last executing test programs: 23m12.032766828s ago: executing program 32 (id=63): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000005"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000001440)={0x1f, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b708000000bd52007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x62, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={r3, r2, 0x25, 0x0, @void}, 0x10) syz_emit_ethernet(0xfef3, &(0x7f0000000200)=ANY=[], 0x0) 23m10.469453397s ago: executing program 33 (id=80): r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r1, 0x29, 0x2e, &(0x7f0000000200)={0x5, {{0xa, 0x4e20, 0xfffffffe, @mcast1={0xff, 0x7}, 0x9}}, {{0xa, 0x3, 0x0, @loopback, 0xfffffffd}}}, 0x108) r2 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r2, 0x29, 0x2a, &(0x7f0000000080)={0x5, {{0xa, 0x0, 0xfffffffe, @mcast1={0xff, 0x7}, 0x10}}, {{0xa, 0x0, 0x0, @remote}}}, 0x108) setsockopt$inet6_group_source_req(r2, 0x29, 0x2b, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x4001, 0x0, @loopback}}}, 0x108) close_range(r0, 0xffffffffffffffff, 0x0) 23m10.35024747s ago: executing program 34 (id=84): bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000180)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x60}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f0000000180)=r1, 0x4) sendmsg$inet(r3, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x20000000) 23m9.56535586s ago: executing program 35 (id=101): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=@base={0xa, 0x4, 0xfff, 0x3, 0x0, 0x1}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000020b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x14, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x22, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={r3, r2, 0x25, 0x0, @void}, 0x10) syz_emit_ethernet(0xd81, &(0x7f0000001180)={@local, @multicast, @void, {@ipv6={0x86dd, @generic={0x0, 0x6, "6410a6", 0xd4b, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @private=0xa010100}, @local, {[], "223427d5c9a46b9fa14172170a013589317d2af31ba55431762f462a5abc3f46494ee91bfca594d52f8c3785143e92da5d2d81edc09f68f122fbf741257bf1319408347a17c89212dfe27a0fc65362487e5afe673f0954f60d9d08b61276ce0b3aa520b5f30a9f52c4aa53fc003f8570383ca63530d93b78a7875338b3d7645ef2c24ab05db63cfdcde7b3cac2248c9d1c73d0d4382b3f520ad6e9be698eaa9bf5b939ce09919c9485c4725690ee2483315829a196f85a5ae552ebe19a2d6768ce2a6bf60fbb53104c7919b7cf28fa555fc9460df11e72eddebb2fc4eb6f83b16e0d65307e4210dfc209f0c68df65b57f420fd215546b798af6b6ab7bfb2fe6bd6142f877852717370b1ca39d199c149c3ead97c4e16229ce4c08a111a0fc64651c21e9174dd72442a9ae2a42d9433c7b54c8dd4b59203f9a2e227e9b043eb430e606cf98f3428ac8511948dd553bc0728c0626fbda71bd2a1d734d605e27bdb0be93b7b91284689e31fccb70c15f2c39da9011c84d36fe4b4b36ff26e45a34685fc638dbdaa068a3d3d4f5d44b74afc0fc7956e5fcc3fe405ac6d292d1d90f257f18fe14a3192d28ed369956aa2f91f9fee773cf7fb5d90705347eeadc1af86de78a498fa1a20e5b3f481a0595769654d969299506d8ffbc172a7fb9453a8a3787e80b167936863f2cc16c1d03481bd40e1abcf87a292559771572136932bf30e48174012a1d4d5f138f93140af2ceb9c821c7966ea7592d762975b5b33ef141b6b91eb388c91b924945c3231d0f299adb5a36e0c95a17872e7ebf0bc0e33baf5c46f9e2087b77bad0794d519ce7bc8674a70f3545d020454ded22f164185df3b4f952b132947b75333993fd73a6bac5836dd5720e559bcb82a4926734c5c3b1287c5fec219a99f71eb398430001f007306e9232c269c2886357f75d935e8de054341ac36f1df1fc77fbc347d90660f4d5658cfeb9e289f70968a7c0b38ae34c4bfa46b47964e223ac34f472e3231e8c285add5713592c76c062c3477beb55b279846f04f8d6a5ce2743c6a2020f0c5164953b8dca7e57239dc8a7f507bcf77767ab0b4602437171a09c8e80f5a165c4c37eaae386cfcb927dd1a935fa717fa1608792b34bafbc20cf11a678455894ede62788309ab7a7075535847a2b48260a613e521b01d75648263ad78e6176528dbf3e6c4e4d72066e617be5387183a51dd97d2e846c5d173b51e17a4c8d78a49c914cbe44236c52c78de45b44f9d80bc6f77c75135922a84579bce77baa71311889f5b7b90c5124b8298d5e9c81c442d60df00795854d3213a1ac254c8963c109f68b3ff5451c381f6fb56c116f86b71f988d1e9f732280cbf3d4e9791fefc4bdec5dc293fb77b02d5aab6bd8cd179b7e425126b7f78c0d004bc6470ecc2bbc422bd06a6bd8f717009509e6a88b01347b7a62b9dea6f7a7446a371f422499a6e66eeb6a7b0beb4a86a61f875a9bfe0f5d5f0d0e4c85852afaea97d74ebc80d6491a8a1c998c4b5bc34b3edaeba2df902cd5e14e016720e6c3c8b15287b2471c34251e26dc442720cd5d984e30b110b7370f233f865b9ac129fdf49ff02b303d7d4f91039d3bb58a9d64d7a72d8b8eba6b45a000370d4f0e9c0d411768441372e7112e5d4e7d70a9d6b428b8b85ee6209d6f73e7b024740c052166deeb843e4ab78d1d354d75a5827ff0d49d8964e75785f3594c7299c0917b48f3b2efb81a4c3a7d6e0f1cf50efe0360963c2e3ee390ed2a4c39f42e856eced0f2ee7beacd2ecbece493e911ca0460584323ea6d4a0c00864693c979cae38f0c5841bfaeebf609d1075163c120fea0bd0207d2dd07e5e2e0a5afe3efee0ee6bb9a926a8dba7a27a82c5421a5b20bfb5dbdef532a12435fcd899f15603209831711e0dcfaaf2104b2016f087fce44848c70b65a34b9be83df2064391fc5a8d169dc1943d226e57ab5ba06c656273d4efba73a8a61aae19df4d2445f3ce7e649af1b4ffc86106c9092ddd0aafeb45653d181cb32b06a1dd41573495f15c3b8c0019ba72a2eb163dfcbdbb235322ae27d7116af506f295c2424ab9191aa8ce0e4617b212af21983f8d2b19d7fdeec881f6fa448acc7c3e133b6f281583fad4467c05801e69f6ffc1ae2e1f54655534d884c2f8f60303da33ccbe47a293643edb61c7d9fad4e3e54028bc64be8e5b1da53446869b136660b8e96ff96c48641ece275967b27b291c5c240b3399b5b901b699227735f821938bc88ded45bada2b257b1a4bcab7ed6647f2027e5680c87329e9cfdba6bde2f2a9b676be016001702bebbabb2eae3eba01d6f49ab70245a4c5ef0e136b531e1843487b3f69c5b811217d6d2f5e71b47f40c28117bd09a88bb21887a06e2cc164d4281d0df47cbd5781f1524098d89ccae32f24c5f9d86469106685fdc683ad5e873030b621dc00354e0621106da90aca69bb53848dd57251a45bc1898aca9bc84c9a8d2f8aabeed888560771c8cb03aab02620430fec8e9740880790060ccbffd5b8edaa219ca61587eff1b1b03ae8af53059f121efdec8b3ee8aba06f494a5b4575bc848d5a9773d2346f75811cb82a078fc960c9bd374555d78b1b4ba0b438ef00e8aa75810ca5efc5c70936e2cb0e515912cb7f625a2130a9ad58f29e58ae6eac5c3f15f22f0163ee6dead6947c4390b92c8dfb146fec7bfc0b37e8ff2c9de90c30f2d8b5e334107f9835bc47fbc193c60ebd5ac4e677c7fd5b6261ff96e97c185c726ec02941bc2336946f181fd2aff43f0e95f06105a049fcb8e4e3738407d6356856f533f17fae281a3be9f2050ae3d19d1b8350d424087ac9b7875824a9b7e098775b53d6ec960fc052ecd165d17a7897de75f15316a072bb9ccf6ce1ec085bb5356c271b985a437a32f12308fc927410fd444bcded9859e7b8a3cfaaf29ebfb92cc7cbfad2559bbe4f90e189e8708e93827b221869cc78fa41fd5bcb6577b7dfe4c3927dc25a58aa84419f76e71d1f3c10cbb5e52ab2bebe0d39bdffda0fa1b55fe3a03683f882a82dd58498d62b101acd710fd436aa7409fe3cf5352dffb399d560323e14d564bdb3121b89c1f43fc9a892b799cd32f7ce2ededb868920b4547735ef0bf3e148251a4f65dddb7f96b2f33734522a8cffdc51520ac98926b3406e96618cf15a042a67239e755afc70ec6a9c99f8e08ec2946e5901364d85223a63d49572519137d93b6b0798e72acf9da120e706ee73367dec1450a68def886c149bcd734469e10b933899501011cd548e99d638821d5709fde050ab382d4896ecfd7999d40ea9c690c26d396545224c8f9e19705593df2688eb592e2476a0193f7054ab6f703d41c545a80bf285bbc7cc735bd306c9ea5eb64f40752fd4c741d9b6e03cd41b636ef8f5e810047a21c0b24c6fde1f2e98f2f27730c90d93af9e7564e4e209a61ff626b666fcc4f75f7d560da688169ff0af5e674a0b89a99fb54bb438a65f953c2db0faec2ce09cec33b6d25620b5a0393ac473fed48a38beaca5223997419876d571ce969b83b5b3ae54de83dd89fd92ed2a93c087828bef49a24ed1a97778c47fdc691a94fd5b437dfe494b5c6fadf499d9d15583b0439d3d5ecb61a32a2508a6960be6009accfd1d5d75a16dbc4121c6ef07bda12646792449c18a56e7aa3893f3f0e55a8e09ca64193dd29ea24ed8614ee8e717f046dd99a8e3750506655331125a502aa89c0d7e8e30c36a4be22cd911322695144d3bf034f38ef32d49431d50da583d08a3e4c5862483cdd52d031b12c89fdaafc3334e877e464134baece883d301193a9c27311a987d4dae82a061f48182cc747cd64441e88b68e26e4975f0fdde3129a9e6af80009962581d5349676df9c73b81514b175709d9193749660f480bd4009b528c1db4f76f42b6a175126603c39a374e890f871c97b2eebb4500451d827cc15497dc5ae89edc6f47f25db7efa4b4b2afbbb2ee543e3db8d20fe93faf300247f59075921e8b2f2a025af8a1d46f274e0c6cb4be0293c7c16c88e98d7d189e9733e4c0e3b96be4aa3fa6ecf42732e0b1432d38aeaf2330d92713cd5580ce42bfe47fb98fea64783de23f456300dd193008211a5ba408d32dedbf12aa8237a6e1a2c9890a2c1011855241fea186906a5139d1c300be57dc7ff493de80010520d10fc3eda0ee9cd413e075d3dc02258fdab567a16e43edbeecc366a69d8d75512f43a2b79cbb9132cdcd00c531730d05f1eabf66613d6e7ebb8c4c3f4f7efd415d41049786352808b22a3bde40121968af39c8f00296001662adc72b7963c8bafab4a496b50f3237a29d19ad4a51a62b1c77a04c14004734189cf7ec49e3d041a1e5658d080f09df77f39782e7133968c1f39ab3ae2a5f24a60073288f3c5825dafd614a379b8b905aaf961caa14ffa38de0d632918d31e4a9291b0f0789248e232e4276840a1ed0257300e522d83111dffd424b1b33148981e3794b2b649ba9174e6697bcc96049f4f3dcc7cf4ca97e2006ec8a146014bb49184632e4fb159a34b6530e959e60a6b4e0427cc697f14cfe6bb7a662a6f5012744f3cf2307abc19c58449864d98fcfebc5d598cd32a1c38c207896468fe8da75eb1edb1d6e7cb1eab671e4e92f139c81d79f15df2a2dc075acc982dec769e2f49aad0fdf594cb590e054616e4f4582b6c4a149ae45d844903ef68d211df2a180178e178b7c7a5012ccf8a1e677586588620365e6111f5192ecfdbd97e2284128de02e08ebc13d4bb4d114faa1e6c16c51c12da2c52d68f73640ce866ce4e794b9faf"}}}}}, 0x0) 22m58.351966347s ago: executing program 36 (id=281): r0 = io_uring_setup(0x430d, &(0x7f0000000140)={0x0, 0x4178, 0x40, 0x8001002, 0x3da}) open$dir(&(0x7f0000000040)='./file0\x00', 0x223c0, 0x37) r1 = inotify_init() inotify_add_watch(r1, &(0x7f0000000100)='./file0\x00', 0xa0000001) r2 = open$dir(&(0x7f0000000040)='./file0\x00', 0x20, 0x80) preadv2(r2, 0x0, 0x0, 0x2, 0x7, 0x1f) close_range(r0, 0xffffffffffffffff, 0x0) 22m57.191630316s ago: executing program 37 (id=301): setreuid(0xee01, 0x0) capset(0x0, 0x0) mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x8000, 0x10103) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000002080)='./file0\x00', &(0x7f0000000000), 0x1000000, &(0x7f0000000680)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYBLOB='2']) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f00000001c0)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4008054}}, {{&(0x7f00000000c0)=@file={0x1, './file0\x00'}, 0x6e, 0x0, 0x0, 0x0, 0x0, 0x400400c0}}], 0x2, 0x0) 22m54.448089914s ago: executing program 38 (id=349): bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = socket$packet(0x11, 0x2, 0x300) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000880)=ANY=[@ANYBLOB="0a00000004000000ff0f000007"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000004000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb70300000e41621eb70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000180)=r2, 0x4) syz_emit_ethernet(0x3e, &(0x7f00000005c0)={@broadcast, @broadcast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x1, 0x0, 0x0, 0x67, 0x0, @rand_addr, @broadcast}, @time_exceeded={0x21, 0x1, 0x0, 0x12, 0x0, 0x2802, {0x5, 0x2, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x0, 0x0, @multicast2, @dev={0xac, 0x14, 0x14, 0x21}}}}}}}, 0x0) 22m52.492128293s ago: executing program 39 (id=374): r0 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}, 0x20000}}, {{0xa, 0x0, 0x40000, @dev={0xfe, 0x80, '\x00', 0x26}}}}, 0x108) close(r0) r1 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r1, 0x29, 0x2e, &(0x7f0000000080)={0x0, {{0xa, 0x4e20, 0x0, @mcast1={0xff, 0x7}, 0x8a4}}, {{0xa, 0x4e20, 0xfe, @remote, 0x40000}}}, 0x108) r2 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$SIOCSIFMTU(r2, 0x8922, &(0x7f0000000340)={'syz_tun\x00', 0x101}) 22m50.945749681s ago: executing program 40 (id=398): syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f0000000280)='mnt\x00', 0x4, &(0x7f0000000000), 0x0, 0x236, &(0x7f0000000800)="$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") mkdirat(0xffffffffffffff9c, &(0x7f0000000640)='mnt/encrypted_dir\x00', 0x0) chdir(&(0x7f00000002c0)='mnt/encrypted_dir\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0xc840, 0xa2) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./bus\x00', 0x1c1002, 0x12) write(r1, &(0x7f0000000a00)="c7", 0x1) sendfile(r1, r0, 0x0, 0x3ffff) 22m49.468676708s ago: executing program 41 (id=432): r0 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x70, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000480)={0x1, &(0x7f0000000640)=[{0x6, 0x0, 0x0, 0xea}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @empty}, 0x10) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0x1801, 0x4) sendto$inet(r0, &(0x7f0000000700)="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", 0xfe6a, 0x40040, 0x0, 0xfffffffffffffe93) 22m46.738725606s ago: executing program 42 (id=491): r0 = socket$inet(0x2, 0x1, 0x6) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x9, 0x4, &(0x7f00000005c0)=ANY=[@ANYBLOB="1800000000000000000000000000000071183b000000000095"], &(0x7f00000003c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @cgroup_sock=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = fsopen(&(0x7f0000001340)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) r3 = fsmount(r2, 0x1, 0x6) bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000000c0)={r1, r3, 0xc, 0x0, @val=@tracing={0x0, 0x2}}, 0x20) bind$inet(r0, &(0x7f0000e15000)={0x2, 0x4e20, @empty=0xe0000002}, 0x10) 22m41.663696381s ago: executing program 43 (id=573): syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000000)='./file1\x00', 0x4400, &(0x7f00000003c0)=ANY=[], 0x82, 0x22e, &(0x7f0000000940)="$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") unlinkat(0xffffffffffffff9c, &(0x7f0000000180)='./file0/file0\x00', 0x0) unlinkat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x200) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x22) ioctl$VHOST_SET_OWNER(0xffffffffffffffff, 0xaf01, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) 22m39.655358221s ago: executing program 44 (id=590): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x44, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f000000d000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, &(0x7f00000000c0)="66440f388101c74424000d000000c744240200000000ff1c240f01ca0f005acaf2450f00d50f07440f20c0350c000000440f22c066ba610066ed66baf80cb880314a87ef66bafc0c66ed65f342ad", 0x4e}], 0x1, 0x4, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 22m30.582435995s ago: executing program 45 (id=827): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000380)={0x2, 0x4e22, @multicast1}, 0x10) setsockopt$sock_int(r0, 0x1, 0x800000000f, &(0x7f0000000080)=0x7, 0x4) listen(r0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000000180)=0x7fffff, 0x4) bind$inet6(r1, &(0x7f0000000140)={0xa, 0x4e22, 0x7f, @ipv4={'\x00', '\xff\xff', @multicast1}, 0xffffffff}, 0x20) 22m21.94607177s ago: executing program 46 (id=952): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000001200)={0x60000010}) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r2, &(0x7f0000000100)={0xa000000d}) r3 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r0, &(0x7f0000000300)={0x10000000}) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r1, &(0x7f0000000600)) 22m19.986248958s ago: executing program 47 (id=997): r0 = io_uring_setup(0x7a76, &(0x7f0000000180)={0x0, 0xaefa, 0x0, 0x40}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = fcntl$dupfd(r2, 0x0, r1) bind$inet6(r3, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @loopback}, 0x1c) sendto$inet6(r2, 0x0, 0x0, 0x240540c7, &(0x7f0000000200)={0xa, 0x4e22, 0x0, @loopback}, 0x1c) read$FUSE(r3, &(0x7f0000000400)={0x2020}, 0x2020) close_range(r0, 0xffffffffffffffff, 0x0) 21m55.30495408s ago: executing program 48 (id=1560): syz_mount_image$vfat(&(0x7f00000002c0), &(0x7f0000000080)='./file4\x00', 0xa08c54, &(0x7f0000000180)={[{@shortname_winnt}, {@iocharset={'iocharset', 0x3d, 'cp737'}}, {@uni_xlate}, {@shortname_winnt}, {@utf8no}, {@fat=@codepage={'codepage', 0x3d, '855'}}, {@iocharset={'iocharset', 0x3d, 'cp949'}}, {@utf8no}, {@shortname_mixed}, {@fat=@discard}, {@rodir}, {@uni_xlate}, {@shortname_win95}]}, 0x89, 0x2c4, &(0x7f0000000b00)="$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") mkdirat(0xffffffffffffff9c, 0x0, 0x1c0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB="0c0100000001010400000000000000000a0000003c0001802c00018014000300fe8000000000000000000000000000aa14000400fc0000000000000000000000000000000c00028005000100000000003c0002800c00028005000100000000002c000180140003000000000000000000000000000000000114000400fe8000000000000000000000000000aa08000740000000007800068014000500fc0200000000000000000000000000010c000380060001000000000014000400fc0200000000000000000000000000002c0003"], 0x10c}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000180)={0x58, 0x2, 0x6, 0x101, 0x0, 0x0, {0x1}, [@IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0x5}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:net,net\x00'}]}, 0x58}, 0x1, 0x0, 0x0, 0xc0d1}, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@newspdinfo={0x1c, 0x24, 0x3dd681fbf96b935, 0x0, 0x0, 0x0, [@XFRMA_SPD_IPV4_HTHRESH={0x6}]}, 0x1c}}, 0x0) 21m51.557940363s ago: executing program 49 (id=1651): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0b000000080000000c0000000000008001"], 0x48) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000500)={r1}, 0x4) close(0x3) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@base={0x9, 0x8, 0x80, 0x40, 0x42, 0x1}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100), &(0x7f0000000580), 0x1000, r2}, 0x38) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x11, 0x19, &(0x7f0000000540)=@framed={{0x18, 0x0, 0x0, 0x0, 0x2}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x6}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r1}}]}, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000080)={r3}, 0xc) 21m12.074126441s ago: executing program 50 (id=2580): bpf$ENABLE_STATS(0x20, 0x0, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@base={0x12, 0x8, 0x4, 0x2}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r1}, &(0x7f0000000040), &(0x7f0000000140)=r0}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe1d}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x401}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r3, 0x1, 0x32, &(0x7f0000000180)=r2, 0x4) sendmsg$inet(r4, &(0x7f0000000100)={0x0, 0xfeff, 0x0}, 0x20000000) 21m2.03901667s ago: executing program 51 (id=2912): openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r0 = open(&(0x7f00009e1000)='./file0\x00', 0x60840, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=0x0) syz_ublk_setup_queues(r0, r1, &(0x7f0000000180)={0x0, 0x2, 0x0, 0xfffffffe, 0x257}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x4704, 0x40, 0x1000000, 0x10000004}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xfffffffc, 0x200, 0x0, 0x146}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x1f70, 0x2, 0x1}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x0, 0x8000, 0x1, 0x2b2}}], 0x1, 0x0, 0x0) 12m12.882411198s ago: executing program 52 (id=16001): ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f0000000080)={'\x00', 0x5, 0x7, 0x4, 0x6, 0x2, 0xffffffffffffffff}) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x0, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000002340)={0x3, 0xc, &(0x7f0000000080)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x29}, @printk={@x, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x6}}]}, &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @sched_cls=0x36, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r4, 0x0, 0x88, 0xe40, &(0x7f00000002c0)='\x00\x00\x00\x00\x00\x00\x00\x00', &(0x7f0000000340)=""/8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) linkat(0xffffffffffffff9c, &(0x7f00000003c0)='./cgroup\x00', 0xffffffffffffff9c, &(0x7f0000000100)='./file7\x00', 0x1000) socket(0x10, 0x80002, 0x4) r5 = syz_open_dev$usbfs(&(0x7f0000000100), 0x205, 0x8401) fcntl$dupfd(r5, 0x406, r5) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x8000, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000240)=ANY=[@ANYBLOB="e80000006c00010029bd7000fcdbdf2500000000", @ANYRES32, @ANYBLOB="001000008000000008000f002000000014003500726f7365300000000000000000000000a40034801400350070696d367265673000000020000000001400350076657468305f6d614176746170000000140035006d61637674617030020000000000000014003500677265300000000000000000000000001400350076657468305f746f5f626174616476001400350001657468315f6d6163767461700000001400350067726530000000000000000000000000140035006261746164765f"], 0xe8}}, 0x0) r8 = socket$netlink(0x10, 0x3, 0x0) r9 = socket(0x10, 0x3, 0x0) getsockname$packet(r9, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700000086d7c0d6c878f064eb", @ANYRES32=r10, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) syz_open_procfs(r0, &(0x7f0000000000)='autogroup\x00') socket$netlink(0x10, 0x3, 0x4) 9m23.2575685s ago: executing program 53 (id=20659): r0 = creat(&(0x7f0000000200)='./file0\x00', 0x109) close(r0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDGKBSENT(r1, 0x4b48, 0x0) r2 = openat$rtc(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) mount$9p_fd(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) 8m44.424127027s ago: executing program 1 (id=22274): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'wpan1\x00'}) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000540), 0xffffffffffffffff) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000500), 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0x10, &(0x7f0000000e40)=ANY=[], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000140), r0) sendmsg$NLBL_MGMT_C_REMOVE(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x24, r1, 0x400, 0x70bd27, 0x25dfdbfb, {}, [@NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @dev={0xac, 0x14, 0x14, 0x26}}, @NLBL_MGMT_A_DOMAIN={0x7, 0x1, '\\]\x00'}]}, 0x24}, 0x1, 0x0, 0x0, 0x80}, 0x4000000) epoll_create1(0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0xffffc000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r3, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) r5 = socket$inet6(0xa, 0x80002, 0x0) connect$inet6(r5, 0x0, 0x0) sendmmsg$inet6(r5, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x176}}], 0x400000000000172, 0x4000000) 8m44.220706001s ago: executing program 1 (id=22292): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'wpan1\x00'}) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000540), 0xffffffffffffffff) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000500), 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0x10, &(0x7f0000000e40)=ANY=[], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000140), r0) sendmsg$NLBL_MGMT_C_REMOVE(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x24, r1, 0x400, 0x70bd27, 0x25dfdbfb, {}, [@NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @dev={0xac, 0x14, 0x14, 0x26}}, @NLBL_MGMT_A_DOMAIN={0x7, 0x1, '\\]\x00'}]}, 0x24}, 0x1, 0x0, 0x0, 0x80}, 0x4000000) epoll_create1(0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0xffffc000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r3, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) r5 = socket$inet6(0xa, 0x80002, 0x0) connect$inet6(r5, 0x0, 0x0) sendmmsg$inet6(r5, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x176}}], 0x400000000000172, 0x4000000) 8m43.685542365s ago: executing program 1 (id=22289): bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) sendmmsg$inet(0xffffffffffffffff, &(0x7f00000001c0)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000640)="985e44efeabe001cabcf3d8673c3a254a9a2d3197970cb347b70a243bf77139a94bc3ae91684aaf7b7dff691deb8f8aef2d915fb3a0794a9a9b431a819bca6122c350637808dde804a048fd8696e524b2934126c443ce93d82e931eb9918e6c082", 0x61}], 0x1}}], 0x1, 0x2090) write$binfmt_register(0xffffffffffffffff, &(0x7f0000000300)={0x3a, 'syz2', 0x3a, 'M', 0x3a, 0x8000011000000009, 0x3a, 'B\xd4GGI\x82\\4\xbb\xbb\xbb\xb3\xd4)\xed\x8f\xaa\xf4\xd2{\xc5\t\xa9\xed\xf8e\xaa\xb9\xf5\r\xe3T\x0e\x8a\xd6\x9a_?G\x05\x00\x00\x00\x00\x00\x00\x00\x1e\x9a\xce\xac&x3\x15\x14y\xbf\xc6)\xa8\b/\x01\x00\x00\f\x8e1\xc4\xa1\xb2]I\xa5\x13}9\x1b0x0}) sendto$packet(r0, &(0x7f00000002c0)="05031600d3fc142e00004788031c09102c28", 0xfce0, 0x4, &(0x7f0000000140)={0x11, 0x86dd, r1, 0x1, 0x0, 0x6, @multicast}, 0x14) 8m43.664309626s ago: executing program 1 (id=22293): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000340)='./file1\x00', 0x210000, &(0x7f0000000480), 0xfc, 0x586, &(0x7f0000000800)="$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") syz_mount_image$exfat(0x0, &(0x7f0000000100)='./bus\x00', 0x20020c0, 0x0, 0x1, 0x0, &(0x7f0000001a00)) mount$overlay(0x0, &(0x7f0000000100)='./bus\x00', &(0x7f0000000440), 0x8, &(0x7f0000000140)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) syz_mount_image$fuse(&(0x7f00000001c0), &(0x7f0000000040)='./bus\x00', 0x322020, &(0x7f0000000280)=ANY=[], 0x1, 0x0, 0x0) symlinkat(&(0x7f00000000c0)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000840)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') 8m43.249227676s ago: executing program 1 (id=22316): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000200)=0x474c, 0x4) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r0, &(0x7f0000000480)={0x2, 0x4e21, @multicast1}, 0x10) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0) setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, &(0x7f0000000040)={0x84, @broadcast, 0x4e20, 0x3, 'dh\x00', 0x0, 0x10000004, 0x30}, 0x2c) setsockopt$inet_int(r0, 0x0, 0x8, &(0x7f0000000040)=0xfffffffc, 0x4) recvmmsg(r0, &(0x7f0000000040), 0x291962b, 0x45833af92e4b39ff, 0x0) 8m42.869039595s ago: executing program 1 (id=22336): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000200)=0x474c, 0x4) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0) r1 = fsopen(&(0x7f0000000080)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r2 = fsmount(r1, 0x0, 0x8) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x12, 0x3, &(0x7f0000000880)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000580)={r3, r2, 0xe}, 0x14) 8m42.787379037s ago: executing program 54 (id=22336): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000200)=0x474c, 0x4) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0) r1 = fsopen(&(0x7f0000000080)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r2 = fsmount(r1, 0x0, 0x8) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x12, 0x3, &(0x7f0000000880)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000580)={r3, r2, 0xe}, 0x14) 5m47.536738409s ago: executing program 2 (id=25957): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x48241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup(r1) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000980)={@val={0x70}, @void, @eth={@local, @multicast, @val={@void}, {@ipv4={0x800, @dccp={{0x5, 0x4, 0x3, 0x11, 0x24, 0x67, 0x0, 0x6, 0x21, 0x0, @remote, @loopback}, {{0x4e24, 0x4e20, 0x4, 0x1, 0x0, 0x0, 0x0, 0x6, 0x5, "0cfa1b", 0x8, "c89a07"}}}}}}}, 0x3a) 5m47.433294512s ago: executing program 2 (id=25960): bind$unix(0xffffffffffffffff, 0x0, 0x0) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='dev\x00', 0x1ff) mount(0x0, &(0x7f0000000500)='dev\x00', &(0x7f0000000600)='devtmpfs\x00', 0x0, 0x0) syz_usb_connect(0x3, 0x32, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000200000040f905ffff0001010203010902200001010080fa0904000002ff00000007058102"], 0x0) openat(0xffffffffffffff9c, &(0x7f0000000200)='dev/ttyUSB0\x00', 0x2, 0x0) 5m45.865328401s ago: executing program 2 (id=25986): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup(r1) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) write$tun(r0, &(0x7f0000000400)={@val={0x0, 0x891f}, @void, @eth={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @multicast, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x67, 0x0, 0x3, 0x2f, 0x0, @remote, @multicast1}, {0xa020, 0x86dd, 0x8}}}}}}, 0x2e) 5m45.835612722s ago: executing program 2 (id=25991): syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000280)='./control\x00', 0x210000, &(0x7f0000000940)={[{@nodelalloc}, {@dioread_lock}, {@barrier_val={'barrier', 0x3d, 0x4}}, {@nolazytime}, {@bh}, {@min_batch_time={'min_batch_time', 0x3d, 0x8}}, {@errors_remount}, {@stripe={'stripe', 0x3d, 0x5}}, {@bh}, {@init_itable}]}, 0xfc, 0x56f, &(0x7f0000003780)="$eJzs3d9rW1UcAPDvTdPup66DMdQHGezByVy6tv6YIDgfRYcDfZ+hzcpouowmHWsduD24F19kCCIOxD/Adx+H/4B/xUAHQ0bRBxEiN73psjZp2i4z2fL5wG3Pyb23535z7vf2nNyEBDC0jqU/chEvR8Q3ScShlnX5yFYeW9tu9eH1mXRJol7/9M8kkuyx5vZJ9vtAVnkpIn79KuJkbnO71eWV+WK5XFrM6hO1hSsT1eWVU5cWinOludLlqenpM29NT737zts9i/X1839//8ndD898fXz1u5/vH76dxNk4mK1rjeMJ3GitHCv+m5VG4+yGDSd70NggSfp9AOzKSJbno5FeAw7FSJb1wPPvy4ioA0Mqkf8wpJrjgObcvkfz4GfGgw/WJkCN2Mda48+vvTYSextzo/2ryWMzo3S+O96D9tM2fvnjzu10ia1fh9jXpQ6wIzduRsTpfH7z9T/Jrn+7d7rx4vHWNrYxbP9/oJ/upuOfN9qN/3Lr459oM/450CZ3d6N7/ufu96CZjtLx33ttx7/rl67xkaz2QmPMN5pcvFQunY6IFyPiRNS73vo4s3qv3mld6/gvXdL2m2PB7Dju5/c8vs9ssVaMiLFdhvyYBzcjXsm3iz9Z7/+kTf+nz8f5bbZxtHTn1U7rusf/dNV/initbf8/6tZk6/uTE43zYaJ5Vmz2162jv3Vqv9/xp/2/f+v4x5PW+7XVnbfx495/Sp3W7fb8H0s+a5SbSXCtWKstTkaMJR9vfnzq0b7NenP7NP4Tx7e+/rU7/9PJ1+fbjP/WkVsdNx2E/p/dUf/vvHDvoy9+6NT+9vr/zUbpRPZIdv1rLztXtnuAT/r8AQAAAAAAwCDJRcTBSHKF9XIuVyisvb/jSOzPlSvV2smLlaXLs9H4rOx4jOaad7oPtbwfYjJ7P2yzPrWhPh0RhyPi25F9jXphplKe7XfwAAAAAAAAAAAAAAAAAAAAMCAOdPj8f+r3kX4fHfDUNb7YYE+/jwLoh65f+d+Lb3oCBlLX/AeeW/Ifhpf8h+El/2F4yX8YXvIfhpf8h+El/wEAAAAAAAAAAAAAAAAAAAAAAAAAAKCnzp87ly711YfXZ9L67NXlpfnK1VOzpep8YWFppjBTWbxSmKtU5sqlwkxlodvfK1cqVyanYunaRK1UrU1Ul1cuLFSWLtcuXFoozpUulEb/l6gAAAAAAAAAAAAAAAAAAADg2VJdXpkvlsulRYWOhfdjIA7jaQa4Zle75wclCoUOhZtZ9+5srz5elAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABgg/8CAAD//4yLMZo=") syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x200000, 0x0, 0x0, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000680)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}, {@nfs_export_on}]}) chdir(&(0x7f0000000300)='./file0\x00') lsetxattr$trusted_overlay_upper(&(0x7f0000000080)='./file1\x00', &(0x7f0000000140), &(0x7f0000000340)=ANY=[], 0xb2, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x20863, 0x0) 5m45.729069825s ago: executing program 2 (id=25992): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000140)={0xa, 0x4e22}, 0x1c) listen(r0, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000180)={@local, @empty, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a8435", 0x14, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2}}}}}}}, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000480)={@local, @broadcast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "268435", 0x14, 0x6, 0x1, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2, 0xf3d8}}}}}}}, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000080)={@local, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a8435", 0x14, 0x6, 0x1, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2}}}}}}}, 0x0) 5m45.145091879s ago: executing program 2 (id=26000): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup(r1) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) writev(r0, &(0x7f0000000380)=[{&(0x7f0000000640)="2e1221b23bb601c477d3df163e75963d86dd606712e9000d118db0049d28b31c32a790343c48040000db6c51f77e9e146261f3a8b1ec04498100b83c50393e3ee19c8f5de67bc6", 0x47}, {&(0x7f0000000180)="24f5", 0x2}], 0x2) 5m45.11256074s ago: executing program 55 (id=26000): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup(r1) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) writev(r0, &(0x7f0000000380)=[{&(0x7f0000000640)="2e1221b23bb601c477d3df163e75963d86dd606712e9000d118db0049d28b31c32a790343c48040000db6c51f77e9e146261f3a8b1ec04498100b83c50393e3ee19c8f5de67bc6", 0x47}, {&(0x7f0000000180)="24f5", 0x2}], 0x2) 3m43.519636186s ago: executing program 6 (id=29098): pipe2$watch_queue(0x0, 0x80) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f066bbeeb, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) sched_setaffinity(r0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) remap_file_pages(&(0x7f00006ca000/0x4000)=nil, 0x4000, 0x0, 0x3, 0x20000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f00000007c0)={0x2, 0x3, 0x0, 0x3, 0xb, 0x0, 0x70bd2a, 0x25dfdbfb, [@sadb_key={0x1, 0x9}, @sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x4e22, @empty}}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x2, 0x3}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x4e21, @initdev={0xac, 0x1e, 0x1, 0x0}}}]}, 0x58}, 0x1, 0x7}, 0x0) 3m43.135479216s ago: executing program 6 (id=29105): socket$nl_generic(0x10, 0x3, 0x10) socket$inet(0x2, 0x2, 0x1) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_xfrm(0x10, 0x3, 0x6) mmap$IORING_OFF_SQ_RING(0x0, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20000845, &(0x7f0000b63fe4), 0x1c) getsockopt$inet6_buf(r0, 0x29, 0x3d, 0x0, &(0x7f00000000c0)=0x37) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x4004000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r2, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r1, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=[@cred={{0x1c}}, @rights={{0x10}}, @rights={{0x10}}], 0x40}, 0x80) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000001c0)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = dup(r4) syz_ublk_setup_queues(r5, r3, &(0x7f00000004c0)={0x0, 0xbd, 0x10, 0x1, 0x7f}, &(0x7f0000000a80)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe708, 0x42, 0x1000002, 0x91}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x3b00, 0x2, 0x1, 0x3aa}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x93ea, 0x2000, 0x4003bfff, 0x2b9}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5, 0x800, 0x1, 0x26d}}], 0x1, 0x0, 0x0) 3m43.063184618s ago: executing program 6 (id=29106): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000003900), 0x34aa945a513d639, 0x0) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) 3m42.838985373s ago: executing program 6 (id=29109): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r2 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) r3 = fsmount(r2, 0x0, 0x80) bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000003c0)={r1, r3}, 0x10) r4 = fsopen(&(0x7f0000000080)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) r5 = fsmount(r4, 0x0, 0x8) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000340)={r1, r5, 0x0, 0x0, @val=@netfilter={0x0, 0x0, 0xe}}, 0x20) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001c40)={0x8, 0x3, &(0x7f0000001300)=ANY=[], &(0x7f0000001200)='syzkaller\x00'}, 0x94) r7 = fsopen(&(0x7f0000000080)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r7, 0x6, 0x0, 0x0, 0x0) r8 = fsmount(r7, 0x0, 0x8) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000340)={r6, r8, 0x0, 0x0, @val=@netfilter={0x0, 0x1, 0x6}}, 0x20) close_range(r0, 0xffffffffffffffff, 0x0) 3m42.819247504s ago: executing program 6 (id=29111): socket$nl_generic(0x10, 0x3, 0x10) socket$inet(0x2, 0x2, 0x1) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_xfrm(0x10, 0x3, 0x6) mmap$IORING_OFF_SQ_RING(0x0, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20000845, &(0x7f0000b63fe4), 0x1c) getsockopt$inet6_buf(r0, 0x29, 0x3d, 0x0, &(0x7f00000000c0)=0x37) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r2, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r1, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=[@cred={{0x1c}}, @rights={{0x10}}, @rights={{0x10}}], 0x40}, 0x80) socketpair$unix(0x1, 0x2, 0x0, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000001c0)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = dup(r4) syz_ublk_setup_queues(r5, r3, &(0x7f00000004c0)={0x0, 0xbd, 0x10, 0x1, 0x7f}, &(0x7f0000000a80)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe708, 0x42, 0x1000002, 0x91}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x3b00, 0x2, 0x1, 0x3aa}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x93ea, 0x2000, 0x4003bfff, 0x2b9}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5, 0x800, 0x1, 0x26d}}], 0x1, 0x0, 0x0) 3m42.739277286s ago: executing program 6 (id=29113): pipe2$watch_queue(0x0, 0x80) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f066bbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) sched_setaffinity(r0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) remap_file_pages(&(0x7f00006ca000/0x4000)=nil, 0x4000, 0x0, 0x3, 0x20000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f00000007c0)={0x2, 0x3, 0x0, 0x3, 0xb, 0x0, 0x70bd2a, 0x25dfdbfb, [@sadb_key={0x1, 0x9}, @sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x4e22, @empty}}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x2, 0x3}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x4e21, @initdev={0xac, 0x1e, 0x1, 0x0}}}]}, 0x58}, 0x1, 0x7}, 0x0) 3m26.458289361s ago: executing program 56 (id=29113): pipe2$watch_queue(0x0, 0x80) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f066bbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) sched_setaffinity(r0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) remap_file_pages(&(0x7f00006ca000/0x4000)=nil, 0x4000, 0x0, 0x3, 0x20000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f00000007c0)={0x2, 0x3, 0x0, 0x3, 0xb, 0x0, 0x70bd2a, 0x25dfdbfb, [@sadb_key={0x1, 0x9}, @sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x4e22, @empty}}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x2, 0x3}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x4e21, @initdev={0xac, 0x1e, 0x1, 0x0}}}]}, 0x58}, 0x1, 0x7}, 0x0) 2m45.226529337s ago: executing program 9 (id=30635): prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0xffffffffffffffff}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) bind$unix(0xffffffffffffffff, &(0x7f0000000840)=@file={0x1, './file0\x00'}, 0x6e) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x25, &(0x7f0000000140)=0x2) r3 = openat(0xffffffffffffff9c, 0x0, 0x88080, 0x16) openat$fuse(0xffffffffffffff9c, 0x0, 0x42, 0x0) openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x82) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)={0x28, r5, 0x1, 0x0, 0x25dfdbfc, {0x3}, [@TIPC_NLA_BEARER={0x14, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @l2={'eth', 0x3a, 'gre0\x00'}}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x20000004}, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) getdents64(r6, &(0x7f0000000200)=""/179, 0xb3) read$FUSE(r3, &(0x7f0000006780)={0x2020}, 0x2020) socket$inet6_tcp(0xa, 0x1, 0x0) syz_clone3(&(0x7f0000000540)={0x81000000, 0x0, 0x0, 0x0, {0x3d}, &(0x7f00000001c0)=""/170, 0xaa, &(0x7f0000000380)=""/209, &(0x7f0000000280)=[r0], 0x1}, 0x58) connect$inet6(0xffffffffffffffff, 0x0, 0x0) 2m45.149779969s ago: executing program 9 (id=30641): madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) renameat2(0xffffffffffffff9c, &(0x7f0000000780)='./file7\x00', 0xffffffffffffff9c, &(0x7f00000007c0)='./file1\x00', 0x0) syz_mount_image$fuse(0x0, &(0x7f0000000000)='./bus\x00', 0x300f401, 0x0, 0x2, 0x0, 0x0) linkat(0xffffffffffffff9c, &(0x7f00000003c0)='./cgroup\x00', 0xffffffffffffff9c, &(0x7f0000000100)='./file7\x00', 0x1000) renameat2(0xffffffffffffff9c, &(0x7f0000000780)='./file7\x00', 0xffffffffffffff9c, &(0x7f00000007c0)='./file1\x00', 0x0) socket$inet(0x2, 0x2, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) writev(r3, &(0x7f00000002c0)=[{&(0x7f0000000380)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fdd411efc40800040000000000000000", 0x39}], 0x1) writev(r3, &(0x7f00000001c0)=[{&(0x7f0000000400)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000200000000000006040000000000f93132", 0x39}], 0x1) 2m45.12132753s ago: executing program 9 (id=30643): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000005c0)={r0}, 0x4) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x0, 0xe, 0x0, &(0x7f0000000280)='j\x00'/14, 0x0, 0x60, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x9}, 0x50) 2m45.056022562s ago: executing program 9 (id=30647): r0 = fsopen(0x0, 0x0) fsconfig$FSCONFIG_SET_BINARY(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x0) r2 = openat$cgroup_subtree(r1, &(0x7f0000000100), 0x2, 0x0) write$cgroup_subtree(r2, &(0x7f0000000300)=ANY=[@ANYBLOB='-cpu'], 0x5) 2m45.055682892s ago: executing program 9 (id=30648): prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x244}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x64, &(0x7f00000002c0)=0xffffffffffffff11) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) r3 = add_key$keyring(&(0x7f0000000000), 0x0, 0x0, 0x0, 0xfffffffffffffffe) setgroups(0x0, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) keyctl$chown(0x4, r3, 0xee01, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) setsockopt$SO_TIMESTAMP(r4, 0x1, 0x40, &(0x7f0000000280)=0xe6e8, 0x4) syz_mount_image$exfat(&(0x7f0000002bc0), &(0x7f0000000080)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0x21cc46, &(0x7f0000000380)=ANY=[], 0x1, 0x1536, &(0x7f0000002c00)="$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") socket$packet(0x11, 0x3, 0x300) r5 = socket$inet(0x2, 0x1, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x77359400}}, 0x0) syz_clone3(&(0x7f0000000680)={0x40004000, 0x0, 0x0, 0x0, {0x21}, 0x0, 0x0, 0x0, 0x0}, 0x58) timer_settime(0x0, 0x1, &(0x7f0000000100)={{0x0, 0x989680}}, &(0x7f0000000140)) bind$inet(r5, &(0x7f0000000000)={0x2, 0x4e23, @multicast2}, 0x10) sendto$inet(r5, 0x0, 0x0, 0x200007fd, &(0x7f0000000040)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1c}}, 0x10) sendto$inet(r5, &(0x7f0000000280)="02", 0x1, 0x14, 0x0, 0x0) shutdown(r5, 0x1) pipe2(&(0x7f0000000100), 0x0) 2m44.608338483s ago: executing program 9 (id=30669): pipe2$watch_queue(0x0, 0x80) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f066bbeeb, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) sched_setaffinity(r0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) remap_file_pages(&(0x7f00006ca000/0x4000)=nil, 0x4000, 0x0, 0x3, 0x20000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f00000007c0)={0x2, 0x3, 0x0, 0x3, 0xb, 0x0, 0x70bd2a, 0x25dfdbfb, [@sadb_key={0x1, 0x9}, @sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x4e22, @empty}}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x2, 0x3}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x4e21, @initdev={0xac, 0x1e, 0x1, 0x0}}}]}, 0x58}, 0x1, 0x7}, 0x0) 2m28.221951371s ago: executing program 57 (id=30669): pipe2$watch_queue(0x0, 0x80) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f066bbeeb, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) sched_setaffinity(r0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) remap_file_pages(&(0x7f00006ca000/0x4000)=nil, 0x4000, 0x0, 0x3, 0x20000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f00000007c0)={0x2, 0x3, 0x0, 0x3, 0xb, 0x0, 0x70bd2a, 0x25dfdbfb, [@sadb_key={0x1, 0x9}, @sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x4e22, @empty}}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x2, 0x3}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x4e21, @initdev={0xac, 0x1e, 0x1, 0x0}}}]}, 0x58}, 0x1, 0x7}, 0x0) 34.338651569s ago: executing program 3 (id=33068): socket$inet6_tcp(0xa, 0x1, 0x0) r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TCSETSW2(r0, 0x402c542c, &(0x7f0000019180)={0x9, 0x7, 0xc, 0x1ff, 0x3, "0400ebffffffffffffc73cebffff000800", 0x8, 0x100000}) ioctl$TIOCSTI(r0, 0x5412, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x4, 0x5, &(0x7f0000000240)=ANY=[@ANYBLOB="18020000000000000000000000000000850000005300000085000000d000000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x0, 0xe, 0x0, &(0x7f0000000840)="5fc83dd3b7a25254be360df7b8e1", 0x0, 0x6333, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) 33.816874432s ago: executing program 3 (id=33078): prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0xffffffffffffffff}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) bind$unix(0xffffffffffffffff, &(0x7f0000000840)=@file={0x1, './file0\x00'}, 0x6e) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x25, &(0x7f0000000140)=0x2) r3 = openat(0xffffffffffffff9c, &(0x7f0000000340)='./cgroup.cpu/cgroup.procs\x00', 0x88080, 0x16) openat$fuse(0xffffffffffffff9c, 0x0, 0x42, 0x0) openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x82) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)={0x28, r5, 0x1, 0x0, 0x25dfdbfc, {0x3}, [@TIPC_NLA_BEARER={0x14, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @l2={'eth', 0x3a, 'gre0\x00'}}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x20000004}, 0x0) getdents64(0xffffffffffffffff, &(0x7f0000000200)=""/179, 0xb3) read$FUSE(r3, &(0x7f0000006780)={0x2020}, 0x2020) socket$inet6_tcp(0xa, 0x1, 0x0) syz_clone3(&(0x7f0000000540)={0x81000000, 0x0, 0x0, 0x0, {0x3d}, &(0x7f00000001c0)=""/170, 0xaa, &(0x7f0000000380)=""/209, &(0x7f0000000280)=[r0], 0x1}, 0x58) connect$inet6(0xffffffffffffffff, 0x0, 0x0) 33.762563433s ago: executing program 3 (id=33081): prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0xffffffffffffffff}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) bind$unix(0xffffffffffffffff, &(0x7f0000000840)=@file={0x1, './file0\x00'}, 0x6e) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x25, &(0x7f0000000140)=0x2) r3 = openat(0xffffffffffffff9c, &(0x7f0000000340)='./cgroup.cpu/cgroup.procs\x00', 0x88080, 0x16) openat$fuse(0xffffffffffffff9c, 0x0, 0x42, 0x0) openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x82) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="dff6e04f0000000000fcdbdf2503000000150001800d0001006574683a6772653000000000ec02ecfd5c72"], 0x28}, 0x1, 0x0, 0x0, 0x20000004}, 0x0) getdents64(0xffffffffffffffff, &(0x7f0000000200)=""/179, 0xb3) read$FUSE(r3, &(0x7f0000006780)={0x2020}, 0x2020) socket$inet6_tcp(0xa, 0x1, 0x0) syz_clone3(&(0x7f0000000540)={0x81000000, 0x0, 0x0, 0x0, {0x3d}, &(0x7f00000001c0)=""/170, 0xaa, &(0x7f0000000380)=""/209, &(0x7f0000000280)=[r0], 0x1}, 0x58) read(0xffffffffffffffff, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r6 = socket$inet6_icmp(0xa, 0x2, 0x3a) bind$inet6(r6, &(0x7f0000000000)={0xa, 0x4e24, 0x8, @mcast1, 0x40004}, 0x1c) r7 = socket$unix(0x1, 0x1, 0x0) bind$unix(r7, &(0x7f0000000000)=@abs={0x1, 0x0, 0x4e24}, 0x2) connect$inet6(0xffffffffffffffff, 0x0, 0x0) 33.704627545s ago: executing program 3 (id=33086): r0 = syz_mount_image$f2fs(&(0x7f00000002c0), &(0x7f00000105c0)='./file1\x00', 0x80, &(0x7f0000000000)=ANY=[], 0x43, 0x105fb, &(0x7f0000010600)="$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") r1 = dup3(r0, r0, 0x80000) sendmsg$NFT_BATCH(r1, &(0x7f00000088c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000008880)={&(0x7f0000002200)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [@NFT_MSG_NEWSETELEM={0x748, 0xc, 0xa, 0x5, 0x0, 0x0, {0x0, 0x0, 0x5}, [@NFTA_SET_ELEM_LIST_ELEMENTS={0xe0, 0x3, 0x0, 0x1, [{0xdc, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_USERDATA={0x62, 0x6, 0x1, 0x0, "e0bbd8c49d1ce54bb218985872d516eea982bf35ef5445f07356e8fd44b5a94ab4299b72dc140b17a6a4147f103ca7af84e6c325121f93f829dd07a0ae45370916dd268015ff73687801e074c9fbbfa2c950648317fccb58078e330314eb"}, @NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz0\x00'}, @NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0x9}, @NFTA_SET_ELEM_FLAGS={0x8}, @NFTA_SET_ELEM_DATA={0x54, 0x2, 0x0, 0x1, [@NFTA_DATA_VALUE={0x4f, 0x1, "0965479108db8054383f3a9f0d279edeeab67ccbd6d25ad9fa14a17bec1f19fd53e117e741a4ca59161736c752f843e7c2801c8add5093669957de4c048c73408948a786304db76eab3b2c"}]}]}]}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x640, 0x3, 0x0, 0x1, [{0x114, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0x104, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x100, 0x1, "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"}]}, @NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0x6}]}, {0x64, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_EXPR={0x54, 0x7, 0x0, 0x1, @tunnel={{0xb}, @val={0x44, 0x2, 0x0, 0x1, [@NFTA_TUNNEL_DREG={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_TUNNEL_MODE={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_TUNNEL_KEY={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_TUNNEL_MODE={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_TUNNEL_KEY={0x8}, @NFTA_TUNNEL_DREG={0x8, 0x2, 0x1, 0x0, 0x12}, @NFTA_TUNNEL_MODE={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_TUNNEL_MODE={0x8, 0x3, 0x1, 0x0, 0x2}]}}}]}, {0x4c4, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_DATA={0x4b4, 0x2, 0x0, 0x1, [@NFTA_DATA_VALUE={0x96, 0x1, "875bff1aa9267622982dc2f9281ff7a805f85ca5c0dc2bc1bf5391ea7dfaa2fd45cf4e7462adebc34e7644f077bd1efe7bc237ead222bf88e003b295f66d5c25ffe46a67e716d3c28fc26d12c9cd1391c79e2ff9200b830eaf17341e15d71689e909f52011231e91c833d40cd7512be168dfa68953084faee53237055d16afd3b232be75fdeba502c7bae7112154b793cdef"}, @NFTA_DATA_VALUE={0xe2, 0x1, "d7cf51d44b2aedfba388823823d51dcb7ad8ea9800a8e8f3bbbc66cbd226d62f44b11fe76d3e31112d3985547d9665b1cc72a7667e327a9429396868a650abf078ca0a1025b33a7ecbbe395f017ef402716d93dc1e96a2df17a7bfad133e98be85c5859e3cf2ab2a49437ed5e4b08beab702635616c1716c0498d10470d8f3037b75fc61ebb246a17cbae32f95816a4226bafa838f09a2cc46e9d01daf38a04db7c2d6f40d846def440d272d9b96efa940c9c0ca1d67da14f973e335fffeaaeba5cc12c86c54ecc03c53c6b3b20cb4e8f617d5fad2bed7f4630683a5c720"}, @NFTA_DATA_VALUE={0x22, 0x1, "4ec1c1d672af9c49389f41a3dd94657f4f64819b143c11349a7a435e59fc"}, @NFTA_DATA_VALUE={0xf1, 0x1, "4bc62fe6a35d095349a581a6d2d8479ee93667a241ca8bfff415053c1ce4ae96361fbd5c0b9cad6f39214fa9a17a576fbd562d0bb2ee544418885bbce372f342463499cccab951a7e7731b215da56ba3e7058e2d66e4b72921af57248d4a006603fbb86567b8a6f94a07996df0011b593d5c37cc930e4bb0daafd55ba41ef4637283a2aeffae0a32c7a25e45b700b181dfe9c2af800305e47c4a7291b5da01a23b4c614d55b9949e9e211c15bbb24f1fb1b6c50e027cd6414b691a09fcd8fa626ff88d8d5b7621431868c53ae863fdf2b898f8878fdece743b880153f574bc1dc4b27be652b2e317c2668187db"}, @NFTA_DATA_VERDICT={0x40, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}]}, @NFTA_DATA_VERDICT={0x54, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}]}, @NFTA_DATA_VALUE={0xaf, 0x1, "69ee06ac22124893c2b0b463f9c017238215538e1eb31d9ddaec48feaa9e83fdd2b283f9f17e7c401849c32e750576511026912858ba194afaf9748cee771a6324bf590867dd9863308ca9be8d678d43aec031ca6e45fffa41fdfe654f799cb815cab1ec2e0479ac9cc88e08fa21f42f360b905d9741020694cf2a1ef3ff9bd9985b8e0b495c0549c0d734045ba168ec675a47c3c7c083f463b3a3f7f558e29f338f7a7beee380c2522e72"}, @NFTA_DATA_VERDICT={0x40, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}]}, @NFTA_DATA_VALUE={0x97, 0x1, "e88a45930c7f7c8d83a4470748643c7a0c74dce0c6d2273aac220cfa1290800492d09fc1ce62a3b73dd9a07f3ef8c68160f95137a6b702505285f719f3102964946682cf46afa7e69e2726a934b4dc29bebd140260612d32e7c121fc91b05a23c01af49afd20b80a3d413d19096450bed2b7829deffdac7082403e175a81b19eb0e3626e4b49910ede9e3ea2c8c16b5f397c4f"}]}, @NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0x9}]}]}, @NFTA_SET_ELEM_LIST_SET_ID={0x8, 0x4, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_DELFLOWTABLE={0x34, 0x18, 0xa, 0x3, 0x0, 0x0, {0x5}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_FLOWTABLE_FLAGS={0x8, 0x7, 0x1, 0x0, 0x3}, @NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x4}]}, @NFT_MSG_DELSETELEM={0x5c7c, 0xe, 0xa, 0x201, 0x0, 0x0, {0x5, 0x0, 0x8}, [@NFTA_SET_ELEM_LIST_ELEMENTS={0x1348, 0x3, 0x0, 0x1, [{0x1344, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_USERDATA={0xbf, 0x6, 0x1, 0x0, "13cb48af6ee7aca9686092905d03a0c490699c0cd2dfd8e1b66c69e4d6ac0292815185f12a2d72cd4e9332a7d2e0ce0e344c6aecc5ba95d33bd83afc4f92cb43928f6f1b8d609a79cabe3e803f5bca73c1d1c08149335718a0336e01012a1ae5e228da8dec9e161d932b10033dd26c6c54dca54f6019792160c3526c978304dc70926fe5eea84af48013f19b54732f1bf0fcac317abe978530ae6533f0192578847648dc6e135bcef4c27c4fb77d1ef3cb3f47b98e661868e09b92"}, @NFTA_SET_ELEM_DATA={0x1280, 0x2, 0x0, 0x1, [@NFTA_DATA_VALUE={0x7c, 0x1, "80565e92b5f18615165ba6e1f28d38e24ae2b8731e4b80f564f1064c14793547dd2fcacf187e063ff4d50c3963d578ba9485ec7a41b40c129a25a4e21eb6cf938fa3f22cc5ad09a1a0fe23b0f5ea65fabb0b15f50e7ba9da29e5b2e066fcbaeebaa55f8b56c6f954d98225cb3b58937767a1d02b9af65584"}, @NFTA_DATA_VALUE={0x5a, 0x1, "e7fed091ff70e0ea970ce42c081a1ccbf20b305c7d5e7c48c39d59bfd24354b854dd40fed7b6fb5fa87bd23e7c368ec2c2eeadb4274b39298d3da08441653c0b15ab08f3185752c2e0024b3219e3fd2ea73926e73ffb"}, @NFTA_DATA_VALUE={0x1004, 0x1, "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"}, @NFTA_DATA_VERDICT={0x4c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}]}, @NFTA_DATA_VALUE={0xd4, 0x1, "c8eb2b4323a1507aa14bbd6b8c68f3a328ba54532687ab5b4543d71dbd256edf85344760b92fd3616955c7d55027e597525920222aae532c144714cca3d4f5719fdadce0c82fd0e174025cc60a2b94225df8446d912d2e9a7ff4ed9a828fed63bb28073714a3625e775d99891a7c1860432f6232cd18d96ce9294942ffb4edc69e8b0313acf3dc995e354e5c88f3122b1b12d94837340dedb416d6a5a792436ed2f5e4951d0247e5042ed7f6d4be6d0ac7dde2a62bad55f0d9589c368f628de20692212b65ad70fbc76f7e78f4e20815"}, @NFTA_DATA_VERDICT={0x3c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffa}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}]}, @NFTA_DATA_VERDICT={0x44, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}]}]}]}]}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x20d8, 0x3, 0x0, 0x1, [{0x6c0, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xac, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0xa5, 0x1, "029bb90ff8638b7ab693a79b7af0cb7e37ce91b7b24490acaeaca244bbbe0adb72e8013d733f20eddb69439769ee1b8936a6ead8ff00359491ce6bb4d26bd0463fb99f3ed1779ff574a899eea0adba48b77a3f62b515fe2eaa4aa8ce83bfe31ddb75ac6826f43703c8c0a2831fd9cb4dcc1f1c501622e07ef1a30213a9befdc2bcf9dc7e1b65751c082f0d469770dcf2d78a2a583e2bec11b0584879a69129533b"}]}, @NFTA_SET_ELEM_DATA={0x44c, 0x2, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x1c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}]}, @NFTA_DATA_VERDICT={0x14, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}]}, @NFTA_DATA_VALUE={0xbd, 0x1, "c66ac43fed890d4da73df7f0ae50e53ecc90ea111a892aa429223fa68d492f629b61a3f807b2561a75718ef30c8f03acb2201edfcedd1b53f7c033a39bf5f400963779d80d68db75a52514d2b1c210e7d5c599410f051896c37d362f55d97ae0499fdb12745afd3b95466d2d0d49e534612f70e46305d6c78920a1a7e23a0a2cc6703d0666beed0a2cfa1c7ca7f5f1c5c969249a3696d87bef08031490ccd30a16b4aee3919d96dead08f44b1e45edefaa37774f6440641a33"}, @NFTA_DATA_VALUE={0x20, 0x1, "6ec61021d0a7ce5b8f5eaabf004a0fbbca1e00971cfab07496641bc1"}, @NFTA_DATA_VERDICT={0x14, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CODE={0x8}]}, @NFTA_DATA_VALUE={0x86, 0x1, "c9912809812a55d540491fc2857623dd8450fcac4709292aac4c0b8cc8b2e4a65c1c4f42a794572a22f8692a6e6743a0ff44bea39517d448d7aad406f0c0c1121eb9c6aeef8db8bd13c3d13d9380fdec36a718796efa0c9d6db7dcbea0618b49da6cac554d48c64823a64f3062fd532572118b2f84f5a04f85fda3139816636ac73e"}, @NFTA_DATA_VALUE={0x74, 0x1, "c9c659dd97eca927780ba150b7549ed97674f1bc70571decb20803a9c937d68e65a9326404e957ff04792d426a0b9239ba7ba4d30b4c483fb1fc52694a7e4f3305be83be66492cebf7fd2f04c7ee943e2dd7e1d183c53fcb1a4f9cde4f41c89b76f777e2bf550360dc9c3493702f688d"}, @NFTA_DATA_VALUE={0xfd, 0x1, "1d8ddb879f31c0296963a8a6076736c77994b2d7d7c0795d1d2d5f6ba15eee7188d335cdc9a23d715c6427096044460106696e9d9091ab813c15b5da2e023483c1687b90759ddac66869b1a0e66e2b43b92a6b16d5e617b6b94561ad602e221d2b0f54a60c7f2a67cc8c535870a32865a078d3e7ba54934439749808e51cc14c0f6eae9db6b452c49b2e99b45f3e753c0f6b1c1d58ca3f0cc0f400cd730cfeb6cc7704935e9811ebf83acf6a7487f4ea2f2a548e7ea8cedd0a87517590082a9e2b67051d10f0bfa13be812355ced72e75fbd99ae37e7afb8ac5c7cebf2e5edd62e8ff0cdc5b925699576783803a741c1cba58a0859c9d86bbe"}, @NFTA_DATA_VALUE={0x4f, 0x1, "e3ef3af6b518249c7344f9596906b3b815dcae2b71664c3ab47587a89595b19eae16ded516f10b0c0010b5ab7bda686e0f412fa1905d274cfd71a774e2d47e45de1d001ae234f4ac6cf71b"}, @NFTA_DATA_VALUE={0xd5, 0x1, "bb46f40392a143817532f2fc7238cbb7c583bc942056116d8bfa8f816fe5a545fab05f50525388549178d95fe538550d0cfd95232962e8ea6f5b6c0233538404ed0eb36d404bcc270c73d86dbb50ff374f2d24e2cc4858f7cad3b7d10a068dfca3021f1c0dcc921d8965f1ab2815e97f33099601e3cbf094252d2ea1a6f2057dc39e78904d94e55ff0c0e5b648f504d55126fbee7cb5b397287523d6c88ad197fda69a911d7d0dc3430ceb69f474fe5ead7eae8db12201affa2319c3ccc12aa3e3f4b424f7832f2facff75fd3c11000155"}]}, @NFTA_SET_ELEM_DATA={0x4c, 0x2, 0x0, 0x1, [@NFTA_DATA_VALUE={0x30, 0x1, "54fcfbca9a0ddc041bb9f9a13e3e8d8c4c5d2dadda5c7e3e6eac681598e79eecc494d4493ef99d4f76a42415"}, @NFTA_DATA_VERDICT={0x18, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}]}]}, @NFTA_SET_ELEM_EXPR={0x44, 0x7, 0x0, 0x1, @socket={{0xb}, @val={0x34, 0x2, 0x0, 0x1, [@NFTA_SOCKET_LEVEL={0x8, 0x3, 0xa5}, @NFTA_SOCKET_KEY={0x8}, @NFTA_SOCKET_KEY={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_SOCKET_KEY={0x8}, @NFTA_SOCKET_LEVEL={0x8, 0x3, 0xb5}, @NFTA_SOCKET_KEY={0x8, 0x1, 0x1, 0x0, 0x2}]}}}, @NFTA_SET_ELEM_EXPR={0x10, 0x7, 0x0, 0x1, @quota={{0xa}, @void}}, @NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz0\x00'}, @NFTA_SET_ELEM_DATA={0x118, 0x2, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x1c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}]}, @NFTA_DATA_VALUE={0xf5, 0x1, "e95f2e88020c2c3680000c364c99a9cbf65f560be911c415b6246b17bf34d1ebaef85fbeee3ce3658a6877e66565391142d3295a8adaa1bd40238f18b77690348e1ff9536464d80847182785294f5b2d1077c48335aeb6731318680f53f61eb3609b1e6d8a0834e070083f348cb36fab02561623218e4c9f619ac5e4466640994d6d995dbbc0db503f8e368d2c9c56b8e90a575c915dcf1a6141db4061c854e3a539928c626c32ca4e9b866882ba86f7a89f593c1e4f6350da518a0cccadf0fda6721d696b48fb7e258cc5d7843ba39aa55e87868d2a1ab33d617f8576c06a66426c2c239fdf7b7a11c765f466f73096f5"}]}]}, {0x54, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_EXPRESSIONS={0x44, 0xb, 0x0, 0x1, [{0x40, 0x1, 0x0, 0x1, @dup_ipv4={{0x8}, @val={0x34, 0x2, 0x0, 0x1, [@NFTA_DUP_SREG_ADDR={0x8, 0x1, 0x1, 0x0, 0xe}, @NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0xd}, @NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0xc}, @NFTA_DUP_SREG_ADDR={0x8, 0x1, 0x1, 0x0, 0xb}, @NFTA_DUP_SREG_ADDR={0x8, 0x1, 0x1, 0x0, 0x4}, @NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0x2}]}}}]}, @NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz2\x00'}]}, {0x4d0, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_EXPR={0x18, 0x7, 0x0, 0x1, @flow_offload={{0x11}, @void}}, @NFTA_SET_ELEM_DATA={0x3e4, 0x2, 0x0, 0x1, [@NFTA_DATA_VALUE={0xff, 0x1, "0af6134a9eed1c1c57b45bb83759a639a342c5678451322fb362f0ad1908e3e4abf9f0ba7bb8086ba6cdf024ff26aa069902d90372d3b39ec6fb47f5dcfa2f87b954271e2c1960eb8c334851f9e1d3743e763b68586170da256399295af5a18595fb80a4417c1e2ef7ecebd097b2a3fd0409eb7572fd8c4e55d48c4de7933b8c430b457f5abde0cfd400d50121b3dfef976260a5bb11c5d23e88da95c3c8ea968b4758230925d31829af583c855e19f49a23f0b8c95bfb79c128cfdc4959bb80f81cf6ce2a510ef1f164619a2871596607511ee47078aaa6dce660952fb3bffeb27ca49ea0436b3bf904c5b7ca0e96745b8daeba2ea11df50581e8"}, @NFTA_DATA_VERDICT={0x38, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}]}, @NFTA_DATA_VERDICT={0x18, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}]}, @NFTA_DATA_VALUE={0x43, 0x1, "d0287bffa0e4eb29281a907a020741bdbf4fac5ab40377a0e0d9506d8746716350b77effaf54e78ca6868f5e7614d07544d123318ed5118ed4300c57b12720"}, @NFTA_DATA_VALUE={0xe7, 0x1, "520597c9ee32dcb397dabbef32480ec3e47a1a7998721bb175cada2c5c675ef0cd403072a3c26e10f56a0cd0143c01f692383211afdadd8f1c7bb783eb768be9aff345242fbd65ba59a1ecdf923a2444d8e00cbef47a0aceecb35078eaefc4432496c887d794a5dadfec12090aff75ab2dd1c518710b95d0d961317a452a08dba9a827e8d5f2b57b3f8db9ea2117f251b30473793df139b2d9eebdf79895d273254fab2250924c23e489889fa243be28566a73733957fa181c2d667299dbbca3958790de0feb904e78ad240fa01d98f7bfafef90c41db2e6083a2e8a37509e70b00d6d"}, @NFTA_DATA_VERDICT={0x2c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}]}, @NFTA_DATA_VALUE={0x13, 0x1, "3309e9eb0770cd60058f525ed603e4"}, @NFTA_DATA_VERDICT={0x50, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}]}, @NFTA_DATA_VALUE={0xd4, 0x1, "1cec513d4e38ea9ec1b3267a0ca2a332bcf9292d92a66aad1d74ed9ecdc85f42b8181e3b7a3069e9031089b7ca8921cf44cb18a09e4db0f500b688c66a71aed2ac216a48684347a3ca521e91c1062bda2ca0c907c00af7cac070e834d1f67e2608e61811da9a665415312c2a63e95317f1143f993e8dae447d2e0de3aa0bdf1f4681f10bd781c53b6c9ba459ba7ec707ac249b130fbff69d1f4ce503d1eb4703470684d6a9601e73ceda5344dbe79a83c0a4ecd4ae5f8faa5c9d15f231af17f41314220148620dd10f1e25b03fc346b4"}]}, @NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0x5}, @NFTA_SET_ELEM_KEY={0x38, 0x1, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x34, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}]}]}, @NFTA_SET_ELEM_KEY_END={0x8c, 0xa, 0x0, 0x1, [@NFTA_DATA_VALUE={0x88, 0x1, "c458ffaeb478ed108ed8fd70e4622e9ceb9ba39cd5b9ed8929a0c45a9775cac8f819094de5a086fc0043b438141468fbd50658a752e2e049c3ebaf498fde6a15e553362ffaf3433d0d56042bc2a2b4775ead9ae9e4ddc97ae8a97d2450ec215823a7ab74c785907756323e93fc3ed9ea314eb9cc3cfd675024d5fcbfe492c0bee344895a"}]}]}, {0x14f0, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0x1268, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x1004, 0x1, "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"}, @NFTA_DATA_VALUE={0xb2, 0x1, "a3a1386a0c1743ff0af42277fecc4ff695251d873808cea00629eb7f4d5d05a2383dd70e3cfc24a52383fc51cd75c456fe01c71a818ae69e440de23fac7e23ca826bb663cffc5aefb9ff6ef8ef83d590a0c330d581a275e8db484a2bab651afd4b67b02280d08f7b6a79b1b96047f1c9bcd0167c6f3b35733beb9df955ef0a8c5cda5310f9a564c653449fff6ee81fdab45f07e2100d06d0371a17fb336c6ea92607b87d944c94451b699514c5c9"}, @NFTA_DATA_VERDICT={0x18, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8}]}, @NFTA_DATA_VALUE={0xe, 0x1, "dfb176f6e42836bdacc2"}, @NFTA_DATA_VERDICT={0xc, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}]}, @NFTA_DATA_VALUE={0xe2, 0x1, "41cff6712612162b7914250b52e90f7c3365e5e450e5c4a2e5f1c8fd6e4dfb0ac868b2458c85e75f6fc40101f71b5ba14ab572c2c4c46df561f4950d4007197540761bf43da275c5999ab7726974597d0646c5cf7449f5dea7459325efe7299d5c9fdd037c7727ca0dcb6d91f042714e3373223e7a6094a8ace6e0682aa05a4d6ad3100c5f9c40b90edd39dd9eb8559ac5eebefa8f45d58ebbcf2c480d62f3ad65c2e40daab8a0df5245a8ffbd90e8e2211cf86d96e4afea9305990462e7f978d2b781ad323a843c6efcf4c7b8e4cb01dd9363cff7e086069d1852a457f9"}, @NFTA_DATA_VERDICT={0x34, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}]}, @NFTA_DATA_VERDICT={0x3c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}]}, @NFTA_DATA_VERDICT={0x24, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}]}]}, @NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_SET_ELEM_KEY={0x13c, 0x1, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x18, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}]}, @NFTA_DATA_VALUE={0xf6, 0x1, "5e60f7a37c0585b2d9631b0ada3af8dfea9dbfb11677b5acf452be6a1141f7e1124b5312cd2d1028e47d940407f2f0ea651e021cc813b5205fe53d10d5f7dc8ed432c023a65d3437699beebb93c9f85de5ea576c485b77da649b9059fedc80b040cef866d522bad469c8ce8879a2f5dc22bad6bf55d7dadfc16c65a59c17fa9f00130e1ff1e636d3c9ec27ae5327614208d3d7c2b29a4d36dee4598607cd17c4a678b28ee40226ac5ee674fc58ce490ccdd175dc9b2b92ed0d06326c594b4ab89a230519dd975eaf12ca2b42e1891e7a6db64d8adfbd56100acd2088bf0bd9fb8402935e7834ae0539170e86ba9c10625c7c"}, @NFTA_DATA_VERDICT={0x14, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}]}, @NFTA_DATA_VERDICT={0x14, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}]}]}, @NFTA_SET_ELEM_KEY_END={0x140, 0xa, 0x0, 0x1, [@NFTA_DATA_VALUE={0x3b, 0x1, "bc143ac5401c7107836918b472ea6fadb855276f92585f4e505770368019a08bd1fd8f85d36fffc8f2663817f4c7914ae613cd752a894e"}, @NFTA_DATA_VALUE={0x100, 0x1, "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"}]}]}]}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x194, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0xb5}]}, {0x170, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0x160, 0x1, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x30, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CODE={0x8}]}, @NFTA_DATA_VERDICT={0xc, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}]}, @NFTA_DATA_VALUE={0x4e, 0x1, "3e4ab4c55492ea1cc298de89b4fe52737fa21929f79f3960ed6a6658ba47f67a6dcfe6d12fd1c0512332920140044fbe40537c52f54838fbe6be10e502929201f72341bd1928d6599f03"}, @NFTA_DATA_VERDICT={0x38, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}]}, @NFTA_DATA_VERDICT={0x10, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}]}, @NFTA_DATA_VALUE={0x86, 0x1, "3ff070f2999090a0253decc0a89c0f3dee06ba17517c2a7426bbd453b2b1acf0ccd7dc62162e77d40d4dc95ef40ebc04b8b6cf221a3730ef3379462867f9d0a94887db15109ec2339f2e3f80e79ca259016041aeac5ff850f6ea449002e7100a3c3a2029d98cfb3b97672efe3acebb0e3e176904bb2ceeeb0be75a4aad9b913306c8"}]}, @NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0x3}]}, {0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0x2}]}]}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x2684, 0x3, 0x0, 0x1, [{0x380, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_EXPRESSIONS={0xa4, 0xb, 0x0, 0x1, [{0x30, 0x1, 0x0, 0x1, @nat={{0x8}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_NAT_FAMILY={0x8, 0x2, 0x1, 0x0, 0xa}, @NFTA_NAT_TYPE={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_NAT_TYPE={0x8}, @NFTA_NAT_REG_PROTO_MIN={0x8}]}}}, {0x10, 0x1, 0x0, 0x1, @tunnel={{0xb}, @void}}, {0x44, 0x1, 0x0, 0x1, @xfrm={{0x9}, @val={0x34, 0x2, 0x0, 0x1, [@NFTA_XFRM_DREG={0x8, 0x1, 0x1, 0x0, 0x14}, @NFTA_XFRM_SPNUM={0x8, 0x4, 0x1, 0x0, 0x6}, @NFTA_XFRM_DREG={0x8, 0x1, 0x1, 0x0, 0xb}, @NFTA_XFRM_DIR={0x5, 0x3, 0x1}, @NFTA_XFRM_KEY={0x8, 0x2, 0x1, 0x0, 0x5}, @NFTA_XFRM_DIR={0x5, 0x3, 0x2}]}}}, {0xc, 0x1, 0x0, 0x1, @ct={{0x7}, @void}}, {0x10, 0x1, 0x0, 0x1, @bitwise={{0xc}, @void}}]}, @NFTA_SET_ELEM_EXPRESSIONS={0x90, 0xb, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, @flow_offload={{0x11}, @void}}, {0x10, 0x1, 0x0, 0x1, @range={{0xa}, @void}}, {0x40, 0x1, 0x0, 0x1, @fib={{0x8}, @val={0x34, 0x2, 0x0, 0x1, [@NFTA_FIB_DREG={0x8, 0x1, 0x1, 0x0, 0x12}, @NFTA_FIB_DREG={0x8, 0x1, 0x1, 0x0, 0x13}, @NFTA_FIB_DREG={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_FIB_RESULT={0x8}, @NFTA_FIB_DREG={0x8, 0x1, 0x1, 0x0, 0x12}, @NFTA_FIB_FLAGS={0x8, 0x3, 0x1, 0x0, 0x5}]}}}, {0x24, 0x1, 0x0, 0x1, @meta={{0x9}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_META_SREG={0x8, 0x3, 0x1, 0x0, 0x14}, @NFTA_META_DREG={0x8, 0x1, 0x1, 0x0, 0x13}]}}}]}, @NFTA_SET_ELEM_KEY={0x174, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0xe2, 0x1, "3bd0b8c085fd6ded2fc080fb6d259a1f6faeeb12f0e78a56c944cfcec03447a91566c1f73bb267159e5f8f921870f3ab462d6c2a8ddbedaf8b8425c4a62d3068ec9911dee772c74963ac6f22fb9664e7a89609ffefd6fdd6b8c9e527a25cfa1287659cd5a6e4beb936b9c5c8109d0866f25a92123b450e59b0c5df255fbeed30b0b3aa7d56ae9ec6e39d922e74730410a98cda641f23e101dbe52b3f2ee07b93d0c2c2cf7c6444fffd81784fb95454a4c93baadaee286b1ad658e148df4207c0caa589c4e98a0f73fe6f1eabd4643c4e47a7a572fcc2eca5df01f9409fa1"}, @NFTA_DATA_VERDICT={0x24, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}]}, @NFTA_DATA_VALUE={0x67, 0x1, "ec79e821c541295bd83ba8da461ac12c5375777dd31bc75e8a97714cff7235544063186614541f898841bbb1385a20e26113cd68ea4fafd78eb409f626a0b4380b3685399de634c41ff7f2a7adb68afed71eb8a67287d193e6673fdb2496ad0d419384"}]}, @NFTA_SET_ELEM_EXPRESSIONS={0xcc, 0xb, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, @log={{0x8}, @void}}, {0x6c, 0x1, 0x0, 0x1, @lookup={{0xb}, @val={0x5c, 0x2, 0x0, 0x1, [@NFTA_LOOKUP_FLAGS={0x8, 0x5, 0x1, 0x0, 0x1}, @NFTA_LOOKUP_DREG={0x8, 0x3, 0x1, 0x0, 0x16}, @NFTA_LOOKUP_DREG={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_LOOKUP_SREG={0x8, 0x2, 0x1, 0x0, 0xb}, @NFTA_LOOKUP_DREG={0x8}, @NFTA_LOOKUP_SREG={0x8, 0x2, 0x1, 0x0, 0x3}, @NFTA_LOOKUP_DREG={0x8, 0x3, 0x1, 0x0, 0x11}, @NFTA_LOOKUP_SET={0x9, 0x1, 'syz0\x00'}, @NFTA_LOOKUP_SREG={0x8, 0x2, 0x1, 0x0, 0xc}, @NFTA_LOOKUP_SET={0x9, 0x1, 'syz1\x00'}]}}}, {0x14, 0x1, 0x0, 0x1, @connlimit={{0xe}, @void}}, {0x30, 0x1, 0x0, 0x1, @fib={{0x8}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_FIB_DREG={0x8, 0x1, 0x1, 0x0, 0xf}, @NFTA_FIB_FLAGS={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_FIB_RESULT={0x8}, @NFTA_FIB_FLAGS={0x8, 0x3, 0x1, 0x0, 0x5}]}}}, {0xc, 0x1, 0x0, 0x1, @dup_ipv4={{0x8}, @void}}]}, @NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x1}]}, {0x40, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_SET_ELEM_USERDATA={0x26, 0x6, 0x1, 0x0, "0bd463859ff260cd48d5faacc331a98efddd9ad7b535000f6b40c373028ac03f0cf3"}, @NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0x4}]}, {0x28, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0x8}, @NFTA_SET_ELEM_EXPR={0xc, 0x7, 0x0, 0x1, @cmp={{0x8}, @void}}, @NFTA_SET_ELEM_EXPIRATION={0xc}]}, {0x1aac, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY_END={0x34c, 0xa, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x14, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}]}, @NFTA_DATA_VALUE={0xae, 0x1, "395a9b318e4c3e5dd19f870d2281e9c95cf20a1b937ed18eb082642efb61daecfcbdc2a9d110c158baef155ddb1cd99445d0e7c11150fc1655cd716c2666ec7cdef4aa29ccc809e17d3128621e9e14af8fd086fc5c1e7037f8024f53c2df11fad512518408c2f197023dbb644c342491af5545d8cd6ac08bcf966ad3edc974a64b2396818ead57566e9d46cc962d9c8ebe43339d6a326b68f1e5bb4c6066ad9e2d7a387a8e74286f2340"}, @NFTA_DATA_VERDICT={0x20, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}]}, @NFTA_DATA_VALUE={0x68, 0x1, "0b5ac3b966536b3880ef55fc76bb4c179f9d7569a947868c0aa29f91f481e2f67133a216b216bcbf9a1e53c4b12f4a92e6b18a69fe9824048c38de139ce7284c00e7817e9bd8e07d0be6bd0ea6cbb1951d2db39fa34432eae53850420e7a254a25a4b74a"}, @NFTA_DATA_VALUE={0x9c, 0x1, "189167c17a9b18c1391ce57bc22bfecb247ca396ce62bb0bc020b95195c6b776ef2b12dcb6e4684a67d8453760f4235ef58e7c031caf52cab08f8e9e69ce759eba1030fbd4d7415e00a5bf1b12f10ba915b30e1350b6e812c7207232e89ec0c9a1c39646ac70e1d69ec240566203c6fb85fabb82bbf57e58427f50106fd5ab1648837d09d6a7cab24bb75f7a419a5f25214c37ab639250c6"}, @NFTA_DATA_VALUE={0xb2, 0x1, "a3e5fb202c1ac287bd5ef114ad1c1c3ab76ff819f381f257ec0322145c0914cf61044e63c39d0fe0d30c0b574cb22628ff5d92564f726f56857f79647474bf32528ca47e21b244ac810444ddc333a597c7d2d63fbdd8368aeb90e4537879c4d6b258742ab17d1ac505d417f2e39b78e5d483c5bb361cadc3db0b621b26474ebcd62edf8b0f6b1edeacbab6fa7a54832412f6d4c1cb9aead8665113c4cb5052f473f5eda510e13218112db6ac4c51"}, @NFTA_DATA_VALUE={0x79, 0x1, "004559aff31af24676a7dd234207c06a817f80771cd48fa5141c5bb566c9ab1ef5bfa8cb0ff6862e93c652be2237327efd0ad67ed590521892a29577989cad4ac1386e22dbef44fa0da5530f0520b1f0e2a27e505cc56dd7531522465bfa3b6abe72e659b559ecb057e1b9876c22d8eafeafce52be"}, @NFTA_DATA_VERDICT={0x30, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}]}]}, @NFTA_SET_ELEM_KEY={0x1418, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x1004, 0x1, "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"}, @NFTA_DATA_VALUE={0x6e, 0x1, "a9866adf45915de4e03bff315a868591660f52d1ec5c763abf66b5be32cfc66e23c56c386a9c0b116c8c2a42e909a226350b04d20829e7ee8ef447c452b45916a260a665f6b405e4dce0517784eb046819ae91e871e8fe634a74f2a7b882d7c8aef177d01d32724a5dcf"}, @NFTA_DATA_VALUE={0xf8, 0x1, "bc5233b1d9aa8c141598632753348dbba8d8fe12164924ea92aa2d739185fd66ddfbed39096e193c32ac08cca70497dd69448d31178e3d97587a94f109f463d9878df89ce977482d582608735408a4e7d5a513084713ed702d5359cb053656ad2593dfd73c89a104bafa5f39e78798d39957418ee51e1e31f56996b9bf65e2ddd70b15b9d031192fd80bc0c03829f6e3be412316f14fe7fd20525137f5faff9d8a5e0412f1d97e7a9ba5c2f2be647213132a764c52a0061d8e1f9844ff700e07e5e397660fb201ad8390629afda2b2fc25d33165b6fcd78c6b7d869991630d90131299b1911dbf289b8d7e145f063834fd953c0e"}, @NFTA_DATA_VERDICT={0x44, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}]}, @NFTA_DATA_VALUE={0x6e, 0x1, "d335787032f0cf8dd84f33907b35c8202f0d1757208549492d1a378c1e78eb05bf690e11e9e24663a4430ca9bdb29c86344e3dab75d7fa45e0ef789f0a2cd9895d8c1029e3156755a985b1c8d085bd926982b569955e5d8928e32cb9dff1b86c3b03b0e971441e9657a3"}, @NFTA_DATA_VERDICT={0x3c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0x6}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}]}, @NFTA_DATA_VALUE={0xbd, 0x1, "ce063b0e37c8350466ebf0ad996cc22d4704cdb6177ef2df43ee019f649abed99be4989e434f67286a563a457327b7bd18accba41486b20dd913d261a850c2592fd61b3662ec4081757094263728bfc1263c8a2dccb7fca121bbca57034b2b075b4bf55a650357dcbb33dbbaa6e377465a26fc3e6cad983e628061b4ef21959fe4b62b4870ac9dde69f5222781456eb6d8d1c85295b0af9d7d72273e20046dd765ecdf7c061a1392cca54c5b901d34fcae1c8f321412efaaf7"}, @NFTA_DATA_VERDICT={0x4c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}]}, @NFTA_DATA_VALUE={0x9d, 0x1, "d600ad420eadc4395bf7d175e3c5eafa505ade27534ee91100eaa3b72746a258141c91e3b9c1699d44268c7d3e0df8acc8ba9cbac97074c9650c6bb72e27b3b188abedc1bfdac055f10bebbffbe2d3410a9352f67e4cfd00a3bec2512533cd9e3f66698ebfe0e365e481608b0d947ff2f0a21237dc41414db3312c5da4db7416b80fe9a0ff569d87336046c994e50c13b6e9f7258401380421"}, @NFTA_DATA_VERDICT={0xc, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}]}]}, @NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz1\x00'}, @NFTA_SET_ELEM_KEY_END={0x27c, 0xa, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x28, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}]}, @NFTA_DATA_VERDICT={0x3c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}]}, @NFTA_DATA_VERDICT={0x10, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}]}, @NFTA_DATA_VERDICT={0x14, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}]}, @NFTA_DATA_VALUE={0xa6, 0x1, "200b66b9451c2d79bf3c39f548ed84bf6433e671f0f19fa5fa898056212af8662ec5bac637f00a0a4098b8e26ef9966c66eb0955f2eae41c3246ac7cc18047ffa35afb6fa632c34257ca7c8e1787b4746aef45096f80899d6a1dc3b3d1b845d7f5b976a0b01c6efff76a6c961928702de1b2dd8db6900a91e6e23f204e50976e1daad0fe59010a56424da97de6f77e20a36450a92c7d04719374a47e2203cff3a1f8"}, @NFTA_DATA_VALUE={0x2e, 0x1, "ca5112b387ecb606f7b1caa6c05c9b79538a9e2ddf7e48de1c487ace8001e59114cd68f0f997ba38a990"}, @NFTA_DATA_VERDICT={0x10, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}]}, @NFTA_DATA_VERDICT={0xc, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}]}, @NFTA_DATA_VALUE={0xee, 0x1, "ddb0bdb91cebb0cbff7154bb8e50f82a4a7ef7a050163efe10b87be91a43ffe2e377d7c9e683a3d49bdcf562bed42a6f22bf42098ac7a0533c972e1a5b85ef37a4a87fb1324065e867eb07cb7ffa810f1e1350f74bff00ad15ff6de65ec56e8c2098096752fb7dde1193ec02e0edc1e0221e6cbd2008358a2cdc9e7427aa51c3b5b55873f1260252eee8b89419cc2eef32d7105a54d071fb74a21f04b33419cea8b8657e4cf1ac687a29eabe33aaaf4d00092c1e4336145b3373fa1ba9362f3a6b8ceb2c09a9c022f0d514ec8c0da7bd48dd2de49a46db96b80d96c2026fec53d0ac2172d2ec567e5dd8"}, @NFTA_DATA_VERDICT={0xc, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}]}]}, @NFTA_SET_ELEM_USERDATA={0x4b, 0x6, 0x1, 0x0, "4170b41b1b65feb43393c4b148bfd5bac281c0d7d185b7b17c943dc10d0beb03d6175152d949bdf4a4038fd723a757ac195f447c82b22ce6472f9145f8030d047e91dc0adc0430"}, @NFTA_SET_ELEM_USERDATA={0x70, 0x6, 0x1, 0x0, "48be047591c4418b20c62d8fb81c1a31733cb5f88a73a6e2fa0c726a01e579f2dade2695cbbaba1707dcda86a051f4c7930e5d5cc602be0b82fec86c8dd8167d7ced497efb679a0bd057b22a85321af987cafb3f7002b7a7f163a04cb3d874ca185f98418e4876e408417273"}]}, {0x148, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0x5}, @NFTA_SET_ELEM_EXPRESSIONS={0x1c, 0xb, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, @log={{0x8}, @void}}, {0xc, 0x1, 0x0, 0x1, @cmp={{0x8}, @void}}]}, @NFTA_SET_ELEM_KEY={0xd4, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x74, 0x1, "8d9723ce06227c282fa328dabf9c4557663d7fd7ed907e39f5008eca86284ca379b2e7acc387189b7e6c2e1985a0e999bb63126695165dfb13616fb3972fc472590988da6b04bca8661f423ab78b5f3c3967f6885b137007931f594f09b3a8eeb348e4defe8c270383a3cc0202cb0379"}, @NFTA_DATA_VERDICT={0x5c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}]}]}, @NFTA_SET_ELEM_DATA={0x3c, 0x2, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x2c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}]}, @NFTA_DATA_VALUE={0xc, 0x1, "098ba92030ab30e7"}]}, @NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0x4ae}]}, {0x140, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz0\x00'}, @NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz2\x00'}, @NFTA_SET_ELEM_EXPRESSIONS={0x11c, 0xb, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @redir={{0xa}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_REDIR_FLAGS={0x8, 0x3, 0x1, 0x0, 0x60}, @NFTA_REDIR_FLAGS={0x8, 0x3, 0x1, 0x0, 0xa}]}}}, {0x14, 0x1, 0x0, 0x1, @byteorder={{0xe}, @void}}, {0x10, 0x1, 0x0, 0x1, @notrack={{0xc}, @void}}, {0x14, 0x1, 0x0, 0x1, @immediate={{0xe}, @void}}, {0x2c, 0x1, 0x0, 0x1, @xfrm={{0x9}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_XFRM_DIR={0x5}, @NFTA_XFRM_KEY={0x8}, @NFTA_XFRM_DREG={0x8, 0x1, 0x1, 0x0, 0x8}]}}}, {0x40, 0x1, 0x0, 0x1, @dup_ipv4={{0x8}, @val={0x34, 0x2, 0x0, 0x1, [@NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0x14}, @NFTA_DUP_SREG_ADDR={0x8, 0x1, 0x1, 0x0, 0xb}, @NFTA_DUP_SREG_ADDR={0x8, 0x1, 0x1, 0x0, 0x9}, @NFTA_DUP_SREG_ADDR={0x8, 0x1, 0x1, 0x0, 0x4}, @NFTA_DUP_SREG_ADDR={0x8}, @NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0x9}]}}}, {0x10, 0x1, 0x0, 0x1, @queue={{0xa}, @void}}, {0x40, 0x1, 0x0, 0x1, @dup_ipv4={{0x8}, @val={0x34, 0x2, 0x0, 0x1, [@NFTA_DUP_SREG_ADDR={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0x4}, @NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0xb}, @NFTA_DUP_SREG_ADDR={0x8, 0x1, 0x1, 0x0, 0xd}, @NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0x2d}, @NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0x10}]}}}]}]}, {0x2ac, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_KEY_END={0xe8, 0xa, 0x0, 0x1, [@NFTA_DATA_VALUE={0x19, 0x1, "b7ebd900380abeae4d0327211f2f4b18d3c4bfc08a"}, @NFTA_DATA_VERDICT={0x48, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}]}, @NFTA_DATA_VALUE={0x34, 0x1, "60f0d9f6caad29f2445ff6e93eaca61424fd76afa34e1da41191cb815b42d225dc5a6865822078f6f1afec66d424bfb3"}, @NFTA_DATA_VERDICT={0xc, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}]}, @NFTA_DATA_VALUE={0x2c, 0x1, "10a1b076aacee56b86fce304ecf5dece60b54f4eb6aa47bd32e5412594523739590d7a7b34d2706c"}, @NFTA_DATA_VALUE={0x7, 0x1, "966fa9"}, @NFTA_DATA_VERDICT={0xc, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}]}]}, @NFTA_SET_ELEM_USERDATA={0x59, 0x6, 0x1, 0x0, "6297724510e1f2f7ca846238abc93deb1cbd9533465f13f39372098f3a07943ae8538ac4a63011c72def8f0a39cfb1854f591410ef1dc31079996d0bac33d1a714ffc715fa93cffb0936390fe72c9b8e561c8d159f"}, @NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0x40}, @NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz2\x00'}, @NFTA_SET_ELEM_EXPRESSIONS={0x120, 0xb, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @objref={{0xb}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_OBJREF_SET_SREG={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_OBJREF_IMM_TYPE={0x8, 0x1, 0x1, 0x0, 0x2}]}}}, {0x44, 0x1, 0x0, 0x1, @objref={{0xb}, @val={0x34, 0x2, 0x0, 0x1, [@NFTA_OBJREF_IMM_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_OBJREF_IMM_TYPE={0x8, 0x1, 0x1, 0x0, 0x8}, @NFTA_OBJREF_SET_ID={0x8, 0x5, 0x1, 0x0, 0x3}, @NFTA_OBJREF_IMM_TYPE={0x8, 0x1, 0x1, 0x0, 0x6}, @NFTA_OBJREF_IMM_NAME={0x9, 0x2, 'syz0\x00'}]}}}, {0xc, 0x1, 0x0, 0x1, @osf={{0x8}, @void}}, {0x10, 0x1, 0x0, 0x1, @masq={{0x9}, @void}}, {0x10, 0x1, 0x0, 0x1, @notrack={{0xc}, @void}}, {0x4c, 0x1, 0x0, 0x1, @tproxy={{0xb}, @val={0x3c, 0x2, 0x0, 0x1, [@NFTA_TPROXY_REG_ADDR={0x8, 0x2, 0x1, 0x0, 0xe}, @NFTA_TPROXY_REG_PORT={0x8, 0x3, 0x1, 0x0, 0xc}, @NFTA_TPROXY_REG_PORT={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_TPROXY_REG_ADDR={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_TPROXY_REG_ADDR={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_TPROXY_REG_PORT={0x8, 0x3, 0x1, 0x0, 0x17}, @NFTA_TPROXY_FAMILY={0x8}]}}}, {0x10, 0x1, 0x0, 0x1, @tunnel={{0xb}, @void}}, {0xc, 0x1, 0x0, 0x1, @fib={{0x8}, @void}}, {0x10, 0x1, 0x0, 0x1, @limit={{0xa}, @void}}, {0x10, 0x1, 0x0, 0x1, @quota={{0xa}, @void}}]}, @NFTA_SET_ELEM_FLAGS={0x8}, @NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz2\x00'}, @NFTA_SET_ELEM_EXPR={0x10, 0x7, 0x0, 0x1, @masq={{0x9}, @void}}]}, {0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0x1000}]}, {0x2a8, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY_END={0x2a4, 0xa, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x58, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}]}, @NFTA_DATA_VALUE={0xb7, 0x1, "7cac5bef5c3b3536907c31faa8da63e2144e92c7bc46d1c884167d31ba06a07045c959df824d79573ac64de1030c13b9c43648ea5367058e26e52b89ca82362aa3f18da2e921307fa6492440f33cb33bc6cc866cba255ac7d6fa4cd3faab170f51ded0e200fd5f48786e4caf602da93259985d7b2bb81535e8a1e6cdd214d79f40641fffc3b10452cb75d0577f0aade199869518ffcf0dc87986a9f023c285b30b431cdda8c89bcfd3375cc0718f2ef0d41728"}, @NFTA_DATA_VERDICT={0x1c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}]}, @NFTA_DATA_VERDICT={0x30, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}]}, @NFTA_DATA_VERDICT={0x54, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffff9}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}]}, @NFTA_DATA_VERDICT={0x28, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}]}, @NFTA_DATA_VALUE={0x55, 0x1, "74f79828bdb362c4fc9e9525e0ac683b8d4cfb9ad04d8297c6edca8af7d716a581970008503872d494b03e5eda84c43307dcf52740ba105338e1f06a0364b7554100c11c9ae7011fcd4b0671418371097b"}, @NFTA_DATA_VERDICT={0x2c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}]}, @NFTA_DATA_VERDICT={0x44, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}]}]}]}]}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_NEWSETELEM={0x20, 0xc, 0xa, 0x0, 0x0, 0x0, {0x1, 0x0, 0x3}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x124, 0x3, 0xa, 0x3, 0x0, 0x0, {0x7, 0x0, 0x2}, [@NFTA_CHAIN_USERDATA={0x8e, 0xc, "e11524c80e022c11a45cd9736ed00bb0589921f63edc848c1b56bcd4bed7824a6c82f39ee14dfea79f78376462ab4d678d965522f5e6a4482dafd63ea95adad81404c90f6f5500999f7dc609d7bb55b07d483dc4970d0e8d252bd72254890228695994cc37ecf2660ccdaee58d06598340164488f9993e4a9a81a9b2332678e47ff086e0c18fcf14b3e8"}, @NFTA_CHAIN_COUNTERS={0x34, 0x8, 0x0, 0x1, [@NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x8}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x6}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0xe}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x8000000000000001}]}, @NFTA_CHAIN_HOOK={0x44, 0x4, 0x0, 0x1, [@NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x5296a7b0}, @NFTA_HOOK_DEV={0x14, 0x3, 'ip6tnl0\x00'}, @NFTA_HOOK_DEV={0x14, 0x3, 'veth1_to_batadv\x00'}, @NFTA_HOOK_HOOKNUM={0x8}]}, @NFTA_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x4}]}, @NFT_MSG_NEWTABLE={0xa8, 0x0, 0xa, 0x301, 0x0, 0x0, {0x1, 0x0, 0xa}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}, @NFTA_TABLE_USERDATA={0x51, 0x6, "cd339e85132ffb95c1f77d5cf46e8b56232e3b10b26e1fc220c59b3081d1857ab1b44869c7b7bd1bb057ef76a5a14d7e5a7ded49b84eb64e2a35ade8424ca2edbf59a72d1e57f72102b5d4549c"}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x5}]}, @NFT_MSG_NEWTABLE={0x54, 0x0, 0xa, 0x5, 0x0, 0x0, {0x0, 0x0, 0x2}, [@NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_TABLE_USERDATA={0x2a, 0x6, "fd732937d2f6fd156e6d6bb90bce2f0f2410addd2eaeae65cefd0a16df23cdb217089dafb5ed"}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0x6660}, 0x1, 0x0, 0x0, 0x4004004}, 0x20000010) creat(&(0x7f00000004c0)='./bus\x00', 0x14c) mount(&(0x7f0000000480)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x801400, 0x0) preadv2(0xffffffffffffffff, &(0x7f0000000980)=[{&(0x7f0000001200)=""/4096, 0x1000}], 0x1, 0x8, 0xa, 0x1b) 32.777237118s ago: executing program 3 (id=33109): syz_read_part_table(0x593, &(0x7f00000005c0)="$eJzs0r1LK2kUB+A3A5c0e4lcLli4hWCwigqx0CIpRGJIY0RcsbAWLLQQLCwkEq39+AcUv0BsxD6lGEEUYiUpxXpBsUmVZdfZxmplUdnleZrhPefMHF5+E/hPi8Lv7XY7EUJoJ9//9m+nhbFS98TI5FQIiTAbQij8+stfnUQ88fdXz+NzOT6XktnG/vXo82nHTc9dPX0Yxf1aFMJaCGHh4Sj1b+/G/99Z/jK1vrFU3FzJz98XVx8H5/oKXVuFxZ2hg1xlujM3E/9Ytehz9qcbw8e37fLT7vf+b/VGK3sVz2USH7Ofr/U2/72f1Wa1Nd57sjyQ+dG8qGzHub/IHwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA+GBn+cvU+sZScXMlP39fXH0cnOsrdG0VFneGDnKV6c7cTPQ6V4s+Z3+6MXx82y4/7X7v/1ZvtLJX8Vwm8TH7+Vpv89/7WW1WW+O9J8sDmR/Ni8p2nPuL/AEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAf6gwVuqeGJmcCiERZkMIo1HH0Z/1dvK1n4jnzuNnOa6XktnG/vXo82nHTc9dPX04EddrUQhrIYSFh6PUp1+Gd/sjAAD///tch0s=") (fail_nth: 3) 32.487097775s ago: executing program 3 (id=33118): prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x244}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x64, &(0x7f00000002c0)=0xffffffffffffff11) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) r3 = add_key$keyring(&(0x7f0000000000), 0x0, 0x0, 0x0, 0xfffffffffffffffe) setgroups(0x0, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) keyctl$chown(0x4, r3, 0xee01, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) setsockopt$SO_TIMESTAMP(r4, 0x1, 0x40, &(0x7f0000000280)=0xe6e8, 0x4) syz_mount_image$exfat(&(0x7f0000002bc0), &(0x7f0000000080)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0x21cc46, &(0x7f0000000380)=ANY=[], 0x1, 0x1536, &(0x7f0000002c00)="$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") socket$packet(0x11, 0x3, 0x300) r5 = socket$inet(0x2, 0x1, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x77359400}}, 0x0) syz_clone3(&(0x7f0000000680)={0x40004000, 0x0, 0x0, 0x0, {0x21}, 0x0, 0x0, 0x0, 0x0}, 0x58) bind$inet(r5, &(0x7f0000000000)={0x2, 0x4e23, @multicast2}, 0x10) sendto$inet(r5, 0x0, 0x0, 0x200007fd, &(0x7f0000000040)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1c}}, 0x10) sendto$inet(r5, &(0x7f0000000280)="02", 0x1, 0x14, 0x0, 0x0) shutdown(r5, 0x1) pipe2(&(0x7f0000000100), 0x0) 32.422177666s ago: executing program 58 (id=33118): prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x244}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x64, &(0x7f00000002c0)=0xffffffffffffff11) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) r3 = add_key$keyring(&(0x7f0000000000), 0x0, 0x0, 0x0, 0xfffffffffffffffe) setgroups(0x0, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) keyctl$chown(0x4, r3, 0xee01, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) setsockopt$SO_TIMESTAMP(r4, 0x1, 0x40, &(0x7f0000000280)=0xe6e8, 0x4) syz_mount_image$exfat(&(0x7f0000002bc0), &(0x7f0000000080)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0x21cc46, &(0x7f0000000380)=ANY=[], 0x1, 0x1536, &(0x7f0000002c00)="$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") socket$packet(0x11, 0x3, 0x300) r5 = socket$inet(0x2, 0x1, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x77359400}}, 0x0) syz_clone3(&(0x7f0000000680)={0x40004000, 0x0, 0x0, 0x0, {0x21}, 0x0, 0x0, 0x0, 0x0}, 0x58) bind$inet(r5, &(0x7f0000000000)={0x2, 0x4e23, @multicast2}, 0x10) sendto$inet(r5, 0x0, 0x0, 0x200007fd, &(0x7f0000000040)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1c}}, 0x10) sendto$inet(r5, &(0x7f0000000280)="02", 0x1, 0x14, 0x0, 0x0) shutdown(r5, 0x1) pipe2(&(0x7f0000000100), 0x0) 3.963556742s ago: executing program 5 (id=34058): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) prlimit64(0x0, 0x7, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpid() r1 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000280)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff) keyctl$search(0xa, r1, 0x0, &(0x7f0000000cc0)={'syz', 0x1}, 0xffffffffffffffff) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) syz_clone(0x600, 0x0, 0x33, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x400000bce) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000032680)=""/102400, 0x19000) setxattr$incfs_metadata(&(0x7f0000000040)='.\x00', 0x0, 0x0, 0x0, 0x0) r3 = openat$ttyS3(0xffffffffffffff9c, 0x0, 0x20a02, 0x0) writev(r3, &(0x7f00000014c0), 0x0) r4 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) write$uinput_user_dev(r4, &(0x7f0000000540)={'syz1\x00', {0x6, 0x7fff, 0xb25, 0xb}, 0x6, [0x6, 0x8, 0x5, 0xc88, 0x6, 0x3, 0xafc, 0x32, 0x838, 0x9, 0x6ff5, 0x9f5, 0x5, 0x1000000, 0x0, 0x6, 0x8001, 0xd, 0x4a4c, 0x3, 0xfffffffd, 0x9, 0x10, 0x8001, 0x4, 0x42, 0xd48, 0x5, 0x1, 0x8, 0x9, 0x9, 0x8, 0x9, 0x0, 0xe, 0xf9c6, 0x3ff, 0x3ff, 0x4, 0xd, 0xff, 0x8, 0x9, 0x80000001, 0x6, 0x0, 0x2, 0xfe0, 0x7ff, 0x8, 0x3, 0x4, 0x8000002, 0xa45, 0x1df, 0xffff, 0x0, 0x380000, 0x10000009, 0xf, 0x101, 0x200, 0x9a0], [0x3, 0x8, 0x6, 0xd, 0x1, 0xad10, 0x6, 0x13a0, 0x86, 0x7fff, 0x101, 0x8, 0x5, 0x1, 0x2, 0xffff, 0x4, 0x4a, 0xf, 0xfffff32a, 0xfffffff7, 0x4c4, 0x400, 0x7f, 0x10000, 0x7, 0x4, 0x8, 0x30, 0x9, 0x1, 0x3, 0x4c6fbc51, 0x10001, 0xd35, 0x8a, 0x63, 0x0, 0x1, 0x200, 0x20, 0x9, 0x0, 0x3ec8d8d2, 0x0, 0x336, 0x3, 0x2, 0x108, 0x3, 0xe51, 0x1, 0x7, 0x8, 0x3, 0x2, 0x4, 0x62, 0x7, 0x6, 0x4, 0x6, 0xfff, 0x4], [0x1, 0x9, 0x5, 0x10000, 0x6, 0x8, 0x401, 0xfd, 0x20, 0x8, 0x9, 0x81, 0x4, 0x2, 0x4d, 0x6, 0x4, 0x3ff, 0x10000, 0x5, 0x40, 0x4, 0xb, 0x0, 0x4, 0x2, 0x80008001, 0x126, 0x1, 0x10002, 0x5, 0x7, 0x1, 0x9, 0x4, 0xfff, 0x3, 0x80000000, 0x5, 0x80000001, 0x53c2, 0x4, 0x4, 0x6, 0x80, 0x50, 0x3, 0x1, 0x8, 0x5, 0x4, 0x400, 0x3, 0x5, 0xa4, 0x6, 0x400000, 0xa, 0x4, 0x0, 0x420, 0xfe6c, 0x2, 0x9], [0x3, 0x9, 0xffffffff, 0x2, 0x66, 0xffff, 0x401, 0x6, 0x8, 0x3, 0x101, 0x4, 0x9, 0x7, 0xce, 0xfffffffe, 0x9, 0x1, 0x7, 0x6, 0x601000, 0x9, 0x5, 0xd, 0x1e, 0x446, 0x800, 0x2, 0x0, 0x3, 0x2, 0x375, 0xfffffff1, 0x4, 0x80000005, 0x4, 0x7fff, 0x4, 0x3a2, 0x3, 0x2005, 0xe, 0xee6, 0x800, 0x7, 0x3, 0x1, 0x7, 0x3, 0x9, 0xc, 0x3, 0x1, 0x1, 0x3, 0x296, 0x6, 0xb, 0xf, 0xff, 0x6, 0x7, 0x2d, 0x400]}, 0x45c) ioctl$UI_DEV_CREATE(r4, 0x5501) 3.419375276s ago: executing program 5 (id=34060): unshare(0x20000000) syz_clone(0x200, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x0) r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) syz_open_procfs(r0, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) wait4(0x0, 0x0, 0x40000000, 0x0) 3.418258786s ago: executing program 5 (id=34068): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="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"], 0xcc}}, 0x0) close(0x3) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000001340)=""/4096, 0x0) syz_usb_control_io$uac2(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$uac1(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) 3.385969586s ago: executing program 0 (id=34072): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x3, 0x4, &(0x7f0000000140)=@framed={{0x18, 0x2, 0x0, 0x0, 0x3}, [@call={0x85, 0x0, 0x0, 0x20}]}, &(0x7f0000000680)='GPL\x00', 0x4, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffff8}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r0, 0x0, 0xe, 0x0, &(0x7f0000000100)="0000000000000000000051229dc9", 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, 0x0, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x25, 0x0, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) 2.909794288s ago: executing program 5 (id=34093): syz_usb_control_io(0xffffffffffffffff, 0x0, &(0x7f0000000000)={0x84, &(0x7f0000000500)=ANY=[@ANYBLOB="000002"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r0 = syz_open_dev$evdev(&(0x7f0000000280), 0x0, 0x0) read$hiddev(r0, &(0x7f0000000080)=""/102, 0x18) r1 = syz_open_dev$evdev(&(0x7f00000000c0), 0x0, 0x822b01) write$char_usb(r1, &(0x7f0000000040)="e2", 0x1068) syz_usb_control_io$rtl8150(0xffffffffffffffff, 0x0, 0x0) 2.805978171s ago: executing program 0 (id=34094): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a3100000000090003"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB="2c0000001a000100060000000000000002202000000000000020000006"], 0x2c}, 0x1, 0x0, 0x0, 0x20040000}, 0x48010) 2.805873381s ago: executing program 0 (id=34095): syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f0000000140)=ANY=[@ANYBLOB="1201000002000040257d15a4400001040001090260004201000000090400000102090000052406000105240000000d240f01000004eaffffff1e0006031a000008048002000905", @ANYRES64], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) 2.194931866s ago: executing program 5 (id=34104): r0 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000000), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$WG_CMD_GET_DEVICE(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000040)={0x14, r0, 0x301, 0x70bd2c, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x40080c0}, 0x20040000) socket$inet6(0xa, 0x800000000000002, 0x0) syz_open_dev$vcsn(0x0, 0x101, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) futex(0x0, 0x85, 0x0, 0x0, 0x0, 0xb0090199) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_type(r5, 0x0, 0x2, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYBLOB="01000000010000001c0012000c000100627269"], 0x3c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000040) 2.05964023s ago: executing program 5 (id=34105): r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000240)=ANY=[@ANYBLOB="12010000772904202404019957c2010203010902240001000010000904430002317d5500090502020002020000090582020002"], 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$uac3(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000000400)={0x34, &(0x7f0000000340)=ANY=[@ANYBLOB="0014af"], 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$printer(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000cc0)={0x44, &(0x7f0000000a80)=ANY=[@ANYBLOB="401504"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) openat(0xffffffffffffff9c, 0x0, 0x1, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) syz_usb_control_io$printer(r0, 0x0, 0x0) connect$can_bcm(0xffffffffffffffff, 0x0, 0x0) 1.846084595s ago: executing program 8 (id=34110): ioctl$sock_inet_SIOCGIFBRDADDR(0xffffffffffffffff, 0x8919, &(0x7f0000000040)={'team_slave_1\x00', {0x2, 0x0, @initdev}}) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0xffffffffffffffff}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket(0x10, 0x3, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x19, 0x3, &(0x7f00000003c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @cgroup_sockopt=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$igmp6(0xa, 0x3, 0x2) r3 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r3) r4 = socket(0x10, 0x3, 0x0) r5 = socket(0x10, 0x3, 0x4) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000380)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="700200001300290a000000000000000007000000", @ANYRES32=r6, @ANYBLOB="000000000000000010010c8013000c800ca3488008000000000000000800038064001d80050006000000000014000500714abbd2547de97cbbf6efb226f19bf90d0002003a288e5e5b5b5a40000000006000078014000400293a02149f3b75a67093c28fd6f55a2314000400e48f01e49713f0c2d839f940d9f088d8050006000000003bd00002006272696467655f736c6176655f30000007000200293a00000500060000000000080001000000000018002580140004004d2906d0880fc8acc30fe2020f9849675000028004000500a1085e7df341b9dc3d8008a2fe5bdaad140004009c7e472c916020fe41bcc5aa8f56c9471400050080ab8be51421cfa3c9e5cbfe8217e0af080001000000000008000100000000006000"], 0x270}, 0x1, 0x0, 0x0, 0x20008014}, 0x4) sendmmsg(r4, &(0x7f0000000000), 0x400000000000235, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) bpf$BPF_LINK_CREATE(0x1c, 0x0, 0x0) syz_emit_ethernet(0x52, &(0x7f0000002700)=ANY=[@ANYBLOB="5b37182347bcffffffffffff88a800004305000086dd60f7537200140600ff02000000000000000000000000000100000000000000000000ffff0000000000000000", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="50000000a89eb81a"], 0x0) mknodat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x1000, 0xfffffff7) 1.700023258s ago: executing program 8 (id=34114): r0 = getpid() prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setsockopt$inet6_IPV6_HOPOPTS(0xffffffffffffffff, 0x29, 0x36, 0x0, 0x8) socket(0x18, 0x0, 0x1) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) r4 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r4, &(0x7f0000000240)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x11}}, 0x10) write$binfmt_misc(r4, &(0x7f0000000300), 0xfdef) 1.570759992s ago: executing program 8 (id=34116): socket$tipc(0x1e, 0x2, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x4004000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) socket(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000700)=[@rights={{0x10}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x10}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x70}, 0x80) openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) socket$netlink(0x10, 0x3, 0x0) socket$can_raw(0x1d, 0x3, 0x1) socket(0x10, 0x3, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) socketpair$unix(0x1, 0x5, 0x0, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup(r2) syz_ublk_setup_queues(r3, 0x0, &(0x7f0000000180)={0x0, 0xfffffffe, 0x0, 0xfffffffe, 0x2f6}, &(0x7f0000000480)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe704, 0x40040, 0x1000002, 0x91}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5c87, 0x20, 0x3, 0x3aa}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x1f70, 0x2, 0x40000001, 0x335}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x4, 0x20000, 0x1, 0xffffffff}}], 0x1, 0x0, 0x0) 1.497465993s ago: executing program 8 (id=34118): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=@newlink={0x2c, 0x10, 0xffffffffffffffff, 0x70bd27, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, 0x8117}, [@IFLA_ADDRESS={0xa, 0x42, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x18}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x28001}, 0x8000002) 1.497378533s ago: executing program 8 (id=34119): r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='coredump_filter\x00') readv(r0, &(0x7f0000000740)=[{&(0x7f00000000c0)=""/168, 0xa8}, {0x0}], 0x2) 1.497194863s ago: executing program 8 (id=34121): r0 = syz_usb_connect(0x5, 0x24, &(0x7f0000000080)={{0x12, 0x1, 0x300, 0x34, 0x57, 0x0, 0x20, 0x458, 0x7003, 0xfc62, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x8, 0x98, 0xa0, 0x8, "", [{{0x9, 0x4, 0x5e, 0x3, 0x0, 0x31, 0xb1, 0x96, 0x7}}]}}]}}, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, &(0x7f0000000700)={0x24, 0x0, &(0x7f0000000580)={0x0, 0x3, 0x2, @string={0x2}}, 0x0, 0x0}, 0x0) syz_usb_connect$cdc_ncm(0x6, 0x88, &(0x7f0000000040)=ANY=[@ANYBLOB="12015002020000002505a1a44000010203010902760002010420"], 0x0) syz_usb_disconnect(0xffffffffffffffff) r1 = syz_usb_connect(0x3, 0x2d, &(0x7f0000000040)=ANY=[], 0x0) syz_usb_control_io$cdc_ecm(r1, 0x0, &(0x7f0000000280)={0x1c, &(0x7f0000000180)={0x20, 0x16, 0x5, "1d0e402c73"}, 0x0, 0x0}) syz_open_dev$hidraw(0x0, 0x4000000000000, 0x200) syz_usb_control_io$hid(r0, &(0x7f0000000c00)={0x24, 0x0, &(0x7f0000000b00)={0x0, 0x3, 0x2, @string={0x2}}, 0x0, 0x0}, 0x0) syz_usb_control_io$uac3(r0, 0x0, 0x0) syz_open_dev$hiddev(0x0, 0xd, 0x101000) syz_usb_control_io$uac3(r0, 0x0, 0x0) syz_usb_control_io$uac3(r0, 0x0, &(0x7f0000003ac0)={0x44, &(0x7f0000003880)={0x20, 0x12, 0x5, "5e154472ba"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$HIDIOCGFLAG(0xffffffffffffffff, 0x8004480e, 0x0) 1.110504173s ago: executing program 0 (id=34123): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000700)={&(0x7f0000000580)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0xa, [@struct={0x8, 0x1, 0x0, 0x4, 0x1, 0x7, [{0x3, 0x5, 0x2}]}]}, {0x0, [0x5f, 0x30, 0x2e, 0x5f, 0x5f, 0x30, 0x61, 0x61]}}, 0x0, 0x3a, 0x0, 0x1, 0x6}, 0x28) 1.110303283s ago: executing program 0 (id=34125): socket(0x10, 0x3, 0xaa6) bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="0505"], 0x50) creat(&(0x7f00000000c0)='./bus\x00', 0x107) mount(&(0x7f00000003c0), &(0x7f0000000280)='./bus\x00', &(0x7f00000002c0)='9p\x00', 0x44, &(0x7f0000000100)='trans=rdma,\xd6\xd2\x1e\x80\xc2W\xbe\xbf\x16S\x84j\xea1.\x8e\xe9\xc7\x0ep*\xd9\x94Mk\xb9\xc6\x9e\xcf\xd7\x9eoc\xe2(\x03\xc3.{\x8aY\x17\xd0\xa3\xfe\xe3/\xc4\f\b2t\x1c4\x93/^\x91\xe8\xabK\x9e\x14j\xb3\x92\x13\x80\x96m\xc7\x96\"\xcb\xdc\xcc\xd8\x18\"\x9eT\x97Kh5i\x8f\xfc\xd8=\x8b\xe9\x1b\xce\xe4\xf5$\xf1sa,\x8f\xb6\x89\xcfZ\xa0\xae>Xs=\xadu\x9aQ\xe2z\xaf\x90\x90\x9b\x92\x9b\xeb\aQb#\xec}\xa79\xd7\xe6<6\xadL\xd8$\xd3\xa9\x1d\xd9W\x8a\xb9F\x982%g!\x8a\"@*\xb8\xc6\xddw\xefY\xefJ\x0e\xc5%S.\n\xde\x95l\xd9\x1cPp\xb3\xfe+rY\xc24\x99\x88\xe7\njs\xb2\x8f') 1.110234493s ago: executing program 7 (id=34126): r0 = syz_open_procfs(0x0, &(0x7f0000000000)='attr/exec\x00') preadv(r0, &(0x7f00000002c0)=[{&(0x7f0000000500)=""/235, 0xeb}], 0x1, 0x18004, 0xd70) 1.110116303s ago: executing program 7 (id=34127): openat$fuse(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) faccessat(0xffffffffffffffff, 0x0, 0x81) r3 = socket(0x400000000010, 0x2, 0x0) ioctl$FICLONERANGE(r3, 0x4020940d, &(0x7f00000002c0)={{}, 0x4, 0x1, 0xfffffffffffffffe}) accept4$packet(0xffffffffffffffff, 0x0, 0x0, 0x80800) openat$procfs(0xffffffffffffff9c, &(0x7f0000000180)='/proc/timer_list\x00', 0x0, 0x0) 1.097017973s ago: executing program 7 (id=34128): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000300)={@in6={{0xa, 0x4e21, 0x2, @local, 0x8ac2d78a}}, 0x0, 0x0, 0x43, 0x0, "ee8b0e650926a96ecc136e7fb980e989db9e8bf9b9312948f6651a8de213eb94cd46e19d9c65a018444a131f4da58ae36556dd38ea6c029607462029add09240005c6776267513308a3d40aa1c788df6"}, 0xd8) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f00000001c0)=@gcm_256={{0x304}, "6ae04425ace3f60c", "acba84f0a6731f234db1cc7f3f382ad796bd667cb12ea99509873931d2873103", "0f9dafb4", "ec3fff9afd96e6c0"}, 0x38) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000040)=0x2, 0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x6a855000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) ioctl$int_in(r0, 0x5421, &(0x7f0000000140)=0xffff) writev(r0, &(0x7f0000000080)=[{&(0x7f00000002c0)="ec", 0xfdef}], 0x1) 1.096643884s ago: executing program 0 (id=34129): r0 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000080)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x50}}]}}, 0x0) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0x10, &(0x7f0000000f40)=ANY=[@ANYBLOB='\f\x00\x00N']) 963.637187ms ago: executing program 7 (id=34130): r0 = socket$igmp(0x2, 0x3, 0x2) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000080)={'batadv0\x00', 0x0}) sendmmsg$inet(r0, &(0x7f0000001040)=[{{&(0x7f00000000c0)={0x2, 0x4e20, @multicast1}, 0x10, 0x0, 0x0, &(0x7f00000007c0)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r2, @dev={0xac, 0x14, 0x14, 0x1c}, @remote}}}], 0x20}}], 0x1, 0x4) 963.437747ms ago: executing program 7 (id=34131): r0 = syz_usb_connect(0x1, 0x36, &(0x7f00000004c0)=ANY=[@ANYBLOB="1a0100005c6b4408070a64006e40010203030902240001a8230800090400bc6435fb4d00090503034d00ff99090805", @ANYRES32], &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_connect(0x0, 0x2d, 0x0, 0x0) read$char_usb(r1, 0x0, 0x0) syz_usb_control_io$lan78xx(0xffffffffffffffff, 0x0, 0x0) syz_open_dev$evdev(0x0, 0x0, 0x0) r2 = syz_usb_connect(0x5, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x201, 0x49, 0xbf, 0xe2, 0x8, 0x5e3, 0x503, 0x72cc, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x6, 0x6, 0x50, 0x7f, "", [{{0x9, 0x4, 0x60, 0x7, 0x0, 0x6c, 0x85, 0x59, 0x92}}]}}]}}, 0x0) syz_usb_control_io$rtl8150(r2, 0x0, 0x0) syz_usb_control_io$printer(r2, 0x0, 0x0) syz_usb_disconnect(0xffffffffffffffff) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(r0) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) syz_usb_connect(0x0, 0x2d, &(0x7f00000001c0)=ANY=[], 0x0) 176.095856ms ago: executing program 4 (id=34145): unshare(0x400) r0 = socket(0x10, 0x3, 0x0) getsockopt$IP_SET_OP_VERSION(r0, 0x1, 0x53, 0x0, &(0x7f00000000c0)) 125.350538ms ago: executing program 4 (id=34146): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f00000013c0)=0x80000000001, 0x4) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f00000002c0)="e8", 0xfffffffffffffd79, 0x2000c850, 0x0, 0x4d) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) dup3(r0, r1, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r1, 0x6, 0x23, &(0x7f0000000140)={&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000000080)=0x40) 125.250248ms ago: executing program 4 (id=34147): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/meminfo\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x20000023896) 125.043058ms ago: executing program 4 (id=34148): socket$inet(0x2, 0x801, 0x0) fsopen(&(0x7f0000000100)='nfs\x00', 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r0, 0x0, 0x0, 0x0) memfd_create(&(0x7f0000000540)='\x02A\xbb\xcc\x96\x0eo\x1f\xe2@\xcc\xb1Yg\x00\x00\x00\x00\x00\x00', 0x0) socket$packet(0x11, 0x3, 0x300) socket$nl_generic(0x10, 0x3, 0x10) socket$netlink(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) timerfd_create(0x1, 0x0) socket$packet(0x11, 0x2, 0x300) socket$nl_generic(0x10, 0x3, 0x10) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) epoll_create1(0x80000) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x1f, 0x15, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000fcffffff000000008000000018010000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000020000207b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000200000085000000a600000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002000000850000008200000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) 124.958508ms ago: executing program 4 (id=34149): r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_DSTOPTS(r0, 0x29, 0x3b, &(0x7f00000002c0)=ANY=[], 0x8) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x5, 0x3032, 0xffffffffffffffff, 0x0) recvmmsg(r0, &(0x7f0000000340)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000001e80)=""/226, 0xe2}, 0x7f}], 0x1, 0x20, 0x0) setsockopt$inet6_int(r0, 0x29, 0x4, &(0x7f0000000000)=0x1, 0x4) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) 66.852549ms ago: executing program 4 (id=34150): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000700)=ANY=[@ANYBLOB="12010000000000408c0d220000000000000109022400010000000009040000010300000009210000000122050009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000740)={0x2c, &(0x7f0000000980)=ANY=[@ANYBLOB="00000001000000090090"], 0x0, 0x0, 0x0, 0x0}, 0x0) syz_open_dev$evdev(&(0x7f0000003880), 0x4, 0x2) 0s ago: executing program 7 (id=34151): syz_usb_connect(0x5, 0x2d, &(0x7f0000000740)={{0x12, 0x1, 0x700, 0xa7, 0x6, 0x38, 0x10, 0x11ba, 0x1001, 0xf17f, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x2, 0x0, 0x7, 0x38, 0x81, "", [{{0x9, 0x4, 0xe4, 0x40, 0x0, 0x8f, 0xdc, 0x2b, 0x1}}, {{0x9, 0x4, 0xac, 0x10, 0x0, 0x3f, 0x93, 0xe6, 0x7}}]}}]}}, &(0x7f0000001880)={0x0, 0x0, 0x0, 0x0}) syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0) syz_open_dev$evdev(0x0, 0xea0e, 0x600000) 0s ago: executing program 4 (id=34152): r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x0, @dev}, 0x2}}, 0x2e) close(r0) r2 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r2, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r2, {0x2, 0x0, @multicast1}, 0x2, 0x0, 0x0, 0x3}}, 0x2e) ioctl$PPPIOCGL2TPSTATS(r2, 0x80487436, 0x0) kernel console output (not intermixed with test programs): 801] dump_stack+0x15/0x24 [ 1366.741784][T14801] should_fail_ex+0x3bf/0x510 [ 1366.746832][T14801] should_fail+0xb/0x10 [ 1366.751014][T14801] should_fail_usercopy+0x1a/0x20 [ 1366.756065][T14801] _copy_from_user+0x1e/0xc0 [ 1366.760690][T14801] ___sys_sendmsg+0x1c3/0x360 [ 1366.765397][T14801] ? __sys_sendmsg+0x290/0x290 [ 1366.770627][T14801] ? __kasan_check_write+0x14/0x20 [ 1366.775759][T14801] ? proc_fail_nth_write+0x180/0x200 [ 1366.781449][T14801] ? vfs_write+0xa51/0xd00 [ 1366.785889][T14801] ? __fdget+0x19c/0x220 [ 1366.790156][T14801] __x64_sys_sendmsg+0x20d/0x2e0 [ 1366.795428][T14801] ? __cfi___x64_sys_sendmsg+0x10/0x10 [ 1366.801212][T14801] ? fpregs_assert_state_consistent+0xb1/0xe0 [ 1366.807370][T14801] x64_sys_call+0x171/0x9a0 [ 1366.812243][T14801] do_syscall_64+0x4c/0xa0 [ 1366.816693][T14801] ? clear_bhb_loop+0x30/0x80 [ 1366.821395][T14801] ? clear_bhb_loop+0x30/0x80 [ 1366.826093][T14801] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1366.832028][T14801] RIP: 0033:0x7fab9399df99 [ 1366.836725][T14801] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1366.856460][T14801] RSP: 002b:00007fab9490c028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1366.865371][T14801] RAX: ffffffffffffffda RBX: 00007fab93c25fa0 RCX: 00007fab9399df99 [ 1366.873375][T14801] RDX: 0000000000004080 RSI: 0000200000000080 RDI: 0000000000000003 [ 1366.881382][T14801] RBP: 00007fab9490c090 R08: 0000000000000000 R09: 0000000000000000 [ 1366.890106][T14801] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1366.898280][T14801] R13: 00007fab93c26038 R14: 00007fab93c25fa0 R15: 00007fffaf80deb8 [ 1366.906376][T14801] [ 1366.918910][T14806] netlink: 48 bytes leftover after parsing attributes in process `syz.3.32787'. [ 1366.957511][T14810] xt_CT: No such helper "netbios-ns" [ 1367.127977][T14821] EXT4-fs (loop0): unmounting filesystem. [ 1367.245203][T14834] netlink: 12 bytes leftover after parsing attributes in process `syz.8.32799'. [ 1367.470974][T14858] netlink: 24 bytes leftover after parsing attributes in process `syz.7.32810'. [ 1368.528345][T14921] FAULT_INJECTION: forcing a failure. [ 1368.528345][T14921] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1368.562685][T14921] CPU: 1 PID: 14921 Comm: syz.4.32834 Not tainted syzkaller #0 [ 1368.571076][T14921] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 1368.581345][T14921] Call Trace: [ 1368.584649][T14921] [ 1368.587681][T14921] __dump_stack+0x21/0x24 [ 1368.592212][T14921] dump_stack_lvl+0x110/0x170 [ 1368.597181][T14921] ? __cfi_dump_stack_lvl+0x8/0x8 [ 1368.602407][T14921] ? vfs_write+0xa51/0xd00 [ 1368.607131][T14921] dump_stack+0x15/0x24 [ 1368.611342][T14921] should_fail_ex+0x3bf/0x510 [ 1368.616287][T14921] should_fail+0xb/0x10 [ 1368.620665][T14921] should_fail_usercopy+0x1a/0x20 [ 1368.625818][T14921] _copy_from_user+0x1e/0xc0 [ 1368.630690][T14921] __sys_connect+0x16d/0x460 [ 1368.635282][T14921] ? __cfi___sys_connect+0x10/0x10 [ 1368.640478][T14921] ? __kasan_check_write+0x14/0x20 [ 1368.645591][T14921] ? debug_smp_processor_id+0x17/0x20 [ 1368.650955][T14921] __x64_sys_connect+0x7a/0x90 [ 1368.655893][T14921] x64_sys_call+0x88d/0x9a0 [ 1368.660384][T14921] do_syscall_64+0x4c/0xa0 [ 1368.664877][T14921] ? clear_bhb_loop+0x30/0x80 [ 1368.669717][T14921] ? clear_bhb_loop+0x30/0x80 [ 1368.674388][T14921] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1368.680716][T14921] RIP: 0033:0x7f6fe6d9df99 [ 1368.685117][T14921] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1368.706212][T14921] RSP: 002b:00007f6fe7d58028 EFLAGS: 00000246 ORIG_RAX: 000000000000002a [ 1368.714651][T14921] RAX: ffffffffffffffda RBX: 00007f6fe7025fa0 RCX: 00007f6fe6d9df99 [ 1368.722636][T14921] RDX: 000000000000001c RSI: 0000200000000240 RDI: 0000000000000003 [ 1368.730686][T14921] RBP: 00007f6fe7d58090 R08: 0000000000000000 R09: 0000000000000000 [ 1368.738643][T14921] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1368.746684][T14921] R13: 00007f6fe7026038 R14: 00007f6fe7025fa0 R15: 00007ffd19a74398 [ 1368.755179][T14921] [ 1368.879036][T14925] netlink: 24 bytes leftover after parsing attributes in process `syz.0.32835'. [ 1368.959815][T14902] netlink: 104 bytes leftover after parsing attributes in process `syz.8.32826'. [ 1369.153572][T14955] netlink: 'syz.8.32846': attribute type 6 has an invalid length. [ 1369.166155][T14955] netlink: 'syz.8.32846': attribute type 21 has an invalid length. [ 1369.451898][T12998] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 1369.648083][T12998] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1369.668612][T12998] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x87 has invalid maxpacket 64 [ 1369.694826][T12998] usb 5-1: New USB device found, idVendor=0004, idProduct=0000, bcdDevice= 0.40 [ 1369.711940][T12998] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1369.753105][T12998] usb 5-1: Product: syz [ 1369.764002][T12998] usb 5-1: Manufacturer: syz [ 1369.774939][T12998] usb 5-1: SerialNumber: syz [ 1369.786249][T14934] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 1370.022676][T12998] usb 5-1: MIDIStreaming interface descriptor not found [ 1370.050326][T12998] usb 5-1: USB disconnect, device number 10 [ 1371.105780][T15004] SELinux: security_context_str_to_sid (user_u) failed with errno=-22 [ 1371.491722][T15014] netlink: 4 bytes leftover after parsing attributes in process `syz.0.32871'. [ 1372.329934][T15023] bridge0: port 1(bridge_slave_0) entered blocking state [ 1372.337625][T15023] bridge0: port 1(bridge_slave_0) entered disabled state [ 1372.356869][T15023] device bridge_slave_0 entered promiscuous mode [ 1372.364322][T15023] bridge0: port 2(bridge_slave_1) entered blocking state [ 1372.371786][T15023] bridge0: port 2(bridge_slave_1) entered disabled state [ 1372.379680][T15023] device bridge_slave_1 entered promiscuous mode [ 1372.510515][ T28] audit: type=1326 audit(1294.857:16556): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15033 comm="syz.4.32878" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6fe6d9df99 code=0x7ffc0000 [ 1372.540339][T15023] bridge0: port 2(bridge_slave_1) entered blocking state [ 1372.547445][T15023] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1372.554958][T15023] bridge0: port 1(bridge_slave_0) entered blocking state [ 1372.562095][T15023] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1372.570237][ T28] audit: type=1326 audit(1294.876:16557): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15033 comm="syz.4.32878" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6fe6d9df99 code=0x7ffc0000 [ 1372.597779][ T9434] bridge0: port 1(bridge_slave_0) entered disabled state [ 1372.605270][ T28] audit: type=1326 audit(1294.903:16558): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15033 comm="syz.4.32878" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6fe6d9df99 code=0x7ffc0000 [ 1372.612369][ T9434] bridge0: port 2(bridge_slave_1) entered disabled state [ 1372.639570][ T28] audit: type=1326 audit(1294.903:16559): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15033 comm="syz.4.32878" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6fe6d9df99 code=0x7ffc0000 [ 1372.667009][ T9434] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1372.675500][ T28] audit: type=1326 audit(1294.903:16560): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15033 comm="syz.4.32878" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f6fe6d9df99 code=0x7ffc0000 [ 1372.678133][T15048] 9pnet_fd: Insufficient options for proto=fd [ 1372.701644][ T9434] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1372.725705][ T28] audit: type=1326 audit(1294.903:16561): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15033 comm="syz.4.32878" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6fe6d9df99 code=0x7ffc0000 [ 1372.752498][T12532] tipc: Disabling bearer [ 1372.757804][T12532] tipc: Disabling bearer [ 1372.763577][ T28] audit: type=1326 audit(1294.903:16562): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15033 comm="syz.4.32878" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6fe6d9df99 code=0x7ffc0000 [ 1372.788812][T12532] tipc: Disabling bearer [ 1372.794991][T12532] tipc: Left network mode [ 1372.806901][ T28] audit: type=1326 audit(1294.903:16563): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15033 comm="syz.4.32878" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6fe6d9df99 code=0x7ffc0000 [ 1372.833800][ T9434] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1372.843084][ T9434] bridge0: port 1(bridge_slave_0) entered blocking state [ 1372.850226][ T9434] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1372.869179][ T9434] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1372.887649][ T9434] bridge0: port 2(bridge_slave_1) entered blocking state [ 1372.894825][ T9434] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1372.920957][ T28] audit: type=1326 audit(1294.903:16564): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15033 comm="syz.4.32878" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7f6fe6d9df99 code=0x7ffc0000 [ 1372.971733][ T9434] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1372.983413][ T9434] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1373.020134][T15052] netlink: 24 bytes leftover after parsing attributes in process `syz.0.32883'. [ 1373.034306][ T28] audit: type=1326 audit(1294.903:16565): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15033 comm="syz.4.32878" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6fe6d9df99 code=0x7ffc0000 [ 1373.034846][T15063] netlink: 24 bytes leftover after parsing attributes in process `syz.7.32885'. [ 1373.112740][T15068] 9pnet_fd: Insufficient options for proto=fd [ 1373.122136][ T9434] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1373.148174][T15023] device veth0_vlan entered promiscuous mode [ 1373.153181][T15072] 9pnet_fd: Insufficient options for proto=fd [ 1373.155174][T15070] 9pnet_fd: Insufficient options for proto=fd [ 1373.181240][ T9434] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1373.192481][ T9434] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1373.198537][T15075] 9pnet_fd: Insufficient options for proto=fd [ 1373.200219][ T9434] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1373.272483][T15079] netlink: 24 bytes leftover after parsing attributes in process `syz.0.32893'. [ 1373.297151][ T9434] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1373.356050][T15023] device veth1_macvtap entered promiscuous mode [ 1373.416518][ T9434] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1373.440033][ T9434] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1373.788155][T15103] netlink: 104 bytes leftover after parsing attributes in process `syz.0.32902'. [ 1373.801243][T10208] EXT4-fs (loop4): unmounting filesystem. [ 1373.819823][T15104] loop8: detected capacity change from 0 to 1024 [ 1373.834209][T15104] EXT4-fs: Ignoring removed nomblk_io_submit option [ 1373.874379][T15104] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 1373.917681][T15105] netlink: 8 bytes leftover after parsing attributes in process `syz.3.32903'. [ 1373.939627][T15107] netlink: 16 bytes leftover after parsing attributes in process `syz.3.32903'. [ 1373.950385][T15108] netlink: 24 bytes leftover after parsing attributes in process `syz.0.32905'. [ 1373.971241][T15104] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: none. [ 1374.084215][T12532] device veth0_to_bridge left promiscuous mode [ 1374.112303][T12532] bridge0: port 1(veth0_to_bridge) entered disabled state [ 1374.161857][T12532] device veth1_macvtap left promiscuous mode [ 1374.722564][T15023] EXT4-fs (loop8): unmounting filesystem. [ 1375.518193][T15116] bridge0: port 1(bridge_slave_0) entered blocking state [ 1375.531864][T15116] bridge0: port 1(bridge_slave_0) entered disabled state [ 1375.540279][T15116] device bridge_slave_0 entered promiscuous mode [ 1375.561453][T15116] bridge0: port 2(bridge_slave_1) entered blocking state [ 1375.570910][T15116] bridge0: port 2(bridge_slave_1) entered disabled state [ 1375.579291][T15116] device bridge_slave_1 entered promiscuous mode [ 1375.645384][T15116] bridge0: port 2(bridge_slave_1) entered blocking state [ 1375.652658][T15116] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1375.660042][T15116] bridge0: port 1(bridge_slave_0) entered blocking state [ 1375.667224][T15116] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1375.694690][ T9434] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1375.702521][ T9434] bridge0: port 1(bridge_slave_0) entered disabled state [ 1375.710525][ T9434] bridge0: port 2(bridge_slave_1) entered disabled state [ 1375.728721][ T9434] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1375.737110][ T9434] bridge0: port 1(bridge_slave_0) entered blocking state [ 1375.744224][ T9434] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1375.752406][ T9434] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1375.760643][ T9434] bridge0: port 2(bridge_slave_1) entered blocking state [ 1375.767657][ T9434] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1375.785957][ T9434] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1375.794449][ T9434] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1375.807672][ T9434] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1375.819467][ T9434] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1375.829393][ T9434] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1375.837471][ T9434] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1375.846738][T15116] device veth0_vlan entered promiscuous mode [ 1375.859124][T12532] tipc: Disabling bearer [ 1375.864831][T12532] tipc: Disabling bearer [ 1375.870812][T12532] tipc: Left network mode [ 1375.875551][ T9434] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1375.886536][T15116] device veth1_macvtap entered promiscuous mode [ 1375.897912][ T9434] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1375.919034][ T9434] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1375.943592][T15180] FAULT_INJECTION: forcing a failure. [ 1375.943592][T15180] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1375.958333][T15180] CPU: 0 PID: 15180 Comm: syz.4.32901 Not tainted syzkaller #0 [ 1375.966532][T15180] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 1375.976795][T15180] Call Trace: [ 1375.980081][T15180] [ 1375.983005][T15180] __dump_stack+0x21/0x24 [ 1375.987330][T15180] dump_stack_lvl+0x110/0x170 [ 1375.992024][T15180] ? __cfi_dump_stack_lvl+0x8/0x8 [ 1375.997047][T15180] ? _parse_integer+0x2a/0x40 [ 1376.001806][T15180] dump_stack+0x15/0x24 [ 1376.005970][T15180] should_fail_ex+0x3bf/0x510 [ 1376.010647][T15180] should_fail+0xb/0x10 [ 1376.014909][T15180] should_fail_usercopy+0x1a/0x20 [ 1376.020514][T15180] _copy_from_user+0x1e/0xc0 [ 1376.025194][T15180] ___sys_sendmsg+0x1c3/0x360 [ 1376.029953][T15180] ? __sys_sendmsg+0x290/0x290 [ 1376.034730][T15180] ? __kasan_check_write+0x14/0x20 [ 1376.039843][T15180] ? proc_fail_nth_write+0x180/0x200 [ 1376.045302][T15180] ? vfs_write+0xa51/0xd00 [ 1376.049796][T15180] ? __fdget+0x19c/0x220 [ 1376.054029][T15180] __x64_sys_sendmsg+0x20d/0x2e0 [ 1376.059066][T15180] ? __cfi___x64_sys_sendmsg+0x10/0x10 [ 1376.064532][T15180] ? fpregs_assert_state_consistent+0xb1/0xe0 [ 1376.071114][T15180] x64_sys_call+0x171/0x9a0 [ 1376.076163][T15180] do_syscall_64+0x4c/0xa0 [ 1376.080564][T15180] ? clear_bhb_loop+0x30/0x80 [ 1376.085308][T15180] ? clear_bhb_loop+0x30/0x80 [ 1376.089982][T15180] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1376.095892][T15180] RIP: 0033:0x7fcd0fd9df99 [ 1376.100458][T15180] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1376.120619][T15180] RSP: 002b:00007fcd10ce5028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1376.129124][T15180] RAX: ffffffffffffffda RBX: 00007fcd10025fa0 RCX: 00007fcd0fd9df99 [ 1376.137374][T15180] RDX: 987a3a9f32358a4c RSI: 00002000000002c0 RDI: 0000000000000003 [ 1376.145385][T15180] RBP: 00007fcd10ce5090 R08: 0000000000000000 R09: 0000000000000000 [ 1376.153627][T15180] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1376.161671][T15180] R13: 00007fcd10026038 R14: 00007fcd10025fa0 R15: 00007fff714b5928 [ 1376.169734][T15180] [ 1376.735496][T12532] device bridge_slave_1 left promiscuous mode [ 1376.741763][T12532] bridge0: port 2(bridge_slave_1) entered disabled state [ 1376.749233][T12532] device bridge_slave_0 left promiscuous mode [ 1376.755345][T12532] bridge0: port 1(bridge_slave_0) entered disabled state [ 1376.763543][T12532] device veth1_macvtap left promiscuous mode [ 1377.233493][ T29] INFO: task syz.6.29113:5991 blocked for more than 144 seconds. [ 1377.241488][ T29] Not tainted syzkaller #0 [ 1377.246493][ T29] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1377.255198][ T29] task:syz.6.29113 state:D stack:26024 pid:5991 ppid:667 flags:0x00004004 [ 1377.264602][ T29] Call Trace: [ 1377.267942][ T29] [ 1377.270870][ T29] __schedule+0xbe2/0x14b0 [ 1377.275367][ T29] ? release_firmware_map_entry+0x190/0x190 [ 1377.281421][ T29] ? __kasan_check_write+0x14/0x20 [ 1377.286545][ T29] ? _raw_spin_lock_irq+0x95/0xf0 [ 1377.291659][ T29] schedule+0xbd/0x170 [ 1377.295844][ T29] io_schedule+0x84/0xe0 [ 1377.300143][ T29] folio_wait_bit_common+0x6ba/0x8a0 [ 1377.305435][ T29] ? folio_wait_bit+0x30/0x30 [ 1377.310264][ T29] ? __cfi_wake_page_function+0x10/0x10 [ 1377.315925][ T29] ? xas_start+0x31d/0x3e0 [ 1377.321319][ T29] ? xas_load+0x394/0x3c0 [ 1377.325900][ T29] __filemap_get_folio+0x4ac/0xa70 [ 1377.331299][ T29] ? __cfi___filemap_get_folio+0x10/0x10 [ 1377.337924][ T29] ? finish_task_switch+0x16b/0x7c0 [ 1377.343186][ T29] ? switch_mm_irqs_off+0x2f0/0x960 [ 1377.348659][ T29] shmem_get_folio_gfp+0x2fb/0x20f0 [ 1377.354196][ T29] ? __cfi__raw_spin_lock+0x10/0x10 [ 1377.359413][ T29] shmem_fault+0x1ab/0x670 [ 1377.363860][ T29] ? futex_q_unlock+0x23/0x30 [ 1377.368648][ T29] ? futex_wait_setup+0x1f2/0x260 [ 1377.373672][ T29] ? __cfi_shmem_fault+0x10/0x10 [ 1377.378932][ T29] ? hrtimer_cancel+0x2d/0x60 [ 1377.383712][ T29] ? futex_wait+0x5f1/0x900 [ 1377.388326][ T29] do_fault+0xb2f/0x1e30 [ 1377.392586][ T29] ? pte_marker_clear+0x220/0x220 [ 1377.397692][ T29] handle_mm_fault+0x1363/0x26b0 [ 1377.402805][ T29] ? __cfi_handle_mm_fault+0x10/0x10 [ 1377.408233][ T29] ? lock_vma_under_rcu+0x3f8/0x4f0 [ 1377.413624][ T29] ? __x64_sys_futex+0x100/0x100 [ 1377.418653][ T29] ? xfd_validate_state+0x70/0x150 [ 1377.424155][ T29] do_user_addr_fault+0x900/0x1030 [ 1377.429344][ T29] ? debug_smp_processor_id+0x17/0x20 [ 1377.434899][ T29] exc_page_fault+0x51/0xb0 [ 1377.439828][ T29] asm_exc_page_fault+0x27/0x30 [ 1377.444694][ T29] RIP: 0033:0x7f18de8675a5 [ 1377.449103][ T29] RSP: 002b:00007ffcc05f5590 EFLAGS: 00010246 [ 1377.455604][ T29] RAX: 0000200000000040 RBX: 0000000000000008 RCX: 0000000000000000 [ 1377.464973][ T29] RDX: 0000000000000003 RSI: 0000000000000000 RDI: 000055557ba333d8 [ 1377.473211][ T29] RBP: 00007ffcc05f56b0 R08: 0000000000000000 R09: 0000000000000000 [ 1377.481634][ T29] R10: 0000000000000003 R11: 0000000000000000 R12: 00007ffcc05f56f0 [ 1377.490241][ T29] R13: 00007f18dec2609c R14: 00000000001163cd R15: 00007f18dec26090 [ 1377.498932][ T29] [ 1377.502575][ T29] INFO: task syz.6.29113:5992 blocked for more than 144 seconds. [ 1377.511371][ T29] Not tainted syzkaller #0 [ 1377.516347][ T29] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1377.525197][ T29] task:syz.6.29113 state:D stack:25672 pid:5992 ppid:667 flags:0x00004004 [ 1377.534599][ T29] Call Trace: [ 1377.538020][ T29] [ 1377.541165][ T29] __schedule+0xbe2/0x14b0 [ 1377.545677][ T29] ? release_firmware_map_entry+0x190/0x190 [ 1377.551839][ T29] ? _raw_spin_lock_irq+0x95/0xf0 [ 1377.557138][ T29] ? __cfi__raw_spin_lock_irq+0x10/0x10 [ 1377.562723][ T29] ? __kasan_check_write+0x14/0x20 [ 1377.568117][ T29] schedule+0xbd/0x170 [ 1377.572392][ T29] rwsem_down_write_slowpath+0x600/0x1c70 [ 1377.578336][ T29] ? rwsem_down_read_slowpath+0x15c0/0x15c0 [ 1377.584655][ T29] ? xas_load+0x394/0x3c0 [ 1377.589112][ T29] ? __kasan_check_write+0x14/0x20 [ 1377.594527][ T29] ? __filemap_get_folio+0x848/0xa70 [ 1377.599919][ T29] ? rwsem_write_trylock+0x136/0x300 [ 1377.605365][ T29] ? clear_nonspinnable+0x60/0x60 [ 1377.610465][ T29] ? shmem_is_huge+0x163/0x320 [ 1377.615432][ T29] down_write+0x21/0x30 [ 1377.619628][ T29] vma_start_write+0xbd/0x150 [ 1377.624665][ T29] collapse_pte_mapped_thp+0x4f7/0xab0 [ 1377.630205][ T29] madvise_collapse+0x6c2/0xa70 [ 1377.635279][ T29] do_madvise+0x12b1/0x3290 [ 1377.639821][ T29] ? __cfi_do_madvise+0x10/0x10 [ 1377.644712][ T29] ? __kasan_check_read+0x11/0x20 [ 1377.649995][ T29] ? schedule+0xd4/0x170 [ 1377.654262][ T29] ? futex_unqueue+0x132/0x160 [ 1377.659225][ T29] ? futex_wait+0x5f1/0x900 [ 1377.663759][ T29] ? __cfi_futex_wait+0x10/0x10 [ 1377.668837][ T29] ? __cfi_futex_wake+0x10/0x10 [ 1377.673713][ T29] ? __mm_populate+0x3bb/0x430 [ 1377.678802][ T29] ? do_futex+0x2e2/0x430 [ 1377.683235][ T29] ? __cfi_do_futex+0x10/0x10 [ 1377.688179][ T29] ? __se_sys_remap_file_pages+0x69b/0x800 [ 1377.694209][ T29] ? __se_sys_futex+0x136/0x310 [ 1377.699084][ T29] ? __this_cpu_preempt_check+0x13/0x20 [ 1377.704754][ T29] ? xfd_validate_state+0x70/0x150 [ 1377.709892][ T29] ? fpregs_restore_userregs+0x128/0x260 [ 1377.715597][ T29] __x64_sys_madvise+0xa9/0xc0 [ 1377.720461][ T29] x64_sys_call+0x99e/0x9a0 [ 1377.725049][ T29] do_syscall_64+0x4c/0xa0 [ 1377.729483][ T29] ? clear_bhb_loop+0x30/0x80 [ 1377.734212][ T29] ? clear_bhb_loop+0x30/0x80 [ 1377.738993][ T29] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1377.745079][ T29] RIP: 0033:0x7f18de99df99 [ 1377.750023][ T29] RSP: 002b:00007f18df91c028 EFLAGS: 00000246 ORIG_RAX: 000000000000001c [ 1377.758878][ T29] RAX: ffffffffffffffda RBX: 00007f18dec25fa0 RCX: 00007f18de99df99 [ 1377.767328][ T29] RDX: 0000000000000019 RSI: 0000000000600000 RDI: 0000200000000000 [ 1377.775329][ T29] RBP: 00007f18dea34ec4 R08: 0000000000000000 R09: 0000000000000000 [ 1377.783572][ T29] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1377.791643][ T29] R13: 00007f18dec26038 R14: 00007f18dec25fa0 R15: 00007ffcc05f5468 [ 1377.799837][ T29] [ 1377.802884][ T29] INFO: task syz.6.29113:5998 blocked for more than 145 seconds. [ 1377.810703][ T29] Not tainted syzkaller #0 [ 1377.815662][ T29] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1377.824628][ T29] task:syz.6.29113 state:D stack:28488 pid:5998 ppid:667 flags:0x00004004 [ 1377.833907][ T29] Call Trace: [ 1377.837198][ T29] [ 1377.840124][ T29] __schedule+0xbe2/0x14b0 [ 1377.844797][ T29] ? release_firmware_map_entry+0x190/0x190 [ 1377.850808][ T29] ? __kasan_check_write+0x14/0x20 [ 1377.855995][ T29] ? _raw_spin_lock_irq+0x95/0xf0 [ 1377.861450][ T29] ? __cfi__raw_spin_lock_irq+0x10/0x10 [ 1377.867159][ T29] schedule+0xbd/0x170 [ 1377.871260][ T29] schedule_preempt_disabled+0x13/0x20 [ 1377.876810][ T29] rwsem_down_read_slowpath+0x8e2/0x15c0 [ 1377.882552][ T29] ? down_write_killable+0x40/0x40 [ 1377.887759][ T29] ? __kasan_check_write+0x14/0x20 [ 1377.892959][ T29] ? __cfi_do_futex+0x10/0x10 [ 1377.897691][ T29] ? downgrade_write+0x2d0/0x370 [ 1377.902656][ T29] ? __kasan_check_write+0x14/0x20 [ 1377.907816][ T29] down_read+0x9c/0xf0 [ 1377.911919][ T29] ? __cfi_down_read+0x10/0x10 [ 1377.916864][ T29] ? futex_exit_release+0x119/0x1e0 [ 1377.922097][ T29] ? sync_mm_rss+0x22a/0x280 [ 1377.926833][ T29] do_exit+0x8fc/0x2850 [ 1377.931367][ T29] ? __schedule+0xbea/0x14b0 [ 1377.936047][ T29] ? __cfi_do_exit+0x10/0x10 [ 1377.940930][ T29] ? plist_check_list+0x255/0x270 [ 1377.946050][ T29] ? _raw_spin_lock+0x94/0xf0 [ 1377.950906][ T29] ? __kasan_check_write+0x14/0x20 [ 1377.956108][ T29] ? _raw_spin_lock_irq+0x95/0xf0 [ 1377.961472][ T29] ? __cfi__raw_spin_lock_irq+0x10/0x10 [ 1377.967044][ T29] do_group_exit+0x21b/0x2e0 [ 1377.971776][ T29] ? __kasan_check_write+0x14/0x20 [ 1377.976914][ T29] ? recalc_sigpending+0x180/0x1c0 [ 1377.982161][ T29] get_signal+0x167c/0x1700 [ 1377.986853][ T29] ? __cfi_get_signal+0x10/0x10 [ 1377.991736][ T29] arch_do_signal_or_restart+0xd1/0x11c0 [ 1377.997405][ T29] ? do_futex+0x2e2/0x430 [ 1378.001750][ T29] ? memcpy+0x56/0x70 [ 1378.005832][ T29] ? __cfi_do_futex+0x10/0x10 [ 1378.010535][ T29] ? __cfi_arch_do_signal_or_restart+0x10/0x10 [ 1378.016922][ T29] ? __se_sys_futex+0x136/0x310 [ 1378.021792][ T29] exit_to_user_mode_loop+0x7a/0xb0 [ 1378.027540][ T29] exit_to_user_mode_prepare+0x87/0xd0 [ 1378.033554][ T29] syscall_exit_to_user_mode+0x1a/0x30 [ 1378.039414][ T29] do_syscall_64+0x58/0xa0 [ 1378.043849][ T29] ? clear_bhb_loop+0x30/0x80 [ 1378.048740][ T29] ? clear_bhb_loop+0x30/0x80 [ 1378.053610][ T29] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1378.060031][ T29] RIP: 0033:0x7f18de99df99 [ 1378.064476][ T29] RSP: 002b:00007f18df8fb0e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 1378.073342][ T29] RAX: fffffffffffffe00 RBX: 00007f18dec26098 RCX: 00007f18de99df99 [ 1378.081497][ T29] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f18dec26098 [ 1378.090100][ T29] RBP: 00007f18dec26090 R08: 0000000000000000 R09: 0000000000000000 [ 1378.098540][ T29] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1378.107546][ T29] R13: 00007f18dec26128 R14: 00007ffcc05f5380 R15: 00007ffcc05f5468 [ 1378.116445][ T29] [ 1378.119618][ T29] NMI backtrace for cpu 1 [ 1378.124375][ T29] CPU: 1 PID: 29 Comm: khungtaskd Not tainted syzkaller #0 [ 1378.131668][ T29] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 1378.141915][ T29] Call Trace: [ 1378.145285][ T29] [ 1378.148484][ T29] __dump_stack+0x21/0x24 [ 1378.152852][ T29] dump_stack_lvl+0x110/0x170 [ 1378.157559][ T29] ? __cfi_dump_stack_lvl+0x8/0x8 [ 1378.162600][ T29] ? rcu_preempt_deferred_qs_irqrestore+0x842/0x960 [ 1378.169896][ T29] dump_stack+0x15/0x24 [ 1378.174245][ T29] nmi_cpu_backtrace+0x2af/0x2c0 [ 1378.179182][ T29] ? rcu_read_unlock_special+0xb2/0x450 [ 1378.185713][ T29] ? __cfi_nmi_cpu_backtrace+0x10/0x10 [ 1378.191178][ T29] ? nmi_trigger_cpumask_backtrace+0xf6/0x3a0 [ 1378.197640][ T29] ? __cfi_nmi_raise_cpu_backtrace+0x10/0x10 [ 1378.203646][ T29] ? __cfi_nmi_raise_cpu_backtrace+0x10/0x10 [ 1378.209804][ T29] nmi_trigger_cpumask_backtrace+0x16b/0x3a0 [ 1378.216087][ T29] arch_trigger_cpumask_backtrace+0x10/0x20 [ 1378.222175][ T29] watchdog+0xde1/0xf30 [ 1378.226578][ T29] ? __cfi_watchdog+0x10/0x10 [ 1378.231786][ T29] ? __kasan_check_read+0x11/0x20 [ 1378.236949][ T29] ? __kthread_parkme+0x13a/0x180 [ 1378.241976][ T29] kthread+0x281/0x320 [ 1378.246124][ T29] ? __cfi_watchdog+0x10/0x10 [ 1378.250797][ T29] ? __cfi_kthread+0x10/0x10 [ 1378.255475][ T29] ret_from_fork+0x1f/0x30 [ 1378.260055][ T29] [ 1378.263205][ T29] Sending NMI from CPU 1 to CPUs 0: [ 1378.268438][ C0] NMI backtrace for cpu 0 skipped: idling at default_idle+0xf/0x20 [ 1380.783781][T15184] netlink: 40 bytes leftover after parsing attributes in process `syz.4.32911'. [ 1380.912786][ T8755] bridge0: port 3(syz_tun) entered disabled state [ 1380.929371][T15195] loop4: detected capacity change from 0 to 256 [ 1380.942179][T15195] exFAT-fs (loop4): failed to load upcase table (idx : 0x0001fe89, chksum : 0xc20ee313, utbl_chksum : 0xe619d30d) [ 1380.978402][T15187] loop8: detected capacity change from 0 to 256 [ 1380.998920][T15187] exFAT-fs (loop8): failed to load upcase table (idx : 0x0001fe89, chksum : 0xc20ee313, utbl_chksum : 0xe619d30d) [ 1381.039952][T11561] tipc: Disabling bearer [ 1381.045334][T11561] tipc: Disabling bearer [ 1381.062139][T11561] tipc: Left network mode [ 1381.222701][T15201] bridge0: port 1(bridge_slave_0) entered blocking state [ 1381.229858][T15201] bridge0: port 1(bridge_slave_0) entered disabled state [ 1381.275198][T15201] device bridge_slave_0 entered promiscuous mode [ 1381.307339][T15201] bridge0: port 2(bridge_slave_1) entered blocking state [ 1381.331251][T15211] loop8: detected capacity change from 0 to 128 [ 1381.342593][T15201] bridge0: port 2(bridge_slave_1) entered disabled state [ 1381.361615][T15201] device bridge_slave_1 entered promiscuous mode [ 1381.372854][T15211] ext4: Unknown parameter './file0' [ 1381.485890][T15201] bridge0: port 2(bridge_slave_1) entered blocking state [ 1381.492982][T15201] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1381.500301][T15201] bridge0: port 1(bridge_slave_0) entered blocking state [ 1381.507401][T15201] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1381.567718][T12532] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1381.576577][T12532] bridge0: port 1(bridge_slave_0) entered disabled state [ 1381.584514][ T1446] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 1381.592808][T12532] bridge0: port 2(bridge_slave_1) entered disabled state [ 1381.639886][T15216] loop8: detected capacity change from 0 to 256 [ 1381.653359][T15216] exFAT-fs (loop8): failed to load upcase table (idx : 0x0001fe89, chksum : 0xc20ee313, utbl_chksum : 0xe619d30d) [ 1381.678199][T12532] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1381.689263][T12532] bridge0: port 1(bridge_slave_0) entered blocking state [ 1381.696547][T12532] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1381.704045][T12532] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1381.713216][T12532] bridge0: port 2(bridge_slave_1) entered blocking state [ 1381.721171][T12532] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1381.743947][T11561] device erspan0 left promiscuous mode [ 1381.750084][T11561] bridge0: port 4(erspan0) entered disabled state [ 1381.768929][T12532] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1381.787229][T12532] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1381.797387][ T1446] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1381.825370][T12532] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1381.827980][ T1446] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1381.855976][ T1446] usb 5-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 1381.870408][T12532] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1381.875445][ T1446] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 1381.886920][ T1446] usb 5-1: SerialNumber: syz [ 1381.893061][T12532] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1381.910250][T12532] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1381.933936][T15201] device veth0_vlan entered promiscuous mode [ 1381.950198][T15201] device veth1_macvtap entered promiscuous mode [ 1381.978647][ T9434] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1381.985136][T15225] loop8: detected capacity change from 0 to 1024 [ 1382.000118][ T9434] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1382.011126][T15225] EXT4-fs: Ignoring removed nomblk_io_submit option [ 1382.018869][ T9434] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 1382.032628][T15225] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 1382.039936][T11561] device vlan0 left promiscuous mode [ 1382.056449][T11561] bridge0: port 5(vlan0) entered disabled state [ 1382.074214][T11561] device bridge_slave_1 left promiscuous mode [ 1382.089429][T11561] bridge0: port 2(bridge_slave_1) entered disabled state [ 1382.105471][T15225] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: none. [ 1382.125041][T15208] loop4: detected capacity change from 0 to 256 [ 1382.140058][T11561] device bridge_slave_0 left promiscuous mode [ 1382.168129][T15208] exfat: Unknown parameter '' [ 1382.175705][T11561] bridge0: port 1(bridge_slave_0) entered disabled state [ 1382.287364][T15235] 9pnet_fd: Insufficient options for proto=fd [ 1382.645938][T15023] EXT4-fs (loop8): unmounting filesystem. [ 1382.666082][T15239] FAULT_INJECTION: forcing a failure. [ 1382.666082][T15239] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1382.679924][T15239] CPU: 0 PID: 15239 Comm: syz.8.32925 Not tainted syzkaller #0 [ 1382.685474][ T9434] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1382.687491][T15239] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 1382.687502][T15239] Call Trace: [ 1382.687508][T15239] [ 1382.687516][T15239] __dump_stack+0x21/0x24 [ 1382.698615][ T9434] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1382.706494][T15239] dump_stack_lvl+0x110/0x170 [ 1382.706529][T15239] ? __cfi_dump_stack_lvl+0x8/0x8 [ 1382.706547][T15239] dump_stack+0x15/0x24 [ 1382.706563][T15239] should_fail_ex+0x3bf/0x510 [ 1382.706580][T15239] should_fail+0xb/0x10 [ 1382.706592][T15239] should_fail_usercopy+0x1a/0x20 [ 1382.706606][T15239] _copy_from_user+0x1e/0xc0 [ 1382.706628][T15239] __sys_bpf+0x2a0/0x850 [ 1382.706646][T15239] ? bpf_link_show_fdinfo+0x330/0x330 [ 1382.712021][ T9434] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1382.712932][T15239] ? __cfi_ksys_write+0x10/0x10 [ 1382.712960][T15239] ? debug_smp_processor_id+0x17/0x20 [ 1382.717840][ T9434] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1382.725366][T15239] __x64_sys_bpf+0x7c/0x90 [ 1382.725397][T15239] x64_sys_call+0x488/0x9a0 [ 1382.725414][T15239] do_syscall_64+0x4c/0xa0 [ 1382.807785][T15239] ? clear_bhb_loop+0x30/0x80 [ 1382.812489][T15239] ? clear_bhb_loop+0x30/0x80 [ 1382.817316][T15239] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1382.823321][T15239] RIP: 0033:0x7f9f77f9df99 [ 1382.827764][T15239] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1382.847735][T15239] RSP: 002b:00007f9f78f55028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1382.856248][T15239] RAX: ffffffffffffffda RBX: 00007f9f78225fa0 RCX: 00007f9f77f9df99 [ 1382.864500][T15239] RDX: 0000000000000050 RSI: 0000200000000600 RDI: 000000000000000a [ 1382.873050][T15239] RBP: 00007f9f78f55090 R08: 0000000000000000 R09: 0000000000000000 [ 1382.881038][T15239] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1382.889043][T15239] R13: 00007f9f78226038 R14: 00007f9f78225fa0 R15: 00007ffcecc12af8 [ 1382.897056][T15239] [ 1383.707420][T15266] loop8: detected capacity change from 0 to 256 [ 1383.721963][T15266] exFAT-fs (loop8): failed to load upcase table (idx : 0x0001fe89, chksum : 0xc20ee313, utbl_chksum : 0xe619d30d) [ 1383.836665][T15267] bridge0: port 1(bridge_slave_0) entered blocking state [ 1383.849924][T15267] bridge0: port 1(bridge_slave_0) entered disabled state [ 1383.858047][T15267] device bridge_slave_0 entered promiscuous mode [ 1383.865867][T15267] bridge0: port 2(bridge_slave_1) entered blocking state [ 1383.873498][T15267] bridge0: port 2(bridge_slave_1) entered disabled state [ 1383.881404][T15267] device bridge_slave_1 entered promiscuous mode [ 1384.078365][T15267] bridge0: port 2(bridge_slave_1) entered blocking state [ 1384.085895][T15267] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1384.094740][T15267] bridge0: port 1(bridge_slave_0) entered blocking state [ 1384.101958][T15267] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1384.140994][ T9434] bridge0: port 1(bridge_slave_0) entered disabled state [ 1384.151706][ T9434] bridge0: port 2(bridge_slave_1) entered disabled state [ 1384.164860][ T9434] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1384.175113][ T9434] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1384.208566][ T9434] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1384.217597][ T9434] bridge0: port 1(bridge_slave_0) entered blocking state [ 1384.224702][ T9434] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1384.233024][ T9434] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1384.242177][ T9434] bridge0: port 2(bridge_slave_1) entered blocking state [ 1384.249370][ T9434] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1384.268960][ T28] kauditd_printk_skb: 20 callbacks suppressed [ 1384.268975][ T28] audit: type=1400 audit(1305.736:16586): avc: denied { ioctl } for pid=15276 comm="syz.3.32936" path="socket:[321678]" dev="sockfs" ino=321678 ioctlcmd=0x8982 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 1384.282680][T15274] netlink: 4 bytes leftover after parsing attributes in process `syz.8.32935'. [ 1384.309398][T15274] netlink: 4 bytes leftover after parsing attributes in process `syz.8.32935'. [ 1384.319131][T15274] netlink: 4 bytes leftover after parsing attributes in process `syz.8.32935'. [ 1384.328662][T15274] netlink: 4 bytes leftover after parsing attributes in process `syz.8.32935'. [ 1384.338094][T15274] netlink: 4 bytes leftover after parsing attributes in process `syz.8.32935'. [ 1384.347695][T15274] netlink: 4 bytes leftover after parsing attributes in process `syz.8.32935'. [ 1384.347927][ T9434] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1384.357247][T15274] netlink: 4 bytes leftover after parsing attributes in process `syz.8.32935'. [ 1384.371031][ T9434] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1384.375298][T15274] netlink: 4 bytes leftover after parsing attributes in process `syz.8.32935'. [ 1384.391378][T15274] netlink: 4 bytes leftover after parsing attributes in process `syz.8.32935'. [ 1384.410539][ T9434] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1384.421842][T15285] netlink: 'syz.3.32938': attribute type 4 has an invalid length. [ 1384.436051][T15285] netlink: 'syz.3.32938': attribute type 4 has an invalid length. [ 1384.448622][T15288] overlayfs: failed to clone upperpath [ 1384.458548][T15267] device veth0_vlan entered promiscuous mode [ 1384.465425][T15289] overlayfs: failed to clone upperpath [ 1384.475613][ T9434] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1384.484776][ T9434] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1384.493430][ T9434] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1384.502250][T15291] netlink: 'syz.3.32940': attribute type 4 has an invalid length. [ 1384.512147][T15291] FAULT_INJECTION: forcing a failure. [ 1384.512147][T15291] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1384.525571][T15291] CPU: 1 PID: 15291 Comm: syz.3.32940 Not tainted syzkaller #0 [ 1384.533234][T15291] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 1384.543735][T15291] Call Trace: [ 1384.547033][T15291] [ 1384.550070][T15291] __dump_stack+0x21/0x24 [ 1384.554416][T15291] dump_stack_lvl+0x110/0x170 [ 1384.559286][T15291] ? __cfi_dump_stack_lvl+0x8/0x8 [ 1384.564578][T15291] dump_stack+0x15/0x24 [ 1384.568805][T15291] should_fail_ex+0x3bf/0x510 [ 1384.573631][T15291] should_fail+0xb/0x10 [ 1384.578240][T15291] should_fail_usercopy+0x1a/0x20 [ 1384.583643][T15291] _copy_from_user+0x1e/0xc0 [ 1384.588671][T15291] iovec_from_user+0x1aa/0x2e0 [ 1384.593550][T15291] __import_iovec+0x6d/0x460 [ 1384.598174][T15291] import_iovec+0x7c/0xb0 [ 1384.602546][T15291] vfs_writev+0x154/0x5f0 [ 1384.606919][T15291] ? do_writev+0x2c0/0x2c0 [ 1384.611529][T15291] ? vfs_write+0xa51/0xd00 [ 1384.615966][T15291] ? __fdget_pos+0x1f2/0x380 [ 1384.620581][T15291] ? do_writev+0x76/0x2c0 [ 1384.624933][T15291] do_writev+0x14e/0x2c0 [ 1384.629364][T15291] ? do_readv+0x450/0x450 [ 1384.633764][T15291] ? debug_smp_processor_id+0x17/0x20 [ 1384.639330][T15291] __x64_sys_writev+0x7d/0x90 [ 1384.644132][T15291] x64_sys_call+0xad/0x9a0 [ 1384.648562][T15291] do_syscall_64+0x4c/0xa0 [ 1384.653087][T15291] ? clear_bhb_loop+0x30/0x80 [ 1384.657823][T15291] ? clear_bhb_loop+0x30/0x80 [ 1384.659837][T15299] FAULT_INJECTION: forcing a failure. [ 1384.659837][T15299] name failslab, interval 1, probability 10, space 0, times 0 [ 1384.662518][T15291] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1384.662547][T15291] RIP: 0033:0x7ff03dd9df99 [ 1384.685460][T15291] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1384.705063][T15291] RSP: 002b:00007ff03ec31028 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 1384.713650][T15291] RAX: ffffffffffffffda RBX: 00007ff03e025fa0 RCX: 00007ff03dd9df99 [ 1384.721795][T15291] RDX: 0000000000000001 RSI: 00002000000001c0 RDI: 0000000000000004 [ 1384.729854][T15291] RBP: 00007ff03ec31090 R08: 0000000000000000 R09: 0000000000000000 [ 1384.737992][T15291] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1384.745954][T15291] R13: 00007ff03e026038 R14: 00007ff03e025fa0 R15: 00007ffe55307928 [ 1384.753932][T15291] [ 1384.757039][T15299] CPU: 0 PID: 15299 Comm: syz.4.32942 Not tainted syzkaller #0 [ 1384.758295][ T1446] usb 5-1: 0:2 : does not exist [ 1384.764590][T15299] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 1384.772196][ T1446] usb 5-1: USB disconnect, device number 11 [ 1384.779939][T15299] Call Trace: [ 1384.779952][T15299] [ 1384.779961][T15299] __dump_stack+0x21/0x24 [ 1384.779987][T15299] dump_stack_lvl+0x110/0x170 [ 1384.780005][T15299] ? __cfi_dump_stack_lvl+0x8/0x8 [ 1384.780022][T15299] dump_stack+0x15/0x24 [ 1384.810976][T15299] should_fail_ex+0x3bf/0x510 [ 1384.815650][T15299] ? getname_flags+0xba/0x510 [ 1384.820601][T15299] __should_failslab+0xac/0xf0 [ 1384.825368][T15299] should_failslab+0x9/0x20 [ 1384.829884][T15299] kmem_cache_alloc+0x3b/0x320 [ 1384.834726][T15299] getname_flags+0xba/0x510 [ 1384.839235][T15299] getname+0x19/0x20 [ 1384.843125][T15299] do_sys_openat2+0xeb/0x820 [ 1384.847883][T15299] ? __kasan_check_write+0x14/0x20 [ 1384.852983][T15299] ? do_sys_open+0xe0/0xe0 [ 1384.857396][T15299] ? ksys_write+0x1fa/0x260 [ 1384.861978][T15299] ? __cfi_ksys_write+0x10/0x10 [ 1384.867012][T15299] ? do_user_addr_fault+0x9a5/0x1030 [ 1384.872389][T15299] __x64_sys_openat+0x136/0x160 [ 1384.877261][T15299] x64_sys_call+0x783/0x9a0 [ 1384.881849][T15299] do_syscall_64+0x4c/0xa0 [ 1384.886341][T15299] ? clear_bhb_loop+0x30/0x80 [ 1384.891014][T15299] ? clear_bhb_loop+0x30/0x80 [ 1384.895690][T15299] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1384.901578][T15299] RIP: 0033:0x7fcd0fd9df99 [ 1384.905986][T15299] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1384.925761][T15299] RSP: 002b:00007fcd10ca3028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 1384.934460][T15299] RAX: ffffffffffffffda RBX: 00007fcd10026180 RCX: 00007fcd0fd9df99 [ 1384.942964][T15299] RDX: 0000000000088080 RSI: 0000200000000340 RDI: ffffffffffffff9c [ 1384.951132][T15299] RBP: 00007fcd10ca3090 R08: 0000000000000000 R09: 0000000000000000 [ 1384.959117][T15299] R10: 0000000000000016 R11: 0000000000000246 R12: 0000000000000001 [ 1384.967274][T15299] R13: 00007fcd10026218 R14: 00007fcd10026180 R15: 00007fff714b5928 [ 1384.975257][T15299] [ 1384.997815][T15267] device veth1_macvtap entered promiscuous mode [ 1385.012739][ T9434] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1385.032670][T15296] tipc: Started in network mode [ 1385.037915][T15296] tipc: Node identity , cluster identity 4711 [ 1385.044019][T15296] tipc: Failed to obtain node identity [ 1385.049825][T15296] tipc: Enabling of bearer rejected, failed to enable media [ 1385.058450][T15294] netlink: 'syz.0.32941': attribute type 4 has an invalid length. [ 1385.073634][T15294] netlink: 'syz.0.32941': attribute type 4 has an invalid length. [ 1385.099479][T11562] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1385.118484][T11562] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1385.148400][T11562] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1385.153808][T15312] FAULT_INJECTION: forcing a failure. [ 1385.153808][T15312] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1385.176618][T15314] loop3: detected capacity change from 0 to 512 [ 1385.189932][T15314] EXT4-fs: Ignoring removed nobh option [ 1385.195868][T15312] CPU: 1 PID: 15312 Comm: syz.8.32948 Not tainted syzkaller #0 [ 1385.203430][T15312] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 1385.213665][T15312] Call Trace: [ 1385.217034][T15312] [ 1385.219964][T15312] __dump_stack+0x21/0x24 [ 1385.224489][T15312] dump_stack_lvl+0x110/0x170 [ 1385.229165][T15312] ? __cfi_dump_stack_lvl+0x8/0x8 [ 1385.234193][T15312] ? memcpy+0x56/0x70 [ 1385.238213][T15312] dump_stack+0x15/0x24 [ 1385.242389][T15312] should_fail_ex+0x3bf/0x510 [ 1385.247084][T15312] should_fail+0xb/0x10 [ 1385.251233][T15312] should_fail_usercopy+0x1a/0x20 [ 1385.256245][T15312] strncpy_from_user+0x24/0x2c0 [ 1385.261094][T15312] bpf_prog_load+0x1f1/0x1670 [ 1385.265767][T15312] ? map_freeze+0x3a0/0x3a0 [ 1385.270260][T15312] ? selinux_bpf+0xc7/0xf0 [ 1385.274736][T15312] ? security_bpf+0x93/0xb0 [ 1385.279277][T15312] __sys_bpf+0x57b/0x850 [ 1385.283870][T15312] ? bpf_link_show_fdinfo+0x330/0x330 [ 1385.289244][T15312] ? __cfi_ksys_write+0x10/0x10 [ 1385.294137][T15312] ? do_user_addr_fault+0x9a5/0x1030 [ 1385.299432][T15312] ? debug_smp_processor_id+0x17/0x20 [ 1385.304796][T15312] __x64_sys_bpf+0x7c/0x90 [ 1385.309205][T15312] x64_sys_call+0x488/0x9a0 [ 1385.313738][T15312] do_syscall_64+0x4c/0xa0 [ 1385.318255][T15312] ? clear_bhb_loop+0x30/0x80 [ 1385.323025][T15312] ? clear_bhb_loop+0x30/0x80 [ 1385.327697][T15312] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1385.333598][T15312] RIP: 0033:0x7f9f77f9df99 [ 1385.338037][T15312] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1385.357991][T15312] RSP: 002b:00007f9f78f55028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1385.366396][T15312] RAX: ffffffffffffffda RBX: 00007f9f78225fa0 RCX: 00007f9f77f9df99 [ 1385.374458][T15312] RDX: 0000000000000084 RSI: 0000200000000780 RDI: 0000000000000005 [ 1385.382431][T15312] RBP: 00007f9f78f55090 R08: 0000000000000000 R09: 0000000000000000 [ 1385.390481][T15312] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1385.398456][T15312] R13: 00007f9f78226038 R14: 00007f9f78225fa0 R15: 00007ffcecc12af8 [ 1385.406775][T15312] [ 1385.417702][T15196] udevd[15196]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 1385.433972][T15314] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 1385.437691][T11562] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1385.460260][T15319] loop4: detected capacity change from 0 to 512 [ 1385.473003][T15314] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (35405!=33349) [ 1385.486710][T15323] loop7: detected capacity change from 0 to 512 [ 1385.487907][T15324] FAULT_INJECTION: forcing a failure. [ 1385.487907][T15324] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1385.498246][T15314] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a00ec019, mo2=0002] [ 1385.514778][T15314] System zones: 1-12 [ 1385.515278][T15324] CPU: 0 PID: 15324 Comm: syz.8.32953 Not tainted syzkaller #0 [ 1385.519304][T15314] EXT4-fs (loop3): orphan cleanup on readonly fs [ 1385.526375][T15324] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 1385.526392][T15324] Call Trace: [ 1385.526398][T15324] [ 1385.526405][T15324] __dump_stack+0x21/0x24 [ 1385.526430][T15324] dump_stack_lvl+0x110/0x170 [ 1385.526447][T15324] ? __cfi_dump_stack_lvl+0x8/0x8 [ 1385.526466][T15324] dump_stack+0x15/0x24 [ 1385.526484][T15324] should_fail_ex+0x3bf/0x510 [ 1385.526502][T15324] should_fail+0xb/0x10 [ 1385.526515][T15324] should_fail_usercopy+0x1a/0x20 [ 1385.543406][T15324] _copy_from_user+0x1e/0xc0 [ 1385.543439][T15324] __se_sys_memfd_create+0x12b/0x3c0 [ 1385.543457][T15324] __x64_sys_memfd_create+0x5b/0x70 [ 1385.543471][T15324] x64_sys_call+0x235/0x9a0 [ 1385.547153][T15314] EXT4-fs error (device loop3): ext4_read_block_bitmap_nowait:511: comm syz.3.32949: Block bitmap for bg 0 marked uninitialized [ 1385.549769][T15324] do_syscall_64+0x4c/0xa0 [ 1385.554574][T15314] EXT4-fs error (device loop3): ext4_read_block_bitmap_nowait:511: comm syz.3.32949: Block bitmap for bg 0 marked uninitialized [ 1385.559376][T15324] ? clear_bhb_loop+0x30/0x80 [ 1385.559396][T15324] ? clear_bhb_loop+0x30/0x80 [ 1385.559410][T15324] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1385.559430][T15324] RIP: 0033:0x7f9f77f9df99 [ 1385.559445][T15324] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1385.559459][T15324] RSP: 002b:00007f9f78f54e08 EFLAGS: 00000202 ORIG_RAX: 000000000000013f [ 1385.559477][T15324] RAX: ffffffffffffffda RBX: 00000000000004e8 RCX: 00007f9f77f9df99 [ 1385.559489][T15324] RDX: 00007f9f78f54ee0 RSI: 0000000000000000 RDI: 00007f9f780350a4 [ 1385.559501][T15324] RBP: 00002000000005c0 R08: 00000000ffffffff R09: 0000000000000000 [ 1385.559511][T15324] R10: 0000000000000001 R11: 0000000000000202 R12: 0000200000000540 [ 1385.559520][T15324] R13: 00007f9f78f54ee0 R14: 00007f9f78f54ea0 R15: 0000200000000580 [ 1385.559541][T15324] [ 1385.560194][T15319] EXT4-fs (loop4): Test dummy encryption mode enabled [ 1385.566989][T15314] EXT4-fs error (device loop3): ext4_read_block_bitmap_nowait:511: comm syz.3.32949: Block bitmap for bg 0 marked uninitialized [ 1385.572806][T15323] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: writeback. [ 1385.581887][T15314] EXT4-fs warning (device loop3): ext4_expand_extra_isize_ea:2800: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 1385.627219][T15331] FAULT_INJECTION: forcing a failure. [ 1385.627219][T15331] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1385.640265][T15319] EXT4-fs error (device loop4): ext4_expand_extra_isize_ea:2750: inode #11: comm syz.4.32950: corrupted xattr block 95 [ 1385.645819][T15331] CPU: 0 PID: 15331 Comm: syz.8.32955 Not tainted syzkaller #0 [ 1385.801956][T15331] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 1385.812100][T15331] Call Trace: [ 1385.815371][T15331] [ 1385.818290][T15331] __dump_stack+0x21/0x24 [ 1385.822622][T15331] dump_stack_lvl+0x110/0x170 [ 1385.827463][T15331] ? __cfi_dump_stack_lvl+0x8/0x8 [ 1385.832563][T15331] dump_stack+0x15/0x24 [ 1385.836795][T15331] should_fail_ex+0x3bf/0x510 [ 1385.841459][T15331] should_fail+0xb/0x10 [ 1385.845609][T15331] should_fail_usercopy+0x1a/0x20 [ 1385.850645][T15331] _copy_from_user+0x1e/0xc0 [ 1385.855227][T15331] __se_sys_memfd_create+0x12b/0x3c0 [ 1385.860587][T15331] __x64_sys_memfd_create+0x5b/0x70 [ 1385.865775][T15331] x64_sys_call+0x235/0x9a0 [ 1385.870279][T15331] do_syscall_64+0x4c/0xa0 [ 1385.874802][T15331] ? clear_bhb_loop+0x30/0x80 [ 1385.879676][T15331] ? clear_bhb_loop+0x30/0x80 [ 1385.884356][T15331] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1385.890351][T15331] RIP: 0033:0x7f9f77f9df99 [ 1385.894773][T15331] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1385.914589][T15331] RSP: 002b:00007f9f78f54e08 EFLAGS: 00000202 ORIG_RAX: 000000000000013f [ 1385.923300][T15331] RAX: ffffffffffffffda RBX: 000000000000050c RCX: 00007f9f77f9df99 [ 1385.931278][T15331] RDX: 00007f9f78f54ee0 RSI: 0000000000000000 RDI: 00007f9f780350a4 [ 1385.939846][T15331] RBP: 0000200000000600 R08: 00000000ffffffff R09: 0000000000000000 [ 1385.947934][T15331] R10: 0000000000000001 R11: 0000000000000202 R12: 0000200000000580 [ 1385.955996][T15331] R13: 00007f9f78f54ee0 R14: 00007f9f78f54ea0 R15: 00002000000005c0 [ 1385.964047][T15331] [ 1385.968335][T15314] EXT4-fs (loop3): 1 truncate cleaned up [ 1385.968356][T15319] EXT4-fs warning (device loop4): ext4_expand_extra_isize_ea:2800: Unable to expand inode 11. Delete some EAs or run e2fsck. [ 1385.975094][T15267] EXT4-fs (loop7): unmounting filesystem. [ 1385.988410][T15319] EXT4-fs error (device loop4): ext4_validate_block_bitmap:429: comm syz.4.32950: bg 0: block 7: invalid block bitmap [ 1385.995495][T15314] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 1386.006318][T15319] EXT4-fs error (device loop4) in ext4_mb_clear_bb:6180: Corrupt filesystem [ 1386.025818][T15319] EXT4-fs error (device loop4): ext4_xattr_delete_inode:2916: inode #11: comm syz.4.32950: corrupted xattr block 95 [ 1386.039263][T15319] EXT4-fs warning (device loop4): ext4_evict_inode:301: xattr delete (err -117) [ 1386.049080][T15319] EXT4-fs (loop4): 1 orphan inode deleted [ 1386.055670][T15319] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 1386.087550][T15201] EXT4-fs (loop3): unmounting filesystem. [ 1386.107247][T15338] overlayfs: conflicting options: userxattr,metacopy=on [ 1386.118191][T15340] erofs: (device loop7): mounted with root inode @ nid 36. [ 1386.118736][T15116] EXT4-fs (loop4): unmounting filesystem. [ 1386.209486][T15349] erofs: Unknown parameter 'uid>00000000000000000000' [ 1386.211632][T15345] exFAT-fs (loop4): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x32e3664b, utbl_chksum : 0xe619d30d) [ 1386.234833][T15196] udevd[15196]: incorrect erofs checksum on /dev/loop7 [ 1386.270191][T15348] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: writeback. [ 1386.290402][T15232] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 1386.324775][T15023] EXT4-fs (loop8): unmounting filesystem. [ 1386.336315][T15342] exFAT-fs (loop3): failed to load upcase table (idx : 0x0001fe89, chksum : 0xc20ee313, utbl_chksum : 0xe619d30d) [ 1386.539303][T15361] set_capacity_and_notify: 5 callbacks suppressed [ 1386.539324][T15361] loop8: detected capacity change from 0 to 40427 [ 1386.560861][T15361] F2FS-fs (loop8): Unrecognized mount option "Â " or missing value [ 1386.866510][T15387] FAULT_INJECTION: forcing a failure. [ 1386.866510][T15387] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1386.879817][T15387] CPU: 0 PID: 15387 Comm: syz.8.32974 Not tainted syzkaller #0 [ 1386.887529][T15387] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 1386.897602][T15387] Call Trace: [ 1386.900891][T15387] [ 1386.903857][T15387] __dump_stack+0x21/0x24 [ 1386.908204][T15387] dump_stack_lvl+0x110/0x170 [ 1386.912900][T15387] ? __cfi_dump_stack_lvl+0x8/0x8 [ 1386.917951][T15387] dump_stack+0x15/0x24 [ 1386.922119][T15387] should_fail_ex+0x3bf/0x510 [ 1386.926796][T15387] should_fail+0xb/0x10 [ 1386.931128][T15387] should_fail_usercopy+0x1a/0x20 [ 1386.936151][T15387] _copy_from_user+0x1e/0xc0 [ 1386.940745][T15387] __se_sys_memfd_create+0x12b/0x3c0 [ 1386.946038][T15387] __x64_sys_memfd_create+0x5b/0x70 [ 1386.951456][T15387] x64_sys_call+0x235/0x9a0 [ 1386.955959][T15387] do_syscall_64+0x4c/0xa0 [ 1386.960368][T15387] ? clear_bhb_loop+0x30/0x80 [ 1386.965242][T15387] ? clear_bhb_loop+0x30/0x80 [ 1386.969927][T15387] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1386.975952][T15387] RIP: 0033:0x7f9f77f9df99 [ 1386.980563][T15387] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1387.000353][T15387] RSP: 002b:00007f9f78f54e08 EFLAGS: 00000202 ORIG_RAX: 000000000000013f [ 1387.008849][T15387] RAX: ffffffffffffffda RBX: 000000000001058f RCX: 00007f9f77f9df99 [ 1387.016828][T15387] RDX: 00007f9f78f54ee0 RSI: 0000000000000000 RDI: 00007f9f780350a4 [ 1387.024820][T15387] RBP: 0000200000010680 R08: 00000000ffffffff R09: 0000000000000000 [ 1387.032975][T15387] R10: 0000000000000001 R11: 0000000000000202 R12: 0000200000010600 [ 1387.040961][T15387] R13: 00007f9f78f54ee0 R14: 00007f9f78f54ea0 R15: 0000200000010640 [ 1387.049303][T15387] [ 1387.152653][T15390] loop8: detected capacity change from 0 to 40427 [ 1387.159689][T15390] F2FS-fs (loop8): Corrupted extension count (64 + 1 > 64) [ 1387.167287][T15390] F2FS-fs (loop8): Can't find valid F2FS filesystem in 1th superblock [ 1387.177044][T15390] F2FS-fs (loop8): Image doesn't support compression [ 1387.184212][T15390] F2FS-fs (loop8): Image doesn't support compression [ 1387.191525][T15390] F2FS-fs (loop8): invalid crc value [ 1387.197714][T15390] F2FS-fs (loop8): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 10241044815247771109) [ 1387.221213][T15390] F2FS-fs (loop8): Start checkpoint disabled! [ 1387.227756][T15390] F2FS-fs (loop8): f2fs_disable_checkpoint() finish, err:0 [ 1387.235450][T15390] F2FS-fs (loop8): Try to recover 1th superblock, ret: 0 [ 1387.242821][T15390] F2FS-fs (loop8): Mounted with checkpoint version = 48b305e6 [ 1387.398370][T15398] FAULT_INJECTION: forcing a failure. [ 1387.398370][T15398] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1387.411859][T15398] CPU: 1 PID: 15398 Comm: syz.7.32977 Not tainted syzkaller #0 [ 1387.419519][T15398] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 1387.430374][T15398] Call Trace: [ 1387.433660][T15398] [ 1387.436586][T15398] __dump_stack+0x21/0x24 [ 1387.440947][T15398] dump_stack_lvl+0x110/0x170 [ 1387.445957][T15398] ? __cfi_dump_stack_lvl+0x8/0x8 [ 1387.451177][T15398] dump_stack+0x15/0x24 [ 1387.455344][T15398] should_fail_ex+0x3bf/0x510 [ 1387.460046][T15398] should_fail+0xb/0x10 [ 1387.464220][T15398] should_fail_usercopy+0x1a/0x20 [ 1387.469349][T15398] _copy_from_user+0x1e/0xc0 [ 1387.473980][T15398] __se_sys_memfd_create+0x12b/0x3c0 [ 1387.479301][T15398] __x64_sys_memfd_create+0x5b/0x70 [ 1387.484562][T15398] x64_sys_call+0x235/0x9a0 [ 1387.489169][T15398] do_syscall_64+0x4c/0xa0 [ 1387.493789][T15398] ? clear_bhb_loop+0x30/0x80 [ 1387.498561][T15398] ? clear_bhb_loop+0x30/0x80 [ 1387.503281][T15398] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1387.509210][T15398] RIP: 0033:0x7fa9e5d9df99 [ 1387.513723][T15398] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1387.533515][T15398] RSP: 002b:00007fa9e6c1ce08 EFLAGS: 00000202 ORIG_RAX: 000000000000013f [ 1387.542032][T15398] RAX: ffffffffffffffda RBX: 0000000000020412 RCX: 00007fa9e5d9df99 [ 1387.550271][T15398] RDX: 00007fa9e6c1cee0 RSI: 0000000000000000 RDI: 00007fa9e5e350a4 [ 1387.558334][T15398] RBP: 0000200000020500 R08: 00000000ffffffff R09: 0000000000000000 [ 1387.566485][T15398] R10: 0000000000000001 R11: 0000000000000202 R12: 0000200000020480 [ 1387.574635][T15398] R13: 00007fa9e6c1cee0 R14: 00007fa9e6c1cea0 R15: 00002000000204c0 [ 1387.582798][T15398] [ 1387.807775][T15396] loop8: detected capacity change from 0 to 131072 [ 1387.838970][T15396] F2FS-fs (loop8): Found nat_bits in checkpoint [ 1387.887034][T15396] F2FS-fs (loop8): Mounted with checkpoint version = 48b305e5 [ 1388.348105][ T28] audit: type=1400 audit(1309.491:16587): avc: denied { map } for pid=15430 comm="syz.8.32987" path="socket:[322128]" dev="sockfs" ino=322128 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 1388.699690][T12651] usb 9-1: new high-speed USB device number 10 using dummy_hcd [ 1388.776210][T15454] __nla_validate_parse: 1919 callbacks suppressed [ 1388.776233][T15454] netlink: 12 bytes leftover after parsing attributes in process `syz.4.32997'. [ 1388.813321][T15456] overlayfs: failed to clone upperpath [ 1388.935374][T12651] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1388.952006][T15409] loop3: detected capacity change from 0 to 262144 [ 1388.970769][T12651] usb 9-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1388.984375][T12651] usb 9-1: New USB device found, idVendor=13e5, idProduct=0001, bcdDevice=4e.53 [ 1388.993705][T12651] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1389.008277][T15409] F2FS-fs (loop3): Found nat_bits in checkpoint [ 1389.014122][T12651] usb 9-1: config 0 descriptor?? [ 1389.096412][T15409] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 1389.998785][T15489] fuse: Bad value for 'fd' [ 1390.056952][T15485] loop3: detected capacity change from 0 to 40427 [ 1390.089716][T15485] F2FS-fs (loop3): Invalid SB checksum offset: 0 [ 1390.108361][T15485] F2FS-fs (loop3): Can't find valid F2FS filesystem in 2th superblock [ 1390.141044][T15485] F2FS-fs (loop3): invalid crc value [ 1390.166186][T15485] F2FS-fs (loop3): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 585327988383614437) [ 1390.211133][T15485] F2FS-fs (loop3): Try to recover 2th superblock, ret: 0 [ 1390.218263][T15485] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 1390.485237][T15524] IPv6: sit1: Disabled Multicast RS [ 1390.612098][T15534] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=15534 comm=syz.7.33023 [ 1390.616613][T15536] SELinux: security_context_str_to_sid (root) failed with errno=-22 [ 1390.640448][T15201] syz-executor: attempt to access beyond end of device [ 1390.640448][T15201] loop3: rw=2049, sector=45096, nr_sectors = 32 limit=40427 [ 1391.284404][T15562] fuse: Bad value for 'fd' [ 1391.363090][ T28] audit: type=1400 audit(1312.278:16588): avc: denied { connect } for pid=15565 comm="syz.7.33037" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 1391.534082][T12651] usb 9-1: USB disconnect, device number 10 [ 1391.623075][T15576] 9pnet_fd: Insufficient options for proto=fd [ 1391.634269][T15578] loop8: detected capacity change from 0 to 256 [ 1391.667936][T15578] exfat: Unknown parameter '' [ 1391.760316][T15585] 9pnet_fd: Insufficient options for proto=fd [ 1391.762231][T15584] loop3: detected capacity change from 0 to 1024 [ 1391.823920][T15584] EXT4-fs: Ignoring removed nomblk_io_submit option [ 1391.851146][T15584] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 1391.903488][T15584] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 1392.153845][T15596] device macsec1 entered promiscuous mode [ 1392.429305][T15617] xt_TCPMSS: Only works on TCP SYN packets [ 1392.473584][ T28] audit: type=1400 audit(1313.302:16589): avc: denied { create } for pid=15624 comm="syz.7.33060" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 1392.555459][T15201] EXT4-fs (loop3): unmounting filesystem. [ 1392.568119][T15633] FAULT_INJECTION: forcing a failure. [ 1392.568119][T15633] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1392.582564][T15633] CPU: 0 PID: 15633 Comm: syz.8.33062 Not tainted syzkaller #0 [ 1392.590475][T15633] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 1392.600985][T15633] Call Trace: [ 1392.604414][T15633] [ 1392.607365][T15633] __dump_stack+0x21/0x24 [ 1392.611769][T15633] dump_stack_lvl+0x110/0x170 [ 1392.616657][T15633] ? __cfi_dump_stack_lvl+0x8/0x8 [ 1392.621751][T15633] ? memcpy+0x56/0x70 [ 1392.625852][T15633] dump_stack+0x15/0x24 [ 1392.630292][T15633] should_fail_ex+0x3bf/0x510 [ 1392.635161][T15633] should_fail+0xb/0x10 [ 1392.639350][T15633] should_fail_usercopy+0x1a/0x20 [ 1392.644484][T15633] strncpy_from_user+0x24/0x2c0 [ 1392.649355][T15633] bpf_prog_load+0x1f1/0x1670 [ 1392.654040][T15633] ? map_freeze+0x3a0/0x3a0 [ 1392.658794][T15633] ? selinux_bpf+0xc7/0xf0 [ 1392.663200][T15633] ? security_bpf+0x93/0xb0 [ 1392.667871][T15633] __sys_bpf+0x57b/0x850 [ 1392.672110][T15633] ? bpf_link_show_fdinfo+0x330/0x330 [ 1392.677469][T15633] ? __cfi_ksys_write+0x10/0x10 [ 1392.682311][T15633] ? debug_smp_processor_id+0x17/0x20 [ 1392.687676][T15633] __x64_sys_bpf+0x7c/0x90 [ 1392.692078][T15633] x64_sys_call+0x488/0x9a0 [ 1392.696575][T15633] do_syscall_64+0x4c/0xa0 [ 1392.701071][T15633] ? clear_bhb_loop+0x30/0x80 [ 1392.705736][T15633] ? clear_bhb_loop+0x30/0x80 [ 1392.710487][T15633] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1392.716391][T15633] RIP: 0033:0x7f9f77f9df99 [ 1392.720806][T15633] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1392.740750][T15633] RSP: 002b:00007f9f78f55028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1392.749156][T15633] RAX: ffffffffffffffda RBX: 00007f9f78225fa0 RCX: 00007f9f77f9df99 [ 1392.757116][T15633] RDX: 0000000000000094 RSI: 0000200000000580 RDI: 0000000000000005 [ 1392.765177][T15633] RBP: 00007f9f78f55090 R08: 0000000000000000 R09: 0000000000000000 [ 1392.773489][T15633] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1392.781711][T15633] R13: 00007f9f78226038 R14: 00007f9f78225fa0 R15: 00007ffcecc12af8 [ 1392.789762][T15633] [ 1392.830359][T15649] FAULT_INJECTION: forcing a failure. [ 1392.830359][T15649] name failslab, interval 1, probability 10, space 0, times 0 [ 1392.844272][T15649] CPU: 1 PID: 15649 Comm: syz.8.33071 Not tainted syzkaller #0 [ 1392.851901][T15649] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 1392.862442][T15649] Call Trace: [ 1392.865734][T15649] [ 1392.868846][T15649] __dump_stack+0x21/0x24 [ 1392.873288][T15649] dump_stack_lvl+0x110/0x170 [ 1392.878180][T15649] ? __cfi_dump_stack_lvl+0x8/0x8 [ 1392.883393][T15649] ? stack_trace_save+0xa6/0xf0 [ 1392.888380][T15649] dump_stack+0x15/0x24 [ 1392.892566][T15649] should_fail_ex+0x3bf/0x510 [ 1392.897291][T15649] __should_failslab+0xac/0xf0 [ 1392.902280][T15649] should_failslab+0x9/0x20 [ 1392.907766][T15649] __kmem_cache_alloc_node+0x3d/0x2d0 [ 1392.913202][T15649] ? bpf_test_init+0xa7/0x140 [ 1392.918019][T15649] ? avc_has_perm_noaudit+0x390/0x490 [ 1392.923513][T15649] ? bpf_test_init+0xa7/0x140 [ 1392.928229][T15649] __kmalloc+0xa4/0x1e0 [ 1392.932412][T15649] bpf_test_init+0xa7/0x140 [ 1392.936945][T15649] bpf_prog_test_run_xdp+0x488/0xf80 [ 1392.942269][T15649] ? __cfi_bpf_prog_test_run_xdp+0x10/0x10 [ 1392.948388][T15649] ? __kasan_check_write+0x14/0x20 [ 1392.953500][T15649] ? __cfi_bpf_prog_test_run_xdp+0x10/0x10 [ 1392.959722][T15649] bpf_prog_test_run+0x3b4/0x5c0 [ 1392.964847][T15649] ? bpf_prog_query+0x270/0x270 [ 1392.969716][T15649] ? selinux_bpf+0xce/0xf0 [ 1392.974157][T15649] ? security_bpf+0x93/0xb0 [ 1392.978705][T15649] __sys_bpf+0x5ee/0x850 [ 1392.982951][T15649] ? bpf_link_show_fdinfo+0x330/0x330 [ 1392.988330][T15649] ? __cfi_ksys_write+0x10/0x10 [ 1392.993274][T15649] ? debug_smp_processor_id+0x17/0x20 [ 1392.999102][T15649] __x64_sys_bpf+0x7c/0x90 [ 1393.003607][T15649] x64_sys_call+0x488/0x9a0 [ 1393.008277][T15649] do_syscall_64+0x4c/0xa0 [ 1393.012863][T15649] ? clear_bhb_loop+0x30/0x80 [ 1393.017525][T15649] ? clear_bhb_loop+0x30/0x80 [ 1393.022209][T15649] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1393.028123][T15649] RIP: 0033:0x7f9f77f9df99 [ 1393.032527][T15649] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1393.052392][T15649] RSP: 002b:00007f9f78f55028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1393.060826][T15649] RAX: ffffffffffffffda RBX: 00007f9f78225fa0 RCX: 00007f9f77f9df99 [ 1393.068973][T15649] RDX: 0000000000000050 RSI: 0000200000000600 RDI: 000000000000000a [ 1393.077327][T15649] RBP: 00007f9f78f55090 R08: 0000000000000000 R09: 0000000000000000 [ 1393.085649][T15649] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1393.093800][T15649] R13: 00007f9f78226038 R14: 00007f9f78225fa0 R15: 00007ffcecc12af8 [ 1393.102050][T15649] [ 1393.109873][T15665] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=27 sclass=netlink_route_socket pid=15665 comm=syz.7.33074 [ 1393.160569][T15670] tipc: Started in network mode [ 1393.165799][T15670] tipc: Node identity , cluster identity 4711 [ 1393.172195][T15670] tipc: Failed to obtain node identity [ 1393.178098][T15670] tipc: Enabling of bearer rejected, failed to enable media [ 1393.223229][T15681] netlink: 'syz.0.33080': attribute type 4 has an invalid length. [ 1393.235711][T15681] netlink: 'syz.0.33080': attribute type 4 has an invalid length. [ 1393.363707][T15703] netlink: 8 bytes leftover after parsing attributes in process `syz.0.33091'. [ 1393.385691][T15703] device ip6gretap0 entered promiscuous mode [ 1393.944077][T15694] loop3: detected capacity change from 0 to 131072 [ 1393.954653][T15694] F2FS-fs (loop3): invalid crc value [ 1393.972857][T15694] F2FS-fs (loop3): Found nat_bits in checkpoint [ 1394.023625][T15694] F2FS-fs (loop3): f2fs_check_nid_range: out-of-range nid=2, run fsck to fix. [ 1394.060855][T15694] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e4 [ 1394.063472][T15763] overlayfs: failed to clone upperpath [ 1394.089664][T15763] overlayfs: failed to clone upperpath [ 1394.164379][T15767] loop8: detected capacity change from 0 to 512 [ 1394.241191][T15767] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: writeback. [ 1394.279220][T15023] EXT4-fs (loop8): unmounting filesystem. [ 1394.390930][T15784] loop8: detected capacity change from 0 to 512 [ 1394.409515][T15784] EXT4-fs: Ignoring removed nomblk_io_submit option [ 1394.422333][T15784] EXT4-fs (loop8): mounting ext3 file system using the ext4 subsystem [ 1394.455726][T15784] EXT4-fs (loop8): 1 truncate cleaned up [ 1394.476243][T15784] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: writeback. [ 1394.514752][T15792] tmpfs: Unknown parameter 'and' [ 1394.535300][T15784] EXT4-fs error (device loop8): ext4_validate_block_bitmap:438: comm syz.8.33114: bg 0: block 384: padding at end of block bitmap is not set [ 1394.542703][T15792] fuse: Unknown parameter 'fd-0x0000000000000003' [ 1394.588489][T15784] EXT4-fs warning (device loop8): ext4_resize_begin:84: There are errors in the filesystem, so online resizing is not allowed [ 1394.748357][T15809] netlink: 28 bytes leftover after parsing attributes in process `syz.7.33126'. [ 1394.844999][T15807] bridge0: port 1(bridge_slave_0) entered blocking state [ 1394.855305][T15807] bridge0: port 1(bridge_slave_0) entered disabled state [ 1394.863549][T15807] device bridge_slave_0 entered promiscuous mode [ 1394.871040][T15807] bridge0: port 2(bridge_slave_1) entered blocking state [ 1394.878757][T15807] bridge0: port 2(bridge_slave_1) entered disabled state [ 1394.886275][T15807] device bridge_slave_1 entered promiscuous mode [ 1394.920594][T12651] usb 9-1: new high-speed USB device number 11 using dummy_hcd [ 1394.962318][T15807] bridge0: port 2(bridge_slave_1) entered blocking state [ 1394.969665][T15807] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1394.977366][T15807] bridge0: port 1(bridge_slave_0) entered blocking state [ 1394.984542][T15807] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1394.997610][T11561] device bridge_slave_1 left promiscuous mode [ 1395.004168][T11561] bridge0: port 2(bridge_slave_1) entered disabled state [ 1395.012097][T11561] device bridge_slave_0 left promiscuous mode [ 1395.018976][T11561] bridge0: port 1(bridge_slave_0) entered disabled state [ 1395.027233][T11561] device veth1_macvtap left promiscuous mode [ 1395.033756][T11561] device veth0_vlan left promiscuous mode [ 1395.094062][T12651] usb 9-1: device descriptor read/64, error -71 [ 1395.146800][T11582] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1395.155123][T11582] bridge0: port 1(bridge_slave_0) entered disabled state [ 1395.167325][T11582] bridge0: port 2(bridge_slave_1) entered disabled state [ 1395.181425][T11582] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1395.201193][T11582] bridge0: port 1(bridge_slave_0) entered blocking state [ 1395.208405][T11582] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1395.236284][T11582] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1395.255674][T11582] bridge0: port 2(bridge_slave_1) entered blocking state [ 1395.262831][T11582] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1395.310290][T11582] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1395.331241][T11582] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1395.356582][T11582] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1395.399640][T11582] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1395.408274][T12651] usb 9-1: device descriptor read/64, error -71 [ 1395.419555][T11582] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1395.427328][T11582] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1395.443774][T15807] device veth0_vlan entered promiscuous mode [ 1395.467013][T11561] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1395.477393][T15807] device veth1_macvtap entered promiscuous mode [ 1395.499646][T11561] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1395.522100][T11561] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1395.600892][T15818] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 1395.615114][T15818] overlayfs: failed to resolve '/€': -2 [ 1395.701181][T12651] usb 9-1: new high-speed USB device number 12 using dummy_hcd [ 1395.864537][T15834] overlayfs: statfs failed on './file0' [ 1395.874536][T12651] usb 9-1: device descriptor read/64, error -71 [ 1396.074165][T15891] tap0: tun_chr_ioctl cmd 1074025678 [ 1396.079838][T15891] tap0: group set to 0 [ 1396.166909][T12651] usb 9-1: device descriptor read/64, error -71 [ 1396.301177][T12651] usb usb9-port1: attempt power cycle [ 1396.377982][T15939] netlink: 8 bytes leftover after parsing attributes in process `syz.7.33184'. [ 1396.414617][T15943] syzkaller0: tun_chr_ioctl cmd 1074025677 [ 1396.420754][T15943] syzkaller0: linktype set to 805 [ 1396.445789][T15949] netlink: 'syz.4.33189': attribute type 3 has an invalid length. [ 1396.600529][T15972] netlink: 4 bytes leftover after parsing attributes in process `syz.7.33200'. [ 1396.752961][T12651] usb 9-1: new high-speed USB device number 13 using dummy_hcd [ 1396.807401][T12651] usb 9-1: device descriptor read/8, error -71 [ 1396.969962][T12651] usb 9-1: device descriptor read/8, error -71 [ 1397.738782][T12651] usb 9-1: new high-speed USB device number 14 using dummy_hcd [ 1397.788306][T12651] usb 9-1: device descriptor read/8, error -71 [ 1398.638707][T15023] EXT4-fs (loop8): unmounting filesystem. [ 1398.768524][T12651] usb 9-1: device descriptor read/8, error -71 [ 1398.898091][T12651] usb usb9-port1: unable to enumerate USB device [ 1399.126720][T16138] netlink: 8 bytes leftover after parsing attributes in process `syz.5.33281'. [ 1399.138473][T16138] netlink: 48 bytes leftover after parsing attributes in process `syz.5.33281'. [ 1399.209129][T16150] fuse: Bad value for 'fd' [ 1399.213741][T16146] loop5: detected capacity change from 0 to 8192 [ 1399.227607][ T28] audit: type=1400 audit(1319.539:16590): avc: denied { lock } for pid=16151 comm="syz.7.33288" path="socket:[324493]" dev="sockfs" ino=324493 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1 [ 1399.255287][T16146] FAT-fs (loop5): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 1399.273613][T16160] overlayfs: failed to clone upperpath [ 1399.312501][T16164] netlink: 12 bytes leftover after parsing attributes in process `syz.7.33296'. [ 1399.315574][T16167] loop5: detected capacity change from 0 to 128 [ 1399.346617][T16171] fuse: Bad value for 'fd' [ 1399.406688][T16187] netlink: 12 bytes leftover after parsing attributes in process `syz.0.33305'. [ 1399.532153][T16214] netlink: 'syz.4.33318': attribute type 12 has an invalid length. [ 1399.535044][ T28] audit: type=1326 audit(1319.816:16591): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16210 comm="syz.0.33317" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fab9399df99 code=0x7ffc0000 [ 1399.566815][ T28] audit: type=1326 audit(1319.844:16592): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16210 comm="syz.0.33317" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fab9399df99 code=0x7ffc0000 [ 1399.636142][ T28] audit: type=1326 audit(1319.853:16593): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16210 comm="syz.0.33317" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fab9399df99 code=0x7ffc0000 [ 1399.680525][ T28] audit: type=1326 audit(1319.853:16594): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16210 comm="syz.0.33317" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fab9399df99 code=0x7ffc0000 [ 1399.707235][T16239] netlink: 4 bytes leftover after parsing attributes in process `syz.7.33330'. [ 1399.716202][ T28] audit: type=1326 audit(1319.872:16595): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16210 comm="syz.0.33317" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=121 compat=0 ip=0x7fab9399df99 code=0x7ffc0000 [ 1399.716232][ T28] audit: type=1326 audit(1319.872:16596): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16210 comm="syz.0.33317" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fab9399df99 code=0x7ffc0000 [ 1399.716251][ T28] audit: type=1326 audit(1319.872:16597): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16210 comm="syz.0.33317" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fab9399df99 code=0x7ffc0000 [ 1399.716272][ T28] audit: type=1326 audit(1319.872:16598): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16210 comm="syz.0.33317" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fab9399df99 code=0x7ffc0000 [ 1399.716293][ T28] audit: type=1326 audit(1319.872:16599): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16210 comm="syz.0.33317" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fab9399df99 code=0x7ffc0000 [ 1399.889345][T16254] netlink: 4 bytes leftover after parsing attributes in process `syz.0.33336'. [ 1400.088420][T16286] netlink: 272 bytes leftover after parsing attributes in process `syz.0.33348'. [ 1400.123362][ T29] INFO: task syz.6.29113:5991 blocked for more than 165 seconds. [ 1400.131545][ T29] Not tainted syzkaller #0 [ 1400.137766][ T29] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1400.146659][ T29] task:syz.6.29113 state:D stack:26024 pid:5991 ppid:667 flags:0x00004004 [ 1400.156111][ T29] Call Trace: [ 1400.159493][ T29] [ 1400.162423][ T29] __schedule+0xbe2/0x14b0 [ 1400.166879][ T29] ? release_firmware_map_entry+0x190/0x190 [ 1400.173128][ T29] ? __kasan_check_write+0x14/0x20 [ 1400.178707][ T29] ? _raw_spin_lock_irq+0x95/0xf0 [ 1400.183751][ T29] schedule+0xbd/0x170 [ 1400.188018][ T29] io_schedule+0x84/0xe0 [ 1400.192382][ T29] folio_wait_bit_common+0x6ba/0x8a0 [ 1400.198144][ T29] ? folio_wait_bit+0x30/0x30 [ 1400.202863][ T29] ? __cfi_wake_page_function+0x10/0x10 [ 1400.208584][ T29] ? xas_start+0x31d/0x3e0 [ 1400.213109][ T29] ? xas_load+0x394/0x3c0 [ 1400.218412][ T29] __filemap_get_folio+0x4ac/0xa70 [ 1400.223835][ T29] ? __cfi___filemap_get_folio+0x10/0x10 [ 1400.229673][ T29] ? finish_task_switch+0x16b/0x7c0 [ 1400.235002][ T29] ? switch_mm_irqs_off+0x2f0/0x960 [ 1400.240217][ T29] shmem_get_folio_gfp+0x2fb/0x20f0 [ 1400.245463][ T29] ? __cfi__raw_spin_lock+0x10/0x10 [ 1400.250668][ T29] shmem_fault+0x1ab/0x670 [ 1400.255211][ T29] ? futex_q_unlock+0x23/0x30 [ 1400.260342][ T29] ? futex_wait_setup+0x1f2/0x260 [ 1400.265674][ T29] ? __cfi_shmem_fault+0x10/0x10 [ 1400.270823][ T29] ? hrtimer_cancel+0x2d/0x60 [ 1400.275861][ T29] ? futex_wait+0x5f1/0x900 [ 1400.280546][ T29] do_fault+0xb2f/0x1e30 [ 1400.284876][ T29] ? pte_marker_clear+0x220/0x220 [ 1400.290099][ T29] handle_mm_fault+0x1363/0x26b0 [ 1400.295035][ T29] ? __cfi_handle_mm_fault+0x10/0x10 [ 1400.300963][ T29] ? lock_vma_under_rcu+0x3f8/0x4f0 [ 1400.306215][ T29] ? __x64_sys_futex+0x100/0x100 [ 1400.311174][ T29] ? xfd_validate_state+0x70/0x150 [ 1400.316291][ T29] do_user_addr_fault+0x900/0x1030 [ 1400.321415][ T29] ? debug_smp_processor_id+0x17/0x20 [ 1400.326801][ T29] exc_page_fault+0x51/0xb0 [ 1400.331375][ T29] asm_exc_page_fault+0x27/0x30 [ 1400.336253][ T29] RIP: 0033:0x7f18de8675a5 [ 1400.340822][ T29] RSP: 002b:00007ffcc05f5590 EFLAGS: 00010246 [ 1400.346984][ T29] RAX: 0000200000000040 RBX: 0000000000000008 RCX: 0000000000000000 [ 1400.355260][ T29] RDX: 0000000000000003 RSI: 0000000000000000 RDI: 000055557ba333d8 [ 1400.363261][ T29] RBP: 00007ffcc05f56b0 R08: 0000000000000000 R09: 0000000000000000 [ 1400.371435][ T29] R10: 0000000000000003 R11: 0000000000000000 R12: 00007ffcc05f56f0 [ 1400.379695][ T29] R13: 00007f18dec2609c R14: 00000000001163cd R15: 00007f18dec26090 [ 1400.387781][ T29] [ 1400.396226][ T29] INFO: task syz.6.29113:5992 blocked for more than 166 seconds. [ 1400.408839][ T29] Not tainted syzkaller #0 [ 1400.414604][ T29] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1400.423517][ T29] task:syz.6.29113 state:D stack:25672 pid:5992 ppid:667 flags:0x00004004 [ 1400.432875][ T29] Call Trace: [ 1400.436344][ T29] [ 1400.439331][ T29] __schedule+0xbe2/0x14b0 [ 1400.443880][ T29] ? release_firmware_map_entry+0x190/0x190 [ 1400.449896][ T29] ? _raw_spin_lock_irq+0x95/0xf0 [ 1400.454942][ T29] ? __cfi__raw_spin_lock_irq+0x10/0x10 [ 1400.460620][ T29] ? __kasan_check_write+0x14/0x20 [ 1400.465759][ T29] schedule+0xbd/0x170 [ 1400.469924][ T29] rwsem_down_write_slowpath+0x600/0x1c70 [ 1400.475819][ T29] ? rwsem_down_read_slowpath+0x15c0/0x15c0 [ 1400.481810][ T29] ? xas_load+0x394/0x3c0 [ 1400.486282][ T29] ? __kasan_check_write+0x14/0x20 [ 1400.491428][ T29] ? __filemap_get_folio+0x848/0xa70 [ 1400.496710][ T29] ? rwsem_write_trylock+0x136/0x300 [ 1400.502030][ T29] ? clear_nonspinnable+0x60/0x60 [ 1400.507140][ T29] ? shmem_is_huge+0x163/0x320 [ 1400.511903][ T29] down_write+0x21/0x30 [ 1400.516101][ T29] vma_start_write+0xbd/0x150 [ 1400.520801][ T29] collapse_pte_mapped_thp+0x4f7/0xab0 [ 1400.526399][ T29] madvise_collapse+0x6c2/0xa70 [ 1400.532047][ T29] do_madvise+0x12b1/0x3290 [ 1400.536711][ T29] ? __cfi_do_madvise+0x10/0x10 [ 1400.542054][ T29] ? __kasan_check_read+0x11/0x20 [ 1400.547289][ T29] ? schedule+0xd4/0x170 [ 1400.551983][ T29] ? futex_unqueue+0x132/0x160 [ 1400.556864][ T29] ? futex_wait+0x5f1/0x900 [ 1400.561679][ T29] ? __cfi_futex_wait+0x10/0x10 [ 1400.566547][ T29] ? __cfi_futex_wake+0x10/0x10 [ 1400.571442][ T29] ? __mm_populate+0x3bb/0x430 [ 1400.576210][ T29] ? do_futex+0x2e2/0x430 [ 1400.580819][ T29] ? __cfi_do_futex+0x10/0x10 [ 1400.585680][ T29] ? __se_sys_remap_file_pages+0x69b/0x800 [ 1400.591509][ T29] ? __se_sys_futex+0x136/0x310 [ 1400.596458][ T29] ? __this_cpu_preempt_check+0x13/0x20 [ 1400.602223][ T29] ? xfd_validate_state+0x70/0x150 [ 1400.607354][ T29] ? fpregs_restore_userregs+0x128/0x260 [ 1400.613005][ T29] __x64_sys_madvise+0xa9/0xc0 [ 1400.617772][ T29] x64_sys_call+0x99e/0x9a0 [ 1400.622310][ T29] do_syscall_64+0x4c/0xa0 [ 1400.626729][ T29] ? clear_bhb_loop+0x30/0x80 [ 1400.631585][ T29] ? clear_bhb_loop+0x30/0x80 [ 1400.636540][ T29] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1400.642475][ T29] RIP: 0033:0x7f18de99df99 [ 1400.646929][ T29] RSP: 002b:00007f18df91c028 EFLAGS: 00000246 ORIG_RAX: 000000000000001c [ 1400.655454][ T29] RAX: ffffffffffffffda RBX: 00007f18dec25fa0 RCX: 00007f18de99df99 [ 1400.663426][ T29] RDX: 0000000000000019 RSI: 0000000000600000 RDI: 0000200000000000 [ 1400.671451][ T29] RBP: 00007f18dea34ec4 R08: 0000000000000000 R09: 0000000000000000 [ 1400.679647][ T29] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1400.687700][ T29] R13: 00007f18dec26038 R14: 00007f18dec25fa0 R15: 00007ffcc05f5468 [ 1400.695858][ T29] [ 1400.700497][ T29] INFO: task syz.6.29113:5998 blocked for more than 166 seconds. [ 1400.708675][ T29] Not tainted syzkaller #0 [ 1400.714100][ T29] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1400.723576][ T29] task:syz.6.29113 state:D stack:28488 pid:5998 ppid:667 flags:0x00004004 [ 1400.733434][ T29] Call Trace: [ 1400.736749][ T29] [ 1400.739697][ T29] __schedule+0xbe2/0x14b0 [ 1400.744180][ T29] ? release_firmware_map_entry+0x190/0x190 [ 1400.750099][ T29] ? __kasan_check_write+0x14/0x20 [ 1400.755272][ T29] ? _raw_spin_lock_irq+0x95/0xf0 [ 1400.760581][ T29] ? __cfi__raw_spin_lock_irq+0x10/0x10 [ 1400.766235][ T29] schedule+0xbd/0x170 [ 1400.770437][ T29] schedule_preempt_disabled+0x13/0x20 [ 1400.775914][ T29] rwsem_down_read_slowpath+0x8e2/0x15c0 [ 1400.781545][ T29] ? down_write_killable+0x40/0x40 [ 1400.786678][ T29] ? __kasan_check_write+0x14/0x20 [ 1400.791783][ T29] ? __cfi_do_futex+0x10/0x10 [ 1400.796468][ T29] ? downgrade_write+0x2d0/0x370 [ 1400.801412][ T29] ? __kasan_check_write+0x14/0x20 [ 1400.806670][ T29] down_read+0x9c/0xf0 [ 1400.810753][ T29] ? __cfi_down_read+0x10/0x10 [ 1400.815523][ T29] ? futex_exit_release+0x119/0x1e0 [ 1400.821271][ T29] ? sync_mm_rss+0x22a/0x280 [ 1400.825870][ T29] do_exit+0x8fc/0x2850 [ 1400.830058][ T29] ? __schedule+0xbea/0x14b0 [ 1400.834661][ T29] ? __cfi_do_exit+0x10/0x10 [ 1400.839275][ T29] ? plist_check_list+0x255/0x270 [ 1400.844473][ T29] ? _raw_spin_lock+0x94/0xf0 [ 1400.849161][ T29] ? __kasan_check_write+0x14/0x20 [ 1400.854350][ T29] ? _raw_spin_lock_irq+0x95/0xf0 [ 1400.859464][ T29] ? __cfi__raw_spin_lock_irq+0x10/0x10 [ 1400.865026][ T29] do_group_exit+0x21b/0x2e0 [ 1400.869704][ T29] ? __kasan_check_write+0x14/0x20 [ 1400.874904][ T29] ? recalc_sigpending+0x180/0x1c0 [ 1400.880198][ T29] get_signal+0x167c/0x1700 [ 1400.884752][ T29] ? __cfi_get_signal+0x10/0x10 [ 1400.889651][ T29] arch_do_signal_or_restart+0xd1/0x11c0 [ 1400.897601][ T29] ? do_futex+0x2e2/0x430 [ 1400.901932][ T29] ? memcpy+0x56/0x70 [ 1400.906070][ T29] ? __cfi_do_futex+0x10/0x10 [ 1400.910774][ T29] ? __cfi_arch_do_signal_or_restart+0x10/0x10 [ 1400.917158][ T29] ? __se_sys_futex+0x136/0x310 [ 1400.924984][ T29] exit_to_user_mode_loop+0x7a/0xb0 [ 1400.932628][ T29] exit_to_user_mode_prepare+0x87/0xd0 [ 1400.938097][ T29] syscall_exit_to_user_mode+0x1a/0x30 [ 1400.943637][ T29] do_syscall_64+0x58/0xa0 [ 1400.948154][ T29] ? clear_bhb_loop+0x30/0x80 [ 1400.952833][ T29] ? clear_bhb_loop+0x30/0x80 [ 1400.957550][ T29] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1400.963638][ T29] RIP: 0033:0x7f18de99df99 [ 1400.968075][ T29] RSP: 002b:00007f18df8fb0e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 1400.976655][ T29] RAX: fffffffffffffe00 RBX: 00007f18dec26098 RCX: 00007f18de99df99 [ 1400.984723][ T29] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f18dec26098 [ 1400.992809][ T29] RBP: 00007f18dec26090 R08: 0000000000000000 R09: 0000000000000000 [ 1401.000968][ T29] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1401.009216][ T29] R13: 00007f18dec26128 R14: 00007ffcc05f5380 R15: 00007ffcc05f5468 [ 1401.017867][ T29] [ 1401.024712][ T29] INFO: task syz.9.30669:9547 blocked for more than 125 seconds. [ 1401.032469][ T29] Not tainted syzkaller #0 [ 1401.039357][ T29] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1401.048849][ T29] task:syz.9.30669 state:D stack:26024 pid:9547 ppid:8188 flags:0x00004004 [ 1401.058304][ T29] Call Trace: [ 1401.061691][ T29] [ 1401.064835][ T29] __schedule+0xbe2/0x14b0 [ 1401.069335][ T29] ? release_firmware_map_entry+0x190/0x190 [ 1401.075358][ T29] ? __kasan_check_write+0x14/0x20 [ 1401.080527][ T29] ? _raw_spin_lock_irq+0x95/0xf0 [ 1401.085751][ T29] schedule+0xbd/0x170 [ 1401.089969][ T29] io_schedule+0x84/0xe0 [ 1401.094224][ T29] folio_wait_bit_common+0x6ba/0x8a0 [ 1401.099533][ T29] ? folio_wait_bit+0x30/0x30 [ 1401.104304][ T29] ? __cfi_wake_page_function+0x10/0x10 [ 1401.109944][ T29] ? xas_start+0x31d/0x3e0 [ 1401.114646][ T29] ? xas_load+0x394/0x3c0 [ 1401.119001][ T29] __filemap_get_folio+0x4ac/0xa70 [ 1401.124167][ T29] ? __cfi___filemap_get_folio+0x10/0x10 [ 1401.129893][ T29] ? finish_task_switch+0x16b/0x7c0 [ 1401.135118][ T29] ? switch_mm_irqs_off+0x2f0/0x960 [ 1401.140315][ T29] shmem_get_folio_gfp+0x2fb/0x20f0 [ 1401.145624][ T29] ? __cfi__raw_spin_lock+0x10/0x10 [ 1401.150906][ T29] shmem_fault+0x1ab/0x670 [ 1401.155330][ T29] ? futex_q_unlock+0x23/0x30 [ 1401.160006][ T29] ? futex_wait_setup+0x1f2/0x260 [ 1401.165707][ T29] ? __cfi_shmem_fault+0x10/0x10 [ 1401.170669][ T29] ? hrtimer_cancel+0x2d/0x60 [ 1401.175572][ T29] ? futex_wait+0x5f1/0x900 [ 1401.180176][ T29] do_fault+0xb2f/0x1e30 [ 1401.184425][ T29] ? pte_marker_clear+0x220/0x220 [ 1401.189689][ T29] handle_mm_fault+0x1363/0x26b0 [ 1401.194815][ T29] ? __cfi_handle_mm_fault+0x10/0x10 [ 1401.200289][ T29] ? lock_vma_under_rcu+0x3f8/0x4f0 [ 1401.205486][ T29] ? __x64_sys_futex+0x100/0x100 [ 1401.210523][ T29] ? xfd_validate_state+0x70/0x150 [ 1401.215722][ T29] do_user_addr_fault+0x900/0x1030 [ 1401.220973][ T29] ? debug_smp_processor_id+0x17/0x20 [ 1401.226377][ T29] exc_page_fault+0x51/0xb0 [ 1401.230928][ T29] asm_exc_page_fault+0x27/0x30 [ 1401.235950][ T29] RIP: 0033:0x7f62fcc675a5 [ 1401.240458][ T29] RSP: 002b:00007ffe8f1f3ee0 EFLAGS: 00010246 [ 1401.246617][ T29] RAX: 0000200000000040 RBX: 0000000000000008 RCX: 0000000000000000 [ 1401.254899][ T29] RDX: 0000000000000003 RSI: 0000000000000000 RDI: 000055556ec7e3d8 [ 1401.262908][ T29] RBP: 00007ffe8f1f4000 R08: 0000000000000000 R09: 0000000000000000 [ 1401.271324][ T29] R10: 0000000000000003 R11: 0000000000000000 R12: 00007ffe8f1f4040 [ 1401.279736][ T29] R13: 00007f62fd02609c R14: 0000000000123540 R15: 00007f62fd026090 [ 1401.287773][ T29] [ 1401.306315][ T29] NMI backtrace for cpu 0 [ 1401.310890][ T29] CPU: 0 PID: 29 Comm: khungtaskd Not tainted syzkaller #0 [ 1401.318100][ T29] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 1401.318770][T16319] netlink: 'syz.8.33364': attribute type 10 has an invalid length. [ 1401.328159][ T29] Call Trace: [ 1401.328172][ T29] [ 1401.328180][ T29] __dump_stack+0x21/0x24 [ 1401.328206][ T29] dump_stack_lvl+0x110/0x170 [ 1401.328222][ T29] ? __cfi_dump_stack_lvl+0x8/0x8 [ 1401.328239][ T29] ? rcu_preempt_deferred_qs_irqrestore+0x6af/0x960 [ 1401.340762][T16319] netlink: 32 bytes leftover after parsing attributes in process `syz.8.33364'. [ 1401.342944][ T29] dump_stack+0x15/0x24 [ 1401.377065][ T29] nmi_cpu_backtrace+0x2af/0x2c0 [ 1401.382225][ T29] ? rcu_read_unlock_special+0xb2/0x450 [ 1401.387842][ T29] ? __cfi_nmi_cpu_backtrace+0x10/0x10 [ 1401.393323][ T29] ? nmi_trigger_cpumask_backtrace+0xf6/0x3a0 [ 1401.399503][ T29] ? __cfi_nmi_raise_cpu_backtrace+0x10/0x10 [ 1401.405677][ T29] ? __cfi_nmi_raise_cpu_backtrace+0x10/0x10 [ 1401.405911][T16333] netlink: 4 bytes leftover after parsing attributes in process `syz.0.33365'. [ 1401.411700][ T29] nmi_trigger_cpumask_backtrace+0x16b/0x3a0 [ 1401.411735][ T29] arch_trigger_cpumask_backtrace+0x10/0x20 [ 1401.432593][ T29] watchdog+0xde1/0xf30 [ 1401.436900][ T29] ? __cfi_watchdog+0x10/0x10 [ 1401.441683][ T29] ? __kasan_check_read+0x11/0x20 [ 1401.446722][ T29] ? __kthread_parkme+0x13a/0x180 [ 1401.451766][ T29] kthread+0x281/0x320 [ 1401.456025][ T29] ? __cfi_watchdog+0x10/0x10 [ 1401.460724][ T29] ? __cfi_kthread+0x10/0x10 [ 1401.465368][ T29] ret_from_fork+0x1f/0x30 [ 1401.469935][ T29] [ 1401.473535][ T29] Sending NMI from CPU 0 to CPUs 1: [ 1401.479510][ C1] NMI backtrace for cpu 1 [ 1401.479525][ C1] CPU: 1 PID: 16335 Comm: syz.7.33371 Not tainted syzkaller #0 [ 1401.479543][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 1401.479553][ C1] RIP: 0010:in_lock_functions+0x1/0x20 [ 1401.479576][ C1] Code: df e8 63 74 61 00 e9 6b ff ff ff 00 00 cc cc 00 00 cc cc 00 00 cc cc 00 00 90 90 90 90 90 90 90 90 90 90 90 b8 dc 6f 7b 4a 55 <48> 89 e5 48 81 ff a8 f7 00 85 0f 93 c0 48 81 ff 4f 2d 01 85 0f 92 [ 1401.479591][ C1] RSP: 0018:ffffc900067376c8 EFLAGS: 00000046 [ 1401.479606][ C1] RAX: 0000000000000001 RBX: ffffffff8500fd2d RCX: ffffffff87b7b103 [ 1401.479619][ C1] RDX: ffffc900042a5000 RSI: 000000000005565a RDI: ffffffff8500fd2d [ 1401.479631][ C1] RBP: ffffc900067376f0 R08: ffff88810d1fc6a3 R09: 1ffff11021a3f8d4 [ 1401.479644][ C1] R10: dffffc0000000000 R11: ffffed1021a3f8d5 R12: dffffc0000000000 [ 1401.479657][ C1] R13: ffffc90006737820 R14: ffffc90006737720 R15: dffffc0000000000 [ 1401.479672][ C1] FS: 00007fa9e6c1d6c0(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000 [ 1401.479687][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1401.479699][ C1] CR2: 00002000004f6000 CR3: 0000000112475000 CR4: 00000000003506a0 [ 1401.479714][ C1] Call Trace: [ 1401.479719][ C1] [ 1401.479725][ C1] ? preempt_count_add+0x90/0x1b0 [ 1401.479744][ C1] _raw_spin_lock_irq+0x6d/0xf0 [ 1401.479764][ C1] ? __cfi__raw_spin_lock_irq+0x10/0x10 [ 1401.479783][ C1] ? blk_cgroup_congested+0x139/0x150 [ 1401.479912][ C1] ? __cgroup_throttle_swaprate+0x7a/0x130 [ 1401.479931][ C1] shmem_add_to_page_cache+0x67a/0xae0 [ 1401.479954][ C1] ? put_page+0xb0/0xb0 [ 1401.479973][ C1] ? do_user_addr_fault+0x9a5/0x1030 [ 1401.479995][ C1] shmem_get_folio_gfp+0xef9/0x20f0 [ 1401.480021][ C1] shmem_write_begin+0xea/0x2c0 [ 1401.480042][ C1] generic_perform_write+0x32d/0x740 [ 1401.480065][ C1] ? __cfi_generic_perform_write+0x10/0x10 [ 1401.480084][ C1] ? __cfi_file_update_time+0x10/0x10 [ 1401.480158][ C1] ? generic_write_checks_count+0x369/0x450 [ 1401.480181][ C1] __generic_file_write_iter+0x17a/0x230 [ 1401.480200][ C1] generic_file_write_iter+0xae/0x310 [ 1401.480219][ C1] vfs_write+0x5ef/0xd00 [ 1401.480235][ C1] ? __cfi_vfs_write+0x10/0x10 [ 1401.480250][ C1] ? __cfi_mutex_lock+0x10/0x10 [ 1401.480275][ C1] ? __fdget_pos+0x2cd/0x380 [ 1401.480290][ C1] ? ksys_write+0x70/0x260 [ 1401.480306][ C1] ksys_write+0x14a/0x260 [ 1401.480321][ C1] ? __cfi_ksys_write+0x10/0x10 [ 1401.480337][ C1] ? fpregs_restore_userregs+0x128/0x260 [ 1401.480356][ C1] __x64_sys_write+0x7b/0x90 [ 1401.480372][ C1] x64_sys_call+0x27b/0x9a0 [ 1401.480391][ C1] do_syscall_64+0x4c/0xa0 [ 1401.480411][ C1] ? clear_bhb_loop+0x30/0x80 [ 1401.480424][ C1] ? clear_bhb_loop+0x30/0x80 [ 1401.480439][ C1] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1401.480462][ C1] RIP: 0033:0x7fa9e5d9df99 [ 1401.480476][ C1] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1401.480495][ C1] RSP: 002b:00007fa9e6c1d028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1401.480511][ C1] RAX: ffffffffffffffda RBX: 00007fa9e6025fa0 RCX: 00007fa9e5d9df99 [ 1401.480523][ C1] RDX: 000000000208e24b RSI: 0000200000000040 RDI: 0000000000000003 [ 1401.480533][ C1] RBP: 00007fa9e5e34ec4 R08: 0000000000000000 R09: 0000000000000000 [ 1401.480544][ C1] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1401.480554][ C1] R13: 00007fa9e6026038 R14: 00007fa9e6025fa0 R15: 00007ffd9da71d28 [ 1401.480569][ C1] [ 1401.881943][T16340] tmpfs: Unknown parameter 'usrquota_block_hardlimit' [ 1401.890821][T16340] configfs-gadget.g1 gadget.0: afunc_bind:1242 Error! [ 1401.897853][T16340] udc dummy_udc.0: failed to start g1: -19 [ 1401.904334][T16340] UDC core: g1: couldn't find an available UDC or it's busy [ 1401.938843][T16349] loop8: detected capacity change from 0 to 16 [ 1401.948393][T16349] erofs: (device loop8): mounted with root inode @ nid 36. [ 1401.951609][T16346] bridge0: port 3(vlan2) entered blocking state [ 1401.976291][T16346] bridge0: port 3(vlan2) entered disabled state [ 1402.046679][T16355] loop8: detected capacity change from 0 to 16 [ 1402.056141][T16355] erofs: (device loop8): mounted with root inode @ nid 36. [ 1402.072095][T16355] erofs: (device loop8): z_erofs_extent_lookback: invalid lookback distance 0 @ nid 89 [ 1402.082964][T16355] erofs: (device loop8): z_erofs_readahead: readahead error at page 17 @ nid 89 [ 1402.092246][T16355] erofs: (device loop8): z_erofs_extent_lookback: invalid lookback distance 0 @ nid 89 [ 1402.102354][T16355] erofs: (device loop8): z_erofs_readahead: readahead error at page 16 @ nid 89 [ 1402.111642][T16355] erofs: (device loop8): z_erofs_readahead: readahead error at page 4 @ nid 89 [ 1402.121156][T16355] erofs: (device loop8): z_erofs_readahead: readahead error at page 3 @ nid 89 [ 1402.130678][T16355] syz.8.33378: attempt to access beyond end of device [ 1402.130678][T16355] loop8: rw=524288, sector=34359738360, nr_sectors = 8 limit=16 [ 1402.145194][T16355] syz.8.33378: attempt to access beyond end of device [ 1402.145194][T16355] loop8: rw=524288, sector=96, nr_sectors = 40 limit=16 [ 1402.159034][T16355] syz.8.33378: attempt to access beyond end of device [ 1402.159034][T16355] loop8: rw=524288, sector=8, nr_sectors = 80 limit=16 [ 1402.173268][T16374] syz.8.33378: attempt to access beyond end of device [ 1402.173268][T16374] loop8: rw=0, sector=8, nr_sectors = 16 limit=16 [ 1402.173284][T16355] erofs: (device loop8): z_erofs_read_folio: failed to read, err [-117] [ 1402.254593][T16355] erofs: (device loop8): z_erofs_read_folio: failed to read, err [-117] [ 1402.263644][T16374] syz.8.33378: attempt to access beyond end of device [ 1402.263644][T16374] loop8: rw=0, sector=16, nr_sectors = 8 limit=16 [ 1402.300834][T16355] erofs: (device loop8): z_erofs_read_folio: failed to read, err [-117] [ 1402.310504][T16374] syz.8.33378: attempt to access beyond end of device [ 1402.310504][T16374] loop8: rw=0, sector=16, nr_sectors = 8 limit=16 [ 1402.324739][T16355] erofs: (device loop8): z_erofs_read_folio: failed to read, err [-117] [ 1402.333462][T16374] syz.8.33378: attempt to access beyond end of device [ 1402.333462][T16374] loop8: rw=0, sector=16, nr_sectors = 8 limit=16 [ 1402.580444][T16411] netlink: 5 bytes leftover after parsing attributes in process `syz.8.33405'. [ 1402.619246][T16414] set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 1403.217625][T16426] tmpfs: Unsupported parameter 'mpol' [ 1403.366735][T16442] overlayfs: failed to clone upperpath [ 1403.724275][T16508] netlink: 24 bytes leftover after parsing attributes in process `syz.0.33449'. [ 1403.780783][T16515] loop5: detected capacity change from 0 to 128 [ 1403.808356][T16515] FAT-fs (loop5): bread failed, FSINFO block (sector = 18433) [ 1403.823863][T16527] overlayfs: failed to clone lowerpath [ 1403.887609][T16535] netlink: 24 bytes leftover after parsing attributes in process `syz.8.33461'. [ 1404.068945][T16550] loop5: detected capacity change from 0 to 256 [ 1405.467466][T16585] netlink: 4 bytes leftover after parsing attributes in process `syz.0.33484'. [ 1405.604089][T16617] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 1406.222992][T12651] usb 6-1: new full-speed USB device number 3 using dummy_hcd [ 1406.381533][T16683] overlayfs: failed to clone lowerpath [ 1406.434175][T12651] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 512, setting to 64 [ 1406.450660][T12651] usb 6-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid maxpacket 512, setting to 64 [ 1406.462456][T12651] usb 6-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid maxpacket 512, setting to 64 [ 1406.474913][T12651] usb 6-1: config 1 interface 1 altsetting 1 has 2 endpoint descriptors, different from the interface descriptor's value: 19 [ 1406.496572][T12651] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1406.519920][T16698] netlink: 20 bytes leftover after parsing attributes in process `syz.0.33535'. [ 1406.529732][T12651] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1406.546710][T12651] usb 6-1: Product: syz [ 1406.555795][T12651] usb 6-1: Manufacturer: syz [ 1406.561558][T12651] usb 6-1: SerialNumber: syz [ 1406.577886][T16632] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 1406.776615][T16712] netlink: 4 bytes leftover after parsing attributes in process `syz.0.33542'. [ 1406.849172][T16632] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 1406.857557][T16632] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 1406.923799][T16725] netlink: 104 bytes leftover after parsing attributes in process `syz.4.33548'. [ 1407.203258][ T28] kauditd_printk_skb: 24 callbacks suppressed [ 1407.203276][ T28] audit: type=1400 audit(1326.893:16624): avc: denied { read } for pid=16758 comm="syz.8.33563" name="loop-control" dev="devtmpfs" ino=117 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 1407.239868][ T28] audit: type=1400 audit(1326.893:16625): avc: denied { open } for pid=16758 comm="syz.8.33563" path="/dev/loop-control" dev="devtmpfs" ino=117 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 1407.268496][ T28] audit: type=1400 audit(1326.893:16626): avc: denied { ioctl } for pid=16758 comm="syz.8.33563" path="/dev/loop-control" dev="devtmpfs" ino=117 ioctlcmd=0x4c80 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 1407.431035][T16772] device ip6gretap1 entered promiscuous mode [ 1407.528002][T16632] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 1407.536582][T16632] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 1407.997927][ T28] audit: type=1400 audit(1327.548:16627): avc: denied { ioctl } for pid=16805 comm="syz.8.33583" path="socket:[327810]" dev="sockfs" ino=327810 ioctlcmd=0x6e80 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 1408.047377][T16810] tipc: Enabling of bearer rejected, failed to enable media [ 1408.271198][T12651] cdc_ncm 6-1:1.0: failed to get mac address [ 1408.278766][T12651] cdc_ncm 6-1:1.0: bind() failure [ 1408.287613][T12651] cdc_ncm: probe of 6-1:1.1 failed with error -71 [ 1408.305688][T12651] cdc_mbim: probe of 6-1:1.1 failed with error -71 [ 1408.333513][T16828] 9pnet_fd: Insufficient options for proto=fd [ 1408.701435][T16804] 9pnet_fd: p9_fd_create_tcp (16804): problem connecting socket to 127.0.0.1 [ 1408.737624][T12651] usb 6-1: USB disconnect, device number 3 [ 1409.269755][T10317] usb 9-1: new full-speed USB device number 15 using dummy_hcd [ 1409.466188][T10317] usb 9-1: unable to get BOS descriptor or descriptor too short [ 1409.476258][T10317] usb 9-1: not running at top speed; connect to a high speed hub [ 1409.486897][T10317] usb 9-1: config 2 has an invalid interface number: 99 but max is 0 [ 1409.495013][T10317] usb 9-1: config 2 has no interface number 0 [ 1409.504052][T10317] usb 9-1: config 2 interface 99 has no altsetting 0 [ 1409.531025][T10317] usb 9-1: New USB device found, idVendor=0923, idProduct=010f, bcdDevice=c5.7c [ 1409.540217][T10317] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1409.567046][T10317] usb 9-1: Product: syz [ 1409.571668][T10317] usb 9-1: Manufacturer: syz [ 1409.581170][T10317] usb 9-1: SerialNumber: syz [ 1409.767223][T16915] netlink: 8 bytes leftover after parsing attributes in process `syz.4.33626'. [ 1409.819602][T10317] usb 9-1: USB disconnect, device number 15 [ 1410.039288][ T1446] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 1410.234304][ T1446] usb 6-1: Using ep0 maxpacket: 16 [ 1410.241320][ T1446] usb 6-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0xF3, skipping [ 1410.253633][ T1446] usb 6-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 1410.263140][ T1446] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1410.271208][ T1446] usb 6-1: Product: syz [ 1410.275533][ T1446] usb 6-1: Manufacturer: syz [ 1410.280185][ T1446] usb 6-1: SerialNumber: syz [ 1410.285564][ T1446] usb 6-1: config 0 descriptor?? [ 1410.826689][ T28] audit: type=1400 audit(1330.169:16628): avc: denied { create } for pid=16947 comm="syz.7.33639" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 1411.589291][T16998] netlink: 8 bytes leftover after parsing attributes in process `syz.8.33658'. [ 1411.784696][ T28] audit: type=1400 audit(1331.129:16629): avc: denied { create } for pid=17046 comm="syz.0.33681" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 1411.822822][T17051] netlink: 8 bytes leftover after parsing attributes in process `syz.0.33683'. [ 1411.982198][T12648] usb 9-1: new high-speed USB device number 16 using dummy_hcd [ 1412.056649][ T28] audit: type=1326 audit(1331.378:16630): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17086 comm="syz.4.33700" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcd0fd9df99 code=0x7ffc0000 [ 1412.082140][ T28] audit: type=1326 audit(1331.378:16631): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17086 comm="syz.4.33700" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcd0fd9df99 code=0x7ffc0000 [ 1412.107196][ T28] audit: type=1326 audit(1331.378:16632): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17086 comm="syz.4.33700" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcd0fd9df99 code=0x7ffc0000 [ 1412.133869][ T28] audit: type=1326 audit(1331.378:16633): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17086 comm="syz.4.33700" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcd0fd9df99 code=0x7ffc0000 [ 1412.195991][T12648] usb 9-1: Using ep0 maxpacket: 16 [ 1412.202778][T12648] usb 9-1: unable to get BOS descriptor or descriptor too short [ 1412.212027][T12648] usb 9-1: config 7 has an invalid descriptor of length 0, skipping remainder of the config [ 1412.222769][T12648] usb 9-1: config 7 has 1 interface, different from the descriptor's value: 4 [ 1412.233915][T12648] usb 9-1: New USB device found, idVendor=0424, idProduct=cf30, bcdDevice=c7.5a [ 1412.244422][T17099] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=17099 comm=syz.7.33703 [ 1412.257326][T12648] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1412.269289][T12648] usb 9-1: Product: syz [ 1412.276373][T12648] usb 9-1: Manufacturer: syz [ 1412.281178][T12648] usb 9-1: SerialNumber: syz [ 1412.363063][T17105] netlink: 'syz.4.33708': attribute type 12 has an invalid length. [ 1412.371312][T17105] netlink: 'syz.4.33708': attribute type 29 has an invalid length. [ 1412.379494][T17105] netlink: 148 bytes leftover after parsing attributes in process `syz.4.33708'. [ 1412.509219][T17114] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=51 sclass=netlink_audit_socket pid=17114 comm=syz.7.33712 [ 1412.519526][T12648] usb 9-1: USB disconnect, device number 16 [ 1412.523185][T17114] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=64 sclass=netlink_audit_socket pid=17114 comm=syz.7.33712 [ 1412.777124][T17132] netlink: 68 bytes leftover after parsing attributes in process `syz.0.33720'. [ 1412.959912][ T1446] usb 6-1: USB disconnect, device number 4 [ 1413.089866][T17155] netlink: 4 bytes leftover after parsing attributes in process `syz.5.33731'. [ 1413.381900][T17168] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 1413.389496][T17168] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 1413.455748][T17183] netlink: 24 bytes leftover after parsing attributes in process `syz.8.33742'. [ 1413.523925][T17190] netlink: 8 bytes leftover after parsing attributes in process `syz.0.33745'. [ 1414.911100][T17250] netlink: 28 bytes leftover after parsing attributes in process `syz.0.33775'. [ 1415.458120][T12998] usb 9-1: new high-speed USB device number 17 using dummy_hcd [ 1415.666740][T12998] usb 9-1: New USB device found, idVendor=04fc, idProduct=504a, bcdDevice=43.02 [ 1415.675981][T12998] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1415.684340][T12998] usb 9-1: Product: syz [ 1415.688886][T12998] usb 9-1: Manufacturer: syz [ 1415.693549][T12998] usb 9-1: SerialNumber: syz [ 1415.702812][T12998] usb 9-1: config 0 descriptor?? [ 1415.808821][ T28] kauditd_printk_skb: 5 callbacks suppressed [ 1415.808836][ T28] audit: type=1400 audit(1334.838:16639): avc: denied { setopt } for pid=17326 comm="syz.7.33810" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 1415.868069][ T28] audit: type=1400 audit(1334.884:16640): avc: denied { write } for pid=17326 comm="syz.7.33810" path="socket:[332038]" dev="sockfs" ino=332038 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 1415.943177][T17344] device syzkaller0 entered promiscuous mode [ 1416.022137][ T28] audit: type=1400 audit(1335.022:16641): avc: denied { create } for pid=17360 comm="syz.5.33821" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 1416.254456][T17397] netlink: 12 bytes leftover after parsing attributes in process `syz.0.33829'. [ 1417.569624][T17472] 9pnet_fd: Insufficient options for proto=fd [ 1418.422681][T12998] usb 9-1: USB disconnect, device number 17 [ 1418.872345][T12998] usb 9-1: new high-speed USB device number 18 using dummy_hcd [ 1419.053041][T17579] netlink: 32 bytes leftover after parsing attributes in process `syz.0.33924'. [ 1419.154037][T12998] usb 9-1: Using ep0 maxpacket: 32 [ 1419.166611][T12998] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1419.191491][T12998] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1419.216204][T12998] usb 9-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 1419.229842][T12998] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1419.327818][T12998] usb 9-1: config 0 descriptor?? [ 1419.333939][T12998] hub 9-1:0.0: USB hub found [ 1419.498576][T17604] bridge0: port 1(bridge_slave_0) entered blocking state [ 1419.506707][T17604] bridge0: port 1(bridge_slave_0) entered disabled state [ 1419.515671][T17604] device bridge_slave_0 entered promiscuous mode [ 1419.527825][T17604] bridge0: port 2(bridge_slave_1) entered blocking state [ 1419.535239][T17604] bridge0: port 2(bridge_slave_1) entered disabled state [ 1419.545205][T17604] device bridge_slave_1 entered promiscuous mode [ 1419.552054][T12998] hub 9-1:0.0: 1 port detected [ 1419.759648][T17604] bridge0: port 2(bridge_slave_1) entered blocking state [ 1419.766970][T17604] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1419.774400][T17604] bridge0: port 1(bridge_slave_0) entered blocking state [ 1419.781809][T17604] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1419.898751][T11562] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1419.909220][ T28] audit: type=1400 audit(1338.621:16642): avc: denied { read append } for pid=17635 comm="syz.5.33942" name="ptp0" dev="devtmpfs" ino=264 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 1419.947815][T11562] bridge0: port 1(bridge_slave_0) entered disabled state [ 1419.973364][T11562] bridge0: port 2(bridge_slave_1) entered disabled state [ 1420.082338][T12998] hub 9-1:0.0: hub_hub_status failed (err = -71) [ 1420.089182][T12998] hub 9-1:0.0: config failed, can't get hub status (err -71) [ 1420.097131][ T28] audit: type=1400 audit(1338.639:16643): avc: denied { open } for pid=17635 comm="syz.5.33942" path="/dev/ptp0" dev="devtmpfs" ino=264 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 1420.130882][T11562] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1420.141194][T12998] usbhid 9-1:0.0: can't add hid device: -71 [ 1420.147171][T12998] usbhid: probe of 9-1:0.0 failed with error -71 [ 1420.165811][T11562] bridge0: port 1(bridge_slave_0) entered blocking state [ 1420.173070][T11562] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1420.270245][T11562] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1420.289546][T11562] bridge0: port 2(bridge_slave_1) entered blocking state [ 1420.296852][T11562] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1420.350782][T17648] 9pnet_fd: Insufficient options for proto=fd [ 1420.475715][ T28] audit: type=1400 audit(1339.138:16644): avc: denied { write } for pid=17655 comm="syz.8.33951" path="socket:[333866]" dev="sockfs" ino=333866 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 1420.660336][ T1446] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 1420.761994][T11561] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1420.770514][T11561] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1420.779987][T11561] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1420.788279][T11561] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1420.805212][T11561] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1420.813799][T11561] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1420.825759][T11561] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1420.834457][T11561] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1420.842623][T11561] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1420.850797][T11561] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1420.861887][T17604] device veth0_vlan entered promiscuous mode [ 1420.872393][T11561] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1420.877032][ T1446] usb 6-1: Using ep0 maxpacket: 16 [ 1420.880827][T11561] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1420.886836][ T1446] usb 6-1: config 1 has an invalid interface number: 193 but max is 0 [ 1420.902708][ T1446] usb 6-1: config 1 has no interface number 0 [ 1420.904154][T17604] device veth1_macvtap entered promiscuous mode [ 1420.908808][ T1446] usb 6-1: config 1 interface 193 has no altsetting 0 [ 1420.922947][T11561] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 1420.930687][T11561] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1420.940068][T11561] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1420.941328][ T1446] usb 6-1: New USB device found, idVendor=0a5c, idProduct=2033, bcdDevice= 3.b3 [ 1420.951899][T11561] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1420.957457][ T1446] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1420.966389][T11561] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1420.973627][ T1446] usb 6-1: Product: syz [ 1420.986070][ T1446] usb 6-1: Manufacturer: syz [ 1420.990819][ T1446] usb 6-1: SerialNumber: syz [ 1421.018273][T12998] usb 9-1: USB disconnect, device number 18 [ 1421.073327][T11585] device bridge_slave_1 left promiscuous mode [ 1421.080095][T11585] bridge0: port 2(bridge_slave_1) entered disabled state [ 1421.088139][T11585] device bridge_slave_0 left promiscuous mode [ 1421.094496][T11585] bridge0: port 1(bridge_slave_0) entered disabled state [ 1421.102515][T11585] device veth1_macvtap left promiscuous mode [ 1421.108887][T11585] device veth0_vlan left promiscuous mode [ 1421.226235][ T1446] usb 6-1: USB disconnect, device number 5 [ 1421.363391][T17718] futex_wake_op: syz.0.33974 tries to shift op by 144; fix this program [ 1421.408871][T12998] usb 9-1: new low-speed USB device number 19 using dummy_hcd [ 1421.460460][T17740] netlink: 24 bytes leftover after parsing attributes in process `syz.0.33984'. [ 1421.615559][T12998] usb 9-1: config 0 interface 0 altsetting 31 endpoint 0x81 has invalid maxpacket 1024, setting to 8 [ 1421.629213][T12998] usb 9-1: config 0 interface 0 altsetting 31 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1421.642288][T12998] usb 9-1: config 0 interface 0 has no altsetting 0 [ 1421.649095][T12998] usb 9-1: New USB device found, idVendor=5543, idProduct=0003, bcdDevice= 0.00 [ 1421.658728][T12998] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1421.667707][T12998] usb 9-1: config 0 descriptor?? [ 1421.673147][T17674] raw-gadget.1 gadget.8: fail, usb_ep_enable returned -22 [ 1421.835786][ T28] audit: type=1400 audit(1340.392:16645): avc: denied { shutdown } for pid=17763 comm="syz.5.33996" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 1422.117998][T12998] hid (null): unknown global tag 0xe [ 1422.124501][T12998] uclogic 0003:5543:0003.0010: unknown main item tag 0x5 [ 1422.131799][T12998] uclogic 0003:5543:0003.0010: unknown global tag 0xe [ 1422.139305][T12998] uclogic 0003:5543:0003.0010: item 0 2 1 14 parsing failed [ 1422.146987][T12998] uclogic 0003:5543:0003.0010: parse failed [ 1422.153060][T12998] uclogic: probe of 0003:5543:0003.0010 failed with error -22 [ 1422.342216][T17674] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1422.351583][T17674] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1422.366466][T12648] usb 9-1: USB disconnect, device number 19 [ 1422.623530][ T28] audit: type=1326 audit(1341.121:16646): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17836 comm="syz.7.34032" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa9e5d9df99 code=0x7ffc0000 [ 1422.661800][ T28] audit: type=1326 audit(1341.121:16647): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17836 comm="syz.7.34032" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa9e5d9df99 code=0x7ffc0000 [ 1422.686803][ T28] audit: type=1326 audit(1341.121:16648): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17836 comm="syz.7.34032" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa9e5d9df99 code=0x7ffc0000 [ 1422.712918][ T28] audit: type=1326 audit(1341.121:16649): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17836 comm="syz.7.34032" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa9e5d9df99 code=0x7ffc0000 [ 1422.738619][ T28] audit: type=1326 audit(1341.121:16650): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17836 comm="syz.7.34032" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=102 compat=0 ip=0x7fa9e5d9df99 code=0x7ffc0000 [ 1422.769499][ T28] audit: type=1326 audit(1341.121:16651): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17836 comm="syz.7.34032" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa9e5d9df99 code=0x7ffc0000 [ 1422.795238][ T28] audit: type=1326 audit(1341.121:16652): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17836 comm="syz.7.34032" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa9e5d9df99 code=0x7ffc0000 [ 1422.820701][ T28] audit: type=1326 audit(1341.121:16653): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17836 comm="syz.7.34032" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa9e5d9df99 code=0x7ffc0000 [ 1422.856285][ T28] audit: type=1326 audit(1341.121:16654): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17836 comm="syz.7.34032" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fa9e5d5e7ce code=0x7ffc0000 [ 1423.088680][T17895] input: syz1 as /devices/virtual/input/input37 [ 1424.147338][T17976] netlink: 'syz.0.34094': attribute type 3 has an invalid length. [ 1424.360279][T17987] netlink: 'syz.7.34099': attribute type 12 has an invalid length. [ 1424.368384][T17987] netlink: 'syz.7.34099': attribute type 29 has an invalid length. [ 1424.376386][T17987] netlink: 148 bytes leftover after parsing attributes in process `syz.7.34099'. [ 1424.503441][T10317] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 1424.703910][T10317] usb 1-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 1424.719658][T10317] usb 1-1: config 1 has an invalid descriptor of length 255, skipping remainder of the config [ 1424.766323][T18000] futex_wake_op: syz.5.34104 tries to shift op by 144; fix this program [ 1424.777659][T18000] netlink: 16 bytes leftover after parsing attributes in process `syz.5.34104'. [ 1424.793593][T10317] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 1424.841354][T18004] overlayfs: failed to clone lowerpath [ 1424.848808][T10317] usb 1-1: config 1 interface 0 altsetting 0 has an invalid endpoint with address 0xFF, skipping [ 1424.885539][T10317] usb 1-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 1424.915191][T10317] usb 1-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 1424.950113][T10317] usb 1-1: Product: syz [ 1424.969385][T10317] usb 1-1: Manufacturer: syz [ 1424.984373][T17978] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 1424.996428][T10317] cdc_wdm 1-1:1.0: skipping garbage [ 1425.006539][T10317] cdc_wdm 1-1:1.0: skipping garbage [ 1425.017255][T10317] cdc_wdm: probe of 1-1:1.0 failed with error -22 [ 1425.191184][T10317] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 1425.221552][T18010] netlink: 'syz.8.34110': attribute type 12 has an invalid length. [ 1425.229822][T18010] netlink: 'syz.8.34110': attribute type 29 has an invalid length. [ 1425.236255][T12998] usb 1-1: USB disconnect, device number 6 [ 1425.237777][T18010] netlink: 148 bytes leftover after parsing attributes in process `syz.8.34110'. [ 1425.483122][T10317] usb 6-1: Using ep0 maxpacket: 32 [ 1425.490481][T10317] usb 6-1: config 0 has an invalid interface number: 67 but max is 0 [ 1425.499758][T10317] usb 6-1: config 0 has no interface number 0 [ 1425.507735][T10317] usb 6-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 1425.517340][T10317] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1425.525359][T10317] usb 6-1: Product: syz [ 1425.530185][T10317] usb 6-1: Manufacturer: syz [ 1425.534867][T10317] usb 6-1: SerialNumber: syz [ 1425.545105][T10317] usb 6-1: config 0 descriptor?? [ 1425.553440][T10317] smsc95xx v2.0.0 [ 1425.764945][ T1446] usb 9-1: new high-speed USB device number 20 using dummy_hcd [ 1425.851049][T18044] 9pnet: Could not find request transport: rdma [ 1425.960208][ T1446] usb 9-1: Using ep0 maxpacket: 32 [ 1425.967823][ T1446] usb 9-1: unable to get BOS descriptor or descriptor too short [ 1425.980817][ T1446] usb 9-1: config 8 has an invalid interface number: 94 but max is 0 [ 1425.989019][ T1446] usb 9-1: config 8 has no interface number 0 [ 1425.995744][T10317] smsc95xx 6-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 1426.007167][ T1446] usb 9-1: config 8 interface 94 has no altsetting 0 [ 1426.014158][T10317] smsc95xx 6-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 1426.025110][ T1446] usb 9-1: New USB device found, idVendor=0458, idProduct=7003, bcdDevice=fc.62 [ 1426.034281][ T1446] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1426.043695][ T1446] usb 9-1: Product: syz [ 1426.048398][ T1446] usb 9-1: Manufacturer: syz [ 1426.053249][ T1446] usb 9-1: SerialNumber: syz [ 1426.176817][T12998] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 1426.372952][T12998] usb 1-1: config index 0 descriptor too short (expected 80, got 72) [ 1426.382784][T12998] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1426.391858][T12998] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1426.400385][T12998] usb 1-1: Product: syz [ 1426.404694][T12998] usb 1-1: Manufacturer: syz [ 1426.409282][T12998] usb 1-1: SerialNumber: syz [ 1426.717232][T18036] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1426.728474][T18036] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1427.328110][T10317] smsc95xx 6-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 1427.339096][T10317] smsc95xx: probe of 6-1:0.67 failed with error -71 [ 1427.347596][T10317] usb 6-1: USB disconnect, device number 6 [ 1427.461994][T18099] ================================================================== [ 1427.470120][T18099] BUG: KASAN: use-after-free in rcu_segcblist_enqueue+0x9c/0xb0 [ 1427.477868][T18099] Write of size 8 at addr ffff88814ccc5190 by task syz.4.34152/18099 [ 1427.486014][T18099] [ 1427.488335][T18099] CPU: 0 PID: 18099 Comm: syz.4.34152 Not tainted syzkaller #0 [ 1427.495890][T18099] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 1427.505972][T18099] Call Trace: [ 1427.509244][T18099] [ 1427.512343][T18099] __dump_stack+0x21/0x24 [ 1427.516678][T18099] dump_stack_lvl+0x110/0x170 [ 1427.521367][T18099] ? __cfi_dump_stack_lvl+0x8/0x8 [ 1427.526414][T18099] ? rcu_segcblist_enqueue+0x9c/0xb0 [ 1427.531902][T18099] print_address_description+0x71/0x200 [ 1427.537642][T18099] print_report+0x4a/0x60 [ 1427.541995][T18099] kasan_report+0x122/0x150 [ 1427.546625][T18099] ? rcu_segcblist_enqueue+0x9c/0xb0 [ 1427.551939][T18099] __asan_report_store8_noabort+0x17/0x20 [ 1427.557725][T18099] rcu_segcblist_enqueue+0x9c/0xb0 [ 1427.563148][T18099] call_rcu+0x554/0xf50 [ 1427.567330][T18099] ? __cfi_call_rcu+0x10/0x10 [ 1427.572032][T18099] ? __kasan_check_write+0x14/0x20 [ 1427.577431][T18099] ? selinux_inode_free_security+0x21f/0x230 [ 1427.583449][T18099] security_inode_free+0xc5/0xe0 [ 1427.588412][T18099] __destroy_inode+0x175/0x500 [ 1427.593204][T18099] evict+0x777/0x8c0 [ 1427.597293][T18099] ? proc_nr_inodes+0x2f0/0x2f0 [ 1427.602339][T18099] ? _raw_spin_lock+0x94/0xf0 [ 1427.607077][T18099] ? __cfi__raw_spin_lock+0x10/0x10 [ 1427.612481][T18099] ? __kasan_check_write+0x14/0x20 [ 1427.617622][T18099] iput+0x633/0x690 [ 1427.621451][T18099] dentry_unlink_inode+0x346/0x3f0 [ 1427.626678][T18099] __dentry_kill+0x46c/0x680 [ 1427.631299][T18099] dentry_kill+0xc0/0x2a0 [ 1427.635647][T18099] dput+0x42/0x80 [ 1427.639300][T18099] __fput+0x5c0/0x8f0 [ 1427.643301][T18099] ____fput+0x15/0x20 [ 1427.647310][T18099] task_work_run+0x1e1/0x250 [ 1427.651911][T18099] ? __cfi_task_work_run+0x10/0x10 [ 1427.657052][T18099] ? __cfi___close_range+0x10/0x10 [ 1427.662180][T18099] exit_to_user_mode_loop+0x9b/0xb0 [ 1427.667408][T18099] exit_to_user_mode_prepare+0x87/0xd0 [ 1427.673069][T18099] syscall_exit_to_user_mode+0x1a/0x30 [ 1427.678559][T18099] do_syscall_64+0x58/0xa0 [ 1427.682996][T18099] ? clear_bhb_loop+0x30/0x80 [ 1427.687788][T18099] ? clear_bhb_loop+0x30/0x80 [ 1427.692484][T18099] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1427.698613][T18099] RIP: 0033:0x7fcd0fd9df99 [ 1427.703259][T18099] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1427.723160][T18099] RSP: 002b:00007fff714b5a88 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 1427.731986][T18099] RAX: 0000000000000000 RBX: 00007fff714b5b70 RCX: 00007fcd0fd9df99 [ 1427.740021][T18099] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003 [ 1427.748061][T18099] RBP: 0000000000148830 R08: 0000000000000001 R09: 0000000000000000 [ 1427.756233][T18099] R10: 0000001b33920000 R11: 0000000000000246 R12: 00007fff714b5bb0 [ 1427.764227][T18099] R13: 00007fcd10025fac R14: 0000000000148863 R15: 00007fcd10025fa0 [ 1427.772232][T18099] [ 1427.775378][T18099] [ 1427.777727][T18099] Allocated by task 18100: [ 1427.782274][T18099] kasan_set_track+0x4b/0x70 [ 1427.786945][T18099] kasan_save_alloc_info+0x1f/0x30 [ 1427.792111][T18099] __kasan_kmalloc+0x95/0xb0 [ 1427.796877][T18099] __kmalloc+0xb4/0x1e0 [ 1427.801126][T18099] l2tp_session_create+0x38/0xbd0 [ 1427.806343][T18099] pppol2tp_connect+0xbf5/0x1640 [ 1427.811475][T18099] __sys_connect+0x3da/0x460 [ 1427.816169][T18099] __x64_sys_connect+0x7a/0x90 [ 1427.821101][T18099] x64_sys_call+0x88d/0x9a0 [ 1427.825705][T18099] do_syscall_64+0x4c/0xa0 [ 1427.830113][T18099] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1427.836005][T18099] [ 1427.838318][T18099] Freed by task 11562: [ 1427.842550][T18099] kasan_set_track+0x4b/0x70 [ 1427.847290][T18099] kasan_save_free_info+0x2b/0x40 [ 1427.852491][T18099] ____kasan_slab_free+0x132/0x180 [ 1427.857793][T18099] __kasan_slab_free+0x11/0x20 [ 1427.862834][T18099] slab_free_freelist_hook+0xc2/0x190 [ 1427.868310][T18099] __kmem_cache_free+0xb7/0x1b0 [ 1427.873169][T18099] kfree+0x6f/0xf0 [ 1427.876972][T18099] l2tp_session_put+0xaf/0x1a0 [ 1427.881737][T18099] l2tp_session_delete+0x3df/0x4d0 [ 1427.886869][T18099] l2tp_tunnel_del_work+0x199/0x410 [ 1427.892435][T18099] process_one_work+0x717/0xc30 [ 1427.897311][T18099] worker_thread+0xa4d/0x11d0 [ 1427.902224][T18099] kthread+0x281/0x320 [ 1427.906621][T18099] ret_from_fork+0x1f/0x30 [ 1427.911059][T18099] [ 1427.913385][T18099] Last potentially related work creation: [ 1427.919180][T18099] kasan_save_stack+0x3a/0x60 [ 1427.923861][T18099] __kasan_record_aux_stack+0xb6/0xc0 [ 1427.929265][T18099] kasan_record_aux_stack_noalloc+0xb/0x10 [ 1427.935122][T18099] call_rcu+0xcf/0xf50 [ 1427.939314][T18099] pppol2tp_release+0x1e3/0x2b0 [ 1427.944173][T18099] sock_close+0xc9/0x220 [ 1427.948665][T18099] __fput+0x1fd/0x8f0 [ 1427.952655][T18099] ____fput+0x15/0x20 [ 1427.956835][T18099] task_work_run+0x1e1/0x250 [ 1427.961514][T18099] exit_to_user_mode_loop+0x9b/0xb0 [ 1427.966741][T18099] exit_to_user_mode_prepare+0x87/0xd0 [ 1427.972207][T18099] syscall_exit_to_user_mode+0x1a/0x30 [ 1427.977773][T18099] do_syscall_64+0x58/0xa0 [ 1427.982198][T18099] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1427.988099][T18099] [ 1427.990420][T18099] Second to last potentially related work creation: [ 1427.997082][T18099] kasan_save_stack+0x3a/0x60 [ 1428.001784][T18099] __kasan_record_aux_stack+0xb6/0xc0 [ 1428.007293][T18099] kasan_record_aux_stack_noalloc+0xb/0x10 [ 1428.013098][T18099] kvfree_call_rcu+0x8b/0x7a0 [ 1428.017772][T18099] put_css_set_locked+0xa2f/0xa60 [ 1428.022873][T18099] cgroup_migrate_finish+0x155/0x300 [ 1428.028160][T18099] cgroup_apply_control+0x642/0x6d0 [ 1428.033358][T18099] cgroup_subtree_control_write+0xde5/0x13f0 [ 1428.039432][T18099] cgroup_file_write+0x2a2/0x590 [ 1428.044717][T18099] kernfs_fop_write_iter+0x307/0x470 [ 1428.050256][T18099] vfs_write+0x5ef/0xd00 [ 1428.054509][T18099] ksys_write+0x14a/0x260 [ 1428.059124][T18099] __x64_sys_write+0x7b/0x90 [ 1428.063896][T18099] x64_sys_call+0x27b/0x9a0 [ 1428.068594][T18099] do_syscall_64+0x4c/0xa0 [ 1428.073187][T18099] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1428.079243][T18099] [ 1428.081581][T18099] The buggy address belongs to the object at ffff88814ccc5000 [ 1428.081581][T18099] which belongs to the cache kmalloc-512 of size 512 [ 1428.095807][T18099] The buggy address is located 400 bytes inside of [ 1428.095807][T18099] 512-byte region [ffff88814ccc5000, ffff88814ccc5200) [ 1428.109349][T18099] [ 1428.111689][T18099] The buggy address belongs to the physical page: [ 1428.118136][T18099] page:ffffea0005333100 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x14ccc4 [ 1428.128386][T18099] head:ffffea0005333100 order:2 compound_mapcount:0 compound_pincount:0 [ 1428.137162][T18099] flags: 0x4000000000010200(slab|head|zone=1) [ 1428.143520][T18099] raw: 4000000000010200 ffffea0004ad5100 dead000000000002 ffff888100042f00 [ 1428.152100][T18099] raw: 0000000000000000 0000000000100010 00000001ffffffff 0000000000000000 [ 1428.162067][T18099] page dumped because: kasan: bad access detected [ 1428.168566][T18099] page_owner tracks the page as allocated [ 1428.174576][T18099] page last allocated via order 2, migratetype Unmovable, gfp_mask 0x1d20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC|__GFP_HARDWALL), pid 31121, tgid 31121 (syz-executor), ts 1082056803020, free_ts 1079815671666 [ 1428.198639][T18099] post_alloc_hook+0x1f5/0x210 [ 1428.203620][T18099] prep_new_page+0x1c/0x110 [ 1428.208132][T18099] get_page_from_freelist+0x2ca9/0x2d20 [ 1428.213684][T18099] __alloc_pages+0x1fa/0x610 [ 1428.218374][T18099] alloc_slab_page+0x6e/0xf0 [ 1428.223244][T18099] new_slab+0x98/0x3e0 [ 1428.227398][T18099] ___slab_alloc+0x70f/0xb70 [ 1428.232010][T18099] __slab_alloc+0x5e/0xa0 [ 1428.236464][T18099] __kmem_cache_alloc_node+0x204/0x2d0 [ 1428.242009][T18099] __kmalloc+0xa4/0x1e0 [ 1428.246158][T18099] alloc_workqueue+0x15b/0x13b0 [ 1428.251129][T18099] wg_newlink+0x363/0x790 [ 1428.255618][T18099] rtnl_newlink+0x14dc/0x20d0 [ 1428.260362][T18099] rtnetlink_rcv_msg+0xb28/0xde0 [ 1428.265311][T18099] netlink_rcv_skb+0x200/0x450 [ 1428.270104][T18099] rtnetlink_rcv+0x1c/0x20 [ 1428.274540][T18099] page last free stack trace: [ 1428.279214][T18099] free_unref_page_prepare+0x80c/0x820 [ 1428.284707][T18099] free_unref_page+0x93/0x530 [ 1428.289381][T18099] __folio_put+0xac/0xe0 [ 1428.293710][T18099] anon_pipe_buf_release+0x15f/0x1d0 [ 1428.299180][T18099] free_pipe_info+0x19e/0x2d0 [ 1428.304034][T18099] pipe_release+0x238/0x320 [ 1428.308554][T18099] __fput+0x1fd/0x8f0 [ 1428.312531][T18099] ____fput+0x15/0x20 [ 1428.316509][T18099] task_work_run+0x1e1/0x250 [ 1428.321193][T18099] exit_to_user_mode_loop+0x9b/0xb0 [ 1428.326422][T18099] exit_to_user_mode_prepare+0x87/0xd0 [ 1428.331881][T18099] syscall_exit_to_user_mode+0x1a/0x30 [ 1428.337425][T18099] do_syscall_64+0x58/0xa0 [ 1428.341859][T18099] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1428.347773][T18099] [ 1428.350088][T18099] Memory state around the buggy address: [ 1428.355800][T18099] ffff88814ccc5080: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1428.363872][T18099] ffff88814ccc5100: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1428.371931][T18099] >ffff88814ccc5180: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1428.380083][T18099] ^ [ 1428.384766][T18099] ffff88814ccc5200: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 1428.392931][T18099] ffff88814ccc5280: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 1428.401202][T18099] ================================================================== [ 1428.409435][T18099] Disabling lock debugging due to kernel taint [ 1429.144305][T12645] usb 1-1: USB disconnect, device number 7 [ 1429.506208][ T1446] usb 9-1: USB disconnect, device number 20