last executing test programs: 6m32.312742125s ago: executing program 32 (id=4440): r0 = socket$unix(0x1, 0x5, 0x0) r1 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) connect$can_bcm(r1, &(0x7f00000000c0)={0x1d, r2}, 0x10) sendmsg$can_bcm(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[@ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=r0, @ANYBLOB="3bf81bb9f9"], 0x20000600}, 0x1, 0x0, 0x0, 0x40000}, 0x0) sendmsg$can_bcm(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[], 0x4640}, 0x2}, 0x0) 5m28.056995272s ago: executing program 33 (id=5100): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0b000000080000000c000000fbbfffff01"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000810018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000030000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r1}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x50) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x103, 0x30120, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_bp={0x0}, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_io_uring_setup(0x494, &(0x7f0000000400)={0x0, 0x2003f73, 0x100, 0x4, 0x1a}, &(0x7f0000000340)=0x0, &(0x7f0000000600)=0x0) io_uring_register$IORING_REGISTER_PBUF_RING(r2, 0x16, &(0x7f0000000040)={&(0x7f0000001000)={[{0x0, 0xffffffffffffff3a, 0x3, 0xf4}]}, 0x1, 0x1}, 0x1) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) r5 = socket$inet_mptcp(0x2, 0x1, 0x106) r6 = socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x18, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000002000000000000000018090000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x17, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x94) sendmsg$ETHTOOL_MSG_TSINFO_GET(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16, @ANYBLOB="010000000000006200001c0000001800018014000200626f6e645f736c6176655f31"], 0x2c}}, 0x0) syz_io_uring_submit(r3, r4, &(0x7f00000002c0)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x20, 0x10, r5, 0x0, 0x0, 0x0, 0x2000, 0x1, {0x1}}) io_uring_enter(r2, 0x3516, 0xf4f5, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000640)=ANY=[@ANYBLOB="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"], 0x0}, 0x94) 4m55.912233395s ago: executing program 34 (id=5480): r0 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$sock_linger(r0, 0x1, 0x3c, &(0x7f0000000580)={0x1}, 0x8) sendto$inet6(r0, 0x0, 0x5c4, 0x404c844, &(0x7f0000000540)={0x2, 0x4e24, 0x0, @local, 0x4000000}, 0x1c) getsockopt$sock_timeval(r0, 0x1, 0x14, &(0x7f00000001c0), &(0x7f0000000280)=0x10) r1 = socket$nl_rdma(0x10, 0x3, 0x14) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001000000004d00000600000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000e0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\a\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/17], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffff"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) r5 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r5, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="100000000000000000000000000080001800000000000000100100000c"], 0x28}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000800030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0xc4}, 0x890) sendmsg$NFT_BATCH(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000880)=ANY=[@ANYBLOB="14000000100001e456b8aa00000000000000000a3c000000120a09000000000000000000020000000900020073797a310000000008000440080000000900010073797a3000000000080003400000000114000000110001"], 0x64}}, 0x4000010) sendmsg$NFT_MSG_GETOBJ(r2, &(0x7f0000000180)={0x0, 0xffffffffffffffd9, &(0x7f0000000140)={&(0x7f0000000400)=ANY=[@ANYBLOB="34000000150a03000000000000000000020000000900020073797a310000000008000340000000010900010073797a30"], 0x34}}, 0x0) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="38000000031401002cbd7000fcdbdf250900020073797a32000000000800410073697700140033006c6f"], 0x38}, 0x1, 0x0, 0x0, 0x44}, 0x810) 4m43.325681604s ago: executing program 35 (id=5588): socket$nl_netfilter(0x10, 0x3, 0xc) mknod$loop(&(0x7f0000000180)='./file0\x00', 0x6000, 0x0) creat(0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x85, 0x7, 0x7ffc0001}]}) r0 = syz_init_net_socket$llc(0x1a, 0x801, 0x0) connect$llc(r0, &(0x7f00000000c0)={0x1a, 0x0, 0x2, 0x8, 0x20, 0x2, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x2d}}, 0x10) 4m38.54051451s ago: executing program 36 (id=5637): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB="19000000040000"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000040)={{r0}, &(0x7f0000000000), &(0x7f00000005c0)=r1}, 0x20) r2 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r2, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x3, 0x1, 0x91, 0x1ff, 0x801, 0x1}, 0x1c) bind$tipc(r2, 0x0, 0x0) 4m35.319514967s ago: executing program 37 (id=5658): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x0, &(0x7f00000000c0)}) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x17, 0x2000000000000242, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x2, &(0x7f0000000000)=0x9, 0x8, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000000000000000000ea04850000007b00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f00000005c0)='sys_enter\x00', 0xffffffffffffffff, 0x0, 0xd}, 0x18) r0 = gettid() socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r1, 0x5452, &(0x7f0000b28000)=0x3) fcntl$setsig(r1, 0xa, 0x12) poll(&(0x7f0000b2c000)=[{r2}], 0x2c, 0xffffffffffbffff8) dup2(r1, r2) fcntl$setown(r1, 0x8, r0) tkill(r0, 0x13) 4m30.3584141s ago: executing program 38 (id=5707): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1803000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000800b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b7000000000000"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x10) syz_io_uring_setup(0x14dd, &(0x7f0000000300)={0x0, 0x5121, 0x0, 0x3, 0x258}, &(0x7f0000000040), &(0x7f0000000600)) syz_emit_ethernet(0x52, &(0x7f0000000000)={@local, @broadcast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "4dd318", 0x1c, 0x6, 0x0, @private1={0xfc, 0x1, '\x00', 0x2}, @local, {[], {{0x0, 0x4001, 0x41424344, 0x41424344, 0x0, 0x0, 0x7, 0x2, 0x0, 0x0, 0x0, {[@generic={0x22, 0x6, '\n\x00\x00\x00'}]}}}}}}}}, 0x0) 4m18.524822477s ago: executing program 39 (id=5871): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) epoll_pwait2(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r0, 0xffffffffffffffff}, 0x4) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) io_uring_setup(0x22625, 0x0) syz_clone3(&(0x7f0000001040)={0x20400, 0x0, 0x0, 0x0, {0x1a}, 0x0, 0x0, 0x0, &(0x7f0000001000)=[0x0], 0x1}, 0x58) readv(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000580)=""/244, 0xf4}], 0x1) r3 = signalfd4(0xffffffffffffffff, &(0x7f0000000000)={[0xfffffffffffffffb]}, 0x8, 0x0) readv(r3, &(0x7f0000000ec0)=[{&(0x7f0000001380)=""/4096, 0x1000}], 0x1) r4 = socket$can_bcm(0x1d, 0x2, 0x2) sendmsg$can_bcm(r4, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000400)=ANY=[@ANYRES8=r1], 0x48}}, 0x2004c800) timer_create(0x7, &(0x7f00000000c0)={0x0, 0x12}, &(0x7f0000000280)) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) r6 = open(&(0x7f00009e1000)='./file0\x00', 0x60840, 0x0) syz_emit_ethernet(0x56, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaa00000001000008004d1e00bb1a6fb0441c0fc10a01010100000005ac14d4e23e91431cf661080000000002004e224e22", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="50c2000290781e83"], 0x0) fcntl$setsig(r6, 0xa, 0x13) fcntl$setlease(r6, 0x400, 0x1) timer_settime(0x0, 0x0, &(0x7f0000000180)={{}, {0x0, 0x1c9c380}}, 0x0) truncate(&(0x7f0000000040)='./file0\x00', 0x200000) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000003c0)='./file1\x00', 0x1c, &(0x7f0000000700)={[{@nombcache}, {@nomblk_io_submit}, {@data_err_ignore}, {@nomblk_io_submit}, {@noblock_validity}, {@jqfmt_vfsv1}]}, 0x3, 0x44f, &(0x7f00000010c0)="$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") r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYRESOCT=r5], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000004c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYRESHEX=r2, @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x37, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) perf_event_open(&(0x7f0000000000)={0x8, 0x80, 0x0, 0x0, 0x0, 0x2, 0x0, 0x100000001, 0x41a40, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000000)={0x8, 0x80, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x30046, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x400}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 4m17.804220126s ago: executing program 40 (id=5881): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x7, 0x8604, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0x8, 0x6}, 0x0, 0x10000, 0x0, 0x6, 0x7, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) io_setup(0x4, &(0x7f0000000600)=0x0) r1 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000002740), 0x101002) io_submit(r0, 0xe7, &(0x7f0000000080)=[&(0x7f0000000140)={0x0, 0x4, 0x0, 0x1, 0x0, r1, &(0x7f0000000000)="ff07000000000000", 0x400000}]) 4m16.18851443s ago: executing program 41 (id=5896): bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xb, &(0x7f0000000600)=ANY=[@ANYBLOB], &(0x7f0000000040)='GPL\x00', 0x641, 0x0, 0x0, 0x41100, 0x7, '\x00', 0x0, @fallback=0x2b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = getpid() prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="09000000070000000080000001"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{r3, 0xffffffffffffffff}, &(0x7f00000002c0), &(0x7f0000000280)}, 0x20) open_tree(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x8901) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000d0039000000000000b4a518110000", @ANYRES32=r4], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r5}, 0x10) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, &(0x7f00000001c0)='cpu&00\t&&') unshare(0x64000600) 3m39.778659309s ago: executing program 7 (id=6579): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000006"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000040)='kmem_cache_free\x00', r1, 0x0, 0x4}, 0x18) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000300)={{r0}, &(0x7f0000000800), &(0x7f0000000840)=r1}, 0x20) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000a00)=ANY=[@ANYBLOB="6c010000170001000000000000000000fc0000000000000000000000000000000000000000000000fe8000000000000000000000000000bbac1414bb000000000000000000000000fc00"/104, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fc02000000000000000000000000e692ffffffff0000000000000000000000000000000063c1840b83af0f722eacc68f6c3c99000000000a000000000000001ab809ba8395f571484fb120f8", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000440005007f000001000000000000000000000000000000003c00000000000000fc0200"/196], 0x16c}}, 0x0) 3m39.752941982s ago: executing program 7 (id=6580): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0900000004000000080000000b"], 0x48) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000003000000b703000000000000850000000400000018110000", @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x4, 0x0, 0x0, 0x40f00, 0x20, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000400)='kfree\x00', r0, 0x0, 0x5}, 0x18) perf_event_open(&(0x7f0000000ac0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, 0x20120, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x8, 0xe, @perf_config_ext={0x1, 0x7}, 0x1184c, 0x9, 0x1, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r1, 0xc0a85320, &(0x7f00000005c0)={{0x80}, 'port1\x00', 0x62, 0x811, 0x0, 0x8000007, 0x3, 0xfffffffe, 0x1, 0x0, 0x7cce8c743ee810dd}) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r1, 0x40505330, &(0x7f00000001c0)={0x800100, 0xfffffffd, 0x22, 0x6, 0x1101, 0x280}) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r1, 0x40505330, &(0x7f0000000500)={0x800000, 0x210002, 0xffffffdd, 0x7fffffff, 0x2, 0x69}) 3m39.719887474s ago: executing program 7 (id=6581): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001440)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x16, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x4, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000cc0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f00000001c0)='kfree\x00', r1}, 0x18) r2 = fsopen(&(0x7f0000000100)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) r3 = fsmount(r2, 0x0, 0x6) symlinkat(&(0x7f0000000400)='./file0/../file0\x00', r3, &(0x7f0000000080)='./file0\x00') renameat(r3, &(0x7f0000000000)='./file0\x00', r3, &(0x7f00000000c0)='./file0/../file0\x00') 3m39.719421205s ago: executing program 7 (id=6582): bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="07000000040000000001"], 0x50) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000bb00551a00000000200000001812", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000980)='mm_page_free\x00', r1, 0x0, 0x1000000000000}, 0x18) kexec_load(0x0, 0x1, &(0x7f0000000140)=[{0x0, 0x3e00, 0x116094000, 0x41000000}], 0x0) 3m39.684847598s ago: executing program 7 (id=6583): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCFLSH(r0, 0x4b63, 0x3) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f00000002c0)=0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x18, 0x4, &(0x7f0000000180)=ANY=[], &(0x7f0000000140)='syzkaller\x00', 0x1, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5f}, 0x94) r2 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000040)=[{0x6}]}, 0x10) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x13, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020641700000000002020007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000400000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r3}, 0x10) pipe(&(0x7f00000001c0)) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0xb, 0x1514, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x4}, 0x0, 0x10000, 0x9, 0x5, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) setfsgid(0x0) r4 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f0000000040)={'\x00', 0x400, 0x0, 0x2, 0x8001, 0x81, r4}) r5 = socket$netlink(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010000000000fbdbdf25250000000e0001006e657a64657673696d0000000f0002006e657464657673696d300000"], 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000800000001"], 0x48) r7 = socket$inet_sctp(0x2, 0x5, 0x84) r8 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r8, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000380)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000180)=0x10) ioctl$sock_SIOCOUTQ(r8, 0x5411, &(0x7f0000000240)) getsockopt$inet_sctp6_SCTP_MAX_BURST(r8, 0x84, 0x83, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000200)=0x8) setsockopt$inet_sctp_SCTP_RESET_STREAMS(r7, 0x84, 0x77, &(0x7f00000003c0)=ANY=[@ANYRES32=r9, @ANYBLOB="ff07ee663e7da9612fcc7d674f3b73a90faebb011c3edc9295344dbaffff00000000000076622c7f0ad463872fbdb01a963a25d85903bff13cef6c2f3650d8f6af89e69386438793ecb712af5aa321a4e3cc5f5f963e29bd317a7a9ee4fce73b400b26adb269a2d137b72920bcf555d7"], 0x8) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00'}, 0x18) r10 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_RX_RING(r10, 0x11b, 0x2, 0x0, 0x0) 3m39.641163322s ago: executing program 7 (id=6584): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) r2 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r2, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x3, 0x1, 0x91, 0x1ff, 0x801, 0x1}, 0x1c) pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0) r4 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r4, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x3, 0x1, 0x81, 0x1ff, 0x801, 0x1}, 0x1c) close_range(r3, 0xffffffffffffffff, 0x0) 3m37.001966924s ago: executing program 5 (id=6629): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) epoll_pwait2(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r0, 0xffffffffffffffff}, 0x4) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="17000000000000"], 0x48) io_uring_setup(0x22625, 0x0) syz_clone3(&(0x7f0000001040)={0x20400, 0x0, 0x0, 0x0, {0x1a}, 0x0, 0x0, 0x0, &(0x7f0000001000)=[0x0], 0x1}, 0x58) readv(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000580)=""/244, 0xf4}], 0x1) r3 = signalfd4(0xffffffffffffffff, &(0x7f0000000000)={[0xfffffffffffffffb]}, 0x8, 0x0) readv(r3, &(0x7f0000000ec0)=[{&(0x7f0000001380)=""/4096, 0x1000}], 0x1) r4 = socket$can_bcm(0x1d, 0x2, 0x2) sendmsg$can_bcm(r4, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000400)=ANY=[@ANYRES8=r1], 0x48}}, 0x2004c800) timer_create(0x7, &(0x7f00000000c0)={0x0, 0x12}, &(0x7f0000000280)) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) r6 = open(&(0x7f00009e1000)='./file0\x00', 0x60840, 0x0) syz_emit_ethernet(0x56, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaa00000001000008004d1e00bb1a6fb0441c0fc10a01010100000005ac14d4e23e91431cf661080000000002004e224e22", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="50c2000290781e83"], 0x0) fcntl$setsig(r6, 0xa, 0x13) fcntl$setlease(r6, 0x400, 0x1) timer_settime(0x0, 0x0, &(0x7f0000000180)={{}, {0x0, 0x1c9c380}}, 0x0) truncate(&(0x7f0000000040)='./file0\x00', 0x200000) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000003c0)='./file1\x00', 0x1c, &(0x7f0000000700)={[{@nombcache}, {@nomblk_io_submit}, {@data_err_ignore}, {@nomblk_io_submit}, {@noblock_validity}, {@jqfmt_vfsv1}]}, 0x3, 0x44f, &(0x7f00000010c0)="$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") r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYRESOCT=r5], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000004c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYRESHEX=r2, @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x37, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x26e1, 0x0) perf_event_open(&(0x7f0000000000)={0x8, 0x80, 0x0, 0x0, 0x0, 0x2, 0x0, 0x100000001, 0x41a40, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000000)={0x8, 0x80, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x30046, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x400}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 3m36.152283395s ago: executing program 5 (id=6643): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb703000008000000b703000000000020850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) r1 = socket$netlink(0x10, 0x3, 0x0) writev(r1, &(0x7f00000000c0)=[{&(0x7f0000000040)="3700000313000318680907070000000f0000ff3f13000000170a001700000000040037000d00030001362564aa58b9a6c011f6bbf44dc4", 0x37}], 0x1) 3m36.106627189s ago: executing program 5 (id=6644): bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000a00)={0xffffffffffffffff, 0x0, 0x0}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xb, &(0x7f0000000600)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000"], 0x0, 0x641, 0x0, 0x0, 0x41100, 0x7, '\x00', 0x0, @fallback=0x2b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) getpgrp(0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r0 = getpid() prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setscheduler(r0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="09000000070000000080000001"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{r3, 0xffffffffffffffff}, &(0x7f00000002c0), &(0x7f0000000280)}, 0x20) open_tree(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x8901) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000d0039000000000000b4a518110000", @ANYRES32=r4], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) perf_event_open$cgroup(&(0x7f0000001040)={0x5, 0x80, 0x1, 0x9, 0x6, 0x5, 0x0, 0x8, 0xc401, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x3, 0x1, @perf_bp={&(0x7f0000001000), 0x6}, 0x1, 0x2, 0x8, 0x8, 0x40f, 0x9, 0x5, 0x0, 0x0, 0x0, 0x6}, 0xffffffffffffffff, 0xc, 0xffffffffffffffff, 0xa) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r5}, 0x10) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_read_part_table(0x5c2, &(0x7f0000000000)="$eJzs2z1oU2sYB/AnavCil+vi5GQdnFwURzOoJFFRCNEu4qCgiBi4EEGIECjoYDO0NEPp2KUUsvRjapqhw6Wlhc6ldOil0KHTpV0KXZpL6Xv39vYDhN8PDg/v+/7Pec4znPEEv7QL8U+3281ERPfy8e/ubeULT2+WHpZfRWTiTUT0/PXH1MFJJiX+e+qttF5P67HRK53+nSfZ1trL3dtv5xsX0nlfuq6Ot3tPPBxnbiK3cO37j2pxoJb7tFqsb/5cWX4xuZ0vt583mlPPso/fp9xiqpdS/RK1+Baf411UohIfonpK/UdaG3f3bxRbMx8f7BU6g3P3Uq50wjmP2v9rz9DrZv3Rnenrw/drs0vlrYuHucr/+LoAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADh/E7mFa99/VIsDtdyn1WJ98+fK8ovJ7Xy5/bzRnHqWffw+5RZTvZTql6jFt/gc76ISlfgQ1VPqP9LauLt/o9ia+fhgr9AZnLuXcqUTznnU/l97hl4364/uTF8fvl+bXSpvXTzMVS6f0QsAAAAAAAAAAAAAAAAAAABAROQLT2+WHpZfRWTiTUT8+fvczMF+N/3vnkm5W6mup/2x0Sud/p0n2dbay93bb+cbf6f9vt8i+iLi6ni799yH4dj+DQAA///B9JXf") 3m34.960558508s ago: executing program 5 (id=6657): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xf, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014fa0000b7030000000008008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000020000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) r2 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/thread-self/attr/sockcreate\x00', 0x2, 0x0) write$selinux_attr(r2, 0x0, 0x0) 3m34.871102717s ago: executing program 5 (id=6658): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCFLSH(r0, 0x4b63, 0x3) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f00000002c0)=0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x18, 0x4, &(0x7f0000000180)=ANY=[], &(0x7f0000000140)='syzkaller\x00', 0x1, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5f}, 0x94) r2 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000040)=[{0x6}]}, 0x10) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x13, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020641700000000002020007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000400000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r3}, 0x10) pipe(&(0x7f00000001c0)) setfsgid(0x0) 3m34.780802706s ago: executing program 5 (id=6659): r0 = bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000580)={{r0}, 0x0, 0x0}, 0x20) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x2008002, &(0x7f0000000080), 0x1, 0x55c, &(0x7f00000006c0)="$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") openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x281c2, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0xb, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0xd07, 0x40}, 0x100b28, 0x6, 0x0, 0x1, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, 0x0, 0x0, 0x4) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f00000002c0)={0x0, 0x0}, 0x10) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) socket$inet_udp(0x2, 0x2, 0x0) ioctl$EXT4_IOC_CLEAR_ES_CACHE(r1, 0x6628) 3m27.664157883s ago: executing program 6 (id=6723): seccomp$SECCOMP_SET_MODE_FILTER(0x1, 0x1, &(0x7f00000000c0)={0x2, &(0x7f0000000080)=[{0x8, 0x14, 0x3, 0x8}, {0xf801, 0x3, 0x69, 0x401}]}) r0 = socket(0x10, 0x3, 0x0) write(r0, 0x0, 0x0) getpeername$packet(r0, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000380)=0x14) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$inet6(0xffffffffffffffff, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000f80)=ANY=[@ANYBLOB="0500000004000000080000000b"], 0x48) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000007c0)=ANY=[@ANYBLOB="5c000000020601080000000000000000000000000900020073797a320000000005000400000000001400078005001500800000000800114000000000050005000a000000050001000600000010000300686173683a69702c6d6163"], 0x5c}}, 0x84000) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000480)='kfree\x00', r2, 0x0, 0x7fffffffffffffff}, 0x18) r3 = socket(0x2, 0x2, 0x1) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'team_slave_1\x00', 0x0}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f0000000c00)=ANY=[@ANYBLOB="1800000004000000000000000100000095"], &(0x7f0000000040)='GPL\x00', 0x5, 0x0, 0x0, 0x40f00, 0x40, '\x00', r4, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xff}, 0x94) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000002c0)=@getchain={0x24, 0x11, 0x43d, 0x0, 0x5, {0x0, 0x0, 0x0, r4, {0xe, 0x1}, {0x0, 0x3}, {0x0, 0xffe0}}}, 0x24}}, 0x800) 3m27.566627803s ago: executing program 6 (id=6724): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) r2 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r2, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x3, 0x1, 0x91, 0x1ff, 0x801, 0x1}, 0x1c) pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0) r4 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r4, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x3, 0x1, 0x81, 0x1ff, 0x801, 0x1}, 0x1c) close_range(r3, 0xffffffffffffffff, 0x0) 3m27.534402706s ago: executing program 6 (id=6725): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001440)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x16, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f60000008500000043"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x4, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000cc0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f00000001c0)='kfree\x00', r1}, 0x18) r2 = fsopen(&(0x7f0000000100)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) r3 = fsmount(r2, 0x0, 0x6) symlinkat(&(0x7f0000000400)='./file0/../file0\x00', r3, &(0x7f0000000080)='./file0\x00') renameat(r3, &(0x7f0000000000)='./file0\x00', r3, &(0x7f00000000c0)='./file0/../file0\x00') 3m27.48990692s ago: executing program 6 (id=6726): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000000000000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000070000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000010850000008200000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x10) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x8800, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000000)=0x14) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000180)=0xe) ioctl$TIOCVHANGUP(r3, 0x5437, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)={{0x14}, [@NFT_MSG_NEWFLOWTABLE={0x40, 0x16, 0xa, 0x5, 0x0, 0x0, {0x2}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0x14, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x3}]}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}]}], {0x14}}, 0x68}}, 0x800) r4 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r4, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)={{0x14}, [@NFT_MSG_NEWFLOWTABLE={0x48, 0x16, 0xa, 0x801, 0x0, 0x0, {0x2}, [@NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0x1c, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_DEVS={0x18, 0x3, 0x0, 0x1, [{0x14, 0x1, 'geneve0\x00'}]}]}]}], {0x14}}, 0x70}}, 0x24040884) 3m27.438484685s ago: executing program 6 (id=6727): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCFLSH(r0, 0x4b63, 0x3) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f00000002c0)=0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x18, 0x4, &(0x7f0000000180)=ANY=[], &(0x7f0000000140)='syzkaller\x00', 0x1, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5f}, 0x94) r2 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000040)=[{0x6}]}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x13, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020641700000000002020007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000400000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) setfsgid(0x0) 3m27.391547169s ago: executing program 6 (id=6728): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x11, 0xc, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b703000000000000850000007200000095"], &(0x7f0000001480)='GPL\x00', 0x1, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x8, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000b40)={&(0x7f0000000380)='kfree\x00', r1}, 0x18) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYBLOB="14000000100001000000000000b890c1a000000a80000000160a01030000000000000000020000000900020073797a30000000000900010073797a30000000005400038008000240000000000800014000000000400003801400010076657468315f746f5f6272696467650014000100776732000000000000000000000000001400010076657468305f746f5f7465616d00000014000000110001"], 0xa8}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000007c0)=ANY=[@ANYBLOB="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"], 0x54}, 0x1, 0x0, 0x0, 0x40044}, 0x20008000) close(0x3) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r3, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r3, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) syz_genetlink_get_family_id$l2tp(&(0x7f0000000000), r0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r5 = socket(0x400000000010, 0x3, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x5, &(0x7f00000000c0)=ANY=[@ANYBLOB="180000000000000000000000ff000000850000000e000000c500000001f0ffff95"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x73) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000000)='kmem_cache_free\x00', r8}, 0x18) socket(0x10, 0x803, 0x0) r9 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r9, &(0x7f0000000000)="aa", 0xfffffffffffffec4, 0x0, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x6}, 0xf4}, 0x1c) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r7, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0x10}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x800) r10 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000200)={'geneve0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000b80)=@newtclass={0x43c, 0x28, 0x800, 0x70bd25, 0x25dfdbfb, {0x0, 0x0, 0x0, r11, {0xa, 0xffe0}, {0x7, 0xe}, {0xfff3, 0xffff}}, [@tclass_kind_options=@c_htb={{0x8}, {0x410, 0x2, [@TCA_HTB_RTAB={0x404, 0x4, [0x5, 0x865, 0x3, 0x2, 0x6, 0x8, 0x206, 0x9, 0x8, 0x1000, 0x7, 0x9, 0x2, 0x2, 0x5, 0x1ac, 0x40, 0x8, 0x7, 0xff, 0x3, 0x5, 0x0, 0x1, 0x7fffffff, 0x99cbd5eb, 0x8, 0x6, 0x1, 0xaea, 0x8, 0x2, 0x8, 0x7, 0x9, 0x6, 0x1, 0x5, 0x4, 0x8d94, 0x1, 0x9, 0x6, 0x5, 0x101, 0x10001, 0x403, 0xfc, 0x8, 0x1, 0x7, 0xfffffff7, 0x9, 0x6, 0x4, 0xe09, 0x0, 0x0, 0x9f25, 0xcb9, 0x9, 0x1ff, 0xfffffff8, 0x3, 0x1, 0x5, 0x81, 0x9, 0x1, 0x0, 0x9, 0x0, 0x4, 0x5, 0xff, 0x9, 0x1, 0xb4, 0x3970, 0xfff, 0x3287, 0x5, 0x7, 0x1d66, 0x4, 0x7, 0xfffffffe, 0x2b, 0x4, 0xe451, 0x5, 0x811, 0xfffffff9, 0x6, 0xa, 0x7, 0x2, 0x2, 0xffffffc0, 0xf9, 0x80000001, 0x5ce0, 0x7ff, 0x1e41, 0x4, 0x2, 0xd9, 0x8, 0x2, 0xfffff801, 0x6, 0x9, 0x8001, 0x4, 0x6, 0x2, 0xffffffff, 0x0, 0xcb, 0x1, 0x0, 0x3ff, 0x1, 0x5, 0xfffffff0, 0x2, 0x6, 0x8, 0x101, 0x2, 0x2, 0xf, 0x9, 0x9, 0x4, 0x8, 0x6, 0xfffffffa, 0x2, 0x6a14, 0x3431, 0x3ff, 0x80, 0x1ff, 0x9f, 0x7f, 0x5, 0x80000000, 0x1, 0x0, 0x6, 0x32d, 0xfffffff7, 0x1, 0x0, 0xae, 0x2, 0x0, 0x6, 0x1, 0x6, 0x7, 0x5, 0xc5, 0x1, 0x96, 0x3, 0x3, 0x80000000, 0x6, 0x8, 0x8, 0xfffffffd, 0xffff, 0xff, 0xfff, 0x6012e8ca, 0xe, 0x7, 0x4, 0x3, 0x0, 0x1, 0x7d0769e8, 0xffff, 0x6, 0x7, 0x409, 0x9, 0x2, 0x1000, 0x0, 0x4, 0x7, 0x2, 0x10, 0xff55, 0x0, 0x401, 0x2, 0x3, 0xffffff00, 0x0, 0x0, 0xae70, 0xc66, 0x5, 0x6, 0xffffffff, 0x4, 0x3, 0x7d, 0xffffffff, 0x3, 0x3, 0x80200000, 0x95e6, 0x4, 0x3, 0x0, 0x0, 0x4, 0x9, 0x8000, 0x80, 0x4880d88d, 0x80000000, 0x1, 0x3, 0xd57, 0x1, 0x8, 0x5, 0x79edb8ad, 0x5, 0xaf34, 0x7fffffff, 0xfffffffe, 0x7ea, 0x54, 0x955, 0x1, 0x8, 0x7, 0x4, 0x5, 0x79, 0xd7, 0x2, 0x8, 0x6, 0x81, 0x5, 0x7, 0xc8, 0x6]}, @TCA_HTB_OFFLOAD={0x4}, @TCA_HTB_OFFLOAD={0x4}]}}]}, 0x43c}, 0x1, 0x0, 0x0, 0x80}, 0x20000000) shutdown(r3, 0x2) close(0xffffffffffffffff) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x24}}, 0x0) 3m24.354852319s ago: executing program 42 (id=6584): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) r2 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r2, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x3, 0x1, 0x91, 0x1ff, 0x801, 0x1}, 0x1c) pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0) r4 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r4, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x3, 0x1, 0x81, 0x1ff, 0x801, 0x1}, 0x1c) close_range(r3, 0xffffffffffffffff, 0x0) 3m19.542806647s ago: executing program 43 (id=6659): r0 = bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000580)={{r0}, 0x0, 0x0}, 0x20) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x2008002, &(0x7f0000000080), 0x1, 0x55c, &(0x7f00000006c0)="$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") openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x281c2, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0xb, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0xd07, 0x40}, 0x100b28, 0x6, 0x0, 0x1, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, 0x0, 0x0, 0x4) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f00000002c0)={0x0, 0x0}, 0x10) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) socket$inet_udp(0x2, 0x2, 0x0) ioctl$EXT4_IOC_CLEAR_ES_CACHE(r1, 0x6628) 3m16.796362629s ago: executing program 8 (id=6800): r0 = getpgid(0x0) ptrace$ARCH_SHSTK_DISABLE(0x1e, r0, 0x1, 0x5002) r1 = openat$cgroup_pressure(0xffffffffffffffff, &(0x7f0000000000)='memory.pressure\x00', 0x2, 0x0) fcntl$lock(r1, 0x5, &(0x7f0000000040)={0x1, 0x0, 0x1, 0x3, r0}) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$FAT_IOCTL_GET_ATTRIBUTES(r2, 0x80047210, &(0x7f0000000080)) (async) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f00000000c0)=0x0) sched_getparam(r3, &(0x7f0000000100)) (async) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000180), r2) sendmsg$TIPC_NL_LINK_GET(r2, &(0x7f0000000340)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000300)={&(0x7f00000001c0)={0x12c, r4, 0x8, 0x70bd28, 0x25dfdbfc, {}, [@TIPC_NLA_NODE={0x48, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x2}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x7}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0xd}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0xffff4762}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x6}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x6}, @TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x1}]}, @TIPC_NLA_LINK={0x24, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0xffffc848}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1c}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}]}, @TIPC_NLA_PUBL={0x1c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x3}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x8}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x5}]}, @TIPC_NLA_BEARER={0x7c, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x6}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}, @TIPC_NLA_BEARER_NAME={0xf, 0x1, @l2={'ib', 0x3a, 'bridge0\x00'}}, @TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e20, 0x200, @private0, 0x1ff}}, {0x20, 0x2, @in6={0xa, 0x4e21, 0x6, @remote, 0x8}}}}, @TIPC_NLA_BEARER_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}]}]}, @TIPC_NLA_MEDIA={0x14, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}]}]}, 0x12c}, 0x1, 0x0, 0x0, 0x40000}, 0x1000) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000380)={{0x1, 0x1, 0x18, r2, {0x0, 0xffffffffffffffff}}, './file0\x00'}) setsockopt$pppl2tp_PPPOL2TP_SO_RECVSEQ(r5, 0x111, 0x2, 0x0, 0x4) (async) sendto$inet(r5, &(0x7f00000003c0)="ab8fe55641c7d487e97bd9f8778f08d6b5d7e808315afab257d3c6075ec850405eb30aa5c9d76980b673f6ae52af5fe0aab6027bcc7713cf70569d9250cae39629dc86b1552d1a2a7710eb0170e3c21987c33babff00ff3f15e38803ffae78565e75097f313cb07412688a65e2c9e9ee26831d3db520daa09d0142451039b0c56200d466cbffe658f5ae41b0439bfac2c3dd48170314b027e4ea1593e3ebde5ebec99ec899796788", 0xa8, 0x10, &(0x7f0000000480)={0x2, 0x4e21, @remote}, 0x10) (async) r6 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f00000004c0), 0x4) (async, rerun: 64) r7 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000007c0)=@bpf_lsm={0x1d, 0x2a, &(0x7f0000000500)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x4}, {{0x18, 0x1, 0x1, 0x0, r5}}, {}, [@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x8}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, 0x1}}, @func={0x85, 0x0, 0x1, 0x0, 0xffffffffffffffff}, @ldst={0x1, 0x3, 0x1, 0xb, 0x4, 0x0, 0x4}, @map_val={0x18, 0x6, 0x2, 0x0, r5, 0x0, 0x0, 0x0, 0x6}, @cb_func={0x18, 0xb, 0x4, 0x0, 0xfffffffffffffff9}, @jmp={0x5, 0x0, 0x6, 0x6, 0x7, 0xfffffffffffffffc, 0x1}, @tail_call={{0x18, 0x2, 0x1, 0x0, r5}}, @map_idx_val={0x18, 0xa, 0x6, 0x0, 0xc, 0x0, 0x0, 0x0, 0xc}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000680)='GPL\x00', 0x1, 0x0, 0x0, 0x40f00, 0x4, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, &(0x7f00000006c0)={0x8, 0x1}, 0x8, 0x10, &(0x7f0000000700)={0x3, 0xa, 0xfff, 0x7f}, 0x10, 0x0, 0x0, 0x3, &(0x7f0000000740)=[r5, r5], &(0x7f0000000780)=[{0x1, 0x4, 0xa, 0x4}, {0x5, 0x5, 0xe, 0x3}, {0x2, 0x1, 0x4, 0x6}], 0x10, 0x6}, 0x94) (rerun: 64) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000880)={r6, r7, 0x4, r5}, 0x10) (async) ioctl$IMDELTIMER(r5, 0x80044941, &(0x7f00000008c0)=0x1) (async) fsetxattr$trusted_overlay_upper(r6, &(0x7f0000000900), &(0x7f0000000940)={0x0, 0xfb, 0xa5, 0x5, 0x0, "2f511723ab49f117e6ba36182bf5660c", "f02b267d456a8624427d411ee7119fe8e4b2900af86ad8eeef5410b4e9c3c053df344db1c04336a3b718407d970ea3bc1c0fffe08c9e7263d04bb1139f8e5ea83eb144332ab2070d23d529a97ab8c84df71f360759c3ddbd615b05b3d2aa3de47fec3ee85b069427756bc5dbd2d9fd97226f23f1a41ba9489b3f67e97718b06ecaf1823eb8a08c87bf6f7829cf17926c"}, 0xa5, 0x2) getsockopt$ARPT_SO_GET_ENTRIES(r5, 0x0, 0x61, &(0x7f0000000a00)={'filter\x00', 0xd0, "a954af1cd3b523ad137c734bb94aaaccebfdb5cfb25dbe30ae9bfa653e44ccb99afdee6d6c82cc4b56f479e9be347c1c1a7ee685c97ac877bf38f10a4fbb897656f4cffb738c00866fd63af20117303fddf2739a740fe2e83f38c5b76d5570a5329bff9b2a1815d7708241b57c6832b0fb31307749e78144874a4ff1d171ad86a006e70f52a77256d27700c72b0a0288d6852a3cd0a4b7cbcbb40d2d50bfe80b3a4d67feb35065a7204f0583b90bfd45256e970538cc9626680e91c1034cf7e84f37ec6843c1d05c5707b89c961d8edb"}, &(0x7f0000000b00)=0xf4) (async) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000e00)={r5, r5, 0x18, 0x0, @val=@kprobe_multi=@syms={0x1, 0x9, &(0x7f0000000d80)=[&(0x7f0000000b40)='\x00', &(0x7f0000000b80)='#\x00', &(0x7f0000000bc0)='+$\x83\x00', &(0x7f0000000c00)='$@:%/\x00', &(0x7f0000000c40)='}3\x00', &(0x7f0000000c80)='ib\x00', &(0x7f0000000cc0)='memory.pressure\x00', &(0x7f0000000d00)='!\x00', &(0x7f0000000d40)='trusted.overlay.upper\x00'], 0x0, 0x4}}, 0x30) sendmsg$IPSET_CMD_ADD(r5, &(0x7f0000000f80)={&(0x7f0000000e40)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000f40)={&(0x7f0000000e80)={0x9c, 0x9, 0x6, 0x101, 0x0, 0x0, {0x1, 0x0, 0x4}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_ADT={0x80, 0x8, 0x0, 0x1, [{0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_NAME={0x9, 0x12, 'syz0\x00'}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_NAME={0x9, 0x12, 'syz1\x00'}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_CIDR2={0x5, 0x15, 0xfb}}, {0x1c, 0x7, 0x0, 0x1, @IPSET_ATTR_IP2_TO={0x18, 0x16, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @local}}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_PROTO={0x5, 0x7, 0x11}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_MARKMASK={0x8}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_PORT_TO={0x6, 0x5, 0x1, 0x0, 0x4e23}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @private=0xa010100}}}]}]}, 0x9c}, 0x1, 0x0, 0x0, 0x10}, 0x20000850) (async) ioctl$F2FS_IOC_MOVE_RANGE(r1, 0xc020f509, &(0x7f0000000fc0)={r5, 0x4, 0x6, 0x100}) (async) recvmsg$kcm(r5, &(0x7f0000002480)={&(0x7f0000001000)=@tipc=@name, 0x80, &(0x7f0000001400)=[{&(0x7f0000001080)=""/123, 0x7b}, {&(0x7f0000001100)=""/121, 0x79}, {&(0x7f0000001180)=""/108, 0x6c}, {&(0x7f0000001200)=""/218, 0xda}, {&(0x7f0000001300)=""/162, 0xa2}, {&(0x7f00000013c0)=""/42, 0x2a}], 0x6, &(0x7f0000001480)=""/4096, 0x1000}, 0x20) (async, rerun: 32) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x5) (rerun: 32) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000002540)={{r8}, &(0x7f00000024c0), &(0x7f0000002500)='%pB \x00'}, 0x20) (async) ioctl$PPPOEIOCSFWD(r5, 0x4008b100, &(0x7f0000002580)={0x18, 0x0, {0x3, @local, 'veth1_to_bridge\x00'}}) (async) sendmsg$TIPC_CMD_SET_LINK_WINDOW(r1, &(0x7f00000026c0)={&(0x7f00000025c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000002680)={&(0x7f0000002600)={0x68, 0x0, 0x4, 0x70bd2c, 0x25dfdbff, {{}, {}, {0x4c, 0x18, {0x393, @link='broadcast-link\x00'}}}, ["", ""]}, 0x68}, 0x1, 0x0, 0x0, 0x20040801}, 0x20004000) (async) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) socket$xdp(0x2c, 0x3, 0x0) (async) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000002780)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000002740), 0x2, 0x5}}, 0x20) 3m16.795992179s ago: executing program 8 (id=6801): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000040)={{r0}, &(0x7f0000000000), 0x0}, 0x20) r2 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r2, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x3, 0x1, 0x91, 0x1ff, 0x801, 0x1}, 0x1c) pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0) r4 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r4, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x3, 0x1, 0x81, 0x1ff, 0x801, 0x1}, 0x1c) close_range(r3, 0xffffffffffffffff, 0x0) 3m16.734233235s ago: executing program 8 (id=6802): bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="07000000040000000001"], 0x50) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000bb00551a000000002000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000980)='mm_page_free\x00', r1, 0x0, 0x1000000000000}, 0x18) kexec_load(0x0, 0x0, 0x0, 0x0) 3m16.636818274s ago: executing program 8 (id=6804): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000000000000000000000000000001811", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000070000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000010850000008200000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x10) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x8800, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000000)=0x14) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000180)=0xe) ioctl$TIOCVHANGUP(r3, 0x5437, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)={{0x14}, [@NFT_MSG_NEWFLOWTABLE={0x40, 0x16, 0xa, 0x5, 0x0, 0x0, {0x2}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0x14, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x3}]}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}]}], {0x14}}, 0x68}}, 0x800) r4 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r4, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)={{0x14}, [@NFT_MSG_NEWFLOWTABLE={0x48, 0x16, 0xa, 0x801, 0x0, 0x0, {0x2}, [@NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0x1c, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_DEVS={0x18, 0x3, 0x0, 0x1, [{0x14, 0x1, 'geneve0\x00'}]}]}]}], {0x14}}, 0x70}}, 0x24040884) 3m16.633938465s ago: executing program 8 (id=6805): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCFLSH(r0, 0x4b63, 0x3) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f00000002c0)=0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x18, 0x4, &(0x7f0000000180)=ANY=[], &(0x7f0000000140)='syzkaller\x00', 0x1, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5f}, 0x94) r2 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000040)=[{0x6}]}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x13, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020641700000000002020007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000400000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) setfsgid(0x0) 3m16.322221694s ago: executing program 8 (id=6807): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0xfffffffe}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xf, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000000000000000000000200000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b7000000000000009500000000000000a4693fa6efb91116ff74916c03af2f9d8b2ed6fedf145102fe22"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mount(0x0, &(0x7f0000000240)='.\x00', &(0x7f00000000c0)='nfs\x00', 0x0, &(0x7f0000000000)='\x06\x00\x00\x00\x04\xb0\xfe\x98\x9a!s\x91]\xab\xc9\xa2IV\xb6-\xd9z\x81\x91\x8aP}I\xc6\x0e\xd9\v\xda\xbfS\x16 \x04\r\xcd\xdb:\xd4\xaf\r\x11\xa0\xd7\xd7\xb6\x9bz\x99\xaf\xfd\x87fN\xad\x90U\xb4A\xdf\xabB\xbba\x7f\xb8\x96\x1a\xe7\xc1\xab\x16\x02\x000x0}) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x5, &(0x7f00000000c0)=ANY=[@ANYBLOB="180000000000000000000000ff000000850000000e000000c500000001f0ffff95"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x73) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000000)='kmem_cache_free\x00', r8}, 0x18) socket(0x10, 0x803, 0x0) r9 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r9, &(0x7f0000000000)="aa", 0xfffffffffffffec4, 0x0, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x6}, 0xf4}, 0x1c) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r7, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0x10}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x800) r10 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000200)={'geneve0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000b80)=@newtclass={0x43c, 0x28, 0x800, 0x70bd25, 0x25dfdbfb, {0x0, 0x0, 0x0, r11, {0xa, 0xffe0}, {0x7, 0xe}, {0xfff3, 0xffff}}, [@tclass_kind_options=@c_htb={{0x8}, {0x410, 0x2, [@TCA_HTB_RTAB={0x404, 0x4, [0x5, 0x865, 0x3, 0x2, 0x6, 0x8, 0x206, 0x9, 0x8, 0x1000, 0x7, 0x9, 0x2, 0x2, 0x5, 0x1ac, 0x40, 0x8, 0x7, 0xff, 0x3, 0x5, 0x0, 0x1, 0x7fffffff, 0x99cbd5eb, 0x8, 0x6, 0x1, 0xaea, 0x8, 0x2, 0x8, 0x7, 0x9, 0x6, 0x1, 0x5, 0x4, 0x8d94, 0x1, 0x9, 0x6, 0x5, 0x101, 0x10001, 0x403, 0xfc, 0x8, 0x1, 0x7, 0xfffffff7, 0x9, 0x6, 0x4, 0xe09, 0x0, 0x0, 0x9f25, 0xcb9, 0x9, 0x1ff, 0xfffffff8, 0x3, 0x1, 0x5, 0x81, 0x9, 0x1, 0x0, 0x9, 0x0, 0x4, 0x5, 0xff, 0x9, 0x1, 0xb4, 0x3970, 0xfff, 0x3287, 0x5, 0x7, 0x1d66, 0x4, 0x7, 0xfffffffe, 0x2b, 0x4, 0xe451, 0x5, 0x811, 0xfffffff9, 0x6, 0xa, 0x7, 0x2, 0x2, 0xffffffc0, 0xf9, 0x80000001, 0x5ce0, 0x7ff, 0x1e41, 0x4, 0x2, 0xd9, 0x8, 0x2, 0xfffff801, 0x6, 0x9, 0x8001, 0x4, 0x6, 0x2, 0xffffffff, 0x0, 0xcb, 0x1, 0x0, 0x3ff, 0x1, 0x5, 0xfffffff0, 0x2, 0x6, 0x8, 0x101, 0x2, 0x2, 0xf, 0x9, 0x9, 0x4, 0x8, 0x6, 0xfffffffa, 0x2, 0x6a14, 0x3431, 0x3ff, 0x80, 0x1ff, 0x9f, 0x7f, 0x5, 0x80000000, 0x1, 0x0, 0x6, 0x32d, 0xfffffff7, 0x1, 0x0, 0xae, 0x2, 0x0, 0x6, 0x1, 0x6, 0x7, 0x5, 0xc5, 0x1, 0x96, 0x3, 0x3, 0x80000000, 0x6, 0x8, 0x8, 0xfffffffd, 0xffff, 0xff, 0xfff, 0x6012e8ca, 0xe, 0x7, 0x4, 0x3, 0x0, 0x1, 0x7d0769e8, 0xffff, 0x6, 0x7, 0x409, 0x9, 0x2, 0x1000, 0x0, 0x4, 0x7, 0x2, 0x10, 0xff55, 0x0, 0x401, 0x2, 0x3, 0xffffff00, 0x0, 0x0, 0xae70, 0xc66, 0x5, 0x6, 0xffffffff, 0x4, 0x3, 0x7d, 0xffffffff, 0x3, 0x3, 0x80200000, 0x95e6, 0x4, 0x3, 0x0, 0x0, 0x4, 0x9, 0x8000, 0x80, 0x4880d88d, 0x80000000, 0x1, 0x3, 0xd57, 0x1, 0x8, 0x5, 0x79edb8ad, 0x5, 0xaf34, 0x7fffffff, 0xfffffffe, 0x7ea, 0x54, 0x955, 0x1, 0x8, 0x7, 0x4, 0x5, 0x79, 0xd7, 0x2, 0x8, 0x6, 0x81, 0x5, 0x7, 0xc8, 0x6]}, @TCA_HTB_OFFLOAD={0x4}, @TCA_HTB_OFFLOAD={0x4}]}}]}, 0x43c}, 0x1, 0x0, 0x0, 0x80}, 0x20000000) shutdown(r3, 0x2) close(0xffffffffffffffff) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x24}}, 0x0) 3m0.756748488s ago: executing program 45 (id=6807): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0xfffffffe}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xf, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000000000000000000000200000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b7000000000000009500000000000000a4693fa6efb91116ff74916c03af2f9d8b2ed6fedf145102fe22"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mount(0x0, &(0x7f0000000240)='.\x00', &(0x7f00000000c0)='nfs\x00', 0x0, &(0x7f0000000000)='\x06\x00\x00\x00\x04\xb0\xfe\x98\x9a!s\x91]\xab\xc9\xa2IV\xb6-\xd9z\x81\x91\x8aP}I\xc6\x0e\xd9\v\xda\xbfS\x16 \x04\r\xcd\xdb:\xd4\xaf\r\x11\xa0\xd7\xd7\xb6\x9bz\x99\xaf\xfd\x87fN\xad\x90U\xb4A\xdf\xabB\xbba\x7f\xb8\x96\x1a\xe7\xc1\xab\x16\x02\x000xffffffffffffffff}, 0x0) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x400, 0x0, 0xb2}, 0x9c) bind$inet6(r3, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r3, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) close_range(r2, 0xffffffffffffffff, 0x0) 1m35.30090168s ago: executing program 9 (id=8143): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x94) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x7a, 0x0, 0x0, 0x41000, 0x44, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r2}, &(0x7f0000000340), &(0x7f0000000300)=r3}, 0x20) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r4}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000005700000095"], 0x0, 0x5}, 0x94) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r5], 0x0}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r6}, 0x10) r7 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r8 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) connect$inet6(r8, &(0x7f0000000100)={0xa, 0xffff, 0x0, @mcast2, 0x9}, 0x1c) sendto$inet6(r8, &(0x7f0000000300), 0x5aa, 0x0, 0x0, 0xfffffffffffffdfd) recvfrom$inet6(r7, 0x0, 0x0, 0x20, 0x0, 0x0) 1m35.212423708s ago: executing program 9 (id=8146): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000009c0000000b"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000f00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001540)={r1, 0xe0, &(0x7f0000001440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f0000001280)=[0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x7, 0x4, &(0x7f00000012c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000001300)=[0x0, 0x0, 0x0, 0x0], 0x0, 0x42, &(0x7f0000001340)=[{}, {}, {}], 0x18, 0x10, &(0x7f0000001380), &(0x7f00000013c0), 0x8, 0x78, 0x8, 0x8, &(0x7f0000001400)}}, 0x10) sendmmsg$sock(r2, &(0x7f0000005ac0)=[{{&(0x7f0000001580)=@xdp={0x2c, 0xa, r3, 0x2d}, 0x80, &(0x7f0000001bc0)=[{&(0x7f0000001600)="ce31893ba9c9ea4c2a72cc6ecc4b99ded98202cf2e99baaf999d6df7c0221b7f71827cb6496df2b27039794c6470282739776d816afc73d9da0ec7914d2bc34839c63f4ccbd64318150eab6df7add194edc4055db5f2d81639f75f32293e8a3c2ed40f2c896e29f7447295373dedf29993eb8e371321ad45d1522d9b6aa35f44995386f1fd7c3bcfcf53e576dc3882399c55d1408cfd0133546bbfba8b64e5a97040", 0xa2}, {&(0x7f00000016c0)="874d68fbe86e199039b70e36df0bdbb5fe1181788004f9dffa46bf6a183d5baa6f9822387bcb7b967b0919c5e7e9ee2169b95ae0b590bc47197444052f4a43804393af49b2392b82190b786ef3333201c7d7cdeed7532f3da27486cc4bd4c4cf1bf75bd04d3df91d4b4f3c0f320b9380abffea92aca6c661395e895fd6b20fde681d81aa25c7d6213f4280c96496a920478a78eb75a943583db470fc5064bb6b57b3dc91bc3caeda6feb93b43327cd5cee96f01cc0a8968bf33e04c4ad8f60daf1c36994baa2c28013366eacbe0fc46fdfa01a3ea9b8fd8fbe343b40850c26a8f5ca543ff2ef46", 0xe7}, {&(0x7f00000017c0)="833bdaf2e84a6863a27dcf2accbb82f6a5537194a329c33dac5370043047d6062899781a889754b1927b07acd1b38632faa9377436a2e0381c1dc0dffcbc398ec3462d9c7d612016c1104c5226a613561cdaafa1ecb97b85d371433882ab056f3ee113986e6e63b6e76efa38b209685da69246a90ad970dab0b31f47744602875a2ba9f1a64b67", 0x87}, {&(0x7f0000001880)="34d1dcb66aaaa554e55c63321ef1cfec42b33ab1d9bcebb8a492b1a37e782825ca9f9eaf17da16ddb24e35db2244bd7b885743d52616f7d76ae92938bb38ae566435a8f73311bac53e6fd197473bc063e92e74e124d11887c77dbefa95a15c0602b162e49c92a8f02875583262911153b8f51d6eb8e56db3ae0677221bcea56206833c728b10c04a7a26bebf8d8178b1283d22798d16e46a59ce499501d976a4b3a22d6fd11234fda9a5a4f6c14bf505103ee9bea520", 0xb6}, {&(0x7f0000001940)="6e87585025096e4b5c499f1b7d2816cd1f9af99cf0e615f5c22e5f284df271abef2ee9bbaeda3f31fdc3e790aedf7edceb80f5bcccb1d0", 0x37}, {&(0x7f0000001980)="ecc17793869d225e09ebf15231b819276e8dc2f17369059b16e489481081b06857bf84708c3dd47dcdec78d2847cfffb53261dc11a03e813f4362ec1da5ef621b8bb90490911e44ffcb3ef3294cfb895e649ade243ab2eb844301609fb945e52f3476f20edd1d1f07d9731ce6d09af90ae3fae31ee3ad65b2618164b82ced8d3a1261d5b0c87d195a0bcda7d86fdfc4e5b2329e1be186971cfd6f85f629eb55eac5e1fc4f3724882ac557e9e395abfc815b892db91f9b9a93b596b6e3046752340a640bef30c6e15", 0xc8}, {&(0x7f0000001a80)="8a9fbd0ecea7f3e1604bf35d177d23a465fc5e922511269fb90209b569035d3f6db640c27eb156cea064064f19f22667024a4362459aedb94858996583d5a74e47b97cafc74f1fbb20cafad4c53e42070f1310b4d560fd51081f0fe766bc2da5999563a8567baddb5e1f2e298df952c0ea15bcffaa00c364fed5b3725676ab1d9dbb1311008a15612290b31bbdc0d663a352dc43fe976da3d88c34527a2055c6cd3ecd7014bc9eecc4064934040e6f661d10204360696a2b67d581eb79da9f403c16216c88ea7c3dfa0d5bbcadb8e4795506de40d174711a004ba841", 0xdc}, {&(0x7f0000001b80)="854fc49746ad92", 0x7}], 0x8, &(0x7f0000001c40)=[@txtime={{0x18, 0x1, 0x3d, 0xb2}}, @timestamping={{0x14, 0x1, 0x25, 0x9}}, @mark={{0x14, 0x1, 0x24, 0x2}}, @timestamping={{0x14, 0x1, 0x25, 0x8}}, @mark={{0x14, 0x1, 0x24, 0x7}}, @txtime={{0x18, 0x1, 0x3d, 0xffffffff}}, @txtime={{0x18, 0x1, 0x3d, 0x8}}], 0xa8}}, {{&(0x7f0000001d00)=@ethernet={0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}, 0x80, &(0x7f0000004140)=[{&(0x7f0000001d80)="9a04b021e7ea3329c775f784d5f196f3623b0bc73a38f9324fe51bcb9d0bb5ec70d116ac22b6f2fe3d5b45219d5358f8656e6c6fe5a25839812c15644c765b705a54f1de2568d53ea9e003ac13bb8f5792087ec9a04d090f5d1349a72dff1c1380e63bafa3e2dbc0346813425ced7acfdcfec201a8e8c0b21124a8b229945b6b", 0x80}, {&(0x7f0000001e00)="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", 0x1000}, {&(0x7f0000002e00)="354d0f4eef8424511e3a84a6b9ffe8ca27484cd59606a43243bd9451c550b54d0898f6bf3fc56d27aa5aeba771465dabef93b1fc8ac22460a9dffbe46efe500aac7b50ee359b909dc3f73bbf8487a7a17c61c4353ca8cdca2c3d3f67492440e8aed341e8d17d088c50640702e7b89b20e6879c4d76b738a5d9ec930b6635121b5daa913f795731d6d221d06085d13d6ac7abbbeca3a81dc7407fe289c88e7faa8941bab4f59c7ba2a2", 0xa9}, {&(0x7f0000002ec0)="43ae340e75c28496451364c6269c11892890df20f73501f03f9005400a99795c9c1d1ac896af63a3dbfea81e9e3043c0460028e4f4b3b5259f0a685f75c0603c80e778292758dfea440ef12eb6f53dbbac80", 0x52}, {&(0x7f0000002f40)="b3aa9aaccf4c2a36345bef2ba1153de83ea2a7e0a4c639b838213eef44c1", 0x1e}, {&(0x7f0000002f80)="c93b3774636e7bff3a1a81441bd7d1b58223e6a070daad983f17fc23c64d64736ee6096f10b80db6f47c604e080aa184cc132c596776cd8e8b354c004df59f5571b5f97cefdab7c271e5bcafcfcfee9d27ad288c8caae071963e3920f56471d4d7c909a0eb5a1bfe3968bebb6fae98ef999a19555c9fd4c8bca8b964e5e87aaa61b5bed16de09ebc86531e144ecd40d66c8a7090033e58844a81b0b084e7a4ba7036fca82afa3622abb597f77e9f3ec83cfb081c6120f01ad995a4e59eb90e117bdb926871bbd851a624bdc173", 0xcd}, {&(0x7f0000003080)="e88b0ab2ba7dde434fa0621cd4e8d27701df29c1d03e6a7842dd881cbd869f5a0b258f52a0351209f7e4f50c0f1256c9d62d73ca4438adc7df56bf72e4c4c7d741cc79634fed39f2c842047118f9826b3a9d00e696b76cb70e304c7967110f6638fa0ead1ed4db7352964861f83d57b1d2bc9750aa86b05135453435ca753eeb2a08bc9eae33984c14363572fdd767e55d677396b33604cc19088597cce4f823d1628c2d01943a16e3a8660ec51b2ae8ddce36aaf220960f88402f61", 0xbc}, {&(0x7f0000003140)="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", 0x1000}], 0x8, &(0x7f00000041c0)=[@timestamping={{0x14}}, @txtime={{0x18, 0x1, 0x3d, 0x3}}], 0x30}}, {{0x0, 0x0, &(0x7f0000005500)=[{&(0x7f0000004200)="ad9186734f1ffee0c0674485aaadc31292668ce46e5b55a9389475a2168820b19f7d1a4a7966f60dafe71a", 0x2b}, {&(0x7f0000004240)="0420cfb4ec55ebe37535adbbfd1088f6a94d", 0x12}, {&(0x7f0000004280)="c506371a093e2522be7706052cbf3f90cb88635b4d67730fb11bafbbb47bb0e56e09ea494e87b59d0a88966f747ba55575678b7e9d1d67053bec7893e76b92ce05d7b97333910ef703351ab416f19363dbfde529a7d9f7951fc91179a4566a2541ccf2fc4e237818dbc1905399e63c3dd9e2a70000b6ef83f6e5d7284a17cb9cfd95deecf43e9491c1a2a4244ee7eac52305c6fc10d67bad98027241795dcaa59226a1f9426350fd00aea89edee6e455c6886a01e58a6f3844f54c8eb77efe5358900924eb340cd75d704b861cebfda29781a518a0ef913bd2ad97405d62a06b249cb8de0c2ded38544ec9", 0xeb}, {&(0x7f0000004380)="a1cb9de5119f0892ee385813335e12a7c2aee52ddc46850f30aa3497d974e1ed5451a1c219d27a0f0bab06b347cbb81693a6deaab454f074d1be513d8ba7bf210847ff2ae61ce774ac3812", 0x4b}, {&(0x7f0000004400)="16b220c72848e65167d7a0b4b9ecb5800c32c7c8b6bc51df7c239c375cb8e7bc7514bfa2eb03c0f105ea06affaa5d8061f239a86bac96fffba76e5868b0e4d02dfc6ea3b195aee34f89e0185263012f700ea09adafb605c614a916ad3bc62545c4cbd5ce3cbb6224ea758aee36d5ea69ec167a950e139b731fab8c9cd018c54884e9845a9d463cf00983e39e96df96204cf11ef4459561f4afa8d9dbac248dc8edcfc0", 0xa3}, {&(0x7f00000044c0)="1e9c3a8d2fda432162a357e0a77dc0", 0xf}, {&(0x7f0000004500)="6c4efe2361d99ae2b94f24f4c6ad009d4d9ecf4adb89921aa6dbf13e077a7f981e8c271e013a0305217274c8a1c1c0fa92e2539055b477595e1ea377143aff5d8c85e974d4da5e3d473c3c53c06620f4cccf8ef0b924ca3672ca9f75b20bbe1bff23d4b03caf9502e7b91d8cceedd75b1ea2465baf62bd147bb5a48a2a4e5f0e5978fab7caa9608c81cf090890a413be877014ef0e217dc27e851b60a2a4d88b5160a33c729fc4f96392b90f84682a395822a01ae2567b3b37582fb0cc21e40afee10ba9b7484e8fc0563bbc610010ea9697c4675d616b5e2ec0275e3d44473ca7f907da846d07e138178e1c892481553344399b7e5148dbb0d895e3b1120c2e73b53bc7dcb563dc0022853aa36254826dbd4bfed20a7878c89da4ea7d31afe527bdd6133f27174998a52f49cf119e6acd2b63848f4dc11ff11e140b4a47d961ea241d263eedf5d4bbfe8ac814cd180b8b7abe3ec29eadf689e808d938d1062986ba07e703ed82dddd347884a28e51432b2fcd0948162476f03c0bbf4fe8bf516b294d4d0ff62e762a0f5c8234dea250822b374cf556511fad8a17093377c0fb3233a927b624c493759e4c43a989f54063f1145d29271fd02b2a5a70cbd548a75cf459fdd3ca13f14ff6fb1ab48c13e9f50491054e8f4e6db25addf585d100cb617c1e4f76ab644b2419fb40b82b7840dba87f2d0b966507cc42c43dd38fea95ff49f27561a3960da785a7d19e1437f6a4fda4729cc61f4ff27bb7934e3fd6742df9591c179752fc614df84131ba21b9690b5c6cf3d648643bb79a75de31054e13a70610a91c15aeefb1cb611b68e313ee19fe6048a1904cb5637c4b2353d68559899e20185d806745adddce87386f54c75504e270960729b9ce7380fe212670d0524ece444c1c45e96504ac8010e35233bebaa301864f8c95ce8671bc343c2ed66ca00b265394985ce9ddd76f546b8ccac124634b805b375e1413fe4f67a4f46438a2510cbe2a078a48b7295da2316649a350096091de8ea7f3812568139a6c62efbc5cafaf1bd03dbb636e9a998f873b756b2c70f46ee2d1407a9ee591b7caa07fe5f1cdcf8fc89a865149a6fdc842b8a064d5ccdcdece66d63673f3831e36d8afa75bbaea55e0a62e3719945e2a6c0bf261b77d83f681bd89ab358678f7c9b270e6e0dafab7807cc9d42399608739924c428461f2f8c68785957d74279757c92ae1da16ab7d916e3a9e20ad77d64343a588712a90d54904e9985aff371e97119e69440988df9fcee91842919c8cf49b34d7dd1c056b0d64fe714ef45a71ce7751e5f890f75b0b8b1f969b3ed53fc8a994aa63aad3491e8164c316a9767df147d1a82850ce5e386bd798b58da1abd0243141eb6730341a43960806111df49c8f96f060ff8e07099e0375b5040a631d989a3bb1b201cfc95a54c496e65b94c2bbe49c21513588e3811d842427dbd21abcb5dc0e19eca0bbf3f4f61c1feea42537119d37a0dfcd2ec561f0eb00066d143b69b5f5ea0958073b8324bdea94298be92941d763e1cf1a9bb9c96361ffb8d271329ef1763f0284c24107a7b284f6868385c2a327f8009f4b2e573491ac1e3b546d9c7ea136fa700c26ceec6083ec033d9cc19f087d8d3797fd2bc91421f087a26d0a5c1a51ec1b57685ef77497ea9f9ba24481fa31b45bbf2f5f8cb7d76e60e775b22d9a2043106e076bb9ef155b995247b5c3c02b3a8fcc5e334b4f19ca45474cb419be57f81807df5797d7b4127c227200863784761e7f48438816f570285a4a39f2e64e1b9dd8257432ea41393a8938a56105479a2bb3372c34eb51e75e83e047e8a2ac6ce6f8941cd38cccd036535f07e9cc43f42a04ab1d54bf5054eec8881afec97f6e7421468758fe9b73d003f7c564a406d995c39ef2bf577a1c64005456b2ccd1c4a05b1657aef519c9595156236bc106089c0a138aada57bc7ae26e75a8e8006c6667582a14ab7b0e2f7ebfbc95669f617a09f443f634a8af0f7f69e543f23fffe4bc04233b2420ceaa3f8894de557d2d269e42b8cf858fbd07decdd26a673f2f83be054acd4b44e2e388ac950c9d817b1b24a0d271831c5589e3fdab9df5395743f7964b833826db0dbe3b090bda19ef7c6011f21e93463a8aeb0fa501c8ca391da1cf09737e388c3e7794042c9e9415aa6bd6ec0b207290ae2ce339b50354f651b8f764ed6ab69432f302c0898b701e5d8bd904aaa75379cf467954b6f1a015e38c10cb22f71b3ece484b8e81a8dd0890c7897fc8b6362b80b6a3fa9786674d033ea8835d81aeb3cd7499d76a8e854b545bedf3a7e89c734860f2e653d5861c1fc910030a99c4aa0fec0c41ffb6e4d348cc7666da25025c41d60a0f1b45fc1fe5324c4022af77315d9213776b721f21a99048aa694b1fbde5cd5977ac4255a5694aaecd33f7c4e825303ae804e9e7492436937883e80d28983a62647f100d388bed919f9879c1dc9953b007ac15de1cc0c3ca42ecd5472f55349ee0daa0f8eb94e2f5f1695811f034350f57b4a4e41fe510a7c7d4e0f51e8ab5c2c6ddcea2d52c8ad2828afc762c35c2a83f75c7b6fde3179c3c19def75ae8a7be446c7efaf19ecb71528225e87b3bf66671b82f3901fdd810495c824e1db472ebeabcf69a86d6131eccae6cd9c9d414410a1aec0009f836b17bd21290249c0b791861855543aaddadbb3c64b59fd87e5161731804d8bc5a7af55eff9f0386887dbc3e87adcc256d24fbe6c3dc3f5c815260595ba3957c2f1168359a413d8162e78ea4289e59275b05c399cae7a5430b3f9023bca2df760a8359a79ba43fda93b5e3d005565da07c60b8140ef63c9747f6f7db0e718742703197c44128c15bf348f409dc15b2c8d4f6f5670d93f16eedc97d4657ce1f89e7abc576e91529def20779bef3c467ddfa5b650319c3e8a7274adf646f49be09dd5d541597420010237e3634af1f0af589632f6440aa051923b0ca2e865e7761a0cd9ff5c86073564b9b784a826846b3bce183b7851e8c8558771889411c34e2bd0f29fd110d77f6b75e060d6fe251b2ffab9ed688a6c3179edc0293e1a3a2df83e258528fee74e651c30853233de854cd159dec6a2e6d5bd216ff550b903e93aedcfdb21cff5cf6007be9f6b098a6c424a27ee9d44e1eb22b4a420d2963e2a5154eadbc263e200645e18365b9c8b298861d8de36c45b42be6d5b59ab4e89f1a26e33add265b4812a157023dc72e66b98eb054374b8276637f6aa476190dbf53117f504086cb89bec85575bf9bfd376a28a4efbd4bd13a6a09ea1c53a63ce8ae7172ef5d10426c13098bc9ef7197c5ab9b6cf5ddd773eb63c03b2a5c02cbefcecfdc4ff4ab600f39a8149b7b1771e35a67a236f807b894b85593501d2e925d575b74c664aca39942581f54e72c2638cfc53f8a26734d334aaef6c3cdc46dd5794f2bb57ddde39f7ad5d338719ee3327e50e6647e4afb1a6b5cd37b378c252bc0651662203a87d2d047ccc3f5ff927641b27b7b5a8be6c371371a96d5f6ba90ed859084818a08ea2a3b33bbd7527d1eb052c07b0261c6169e67a764ab7a82851d138b6c8d827fdc3c9993144d38811dfc4f12da0eb955b7c96511a06de16caa85daf6e5fe887903d94afe1ecd0462250a58e5092b282c1e84ee588922527b7341fd724c7b617bbbce1fedba21b9f3ed650f2996ee535ce9a419f156d860f8ea45dd332136f6a8cfdebcc4350671c594c4b5b5435d989cdeed03255ae34936fbdb062d19100d318786bfdf5253e1866047b2c087e038954ab08d2783b420ea30062d29452178836d66b8e53b72eccf535eec6e8ff617d30cb33b9001bec00654d33be0dc3cdebe515606c51e0d9fd2d8d8b1e8cdf73eb71d2b476056150224752350dc789c6803dd8acf4d17f6b8586d908924771d385d2089063dd79d7b054ca292ab130ae0e6bc6851600a87d952e75222a167d6abefcbae5398f82fdd6714ccd93cd4e6fe064bc8454f0861069820cf3849d0ca3ca73b3f239d0b3830e7173a5906a13f595832547661ce32fb1514095f8b65b8c1159792a3d5787f1a491e14484a06bd499b6f9b0b1c3f2e06c7a268f6216a6cb97d0c3f49513a4e042128b6341605ca19124b973278d4e6e070a1147fe5ea54f1379b9170dc22f890ca24d1ca921d982294a8444c5716f55bf695db7312f71c9553f72d91d3414e4ecc9e132b2c533b66171cb4c7c71b1920b360bc7562e8e3f56366b6f966d23c9ffd3a345d785d7a9ac7f9654aac47824b4ae44a62daf2fbe99b4e7c81930aec648dd1acbc4e9254f0c7c7f66c4eaf7670ad73ad8907195e060b42093bdc9796bcf5135c6894d1a26e8ec0137b278ee7b253b8c748549750ddc17782d2dc14ff1b9775b66fbcdb6ac326d16672df646da55f9779fad41903057fe69a0bdb0d38c580222784cc08f8289d523125b812a0f038455d371248b002f164c4acab7a208aa14d8d6fec2ff2e5cd46473d582e3eb0292b819b4d313de627a739ffbb9b376253b29e96cc614bd0ad05bb7f3b0decfc7e3f240b518060e51c38c245a33f87fe463c630ea459fdb55522a3e1c6d9b303d38153d86e79fbd845041fda12aa54502c8e66e99e82e6157cfa26865bbab3b30034ecf4d558860fd588869cde50786c7b410163a7fc6b7f46f1f761bd15e7abc7dcbe1b4c44ba37fd7b03966dfd7f7cd580af8e6533e80c576158de49da376995ddd545368c00697bba0773c14c910c37770993c0e0ff64bb4c46cffad2cd5789280edae6ca13b7e3afd7944a7cef62f1f23a151ddf09e9b1d8480a0662d69bbcd254d8fca2b4d7f44ba5da2de7e01805052e9a0c0946c65ec9aa13a51c80b8bb7085d740a65caa20fc79d438906f25d76374884c8c9a86288c1d9bcdfe964c765d1229fc752261783fa980f7aa28260a92877e121eca0c54a743de84c1364fa0bf32947911036ac1946c052c14ddd43c89c569ee28931e23ec3688af098ad501310e5cc3f3742db10e6b02b9445b8de7e20f8f127d8b1ab829d4edb3d3bc7ef256b4246ac481cf767493daa2fb54b449eaf7da7e77bad154a242caa1872e22dd8206126759295b731e6abfa0867a2493ca2b4d92a126d862d104a3cb4387dbf071d9e496bcda9aa337dde9dad7375b2935e44d7d4bcadb8fea0c1643b0fd9cd69f8b313e6bd5053bcb1414a19d1fcbbf094af9aa9f01339807b6cd69059a43d0cc4d73316ce7184dd19c8628a438183e61e032b2ab79837b876f49489645becd416e58a15f920a7cc287f8a8f6c4167eade1ee22f49dcfb3a9656193a89a507b67c9a9c6c211cb611943ff58a55bd79d2e1f1eb47bf6d0b118c1c4335ad506ffce2512ab2c1ecab55ddbf223d66bee87afd7dace1fd421336c8d96009640d9cd0bfd511f736297537a7f781d3bc1f2ab6555587e5889e6e22a566ab4560f28459dc356546a5fffd5647c657505d74ab1446ba4955d7ea6459994b67a64398a6980bef09628b10c60f97dd30433b0032d01e581d1023c119caa998affb272ff27d74130822773b85683806a13b33dc31d862de06516783c7684996dfee906b5a9844e7175baf87cfdaf7b8809fa11c1baea600e6420c1926494918768f5fbb1403d4cd70cc6536d23532bb9b6280937b0f7667c27ab3953e2b4dc9e5b7f9270e8d376de90e7dc920b5973834983b0af55aa01c5b31d9870851b2cf90bd96e075812f55fb5111627cd2afcfa549280bc7a7446719f35b23746c2e9a9e0ba22d23ba9c9d45ff0814c60dced7", 0x1000}], 0x7, &(0x7f0000005580)=[@txtime={{0x18, 0x1, 0x3d, 0x80000001}}, @timestamping={{0x14, 0x1, 0x25, 0x8f4}}, @timestamping={{0x14}}, @txtime={{0x18, 0x1, 0x3d, 0x8000000000000001}}], 0x60}}, {{0x0, 0x0, &(0x7f0000005a00)=[{&(0x7f0000005600)="bb20af7a18ef77873dc0bfd2b6effdae88bbfa13fa8198b2fb4b09c4dfac5f2216c691fc17e1143792635d731a6c0a2b259e126404662c1a28620753c864476ccea2fa1bfa83cf8c86aa94e21e141d61b45239895499e71eb4ad13449e4690daa7fc4c1e122ac935b5df25336cb91d6024394cef6bb3ecb64ca327e6c5ea04114f7348aba12c7a1d3473f796f7aa3c4dfd73c3894e80ca0751ef6c97e3b7b4b418a23cd2", 0xa4}, {&(0x7f00000056c0)="b7499b226ec98e3c7917ba31d33229a25d642219155ad33f1ac793855a7fb3e948", 0x21}, {&(0x7f0000005700)="435909a514dfdd8ccf7c121302f09decb9290b4c091701d87fcc8fdb034f5c64e711dda8947b335fe40d181b4e0d08286b1a9852b2890c0fcae4a705264543d1262dd54992a09e71da2dd9db22dc1b7fe10f1caee6288639a6f5f7c3abe8c3246acd43bafbf2d69ca3f44d0b896e3a5adf46d78c35e17bf49a498c059b3dcec8b2982957cbc5aad86062a082cde3ce70eb337c89c975fb0c83de2b834c784ef87beae2df3773b3ec56809e3a8f444dbd5677a8b94f3143916a008f740580f53cd6e2ed1af78ec3", 0xc7}, {&(0x7f0000005800)="196800866c7a98d22b866d266052cadbb60492709b854c8573220e4c5c8a542dc561f1914153a30d6aaa5827bdba17163f42c9a6ae3a90a5ba8f541e9b60f527e5e9bc7e4eaf62a6d99d212456454f4930a7522d3d67d17023325a974f6ec18d4958fbb9e69598804de89eee1c50ba15e6a0249fc0d8b929b179c734b9610b1cf50982f8f413777056e0103ae5058bcd88fd508f0bb51eecb14ad1a0c4237ea6fd0b89b9b69b786d5a0870c03b7693a18c497f73e4c99e737f8db753c118db3264c1bc501fc6f0abbacd13ec7524", 0xce}, {&(0x7f0000005900)="27c08da2a026db312a12856f0f070577dd7e978212d8284a04f5fe05b0033894d5cdf2a2c0d7c382d4dfed44a796d12caa9d688848043b2a59e89a89df81d39ea6efaa1b4f99adf08c3bc060e9a663c2d5b93f83df2493164eca0b997b9c7ef6fb17d0b775c05c2acbcf9174ad26ca03f58e6ccd95007aaacbdec766470222a1021e2f75e5a70de2279a94e8df94d01437f9419ad44a8925d74afdd321859baf00a197db555e27bdc6ff581ff083e3b8430446b9d6328d68cb405bb914e1be053e2475bf386c80156bbfeec7b4819ee18aedee7bc4df2938bb", 0xd9}], 0x5, &(0x7f0000005a80)=[@timestamping={{0x14, 0x1, 0x25, 0x4}}, @timestamping={{0x14, 0x1, 0x25, 0x2}}], 0x30}}], 0x4, 0x4048000) r4 = syz_io_uring_setup(0x4e0, &(0x7f00000000c0)={0x0, 0xf5ea, 0x3180, 0x8000, 0x400252}, &(0x7f0000000640)=0x0, &(0x7f0000000340)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4) syz_io_uring_submit(r5, r6, &(0x7f0000000500)=@IORING_OP_MKDIRAT={0x25, 0x17, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x1f, 0x0, 0xf9b7a26b18f77d51}) io_uring_enter(r4, 0x627, 0x4c1, 0x43, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x3000010, &(0x7f0000000340)={[{@errors_remount}, {@nodioread_nolock}]}, 0x1, 0x512, &(0x7f0000000380)="$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") 1m34.809663627s ago: executing program 9 (id=8156): r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='cmdline\x00') r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000140)={'pim6reg1\x00', 0x1}) mkdir(&(0x7f0000001a80)='./file0\x00', 0x18b) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000005c0)={0x0, 0xffffffffffffffff, 0x0, 0x31, &(0x7f0000000000)='//sys\x00\x00\x00\x00\x00\x00\x80\x004\x00\x00s/\x92ync_\x93\x96\xff\x92\xaf\x00Se\xf44.\x00'/49}, 0x30) mount$bpf(0x200000000000, &(0x7f0000000200)='./file0\x00', 0x0, 0x206002, 0x0) mount$bpf(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x140070, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x39) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000047000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x800}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000940)={&(0x7f0000000640)='console\x00', r3}, 0x10) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000100)={'pim6reg1\x00', @multicast}) read$msr(r0, &(0x7f0000000000)=""/143, 0x8f) 1m34.375128198s ago: executing program 9 (id=8164): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000f80)=ANY=[@ANYBLOB="0500000004000000080000000b"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000006000000181100", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000480)='kfree\x00', r1, 0x0, 0x7fffffffffffffff}, 0x18) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a58000000160a030200020000000000000200000009000200"], 0x80}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a30000000006c000000160a01000000000000000000010000000900010073797a30000000000900020073797a3000000000400003800800014000000000080002400000fbff2b0003801400010067656e6576653000000000000000000014000100776732000000000000000000c6e49c0f5c000000180a0101000b000000000000010000000900020073797a30000000000900010073797a3000000000300003802c000380140001"], 0x110}}, 0x0) 1m19.23428997s ago: executing program 46 (id=8164): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000f80)=ANY=[@ANYBLOB="0500000004000000080000000b"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000006000000181100", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000480)='kfree\x00', r1, 0x0, 0x7fffffffffffffff}, 0x18) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a58000000160a030200020000000000000200000009000200"], 0x80}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a30000000006c000000160a01000000000000000000010000000900010073797a30000000000900020073797a3000000000400003800800014000000000080002400000fbff2b0003801400010067656e6576653000000000000000000014000100776732000000000000000000c6e49c0f5c000000180a0101000b000000000000010000000900020073797a30000000000900010073797a3000000000300003802c000380140001"], 0x110}}, 0x0) 3.181851017s ago: executing program 0 (id=10352): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f00000001c0)={0x1, &(0x7f0000000200)=[{0x200000000006, 0x0, 0x0, 0x7ffc0001}]}) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffff"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x1, r0}, 0x38) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000019200)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kmem_cache_free\x00', r1, 0x0, 0xfffffffffffffffe}, 0x18) setregid(0x0, 0x0) 3.161010559s ago: executing program 0 (id=10355): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x1, r0}, 0x38) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000019200)={0x11, 0xd, &(0x7f0000000240)=ANY=[], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kmem_cache_free\x00', r1, 0x0, 0xfffffffffffffffe}, 0x18) open_tree(0xffffffffffffffff, &(0x7f0000000140)='./file0\x00', 0x1) 3.124608142s ago: executing program 0 (id=10357): socket$nl_netfilter(0x10, 0x3, 0xc) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180200000020702500000000002020207b1af8ff00000000bfa100000000000007010000dbffffffb702000000000000b703000000000000850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x23, '\x00', 0x0, @fallback=0x2b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWFLOWTABLE={0x38, 0x16, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0xc, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_PRIORITY={0x8}]}]}, @NFT_MSG_DELFLOWTABLE={0x48, 0x18, 0xa, 0x101, 0xb00, 0x0, {0x1}, [@NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0x1c, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_DEVS={0x18, 0x3, 0x0, 0x1, [{0x14, 0x1, 'geneve0\x00'}]}]}]}], {0x14, 0x10}}, 0xc8}}, 0x0) 3.096032715s ago: executing program 0 (id=10360): r0 = openat$rtc(0xffffffffffffff9c, 0x0, 0x2001, 0x0) ioctl$RTC_RD_TIME(r0, 0x80247009, &(0x7f00000002c0)) 3.012932223s ago: executing program 0 (id=10363): perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x8, 0x8458, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x4}, 0x0, 0x10000, 0x0, 0x1, 0x408, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unshare(0x22020400) r0 = socket(0xa, 0x3, 0xff) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e24, 0xffeffffd, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) connect$unix(r0, &(0x7f0000000a00)=@file={0x0, './bus\x00'}, 0x6e) syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f0000000100)='./bus\x00', 0x3800488, &(0x7f0000002200), 0x65, 0x78f, &(0x7f0000002240)="$eJzs3c1rXFUbAPDnTr7Tvm/zwgtaVwFBA6UTU2Or4KLiQgQLBV3bhsk01kwyJTMpTQjYIoIbQcWFoJuuFevOrehW/wsXUimaFisuJHLnI5kmM0nGTmZq+/vBTc65594597nnfpyZc5kJ4JE1nv7JRByNiA+TiCO1+UlEDFRS/RGnq8vdXV/LpVMSGxuv/5pUlrmzvpaLhnVSh2qZxyPiu/cijmV21ltaWZ2fKRTyS7X8ZHnh0mRpZfX4xYWZufxcfvHk1PT0iVPPnTrZuVh//3H18C8fvfL0V6f/fPexGx98n8TpOFwra4yjU8ZjvLZPBtJdeI+XO11ZjyW7Fzc5AngQpA3TVz3L42gcib5KqoWRbm4ZAHBQ3omIjVb6WpYAAP9qSev7PwDwUKp/DnBnfS1Xn3r7iUR33XopIoar8dfHN6sl/bUxu+HKOOjoneSekZEkIsY6UP94RHz+zZtfplMc0DgkQDNXr0XE+bHxndf/ZNszC+0P/j6zj2XGt+Xbu/7tMlYN7OnbtP/zfLP+X2az/xNN+j9DTc7df2Lv8z9zswPVtJT2/15seLbtbkP8NWN9tdx/Kn2+geTCxUI+vbb9NyImYmAozU/tUsfE7b9utypr7P/99vHbX6T1p/+3lsjc7B+6d53ZmfLM/cTc6Na1iCf6m8WfbLZ/0qL/e3afdbz6wvuftSpL40/jrU874z9YG9cjnmra/ltPtCW7Pp84WTkcJusHRRNf//TpaKv6G9s/ndL66+8FuiFt/9Hd4x9LGp/XLLVfxw/X32pZti3+gZ3xNz/+B5M3KunB2rwrM+Xy0lTEYPLazvknttat5+vLp/FPPNn8/N/t+E/fE55vf1fsFX9P2n+2rfZvP3Hj7nxfq/r3jj9t/+lKaqI2Zz/Xv/1u4P3sOwAAAAAAAAAAAAAAAAAAAAAAAADYr0xEHI4kk91MZzLZbPU3vP8fo5lCsVQ+dqG4vDgbld/KHouBTP2rLo80fB/qVO378Ov5E9vyz0bE/yLik6GRSj6bKxZmex08AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAANQcavH7/6mfh3q9dQDAgRnu6/UWAADdNtzf6y0AALptuK2lRw5sOwCA7mnv/g8APAzc/wHg0eP+DwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwAE7e+ZMOm38sb6WS/Ozl1eW54uXj8/mS/PZheVcNldcupSdKxbnCvlsrrjQ8oWuVv8VisVL07G4fGWynC+VJ0srq+cWisuL5XMXF2bm8ufyA5sr9HUhOgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADYn9LK6vxMoZBfkpB4+BMRnX7Bq9Xz6EEJsHOJGNy6Soz07PoEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA8KD7OwAA//808SKR") bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_open_dev$usbfs(0x0, 0x204, 0x2) getsockopt(0xffffffffffffffff, 0x200000000114, 0x2716, 0x0, &(0x7f0000000000)) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000786c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002d00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) syz_clone3(&(0x7f0000000740)={0x8180080, 0x0, 0x0, 0x0, {0x39}, 0x0, 0x0, 0x0, &(0x7f00000005c0)=[0xffffffffffffffff], 0x1}, 0x58) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f00000007c0)='./file0\x00', 0x0, &(0x7f0000000100)={[{@init_itable_val={'init_itable', 0x3d, 0x1}}, {@errors_remount}, {@dioread_lock}, {@barrier}, {@bsdgroups}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x2000}}]}, 0x1, 0x783, &(0x7f0000001340)="$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") r2 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x42, 0x0) write$P9_RREADLINK(r2, &(0x7f0000000000)={0x10, 0x17, 0x2, {0x7, './file0'}}, 0x10) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00'}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f00000001c0)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) creat(&(0x7f0000000100)='./bus\x00', 0x0) 2.807340702s ago: executing program 0 (id=10372): socket$nl_route(0x10, 0x3, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000001b80)=ANY=[@ANYBLOB="0600000004000000080000000a"], 0x50) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x17, 0x2000000000000242, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000000000000000000ea04850000007b00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f00000005c0)='sys_enter\x00', 0xffffffffffffffff, 0x0, 0xd}, 0x18) r1 = gettid() socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r2, 0x5452, &(0x7f0000b28000)=0x3) fcntl$setsig(r2, 0xa, 0x12) poll(&(0x7f0000b2c000)=[{r3}], 0x2c, 0xffffffffffbffff8) dup2(r2, r3) tkill(r1, 0x13) 2.396031212s ago: executing program 1 (id=10397): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000009c0000000b"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000f00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={0x0, r1}, 0x18) perf_event_open(&(0x7f0000000800)={0x5, 0x80, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x22, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0xfffffffffffffffe, 0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_io_uring_setup(0x4e0, &(0x7f00000000c0)={0x0, 0xf5ea, 0x3180, 0x8000, 0x400252}, &(0x7f0000000640)=0x0, &(0x7f0000000340)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f0000000500)=@IORING_OP_MKDIRAT={0x25, 0x17, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x1f, 0x0, 0xf9b7a26b18f77d51}) io_uring_enter(r2, 0x627, 0x4c1, 0x43, 0x0, 0x0) 2.316746209s ago: executing program 1 (id=10404): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f00000001c0)={0x1, &(0x7f0000000200)=[{0x200000000006, 0x0, 0x0, 0x7ffc0001}]}) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x1, r0}, 0x38) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000019200)={0x11, 0xd, &(0x7f0000000240)=ANY=[], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kmem_cache_free\x00', r1, 0x0, 0xfffffffffffffffe}, 0x18) setregid(0x0, 0x0) 2.274310963s ago: executing program 1 (id=10407): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000010000000800000008"], 0x48) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000005000000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], &(0x7f0000000680)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={0x0, r1}, 0x18) r2 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f0000000280)={0x41}, 0x10) r3 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r3, 0x10f, 0x87, &(0x7f0000000040)={0x41}, 0x10) r4 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r4, 0x10f, 0x87, &(0x7f0000000280)={0x41, 0x4, 0x2}, 0x10) sendmsg$tipc(r4, &(0x7f0000000240)={&(0x7f0000000080), 0x10, 0x0}, 0x0) 2.248086596s ago: executing program 1 (id=10410): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000010000"], 0x48) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000500000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], &(0x7f0000000680)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000900)={{r0}, &(0x7f00000008c0), &(0x7f0000000880)=r1}, 0x20) r2 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/sockcreate\x00', 0x2, 0x0) write$selinux_attr(r2, 0x0, 0x0) 2.216486789s ago: executing program 1 (id=10413): bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0xc, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000002000000000000000018090000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x39, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x50, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kmem_cache_free\x00', r0}, 0x10) socket$packet(0x11, 0xa, 0x300) rt_sigprocmask(0x0, &(0x7f0000000000)={[0xfffffffffffffff9]}, 0x0, 0x8) r1 = gettid() r2 = gettid() tkill(r1, 0x12) tkill(r2, 0x14) 2.148335066s ago: executing program 1 (id=10417): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000010000000800000008"], 0x48) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000500000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], &(0x7f0000000680)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000900)={{r0}, &(0x7f00000008c0), &(0x7f0000000880)=r1}, 0x20) r2 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f0000000280)={0x41}, 0x10) r3 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r3, 0x10f, 0x87, &(0x7f0000000040)={0x41}, 0x10) r4 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r4, 0x10f, 0x87, &(0x7f0000000280)={0x41, 0x4, 0x2}, 0x10) sendmsg$tipc(r4, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x0) 1.78475577s ago: executing program 4 (id=10429): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000001400)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000007c577e1700000000dace", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000"], 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r3}, 0x10) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000006b00)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r4, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)=[@rights={{0x14, 0x1, 0x1, [r4]}}], 0x18, 0x4060019}, 0x20000841) setsockopt$IPT_SO_SET_REPLACE(r1, 0x4000000000000, 0x40, &(0x7f0000001200)=@raw={'raw\x00', 0x4001, 0x3, 0x3a0, 0x230, 0x700001b, 0x148, 0x2000000, 0x148, 0x308, 0x206, 0x240, 0x308, 0x240, 0x7fffffe, 0x0, {[{{@ip={@local, @rand_addr, 0x0, 0x0, 'tunl0\x00', 'bond_slave_1\x00', {0xff}}, 0x1ea, 0x1e8, 0x230, 0x0, {0x390, 0x8f00}, [@common=@inet=@hashlimit2={{0x150}, {'pim6reg1\x00', {0x5, 0x1ff, 0x1, 0x1, 0x1, 0x100, 0x1, 0x8, 0x20}, {0x8}}}, @common=@inet=@socket2={{0x28}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x8, 0x9, 'snmp\x00', {0xc000}}}}, {{@uncond, 0x0, 0xb0, 0xd8, 0x0, {}, [@common=@set={{0x40}, {{0x0, [0x0, 0x6275dd3c01ecbf44, 0x2, 0x4, 0x4], 0x4, 0x2}}}]}, @common=@unspec=@NFQUEUE3={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x400) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7020000111e6ca5b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000020000008500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000000)='kmem_cache_free\x00', r5}, 0x18) r6 = syz_open_procfs(0x0, &(0x7f0000000180)='stat\x00') ftruncate(r6, 0x7fffffffffffffff) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)=@newtaction={0x60, 0x30, 0x1, 0x70bd2a, 0x0, {}, [{0x4c, 0x1, [@m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x9, 0x763, 0x5, 0xc, 0x9}, 0x1}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x60}, 0x1, 0x0, 0x0, 0x4008000}, 0x0) r8 = syz_open_dev$tty1(0xc, 0x4, 0x2) ioctl$PIO_UNIMAPCLR(r8, 0x4b68, &(0x7f00000000c0)={0x8, 0xfff, 0xf}) openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) r9 = signalfd4(0xffffffffffffffff, &(0x7f0000000000)={[0xfffffffffffffff7]}, 0x8, 0x80000) r10 = socket$unix(0x1, 0x1, 0x0) bind$unix(r10, &(0x7f0000000440)=@file={0x1}, 0x8) r11 = socket$unix(0x1, 0x1, 0x0) r12 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r13 = syz_genetlink_get_family_id$nfc(&(0x7f0000001100), r12) sendmsg$NFC_CMD_DEACTIVATE_TARGET(r12, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000180)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r13, @ANYBLOB="010029bd7000fedbdf251e00"], 0x24}, 0x1, 0x0, 0x0, 0x20000000}, 0x4004080) connect$unix(r11, &(0x7f0000000000)=@file={0x1}, 0x6e) read$qrtrtun(r9, &(0x7f00000001c0)=""/161, 0xa1) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) 823.753651ms ago: executing program 4 (id=10434): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)={{0x14}, [@NFT_MSG_NEWTABLE={0x14, 0x0, 0xa, 0x201, 0x0, 0x0, {0x1}}, @NFT_MSG_NEWFLOWTABLE={0x40, 0x16, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0x14, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8}]}]}, @NFT_MSG_DELFLOWTABLE={0x30, 0x18, 0xa, 0x101, 0xb00, 0x0, {0x1}, [@NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0x4}]}], {0x14, 0x10}}, 0xac}}, 0x0) 756.469938ms ago: executing program 4 (id=10438): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000010000000800000008"], 0x48) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000005000000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], &(0x7f0000000680)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) r2 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, 0x0, 0x0) r3 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r3, 0x10f, 0x87, &(0x7f0000000040)={0x41}, 0x10) r4 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r4, 0x10f, 0x87, &(0x7f0000000280)={0x41, 0x4, 0x2}, 0x10) sendmsg$tipc(r4, &(0x7f0000000240)={&(0x7f0000000080), 0x10, 0x0}, 0x0) 739.70965ms ago: executing program 4 (id=10440): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x1, r0}, 0x38) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000019200)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kmem_cache_free\x00', r1, 0x0, 0xfffffffffffffffe}, 0x18) open_tree(0xffffffffffffffff, &(0x7f0000000140)='./file0\x00', 0x1) 708.959553ms ago: executing program 4 (id=10443): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x18, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r2}, 0x0, 0x0}, 0x20) 691.900964ms ago: executing program 3 (id=10444): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000280)={0x0, &(0x7f0000000780)}) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000800"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000480)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000030000850000001b000000b70000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x4a, '\x00', 0x0, @fallback=0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x18) fspick(0xffffffffffffffff, &(0x7f0000000800)='./file0\x00', 0x1) 489.693203ms ago: executing program 4 (id=10445): prctl$PR_SET_NAME(0xf, &(0x7f0000000480)='gtp\x00') ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f0000000140)={0xffffffffffffffff, 0x200, 0x1, 0x1}) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0x8, &(0x7f0000000a80)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x18e42af7}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='sched_switch\x00', r0, 0x0, 0x2}, 0x18) r1 = syz_clone(0x630c1100, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace$getenv(0x4201, r1, 0x7fffffff, &(0x7f0000000000)) 442.772858ms ago: executing program 3 (id=10446): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000019200)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b70400000000000085000000010000"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kmem_cache_free\x00', r1, 0x0, 0xfffffffffffffffe}, 0x18) open_tree(0xffffffffffffffff, &(0x7f0000000140)='./file0\x00', 0x1) 423.25157ms ago: executing program 3 (id=10449): socket$nl_netfilter(0x10, 0x3, 0xc) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180200000020702500000000002020207b1af8ff00000000bfa100000000000007010000dbffffffb702000000000000b703000000000000850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x23, '\x00', 0x0, @fallback=0x2b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)={{0x14}, [@NFT_MSG_NEWFLOWTABLE={0x40, 0x16, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0x14, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8}]}]}, @NFT_MSG_DELFLOWTABLE={0x48, 0x18, 0xa, 0x101, 0xb00, 0x0, {0x1}, [@NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0x1c, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_DEVS={0x18, 0x3, 0x0, 0x1, [{0x14, 0x1, 'geneve0\x00'}]}]}]}], {0x14, 0x10}}, 0xb0}}, 0x0) 406.100781ms ago: executing program 3 (id=10451): perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x3, @perf_bp={0x0, 0x6}, 0x4, 0x9, 0xfff, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@RTM_NEWMDB={0x18, 0x54, 0x1e5}, 0x18}, 0x1, 0x0, 0x0, 0x4}, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="010000000600100004012200a4e20000010000", @ANYBLOB], 0x48) r1 = syz_io_uring_setup(0x73d3, &(0x7f0000000680)={0x0, 0x10007d89, 0x10100, 0x3, 0x85}, &(0x7f0000000540)=0x0, &(0x7f0000000700)=0x0) r4 = io_uring_register$IORING_REGISTER_PERSONALITY(r1, 0x9, 0x0, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000180)=@IORING_OP_READ_FIXED={0x4, 0x40, 0x4000, @fd_index=0x6, 0x3, 0x8003, 0x6, 0x3, 0x0, {0x3, r4}}) io_uring_enter(r1, 0x1d39, 0xcec, 0x0, 0x0, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240), &(0x7f0000001940), 0x2000cc0, r0}, 0x38) bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x1b, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240), 0x0, 0x2, r0}, 0x38) r5 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$int_in(r5, 0x5452, &(0x7f0000000280)=0x7) r6 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000100), 0x8000, 0x0) read(r6, &(0x7f00000001c0)=""/155, 0x9b) ioctl$TCSETSF2(r5, 0x402c542d, &(0x7f0000002ac0)={0x3, 0xf, 0x7ff, 0x8, 0x81, "0af24cdc7d28277c188f6e073db1d985660d49", 0x6, 0xe0000000}) ioctl$TIOCL_GETMOUSEREPORTING(r5, 0x5412, &(0x7f00000006c0)=0xa) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x4, &(0x7f0000000b00)=ANY=[@ANYBLOB="18010000010000000000000000"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r7 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB="0202000311000000000000000000000005000500000000000a00000000000000fe8000000000000000000000000000bb000000000000000002000100000007000000000b000000000200090000000000000000000000000005000600000000000a00000000000000fe8800000000000000000000000000010000000000000000010018"], 0x88}}, 0x0) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000240)={0xffffffffffffffff, &(0x7f00000001c0), &(0x7f0000000a00)=""/4096}, 0x20) r8 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$F2FS_IOC_GARBAGE_COLLECT_RANGE(r7, 0x4018f50b, &(0x7f0000000480)={0x0, 0x4, 0x2b}) writev(r8, &(0x7f0000001140)=[{&(0x7f0000000080)="e8dffca4c6d4d2e98f9cc9b328d6af2119132d166ca3a723cd22a5ddd579eba3465cc7dffdc146a44fd77efd531fb1361a5d9f1bcb754326924fa139b0c590859c59e1a3261de18296be90ab353f861e0c972f46e01bf2172424e000feb234b33f013776f7318572f148ad950694e81e5ed859981a96e689d6b9b7e5dcb4c91eee0ede74ceb923ef086f066c699190d44b3280645aa6e095c4e598e4e7e3e588947bc1c0e571ee3cf7882bd698a3dc1bfb9e4ad033b39ff742999c4648f8354ead4374d0e5e8a90d3075701d0a7e4de8151088d1be4285a511983fc7d935d867eb57818f0d262ccfe39ff25758a355c242cebe227c00ae77cb2a4eecc6607b6c3611b33700d0608ccde4141cad348f2ddf6d8f708d61030397a63d4b75df3ead6a18359fff9629b681b54ffbe141b28ece6737a1fd022544e7b9dd3f050ed1f3e46074f167ecf8aa5033002e08421592525d7174892a76731dbdfc740af777a98b4ab68ac707f412070c9a0bdd7a1ed1cc94fde0c67f21d29de52aa5da334f7ed1e6309def0f06baceb098fb338a11f7c88a05dd977d70072935a6d1e8859d09aed1ca950f89e8238b46c87bd61f41c2d966359534a3e3685aceb80652e6bb44b13e60b4d07e31b791a8f640b41ac3dfb3a92cc86f53732e42970e2f804c920fce94390a55cfbc9d3781bc8fa8ae9260f931f86b459cb61a2f61ba133c539fc8518656a0d7699335e4efd7ab62a9cd0e0bfeae1b6299a227d33241814d833f11172bc800fc3f316fde29b4253629fe6941908c05990b1257e068d78a100b153244bd0d9d2298d51b423778b8e34552be08befe8d6f918fc979b049b944fee1fd714f0138485c14050fe770244ab91991bcb960232d6e2bc135adea7084c91e652e9474faa20c2370a91be37ec48c6969dc7102fb12323699096fea49c1c40fae50a92d2bfb79ff07c5b9e0db116ea4aaa0de18abb101a10c476c47c72e0bd380c411dd2cc6b916d5b00764be9a3a041a1d0bd67a4ab6070870498ed3f57e39b1ed921efa8192437c9d480377c11021de424ff993b036658182d065a3728e3726dbbbf2dedc34d9aea35a3853b7186e9b679b5789537660d6cf81351fa497f77a527fce94040ca6d29d444f4b009b6b5422a0fc864381e443071ef18e5a0f91eac0c31f992cc5dbf5f6d2bf2f2e65cd570103df899ed10fa14690233f195eb188d0bcf6fe5ed01d5cae8dcdf7eed32cc16b00bf8e9a4c5facac4c32e603886783a9f1595fb95725ad7784a8ccb13658edcc653672fdc7500b2a875ae88d957f4ec9506369e80adc86cd0a9df28bd656620bc21db75671ec1cc4c22debd389172ff45768dfb2a514a819e17724414cdda015c1f1a4abe88cb3bbdbac", 0x3db}], 0x1) r9 = socket$nl_rdma(0x10, 0x3, 0x14) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000080)='kfree\x00', 0xffffffffffffffff, 0x0, 0x2}, 0x18) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r9, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)={0x38, 0x1403, 0x1, 0x70bd2d, 0x25dfdbff, "", [{{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'veth0_to_bridge\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x8081}, 0x20000010) sendmsg$NLBL_CIPSOV4_C_ADD(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000800)=ANY=[@ANYBLOB="84010000", @ANYRES16, @ANYBLOB="010000000000000000000100000004000480080002000100000008000100000000000400088058010c8054000b800800090000000000040009"], 0x184}}, 0x0) syz_genetlink_get_family_id$nl802154(&(0x7f0000000580), 0xffffffffffffffff) getpgrp(0xffffffffffffffff) socket$inet(0x2, 0xa, 0x6) 265.428345ms ago: executing program 2 (id=10455): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="07000000040000000001000001"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000bb00551a000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x18) r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0xa041, 0xd) fcntl$setlease(r2, 0x400, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000340)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) close(r2) unlinkat(0xffffffffffffff9c, &(0x7f0000000380)='./file1\x00', 0x0) 218.786549ms ago: executing program 2 (id=10456): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000280)={0x0, &(0x7f0000000780)}) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000800"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000480)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000030000850000001b000000b70000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x4a, '\x00', 0x0, @fallback=0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x18) fspick(0xffffffffffffffff, &(0x7f0000000800)='./file0\x00', 0x1) 129.009118ms ago: executing program 2 (id=10457): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x1, r0}, 0x38) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000019200)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r0], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kmem_cache_free\x00', r1, 0x0, 0xfffffffffffffffe}, 0x18) open_tree(0xffffffffffffffff, &(0x7f0000000140)='./file0\x00', 0x1) 128.461048ms ago: executing program 2 (id=10458): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000019200)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b7040000000000008500000001000000"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kmem_cache_free\x00', r1, 0x0, 0xfffffffffffffffe}, 0x18) open_tree(0xffffffffffffffff, &(0x7f0000000140)='./file0\x00', 0x1) 102.05535ms ago: executing program 2 (id=10459): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f00000001c0)={0x1, &(0x7f0000000200)=[{0x200000000006, 0x0, 0x0, 0x7ffc0001}]}) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000019200)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kmem_cache_free\x00', r1, 0x0, 0xfffffffffffffffe}, 0x18) setregid(0x0, 0x0) 65.682334ms ago: executing program 2 (id=10460): perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x3, @perf_bp={0x0, 0x6}, 0x4, 0x9, 0xfff, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@RTM_NEWMDB={0x18, 0x54, 0x1e5}, 0x18}, 0x1, 0x0, 0x0, 0x4}, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="010000000600100004012200a4e20000010000", @ANYBLOB], 0x48) r1 = syz_io_uring_setup(0x73d3, &(0x7f0000000680)={0x0, 0x10007d89, 0x10100, 0x3, 0x85}, &(0x7f0000000540)=0x0, &(0x7f0000000700)=0x0) r4 = io_uring_register$IORING_REGISTER_PERSONALITY(r1, 0x9, 0x0, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000180)=@IORING_OP_READ_FIXED={0x4, 0x40, 0x4000, @fd_index=0x6, 0x3, 0x8003, 0x6, 0x3, 0x0, {0x3, r4}}) io_uring_enter(r1, 0x1d39, 0xcec, 0x0, 0x0, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240), &(0x7f0000001940), 0x2000cc0, r0}, 0x38) bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x1b, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240), 0x0, 0x2, r0}, 0x38) r5 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$int_in(r5, 0x5452, &(0x7f0000000280)=0x7) ioctl$TCSETSF2(r5, 0x402c542d, &(0x7f0000002ac0)={0x3, 0xf, 0x7ff, 0x8, 0x81, "0af24cdc7d28277c188f6e073db1d985660d49", 0x6, 0xe0000000}) ioctl$TIOCL_GETMOUSEREPORTING(r5, 0x5412, &(0x7f00000006c0)=0xa) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x4, &(0x7f0000000b00)=ANY=[@ANYBLOB="18010000010000000000000000"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r6 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB="0202000311000000000000000000000005000500000000000a00000000000000fe8000000000000000000000000000bb000000000000000002000100000007000000000b000000000200090000000000000000000000000005000600000000000a00000000000000fe8800000000000000000000000000010000000000000000010018"], 0x88}}, 0x0) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000240)={0xffffffffffffffff, &(0x7f00000001c0), &(0x7f0000000a00)=""/4096}, 0x20) r7 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$F2FS_IOC_GARBAGE_COLLECT_RANGE(r6, 0x4018f50b, &(0x7f0000000480)={0x0, 0x4, 0x2b}) writev(r7, &(0x7f0000001140)=[{&(0x7f0000000080)="e8dffca4c6d4d2e98f9cc9b328d6af2119132d166ca3a723cd22a5ddd579eba3465cc7dffdc146a44fd77efd531fb1361a5d9f1bcb754326924fa139b0c590859c59e1a3261de18296be90ab353f861e0c972f46e01bf2172424e000feb234b33f013776f7318572f148ad950694e81e5ed859981a96e689d6b9b7e5dcb4c91eee0ede74ceb923ef086f066c699190d44b3280645aa6e095c4e598e4e7e3e588947bc1c0e571ee3cf7882bd698a3dc1bfb9e4ad033b39ff742999c4648f8354ead4374d0e5e8a90d3075701d0a7e4de8151088d1be4285a511983fc7d935d867eb57818f0d262ccfe39ff25758a355c242cebe227c00ae77cb2a4eecc6607b6c3611b33700d0608ccde4141cad348f2ddf6d8f708d61030397a63d4b75df3ead6a18359fff9629b681b54ffbe141b28ece6737a1fd022544e7b9dd3f050ed1f3e46074f167ecf8aa5033002e08421592525d7174892a76731dbdfc740af777a98b4ab68ac707f412070c9a0bdd7a1ed1cc94fde0c67f21d29de52aa5da334f7ed1e6309def0f06baceb098fb338a11f7c88a05dd977d70072935a6d1e8859d09aed1ca950f89e8238b46c87bd61f41c2d966359534a3e3685aceb80652e6bb44b13e60b4d07e31b791a8f640b41ac3dfb3a92cc86f53732e42970e2f804c920fce94390a55cfbc9d3781bc8fa8ae9260f931f86b459cb61a2f61ba133c539fc8518656a0d7699335e4efd7ab62a9cd0e0bfeae1b6299a227d33241814d833f11172bc800fc3f316fde29b4253629fe6941908c05990b1257e068d78a100b153244bd0d9d2298d51b423778b8e34552be08befe8d6f918fc979b049b944fee1fd714f0138485c14050fe770244ab91991bcb960232d6e2bc135adea7084c91e652e9474faa20c2370a91be37ec48c6969dc7102fb12323699096fea49c1c40fae50a92d2bfb79ff07c5b9e0db116ea4aaa0de18abb101a10c476c47c72e0bd380c411dd2cc6b916d5b00764be9a3a041a1d0bd67a4ab6070870498ed3f57e39b1ed921efa8192437c9d480377c11021de424ff993b036658182d065a3728e3726dbbbf2dedc34d9aea35a3853b7186e9b679b5789537660d6cf81351fa497f77a527fce94040ca6d29d444f4b009b6b5422a0fc864381e443071ef18e5a0f91eac0c31f992cc5dbf5f6d2bf2f2e65cd570103df899ed10fa14690233f195eb188d0bcf6fe5ed01d5cae8dcdf7eed32cc16b00bf8e9a4c5facac4c32e603886783a9f1595fb95725ad7784a8ccb13658edcc653672fdc7500b2a875ae88d957f4ec9506369e80adc86cd0a9df28bd656620bc21db75671ec1cc4c22debd389172ff45768dfb2a514a819e17724414cdda015c1f1a4abe88cb3bbdbac", 0x3db}], 0x1) r8 = socket$nl_rdma(0x10, 0x3, 0x14) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000080)='kfree\x00', 0xffffffffffffffff, 0x0, 0x2}, 0x18) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r8, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)={0x38, 0x1403, 0x1, 0x70bd2d, 0x25dfdbff, "", [{{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'veth0_to_bridge\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x8081}, 0x20000010) sendmsg$NLBL_CIPSOV4_C_ADD(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000800)=ANY=[@ANYBLOB="84010000", @ANYRES16, @ANYBLOB="010000000000000000000100000004000480080002000100000008000100000000000400088058010c8054000b800800090000000000040009"], 0x184}}, 0x0) syz_genetlink_get_family_id$nl802154(&(0x7f0000000580), 0xffffffffffffffff) getpgrp(0xffffffffffffffff) socket$inet(0x2, 0xa, 0x6) 4.12492ms ago: executing program 3 (id=10461): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@bloom_filter={0x1e, 0x2, 0xfffffffa, 0x80000001, 0x29200, 0xffffffffffffffff, 0xffff, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x1, 0x4}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x21, 0x13, &(0x7f0000000080)=ANY=[@ANYRESDEC=r0, @ANYRES16=r0, @ANYRESHEX=r0], &(0x7f0000000180)='syzkaller\x00', 0x401, 0x0, 0x0, 0x40f00, 0x1, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x8, &(0x7f0000000440)={0xa, 0x4}, 0x8, 0x10, &(0x7f0000000480)={0xffffffff, 0x9, 0x6, 0xffffffff}, 0x10, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, &(0x7f00000001c0)=[0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x1, r0], &(0x7f0000000500)}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB], 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) bind$tipc(0xffffffffffffffff, 0x0, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$MAP_CREATE(0x0, &(0x7f0000000980)=ANY=[@ANYRES32=r1], 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) setitimer(0x1, &(0x7f0000000100)={{r3, r4/1000+60000}}, &(0x7f0000000200)) sendmsg$NFT_MSG_GETOBJ(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)=ANY=[@ANYBLOB="34000000150a03"], 0x34}, 0x1, 0x0, 0x0, 0x66df5cfbe53006d1}, 0x0) 0s ago: executing program 3 (id=10462): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) epoll_pwait2(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r0, 0xffffffffffffffff}, 0x4) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) io_uring_setup(0x22625, 0x0) syz_clone3(&(0x7f0000001040)={0x20400, 0x0, 0x0, 0x0, {0x1a}, 0x0, 0x0, 0x0, &(0x7f0000001000)=[0x0], 0x1}, 0x58) readv(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000580)=""/244, 0xf4}], 0x1) r2 = signalfd4(0xffffffffffffffff, &(0x7f0000000000)={[0xfffffffffffffffb]}, 0x8, 0x0) readv(r2, &(0x7f0000000ec0)=[{&(0x7f0000001380)=""/4096, 0x1000}], 0x1) r3 = socket$can_bcm(0x1d, 0x2, 0x2) sendmsg$can_bcm(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000400)=ANY=[@ANYRES8=r1], 0x48}}, 0x2004c800) timer_create(0x7, &(0x7f00000000c0)={0x0, 0x12}, &(0x7f0000000280)) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) r5 = open(&(0x7f00009e1000)='./file0\x00', 0x60840, 0x0) syz_emit_ethernet(0x56, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaa00000001000008004d1e00bb1a6fb0441c0fc10a01010100000005ac14d4e23e91431cf661080000000002004e224e22", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="50c2000290781e83"], 0x0) fcntl$setsig(r5, 0xa, 0x13) fcntl$setlease(r5, 0x400, 0x1) timer_settime(0x0, 0x0, &(0x7f0000000180)={{}, {0x0, 0x1c9c380}}, 0x0) truncate(&(0x7f0000000040)='./file0\x00', 0x200000) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000003c0)='./file1\x00', 0x1c, &(0x7f0000000700)={[{@nombcache}, {@nomblk_io_submit}, {@data_err_ignore}, {@nomblk_io_submit}, {@noblock_validity}, {@jqfmt_vfsv1}]}, 0x3, 0x44f, &(0x7f00000010c0)="$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") bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYRESOCT=r4], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000004c0)={0x3, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x37, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x26e1, 0x0) perf_event_open(&(0x7f0000000000)={0x8, 0x80, 0x0, 0x0, 0x0, 0x2, 0x0, 0x100000001, 0x41a40, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000000)={0x8, 0x80, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x30046, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x400}, 0x0, 0x0, 0xffffffffffffffff, 0x0) kernel console output (not intermixed with test programs): 82] memory: usage 307200kB, limit 307200kB, failcnt 2291 [ 705.488889][T29182] memory+swap: usage 315284kB, limit 9007199254740988kB, failcnt 0 [ 705.496774][T29182] kmem: usage 302976kB, limit 9007199254740988kB, failcnt 0 [ 705.504049][T29182] Memory cgroup stats for /syz2: [ 705.504741][T29182] cache 0 [ 705.505032][T27470] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 705.509671][T29182] rss 4325376 [ 705.509681][T29182] shmem 0 [ 705.527832][T29182] mapped_file 0 [ 705.531301][T29182] dirty 0 [ 705.534233][T29182] writeback 0 [ 705.537504][T29182] workingset_refault_anon 147 [ 705.542314][T29182] workingset_refault_file 1130 [ 705.547077][T29182] swap 8278016 [ 705.550463][T29182] swapcached 0 [ 705.553822][T29182] pgpgin 1006404 [ 705.557351][T29182] pgpgout 1005348 [ 705.561008][T29182] pgfault 852948 [ 705.564569][T29182] pgmajfault 86 [ 705.568075][T29182] inactive_anon 0 [ 705.571730][T29182] active_anon 0 [ 705.575179][T29182] inactive_file 4325376 [ 705.579334][T29182] active_file 0 [ 705.582819][T29182] unevictable 0 [ 705.586332][T29182] hierarchical_memory_limit 314572800 [ 705.591764][T29182] hierarchical_memsw_limit 9223372036854771712 [ 705.597905][T29182] total_cache 0 [ 705.601364][T29182] total_rss 4325376 [ 705.605188][T29182] total_shmem 0 [ 705.608687][T29182] total_mapped_file 0 [ 705.612678][T29182] total_dirty 0 [ 705.616209][T29182] total_writeback 0 [ 705.620001][T29182] total_workingset_refault_anon 147 [ 705.625381][T29182] total_workingset_refault_file 1130 [ 705.630749][T29182] total_swap 8278016 [ 705.634687][T29182] total_swapcached 0 [ 705.638565][T29182] total_pgpgin 1006404 [ 705.642631][T29182] total_pgpgout 1005348 [ 705.646773][T29182] total_pgfault 852948 [ 705.650839][T29182] total_pgmajfault 86 [ 705.654860][T29182] total_inactive_anon 0 [ 705.659049][T29182] total_active_anon 0 [ 705.663032][T29182] total_inactive_file 4325376 [ 705.667699][T29182] total_active_file 0 [ 705.671686][T29182] total_unevictable 0 [ 705.675653][T29182] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz2,task_memcg=/syz2,task=syz.2.9017,pid=29181,uid=0 [ 705.690468][T29182] Memory cgroup out of memory: Killed process 29181 (syz.2.9017) total-vm:96148kB, anon-rss:5488kB, file-rss:22324kB, shmem-rss:0kB, UID:0 pgtables:148kB oom_score_adj:1000 [ 706.067439][T29312] team0: No ports can be present during mode change [ 706.080720][T29310] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1794 sclass=netlink_route_socket pid=29310 comm=syz.3.9062 [ 706.096365][T29310] FAULT_INJECTION: forcing a failure. [ 706.096365][T29310] name failslab, interval 1, probability 0, space 0, times 0 [ 706.109133][T29310] CPU: 1 UID: 0 PID: 29310 Comm: syz.3.9062 Not tainted syzkaller #0 PREEMPT(voluntary) [ 706.109162][T29310] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 706.109177][T29310] Call Trace: [ 706.109184][T29310] [ 706.109193][T29310] __dump_stack+0x1d/0x30 [ 706.109236][T29310] dump_stack_lvl+0xe8/0x140 [ 706.109280][T29310] dump_stack+0x15/0x1b [ 706.109300][T29310] should_fail_ex+0x265/0x280 [ 706.109352][T29310] should_failslab+0x8c/0xb0 [ 706.109387][T29310] __kmalloc_node_track_caller_noprof+0xb9/0x5b0 [ 706.109421][T29310] ? sidtab_sid2str_get+0xa0/0x130 [ 706.109542][T29310] kmemdup_noprof+0x2b/0x70 [ 706.109561][T29310] sidtab_sid2str_get+0xa0/0x130 [ 706.109594][T29310] security_sid_to_context_core+0x1eb/0x2e0 [ 706.109657][T29310] security_sid_to_context+0x27/0x40 [ 706.109691][T29310] selinux_lsmprop_to_secctx+0x67/0xf0 [ 706.109820][T29310] security_lsmprop_to_secctx+0x1a3/0x1c0 [ 706.109846][T29310] audit_log_subj_ctx+0xa4/0x3e0 [ 706.109942][T29310] ? skb_put+0xa9/0xf0 [ 706.109969][T29310] audit_log_task_context+0x48/0x70 [ 706.109993][T29310] audit_log_task+0xf4/0x250 [ 706.110031][T29310] ? kstrtouint+0x76/0xc0 [ 706.110115][T29310] audit_seccomp+0x61/0x100 [ 706.110154][T29310] ? __seccomp_filter+0x832/0x1260 [ 706.110183][T29310] __seccomp_filter+0x843/0x1260 [ 706.110238][T29310] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 706.110274][T29310] ? vfs_write+0x7e8/0x960 [ 706.110292][T29310] ? __rcu_read_unlock+0x4f/0x70 [ 706.110322][T29310] ? __fget_files+0x184/0x1c0 [ 706.110353][T29310] __secure_computing+0x82/0x150 [ 706.110386][T29310] syscall_trace_enter+0xcf/0x1e0 [ 706.110475][T29310] do_syscall_64+0xb2/0x2c0 [ 706.110520][T29310] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 706.110564][T29310] RIP: 0033:0x7f37506cf749 [ 706.110579][T29310] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 706.110600][T29310] RSP: 002b:00007f374f137038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 706.110623][T29310] RAX: ffffffffffffffda RBX: 00007f3750925fa0 RCX: 00007f37506cf749 [ 706.110639][T29310] RDX: 0000000000000810 RSI: 0000200000000240 RDI: 0000000000000007 [ 706.110655][T29310] RBP: 00007f374f137090 R08: 0000000000000000 R09: 0000000000000000 [ 706.110727][T29310] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 706.110789][T29310] R13: 00007f3750926038 R14: 00007f3750925fa0 R15: 00007fffbac494f8 [ 706.110813][T29310] [ 706.373340][T29310] lo speed is unknown, defaulting to 1000 [ 706.379084][T29310] lo speed is unknown, defaulting to 1000 [ 706.388841][T29310] lo speed is unknown, defaulting to 1000 [ 706.399616][T29310] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 706.410478][T29310] lo speed is unknown, defaulting to 1000 [ 706.416683][T29310] lo speed is unknown, defaulting to 1000 [ 706.423025][T29310] lo speed is unknown, defaulting to 1000 [ 706.429191][T29310] lo speed is unknown, defaulting to 1000 [ 706.473456][T29310] lo speed is unknown, defaulting to 1000 [ 706.479524][T29310] lo speed is unknown, defaulting to 1000 [ 706.515884][T29310] lo speed is unknown, defaulting to 1000 [ 706.523891][T29310] lo speed is unknown, defaulting to 1000 [ 706.902494][T29287] Set syz1 is full, maxelem 65536 reached [ 706.969104][T29328] lo speed is unknown, defaulting to 1000 [ 707.031879][T29328] lo speed is unknown, defaulting to 1000 [ 707.065653][T29329] loop3: detected capacity change from 0 to 2048 [ 707.121276][T29329] Alternate GPT is invalid, using primary GPT. [ 707.127607][T29329] loop3: p1 p2 p3 [ 707.131388][T29329] loop3: partition table partially beyond EOD, truncated [ 707.229704][T29340] openvswitch: netlink: Missing key (keys=40, expected=200000) [ 707.240397][T29337] openvswitch: netlink: Missing key (keys=40, expected=200000) [ 707.281070][T29349] openvswitch: netlink: Missing key (keys=40, expected=200000) [ 707.283657][T29346] loop1: detected capacity change from 0 to 128 [ 707.307242][T29352] netlink: 68 bytes leftover after parsing attributes in process `syz.4.9080'. [ 707.368027][T29362] netlink: 8 bytes leftover after parsing attributes in process `syz.0.9084'. [ 707.376994][T29362] netlink: 24 bytes leftover after parsing attributes in process `syz.0.9084'. [ 707.411126][T29346] syz.1.9079: attempt to access beyond end of device [ 707.411126][T29346] loop1: rw=2049, sector=169, nr_sectors = 8 limit=128 [ 707.438113][T29346] syz.1.9079: attempt to access beyond end of device [ 707.438113][T29346] loop1: rw=2049, sector=185, nr_sectors = 16 limit=128 [ 707.462490][T29346] syz.1.9079: attempt to access beyond end of device [ 707.462490][T29346] loop1: rw=2049, sector=209, nr_sectors = 8 limit=128 [ 707.476275][T29346] syz.1.9079: attempt to access beyond end of device [ 707.476275][T29346] loop1: rw=2049, sector=225, nr_sectors = 8 limit=128 [ 707.490376][T29346] syz.1.9079: attempt to access beyond end of device [ 707.490376][T29346] loop1: rw=2049, sector=241, nr_sectors = 8 limit=128 [ 707.530568][T29346] syz.1.9079: attempt to access beyond end of device [ 707.530568][T29346] loop1: rw=2049, sector=257, nr_sectors = 8 limit=128 [ 707.550994][T29346] syz.1.9079: attempt to access beyond end of device [ 707.550994][T29346] loop1: rw=2049, sector=273, nr_sectors = 8 limit=128 [ 707.564869][T29346] syz.1.9079: attempt to access beyond end of device [ 707.564869][T29346] loop1: rw=2049, sector=289, nr_sectors = 8 limit=128 [ 707.578492][T29346] syz.1.9079: attempt to access beyond end of device [ 707.578492][T29346] loop1: rw=2049, sector=305, nr_sectors = 8 limit=128 [ 707.592360][T29346] syz.1.9079: attempt to access beyond end of device [ 707.592360][T29346] loop1: rw=2049, sector=321, nr_sectors = 8 limit=128 [ 707.647476][T29375] openvswitch: netlink: Missing key (keys=40, expected=200000) [ 707.696855][T29381] netlink: 68 bytes leftover after parsing attributes in process `syz.3.9091'. [ 707.723528][T29385] netlink: 68 bytes leftover after parsing attributes in process `syz.0.9095'. [ 707.784745][T29390] loop3: detected capacity change from 0 to 2048 [ 707.812944][T29390] EXT4-fs (loop3): failed to initialize system zone (-117) [ 707.820255][T29390] EXT4-fs (loop3): mount failed [ 707.857915][T29401] team0: No ports can be present during mode change [ 707.866372][T29399] loop1: detected capacity change from 0 to 2048 [ 707.883790][T29399] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 707.926404][T29403] loop3: detected capacity change from 0 to 512 [ 707.949136][T23178] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 707.972617][T29403] EXT4-fs (loop3): revision level too high, forcing read-only mode [ 707.992615][T29403] EXT4-fs (loop3): orphan cleanup on readonly fs [ 708.001448][T29403] EXT4-fs error (device loop3): ext4_do_update_inode:5617: inode #16: comm syz.3.9102: corrupted inode contents [ 708.024242][T29415] netlink: 60 bytes leftover after parsing attributes in process `syz.0.9104'. [ 708.027343][T29403] EXT4-fs (loop3): Remounting filesystem read-only [ 708.039961][T29403] EXT4-fs (loop3): 1 truncate cleaned up [ 708.045800][T20997] EXT4-fs (loop3): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 708.056370][T20997] EXT4-fs (loop3): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 708.067787][T20997] EXT4-fs (loop3): Quota write (off=8, len=24) cancelled because transaction is not started [ 708.078649][T29403] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 708.103960][T27470] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 708.122408][T29417] team0: No ports can be present during mode change [ 708.194699][T29419] loop3: detected capacity change from 0 to 128 [ 708.329730][T29437] serio: Serial port ttyS3 [ 708.409869][T29441] loop3: detected capacity change from 0 to 512 [ 708.423337][T29441] EXT4-fs (loop3): revision level too high, forcing read-only mode [ 708.432135][T29441] EXT4-fs (loop3): orphan cleanup on readonly fs [ 708.441561][T29441] EXT4-fs error (device loop3): ext4_do_update_inode:5617: inode #16: comm syz.3.9116: corrupted inode contents [ 708.453794][T29441] EXT4-fs (loop3): Remounting filesystem read-only [ 708.460708][T29441] EXT4-fs (loop3): 1 truncate cleaned up [ 708.466852][T20997] EXT4-fs (loop3): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 708.477536][T20997] EXT4-fs (loop3): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 708.488126][T20997] EXT4-fs (loop3): Quota write (off=8, len=24) cancelled because transaction is not started [ 708.498883][T29441] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 708.541140][T27470] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 708.730110][T29478] lo speed is unknown, defaulting to 1000 [ 708.832352][T29486] xt_CT: You must specify a L4 protocol and not use inversions on it [ 708.856123][T29486] __nla_validate_parse: 2 callbacks suppressed [ 708.856161][T29486] netlink: 16 bytes leftover after parsing attributes in process `syz.3.9134'. [ 708.892770][T29478] lo speed is unknown, defaulting to 1000 [ 709.189784][ T29] kauditd_printk_skb: 336 callbacks suppressed [ 709.189800][ T29] audit: type=1326 audit(1766280523.218:41626): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29498 comm="syz.4.9138" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9aa84ff749 code=0x7ffc0000 [ 709.220117][ T29] audit: type=1326 audit(1766280523.218:41627): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29498 comm="syz.4.9138" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9aa84ff749 code=0x7ffc0000 [ 709.243912][ T29] audit: type=1326 audit(1766280523.218:41628): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29498 comm="syz.4.9138" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f9aa84ff749 code=0x7ffc0000 [ 709.267557][ T29] audit: type=1326 audit(1766280523.218:41629): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29498 comm="syz.4.9138" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9aa84ff749 code=0x7ffc0000 [ 709.290672][T29500] loop1: detected capacity change from 0 to 764 [ 709.291167][ T29] audit: type=1326 audit(1766280523.218:41630): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29498 comm="syz.4.9138" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9aa84ff749 code=0x7ffc0000 [ 709.320867][ T29] audit: type=1326 audit(1766280523.218:41631): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29498 comm="syz.4.9138" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f9aa84ff749 code=0x7ffc0000 [ 709.344563][ T29] audit: type=1326 audit(1766280523.218:41632): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29498 comm="syz.4.9138" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9aa84ff749 code=0x7ffc0000 [ 709.368163][ T29] audit: type=1326 audit(1766280523.218:41633): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29498 comm="syz.4.9138" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9aa84ff749 code=0x7ffc0000 [ 709.391745][ T29] audit: type=1326 audit(1766280523.218:41634): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29498 comm="syz.4.9138" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f9aa84ff749 code=0x7ffc0000 [ 709.415397][ T29] audit: type=1326 audit(1766280523.218:41635): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29498 comm="syz.4.9138" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9aa84ff749 code=0x7ffc0000 [ 709.440078][T29500] rock: directory entry would overflow storage [ 709.446284][T29500] rock: sig=0x5245, size=8, remaining=5 [ 709.484839][T29506] netlink: 36 bytes leftover after parsing attributes in process `syz.0.9141'. [ 709.527184][T29510] lo speed is unknown, defaulting to 1000 [ 709.595740][T29513] netlink: 32 bytes leftover after parsing attributes in process `syz.0.9143'. [ 709.621067][T29510] lo speed is unknown, defaulting to 1000 [ 709.795503][T29523] loop3: detected capacity change from 0 to 512 [ 709.803085][T29523] EXT4-fs: Ignoring removed nomblk_io_submit option [ 709.810010][T29523] EXT4-fs: Ignoring removed nomblk_io_submit option [ 709.816965][T29523] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 709.827865][T29523] EXT4-fs (loop3): 1 truncate cleaned up [ 709.833949][T29523] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 709.884828][T29527] serio: Serial port ttyS3 [ 710.103915][T29537] openvswitch: netlink: Missing key (keys=40, expected=200000) [ 710.616000][T27470] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 710.740077][T29562] FAULT_INJECTION: forcing a failure. [ 710.740077][T29562] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 710.753215][T29562] CPU: 1 UID: 0 PID: 29562 Comm: syz.3.9159 Not tainted syzkaller #0 PREEMPT(voluntary) [ 710.753247][T29562] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 710.753262][T29562] Call Trace: [ 710.753305][T29562] [ 710.753315][T29562] __dump_stack+0x1d/0x30 [ 710.753341][T29562] dump_stack_lvl+0xe8/0x140 [ 710.753424][T29562] dump_stack+0x15/0x1b [ 710.753448][T29562] should_fail_ex+0x265/0x280 [ 710.753539][T29562] should_fail+0xb/0x20 [ 710.753564][T29562] should_fail_usercopy+0x1a/0x20 [ 710.753594][T29562] _copy_to_user+0x20/0xa0 [ 710.753625][T29562] simple_read_from_buffer+0xb5/0x130 [ 710.753654][T29562] proc_fail_nth_read+0x10e/0x150 [ 710.753808][T29562] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 710.753851][T29562] vfs_read+0x1a8/0x770 [ 710.753874][T29562] ? __cond_resched+0x4e/0x90 [ 710.753939][T29562] ? mutex_lock+0x58/0x90 [ 710.753973][T29562] ksys_read+0xda/0x1a0 [ 710.753996][T29562] __x64_sys_read+0x40/0x50 [ 710.754077][T29562] x64_sys_call+0x2889/0x3000 [ 710.754108][T29562] do_syscall_64+0xd8/0x2c0 [ 710.754242][T29562] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 710.754278][T29562] RIP: 0033:0x7f37506ce15c [ 710.754355][T29562] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 710.754374][T29562] RSP: 002b:00007f374f137030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 710.754394][T29562] RAX: ffffffffffffffda RBX: 00007f3750925fa0 RCX: 00007f37506ce15c [ 710.754483][T29562] RDX: 000000000000000f RSI: 00007f374f1370a0 RDI: 0000000000000003 [ 710.754567][T29562] RBP: 00007f374f137090 R08: 0000000000000000 R09: 0000000000000000 [ 710.754583][T29562] R10: 000000000000002a R11: 0000000000000246 R12: 0000000000000001 [ 710.754598][T29562] R13: 00007f3750926038 R14: 00007f3750925fa0 R15: 00007fffbac494f8 [ 710.754617][T29562] [ 711.127313][T29578] FAULT_INJECTION: forcing a failure. [ 711.127313][T29578] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 711.140505][T29578] CPU: 1 UID: 0 PID: 29578 Comm: syz.3.9166 Not tainted syzkaller #0 PREEMPT(voluntary) [ 711.140540][T29578] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 711.140557][T29578] Call Trace: [ 711.140565][T29578] [ 711.140574][T29578] __dump_stack+0x1d/0x30 [ 711.140599][T29578] dump_stack_lvl+0xe8/0x140 [ 711.140622][T29578] dump_stack+0x15/0x1b [ 711.140648][T29578] should_fail_ex+0x265/0x280 [ 711.140694][T29578] should_fail+0xb/0x20 [ 711.140731][T29578] should_fail_usercopy+0x1a/0x20 [ 711.140761][T29578] strncpy_from_user+0x27/0x260 [ 711.140833][T29578] getname_flags+0xae/0x3b0 [ 711.140863][T29578] do_mq_open+0xbd/0x4c0 [ 711.140903][T29578] ? __fget_files+0x184/0x1c0 [ 711.140964][T29578] __x64_sys_mq_open+0xcb/0x100 [ 711.141007][T29578] x64_sys_call+0x843/0x3000 [ 711.141113][T29578] do_syscall_64+0xd8/0x2c0 [ 711.141154][T29578] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 711.141178][T29578] RIP: 0033:0x7f37506cf749 [ 711.141218][T29578] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 711.141236][T29578] RSP: 002b:00007f374f137038 EFLAGS: 00000246 ORIG_RAX: 00000000000000f0 [ 711.141256][T29578] RAX: ffffffffffffffda RBX: 00007f3750925fa0 RCX: 00007f37506cf749 [ 711.141270][T29578] RDX: 0000000000000136 RSI: 0000000000000002 RDI: 0000200000000780 [ 711.141286][T29578] RBP: 00007f374f137090 R08: 0000000000000000 R09: 0000000000000000 [ 711.141339][T29578] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 711.141354][T29578] R13: 00007f3750926038 R14: 00007f3750925fa0 R15: 00007fffbac494f8 [ 711.141375][T29578] [ 711.388383][T29589] netlink: 56 bytes leftover after parsing attributes in process `syz.1.9172'. [ 711.391953][T29585] serio: Serial port ttyS3 [ 711.402077][T29590] netlink: 56 bytes leftover after parsing attributes in process `syz.1.9172'. [ 711.468401][T29589] xt_hashlimit: max too large, truncated to 1048576 [ 711.538906][T29608] 9p: Bad value for 'rfdno' [ 712.270528][T29610] FAULT_INJECTION: forcing a failure. [ 712.270528][T29610] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 712.283701][T29610] CPU: 0 UID: 0 PID: 29610 Comm: syz.1.9178 Not tainted syzkaller #0 PREEMPT(voluntary) [ 712.283733][T29610] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 712.283795][T29610] Call Trace: [ 712.283801][T29610] [ 712.283808][T29610] __dump_stack+0x1d/0x30 [ 712.283837][T29610] dump_stack_lvl+0xe8/0x140 [ 712.283866][T29610] dump_stack+0x15/0x1b [ 712.283891][T29610] should_fail_ex+0x265/0x280 [ 712.283920][T29610] should_fail+0xb/0x20 [ 712.284006][T29610] should_fail_usercopy+0x1a/0x20 [ 712.284032][T29610] strncpy_from_user+0x27/0x260 [ 712.284070][T29610] getname_flags+0xae/0x3b0 [ 712.284146][T29610] do_sys_openat2+0x60/0x150 [ 712.284233][T29610] __x64_sys_openat+0xf2/0x120 [ 712.284266][T29610] x64_sys_call+0x2b07/0x3000 [ 712.284305][T29610] do_syscall_64+0xd8/0x2c0 [ 712.284342][T29610] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 712.284432][T29610] RIP: 0033:0x7fb90844df90 [ 712.284448][T29610] Code: 48 89 44 24 20 75 93 44 89 54 24 0c e8 69 95 02 00 44 8b 54 24 0c 89 da 48 89 ee 41 89 c0 bf 9c ff ff ff b8 01 01 00 00 0f 05 <48> 3d 00 f0 ff ff 77 38 44 89 c7 89 44 24 0c e8 bc 95 02 00 8b 44 [ 712.284468][T29610] RSP: 002b:00007fb906e6cb70 EFLAGS: 00000293 ORIG_RAX: 0000000000000101 [ 712.284488][T29610] RAX: ffffffffffffffda RBX: 0000000000041301 RCX: 00007fb90844df90 [ 712.284502][T29610] RDX: 0000000000041301 RSI: 00007fb906e6cc10 RDI: 00000000ffffff9c [ 712.284515][T29610] RBP: 00007fb906e6cc10 R08: 0000000000000000 R09: 0000000000000000 [ 712.284528][T29610] R10: 0000000000000000 R11: 0000000000000293 R12: cccccccccccccccd [ 712.284551][T29610] R13: 00007fb9086a6218 R14: 00007fb9086a6180 R15: 00007ffee27c88e8 [ 712.284570][T29610] [ 712.649478][T29633] loop3: detected capacity change from 0 to 2048 [ 712.680215][T29633] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 712.689458][T29641] serio: Serial port ttyS3 [ 712.721215][T27470] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 712.875108][T29646] loop3: detected capacity change from 0 to 512 [ 712.881892][T29646] EXT4-fs: Ignoring removed nomblk_io_submit option [ 712.888617][T29646] EXT4-fs: Ignoring removed nomblk_io_submit option [ 712.895674][T29646] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 712.906781][T29646] EXT4-fs (loop3): 1 truncate cleaned up [ 712.913408][T29646] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 712.929966][T29651] xt_CT: You must specify a L4 protocol and not use inversions on it [ 712.941039][T29651] netlink: 16 bytes leftover after parsing attributes in process `syz.4.9193'. [ 713.544476][T29677] netlink: 68 bytes leftover after parsing attributes in process `syz.2.9204'. [ 713.585102][T27470] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 713.606589][T29681] netlink: 60 bytes leftover after parsing attributes in process `syz.1.9206'. [ 713.932395][T29708] lo speed is unknown, defaulting to 1000 [ 713.982002][T29715] loop1: detected capacity change from 0 to 2048 [ 713.997872][T29708] lo speed is unknown, defaulting to 1000 [ 714.041601][T29715] Alternate GPT is invalid, using primary GPT. [ 714.047985][T29715] loop1: p1 p2 p3 [ 714.051889][T29715] loop1: partition table partially beyond EOD, truncated [ 714.541587][ T29] kauditd_printk_skb: 429 callbacks suppressed [ 714.541601][ T29] audit: type=1326 audit(1766280528.578:42065): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29735 comm="syz.0.9225" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f788621f749 code=0x7ffc0000 [ 714.573142][ T29] audit: type=1326 audit(1766280528.578:42066): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29735 comm="syz.0.9225" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f788621f749 code=0x7ffc0000 [ 714.597507][ T29] audit: type=1326 audit(1766280528.578:42067): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29735 comm="syz.0.9225" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f788621f749 code=0x7ffc0000 [ 714.621136][ T29] audit: type=1326 audit(1766280528.578:42068): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29735 comm="syz.0.9225" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f788621f749 code=0x7ffc0000 [ 714.644817][ T29] audit: type=1326 audit(1766280528.578:42069): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29735 comm="syz.0.9225" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f788621f749 code=0x7ffc0000 [ 714.668485][ T29] audit: type=1326 audit(1766280528.578:42070): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29735 comm="syz.0.9225" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f788621f749 code=0x7ffc0000 [ 714.692120][ T29] audit: type=1326 audit(1766280528.578:42071): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29735 comm="syz.0.9225" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f788621f749 code=0x7ffc0000 [ 714.715788][ T29] audit: type=1326 audit(1766280528.578:42072): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29735 comm="syz.0.9225" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f788621f749 code=0x7ffc0000 [ 714.739486][ T29] audit: type=1326 audit(1766280528.578:42073): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29735 comm="syz.0.9225" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f788621f749 code=0x7ffc0000 [ 714.763077][ T29] audit: type=1326 audit(1766280528.578:42074): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29735 comm="syz.0.9225" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f788621f749 code=0x7ffc0000 [ 714.854538][T29739] netlink: 60 bytes leftover after parsing attributes in process `syz.2.9226'. [ 715.161518][T29767] loop3: detected capacity change from 0 to 512 [ 715.175193][T29768] loop1: detected capacity change from 0 to 2048 [ 715.202785][T29768] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 715.210498][T29767] EXT4-fs (loop3): revision level too high, forcing read-only mode [ 715.223989][T29767] EXT4-fs (loop3): orphan cleanup on readonly fs [ 715.248219][T23178] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 715.255210][T29767] EXT4-fs error (device loop3): ext4_do_update_inode:5617: inode #16: comm syz.3.9229: corrupted inode contents [ 715.269478][T29767] EXT4-fs (loop3): Remounting filesystem read-only [ 715.276126][T29767] EXT4-fs (loop3): 1 truncate cleaned up [ 715.281954][T21005] EXT4-fs (loop3): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 715.292588][T21005] EXT4-fs (loop3): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 715.304000][T21005] EXT4-fs (loop3): Quota write (off=8, len=24) cancelled because transaction is not started [ 715.315411][T29767] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 715.368047][T27470] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 715.379836][T29785] netlink: 60 bytes leftover after parsing attributes in process `syz.0.9243'. [ 715.398925][T29792] netlink: 60 bytes leftover after parsing attributes in process `syz.2.9244'. [ 715.542905][T29804] loop3: detected capacity change from 0 to 4096 [ 715.559185][T29804] EXT4-fs: Ignoring removed nomblk_io_submit option [ 715.569245][T29804] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 715.598367][T29804] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 715.698936][T29830] netlink: 60 bytes leftover after parsing attributes in process `syz.0.9263'. [ 715.798854][T29844] loop1: detected capacity change from 0 to 4096 [ 715.806385][T29844] EXT4-fs: Ignoring removed nomblk_io_submit option [ 715.815481][T29844] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 715.829515][T29844] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 715.871201][T29852] x_tables: ip_tables: TCPOPTSTRIP target: only valid in mangle table, not raw [ 716.083351][T29867] openvswitch: netlink: Missing key (keys=40, expected=200000) [ 716.154816][T29873] netlink: 60 bytes leftover after parsing attributes in process `syz.4.9280'. [ 716.338228][T29880] netlink: 68 bytes leftover after parsing attributes in process `syz.4.9283'. [ 716.651833][T29898] loop3: detected capacity change from 0 to 512 [ 716.661664][T29898] EXT4-fs (loop3): revision level too high, forcing read-only mode [ 716.669755][T29898] EXT4-fs (loop3): orphan cleanup on readonly fs [ 716.678060][T29901] netlink: 48 bytes leftover after parsing attributes in process `syz.4.9291'. [ 716.689062][T29898] EXT4-fs error (device loop3): ext4_do_update_inode:5617: inode #16: comm syz.3.9289: corrupted inode contents [ 716.703046][T29904] openvswitch: netlink: Missing key (keys=40, expected=200000) [ 716.724957][T29898] EXT4-fs (loop3): Remounting filesystem read-only [ 716.731829][T29898] EXT4-fs (loop3): 1 truncate cleaned up [ 716.737714][T20997] EXT4-fs (loop3): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 716.748375][T20997] EXT4-fs (loop3): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 716.774349][T20997] EXT4-fs (loop3): Quota write (off=8, len=24) cancelled because transaction is not started [ 716.785059][T29898] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 716.824914][T27470] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 716.902966][T29929] 9p: Bad value for 'rfdno' [ 716.926769][T29933] netlink: 48 bytes leftover after parsing attributes in process `syz.2.9305'. [ 716.965057][T29937] openvswitch: netlink: Missing key (keys=40, expected=200000) [ 716.994067][T29939] netlink: 60 bytes leftover after parsing attributes in process `syz.2.9307'. [ 717.418548][T29983] netlink: 60 bytes leftover after parsing attributes in process `syz.4.9324'. [ 717.436553][T29985] serio: Serial port ttyS3 [ 717.805231][T30003] xt_CT: You must specify a L4 protocol and not use inversions on it [ 717.823766][T30000] lo speed is unknown, defaulting to 1000 [ 717.878331][T30000] lo speed is unknown, defaulting to 1000 [ 718.135932][T30009] FAULT_INJECTION: forcing a failure. [ 718.135932][T30009] name failslab, interval 1, probability 0, space 0, times 0 [ 718.148635][T30009] CPU: 1 UID: 0 PID: 30009 Comm: syz.0.9334 Not tainted syzkaller #0 PREEMPT(voluntary) [ 718.148728][T30009] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 718.148736][T30009] Call Trace: [ 718.148743][T30009] [ 718.148748][T30009] __dump_stack+0x1d/0x30 [ 718.148765][T30009] dump_stack_lvl+0xe8/0x140 [ 718.148843][T30009] dump_stack+0x15/0x1b [ 718.148855][T30009] should_fail_ex+0x265/0x280 [ 718.148870][T30009] should_failslab+0x8c/0xb0 [ 718.148884][T30009] kmem_cache_alloc_noprof+0x69/0x4b0 [ 718.148936][T30009] ? alloc_empty_file+0x76/0x200 [ 718.148954][T30009] alloc_empty_file+0x76/0x200 [ 718.148971][T30009] path_openat+0x63/0x23b0 [ 718.149018][T30009] ? __rcu_read_unlock+0x4f/0x70 [ 718.149032][T30009] ? terminate_walk+0x1e6/0x210 [ 718.149048][T30009] ? path_openat+0x1d88/0x23b0 [ 718.149067][T30009] ? path_openat+0x1e82/0x23b0 [ 718.149120][T30009] ? _parse_integer_limit+0x170/0x190 [ 718.149163][T30009] do_filp_open+0x109/0x230 [ 718.149188][T30009] do_open_execat+0xd8/0x260 [ 718.149270][T30009] alloc_bprm+0x25/0x350 [ 718.149343][T30009] do_execveat_common+0x12e/0x750 [ 718.149440][T30009] __x64_sys_execve+0x5c/0x70 [ 718.149452][T30009] x64_sys_call+0x271d/0x3000 [ 718.149467][T30009] do_syscall_64+0xd8/0x2c0 [ 718.149489][T30009] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 718.149570][T30009] RIP: 0033:0x7f788621f749 [ 718.149581][T30009] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 718.149592][T30009] RSP: 002b:00007f7884c87038 EFLAGS: 00000246 ORIG_RAX: 000000000000003b [ 718.149605][T30009] RAX: ffffffffffffffda RBX: 00007f7886475fa0 RCX: 00007f788621f749 [ 718.149616][T30009] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000200000000300 [ 718.149630][T30009] RBP: 00007f7884c87090 R08: 0000000000000000 R09: 0000000000000000 [ 718.149645][T30009] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 718.149656][T30009] R13: 00007f7886476038 R14: 00007f7886475fa0 R15: 00007ffc3c8aa5b8 [ 718.149711][T30009] [ 718.634523][T30038] serio: Serial port ttyS3 [ 718.677936][T30040] openvswitch: netlink: Missing key (keys=40, expected=200000) [ 718.728425][T30047] loop1: detected capacity change from 0 to 4096 [ 718.736069][T30047] EXT4-fs: Ignoring removed nomblk_io_submit option [ 718.755819][T30047] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 718.769629][T30047] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 718.843699][T30058] loop3: detected capacity change from 0 to 4096 [ 718.852432][T30058] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 718.926160][T27470] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 719.013731][T30080] loop1: detected capacity change from 0 to 512 [ 719.020632][T30080] EXT4-fs: Ignoring removed nomblk_io_submit option [ 719.027327][T30080] EXT4-fs: Ignoring removed nomblk_io_submit option [ 719.034357][T30080] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 719.048586][T30080] EXT4-fs (loop1): 1 truncate cleaned up [ 719.055056][T30080] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 719.089823][T30086] loop3: detected capacity change from 0 to 2048 [ 719.101793][T30086] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 719.131504][T27470] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 719.183257][T30102] FAULT_INJECTION: forcing a failure. [ 719.183257][T30102] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 719.196356][T30102] CPU: 1 UID: 0 PID: 30102 Comm: syz.3.9372 Not tainted syzkaller #0 PREEMPT(voluntary) [ 719.196390][T30102] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 719.196431][T30102] Call Trace: [ 719.196438][T30102] [ 719.196447][T30102] __dump_stack+0x1d/0x30 [ 719.196477][T30102] dump_stack_lvl+0xe8/0x140 [ 719.196506][T30102] dump_stack+0x15/0x1b [ 719.196561][T30102] should_fail_ex+0x265/0x280 [ 719.196592][T30102] should_fail+0xb/0x20 [ 719.196616][T30102] should_fail_usercopy+0x1a/0x20 [ 719.196647][T30102] _copy_from_user+0x1c/0xb0 [ 719.196736][T30102] ___sys_sendmsg+0xc1/0x1d0 [ 719.196871][T30102] __x64_sys_sendmsg+0xd4/0x160 [ 719.196905][T30102] x64_sys_call+0x17ba/0x3000 [ 719.196984][T30102] do_syscall_64+0xd8/0x2c0 [ 719.197064][T30102] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 719.197104][T30102] RIP: 0033:0x7f37506cf749 [ 719.197119][T30102] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 719.197138][T30102] RSP: 002b:00007f374f137038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 719.197157][T30102] RAX: ffffffffffffffda RBX: 00007f3750925fa0 RCX: 00007f37506cf749 [ 719.197170][T30102] RDX: 0000000000000000 RSI: 0000200000000100 RDI: 0000000000000006 [ 719.197184][T30102] RBP: 00007f374f137090 R08: 0000000000000000 R09: 0000000000000000 [ 719.197196][T30102] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 719.197264][T30102] R13: 00007f3750926038 R14: 00007f3750925fa0 R15: 00007fffbac494f8 [ 719.197283][T30102] [ 719.456684][T30110] lo speed is unknown, defaulting to 1000 [ 719.498608][T30125] loop3: detected capacity change from 0 to 2048 [ 719.552889][T30125] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 719.575267][T30110] lo speed is unknown, defaulting to 1000 [ 719.610262][T27470] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 719.613843][ T29] kauditd_printk_skb: 452 callbacks suppressed [ 719.613932][ T29] audit: type=1326 audit(1766280533.618:42515): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30124 comm="syz.3.9379" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f37506cf749 code=0x7ffc0000 [ 719.649237][ T29] audit: type=1326 audit(1766280533.618:42516): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30124 comm="syz.3.9379" exe="/root/syz-executor" sig=0 arch=c000003e syscall=186 compat=0 ip=0x7f37506cf749 code=0x7ffc0000 [ 719.673005][ T29] audit: type=1326 audit(1766280533.618:42517): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30124 comm="syz.3.9379" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f37506cf749 code=0x7ffc0000 [ 719.696950][ T29] audit: type=1326 audit(1766280533.618:42518): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30124 comm="syz.3.9379" exe="/root/syz-executor" sig=0 arch=c000003e syscall=129 compat=0 ip=0x7f37506cf749 code=0x7ffc0000 [ 719.721424][ T29] audit: type=1326 audit(1766280533.618:42519): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30124 comm="syz.3.9379" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f37506c65e7 code=0x7ffc0000 [ 719.744983][ T29] audit: type=1326 audit(1766280533.618:42520): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30124 comm="syz.3.9379" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f375066b829 code=0x7ffc0000 [ 719.768544][ T29] audit: type=1326 audit(1766280533.618:42521): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30124 comm="syz.3.9379" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f37506cf749 code=0x7ffc0000 [ 719.792226][ T29] audit: type=1326 audit(1766280533.618:42522): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30124 comm="syz.3.9379" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f37506cf749 code=0x7ffc0000 [ 719.815674][ T29] audit: type=1326 audit(1766280533.618:42523): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30124 comm="syz.3.9379" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f37506cf749 code=0x7ffc0000 [ 719.839326][ T29] audit: type=1326 audit(1766280533.618:42524): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30124 comm="syz.3.9379" exe="/root/syz-executor" sig=0 arch=c000003e syscall=263 compat=0 ip=0x7f37506cf749 code=0x7ffc0000 [ 719.877536][T30141] __nla_validate_parse: 5 callbacks suppressed [ 719.877600][T30141] netlink: 60 bytes leftover after parsing attributes in process `syz.2.9384'. [ 719.895557][T30110] chnl_net:caif_netlink_parms(): no params data found [ 719.912880][T30149] serio: Serial port ttyS3 [ 719.920881][T23178] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 719.989371][T30110] bridge0: port 1(bridge_slave_0) entered blocking state [ 719.996554][T30110] bridge0: port 1(bridge_slave_0) entered disabled state [ 720.003904][T30110] bridge_slave_0: entered allmulticast mode [ 720.010750][T30110] bridge_slave_0: entered promiscuous mode [ 720.017628][T30110] bridge0: port 2(bridge_slave_1) entered blocking state [ 720.027361][T30110] bridge0: port 2(bridge_slave_1) entered disabled state [ 720.038649][T30110] bridge_slave_1: entered allmulticast mode [ 720.045151][T30110] bridge_slave_1: entered promiscuous mode [ 720.068397][T30110] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 720.079136][T20965] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 720.104779][T30110] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 720.150918][T20965] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 720.172366][T30110] team0: Port device team_slave_0 added [ 720.181554][T30110] team0: Port device team_slave_1 added [ 720.199291][T20965] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 720.210255][T30110] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 720.217256][T30110] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 720.243183][T30110] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 720.259045][T30110] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 720.266134][T30110] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 720.292407][T30110] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 720.324862][T20965] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 720.338128][T30110] hsr_slave_0: entered promiscuous mode [ 720.344324][T30110] hsr_slave_1: entered promiscuous mode [ 720.402878][T30186] netlink: 60 bytes leftover after parsing attributes in process `syz.1.9399'. [ 720.419317][T20965] bridge_slave_1: left allmulticast mode [ 720.425177][T20965] bridge_slave_1: left promiscuous mode [ 720.430819][T20965] bridge0: port 2(bridge_slave_1) entered disabled state [ 720.484371][T20965] bridge0 (unregistering): left allmulticast mode [ 720.511549][T30188] loop1: detected capacity change from 0 to 4096 [ 720.518113][T30188] EXT4-fs: Ignoring removed nomblk_io_submit option [ 720.527147][T30188] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 720.540422][T30188] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 720.624259][T30193] loop1: detected capacity change from 0 to 512 [ 720.641336][T30193] EXT4-fs (loop1): revision level too high, forcing read-only mode [ 720.649488][T30193] EXT4-fs (loop1): orphan cleanup on readonly fs [ 720.657129][T30193] EXT4-fs error (device loop1): ext4_do_update_inode:5617: inode #16: comm syz.1.9402: corrupted inode contents [ 720.669243][T30193] EXT4-fs (loop1): Remounting filesystem read-only [ 720.677250][T30193] EXT4-fs (loop1): 1 truncate cleaned up [ 720.682995][ T12] EXT4-fs (loop1): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 720.693671][ T12] EXT4-fs (loop1): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 720.704238][ T12] EXT4-fs (loop1): Quota write (off=8, len=24) cancelled because transaction is not started [ 720.714696][T30193] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 720.730034][T20965] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 720.740006][T20965] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 720.752176][T20965] bond0 (unregistering): Released all slaves [ 720.763506][T23178] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 720.857326][T20965] hsr_slave_0: left promiscuous mode [ 720.863210][T20965] hsr_slave_1: left promiscuous mode [ 720.868881][T20965] batman_adv: batadv0: Interface deactivated: €Â [ 720.875386][T20965] batman_adv: batadv0: Removing interface: €Â [ 720.884289][T30207] loop1: detected capacity change from 0 to 512 [ 720.891942][T20965] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 720.899365][T20965] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 720.920565][T20965] veth1_macvtap: left promiscuous mode [ 720.928431][T30207] EXT4-fs (loop1): revision level too high, forcing read-only mode [ 720.937678][T20965] veth0_macvtap: left promiscuous mode [ 720.950514][T20965] veth1_vlan: left promiscuous mode [ 720.970839][T20965] veth0_vlan: left promiscuous mode [ 720.983543][T30207] EXT4-fs (loop1): orphan cleanup on readonly fs [ 721.019191][T30220] serio: Serial port ttyS3 [ 721.019626][T30207] EXT4-fs error (device loop1): ext4_do_update_inode:5617: inode #16: comm syz.1.9404: corrupted inode contents [ 721.065020][T30207] EXT4-fs (loop1): Remounting filesystem read-only [ 721.076732][T30207] EXT4-fs (loop1): 1 truncate cleaned up [ 721.087874][T20971] EXT4-fs (loop1): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 721.098454][T20971] EXT4-fs (loop1): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 721.109375][T20965] team0 (unregistering): Port device team_slave_1 removed [ 721.120322][T20965] team0 (unregistering): Port device team_slave_0 removed [ 721.133342][T20971] EXT4-fs (loop1): Quota write (off=8, len=24) cancelled because transaction is not started [ 721.149531][T30207] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 721.168983][T30218] netlink: 60 bytes leftover after parsing attributes in process `syz.0.9410'. [ 721.195715][T23178] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 721.209626][T30229] openvswitch: netlink: Missing key (keys=40, expected=200000) [ 721.306093][T30110] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 721.315097][T30110] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 721.324626][T30110] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 721.334229][T30110] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 721.373474][T30110] 8021q: adding VLAN 0 to HW filter on device bond0 [ 721.388724][T30110] 8021q: adding VLAN 0 to HW filter on device team0 [ 721.400242][T20971] bridge0: port 1(bridge_slave_0) entered blocking state [ 721.407438][T20971] bridge0: port 1(bridge_slave_0) entered forwarding state [ 721.421160][T30257] loop1: detected capacity change from 0 to 512 [ 721.434073][T30257] EXT4-fs: Ignoring removed nomblk_io_submit option [ 721.442225][T20989] bridge0: port 2(bridge_slave_1) entered blocking state [ 721.449302][T20989] bridge0: port 2(bridge_slave_1) entered forwarding state [ 721.460857][T30257] EXT4-fs: Ignoring removed nomblk_io_submit option [ 721.467833][T30257] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 721.479240][T20965] IPVS: stop unused estimator thread 0... [ 721.514490][T30257] EXT4-fs (loop1): 1 truncate cleaned up [ 721.520643][T30257] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 721.566158][T30110] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 721.655134][T30110] veth0_vlan: entered promiscuous mode [ 721.662846][T30110] veth1_vlan: entered promiscuous mode [ 721.677126][T30110] veth0_macvtap: entered promiscuous mode [ 721.684521][T30110] veth1_macvtap: entered promiscuous mode [ 721.694953][T30110] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 721.706136][T30110] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 721.717227][T20980] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 721.726433][T20980] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 721.735471][T20980] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 721.745637][T20980] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 721.914401][T30292] openvswitch: netlink: Missing key (keys=40, expected=200000) [ 722.001889][T30302] xt_CT: You must specify a L4 protocol and not use inversions on it [ 722.015869][T30302] netlink: 16 bytes leftover after parsing attributes in process `syz.0.9430'. [ 722.076315][T30304] lo speed is unknown, defaulting to 1000 [ 722.178213][T30304] lo speed is unknown, defaulting to 1000 [ 722.292770][T23178] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 722.489546][T30308] SELinux: failed to load policy [ 722.579041][T30321] loop1: detected capacity change from 0 to 2048 [ 722.593030][T30321] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 722.608706][T30325] FAULT_INJECTION: forcing a failure. [ 722.608706][T30325] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 722.621779][T30325] CPU: 1 UID: 0 PID: 30325 Comm: syz.3.9441 Not tainted syzkaller #0 PREEMPT(voluntary) [ 722.621845][T30325] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 722.621858][T30325] Call Trace: [ 722.621864][T30325] [ 722.621872][T30325] __dump_stack+0x1d/0x30 [ 722.621897][T30325] dump_stack_lvl+0xe8/0x140 [ 722.621996][T30325] dump_stack+0x15/0x1b [ 722.622089][T30325] should_fail_ex+0x265/0x280 [ 722.622114][T30325] should_fail+0xb/0x20 [ 722.622135][T30325] should_fail_usercopy+0x1a/0x20 [ 722.622161][T30325] _copy_from_user+0x1c/0xb0 [ 722.622215][T30325] __copy_msghdr+0x244/0x300 [ 722.622290][T30325] ___sys_sendmsg+0x109/0x1d0 [ 722.622398][T30325] __sys_sendmmsg+0x178/0x300 [ 722.622436][T30325] __x64_sys_sendmmsg+0x57/0x70 [ 722.622490][T30325] x64_sys_call+0x1e28/0x3000 [ 722.622517][T30325] do_syscall_64+0xd8/0x2c0 [ 722.622551][T30325] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 722.622573][T30325] RIP: 0033:0x7f37506cf749 [ 722.622589][T30325] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 722.622639][T30325] RSP: 002b:00007f374f137038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 722.622658][T30325] RAX: ffffffffffffffda RBX: 00007f3750925fa0 RCX: 00007f37506cf749 [ 722.622725][T30325] RDX: 0000000000000002 RSI: 00002000000023c0 RDI: 0000000000000007 [ 722.622738][T30325] RBP: 00007f374f137090 R08: 0000000000000000 R09: 0000000000000000 [ 722.622751][T30325] R10: 00000000000000b0 R11: 0000000000000246 R12: 0000000000000001 [ 722.622763][T30325] R13: 00007f3750926038 R14: 00007f3750925fa0 R15: 00007fffbac494f8 [ 722.622793][T30325] [ 722.871536][T23178] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 722.984011][T30342] rock: directory entry would overflow storage [ 722.990245][T30342] rock: sig=0x5245, size=8, remaining=5 [ 723.110759][T30355] xt_CT: You must specify a L4 protocol and not use inversions on it [ 723.136565][T30355] netlink: 16 bytes leftover after parsing attributes in process `syz.0.9455'. [ 723.274538][T30373] lo speed is unknown, defaulting to 1000 [ 723.372610][T30373] lo speed is unknown, defaulting to 1000 [ 723.844907][T30395] set_capacity_and_notify: 1 callbacks suppressed [ 723.844921][T30395] loop3: detected capacity change from 0 to 512 [ 723.863079][T30395] EXT4-fs (loop3): revision level too high, forcing read-only mode [ 723.885687][T30395] EXT4-fs (loop3): orphan cleanup on readonly fs [ 723.902376][T30395] EXT4-fs error (device loop3): ext4_do_update_inode:5617: inode #16: comm syz.3.9473: corrupted inode contents [ 723.926736][T30402] loop1: detected capacity change from 0 to 2048 [ 723.953119][T30395] EXT4-fs (loop3): Remounting filesystem read-only [ 723.963514][T30402] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 723.976647][T30395] EXT4-fs (loop3): 1 truncate cleaned up [ 723.983186][T21005] EXT4-fs (loop3): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 723.993788][T21005] EXT4-fs (loop3): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 724.004705][T21005] EXT4-fs (loop3): Quota write (off=8, len=24) cancelled because transaction is not started [ 724.015566][T30395] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 724.042655][T23178] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 724.062821][T30410] netlink: 60 bytes leftover after parsing attributes in process `syz.0.9476'. [ 724.144348][T27470] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 724.239848][T30436] xt_CT: You must specify a L4 protocol and not use inversions on it [ 724.264319][T30442] loop3: detected capacity change from 0 to 2048 [ 724.275522][T30436] netlink: 16 bytes leftover after parsing attributes in process `syz.1.9488'. [ 724.289579][T30442] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 724.305524][T30446] netlink: 68 bytes leftover after parsing attributes in process `syz.4.9492'. [ 724.324726][T27470] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 724.333787][T30450] serio: Serial port ttyS3 [ 724.451645][T30462] FAULT_INJECTION: forcing a failure. [ 724.451645][T30462] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 724.464750][T30462] CPU: 0 UID: 0 PID: 30462 Comm: syz.4.9499 Not tainted syzkaller #0 PREEMPT(voluntary) [ 724.464780][T30462] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 724.464794][T30462] Call Trace: [ 724.464801][T30462] [ 724.464859][T30462] __dump_stack+0x1d/0x30 [ 724.464888][T30462] dump_stack_lvl+0xe8/0x140 [ 724.464951][T30462] dump_stack+0x15/0x1b [ 724.464963][T30462] should_fail_ex+0x265/0x280 [ 724.465055][T30462] should_fail+0xb/0x20 [ 724.465068][T30462] should_fail_usercopy+0x1a/0x20 [ 724.465083][T30462] _copy_from_user+0x1c/0xb0 [ 724.465119][T30462] kstrtouint_from_user+0x69/0xf0 [ 724.465133][T30462] ? 0xffffffff81000000 [ 724.465142][T30462] ? selinux_file_permission+0x1e2/0x320 [ 724.465167][T30462] proc_fail_nth_write+0x50/0x160 [ 724.465186][T30462] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 724.465274][T30462] vfs_write+0x269/0x960 [ 724.465286][T30462] ? vfs_read+0x4e6/0x770 [ 724.465296][T30462] ? __rcu_read_unlock+0x4f/0x70 [ 724.465309][T30462] ? __fget_files+0x184/0x1c0 [ 724.465391][T30462] ? mutex_lock+0x58/0x90 [ 724.465408][T30462] ksys_write+0xda/0x1a0 [ 724.465489][T30462] __x64_sys_write+0x40/0x50 [ 724.465502][T30462] x64_sys_call+0x2847/0x3000 [ 724.465519][T30462] do_syscall_64+0xd8/0x2c0 [ 724.465541][T30462] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 724.465611][T30462] RIP: 0033:0x7f8f95a4e1ff [ 724.465621][T30462] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48 [ 724.465633][T30462] RSP: 002b:00007f8f94496030 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 724.465646][T30462] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f8f95a4e1ff [ 724.465654][T30462] RDX: 0000000000000001 RSI: 00007f8f944960a0 RDI: 0000000000000004 [ 724.465661][T30462] RBP: 00007f8f94496090 R08: 0000000000000000 R09: 0000000000000000 [ 724.465669][T30462] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000001 [ 724.465739][T30462] R13: 00007f8f95ca6128 R14: 00007f8f95ca6090 R15: 00007ffd5e67b3f8 [ 724.465757][T30462] [ 724.690563][ T29] kauditd_printk_skb: 367 callbacks suppressed [ 724.690579][ T29] audit: type=1326 audit(1766280538.728:42874): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30463 comm="syz.4.9500" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8f95a4f749 code=0x7ffc0000 [ 724.720514][ T29] audit: type=1326 audit(1766280538.728:42875): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30463 comm="syz.4.9500" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f8f95a4f749 code=0x7ffc0000 [ 724.744214][ T29] audit: type=1326 audit(1766280538.728:42876): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30463 comm="syz.4.9500" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8f95a4f749 code=0x7ffc0000 [ 724.767825][ T29] audit: type=1326 audit(1766280538.728:42877): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30463 comm="syz.4.9500" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f8f95a4f749 code=0x7ffc0000 [ 724.791482][ T29] audit: type=1326 audit(1766280538.728:42878): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30463 comm="syz.4.9500" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8f95a4f749 code=0x7ffc0000 [ 724.815102][ T29] audit: type=1326 audit(1766280538.728:42879): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30463 comm="syz.4.9500" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f8f95a4f749 code=0x7ffc0000 [ 724.839491][ T29] audit: type=1326 audit(1766280538.758:42880): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30463 comm="syz.4.9500" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8f95a4f749 code=0x7ffc0000 [ 724.863152][ T29] audit: type=1326 audit(1766280538.758:42881): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30463 comm="syz.4.9500" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8f95a4f749 code=0x7ffc0000 [ 724.886725][ T29] audit: type=1326 audit(1766280538.758:42882): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30463 comm="syz.4.9500" exe="/root/syz-executor" sig=0 arch=c000003e syscall=114 compat=0 ip=0x7f8f95a4f749 code=0x7ffc0000 [ 724.910303][ T29] audit: type=1326 audit(1766280538.758:42883): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30463 comm="syz.4.9500" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8f95a4f749 code=0x7ffc0000 [ 725.042272][T30482] netlink: 68 bytes leftover after parsing attributes in process `syz.4.9508'. [ 725.057432][T30484] openvswitch: netlink: Missing key (keys=40, expected=200000) [ 725.184666][T30500] loop1: detected capacity change from 0 to 2048 [ 725.202698][T30505] xt_CT: You must specify a L4 protocol and not use inversions on it [ 725.210625][T30509] netlink: 4 bytes leftover after parsing attributes in process `syz.2.9519'. [ 725.225307][T30500] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 725.241850][T30505] netlink: 16 bytes leftover after parsing attributes in process `syz.4.9521'. [ 725.251394][T30515] FAULT_INJECTION: forcing a failure. [ 725.251394][T30515] name failslab, interval 1, probability 0, space 0, times 0 [ 725.264155][T30515] CPU: 1 UID: 0 PID: 30515 Comm: syz.2.9523 Not tainted syzkaller #0 PREEMPT(voluntary) [ 725.264235][T30515] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 725.264244][T30515] Call Trace: [ 725.264248][T30515] [ 725.264253][T30515] __dump_stack+0x1d/0x30 [ 725.264305][T30515] dump_stack_lvl+0xe8/0x140 [ 725.264319][T30515] dump_stack+0x15/0x1b [ 725.264332][T30515] should_fail_ex+0x265/0x280 [ 725.264357][T30515] should_failslab+0x8c/0xb0 [ 725.264371][T30515] __kmalloc_cache_node_noprof+0x6a/0x4d0 [ 725.264388][T30515] ? __get_vm_area_node+0x106/0x1d0 [ 725.264405][T30515] __get_vm_area_node+0x106/0x1d0 [ 725.264467][T30515] __vmalloc_node_range_noprof+0x28e/0x1310 [ 725.264484][T30515] ? bpf_prog_alloc_no_stats+0x47/0x390 [ 725.264502][T30515] ? lockref_put_return+0xf7/0x130 [ 725.264521][T30515] ? terminate_walk+0x1e6/0x210 [ 725.264537][T30515] ? path_openat+0x1d88/0x23b0 [ 725.264586][T30515] ? bpf_prog_alloc_no_stats+0x47/0x390 [ 725.264599][T30515] __vmalloc_noprof+0xa4/0xf0 [ 725.264614][T30515] ? bpf_prog_alloc_no_stats+0x47/0x390 [ 725.264747][T30515] bpf_prog_alloc_no_stats+0x47/0x390 [ 725.264759][T30515] ? bpf_prog_alloc+0x2a/0x150 [ 725.264771][T30515] bpf_prog_alloc+0x3c/0x150 [ 725.264782][T30515] __get_filter+0x92/0x230 [ 725.264805][T30515] sk_reuseport_attach_filter+0x20/0x140 [ 725.264901][T30515] sk_setsockopt+0x1890/0x20e0 [ 725.264920][T30515] sock_setsockopt+0x40/0x50 [ 725.264936][T30515] __sys_setsockopt+0x13a/0x200 [ 725.265014][T30515] __x64_sys_setsockopt+0x64/0x80 [ 725.265031][T30515] x64_sys_call+0x21d5/0x3000 [ 725.265062][T30515] do_syscall_64+0xd8/0x2c0 [ 725.265121][T30515] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 725.265137][T30515] RIP: 0033:0x7f0843b0f749 [ 725.265147][T30515] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 725.265158][T30515] RSP: 002b:00007f0842577038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 725.265182][T30515] RAX: ffffffffffffffda RBX: 00007f0843d65fa0 RCX: 00007f0843b0f749 [ 725.265191][T30515] RDX: 0000000000000033 RSI: 0000000000000001 RDI: 0000000000000006 [ 725.265199][T30515] RBP: 00007f0842577090 R08: 0000000000000010 R09: 0000000000000000 [ 725.265206][T30515] R10: 000020000002eff0 R11: 0000000000000246 R12: 0000000000000001 [ 725.265215][T30515] R13: 00007f0843d66038 R14: 00007f0843d65fa0 R15: 00007ffc4c6fc958 [ 725.265230][T30515] [ 725.265236][T30515] syz.2.9523: vmalloc error: size 8192, vm_struct allocation failed, mode:0x400dc0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0 [ 725.521701][T30515] CPU: 1 UID: 0 PID: 30515 Comm: syz.2.9523 Not tainted syzkaller #0 PREEMPT(voluntary) [ 725.521860][T30515] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 725.521869][T30515] Call Trace: [ 725.521874][T30515] [ 725.521890][T30515] __dump_stack+0x1d/0x30 [ 725.521908][T30515] dump_stack_lvl+0xe8/0x140 [ 725.521922][T30515] dump_stack+0x15/0x1b [ 725.521934][T30515] warn_alloc+0x12b/0x1a0 [ 725.522074][T30515] __vmalloc_node_range_noprof+0x2b3/0x1310 [ 725.522091][T30515] ? lockref_put_return+0xf7/0x130 [ 725.522112][T30515] ? terminate_walk+0x1e6/0x210 [ 725.522156][T30515] ? path_openat+0x1d88/0x23b0 [ 725.522179][T30515] ? bpf_prog_alloc_no_stats+0x47/0x390 [ 725.522192][T30515] __vmalloc_noprof+0xa4/0xf0 [ 725.522207][T30515] ? bpf_prog_alloc_no_stats+0x47/0x390 [ 725.522223][T30515] bpf_prog_alloc_no_stats+0x47/0x390 [ 725.522235][T30515] ? bpf_prog_alloc+0x2a/0x150 [ 725.522320][T30515] bpf_prog_alloc+0x3c/0x150 [ 725.522332][T30515] __get_filter+0x92/0x230 [ 725.522349][T30515] sk_reuseport_attach_filter+0x20/0x140 [ 725.522368][T30515] sk_setsockopt+0x1890/0x20e0 [ 725.522450][T30515] sock_setsockopt+0x40/0x50 [ 725.522465][T30515] __sys_setsockopt+0x13a/0x200 [ 725.522482][T30515] __x64_sys_setsockopt+0x64/0x80 [ 725.522537][T30515] x64_sys_call+0x21d5/0x3000 [ 725.522552][T30515] do_syscall_64+0xd8/0x2c0 [ 725.522574][T30515] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 725.522647][T30515] RIP: 0033:0x7f0843b0f749 [ 725.522658][T30515] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 725.522670][T30515] RSP: 002b:00007f0842577038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 725.522683][T30515] RAX: ffffffffffffffda RBX: 00007f0843d65fa0 RCX: 00007f0843b0f749 [ 725.522691][T30515] RDX: 0000000000000033 RSI: 0000000000000001 RDI: 0000000000000006 [ 725.522732][T30515] RBP: 00007f0842577090 R08: 0000000000000010 R09: 0000000000000000 [ 725.522740][T30515] R10: 000020000002eff0 R11: 0000000000000246 R12: 0000000000000001 [ 725.522748][T30515] R13: 00007f0843d66038 R14: 00007f0843d65fa0 R15: 00007ffc4c6fc958 [ 725.522760][T30515] [ 725.522764][T30515] Mem-Info: [ 725.701874][T30518] siw: device registration error -23 [ 725.702288][T30515] active_anon:4345 inactive_anon:4 isolated_anon:0 [ 725.702288][T30515] active_file:24914 inactive_file:2968 isolated_file:0 [ 725.702288][T30515] unevictable:0 dirty:631 writeback:0 [ 725.702288][T30515] slab_reclaimable:2757 slab_unreclaimable:30283 [ 725.702288][T30515] mapped:30693 shmem:489 pagetables:1201 [ 725.702288][T30515] sec_pagetables:0 bounce:0 [ 725.702288][T30515] kernel_misc_reclaimable:0 [ 725.702288][T30515] free:1857992 free_pcp:14373 free_cma:0 [ 725.790445][T30515] Node 0 active_anon:17380kB inactive_anon:16kB active_file:99656kB inactive_file:11872kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:122772kB dirty:2640kB writeback:0kB shmem:1956kB kernel_stack:5104kB pagetables:4804kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 725.817993][T30515] Node 0 DMA free:15360kB boost:0kB min:20kB low:32kB high:44kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 725.847571][T30515] lowmem_reserve[]: 0 2880 7859 7859 [ 725.852892][T30515] Node 0 DMA32 free:2945864kB boost:0kB min:4132kB low:7060kB high:9988kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:3129332kB managed:2949496kB mlocked:0kB bounce:0kB free_pcp:3632kB local_pcp:3528kB free_cma:0kB [ 725.884271][T30515] lowmem_reserve[]: 0 0 4978 4978 [ 725.889288][T30515] Node 0 Normal free:4470744kB boost:0kB min:7188kB low:12284kB high:17380kB reserved_highatomic:0KB free_highatomic:0KB active_anon:17380kB inactive_anon:16kB active_file:99656kB inactive_file:11872kB unevictable:0kB writepending:2640kB zspages:0kB present:5242880kB managed:5098240kB mlocked:0kB bounce:0kB free_pcp:53832kB local_pcp:18732kB free_cma:0kB [ 725.922428][T30515] lowmem_reserve[]: 0 0 0 0 [ 725.926957][T30515] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 725.939661][T30515] Node 0 DMA32: 4*4kB (M) 3*8kB (M) 2*16kB (M) 2*32kB (M) 3*64kB (M) 2*128kB (M) 3*256kB (M) 3*512kB (M) 4*1024kB (M) 3*2048kB (M) 716*4096kB (M) = 2945864kB [ 725.955829][T30515] Node 0 Normal: 4968*4kB (UM) 3312*8kB (UME) 1956*16kB (UME) 1493*32kB (UM) 931*64kB (UME) 697*128kB (UM) 455*256kB (UM) 337*512kB (UME) 236*1024kB (UM) 134*2048kB (UM) 828*4096kB (UM) = 4470848kB [ 725.975487][T30515] Node 0 hugepages_total=4 hugepages_free=4 hugepages_surp=0 hugepages_size=2048kB [ 725.984780][T30515] 28351 total pagecache pages [ 725.989429][T30515] 5 pages in swap cache [ 725.993572][T30515] Free swap = 117084kB [ 725.997716][T30515] Total swap = 124996kB [ 726.001905][T30515] 2097051 pages RAM [ 726.005771][T30515] 0 pages HighMem/MovableOnly [ 726.010442][T30515] 81277 pages reserved [ 726.024637][T23178] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 726.095646][T30537] serio: Serial port ttyS3 [ 726.114943][T30540] FAULT_INJECTION: forcing a failure. [ 726.114943][T30540] name failslab, interval 1, probability 0, space 0, times 0 [ 726.127593][T30540] CPU: 0 UID: 0 PID: 30540 Comm: syz.1.9530 Not tainted syzkaller #0 PREEMPT(voluntary) [ 726.127680][T30540] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 726.127695][T30540] Call Trace: [ 726.127707][T30540] [ 726.127715][T30540] __dump_stack+0x1d/0x30 [ 726.127740][T30540] dump_stack_lvl+0xe8/0x140 [ 726.127776][T30540] dump_stack+0x15/0x1b [ 726.127798][T30540] should_fail_ex+0x265/0x280 [ 726.127823][T30540] should_failslab+0x8c/0xb0 [ 726.127918][T30540] __kmalloc_node_track_caller_noprof+0xb9/0x5b0 [ 726.127950][T30540] ? cond_bools_copy+0x30/0x80 [ 726.127973][T30540] ? __pfx_cond_bools_destroy+0x10/0x10 [ 726.127997][T30540] ? __pfx_cond_bools_destroy+0x10/0x10 [ 726.128096][T30540] kmemdup_noprof+0x2b/0x70 [ 726.128118][T30540] ? __pfx_cond_bools_destroy+0x10/0x10 [ 726.128214][T30540] cond_bools_copy+0x30/0x80 [ 726.128238][T30540] ? __pfx_cond_bools_destroy+0x10/0x10 [ 726.128263][T30540] hashtab_duplicate+0x11e/0x360 [ 726.128300][T30540] ? __pfx_cond_bools_copy+0x10/0x10 [ 726.128327][T30540] cond_policydb_dup+0xd2/0x4e0 [ 726.128352][T30540] security_set_bools+0xa0/0x340 [ 726.128487][T30540] sel_commit_bools_write+0x1ea/0x270 [ 726.128512][T30540] vfs_writev+0x406/0x8b0 [ 726.128538][T30540] ? __pfx_sel_commit_bools_write+0x10/0x10 [ 726.128594][T30540] do_writev+0xe7/0x210 [ 726.128626][T30540] __x64_sys_writev+0x45/0x50 [ 726.128713][T30540] x64_sys_call+0x1ba5/0x3000 [ 726.128760][T30540] do_syscall_64+0xd8/0x2c0 [ 726.128802][T30540] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 726.128829][T30540] RIP: 0033:0x7fb90844f749 [ 726.128902][T30540] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 726.128921][T30540] RSP: 002b:00007fb906eaf038 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 726.128943][T30540] RAX: ffffffffffffffda RBX: 00007fb9086a5fa0 RCX: 00007fb90844f749 [ 726.128958][T30540] RDX: 0000000000000001 RSI: 00002000000025c0 RDI: 0000000000000007 [ 726.128973][T30540] RBP: 00007fb906eaf090 R08: 0000000000000000 R09: 0000000000000000 [ 726.128988][T30540] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 726.129003][T30540] R13: 00007fb9086a6038 R14: 00007fb9086a5fa0 R15: 00007ffee27c88e8 [ 726.129070][T30540] [ 726.161220][T30543] netlink: 16 bytes leftover after parsing attributes in process `syz.4.9527'. [ 726.312194][T30553] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 726.390227][T30558] netlink: 60 bytes leftover after parsing attributes in process `syz.3.9535'. [ 726.404746][T30560] netlink: 68 bytes leftover after parsing attributes in process `syz.1.9536'. [ 726.563034][T30577] netlink: 68 bytes leftover after parsing attributes in process `syz.3.9544'. [ 726.612949][T30587] netlink: 4 bytes leftover after parsing attributes in process `syz.3.9548'. [ 726.622185][T30588] 9p: Bad value for 'rfdno' [ 726.651907][T30592] netlink: 68 bytes leftover after parsing attributes in process `syz.3.9550'. [ 726.828140][T30616] netlink: 68 bytes leftover after parsing attributes in process `syz.4.9562'. [ 726.828380][T30614] loop3: detected capacity change from 0 to 2048 [ 726.851675][T30614] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 726.884365][T27470] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 726.884885][T30620] FAULT_INJECTION: forcing a failure. [ 726.884885][T30620] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 726.906489][T30620] CPU: 1 UID: 0 PID: 30620 Comm: syz.4.9563 Not tainted syzkaller #0 PREEMPT(voluntary) [ 726.906508][T30620] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 726.906516][T30620] Call Trace: [ 726.906520][T30620] [ 726.906525][T30620] __dump_stack+0x1d/0x30 [ 726.906661][T30620] dump_stack_lvl+0xe8/0x140 [ 726.906675][T30620] dump_stack+0x15/0x1b [ 726.906687][T30620] should_fail_ex+0x265/0x280 [ 726.906711][T30620] should_fail+0xb/0x20 [ 726.906723][T30620] should_fail_usercopy+0x1a/0x20 [ 726.906809][T30620] strncpy_from_user+0x27/0x260 [ 726.906829][T30620] ? __rcu_read_unlock+0x4f/0x70 [ 726.906847][T30620] strncpy_from_user_nofault+0x68/0xf0 [ 726.906870][T30620] bpf_bprintf_prepare+0x88f/0xd90 [ 726.906884][T30620] ? __account_obj_stock+0x211/0x350 [ 726.906917][T30620] ? should_fail_ex+0x30/0x280 [ 726.906931][T30620] ? bpf_trace_run2+0xf5/0x1d0 [ 726.907014][T30620] bpf_trace_printk+0x84/0x1c0 [ 726.907029][T30620] ? bpf_trace_run2+0xf5/0x1d0 [ 726.907047][T30620] ? __rcu_read_unlock+0x34/0x70 [ 726.907060][T30620] bpf_prog_930ede9872f2967c+0x3e/0x44 [ 726.907150][T30620] bpf_trace_run2+0x107/0x1d0 [ 726.907197][T30620] ? security_compute_sid+0x11da/0x1290 [ 726.907275][T30620] ? security_compute_sid+0x11da/0x1290 [ 726.907293][T30620] kfree+0x353/0x3c0 [ 726.907314][T30620] security_compute_sid+0x11da/0x1290 [ 726.907336][T30620] ? obj_cgroup_charge_account+0xba/0x1a0 [ 726.907442][T30620] security_transition_sid+0x5a/0x70 [ 726.907482][T30620] inode_doinit_with_dentry+0x327/0x7a0 [ 726.907502][T30620] selinux_d_instantiate+0x27/0x40 [ 726.907515][T30620] security_d_instantiate+0x7a/0xa0 [ 726.907528][T30620] d_instantiate+0x41/0xa0 [ 726.907546][T30620] alloc_file_pseudo+0xa3/0x160 [ 726.907597][T30620] __shmem_file_setup+0x1de/0x210 [ 726.907692][T30620] shmem_file_setup+0x3b/0x50 [ 726.907709][T30620] __se_sys_memfd_create+0x2f7/0x6b0 [ 726.907731][T30620] __x64_sys_memfd_create+0x31/0x40 [ 726.907821][T30620] x64_sys_call+0x28cb/0x3000 [ 726.907837][T30620] do_syscall_64+0xd8/0x2c0 [ 726.907863][T30620] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 726.907877][T30620] RIP: 0033:0x7f8f95a4f749 [ 726.907911][T30620] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 726.907923][T30620] RSP: 002b:00007f8f944b6e18 EFLAGS: 00000202 ORIG_RAX: 000000000000013f [ 726.907974][T30620] RAX: ffffffffffffffda RBX: 0000000000000473 RCX: 00007f8f95a4f749 [ 726.907982][T30620] RDX: 00007f8f944b6ef0 RSI: 0000000000000000 RDI: 00007f8f95ad4960 [ 726.907990][T30620] RBP: 0000200000000bc0 R08: 00007f8f944b6bb7 R09: 00007f8f944b6e40 [ 726.907998][T30620] R10: 000000000000000a R11: 0000000000000202 R12: 00002000000001c0 [ 726.908027][T30620] R13: 00007f8f944b6ef0 R14: 00007f8f944b6eb0 R15: 0000200000000680 [ 726.908039][T30620] [ 727.232609][T30628] netlink: 'syz.3.9566': attribute type 1 has an invalid length. [ 727.264733][T30628] 8021q: adding VLAN 0 to HW filter on device bond1 [ 727.292434][T30628] bond1 (unregistering): Released all slaves [ 727.441916][T30662] FAULT_INJECTION: forcing a failure. [ 727.441916][T30662] name failslab, interval 1, probability 0, space 0, times 0 [ 727.454563][T30662] CPU: 1 UID: 0 PID: 30662 Comm: syz.4.9572 Not tainted syzkaller #0 PREEMPT(voluntary) [ 727.454596][T30662] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 727.454613][T30662] Call Trace: [ 727.454621][T30662] [ 727.454638][T30662] __dump_stack+0x1d/0x30 [ 727.454664][T30662] dump_stack_lvl+0xe8/0x140 [ 727.454692][T30662] dump_stack+0x15/0x1b [ 727.454846][T30662] should_fail_ex+0x265/0x280 [ 727.454872][T30662] should_failslab+0x8c/0xb0 [ 727.454907][T30662] __kmalloc_cache_noprof+0x65/0x4c0 [ 727.454933][T30662] ? rtnl_newlink+0x5c/0x1360 [ 727.455018][T30662] ? __pfx_rtnl_newlink+0x10/0x10 [ 727.455038][T30662] rtnl_newlink+0x5c/0x1360 [ 727.455080][T30662] ? strncpy_from_user+0x218/0x260 [ 727.455116][T30662] ? cmp_ex_search+0x25/0x40 [ 727.455137][T30662] ? bsearch+0x95/0xc0 [ 727.455168][T30662] ? cmp_ex_search+0x25/0x40 [ 727.455234][T30662] ? bsearch+0x95/0xc0 [ 727.455264][T30662] ? __pfx_cmp_ex_search+0x10/0x10 [ 727.455285][T30662] ? strncpy_from_user+0x183/0x260 [ 727.455339][T30662] ? search_extable+0x53/0x80 [ 727.455358][T30662] ? strncpy_from_user+0x183/0x260 [ 727.455393][T30662] ? strncpy_from_user+0x183/0x260 [ 727.455469][T30662] ? skb_network_protocol+0x329/0x420 [ 727.455497][T30662] ? strncpy_from_user+0x218/0x260 [ 727.455531][T30662] ? do_user_addr_fault+0xd9e/0x1080 [ 727.455639][T30662] ? __rcu_read_unlock+0x4f/0x70 [ 727.455661][T30662] ? avc_has_perm_noaudit+0xab/0x130 [ 727.455684][T30662] ? cred_has_capability+0x210/0x280 [ 727.455718][T30662] ? selinux_capable+0x31/0x40 [ 727.455795][T30662] ? security_capable+0x83/0x90 [ 727.455831][T30662] ? ns_capable+0x7d/0xb0 [ 727.455888][T30662] ? __pfx_rtnl_newlink+0x10/0x10 [ 727.455907][T30662] rtnetlink_rcv_msg+0x5fe/0x6d0 [ 727.455930][T30662] netlink_rcv_skb+0x123/0x220 [ 727.456011][T30662] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 727.456035][T30662] rtnetlink_rcv+0x1c/0x30 [ 727.456092][T30662] netlink_unicast+0x5c0/0x690 [ 727.456124][T30662] netlink_sendmsg+0x58b/0x6b0 [ 727.456236][T30662] ? __pfx_netlink_sendmsg+0x10/0x10 [ 727.456270][T30662] __sock_sendmsg+0x145/0x180 [ 727.456291][T30662] ____sys_sendmsg+0x31e/0x4a0 [ 727.456326][T30662] ___sys_sendmsg+0x17b/0x1d0 [ 727.456439][T30662] __x64_sys_sendmsg+0xd4/0x160 [ 727.456473][T30662] x64_sys_call+0x17ba/0x3000 [ 727.456627][T30662] do_syscall_64+0xd8/0x2c0 [ 727.456663][T30662] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 727.456686][T30662] RIP: 0033:0x7f8f95a4f749 [ 727.456702][T30662] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 727.456755][T30662] RSP: 002b:00007f8f94475038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 727.456775][T30662] RAX: ffffffffffffffda RBX: 00007f8f95ca6180 RCX: 00007f8f95a4f749 [ 727.456788][T30662] RDX: 0000000000000000 RSI: 0000200000000080 RDI: 0000000000000003 [ 727.456801][T30662] RBP: 00007f8f94475090 R08: 0000000000000000 R09: 0000000000000000 [ 727.456814][T30662] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 727.456827][T30662] R13: 00007f8f95ca6218 R14: 00007f8f95ca6180 R15: 00007ffd5e67b3f8 [ 727.456885][T30662] [ 727.788960][T30663] netlink: 'syz.2.9577': attribute type 10 has an invalid length. [ 727.803766][T30663] team0: Port device dummy0 added [ 728.024378][T30690] FAULT_INJECTION: forcing a failure. [ 728.024378][T30690] name failslab, interval 1, probability 0, space 0, times 0 [ 728.037067][T30690] CPU: 0 UID: 0 PID: 30690 Comm: syz.2.9583 Not tainted syzkaller #0 PREEMPT(voluntary) [ 728.037095][T30690] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 728.037111][T30690] Call Trace: [ 728.037120][T30690] [ 728.037130][T30690] __dump_stack+0x1d/0x30 [ 728.037234][T30690] dump_stack_lvl+0xe8/0x140 [ 728.037302][T30690] dump_stack+0x15/0x1b [ 728.037324][T30690] should_fail_ex+0x265/0x280 [ 728.037355][T30690] should_failslab+0x8c/0xb0 [ 728.037385][T30690] kmem_cache_alloc_noprof+0x69/0x4b0 [ 728.037539][T30690] ? copy_net_ns+0x10c/0x460 [ 728.037634][T30690] copy_net_ns+0x10c/0x460 [ 728.037660][T30690] create_new_namespaces+0x20e/0x400 [ 728.037696][T30690] unshare_nsproxy_namespaces+0xe8/0x120 [ 728.037795][T30690] ksys_unshare+0x3d0/0x6d0 [ 728.037819][T30690] ? ksys_write+0x192/0x1a0 [ 728.037859][T30690] __x64_sys_unshare+0x1f/0x30 [ 728.037889][T30690] x64_sys_call+0x2ae6/0x3000 [ 728.037920][T30690] do_syscall_64+0xd8/0x2c0 [ 728.038025][T30690] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 728.038076][T30690] RIP: 0033:0x7f0843b0f749 [ 728.038094][T30690] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 728.038117][T30690] RSP: 002b:00007f0842535038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 728.038167][T30690] RAX: ffffffffffffffda RBX: 00007f0843d66180 RCX: 00007f0843b0f749 [ 728.038188][T30690] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000062040200 [ 728.038201][T30690] RBP: 00007f0842535090 R08: 0000000000000000 R09: 0000000000000000 [ 728.038215][T30690] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 728.038285][T30690] R13: 00007f0843d66218 R14: 00007f0843d66180 R15: 00007ffc4c6fc958 [ 728.038307][T30690] [ 728.225151][T30689] netlink: 'syz.1.9584': attribute type 1 has an invalid length. [ 728.839715][T30704] 9p: Bad value for 'rfdno' [ 729.010370][T30715] loop1: detected capacity change from 0 to 2048 [ 729.018138][T30721] xt_CT: You must specify a L4 protocol and not use inversions on it [ 729.028581][T30715] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 729.067005][T23178] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 729.081226][T30728] IPVS: Unknown mcast interface: vet [ 729.093357][T30732] loop1: detected capacity change from 0 to 2048 [ 729.122052][T30732] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 729.150940][T23178] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 729.223808][T30747] loop1: detected capacity change from 0 to 1024 [ 729.230554][T30747] EXT4-fs: inline encryption not supported [ 729.242370][T30747] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 729.284652][T30747] EXT4-fs error (device loop1): ext4_mb_mark_diskspace_used:4215: comm syz.1.9611: Allocating blocks 497-513 which overlap fs metadata [ 729.302007][T30747] EXT4-fs error (device loop1): ext4_mb_mark_diskspace_used:4215: comm syz.1.9611: Allocating blocks 497-513 which overlap fs metadata [ 729.323631][T30746] EXT4-fs (loop1): pa ffff888107e899a0: logic 48, phys. 177, len 21 [ 729.331793][T30746] EXT4-fs error (device loop1): ext4_mb_release_inode_pa:5466: group 0, free 0, pa_free 1 [ 729.352074][T23178] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 729.863840][ T29] kauditd_printk_skb: 377 callbacks suppressed [ 729.863912][ T29] audit: type=1326 audit(1766280543.898:43261): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30782 comm="syz.2.9625" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0843b0f749 code=0x7ffc0000 [ 729.895057][ T29] audit: type=1326 audit(1766280543.898:43262): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30782 comm="syz.2.9625" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0843b0f749 code=0x7ffc0000 [ 729.918665][ T29] audit: type=1326 audit(1766280543.898:43263): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30782 comm="syz.2.9625" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f0843b0f749 code=0x7ffc0000 [ 729.942428][ T29] audit: type=1326 audit(1766280543.898:43264): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30782 comm="syz.2.9625" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0843b0f749 code=0x7ffc0000 [ 729.966021][ T29] audit: type=1326 audit(1766280543.898:43265): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30782 comm="syz.2.9625" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0843b0f749 code=0x7ffc0000 [ 729.989661][ T29] audit: type=1326 audit(1766280543.898:43266): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30782 comm="syz.2.9625" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f0843b0f749 code=0x7ffc0000 [ 730.013265][ T29] audit: type=1326 audit(1766280543.898:43267): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30782 comm="syz.2.9625" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0843b0f749 code=0x7ffc0000 [ 730.036983][ T29] audit: type=1326 audit(1766280543.898:43268): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30782 comm="syz.2.9625" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f0843b0f749 code=0x7ffc0000 [ 730.060592][ T29] audit: type=1326 audit(1766280543.898:43269): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30782 comm="syz.2.9625" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0843b0f749 code=0x7ffc0000 [ 730.084175][ T29] audit: type=1326 audit(1766280543.898:43270): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30782 comm="syz.2.9625" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f0843b0f749 code=0x7ffc0000 [ 730.228027][T30805] xt_CT: You must specify a L4 protocol and not use inversions on it [ 730.233174][T30807] serio: Serial port ttyS3 [ 730.243123][T30805] __nla_validate_parse: 7 callbacks suppressed [ 730.243135][T30805] netlink: 16 bytes leftover after parsing attributes in process `syz.0.9635'. [ 730.583459][T20982] bridge_slave_1: left allmulticast mode [ 730.589186][T20982] bridge_slave_1: left promiscuous mode [ 730.594947][T20982] bridge0: port 2(bridge_slave_1) entered disabled state [ 730.602759][T20982] bridge_slave_0: left allmulticast mode [ 730.608483][T20982] bridge_slave_0: left promiscuous mode [ 730.614150][T20982] bridge0: port 1(bridge_slave_0) entered disabled state [ 730.922749][T20982] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 730.932874][T20982] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 730.942352][T20982] bond0 (unregistering): Released all slaves [ 730.950985][T20982] bond1 (unregistering): Released all slaves [ 730.992936][T20982] tipc: Disabling bearer [ 730.997910][T20982] tipc: Disabling bearer [ 731.002862][T20982] tipc: Left network mode [ 731.036323][T20982] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 731.043859][T20982] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 731.055571][T20982] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 731.063240][T20982] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 731.099408][T20982] veth1_macvtap: left promiscuous mode [ 731.110558][T20982] veth0_macvtap: left promiscuous mode [ 731.116113][T20982] veth1_vlan: left promiscuous mode [ 731.124555][T20982] veth0_vlan: left promiscuous mode [ 731.144619][T30819] loop3: detected capacity change from 0 to 512 [ 731.161541][T30819] EXT4-fs (loop3): revision level too high, forcing read-only mode [ 731.192230][T30819] EXT4-fs (loop3): orphan cleanup on readonly fs [ 731.205104][T20982] team0 (unregistering): Port device team_slave_0 removed [ 731.222390][T30819] EXT4-fs error (device loop3): ext4_do_update_inode:5617: inode #16: comm syz.3.9640: corrupted inode contents [ 731.240117][T30819] EXT4-fs (loop3): Remounting filesystem read-only [ 731.258503][T30819] EXT4-fs (loop3): 1 truncate cleaned up [ 731.264401][T20997] EXT4-fs (loop3): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 731.274961][T20997] EXT4-fs (loop3): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 731.286657][T20997] EXT4-fs (loop3): Quota write (off=8, len=24) cancelled because transaction is not started [ 731.297634][T30819] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 731.369821][T30842] openvswitch: netlink: Missing key (keys=40, expected=200000) [ 731.377967][T27470] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 731.429128][T30851] netlink: 60 bytes leftover after parsing attributes in process `syz.0.9651'. [ 731.660054][T30876] netlink: 68 bytes leftover after parsing attributes in process `syz.3.9662'. [ 731.767266][T30895] netlink: 60 bytes leftover after parsing attributes in process `syz.0.9672'. [ 731.825860][T30903] netlink: 68 bytes leftover after parsing attributes in process `syz.3.9676'. [ 731.964044][T30927] netlink: 68 bytes leftover after parsing attributes in process `syz.0.9688'. [ 732.017395][T30934] netlink: 60 bytes leftover after parsing attributes in process `syz.0.9691'. [ 732.204808][T30952] netlink: 68 bytes leftover after parsing attributes in process `syz.2.9700'. [ 732.430554][T30972] lo speed is unknown, defaulting to 1000 [ 732.529311][T30972] lo speed is unknown, defaulting to 1000 [ 732.941672][T31014] openvswitch: netlink: Missing key (keys=40, expected=200000) [ 733.197907][T31056] loop3: detected capacity change from 0 to 2048 [ 733.205340][T31061] 9p: Bad value for 'rfdno' [ 733.243086][T31056] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 733.305310][T27470] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 733.374667][T31081] netlink: 'syz.3.9755': attribute type 10 has an invalid length. [ 733.386815][T31081] team0: Failed to send options change via netlink (err -105) [ 733.394493][T31081] team0: Port device dummy0 added [ 733.400852][T31081] netlink: 'syz.3.9755': attribute type 10 has an invalid length. [ 733.409247][T31081] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 733.448076][T31081] team0: Failed to send options change via netlink (err -105) [ 733.455785][T31081] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 733.465436][T31081] team0: Port device dummy0 removed [ 733.477597][T31081] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 733.498061][T31085] lo speed is unknown, defaulting to 1000 [ 733.596926][T31085] lo speed is unknown, defaulting to 1000 [ 733.898962][T31111] loop3: detected capacity change from 0 to 2048 [ 733.913851][T31111] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 734.001326][T31128] netlink: 60 bytes leftover after parsing attributes in process `syz.1.9776'. [ 734.277262][T31160] netlink: 68 bytes leftover after parsing attributes in process `syz.0.9790'. [ 734.707320][T31205] openvswitch: netlink: Missing key (keys=40, expected=200000) [ 734.862290][T31231] openvswitch: netlink: Missing key (keys=40, expected=200000) [ 734.880937][ T29] kauditd_printk_skb: 308 callbacks suppressed [ 734.880965][ T29] audit: type=1326 audit(1766280548.908:43573): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31220 comm="syz.0.9820" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f788621f749 code=0x7ffc0000 [ 734.910855][ T29] audit: type=1326 audit(1766280548.908:43574): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31220 comm="syz.0.9820" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f788621f749 code=0x7ffc0000 [ 734.934465][ T29] audit: type=1326 audit(1766280548.908:43575): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31220 comm="syz.0.9820" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f788621f749 code=0x7ffc0000 [ 734.958066][ T29] audit: type=1326 audit(1766280548.908:43576): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31220 comm="syz.0.9820" exe="/root/syz-executor" sig=0 arch=c000003e syscall=258 compat=0 ip=0x7f788621de97 code=0x7ffc0000 [ 734.981739][ T29] audit: type=1326 audit(1766280548.908:43577): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31220 comm="syz.0.9820" exe="/root/syz-executor" sig=0 arch=c000003e syscall=165 compat=0 ip=0x7f7886220eea code=0x7ffc0000 [ 735.005324][ T29] audit: type=1326 audit(1766280548.908:43578): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31220 comm="syz.0.9820" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f788621f749 code=0x7ffc0000 [ 735.028994][ T29] audit: type=1326 audit(1766280548.908:43579): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31220 comm="syz.0.9820" exe="/root/syz-executor" sig=0 arch=c000003e syscall=258 compat=0 ip=0x7f788621de97 code=0x7ffc0000 [ 735.052620][ T29] audit: type=1326 audit(1766280548.908:43580): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31220 comm="syz.0.9820" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f788621f749 code=0x7ffc0000 [ 735.076595][ T29] audit: type=1326 audit(1766280548.918:43581): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31220 comm="syz.0.9820" exe="/root/syz-executor" sig=0 arch=c000003e syscall=303 compat=0 ip=0x7f788621f749 code=0x7ffc0000 [ 735.100407][ T29] audit: type=1326 audit(1766280548.918:43582): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31220 comm="syz.0.9820" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f788621f749 code=0x7ffc0000 [ 735.321389][T31255] __nla_validate_parse: 3 callbacks suppressed [ 735.321406][T31255] netlink: 4 bytes leftover after parsing attributes in process `syz.1.9836'. [ 735.321773][T31261] openvswitch: netlink: Missing key (keys=40, expected=200000) [ 735.416119][T31263] lo speed is unknown, defaulting to 1000 [ 735.523114][T31263] lo speed is unknown, defaulting to 1000 [ 735.610691][T31266] serio: Serial port ttyS3 [ 735.924673][T31297] openvswitch: netlink: Missing key (keys=40, expected=200000) [ 736.078284][T31323] openvswitch: netlink: Missing key (keys=40, expected=200000) [ 736.282349][T31352] openvswitch: netlink: Missing key (keys=40, expected=200000) [ 736.430901][T31364] lo speed is unknown, defaulting to 1000 [ 736.536029][T31364] lo speed is unknown, defaulting to 1000 [ 736.712545][T31367] loop3: detected capacity change from 0 to 512 [ 736.750501][T31367] EXT4-fs: Ignoring removed nomblk_io_submit option [ 736.760489][T31367] EXT4-fs: Ignoring removed nomblk_io_submit option [ 736.767379][T31367] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 736.780638][T31367] EXT4-fs (loop3): 1 truncate cleaned up [ 736.786859][T31367] EXT4-fs mount: 1 callbacks suppressed [ 736.786877][T31367] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 737.172816][T31431] openvswitch: netlink: Missing key (keys=40, expected=200000) [ 737.261876][T27470] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 737.378769][T31449] netlink: 60 bytes leftover after parsing attributes in process `syz.2.9922'. [ 737.409128][T31453] loop3: detected capacity change from 0 to 2048 [ 737.439048][T31453] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 737.462231][T31461] openvswitch: netlink: Missing key (keys=40, expected=200000) [ 737.496694][T27470] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 737.685245][T31485] hub 2-0:1.0: USB hub found [ 737.690002][T31485] hub 2-0:1.0: 8 ports detected [ 737.792946][T31496] openvswitch: netlink: Missing key (keys=40, expected=200000) [ 737.799843][T31468] netlink: 4 bytes leftover after parsing attributes in process `syz.4.9930'. [ 737.833888][T31498] netlink: 60 bytes leftover after parsing attributes in process `syz.0.9944'. [ 738.055813][T31533] openvswitch: netlink: Missing key (keys=40, expected=200000) [ 738.122206][T31539] netlink: 60 bytes leftover after parsing attributes in process `syz.0.9962'. [ 738.274218][T31535] netlink: 4 bytes leftover after parsing attributes in process `syz.2.9960'. [ 738.297829][T31549] netlink: 28 bytes leftover after parsing attributes in process `syz.4.9965'. [ 738.306937][T31549] netlink: 108 bytes leftover after parsing attributes in process `syz.4.9965'. [ 738.316523][T31549] netlink: 28 bytes leftover after parsing attributes in process `syz.4.9965'. [ 738.325920][T31549] netlink: 108 bytes leftover after parsing attributes in process `syz.4.9965'. [ 738.397193][T31559] serio: Serial port ttyS3 [ 739.327064][T31658] random: crng reseeded on system resumption [ 739.790223][T31717] lo speed is unknown, defaulting to 1000 [ 739.890979][T31717] lo speed is unknown, defaulting to 1000 [ 739.994318][T31724] openvswitch: netlink: Missing key (keys=40, expected=200000) [ 740.080404][ T29] kauditd_printk_skb: 584 callbacks suppressed [ 740.080458][ T29] audit: type=1326 audit(1766280554.108:44167): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31721 comm="syz.4.10044" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8f95a4f749 code=0x7ffc0000 [ 740.110426][ T29] audit: type=1326 audit(1766280554.108:44168): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31721 comm="syz.4.10044" exe="/root/syz-executor" sig=0 arch=c000003e syscall=186 compat=0 ip=0x7f8f95a4f749 code=0x7ffc0000 [ 740.134239][ T29] audit: type=1326 audit(1766280554.108:44169): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31721 comm="syz.4.10044" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8f95a4f749 code=0x7ffc0000 [ 740.157966][ T29] audit: type=1326 audit(1766280554.108:44170): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31721 comm="syz.4.10044" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8f95a4f749 code=0x7ffc0000 [ 740.181864][ T29] audit: type=1326 audit(1766280554.108:44171): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31721 comm="syz.4.10044" exe="/root/syz-executor" sig=0 arch=c000003e syscall=129 compat=0 ip=0x7f8f95a4f749 code=0x7ffc0000 [ 740.205557][ T29] audit: type=1326 audit(1766280554.108:44172): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31721 comm="syz.4.10044" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f8f95a465e7 code=0x7ffc0000 [ 740.229225][ T29] audit: type=1326 audit(1766280554.108:44173): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31721 comm="syz.4.10044" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f8f959eb829 code=0x7ffc0000 [ 740.252967][ T29] audit: type=1326 audit(1766280554.108:44174): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31721 comm="syz.4.10044" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8f95a4f749 code=0x7ffc0000 [ 740.276861][ T29] audit: type=1326 audit(1766280554.108:44175): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31721 comm="syz.4.10044" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8f95a4f749 code=0x7ffc0000 [ 740.300580][ T29] audit: type=1326 audit(1766280554.108:44176): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31721 comm="syz.4.10044" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f8f95a4f749 code=0x7ffc0000 [ 740.354206][T31737] __nla_validate_parse: 9 callbacks suppressed [ 740.354220][T31737] netlink: 12 bytes leftover after parsing attributes in process `syz.4.10050'. [ 740.373164][T31741] FAULT_INJECTION: forcing a failure. [ 740.373164][T31741] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 740.386231][T31741] CPU: 1 UID: 0 PID: 31741 Comm: syz.0.10052 Not tainted syzkaller #0 PREEMPT(voluntary) [ 740.386318][T31741] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 740.386334][T31741] Call Trace: [ 740.386342][T31741] [ 740.386351][T31741] __dump_stack+0x1d/0x30 [ 740.386383][T31741] dump_stack_lvl+0xe8/0x140 [ 740.386465][T31741] dump_stack+0x15/0x1b [ 740.386489][T31741] should_fail_ex+0x265/0x280 [ 740.386569][T31741] should_fail+0xb/0x20 [ 740.386599][T31741] should_fail_usercopy+0x1a/0x20 [ 740.386625][T31741] _copy_from_iter+0xcf/0xe70 [ 740.386784][T31741] ? alloc_pages_mpol+0x217/0x260 [ 740.386822][T31741] copy_page_from_iter+0x178/0x2a0 [ 740.386865][T31741] tun_get_user+0x679/0x2670 [ 740.386899][T31741] ? ref_tracker_alloc+0x1f2/0x2f0 [ 740.386931][T31741] tun_chr_write_iter+0x15e/0x210 [ 740.386958][T31741] ? __pfx_tun_chr_write_iter+0x10/0x10 [ 740.387045][T31741] vfs_write+0x52a/0x960 [ 740.387073][T31741] ksys_write+0xda/0x1a0 [ 740.387099][T31741] __x64_sys_write+0x40/0x50 [ 740.387122][T31741] x64_sys_call+0x2847/0x3000 [ 740.387222][T31741] do_syscall_64+0xd8/0x2c0 [ 740.387339][T31741] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 740.387365][T31741] RIP: 0033:0x7f788621e1ff [ 740.387380][T31741] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48 [ 740.387400][T31741] RSP: 002b:00007f7884c87000 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 740.387421][T31741] RAX: ffffffffffffffda RBX: 00007f7886475fa0 RCX: 00007f788621e1ff [ 740.387436][T31741] RDX: 000000000000006e RSI: 0000200000000640 RDI: 00000000000000c8 [ 740.387453][T31741] RBP: 00007f7884c87090 R08: 0000000000000000 R09: 0000000000000000 [ 740.387468][T31741] R10: 000000000000006e R11: 0000000000000293 R12: 0000000000000001 [ 740.387482][T31741] R13: 00007f7886476038 R14: 00007f7886475fa0 R15: 00007ffc3c8aa5b8 [ 740.387504][T31741] [ 740.609266][T31746] netlink: 60 bytes leftover after parsing attributes in process `syz.4.10054'. [ 740.831372][T31775] FAULT_INJECTION: forcing a failure. [ 740.831372][T31775] name failslab, interval 1, probability 0, space 0, times 0 [ 740.844131][T31775] CPU: 0 UID: 0 PID: 31775 Comm: syz.0.10068 Not tainted syzkaller #0 PREEMPT(voluntary) [ 740.844172][T31775] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 740.844191][T31775] Call Trace: [ 740.844196][T31775] [ 740.844201][T31775] __dump_stack+0x1d/0x30 [ 740.844251][T31775] dump_stack_lvl+0xe8/0x140 [ 740.844265][T31775] dump_stack+0x15/0x1b [ 740.844283][T31775] should_fail_ex+0x265/0x280 [ 740.844298][T31775] should_failslab+0x8c/0xb0 [ 740.844313][T31775] kmem_cache_alloc_lru_noprof+0x6d/0x4c0 [ 740.844336][T31775] ? __d_alloc+0x37/0x340 [ 740.844395][T31775] __d_alloc+0x37/0x340 [ 740.844423][T31775] ? selinux_inode_permission+0x6be/0x7c0 [ 740.844443][T31775] d_alloc_parallel+0x54/0xcd0 [ 740.844519][T31775] ? security_inode_permission+0x4a/0xb0 [ 740.844537][T31775] ? lockref_get_not_dead+0x120/0x1c0 [ 740.844556][T31775] ? __rcu_read_unlock+0x4f/0x70 [ 740.844584][T31775] __lookup_slow+0x8c/0x250 [ 740.844603][T31775] lookup_slow+0x3c/0x60 [ 740.844620][T31775] path_lookupat+0x2f7/0x500 [ 740.844642][T31775] ? _parse_integer+0x27/0x40 [ 740.844730][T31775] filename_lookup+0x147/0x340 [ 740.844752][T31775] user_path_at+0x3e/0x130 [ 740.844804][T31775] __se_sys_inotify_add_watch+0x102/0x7b0 [ 740.844821][T31775] ? mutex_unlock+0x4f/0x90 [ 740.844876][T31775] ? fput+0x8f/0xc0 [ 740.844892][T31775] ? ksys_write+0x192/0x1a0 [ 740.844905][T31775] __x64_sys_inotify_add_watch+0x43/0x50 [ 740.844922][T31775] x64_sys_call+0xa6d/0x3000 [ 740.844970][T31775] do_syscall_64+0xd8/0x2c0 [ 740.844991][T31775] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 740.845005][T31775] RIP: 0033:0x7f788621f749 [ 740.845040][T31775] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 740.845052][T31775] RSP: 002b:00007f7884c87038 EFLAGS: 00000246 ORIG_RAX: 00000000000000fe [ 740.845064][T31775] RAX: ffffffffffffffda RBX: 00007f7886475fa0 RCX: 00007f788621f749 [ 740.845073][T31775] RDX: 000000000400017e RSI: 00002000000000c0 RDI: 0000000000000006 [ 740.845080][T31775] RBP: 00007f7884c87090 R08: 0000000000000000 R09: 0000000000000000 [ 740.845088][T31775] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 740.845175][T31775] R13: 00007f7886476038 R14: 00007f7886475fa0 R15: 00007ffc3c8aa5b8 [ 740.845187][T31775] [ 741.196683][T31794] netlink: 60 bytes leftover after parsing attributes in process `syz.2.10077'. [ 741.328664][T31804] lo speed is unknown, defaulting to 1000 [ 741.429084][T31804] lo speed is unknown, defaulting to 1000 [ 741.700163][T31811] openvswitch: netlink: Missing key (keys=40, expected=200000) [ 741.854686][T31833] netlink: 60 bytes leftover after parsing attributes in process `syz.1.10095'. [ 742.014764][T31838] loop3: detected capacity change from 0 to 4096 [ 742.021457][T31838] EXT4-fs: Ignoring removed mblk_io_submit option [ 742.027906][T31838] EXT4-fs: test_dummy_encryption option not supported [ 742.066019][T31849] xt_CT: You must specify a L4 protocol and not use inversions on it [ 742.084204][T31849] netlink: 16 bytes leftover after parsing attributes in process `syz.4.10102'. [ 742.426466][T31886] lo speed is unknown, defaulting to 1000 [ 742.527867][T31886] lo speed is unknown, defaulting to 1000 [ 742.576084][T31887] loop3: detected capacity change from 0 to 2048 [ 742.612454][T31887] Alternate GPT is invalid, using primary GPT. [ 742.618708][T31887] loop3: p1 p2 p3 [ 742.622507][T31887] loop3: partition table partially beyond EOD, truncated [ 742.925141][T31912] netlink: 36 bytes leftover after parsing attributes in process `syz.2.10130'. [ 742.962908][T31916] openvswitch: netlink: Missing key (keys=40, expected=200000) [ 743.508007][T31947] lo speed is unknown, defaulting to 1000 [ 743.607133][T31947] lo speed is unknown, defaulting to 1000 [ 744.303188][T32004] openvswitch: netlink: Missing key (keys=40, expected=200000) [ 744.312801][T32006] loop3: detected capacity change from 0 to 2048 [ 744.335531][T32006] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 744.351202][T32013] xt_CT: You must specify a L4 protocol and not use inversions on it [ 744.362108][T32013] netlink: 16 bytes leftover after parsing attributes in process `syz.4.10173'. [ 744.422544][T32006] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 744.481226][T32031] openvswitch: netlink: Missing key (keys=40, expected=200000) [ 744.488139][T32032] netlink: 172 bytes leftover after parsing attributes in process `syz.2.10181'. [ 744.721119][T32068] netlink: 60 bytes leftover after parsing attributes in process `syz.2.10199'. [ 745.109083][ T29] kauditd_printk_skb: 511 callbacks suppressed [ 745.109097][ T29] audit: type=1400 audit(1766280559.138:44688): avc: denied { write } for pid=32115 comm="syz.3.10222" name="rtc0" dev="devtmpfs" ino=244 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 745.152319][ T29] audit: type=1326 audit(1766280559.168:44689): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32107 comm="syz.1.10218" exe="/root/syz-executor" sig=0 arch=c000003e syscall=19 compat=0 ip=0x7fb90844f749 code=0x7ffc0000 [ 745.154814][T32123] openvswitch: netlink: Missing key (keys=40, expected=200000) [ 745.375521][ T29] audit: type=1326 audit(1766280559.408:44690): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32143 comm="syz.0.10233" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f788621f749 code=0x7ffc0000 [ 745.399215][ T29] audit: type=1326 audit(1766280559.408:44691): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32143 comm="syz.0.10233" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f788621f749 code=0x7ffc0000 [ 745.422875][ T29] audit: type=1326 audit(1766280559.408:44692): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32143 comm="syz.0.10233" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f788621f749 code=0x7ffc0000 [ 745.446607][ T29] audit: type=1326 audit(1766280559.408:44693): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32143 comm="syz.0.10233" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f788621f749 code=0x7ffc0000 [ 745.470367][ T29] audit: type=1326 audit(1766280559.408:44694): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32143 comm="syz.0.10233" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f788621f749 code=0x7ffc0000 [ 745.491707][T32152] openvswitch: netlink: Missing key (keys=40, expected=200000) [ 745.494142][ T29] audit: type=1326 audit(1766280559.408:44695): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32143 comm="syz.0.10233" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f788621f749 code=0x7ffc0000 [ 745.525229][ T29] audit: type=1326 audit(1766280559.408:44696): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32143 comm="syz.0.10233" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f788621f749 code=0x7ffc0000 [ 745.548971][ T29] audit: type=1326 audit(1766280559.408:44697): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32143 comm="syz.0.10233" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f788621f749 code=0x7ffc0000 [ 745.601926][T32158] xt_CT: You must specify a L4 protocol and not use inversions on it [ 745.613412][T32158] netlink: 16 bytes leftover after parsing attributes in process `syz.3.10238'. [ 745.959673][T32196] netlink: 60 bytes leftover after parsing attributes in process `syz.1.10255'. [ 746.058642][T32211] netlink: 60 bytes leftover after parsing attributes in process `syz.4.10261'. [ 746.459641][T32243] openvswitch: netlink: Missing key (keys=40, expected=200000) [ 746.461443][T32245] openvswitch: netlink: Missing key (keys=40, expected=200000) [ 746.676003][T32257] loop3: detected capacity change from 0 to 2048 [ 746.726659][T32263] xt_CT: You must specify a L4 protocol and not use inversions on it [ 746.772207][T32257] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 746.942397][T32275] openvswitch: netlink: Missing key (keys=40, expected=200000) [ 746.992200][T32257] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 747.094655][T32291] openvswitch: netlink: Missing key (keys=40, expected=200000) [ 747.134368][T32297] openvswitch: netlink: Missing key (keys=40, expected=200000) [ 747.331465][T32313] netlink: 40 bytes leftover after parsing attributes in process `syz.4.10308'. [ 747.386393][T32321] netlink: 60 bytes leftover after parsing attributes in process `syz.2.10312'. [ 747.399107][T32325] loop3: detected capacity change from 0 to 2048 [ 747.412244][T32325] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 747.453464][T27470] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 747.587381][T32350] lo speed is unknown, defaulting to 1000 [ 747.622809][T32351] netlink: 40 bytes leftover after parsing attributes in process `syz.1.10324'. [ 747.763707][T32362] loop3: detected capacity change from 0 to 2048 [ 747.805138][T32362] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 747.866704][T27470] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 747.902787][T32350] lo speed is unknown, defaulting to 1000 [ 748.110917][T32383] lo speed is unknown, defaulting to 1000 [ 748.213210][T32383] lo speed is unknown, defaulting to 1000 [ 748.262920][T32384] loop3: detected capacity change from 0 to 2048 [ 748.327381][T32384] Alternate GPT is invalid, using primary GPT. [ 748.333813][T32384] loop3: p1 p2 p3 [ 748.337527][T32384] loop3: partition table partially beyond EOD, truncated [ 748.533638][T32396] net_ratelimit: 5 callbacks suppressed [ 748.533653][T32396] openvswitch: netlink: Missing key (keys=40, expected=200000) [ 748.856844][T32448] xt_CT: You must specify a L4 protocol and not use inversions on it [ 748.894311][T32448] netlink: 16 bytes leftover after parsing attributes in process `syz.3.10367'. [ 749.181346][T32484] openvswitch: netlink: Missing key (keys=40, expected=200000) [ 749.223518][T32490] openvswitch: netlink: Missing key (keys=40, expected=200000) [ 749.283508][T32501] veth0_to_batadv: entered promiscuous mode [ 749.289584][T32501] macvtap1: entered allmulticast mode [ 749.295098][T32501] veth0_to_batadv: entered allmulticast mode [ 749.303298][T32501] batman_adv: batadv0: Adding interface: macvtap1 [ 749.309725][T32501] batman_adv: batadv0: The MTU of interface macvtap1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 749.335945][T32501] batman_adv: batadv0: Interface activated: macvtap1 [ 749.379170][T32513] openvswitch: netlink: Missing key (keys=40, expected=200000) [ 749.405431][T32517] openvswitch: netlink: Missing key (keys=40, expected=200000) [ 749.494100][T32530] ip6gre0: entered promiscuous mode [ 749.504281][T32530] team0: Device ip6gre0 is of different type [ 749.618937][T32558] FAULT_INJECTION: forcing a failure. [ 749.618937][T32558] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 749.632245][T32558] CPU: 1 UID: 0 PID: 32558 Comm: syz.4.10416 Not tainted syzkaller #0 PREEMPT(voluntary) [ 749.632275][T32558] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 749.632291][T32558] Call Trace: [ 749.632299][T32558] [ 749.632386][T32558] __dump_stack+0x1d/0x30 [ 749.632460][T32558] dump_stack_lvl+0xe8/0x140 [ 749.632501][T32558] dump_stack+0x15/0x1b [ 749.632522][T32558] should_fail_ex+0x265/0x280 [ 749.632546][T32558] should_fail+0xb/0x20 [ 749.632566][T32558] should_fail_usercopy+0x1a/0x20 [ 749.632633][T32558] _copy_from_user+0x1c/0xb0 [ 749.632745][T32558] __se_sys_add_key+0x20e/0x350 [ 749.632785][T32558] __x64_sys_add_key+0x67/0x80 [ 749.632940][T32558] x64_sys_call+0x2ea3/0x3000 [ 749.632968][T32558] do_syscall_64+0xd8/0x2c0 [ 749.633009][T32558] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 749.633113][T32558] RIP: 0033:0x7f8f95a4f749 [ 749.633131][T32558] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 749.633153][T32558] RSP: 002b:00007f8f944b7038 EFLAGS: 00000246 ORIG_RAX: 00000000000000f8 [ 749.633175][T32558] RAX: ffffffffffffffda RBX: 00007f8f95ca5fa0 RCX: 00007f8f95a4f749 [ 749.633241][T32558] RDX: 0000200000000100 RSI: 0000000000000000 RDI: 0000200000000280 [ 749.633257][T32558] RBP: 00007f8f944b7090 R08: ffffffffffffffff R09: 0000000000000000 [ 749.633271][T32558] R10: 0000000000000018 R11: 0000000000000246 R12: 0000000000000001 [ 749.633284][T32558] R13: 00007f8f95ca6038 R14: 00007f8f95ca5fa0 R15: 00007ffd5e67b3f8 [ 749.633312][T32558] [ 749.925773][T32580] 9p: Bad value for 'rfdno' [ 749.955199][T32588] xt_CT: You must specify a L4 protocol and not use inversions on it [ 749.982975][T32588] netlink: 16 bytes leftover after parsing attributes in process `syz.2.10427'. [ 749.994717][T32570] lo speed is unknown, defaulting to 1000 [ 750.003626][T32593] xt_CT: You must specify a L4 protocol and not use inversions on it [ 750.014481][T32593] netlink: 16 bytes leftover after parsing attributes in process `syz.4.10429'. [ 750.053013][T20997] netdevsim netdevsim1 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 750.062884][T20997] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 750.073665][T32570] lo speed is unknown, defaulting to 1000 [ 750.122026][T20997] netdevsim netdevsim1 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 750.131998][T20997] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 750.144588][T32570] chnl_net:caif_netlink_parms(): no params data found [ 750.179430][T20997] netdevsim netdevsim1 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 750.189262][T20997] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 750.200020][T32570] bridge0: port 1(bridge_slave_0) entered blocking state [ 750.207189][T32570] bridge0: port 1(bridge_slave_0) entered disabled state [ 750.214445][T32570] bridge_slave_0: entered allmulticast mode [ 750.221253][T32570] bridge_slave_0: entered promiscuous mode [ 750.227915][T32570] bridge0: port 2(bridge_slave_1) entered blocking state [ 750.234988][T32570] bridge0: port 2(bridge_slave_1) entered disabled state [ 750.242143][T32570] bridge_slave_1: entered allmulticast mode [ 750.248684][T32570] bridge_slave_1: entered promiscuous mode [ 750.256082][T20997] netdevsim netdevsim1 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 750.265832][T20997] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 750.287240][T32570] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 750.297973][T32570] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 750.317739][T32570] team0: Port device team_slave_0 added [ 750.324460][T32570] team0: Port device team_slave_1 added [ 750.343021][T32570] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 750.349976][T32570] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 750.375940][T32570] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 750.392466][T32570] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 750.399414][T32570] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 750.425680][T32570] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 750.450172][T20997] bridge_slave_1: left allmulticast mode [ 750.455975][T20997] bridge_slave_1: left promiscuous mode [ 750.461638][T20997] bridge0: port 2(bridge_slave_1) entered disabled state [ 750.469553][T20997] bridge_slave_0: left allmulticast mode [ 750.475273][T20997] bridge_slave_0: left promiscuous mode [ 750.480878][T20997] bridge0: port 1(bridge_slave_0) entered disabled state [ 750.720197][T32602] loop3: detected capacity change from 0 to 2048 [ 750.732033][T32602] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 750.752608][T27470] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 750.785785][ T29] kauditd_printk_skb: 534 callbacks suppressed [ 750.785852][ T29] audit: type=1326 audit(1766280564.818:45232): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32608 comm="syz.3.10432" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f37506cf749 code=0x7ffc0000 [ 750.818764][ T29] audit: type=1326 audit(1766280564.858:45233): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32608 comm="syz.3.10432" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f37506cf749 code=0x7ffc0000 [ 750.842559][ T29] audit: type=1326 audit(1766280564.858:45234): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32608 comm="syz.3.10432" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f37506cf749 code=0x7ffc0000 [ 750.866266][ T29] audit: type=1326 audit(1766280564.858:45235): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32608 comm="syz.3.10432" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f37506cf749 code=0x7ffc0000 [ 750.889952][ T29] audit: type=1326 audit(1766280564.858:45236): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32608 comm="syz.3.10432" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f37506cf749 code=0x7ffc0000 [ 750.913666][ T29] audit: type=1326 audit(1766280564.858:45237): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32608 comm="syz.3.10432" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f37506cf749 code=0x7ffc0000 [ 750.937502][ T29] audit: type=1326 audit(1766280564.858:45238): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32608 comm="syz.3.10432" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f37506cf749 code=0x7ffc0000 [ 750.961267][ T29] audit: type=1326 audit(1766280564.858:45239): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32608 comm="syz.3.10432" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f37506cf749 code=0x7ffc0000 [ 750.984941][ T29] audit: type=1326 audit(1766280564.858:45240): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32608 comm="syz.3.10432" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f37506cf749 code=0x7ffc0000 [ 751.009076][ T29] audit: type=1326 audit(1766280564.858:45241): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32608 comm="syz.3.10432" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f37506cf749 code=0x7ffc0000 [ 751.099722][T32633] FAULT_INJECTION: forcing a failure. [ 751.099722][T32633] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 751.112968][T32633] CPU: 0 UID: 0 PID: 32633 Comm: syz.2.10442 Not tainted syzkaller #0 PREEMPT(voluntary) [ 751.113081][T32633] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 751.113097][T32633] Call Trace: [ 751.113105][T32633] [ 751.113115][T32633] __dump_stack+0x1d/0x30 [ 751.113166][T32633] dump_stack_lvl+0xe8/0x140 [ 751.113203][T32633] dump_stack+0x15/0x1b [ 751.113237][T32633] should_fail_ex+0x265/0x280 [ 751.113265][T32633] should_fail+0xb/0x20 [ 751.113286][T32633] should_fail_usercopy+0x1a/0x20 [ 751.113312][T32633] _copy_to_user+0x20/0xa0 [ 751.113408][T32633] simple_read_from_buffer+0xb5/0x130 [ 751.113435][T32633] proc_fail_nth_read+0x10e/0x150 [ 751.113506][T32633] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 751.113536][T32633] vfs_read+0x1a8/0x770 [ 751.113555][T32633] ? __rcu_read_unlock+0x4f/0x70 [ 751.113622][T32633] ? __fget_files+0x184/0x1c0 [ 751.113646][T32633] ? mutex_lock+0x58/0x90 [ 751.113665][T32633] ksys_read+0xda/0x1a0 [ 751.113677][T32633] __x64_sys_read+0x40/0x50 [ 751.113766][T32633] x64_sys_call+0x2889/0x3000 [ 751.113781][T32633] do_syscall_64+0xd8/0x2c0 [ 751.113802][T32633] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 751.113815][T32633] RIP: 0033:0x7f0843b0e15c [ 751.113906][T32633] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 751.113922][T32633] RSP: 002b:00007f0842577030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 751.113935][T32633] RAX: ffffffffffffffda RBX: 00007f0843d65fa0 RCX: 00007f0843b0e15c [ 751.113964][T32633] RDX: 000000000000000f RSI: 00007f08425770a0 RDI: 0000000000000004 [ 751.113972][T32633] RBP: 00007f0842577090 R08: 0000000000000000 R09: 0000000000000000 [ 751.113980][T32633] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 751.113988][T32633] R13: 00007f0843d66038 R14: 00007f0843d65fa0 R15: 00007ffc4c6fc958 [ 751.113999][T32633] [ 751.332920][T20997] $Hÿ (unregistering): (slave bond_slave_0): Releasing backup interface [ 751.341698][T20997] bond_slave_0: left promiscuous mode [ 751.348362][T20997] $Hÿ (unregistering): (slave bond_slave_1): Releasing backup interface [ 751.366139][T20997] bond_slave_1: left promiscuous mode [ 751.379746][T20997] $Hÿ (unregistering): Released all slaves [ 751.412346][T32570] hsr_slave_0: entered promiscuous mode [ 751.424374][T32570] hsr_slave_1: entered promiscuous mode [ 751.431031][T32570] debugfs: 'hsr0' already exists in 'hsr' [ 751.436769][T32570] Cannot create hsr debugfs directory [ 751.442575][T20997] tipc: Disabling bearer [ 751.447525][T20997] tipc: Left network mode [ 751.458336][T32638] lo speed is unknown, defaulting to 1000 [ 751.498442][T32661] openvswitch: netlink: Missing key (keys=40, expected=200000) [ 751.712181][T32638] lo speed is unknown, defaulting to 1000 [ 751.724556][T32652] siw: device registration error -23 [ 751.763571][T20997] hsr_slave_0: left promiscuous mode [ 751.768118][T32684] netlink: 32 bytes leftover after parsing attributes in process `syz.3.10461'. [ 751.778331][T20997] hsr_slave_1: left promiscuous mode [ 751.784171][T20997] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 751.791647][T20997] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 751.809959][T20997] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 751.817376][T20997] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 751.878537][T20997] batman_adv: batadv0: Interface deactivated: macvtap1 [ 751.885442][T20997] batman_adv: batadv0: Removing interface: macvtap1 [ 751.903805][T20997] veth0_to_batadv: left allmulticast mode [ 751.909687][T20997] veth0_to_batadv: left promiscuous mode [ 751.915680][T20997] veth1_macvtap: left promiscuous mode [ 751.921255][T20997] veth0_macvtap: left promiscuous mode [ 751.926880][T20997] veth1_vlan: left promiscuous mode [ 751.926917][T20997] veth0_vlan: left promiscuous mode [ 752.004851][T32696] loop3: detected capacity change from 0 to 512 [ 752.011702][T32696] EXT4-fs: Ignoring removed nomblk_io_submit option [ 752.026928][T32696] EXT4-fs: Ignoring removed nomblk_io_submit option [ 752.034582][T20997] team0 (unregistering): Port device team_slave_1 removed [ 752.040447][T32696] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 752.060876][T20997] team0 (unregistering): Port device team_slave_0 removed [ 752.061010][T32682] ================================================================== [ 752.076176][T32682] BUG: KCSAN: data-race in _prb_read_valid / prb_reserve [ 752.083228][T32682] [ 752.085545][T32682] write to 0xffffffff868f3d50 of 88 bytes by task 20997 on cpu 1: [ 752.093341][T32682] prb_reserve+0x76a/0xb60 [ 752.097771][T32682] vprintk_store+0x56d/0x860 [ 752.102377][T32682] vprintk_emit+0x15a/0x610 [ 752.106902][T32682] vprintk_default+0x26/0x30 [ 752.111516][T32682] vprintk+0x1d/0x30 [ 752.115415][T32682] _printk+0x79/0xa0 [ 752.119307][T32682] __netdev_printk+0x310/0x370 [ 752.124060][T32682] netdev_info+0x9b/0xd0 [ 752.128310][T32682] team_port_del+0x667/0x6f0 [ 752.132930][T32682] team_device_event+0x13c/0x380 [ 752.137883][T32682] raw_notifier_call_chain+0x6f/0x1b0 [ 752.143270][T32682] unregister_netdevice_many_notify+0xea0/0x16d0 [ 752.149614][T32682] default_device_exit_batch+0x5cb/0x620 [ 752.155250][T32682] ops_undo_list+0x2c0/0x410 [ 752.159837][T32682] cleanup_net+0x2f4/0x520 [ 752.164249][T32682] process_scheduled_works+0x4ce/0x9d0 [ 752.169732][T32682] worker_thread+0x582/0x770 [ 752.174322][T32682] kthread+0x489/0x510 [ 752.178420][T32682] ret_from_fork+0x149/0x290 [ 752.183008][T32682] ret_from_fork_asm+0x1a/0x30 [ 752.187773][T32682] [ 752.190101][T32682] read to 0xffffffff868f3d50 of 8 bytes by task 32682 on cpu 0: [ 752.197720][T32682] _prb_read_valid+0x1c4/0x920 [ 752.202487][T32682] prb_read_valid+0x3c/0x60 [ 752.207005][T32682] console_unlock+0x164/0x2e0 [ 752.211779][T32682] do_con_write+0x28df/0x2940 [ 752.216454][T32682] con_write+0x24/0x40 [ 752.220516][T32682] n_tty_write+0x82d/0xbf0 [ 752.224931][T32682] file_tty_write+0x378/0x690 [ 752.229601][T32682] tty_write+0x25/0x30 [ 752.233657][T32682] do_iter_readv_writev+0x4a1/0x540 [ 752.238850][T32682] vfs_writev+0x2df/0x8b0 [ 752.243177][T32682] do_writev+0xe7/0x210 [ 752.247419][T32682] __x64_sys_writev+0x45/0x50 [ 752.252105][T32682] x64_sys_call+0x1ba5/0x3000 [ 752.256780][T32682] do_syscall_64+0xd8/0x2c0 [ 752.261289][T32682] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 752.267177][T32682] [ 752.269486][T32682] value changed: 0x00000000000030aa -> 0x00000000000050aa [ 752.276576][T32682] [ 752.278883][T32682] Reported by Kernel Concurrency Sanitizer on: [ 752.285027][T32682] CPU: 0 UID: 0 PID: 32682 Comm: syz.2.10460 Not tainted syzkaller #0 PREEMPT(voluntary) [ 752.294920][T32682] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 752.304964][T32682] ================================================================== [ 752.331137][T32687] siw: device registration error -23 [ 752.339202][T32696] EXT4-fs (loop3): 1 truncate cleaned up [ 752.339680][T32696] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 752.385958][T20997] team0 (unregistering): Port device dummy0 removed [ 752.673828][T32685] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 752.792666][T20997] IPVS: stop unused estimator thread 0... [ 752.854827][T20997] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 752.933379][T20997] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 752.993802][T20997] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 753.032736][T20997] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 753.095005][T20997] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 753.143029][T20997] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 753.203075][T20997] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 753.243253][T20997] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 753.303931][T20997] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 753.361714][T20997] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 753.401873][T20997] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 753.451836][T20997] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 753.533554][T20997] bridge_slave_1: left allmulticast mode [ 753.539191][T20997] bridge_slave_1: left promiscuous mode [ 753.544857][T20997] bridge0: port 2(bridge_slave_1) entered disabled state [ 753.552430][T20997] bridge_slave_0: left allmulticast mode [ 753.558112][T20997] bridge_slave_0: left promiscuous mode [ 753.563774][T20997] bridge0: port 1(bridge_slave_0) entered disabled state [ 753.572114][T20997] bridge_slave_1: left allmulticast mode [ 753.577731][T20997] bridge_slave_1: left promiscuous mode [ 753.583515][T20997] bridge0: port 2(bridge_slave_1) entered disabled state [ 753.591137][T20997] bridge_slave_0: left allmulticast mode [ 753.596802][T20997] bridge_slave_0: left promiscuous mode [ 753.602523][T20997] bridge0: port 1(bridge_slave_0) entered disabled state [ 753.611692][T20997] bridge_slave_1: left allmulticast mode [ 753.617312][T20997] bridge_slave_1: left promiscuous mode [ 753.623490][T20997] bridge0: port 2(bridge_slave_1) entered disabled state [ 753.631639][T20997] bridge_slave_0: left allmulticast mode [ 753.637343][T20997] bridge_slave_0: left promiscuous mode [ 753.643030][T20997] bridge0: port 1(bridge_slave_0) entered disabled state [ 753.651143][T20997] bridge_slave_1: left allmulticast mode [ 753.656852][T20997] bridge_slave_1: left promiscuous mode [ 753.662594][T20997] bridge0: port 2(bridge_slave_1) entered disabled state [ 753.670159][T20997] bridge_slave_0: left allmulticast mode [ 753.675826][T20997] bridge_slave_0: left promiscuous mode [ 753.681531][T20997] bridge0: port 1(bridge_slave_0) entered disabled state [ 753.782129][T20997] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 753.791873][T20997] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 753.801111][T20997] bond0 (unregistering): Released all slaves [ 754.012419][T20997] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 754.022211][T20997] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 754.031686][T20997] bond0 (unregistering): Released all slaves [ 754.082517][T20997] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 754.092279][T20997] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 754.102207][T20997] bond0 (unregistering): (slave dummy0): Releasing backup interface [ 754.111332][T20997] bond0 (unregistering): Released all slaves [ 754.242345][T20997] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 754.251872][T20997] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 754.261623][T20997] bond0 (unregistering): Released all slaves [ 754.271942][ T6987] syz0: Port: 1 Link DOWN [ 754.414603][T20997] hsr_slave_0: left promiscuous mode [ 754.420272][T20997] hsr_slave_1: left promiscuous mode [ 754.426489][T20997] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 754.434295][T20997] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 754.443484][T20997] hsr_slave_0: left promiscuous mode [ 754.449164][T20997] hsr_slave_1: left promiscuous mode [ 754.454763][T20997] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 754.462180][T20997] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 754.469678][T20997] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 754.477065][T20997] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 754.486083][T20997] hsr_slave_0: left promiscuous mode [ 754.491585][T20997] hsr_slave_1: left promiscuous mode [ 754.497095][T20997] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 754.504491][T20997] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 754.511875][T20997] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 754.519237][T20997] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 754.528080][T20997] hsr_slave_0: left promiscuous mode [ 754.533580][T20997] hsr_slave_1: left promiscuous mode [ 754.539227][T20997] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 754.546672][T20997] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 754.554057][T20997] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 754.561430][T20997] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 754.574703][T20997] veth1_macvtap: left promiscuous mode [ 754.580197][T20997] veth0_macvtap: left promiscuous mode [ 754.585837][T20997] veth1_vlan: left promiscuous mode [ 754.591129][T20997] veth0_vlan: left promiscuous mode [ 754.596754][T20997] veth1_macvtap: left promiscuous mode [ 754.602284][T20997] veth0_macvtap: left promiscuous mode [ 754.607797][T20997] veth1_vlan: left promiscuous mode [ 754.613129][T20997] veth0_vlan: left promiscuous mode [ 754.618757][T20997] veth1_macvtap: left promiscuous mode [ 754.624225][T20997] veth0_macvtap: left promiscuous mode [ 754.629694][T20997] veth1_vlan: left promiscuous mode [ 754.635041][T20997] veth0_vlan: left promiscuous mode [ 754.748591][T20997] team0 (unregistering): Port device team_slave_1 removed [ 754.758167][T20997] team0 (unregistering): Port device team_slave_0 removed [ 754.807575][T20997] team0 (unregistering): Port device team_slave_1 removed [ 754.816900][T20997] team0 (unregistering): Port device team_slave_0 removed [ 754.828666][T21012] smc: removing ib device syz0 [ 754.842765][T20997] team0 (unregistering): Port device dummy0 removed [ 754.875723][T20997] team0 (unregistering): Port device team_slave_1 removed [ 754.885776][T20997] team0 (unregistering): Port device team_slave_0 removed [ 754.936235][T20997] team0 (unregistering): Port device team_slave_1 removed [ 754.945449][T20997] team0 (unregistering): Port device team_slave_0 removed [ 754.974557][T16728] lo speed is unknown, defaulting to 1000 [ 754.980274][T16728] infiniband syz2: ib_query_port failed (-19) [ 755.934084][T20997] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 755.973033][T20997] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 756.012748][T20997] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 756.072912][T20997] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 756.143708][T20997] bridge_slave_1: left allmulticast mode [ 756.149341][T20997] bridge_slave_1: left promiscuous mode [ 756.155024][T20997] bridge0: port 2(bridge_slave_1) entered disabled state [ 756.162842][T20997] bridge_slave_0: left allmulticast mode [ 756.168475][T20997] bridge_slave_0: left promiscuous mode [ 756.174213][T20997] bridge0: port 1(bridge_slave_0) entered disabled state [ 756.302310][T20997] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 756.311993][T20997] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 756.321344][T20997] bond0 (unregistering): Released all slaves [ 756.366747][T20997] hsr_slave_0: left promiscuous mode [ 756.372326][T20997] hsr_slave_1: left promiscuous mode [ 756.377834][T20997] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 756.385215][T20997] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 756.392735][T20997] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 756.400168][T20997] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 756.409957][T20997] veth1_macvtap: left promiscuous mode [ 756.415614][T20997] veth0_macvtap: left promiscuous mode [ 756.421176][T20997] veth1_vlan: left promiscuous mode [ 756.426363][T20997] veth0_vlan: left promiscuous mode [ 756.482710][T20997] team0 (unregistering): Port device team_slave_1 removed [ 756.491958][T20997] team0 (unregistering): Port device team_slave_0 removed