539888][T12550] loop5: detected capacity change from 0 to 1024 [ 217.570960][T12540] EXT4-fs error (device loop3): ext4_lookup:1791: inode #2: comm syz.3.3227: deleted inode referenced: 12 [ 217.576728][T12550] EXT4-fs (loop5): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 217.594561][T12550] EXT4-fs (loop5): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 217.619280][T12550] JBD2: no valid journal superblock found [ 217.625327][T12550] EXT4-fs (loop5): Could not load journal inode [ 217.641198][T12540] EXT4-fs (loop3): warning: mounting fs with errors, running e2fsck is recommended [ 217.686622][T12540] EXT4-fs (loop3): re-mounted 00000000-0000-0000-0000-000000000000 r/w. [ 217.696770][T12550] bond0: (slave dummy0): Releasing backup interface [ 217.717534][T12560] EXT4-fs (loop3): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 217.727778][T12550] bridge_slave_0: left allmulticast mode [ 217.734106][T12550] bridge_slave_0: left promiscuous mode [ 217.740660][T12550] bridge0: port 1(bridge_slave_0) entered disabled state [ 217.756875][T12550] bridge_slave_1: left allmulticast mode [ 217.762618][T12550] bridge_slave_1: left promiscuous mode [ 217.768322][T12550] bridge0: port 2(bridge_slave_1) entered disabled state [ 217.776433][T10838] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 217.788386][T12550] bond0: (slave bond_slave_0): Releasing backup interface [ 217.807024][T12550] bond0: (slave bond_slave_1): Releasing backup interface [ 217.819984][T12565] loop4: detected capacity change from 0 to 2048 [ 217.827311][T12565] EXT4-fs: Ignoring removed nomblk_io_submit option [ 217.842305][T12550] team0: Port device team_slave_0 removed [ 217.859117][T12565] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 217.871426][T12550] team0: Port device team_slave_1 removed [ 217.877805][T12565] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 217.888579][T12550] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 217.896053][T12550] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 217.908089][T12550] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 217.915781][T12550] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 217.929039][T12550] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 217.955606][T12563] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 218.004429][T12576] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in; [ 218.004429][T12576] program syz.5.3241 not setting count and/or reply_len properly [ 218.060971][T12581] loop5: detected capacity change from 0 to 4096 [ 218.086591][T12572] netlink: 'syz.0.3238': attribute type 3 has an invalid length. [ 218.087676][T12581] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 218.106078][T12574] __nla_validate_parse: 5 callbacks suppressed [ 218.106098][T12574] netlink: 88 bytes leftover after parsing attributes in process `syz.3.3240'. [ 218.125358][ T29] kauditd_printk_skb: 349 callbacks suppressed [ 218.125382][ T29] audit: type=1326 audit(218.105:9148): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12579 comm="syz.5.3242" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f220adcefc9 code=0x7ffc0000 [ 218.163219][ T29] audit: type=1326 audit(218.115:9149): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12579 comm="syz.5.3242" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f220adcefc9 code=0x7ffc0000 [ 218.186870][ T29] audit: type=1326 audit(218.115:9150): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12579 comm="syz.5.3242" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f220adcefc9 code=0x7ffc0000 [ 218.210630][ T29] audit: type=1326 audit(218.115:9151): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12579 comm="syz.5.3242" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f220adcefc9 code=0x7ffc0000 [ 218.212924][T12574] delete_channel: no stack [ 218.243338][ T29] audit: type=1326 audit(218.215:9152): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12579 comm="syz.5.3242" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f220adcefc9 code=0x7ffc0000 [ 218.283848][T10639] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 218.293184][ T29] audit: type=1326 audit(218.215:9153): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12579 comm="syz.5.3242" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f220adcefc9 code=0x7ffc0000 [ 218.317721][ T29] audit: type=1326 audit(218.215:9154): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12579 comm="syz.5.3242" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f220adcefc9 code=0x7ffc0000 [ 218.344650][ T29] audit: type=1326 audit(218.215:9155): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12579 comm="syz.5.3242" exe="/root/syz-executor" sig=0 arch=c000003e syscall=49 compat=0 ip=0x7f220adcefc9 code=0x7ffc0000 [ 218.370117][ T29] audit: type=1400 audit(218.215:9156): avc: denied { create } for pid=12579 comm="syz.5.3242" name=E91F7189591E9233614B scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=sock_file permissive=1 [ 218.393159][ T29] audit: type=1326 audit(218.225:9157): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12579 comm="syz.5.3242" exe="/root/syz-executor" sig=0 arch=c000003e syscall=49 compat=0 ip=0x7f220adcefc9 code=0x7ffc0000 [ 218.446424][T12591] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3246'. [ 218.456736][T12590] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3246'. [ 218.486821][T12593] loop5: detected capacity change from 0 to 512 [ 218.511689][T12593] EXT4-fs (loop5): orphan cleanup on readonly fs [ 218.522608][T12593] EXT4-fs error (device loop5): ext4_orphan_get:1418: comm syz.5.3244: bad orphan inode 13 [ 218.535918][T12593] ext4_test_bit(bit=12, block=18) = 1 [ 218.542125][T12593] is_bad_inode(inode)=0 [ 218.546733][T12593] NEXT_ORPHAN(inode)=2130706432 [ 218.552870][T12593] max_ino=32 [ 218.557511][T12593] i_nlink=1 [ 218.605816][T12593] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 218.634952][T12593] EXT4-fs error (device loop5): ext4_lookup:1791: inode #2: comm syz.5.3244: deleted inode referenced: 12 [ 218.655755][T12593] EXT4-fs (loop5): re-mounted 00000000-0000-0000-0000-000000000000. [ 218.672251][T12608] loop4: detected capacity change from 0 to 1024 [ 218.680733][T12608] EXT4-fs (loop4): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 218.687835][T12609] netlink: 'syz.0.3249': attribute type 21 has an invalid length. [ 218.692600][T12608] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 218.727267][T10639] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 218.739711][T12613] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in; [ 218.739711][T12613] program syz.3.3252 not setting count and/or reply_len properly [ 218.765538][T12608] JBD2: no valid journal superblock found [ 218.771533][T12608] EXT4-fs (loop4): Could not load journal inode [ 218.790421][T12616] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3253'. [ 218.809302][T12619] loop2: detected capacity change from 0 to 1024 [ 218.817827][T12619] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 218.829687][T12619] EXT4-fs (loop2): stripe (65537) is not aligned with cluster size (16), stripe is disabled [ 218.856737][T12619] EXT4-fs error (device loop2): ext4_ext_check_inode:523: inode #4: comm syz.2.3254: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 2, max 4(4), depth 0(0) [ 218.903311][T12608] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 218.950890][T12627] loop3: detected capacity change from 0 to 128 [ 218.972940][T12619] EXT4-fs error (device loop2): ext4_quota_enable:7139: comm syz.2.3254: Bad quota inode: 4, type: 1 [ 218.985399][T12627] FAT-fs (loop3): Directory bread(block 414) failed [ 218.985685][T12619] EXT4-fs warning (device loop2): ext4_enable_quotas:7180: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 218.992326][T12627] FAT-fs (loop3): Directory bread(block 415) failed [ 219.014274][T12627] FAT-fs (loop3): Directory bread(block 416) failed [ 219.021589][T12627] FAT-fs (loop3): Directory bread(block 417) failed [ 219.026396][T12619] EXT4-fs (loop2): mount failed [ 219.029420][T12627] FAT-fs (loop3): Directory bread(block 418) failed [ 219.041924][T12627] FAT-fs (loop3): Directory bread(block 419) failed [ 219.049094][T12627] FAT-fs (loop3): Directory bread(block 420) failed [ 219.056728][T12627] FAT-fs (loop3): Directory bread(block 421) failed [ 219.121414][T12627] FAT-fs (loop3): FAT read failed (blocknr 128) [ 219.149296][T12634] geneve0: entered allmulticast mode [ 219.189739][T12640] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 219.210634][T12636] loop4: detected capacity change from 0 to 1024 [ 219.218672][T12636] EXT4-fs: Ignoring removed nomblk_io_submit option [ 219.226721][T12639] netlink: 176 bytes leftover after parsing attributes in process `syz.3.3263'. [ 219.227211][T12636] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e855c01c, mo2=0003] [ 219.244436][T12636] System zones: 0-1, 3-36 [ 219.250317][T12639] netlink: 36 bytes leftover after parsing attributes in process `syz.3.3263'. [ 219.250695][T12636] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 219.264751][T12646] netlink: 'syz.5.3262': attribute type 3 has an invalid length. [ 219.346411][T11537] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 219.369211][T12650] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3267'. [ 219.423389][T12656] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in; [ 219.423389][T12656] program syz.3.3269 not setting count and/or reply_len properly [ 219.463566][T12660] loop3: detected capacity change from 0 to 128 [ 219.471617][T12660] FAT-fs (loop3): Directory bread(block 414) failed [ 219.481290][T12660] FAT-fs (loop3): Directory bread(block 415) failed [ 219.488344][T12660] FAT-fs (loop3): Directory bread(block 416) failed [ 219.496493][T12660] FAT-fs (loop3): Directory bread(block 417) failed [ 219.515627][T12660] FAT-fs (loop3): Directory bread(block 418) failed [ 219.522472][T12660] FAT-fs (loop3): Directory bread(block 419) failed [ 219.522681][T12658] loop4: detected capacity change from 0 to 2048 [ 219.529724][T12660] FAT-fs (loop3): Directory bread(block 420) failed [ 219.536808][T12658] EXT4-fs: Ignoring removed nomblk_io_submit option [ 219.550416][T12660] FAT-fs (loop3): Directory bread(block 421) failed [ 219.587848][T12658] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 219.596809][T12660] FAT-fs (loop3): FAT read failed (blocknr 128) [ 219.610099][T12658] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 219.643328][T12668] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3273'. [ 219.680858][T12672] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3275'. [ 219.735528][T12672] loop3: detected capacity change from 0 to 8192 [ 219.944535][T12688] sch_tbf: burst 6 is lower than device ip6gre0 mtu (1448) ! [ 219.979331][T12692] loop0: detected capacity change from 0 to 2048 [ 220.045933][T12692] loop0: p1 < > p4 [ 220.050446][T12692] loop0: p4 size 8388608 extends beyond EOD, truncated [ 220.208648][T12525] kernel write not supported for file /180/net/rt_cache (pid: 12525 comm: kworker/0:14) [ 220.219617][T12707] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3289'. [ 220.334947][T12711] netlink: 'syz.4.3290': attribute type 1 has an invalid length. [ 220.514054][T12719] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 220.540615][T12717] loop2: detected capacity change from 0 to 2048 [ 220.552752][T12719] netlink: 'syz.0.3293': attribute type 3 has an invalid length. [ 220.612675][T12717] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 220.631285][T12728] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 220.667961][T11288] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 220.747717][T12737] bridge0: port 1(macsec1) entered blocking state [ 220.755141][T12737] bridge0: port 1(macsec1) entered disabled state [ 220.765924][T12737] macsec1: entered allmulticast mode [ 220.771367][T12737] bridge0: entered allmulticast mode [ 220.790014][T12737] macsec1: left allmulticast mode [ 220.795224][T12737] bridge0: left allmulticast mode [ 220.835515][T12738] netlink: 'syz.4.3296': attribute type 3 has an invalid length. [ 220.977971][T12761] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 220.998779][T12753] loop0: detected capacity change from 0 to 2048 [ 221.005887][T12753] EXT4-fs: Ignoring removed nomblk_io_submit option [ 221.023918][T12756] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in; [ 221.023918][T12756] program syz.2.3303 not setting count and/or reply_len properly [ 221.056039][T12766] netlink: 'syz.5.3307': attribute type 3 has an invalid length. [ 221.444673][T12781] loop3: detected capacity change from 0 to 1024 [ 221.457714][T12781] EXT4-fs (loop3): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 221.471151][T12781] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 221.496511][T12781] JBD2: no valid journal superblock found [ 221.502826][T12781] EXT4-fs (loop3): Could not load journal inode [ 221.564155][T12785] loop4: detected capacity change from 0 to 512 [ 221.655796][T12785] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 221.666099][T12785] EXT4-fs (loop4): orphan cleanup on readonly fs [ 221.674290][T12785] EXT4-fs error (device loop4): ext4_do_update_inode:5632: inode #16: comm syz.4.3316: corrupted inode contents [ 221.692917][T12785] EXT4-fs (loop4): Remounting filesystem read-only [ 221.703905][T12785] EXT4-fs (loop4): 1 truncate cleaned up [ 221.758569][T12793] FAULT_INJECTION: forcing a failure. [ 221.758569][T12793] name failslab, interval 1, probability 0, space 0, times 0 [ 221.773227][T12793] CPU: 1 UID: 0 PID: 12793 Comm: syz.0.3319 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 221.773267][T12793] Tainted: [W]=WARN [ 221.773276][T12793] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 221.773294][T12793] Call Trace: [ 221.773333][ T2754] EXT4-fs (loop4): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 221.773302][T12793] [ 221.773394][T12793] __dump_stack+0x1d/0x30 [ 221.773436][T12793] dump_stack_lvl+0xe8/0x140 [ 221.773478][T12793] dump_stack+0x15/0x1b [ 221.773517][T12793] should_fail_ex+0x265/0x280 [ 221.773609][T12793] should_failslab+0x8c/0xb0 [ 221.773719][T12793] __kmalloc_node_track_caller_noprof+0xa5/0x580 [ 221.773757][T12793] ? cond_bools_copy+0x30/0x80 [ 221.773861][T12793] ? __pfx_cond_bools_destroy+0x10/0x10 [ 221.773902][T12793] kmemdup_noprof+0x2b/0x70 [ 221.773930][T12793] ? __pfx_cond_bools_destroy+0x10/0x10 [ 221.774044][T12793] cond_bools_copy+0x30/0x80 [ 221.774084][T12793] ? __pfx_cond_bools_destroy+0x10/0x10 [ 221.774133][T12793] hashtab_duplicate+0x11e/0x360 [ 221.774240][T12793] ? __pfx_cond_bools_copy+0x10/0x10 [ 221.774284][T12793] cond_policydb_dup+0xd2/0x4e0 [ 221.774380][T12793] security_set_bools+0xa0/0x340 [ 221.774421][T12793] sel_commit_bools_write+0x1ea/0x270 [ 221.774466][T12793] vfs_writev+0x406/0x8b0 [ 221.774553][T12793] ? __pfx_sel_commit_bools_write+0x10/0x10 [ 221.774607][T12793] ? mutex_lock+0xd/0x30 [ 221.774642][T12793] do_writev+0xe7/0x210 [ 221.774754][T12793] __x64_sys_writev+0x45/0x50 [ 221.774827][T12793] x64_sys_call+0x1e9a/0x3000 [ 221.774872][T12793] do_syscall_64+0xd2/0x200 [ 221.774916][T12793] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 221.775032][T12793] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 221.775071][T12793] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 221.775102][T12793] RIP: 0033:0x7f1d6d44efc9 [ 221.775125][T12793] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 221.775220][T12793] RSP: 002b:00007f1d6beaf038 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 221.775249][T12793] RAX: ffffffffffffffda RBX: 00007f1d6d6a5fa0 RCX: 00007f1d6d44efc9 [ 221.775268][T12793] RDX: 0000000000000001 RSI: 00002000000025c0 RDI: 0000000000000005 [ 221.775296][T12793] RBP: 00007f1d6beaf090 R08: 0000000000000000 R09: 0000000000000000 [ 221.775314][T12793] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 221.775338][T12793] R13: 00007f1d6d6a6038 R14: 00007f1d6d6a5fa0 R15: 00007ffde8f50e48 [ 221.775441][T12793] [ 222.043836][ T2754] EXT4-fs (loop4): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 222.056774][ T2754] EXT4-fs (loop4): Quota write (off=8, len=24) cancelled because transaction is not started [ 222.153872][T12802] 9pnet: Could not find request transport: fd [ 222.584568][T12806] __dump_stack+0x1d/0x30 [ 222.584612][T12806] dump_stack_lvl+0xe8/0x140 [ 222.584673][T12806] dump_stack+0x15/0x1b [ 222.584704][T12806] should_fail_ex+0x265/0x280 [ 222.584741][T12806] should_fail+0xb/0x20 [ 222.584805][T12806] should_fail_usercopy+0x1a/0x20 [ 222.584915][T12806] _copy_from_iter+0xd2/0xe80 [ 222.584937][T12806] ? __build_skb_around+0x1ab/0x200 [ 222.584968][T12806] ? __alloc_skb+0x223/0x320 [ 222.585076][T12806] netlink_sendmsg+0x471/0x6b0 [ 222.585115][T12806] ? __pfx_netlink_sendmsg+0x10/0x10 [ 222.585201][T12806] __sock_sendmsg+0x145/0x180 [ 222.585226][T12806] ____sys_sendmsg+0x31e/0x4e0 [ 222.585305][T12806] ___sys_sendmsg+0x17b/0x1d0 [ 222.585355][T12806] __x64_sys_sendmsg+0xd4/0x160 [ 222.585397][T12806] x64_sys_call+0x191e/0x3000 [ 222.585478][T12806] do_syscall_64+0xd2/0x200 [ 222.585509][T12806] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 222.585590][T12806] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 222.585771][T12806] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 222.585799][T12806] RIP: 0033:0x7f220adcefc9 [ 222.585819][T12806] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 222.585959][T12806] RSP: 002b:00007f2209837038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 222.585984][T12806] RAX: ffffffffffffffda RBX: 00007f220b025fa0 RCX: 00007f220adcefc9 [ 222.586000][T12806] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000004 [ 222.586015][T12806] RBP: 00007f2209837090 R08: 0000000000000000 R09: 0000000000000000 [ 222.586031][T12806] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 222.586046][T12806] R13: 00007f220b026038 R14: 00007f220b025fa0 R15: 00007ffcb5d34348 [ 222.586067][T12806] [ 222.800517][T12824] loop0: detected capacity change from 0 to 2048 [ 222.807040][T12822] ext4_test_bit(bit=12, block=18) = 1 [ 222.810736][T12824] EXT4-fs: Ignoring removed nomblk_io_submit option [ 222.812460][T12822] is_bad_inode(inode)=0 [ 222.823393][T12822] NEXT_ORPHAN(inode)=2130706432 [ 222.828315][T12822] max_ino=32 [ 222.831553][T12822] i_nlink=1 [ 222.839483][T12825] loop4: detected capacity change from 0 to 2048 [ 222.858698][T12825] EXT4-fs: Ignoring removed nomblk_io_submit option [ 222.882805][T12806] loop5: detected capacity change from 0 to 1764 [ 222.893311][T12822] EXT4-fs (loop3): warning: mounting fs with errors, running e2fsck is recommended [ 222.907764][T12822] EXT4-fs (loop3): re-mounted 00000000-0000-0000-0000-000000000000 r/w. [ 222.909192][T12822] EXT4-fs (loop3): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 223.109955][T12847] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in; [ 223.109955][T12847] program syz.2.3338 not setting count and/or reply_len properly [ 223.157344][ T29] kauditd_printk_skb: 363 callbacks suppressed [ 223.157362][ T29] audit: type=1326 audit(223.135:9515): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12850 comm="syz.2.3339" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f49d150efc9 code=0x7ffc0000 [ 223.168168][T12851] loop2: detected capacity change from 0 to 512 [ 223.215499][ T29] audit: type=1326 audit(223.135:9516): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12850 comm="syz.2.3339" exe="/root/syz-executor" sig=0 arch=c000003e syscall=294 compat=0 ip=0x7f49d150efc9 code=0x7ffc0000 [ 223.238768][ T29] audit: type=1326 audit(223.135:9517): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12850 comm="syz.2.3339" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f49d150efc9 code=0x7ffc0000 [ 223.261770][ T29] audit: type=1326 audit(223.135:9518): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12850 comm="syz.2.3339" exe="/root/syz-executor" sig=0 arch=c000003e syscall=254 compat=0 ip=0x7f49d150efc9 code=0x7ffc0000 [ 223.284784][ T29] audit: type=1326 audit(223.135:9519): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12850 comm="syz.2.3339" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f49d150efc9 code=0x7ffc0000 [ 223.307824][ T29] audit: type=1326 audit(223.135:9520): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12850 comm="syz.2.3339" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f49d150efc9 code=0x7ffc0000 [ 223.315928][T12851] EXT4-fs (loop2): orphan cleanup on readonly fs [ 223.330767][ T29] audit: type=1326 audit(223.135:9521): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12850 comm="syz.2.3339" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f49d150efc9 code=0x7ffc0000 [ 223.330800][ T29] audit: type=1326 audit(223.135:9522): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12850 comm="syz.2.3339" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7f49d150efc9 code=0x7ffc0000 [ 223.383289][ T29] audit: type=1326 audit(223.135:9523): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12850 comm="syz.2.3339" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f49d150f003 code=0x7ffc0000 [ 223.393904][T12851] EXT4-fs error (device loop2): ext4_orphan_get:1418: comm syz.2.3339: bad orphan inode 13 [ 223.406195][ T29] audit: type=1326 audit(223.135:9524): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12850 comm="syz.2.3339" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f49d150da7f code=0x7ffc0000 [ 223.469911][T12851] ext4_test_bit(bit=12, block=18) = 1 [ 223.475692][T12851] is_bad_inode(inode)=0 [ 223.479970][T12851] NEXT_ORPHAN(inode)=2130706432 [ 223.484931][T12851] max_ino=32 [ 223.488188][T12851] i_nlink=1 [ 223.513366][T12861] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in; [ 223.513366][T12861] program syz.0.3342 not setting count and/or reply_len properly [ 223.553479][T12868] __nla_validate_parse: 5 callbacks suppressed [ 223.553496][T12868] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3345'. [ 223.581866][T12851] EXT4-fs error (device loop2): ext4_lookup:1791: inode #2: comm syz.2.3339: deleted inode referenced: 12 [ 223.596744][T12868] program syz.0.3345 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 223.642706][T12845] loop5: detected capacity change from 0 to 1764 [ 223.655550][T12851] EXT4-fs (loop2): re-mounted 00000000-0000-0000-0000-000000000000. [ 223.686640][T12872] netlink: 68 bytes leftover after parsing attributes in process `syz.4.3346'. [ 223.790472][T12881] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in; [ 223.790472][T12881] program syz.5.3349 not setting count and/or reply_len properly [ 223.901676][T12889] x_tables: duplicate entry at hook 1 [ 224.031032][T12893] loop4: detected capacity change from 0 to 2048 [ 224.065603][T12898] loop2: detected capacity change from 0 to 128 [ 224.088696][T12893] EXT4-fs: Ignoring removed nomblk_io_submit option [ 224.119299][T12898] FAT-fs (loop2): Directory bread(block 414) failed [ 224.171794][T12898] FAT-fs (loop2): Directory bread(block 415) failed [ 224.188834][T12898] FAT-fs (loop2): Directory bread(block 416) failed [ 224.189291][T12891] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in; [ 224.189291][T12891] program syz.5.3352 not setting count and/or reply_len properly [ 224.195618][T12898] FAT-fs (loop2): Directory bread(block 417) failed [ 224.213593][T12900] loop0: detected capacity change from 0 to 1024 [ 224.219364][T12898] FAT-fs (loop2): Directory bread(block 418) failed [ 224.227252][T12900] EXT4-fs (loop0): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 224.235659][T12898] FAT-fs (loop2): Directory bread(block 419) failed [ 224.243626][T12900] EXT4-fs (loop0): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 224.260897][T12900] JBD2: no valid journal superblock found [ 224.266370][T12898] FAT-fs (loop2): Directory bread(block 420) failed [ 224.266675][T12900] EXT4-fs (loop0): Could not load journal inode [ 224.277998][T12898] FAT-fs (loop2): Directory bread(block 421) failed [ 224.292726][T12900] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 224.313782][T12898] FAT-fs (loop2): FAT read failed (blocknr 128) [ 224.345009][T12519] kernel write not supported for file /350/net/rt_cache (pid: 12519 comm: kworker/1:7) [ 224.356044][T12912] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3357'. [ 224.507448][T12917] uprobe: syz.3.3361:12917 failed to unregister, leaking uprobe [ 224.747373][T12928] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in; [ 224.747373][T12928] program syz.4.3365 not setting count and/or reply_len properly [ 224.850387][T12931] loop3: detected capacity change from 0 to 512 [ 225.008913][T12931] EXT4-fs warning (device loop3): ext4_enable_quotas:7180: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 225.031749][T12931] EXT4-fs (loop3): mount failed [ 225.059989][T12944] loop4: detected capacity change from 0 to 1024 [ 225.086117][T12944] EXT4-fs (loop4): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 225.097094][T12944] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 225.141022][T12944] JBD2: no valid journal superblock found [ 225.146845][T12944] EXT4-fs (loop4): Could not load journal inode [ 225.173157][T12948] loop5: detected capacity change from 0 to 7 [ 225.181973][T12944] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 225.199649][T12946] netlink: 288 bytes leftover after parsing attributes in process `syz.3.3369'. [ 225.223791][ T81] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 225.233000][ T81] Buffer I/O error on dev loop5, logical block 0, async page read [ 225.244814][T12948] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 225.254063][T12948] Buffer I/O error on dev loop5, logical block 0, async page read [ 225.262070][T12948] loop5: unable to read partition table [ 225.267992][T12948] loop_reread_partitions: partition scan of loop5 (Cj̖P=ý?}X %`ր{֐ȵ4FLQk݊) failed (rc=-5) [ 225.321537][T12955] loop5: detected capacity change from 0 to 512 [ 225.337126][T12519] kernel write not supported for file /221/net/rt_cache (pid: 12519 comm: kworker/1:7) [ 225.348879][T12959] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3375'. [ 225.351078][T12955] EXT4-fs (loop5): orphan cleanup on readonly fs [ 225.368761][T12955] EXT4-fs error (device loop5): ext4_orphan_get:1418: comm syz.5.3372: bad orphan inode 13 [ 225.379350][T12955] ext4_test_bit(bit=12, block=18) = 1 [ 225.380468][T12959] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3375'. [ 225.384764][T12955] is_bad_inode(inode)=0 [ 225.384776][T12955] NEXT_ORPHAN(inode)=2130706432 [ 225.384784][T12955] max_ino=32 [ 225.384791][T12955] i_nlink=1 [ 225.385319][T12955] EXT4-fs mount: 16 callbacks suppressed [ 225.385337][T12955] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 225.433473][T12955] EXT4-fs (loop5): warning: mounting fs with errors, running e2fsck is recommended [ 225.446151][T12955] EXT4-fs (loop5): re-mounted 00000000-0000-0000-0000-000000000000 r/w. [ 225.457409][T12955] EXT4-fs (loop5): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 225.475215][T12970] loop4: detected capacity change from 0 to 512 [ 225.484505][T10639] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 225.497589][T12970] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 225.508360][T12970] EXT4-fs (loop4): orphan cleanup on readonly fs [ 225.517271][T12970] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.3379: bg 0: block 248: padding at end of block bitmap is not set [ 225.532912][T12970] EXT4-fs error (device loop4): ext4_acquire_dquot:6945: comm syz.4.3379: Failed to acquire dquot type 1 [ 225.545258][T12970] EXT4-fs (loop4): 1 truncate cleaned up [ 225.552225][T12970] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 225.577374][T12967] loop0: detected capacity change from 0 to 2048 [ 225.584089][T12967] EXT4-fs: Ignoring removed nomblk_io_submit option [ 225.604143][T12967] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 225.632952][T12978] loop2: detected capacity change from 0 to 512 [ 225.656232][T12967] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 225.676247][T12978] EXT4-fs warning (device loop2): ext4_enable_quotas:7180: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 225.691479][T11537] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 225.691654][T12978] EXT4-fs (loop2): mount failed [ 225.726217][T12984] netlink: 'syz.4.3383': attribute type 39 has an invalid length. [ 225.832651][T12991] xt_CT: You must specify a L4 protocol and not use inversions on it [ 225.928775][T13005] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 225.973995][T13008] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 225.982151][T13005] netlink: 'syz.3.3391': attribute type 3 has an invalid length. [ 225.983549][T13000] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3390'. [ 226.045114][T13011] loop5: detected capacity change from 0 to 512 [ 226.062548][T13017] netlink: 'syz.4.3392': attribute type 3 has an invalid length. [ 226.079141][T13011] EXT4-fs (loop5): orphan cleanup on readonly fs [ 226.089575][T13011] EXT4-fs error (device loop5): ext4_orphan_get:1418: comm syz.5.3393: bad orphan inode 13 [ 226.100957][T13011] ext4_test_bit(bit=12, block=18) = 1 [ 226.106811][T13011] is_bad_inode(inode)=0 [ 226.111038][T13011] NEXT_ORPHAN(inode)=2130706432 [ 226.115942][T13011] max_ino=32 [ 226.119250][T13011] i_nlink=1 [ 226.123945][T13011] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 226.139082][T13011] EXT4-fs error (device loop5): ext4_lookup:1791: inode #2: comm syz.5.3393: deleted inode referenced: 12 [ 226.150722][T13019] loop3: detected capacity change from 0 to 512 [ 226.157415][T13011] EXT4-fs (loop5): re-mounted 00000000-0000-0000-0000-000000000000. [ 226.157823][T13019] ext4: Unknown parameter 'smackfsfloor' [ 226.185980][T10639] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 226.218668][T13025] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3397'. [ 226.272548][T13028] ================================================================== [ 226.280883][T13028] BUG: KCSAN: data-race in selinux_inode_permission / selinux_inode_permission [ 226.289854][T13028] [ 226.292469][T13028] write to 0xffff88811b1495a0 of 4 bytes by task 13023 on cpu 0: [ 226.300372][T13028] selinux_inode_permission+0x3ac/0x740 [ 226.306034][T13028] security_inode_permission+0x6d/0xb0 [ 226.311648][T13028] inode_permission+0x106/0x310 [ 226.317014][T13028] link_path_walk+0x162/0x900 [ 226.321820][T13028] path_openat+0x1de/0x2170 [ 226.326441][T13028] do_filp_open+0x109/0x230 [ 226.330981][T13028] io_openat2+0x272/0x390 [ 226.335331][T13028] io_openat+0x1b/0x30 [ 226.339435][T13028] __io_issue_sqe+0xfe/0x2e0 [ 226.344437][T13028] io_issue_sqe+0x56/0xa80 [ 226.348970][T13028] io_submit_sqes+0x675/0x1060 [ 226.354215][T13028] __se_sys_io_uring_enter+0x1c1/0x1b70 [ 226.359903][T13028] __x64_sys_io_uring_enter+0x78/0x90 [ 226.365758][T13028] x64_sys_call+0x2df0/0x3000 [ 226.370485][T13028] do_syscall_64+0xd2/0x200 [ 226.375037][T13028] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 226.381330][T13028] [ 226.383671][T13028] read to 0xffff88811b1495a0 of 4 bytes by task 13028 on cpu 1: [ 226.391503][T13028] selinux_inode_permission+0x334/0x740 [ 226.397346][T13028] security_inode_permission+0x6d/0xb0 [ 226.402838][T13028] inode_permission+0x106/0x310 [ 226.407733][T13028] link_path_walk+0x162/0x900 [ 226.412439][T13028] path_lookupat+0x63/0x2a0 [ 226.417854][T13028] filename_lookup+0x147/0x340 [ 226.422722][T13028] user_path_at+0x3e/0x130 [ 226.427333][T13028] __se_sys_mount+0x25b/0x2e0 [ 226.432299][T13028] __x64_sys_mount+0x67/0x80 [ 226.437033][T13028] x64_sys_call+0x2b51/0x3000 [ 226.442093][T13028] do_syscall_64+0xd2/0x200 [ 226.446792][T13028] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 226.452978][T13028] [ 226.455431][T13028] value changed: 0x00000000 -> 0x00000001 [ 226.461267][T13028] [ 226.463730][T13028] Reported by Kernel Concurrency Sanitizer on: [ 226.470028][T13028] CPU: 1 UID: 0 PID: 13028 Comm: syz.2.3396 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 226.481433][T13028] Tainted: [W]=WARN [ 226.485354][T13028] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 226.495605][T13028] ==================================================================