last executing test programs: 2m13.197809653s ago: executing program 32 (id=65): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x52, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x1c, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000740)='scsi_dispatch_cmd_start\x00', 0xffffffffffffffff, 0x0, 0xffffffffffffffff}, 0xd) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xb, &(0x7f00000002c0)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x94) r3 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000040)='kmem_cache_free\x00', r2, 0x0, 0x8}, 0xf) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x8, 0xf9, 0x7ffc1ffb}]}) epoll_wait(0xffffffffffffffff, 0x0, 0x0, 0x8) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000005700000095"], 0x0, 0x75, 0x0, 0x0, 0x40f00, 0x2}, 0x94) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="17000000000000000400000003"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x3, 0x2, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xff68}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000580)=ANY=[], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0xc2f00, 0x4d, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000980)='mm_page_free\x00', r5}, 0x18) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec850000007d000000850000000f00000095"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r7 = openat(0xffffffffffffffff, &(0x7f0000000600)='./cgroup.cpu/cgroup.procs\x00', 0xc5ec3, 0x145) flock(r7, 0x2) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000200)='kfree\x00', r6}, 0x18) openat(0xffffffffffffff9c, &(0x7f00000002c0)='./cgroup.cpu/cgroup.procs\x00', 0xe02, 0x1c0) openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000100)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYRES16=r3, @ANYRESHEX=r7], 0x48) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) 2m11.756847891s ago: executing program 1 (id=82): bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b0000000500000008040000cd00000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x12, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000"], 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x29, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)=ANY=[@ANYBLOB, @ANYRES32=r1, @ANYBLOB=' \x00', @ANYRES32=r1], 0x38}, 0x1, 0x0, 0x0, 0x2800}, 0x40084c0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) r3 = bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="ab020000", @ANYRES32=r2, @ANYRES32=r3, @ANYBLOB="02000000010000000200"/21], 0x50) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r0}, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sync() sync() 2m11.663433252s ago: executing program 1 (id=87): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000400000005"], 0x48) r1 = syz_open_dev$usbfs(0x0, 0x205, 0x2581) ioctl$USBDEVFS_DISCONNECT_CLAIM(r1, 0x8108551b, &(0x7f00000001c0)={0x7, 0x1, "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"}) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800"/15, @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000880)={{r0}, &(0x7f0000000800), &(0x7f0000000840)=r2}, 0x20) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000580)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r3}, 0x10) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x85, 0x7, 0x7ffc0001}]}) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f00000001c0)='kmem_cache_free\x00', 0xffffffffffffffff, 0x0, 0x7}, 0x18) r4 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f00000014c0)={0x1, &(0x7f0000000040)=[{0x2, 0x0, 0x4}]}) ptrace(0x4208, r4) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000001c0)='./file2\x00', 0x404, &(0x7f0000000200)={[{@init_itable_val={'init_itable', 0x3d, 0x7ff}}, {@jqfmt_vfsold}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x66}}, {@user_xattr}, {@nolazytime}, {@quota}]}, 0x3, 0x43d, &(0x7f0000002200)="$eJzs28tvG0UYAPBv7aRt+iChKo+mBQIFEfFImrSUHriAQOIAEhIcyjHkUYW6DWqCRKsIAkLliCpxRxyR+As4wQUBJySucEeVKpRLCyejtXcT27HzqlOH+veTtp3ZHWvm8+5nz+7EAXStofSfJOJgRPwREf3Van2Doep/t5cXJ/9ZXpxMolx++++k0u7W8uJk3jR/3YG80hNR+DyJY036nb9y9cJEqTR9OauPLlz8YHT+ytXnZy9OnJ8+P31p/OzZ06fGXjwz/sKm4ujZ4Hga163Bj+eOH3393etvTp67/t4v3yV5/A1xtMnQegefKpcrb1LS5k475VBNOdnoZLBrFLPc6a3kf38UazKpP177rKODA3ZUuVwuP9j68FIZuIcl0ekRAJ2Rf9Gn97/51nI2sK/t04+Ou/ly9QYojft2tlWP9EQha9PbcH/bTkMRcW7p36/TLXbmOQQAQJ0f0vnPc83mf4WofS50X7aGMhAR90fE4Yg4ExFHIuKBiErbhyLi4S3237hIsnb+U7ixrcA2KZ3/vZStbdXP//LZXwwUs9qhSvy9ycxsafpk9p4MR+/etD62Th8/vvr7l62O1c7/0i3tP58LZuO40bO3/jVTEwsTdxJzrZufRgz2NIs/WVkJSCLiaEQMbrOP2We+Pd7q2Mbxr6MN60zlbyKerp7/pWiIP5esvz45ui9K0ydH86tirV9/u/ZWq/7vKP42SM///qbX/0r8A0nteu381vu49ucXLe9ptnv970neqdv30cTCwuWxiD3JG9VB1+4fb2g3vto+jX/4RPP8Pxyr78SxiEgv4kci4tGIeCwb++MR8UREnFgn/p9fefL97ce/s9L4p7Z0/lcLe6JxT/NC8cJP39d1OrCV+NPzf7pSGs72bObzbzPj2t7VDAAAAP8/hYg4GElhZKVcKIyMVP+G/0jsL5Tm5heenZn78NJU9TcCA9FbyJ909dc8Dx3Lbuvz+nhD/VT23PirYl+lPjI5V5rqdPDQ5Q60yP/UX8VOjw7YcX6vBd1L/kP3kv/QveQ/dK8m+d/XiXEAd1+z7/9POjAO4O5ryH/LftBF3P9D95L/0L3kP3Sl+b7Y+EfyCgprClHYFcPICzO7Yxj3TqHTn0wAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADt8V8AAAD//5dn5s8=") 2m11.516726222s ago: executing program 1 (id=91): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300), 0x8800, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'dvmrp1\x00', 0x1}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x80400, 0x0) ioctl$TUNSETIFF(r1, 0x400454da, &(0x7f00000002c0)={'bond0\x00', 0x4000}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000050000000000000000001811", @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000100)={'nicvf0\x00', 0x1432}) r2 = socket(0x1e, 0x4, 0x0) r3 = socket(0x1e, 0x2, 0x0) setsockopt$packet_tx_ring(r3, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) setsockopt$packet_tx_ring(r2, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x0, 0x2}, 0x10) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002120207b1af8ff00000000bfa100000000000007010000b8ffffffb702000004000000b7030000000000de850000000400000095"], &(0x7f0000000680)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmmsg(r2, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x3514}], 0x1}}], 0x400000000000181, 0x9200000000000000) r4 = dup3(r3, r2, 0x0) recvmmsg(r4, &(0x7f0000000b40)=[{{&(0x7f0000000300)=@pppol2tpv3in6, 0x80, &(0x7f0000000100)=[{&(0x7f0000001c80)=""/231, 0xe7}, {&(0x7f0000000680)=""/161, 0xa1}, {&(0x7f0000000900)=""/136, 0x88}], 0x3, &(0x7f0000000580)=""/89, 0x59}, 0xe74}, {{&(0x7f0000000740)=@in={0x2, 0x0, @private}, 0x80, &(0x7f0000000280)=[{&(0x7f0000001c00)=""/71, 0x47}, {&(0x7f00000009c0)=""/164, 0xa4}], 0x2, &(0x7f0000004100)=""/4109, 0x100d}, 0x7}], 0x2, 0x40000001, 0x0) 2m10.988593136s ago: executing program 5 (id=66): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000700)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002d00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='kfree\x00', r0, 0x0, 0xfffffffffffffffd}, 0x18) lsm_get_self_attr(0x65, 0x0, &(0x7f00000000c0)=0xffffffffffffff26, 0x0) r1 = socket$inet6(0xa, 0x400000000001, 0x0) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x41, &(0x7f0000000180)=0x80000039f8, 0x4) sendmsg$AUDIT_GET_FEATURE(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x10, 0x3fb, 0x200, 0x70bd27, 0x25dfdbfd, "", ["", "", "", "", "", "", "", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x4008045}, 0x85) syz_clone(0x20008200, 0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000140)='ext2\x00', &(0x7f0000000080)='./file0\x00', 0x800000, &(0x7f0000000000), 0xfd, 0x477, &(0x7f0000000880)="$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") inotify_rm_watch(0xffffffffffffffff, 0x0) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', 0x101000, 0x108) getdents64(r2, &(0x7f0000000f80)=""/4096, 0x1000) 2m10.856004597s ago: executing program 5 (id=103): mkdir(&(0x7f0000000040)='./file0\x00', 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) pipe2$9p(&(0x7f0000001900)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='writeback_bdi_register\x00', r3}, 0x10) r4 = dup(r2) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r4}, 0x2c, {[], [], 0x6b}}) 2m10.458113359s ago: executing program 1 (id=113): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000700)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002d00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='kfree\x00', r0, 0x0, 0xfffffffffffffffd}, 0x18) lsm_get_self_attr(0x65, 0x0, &(0x7f00000000c0)=0xffffffffffffff26, 0x0) r1 = socket$inet6(0xa, 0x400000000001, 0x0) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x41, &(0x7f0000000180)=0x80000039f8, 0x4) sendmsg$AUDIT_GET_FEATURE(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x10, 0x3fb, 0x200, 0x70bd27, 0x25dfdbfd, "", ["", "", "", "", "", "", "", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x4008045}, 0x85) syz_clone(0x20008200, 0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000140)='ext2\x00', &(0x7f0000000080)='./file0\x00', 0x800000, &(0x7f0000000000), 0xfd, 0x477, &(0x7f0000000880)="$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") inotify_rm_watch(0xffffffffffffffff, 0x0) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', 0x101000, 0x108) getdents64(r2, &(0x7f0000000f80)=""/4096, 0x1000) 2m10.358933359s ago: executing program 1 (id=116): openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x40, 0x0) syz_mount_image$ext4(&(0x7f0000000540)='ext3\x00', &(0x7f0000000580)='./file0\x00', 0x0, &(0x7f0000000040), 0x1, 0x538, &(0x7f0000000600)="$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") r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) ioctl$int_in(r1, 0x5452, &(0x7f0000000080)=0x8000000ffffffff) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f0000bbdffc)=0x0) timer_settime(r4, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) splice(r1, 0x0, r2, 0x0, 0x7, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000080b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r5}, 0x10) sendmsg$ETHTOOL_MSG_COALESCE_SET(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)={0x34, 0x0, 0x1, 0x70bd2b, 0x0, {}, [@ETHTOOL_A_COALESCE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}]}, @ETHTOOL_A_COALESCE_USE_CQE_MODE_RX={0x5, 0x19, 0x1}]}, 0x34}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x11, 0x5, &(0x7f0000000ac0)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000850000005000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0xd, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x80000000}, 0x94) sendmsg$nl_route(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="5000000020000103feffffff000000000a000000000000000400010008000a000008000005001e"], 0x50}}, 0x4000850) mount$9p_fd(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300), 0x8800, &(0x7f00000008c0)=ANY=[@ANYBLOB=',msize=0x0000000000000001,access=user,posixacl,seclabel,fscontext=']) 2m10.171951291s ago: executing program 4 (id=121): r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000007000000080000000800000005"], 0x48) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) r2 = syz_io_uring_setup(0x508f, &(0x7f00000002c0)={0x0, 0xf59b, 0x800, 0x10003, 0x0, 0x0, r0}, &(0x7f0000000140), &(0x7f0000000280)) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000480), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) 2m10.148023261s ago: executing program 4 (id=122): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="06000000040000"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x4, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) r2 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) fcntl$notify(r2, 0x402, 0x8000001f) close_range(r2, 0xffffffffffffffff, 0x0) 2m10.133117371s ago: executing program 4 (id=123): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000840)=ANY=[@ANYBLOB="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"], 0x2dc}, 0x1, 0x0, 0x0, 0x4000020}, 0x0) 2m10.121344991s ago: executing program 4 (id=124): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000040)='./bus\x00', 0x0, &(0x7f00000000c0), 0x2, 0x571, &(0x7f0000000780)="$eJzs3c+PG1cdAPDvzP5yk7SbQA9QAQlQCCiKnXXaqOql5QJCVSVExQFxSJddZ7XEjkPsLd0lUrd/A0ggcYI/gQMSB6SeOHDjiMQBEOWAVCACJUgcBs3Yu+ts7MSNvXaz/nykybyZN+Pve/bOvOdnxy+AmXUuInYjYjEi3oyI5e7+pLvEq50lP+7undtr9+7cXksiy974Z1Lk5/ui55zcye5jliLim1+L+G7yYNzW9s711Xq9dqu7XWk3blZa2zsXNxurG7WN2o1q9crKlUsvXX6xOra6nm388oOvbr72rd/8+tPv/373yz/Mi3Wqm9dbj3HqVH1hP05uPiJeO4pgUzDXXS9OuRw8njQiPhYRnyuu/+WYK/46AYDjLMuWI1vu3QYAjru0GANL0nJEpGm3E1DujOE9GyfSerPVvnCtuXVjvTNWdjoW0mub9dqlM0t//H5x8EKSb68UeUV+sV09tH05Is5ExI+Xniq2y2vN+vp0ujwAMPNO9rb/EfGfpTQtl4c6tc+negDAE6M07QIAABOn/QeA2aP9B4DZM0T73/2wf/fIywIATIb3/wAwe7T/ADB7tP8AMFO+8frr+ZLd6/7+9fpb21vXm29dXK+1rpcbW2vlteatm+WNZnOj+M2exqMer95s3lx5IbberrRrrXaltb1ztdHcutG+Wvyu99XawkRqBQA8zJmz7/0hiYjdl58qluiZy0FbDcdbOsajgCfL3Cgn6yDAE81sXzC7hmrCi07C7468LMB09P0x71Lf5P1++iGC+J4RfKSc/+Tw4//meIbjxcg+zK7HG/9/ZezlACbvscf//zzecgCTl2XJ4Tn/F/ezAIBjaYSv8GXvjKsTAkzVoybzHsvn/wAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHDMnIqI70WSlou5wNP837Rcjng6Ik7HQnJts167FBHPxNmIWFjKt1emXWgAYETp35Pu/F/nl58/dTh3MfnvUrGOiB/87I2fvL3abt9ayff/a3//0t70YdWD80aYVxAAGN5fhzmoaL+r3XXPG/m7d26v7S1HWMYHfPCV/clH1+7duV0snZz5yLIsiygVfYkT/05ivntOKSKei4i5McTffTciPtGv/kkxNnK6O/Npb/zoxn56ovHT++KnRV5nnT99Hx9DWWDWvJfff149fP3NFVfWueKI/td/qbhDja64/5Ui9u59B/e/veu9VJTmcPz8mj83bIwXfvv1B3Zmy528dyOem+8XP9mPnwyI//yQ8f/0qc/86JUBednPI85H//i9sSrtxs1Ka3vn4mZjdaO2UbtRrV5ZuXLppcsvVivFGHVlb6T6Qf94+cIzg8qW1//EgPidV/7kofov7p/7hSHr/4v/vfmdzx5sLh2O/6XP93/9ny3W/Z//vE384pDxV0/8auD03Xn89QH1f9Trf2HI+O//bWd9yEMBgAlobe9cX63Xa7dGSuTvQj/8WVmWvZOX4SHH5NnDPeBed3G06vwlisTB05JEEqM/P/cn8s7YMAcvjFyd+xJ7wyXjrk6fxPx+X3G8j/zth/+1DEosjhI0HXstHicRp7uJu5MKOpXbETBBBxf9tEsCAAAAAAAAAAAAAAAMMon/wzTtOgIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHB8/T8AAP//Z1e+LQ==") move_pages(0x0, 0x20000000000000fe, &(0x7f0000000080)=[&(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil], 0x0, &(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0) r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) readv(0xffffffffffffffff, &(0x7f0000000200)=[{&(0x7f0000000100)=""/35, 0x23}], 0x1) ptrace$setregs(0xd, r0, 0x2, &(0x7f0000000180)) ptrace$cont(0x21, r0, 0x80000001, 0x4) r1 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r1, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}, 0x20000}}, {{0xa, 0x0, 0x40000, @dev={0xfe, 0x80, '\x00', 0x26}}}}, 0x108) bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0x7, &(0x7f0000000540)=ANY=[], &(0x7f0000000200)='GPL\x00', 0xffffffff, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000}, 0x94) readahead(0xffffffffffffffff, 0x7f, 0x7) r2 = syz_open_dev$tty20(0xc, 0x4, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000002000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r4}, 0x10) ioctl$VT_DISALLOCATE(r2, 0x5608) setsockopt$inet6_group_source_req(r1, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @loopback}}}, 0x108) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2e, &(0x7f0000000080)={0x0, {{0xa, 0x4, 0x0, @mcast1={0xff, 0x7}, 0x8a4}}, {{0xa, 0x4e20, 0x100, @remote}}}, 0x108) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0200000004000000020000000c"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="180100001700000000000000ff000000850000006d00000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000002007b8af8ff00000000bfa200000000000007"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) process_vm_writev(0x0, &(0x7f0000000500)=[{0x0}, {0xffffffffffffffff}, {0xfffffffffffffffc}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9, 0x0, 0x0, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) sendmsg$netlink(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001a00)=[{&(0x7f0000000d00)=ANY=[@ANYBLOB="10000000380018002abd7000ffdbdf25a73142515b5b6c811c2c2041bb0a0a60d7ff335146142e768bd1826d11780a3c9e894c8611038d1440f82a08d39af9c14dfbf8737b4ee99e01a6be6b000028347ca32a989aae637024bf2dd446aa121c04f146392374bdf4959662070fe97e1284a9ad91c11df843f77a780deeeafe2d596015f20143e520d4aa3f489b94aecd2d7915e60d9d6dbca9dc308a7237911a4aab1a5bade7e9cd1f6887970be2279ee2b68d10078e34ea469dbcc24c8eade8cce2"], 0x10}, {&(0x7f0000001ac0)=ANY=[@ANYBLOB="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"], 0x1c8}, {&(0x7f0000001000)={0x118, 0x1e, 0x1, 0x70bd2b, 0x25dfdbfc, "", [@nested={0x18, 0x6d, 0x0, 0x1, [@typed={0x8, 0x1b, 0x0, 0x0, @ipv4=@remote}, @typed={0x8, 0x40, 0x0, 0x0, @uid}, @nested={0x4, 0x15}]}, @typed={0x4, 0xb3}, @typed={0xc, 0x57, 0x0, 0x0, @u64=0x4}, @typed={0x5, 0x50, 0x0, 0x0, @str='\x00'}, @generic="d715fbcd3cdc7273bfdfec833c2b309fe5ba8816ecb2b7f41b7a047541ebda89a9d1f1b1d954b67b69dea9cb81298806750f45cd8052ffd4a14e177139dcdd70c9b900bc1a122abfcbc1ca491d644bd515216b02277734279ac839d13d070ced14ce8ae7d046192e658c2f0a198024f3e0c87271d5ded01d573cc748fd50171ee6cac758e42a435f31e92894f47c1f882ccef486988a74e1333f46f05c46eba4c71e7dba281b67dcb78a7aa1adef9fb5e5983d4dc0a542f714a46c822d02e6b65f545ce951226e55d0018c54c8c7762cd38e1a132a86b714"]}, 0x118}, {&(0x7f0000000440)={0xb0, 0x13, 0x24, 0x70bd2a, 0x25dfdbff, "", [@nested={0x96, 0xfd, 0x0, 0x1, [@typed={0x8, 0x4b, 0x0, 0x0, @fd=r5}, @generic="e7db437965fcc1679379bdd83b7316a4c8461cef62ba531fd524b2ec19403fdac321d0bc496c85dd2eeb168c78ebfb5c60e4ed9f9bc97c65e9317dc5faa2dd5a712884a7e1aef6ec41b47a08d9629b7d5e7c6e801b42f5ea0d9b03d84118222cb0", @nested={0x4, 0x2d}, @generic="86a1f6015a84adfe2f2ff78921", @nested={0x4, 0xd5}, @nested={0x4, 0xa7}, @nested={0x4, 0xea}, @nested={0x4, 0x68}, @nested={0x4, 0x36}, @typed={0x4, 0xd3}]}, @typed={0x8, 0x12d, 0x0, 0x0, @u32}]}, 0xb0}, {&(0x7f0000001140)={0x278, 0x3c, 0x2, 0x70bd28, 0x25dfdbfb, "", [@generic="40575de24d262ca9fff75c5fecff9164bda8b87940f2d7c5632fe43c6230b7eb5a4a6829dbe28708ea49431504b5df66181defdd548d86b7abe00fb5686dad5c596fcf1e3193ba645000f6299cc15f125aa868e9265dad64df5c65715ddb3c9cfd28fa62829f549183348d2e38d025fc84219fb58ec48cdfb72768f931c30a0c100fb8d9f06441031dc6875e1114854379c0fa7915ed6d03f72e1541b9401a386cbcd15b1d1fd09754400bdff1847fa34e636f0caa9745311ca57634cb", @typed={0x8, 0x23, 0x0, 0x0, @fd}, @nested={0xc4, 0xfa, 0x0, 0x1, [@generic="3365b01917dd64e30372813f4dbabfc467ceab1b8f83a0e08d42e3b2aa149d587c8d116f8973b6a5dee5586faac1da81d6460850960f80017be3f6cc0d9ab7bfcd85ab845ad4843e4128f5ca3b0bbdcb55d9f598ecb3b626758dacf01408aaf31165f3afba7f1f071f4502bfd2d0aa5e20414441b4d640385d64bc731f5bdbc7a728fdd34b2833df4fa3f6c3687adecc1e92ea89caee0c7692ed3ea4f07cdc2cfe79276b4cb0af4ec0dfaa2bf6dae80fe052a03ec66122c82e59fd86", @nested={0x4, 0x3c}]}, @generic="1082d95d534856e73e03", @typed={0x8, 0xc4, 0x0, 0x0, @uid}, @generic="6e4578c118ad4590a9cf40a9b859882c7b16eef82c7b41c972595baabcc0f65adc1ed7063264d7237d49f0499b6bf26a597f0f5bd169dfe16a40c98ca609555b7620bdfb26f0f9207ccade8ac840cc97fc3ef5962ee11352750a15e7843199dbe2a546c35353fe48", @typed={0x14, 0x3a, 0x0, 0x0, @str=')$))(\']}}%\x82\\\\[\\\x00'}, @generic="ee328aad2d4753f7774a66e6610c6f38abe12d2df5a3c42dacc20af728c8d189a33fc76c45c3fd1902fd1ff129bb802529b77c67bf00d758736e24e337eeffcf9d619084bc4288ab480f89a638c3b134"]}, 0x278}, {&(0x7f00000013c0)={0x450, 0x32, 0x100, 0x70bd29, 0x25dfdbfe, "", [@generic="a0d7fef865671eff9692478fea4e74099f8cc661372a26e7f3b6873dadf3d0c86bb2bf41d9d5eb3126ef64eb1bc5756ded70307cafb5c36644d3b7d68105b7e610b71ad47d7c110d932fd5663c4c70e4e8d11be9e2b3f2bf092ac6c5d53d9567620d7c06c5a3a8da6a57fe3961841b0eb4992e36fcdc4f5365f1c3c2084769048d2b6c55955614b5f26e3d7e79929b310e66304bbb7097d50e69d074f309bd560dba8764a2c53406ad9dbff392522178e39ef29220a45d444cb4e24ff9e89aa134026009b08777d4", @generic="83ae9ddbdb00f05fa564934cff8b52bec8dafb567aad6a7f236f450d76b8bfa176e4dcb42e11ed42361e3bc25d341208de1135a9011184a52e89a5ec82d129e087d20576d3c1d40acf97edb5919f582b7f00f55ff6e2fce00fb81f", @nested={0x10, 0x60, 0x0, 0x1, [@typed={0x4, 0x93}, @nested={0x4, 0x142}, @nested={0x4, 0xa4}]}, @generic="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", @nested={0x18, 0x56, 0x0, 0x1, [@nested={0x4, 0xb3}, @typed={0x8, 0x7f, 0x0, 0x0, @uid}, @typed={0x8, 0x122, 0x0, 0x0, @pid}]}, @generic="20374650abc300471a1f2961bd2c830087566536d7349bac358d1984b2787e184bee6faf6c10b2a13f0438c14a47bdc23429f506c976f523d649811bbb64279190d3cb82f460838dcede69c05223e8fd07fe5b959dda2dc2d70ee6155fb53b26772f3c33a13b8d970344201279effc4d70", @generic="5a65f9c984a717f158b7c3e9f1cc56b3ab31edf00e92ead212e355adfd9c6e273f0b519ae1ba80d918da9df462ce7899a822a4c5ab83edb396c85d7e39f72f36dbaf8cb1493a6166f636fc35208f52523289a328e1c7b86a4b7231a9acf157077d68904c5d985f5660b52d67f7951886dc4a0053a8da01bfeda8132db39254bc52315f947322563fd561bf0889e848a6ee3d67f51932f9e5f2f8a5a44e935e75ea34eb06aad68b21fb06d5f278ee34951f9a4f53af98e3", @generic="6026a5fc6a33d94ec197267b54d3c3d1eafd5b11a97e1c67ad297b1011d93b05180d398761bb54412cc5fd2dc8e72d076eb2be98caeb8b73ab1feeb8967a661e6eead40ff367db394141998e3ca9eecb2f3a320750fcf4c6d4029865e49507857aa70888b97e473b8a9047c79b8dda42f1ec154bea3ccbbd9c01243991fe87c129a09f2d7f548566f9493ec42fc9abffc097b9af4811c8bae9de04bb82377a2ba2bcf222c1907972f3e2259379729b5c147253721c618346b77a8f50baa4666e40d0ec818b745afdbae266b4"]}, 0x450}, {&(0x7f0000001840)={0xec, 0x22, 0x400, 0x70bd27, 0x25dfdbfe, "", [@typed={0x8, 0x51, 0x0, 0x0, @fd}, @nested={0x49, 0xa0, 0x0, 0x1, [@typed={0x4, 0xca, 0x0, 0x0, @binary}, @generic="9c832a48ca406e9732e87b5a3b82c7bd9353727d2278b67a4b6c76384580d70c7f558847e4268f8613b007f60823cfa21f261fe1ad073c48f2e537b9d8", @nested={0x4, 0x9b}]}, @typed={0xc, 0x122, 0x0, 0x0, @u64=0x2}, @generic="d30aaddfcac9586eb088edb1c240f8eb70e18817f97f73100b4ef1b3c3e7a0d0db61218f13fefd8d5ed6a8b8a84d3120b066a276c1836e861cacdbee3d14938949d66dc16762017510658c55f10a110fc29a5b6dd5e198340f29d37e0463a39f651b3497ffc36666536836b4ab86cf343d4ebbd830c4c234f0e2a7"]}, 0xec}, {&(0x7f0000001940)=ANY=[@ANYBLOB="a40000002800010029bd7000fddbdf25dad22bcf63fd3cd91d0894ad987acdbe6efb189e6b208044f8f2f004428428cba3f5c1416a5b321e70478b8ce8a380e43db9ee3d6e79ce79905ab914530bddb6437698ad392402fc9aa51358daa8e8750da62b81201366bb5cf3bca5123d5092dc8f5fee0b8fc6863797b5f51f75fe91b55b6cfbc3186d2ca685b4182108007300", @ANYRES32=0x0, @ANYBLOB='\x00\x00'], 0xa4}, {&(0x7f0000000740)={0x18, 0x40, 0x3, 0x70bd26, 0x25dfdbff, "", [@nested={0x8, 0x43, 0x0, 0x1, [@nested={0x4, 0xfe}]}]}, 0x18}], 0x9, 0x0, 0x0, 0x4000}, 0x40040000) r7 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@newqdisc={0x54, 0x10, 0x1, 0x0, 0x10000000, {0x0, 0x0, 0x0, 0x0, {0x1}, {}, {0xe}}, [@TCA_INGRESS_BLOCK={0x8}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1a, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}}, 0x0) prctl$PR_SET_ENDIAN(0x14, 0x1) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000000)={0x10001}, 0x8) 2m9.989347622s ago: executing program 1 (id=126): r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) r1 = socket(0x10, 0x803, 0x0) socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000003c0)=@getchain={0x24, 0x66, 0x0, 0x70bd29, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0xc}}}, 0x24}}, 0x0) getsockname$packet(r1, &(0x7f0000000740)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000700)=0x14) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00'}, 0x10) r2 = creat(&(0x7f00000002c0)='./file0\x00', 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x7, 0x4, 0x8, 0xd9}, 0x50) write$binfmt_aout(r2, &(0x7f00000000c0)=ANY=[], 0x20) r3 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x4, 0x12, r3, 0x0) perf_event_open(&(0x7f0000000180)={0x8, 0x80, 0x0, 0x4, 0x0, 0x6, 0x2, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080), 0x4}, 0x0, 0x0, 0x0, 0x0, 0x7}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r4 = open$dir(&(0x7f0000000080)='./file0\x00', 0x804000, 0x0) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x3, 0x12, r4, 0x0) 2m9.944865152s ago: executing program 33 (id=126): r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) r1 = socket(0x10, 0x803, 0x0) socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000003c0)=@getchain={0x24, 0x66, 0x0, 0x70bd29, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0xc}}}, 0x24}}, 0x0) getsockname$packet(r1, &(0x7f0000000740)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000700)=0x14) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00'}, 0x10) r2 = creat(&(0x7f00000002c0)='./file0\x00', 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x7, 0x4, 0x8, 0xd9}, 0x50) write$binfmt_aout(r2, &(0x7f00000000c0)=ANY=[], 0x20) r3 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x4, 0x12, r3, 0x0) perf_event_open(&(0x7f0000000180)={0x8, 0x80, 0x0, 0x4, 0x0, 0x6, 0x2, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080), 0x4}, 0x0, 0x0, 0x0, 0x0, 0x7}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r4 = open$dir(&(0x7f0000000080)='./file0\x00', 0x804000, 0x0) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x3, 0x12, r4, 0x0) 2m8.824847308s ago: executing program 5 (id=138): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000e000000850000000500000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000080)='kfree\x00', r0}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a5df850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa20000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00', r2}, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r4, 0x0, r5, 0x0, 0x8000f28, 0x0) write(r3, 0x0, 0x0) 2m8.824649318s ago: executing program 34 (id=138): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000e000000850000000500000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000080)='kfree\x00', r0}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a5df850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa20000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00', r2}, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r4, 0x0, r5, 0x0, 0x8000f28, 0x0) write(r3, 0x0, 0x0) 2m7.545569876s ago: executing program 4 (id=152): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00'}, 0x10) r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x23, 0x0, 0x0) setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f0000000000)=ANY=[], 0x57) socket$netlink(0x10, 0x3, 0x0) prlimit64(0x0, 0x8, &(0x7f0000000000)={0xfffffffffffffffb, 0xfffffffffffffffc}, 0x0) getrlimit(0x5, &(0x7f00000000c0)) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000001cc0)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x18) r2 = socket$netlink(0x10, 0x3, 0x6) bind$netlink(r2, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f0000000000), 0x4) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="02030609100000000000004c9e0000000200130002000000da16c167d803f1f805000600200000000a00060000000000ff0000000000000000001ffeff0001000003f1dc7f7c6e7c02000100000000000040000280ffffff05000500000000000a"], 0x80}}, 0x0) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=@newsa={0x138, 0x10, 0x1, 0xfffffffe, 0x100, {{@in6=@private0={0xfc, 0x0, '\x00', 0x1}, @in=@rand_addr=0x64010101, 0x1, 0x714, 0x4e23, 0x5, 0x0, 0x0, 0x0, 0x3a}, {@in6=@mcast2, 0x4d4, 0x6c}, @in=@dev={0xac, 0x14, 0x14, 0x3f}, {0x0, 0x192, 0x6, 0xffff, 0x8251c, 0x2, 0xfffffffffffffff8}, {0xffffffffffffffff, 0x0, 0x1f, 0xfffffffffffffffe}, {0x2, 0xfffffffc}, 0x70bd2a, 0x3504, 0x2, 0x1, 0x0, 0x20}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}]}, 0x138}, 0x1, 0x0, 0x0, 0x8801}, 0x0) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="3801000018"], 0x138}, 0x1, 0x0, 0x0, 0x8801}, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xb, &(0x7f00000009c0)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffc0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000100)='sched_switch\x00', r6, 0x0, 0x2}, 0x18) r7 = creat(&(0x7f00000002c0)='./file0\x00', 0x0) getrlimit(0x0, &(0x7f0000000280)) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x804) r8 = syz_open_dev$usbfs(&(0x7f0000000240), 0xb, 0x101301) ioctl$USBDEVFS_IOCTL(r8, 0xc0105512, 0x0) ioctl$USBDEVFS_IOCTL(r8, 0x80045505, &(0x7f0000000040)=@usbdevfs_connect) ioctl$USBDEVFS_SETCONFIGURATION(r8, 0x80045505, &(0x7f0000000000)=0x1) write$binfmt_aout(r7, &(0x7f0000000b80)=ANY=[@ANYRESHEX, @ANYRESOCT=r6, @ANYRESOCT=r6, @ANYRES64, @ANYRES8, @ANYRESHEX, @ANYRES32, @ANYRES64=0x0], 0x20) open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) 2m7.200890208s ago: executing program 4 (id=154): bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b0000000500000008040000cd00000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x12, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES32=r0], 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x29, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)=ANY=[@ANYBLOB, @ANYRES32=r2, @ANYBLOB=' \x00', @ANYRES32=r2], 0x38}, 0x1, 0x0, 0x0, 0x2800}, 0x40084c0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) r4 = bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="ab020000", @ANYRES32=r3, @ANYRES32=r4, @ANYBLOB="02000000010000000200"/21], 0x50) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r1}, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sync() sync() 2m7.195469958s ago: executing program 35 (id=154): bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b0000000500000008040000cd00000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x12, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES32=r0], 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x29, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)=ANY=[@ANYBLOB, @ANYRES32=r2, @ANYBLOB=' \x00', @ANYRES32=r2], 0x38}, 0x1, 0x0, 0x0, 0x2800}, 0x40084c0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) r4 = bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="ab020000", @ANYRES32=r3, @ANYRES32=r4, @ANYBLOB="02000000010000000200"/21], 0x50) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r1}, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sync() sync() 1m27.957825257s ago: executing program 8 (id=588): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x3, &(0x7f0000000740)=@framed, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='kfree\x00', r0}, 0x18) r1 = openat$selinux_access(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) write$selinux_access(r1, &(0x7f0000000640)=ANY=[@ANYBLOB="73797374656d5f753a6f626a6563745f723a7372635f743a7330202f6873722f7362696e2f637570732d628f264dc3961559a3c7369845726f777365642030"], 0x47) 1m27.904439847s ago: executing program 8 (id=590): bpf$PROG_LOAD(0x5, &(0x7f0000000c40)={0x11, 0xc, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b703000000000000850000007200000095"], &(0x7f0000000000)='syzkaller\x00', 0x100, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000a00)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r0}, 0x4) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000ed07449e000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x45, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) r1 = syz_io_uring_setup(0x5c6, &(0x7f0000000140)={0x0, 0x1, 0x0, 0x4}, &(0x7f0000000300)=0x0, &(0x7f0000000580)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffff8, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f00000004c0)=@IORING_OP_TIMEOUT={0xb, 0x18, 0x0, 0x0, 0x4, &(0x7f0000000280)={0x0, 0x989680}, 0x1, 0x40, 0x1}) io_uring_enter(r1, 0x6e2, 0x3900, 0x1, 0x0, 0xe00) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x26e1, 0x0) pipe(&(0x7f0000000400)={0xffffffffffffffff}) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) splice(r4, 0x0, r5, 0x0, 0x88000cc, 0x0) 1m27.019691833s ago: executing program 8 (id=601): r0 = fcntl$getown(0xffffffffffffffff, 0x9) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0xa, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0x8, 0x6}, 0x0, 0x6, 0x0, 0x3, 0xa, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x7fffffffffffffff}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a58000000060a0b040000000000000000020000002c0004802800018007000100637400001c0002800800014000000002080002400000000b05000300000000000900010073797a30000000000900020073797a320000000014000000110001"], 0x80}}, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r3 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r2, &(0x7f0000000280)={@val={0x6f01, 0x800}, @val={0x1, 0x0, 0x27, 0x0, 0x14}, @mpls={[], @ipv4=@tcp={{0x6, 0x4, 0x0, 0x0, 0x3f, 0x0, 0x0, 0x0, 0x84, 0x0, @empty=0x3fffff20, @local}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x5, 0xb, 0x0, 0x300, 0x0, 0x18, {[@window={0x9, 0xfffffffffffffec4}, @timestamp={0x5, 0x2}, @generic={0x0, 0x2, "d58838068b91"}]}}}}}}, 0xfd6c) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000040)=[{0x6, 0xfd, 0x0, 0x7ffc0002}]}) r4 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x11, 0x4, 0x0, &(0x7f0000001b80)='syzkaller\x00', 0x5, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff9}, 0x94) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000003800000000000000", @ANYRES32, @ANYBLOB="0500eeffffffffffffff00000000001b00000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000300"/28], 0x50) r5 = socket(0x2, 0x2, 0x1) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000040)={'team_slave_1\x00', 0x0}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000004000000000000000100000095000000"], &(0x7f0000000040)='GPL\x00', 0x5, 0x0, 0x0, 0x40f00, 0x40, '\x00', r6, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xff}, 0x94) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=@getchain={0x24, 0x11, 0x43d, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {0xe, 0x1}, {0x0, 0x3}}}, 0x24}}, 0x800) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000e40)=ANY=[@ANYBLOB="0300000004000000040000000a00000000000000", @ANYRES32, @ANYBLOB="0200"/20, @ANYRES32=r4, @ANYRES32, @ANYRESHEX=r4], 0x50) r8 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000a40)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r8, @ANYBLOB="0000000000000000b704000008000000850000007800000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x2e, '\x00', 0x0, @fallback=0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x22, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kmem_cache_free\x00', r9}, 0x18) syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f00000005c0)='./file1\x00', 0x8205, &(0x7f0000001340), 0x1, 0x60a, &(0x7f0000000600)="$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") r10 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r10, 0x89f4, &(0x7f00000001c0)={'syztnl0\x00', &(0x7f0000000240)={'ip_vti0\x00', 0x0, 0x7800, 0x80, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x29, 0x0, @rand_addr, @rand_addr=0x64010102}}}}) 1m25.921795399s ago: executing program 8 (id=618): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000040)='./bus\x00', 0x0, &(0x7f00000000c0), 0x2, 0x571, &(0x7f0000000780)="$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") move_pages(0x0, 0x20000000000000fe, &(0x7f0000000080)=[&(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil], 0x0, &(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0) r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) readv(0xffffffffffffffff, &(0x7f0000000200)=[{&(0x7f0000000100)=""/35, 0x23}], 0x1) ptrace$setregs(0xd, r0, 0x2, &(0x7f0000000180)) ptrace$cont(0x21, r0, 0x80000001, 0x4) r1 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r1, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}, 0x20000}}, {{0xa, 0x0, 0x40000, @dev={0xfe, 0x80, '\x00', 0x26}}}}, 0x108) bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0x7, &(0x7f0000000540)=ANY=[], &(0x7f0000000200)='GPL\x00', 0xffffffff, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000}, 0x94) readahead(0xffffffffffffffff, 0x7f, 0x7) r2 = syz_open_dev$tty20(0xc, 0x4, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000002000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r4}, 0x10) ioctl$VT_DISALLOCATE(r2, 0x5608) setsockopt$inet6_group_source_req(r1, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @loopback}}}, 0x108) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2e, &(0x7f0000000080)={0x0, {{0xa, 0x4, 0x0, @mcast1={0xff, 0x7}, 0x8a4}}, {{0xa, 0x4e20, 0x100, @remote}}}, 0x108) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0200000004000000020000000c"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="180100001700000000000000ff000000850000006d00000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000002007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008002010b7040000000000008500000001"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) process_vm_writev(0x0, &(0x7f0000000500)=[{0x0}, {0xffffffffffffffff}, {0xfffffffffffffffc}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9, 0x0, 0x0, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) sendmsg$netlink(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001a00)=[{&(0x7f0000000d00)=ANY=[@ANYBLOB="10000000380018002abd7000ffdbdf25a73142515b5b6c811c2c2041bb0a0a60d7ff335146142e768bd1826d11780a3c9e894c8611038d1440f82a08d39af9c14dfbf8737b4ee99e01a6be6b000028347ca32a989aae637024bf2dd446aa121c04f146392374bdf4959662070fe97e1284a9ad91c11df843f77a780deeeafe2d596015f20143e520d4aa3f489b94aecd2d7915e60d9d6dbca9dc308a7237911a4aab1a5bade7e9cd1f6887970be2279ee2b68d10078e34ea469dbcc24c8eade8cce2"], 0x10}, {&(0x7f0000001ac0)=ANY=[@ANYBLOB="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"], 0x1c8}, {&(0x7f0000001000)={0x118, 0x1e, 0x1, 0x70bd2b, 0x25dfdbfc, "", [@nested={0x18, 0x6d, 0x0, 0x1, [@typed={0x8, 0x1b, 0x0, 0x0, @ipv4=@remote}, @typed={0x8, 0x40, 0x0, 0x0, @uid}, @nested={0x4, 0x15}]}, @typed={0x4, 0xb3}, @typed={0xc, 0x57, 0x0, 0x0, @u64=0x4}, @typed={0x5, 0x50, 0x0, 0x0, @str='\x00'}, @generic="d715fbcd3cdc7273bfdfec833c2b309fe5ba8816ecb2b7f41b7a047541ebda89a9d1f1b1d954b67b69dea9cb81298806750f45cd8052ffd4a14e177139dcdd70c9b900bc1a122abfcbc1ca491d644bd515216b02277734279ac839d13d070ced14ce8ae7d046192e658c2f0a198024f3e0c87271d5ded01d573cc748fd50171ee6cac758e42a435f31e92894f47c1f882ccef486988a74e1333f46f05c46eba4c71e7dba281b67dcb78a7aa1adef9fb5e5983d4dc0a542f714a46c822d02e6b65f545ce951226e55d0018c54c8c7762cd38e1a132a86b714"]}, 0x118}, {&(0x7f0000000440)={0xb0, 0x13, 0x24, 0x70bd2a, 0x25dfdbff, "", [@nested={0x96, 0xfd, 0x0, 0x1, [@typed={0x8, 0x4b, 0x0, 0x0, @fd=r5}, @generic="e7db437965fcc1679379bdd83b7316a4c8461cef62ba531fd524b2ec19403fdac321d0bc496c85dd2eeb168c78ebfb5c60e4ed9f9bc97c65e9317dc5faa2dd5a712884a7e1aef6ec41b47a08d9629b7d5e7c6e801b42f5ea0d9b03d84118222cb0", @nested={0x4, 0x2d}, @generic="86a1f6015a84adfe2f2ff78921", @nested={0x4, 0xd5}, @nested={0x4, 0xa7}, @nested={0x4, 0xea}, @nested={0x4, 0x68}, @nested={0x4, 0x36}, @typed={0x4, 0xd3}]}, @typed={0x8, 0x12d, 0x0, 0x0, @u32}]}, 0xb0}, {&(0x7f0000001140)={0x278, 0x3c, 0x2, 0x70bd28, 0x25dfdbfb, "", [@generic="40575de24d262ca9fff75c5fecff9164bda8b87940f2d7c5632fe43c6230b7eb5a4a6829dbe28708ea49431504b5df66181defdd548d86b7abe00fb5686dad5c596fcf1e3193ba645000f6299cc15f125aa868e9265dad64df5c65715ddb3c9cfd28fa62829f549183348d2e38d025fc84219fb58ec48cdfb72768f931c30a0c100fb8d9f06441031dc6875e1114854379c0fa7915ed6d03f72e1541b9401a386cbcd15b1d1fd09754400bdff1847fa34e636f0caa9745311ca57634cb", @typed={0x8, 0x23, 0x0, 0x0, @fd}, @nested={0xc4, 0xfa, 0x0, 0x1, [@generic="3365b01917dd64e30372813f4dbabfc467ceab1b8f83a0e08d42e3b2aa149d587c8d116f8973b6a5dee5586faac1da81d6460850960f80017be3f6cc0d9ab7bfcd85ab845ad4843e4128f5ca3b0bbdcb55d9f598ecb3b626758dacf01408aaf31165f3afba7f1f071f4502bfd2d0aa5e20414441b4d640385d64bc731f5bdbc7a728fdd34b2833df4fa3f6c3687adecc1e92ea89caee0c7692ed3ea4f07cdc2cfe79276b4cb0af4ec0dfaa2bf6dae80fe052a03ec66122c82e59fd86", @nested={0x4, 0x3c}]}, @generic="1082d95d534856e73e03", @typed={0x8, 0xc4, 0x0, 0x0, @uid}, @generic="6e4578c118ad4590a9cf40a9b859882c7b16eef82c7b41c972595baabcc0f65adc1ed7063264d7237d49f0499b6bf26a597f0f5bd169dfe16a40c98ca609555b7620bdfb26f0f9207ccade8ac840cc97fc3ef5962ee11352750a15e7843199dbe2a546c35353fe48", @typed={0x14, 0x3a, 0x0, 0x0, @str=')$))(\']}}%\x82\\\\[\\\x00'}, @generic="ee328aad2d4753f7774a66e6610c6f38abe12d2df5a3c42dacc20af728c8d189a33fc76c45c3fd1902fd1ff129bb802529b77c67bf00d758736e24e337eeffcf9d619084bc4288ab480f89a638c3b134"]}, 0x278}, {&(0x7f00000013c0)={0x450, 0x32, 0x100, 0x70bd29, 0x25dfdbfe, "", [@generic="a0d7fef865671eff9692478fea4e74099f8cc661372a26e7f3b6873dadf3d0c86bb2bf41d9d5eb3126ef64eb1bc5756ded70307cafb5c36644d3b7d68105b7e610b71ad47d7c110d932fd5663c4c70e4e8d11be9e2b3f2bf092ac6c5d53d9567620d7c06c5a3a8da6a57fe3961841b0eb4992e36fcdc4f5365f1c3c2084769048d2b6c55955614b5f26e3d7e79929b310e66304bbb7097d50e69d074f309bd560dba8764a2c53406ad9dbff392522178e39ef29220a45d444cb4e24ff9e89aa134026009b08777d4", @generic="83ae9ddbdb00f05fa564934cff8b52bec8dafb567aad6a7f236f450d76b8bfa176e4dcb42e11ed42361e3bc25d341208de1135a9011184a52e89a5ec82d129e087d20576d3c1d40acf97edb5919f582b7f00f55ff6e2fce00fb81f", @nested={0x10, 0x60, 0x0, 0x1, [@typed={0x4, 0x93}, @nested={0x4, 0x142}, @nested={0x4, 0xa4}]}, @generic="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", @nested={0x18, 0x56, 0x0, 0x1, [@nested={0x4, 0xb3}, @typed={0x8, 0x7f, 0x0, 0x0, @uid}, @typed={0x8, 0x122, 0x0, 0x0, @pid}]}, @generic="20374650abc300471a1f2961bd2c830087566536d7349bac358d1984b2787e184bee6faf6c10b2a13f0438c14a47bdc23429f506c976f523d649811bbb64279190d3cb82f460838dcede69c05223e8fd07fe5b959dda2dc2d70ee6155fb53b26772f3c33a13b8d970344201279effc4d70", @generic="5a65f9c984a717f158b7c3e9f1cc56b3ab31edf00e92ead212e355adfd9c6e273f0b519ae1ba80d918da9df462ce7899a822a4c5ab83edb396c85d7e39f72f36dbaf8cb1493a6166f636fc35208f52523289a328e1c7b86a4b7231a9acf157077d68904c5d985f5660b52d67f7951886dc4a0053a8da01bfeda8132db39254bc52315f947322563fd561bf0889e848a6ee3d67f51932f9e5f2f8a5a44e935e75ea34eb06aad68b21fb06d5f278ee34951f9a4f53af98e3", @generic="6026a5fc6a33d94ec197267b54d3c3d1eafd5b11a97e1c67ad297b1011d93b05180d398761bb54412cc5fd2dc8e72d076eb2be98caeb8b73ab1feeb8967a661e6eead40ff367db394141998e3ca9eecb2f3a320750fcf4c6d4029865e49507857aa70888b97e473b8a9047c79b8dda42f1ec154bea3ccbbd9c01243991fe87c129a09f2d7f548566f9493ec42fc9abffc097b9af4811c8bae9de04bb82377a2ba2bcf222c1907972f3e2259379729b5c147253721c618346b77a8f50baa4666e40d0ec818b745afdbae266b4"]}, 0x450}, {&(0x7f0000001840)={0xec, 0x22, 0x400, 0x70bd27, 0x25dfdbfe, "", [@typed={0x8, 0x51, 0x0, 0x0, @fd}, @nested={0x49, 0xa0, 0x0, 0x1, [@typed={0x4, 0xca, 0x0, 0x0, @binary}, @generic="9c832a48ca406e9732e87b5a3b82c7bd9353727d2278b67a4b6c76384580d70c7f558847e4268f8613b007f60823cfa21f261fe1ad073c48f2e537b9d8", @nested={0x4, 0x9b}]}, @typed={0xc, 0x122, 0x0, 0x0, @u64=0x2}, @generic="d30aaddfcac9586eb088edb1c240f8eb70e18817f97f73100b4ef1b3c3e7a0d0db61218f13fefd8d5ed6a8b8a84d3120b066a276c1836e861cacdbee3d14938949d66dc16762017510658c55f10a110fc29a5b6dd5e198340f29d37e0463a39f651b3497ffc36666536836b4ab86cf343d4ebbd830c4c234f0e2a7"]}, 0xec}, {&(0x7f0000001940)=ANY=[@ANYBLOB="a40000002800010029bd7000fddbdf25dad22bcf63fd3cd91d0894ad987acdbe6efb189e6b208044f8f2f004428428cba3f5c1416a5b321e70478b8ce8a380e43db9ee3d6e79ce79905ab914530bddb6437698ad392402fc9aa51358daa8e8750da62b81201366bb5cf3bca5123d5092dc8f5fee0b8fc6863797b5f51f75fe91b55b6cfbc3186d2ca685b4182108007300", @ANYRES32=0x0, @ANYBLOB='\x00\x00'], 0xa4}, {&(0x7f0000000740)={0x18, 0x40, 0x3, 0x70bd26, 0x25dfdbff, "", [@nested={0x8, 0x43, 0x0, 0x1, [@nested={0x4, 0xfe}]}]}, 0x18}], 0x9, 0x0, 0x0, 0x4000}, 0x40040000) r7 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@newqdisc={0x54, 0x10, 0x1, 0x0, 0x10000000, {0x0, 0x0, 0x0, 0x0, {0x1}, {}, {0xe}}, [@TCA_INGRESS_BLOCK={0x8}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1a, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}}, 0x0) prctl$PR_SET_ENDIAN(0x14, 0x1) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000000)={0x10001}, 0x8) 1m23.062068355s ago: executing program 8 (id=648): r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}, 0x100002, 0x0, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r1}, &(0x7f0000000180), &(0x7f00000001c0)=r0}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00', r2}, 0x10) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f00000000c0)=0xf) ioctl$TCFLSH(r3, 0x400455c8, 0x0) 1m22.940929777s ago: executing program 8 (id=652): r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x9edd}, 0x100202, 0x0, 0xfffffffb, 0x6, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x13, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r1}, &(0x7f0000000180), &(0x7f00000001c0)=r0}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r2, 0x0, 0x7}, 0x18) setns(0xffffffffffffffff, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) r3 = socket(0xa, 0x5, 0x0) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r3, 0x84, 0x7b, &(0x7f00000002c0)={0x0, 0x4}, 0x8) sendto$inet6(r3, &(0x7f00000000c0)='H', 0x34000, 0x44004, &(0x7f0000000040)={0xa, 0x4e24, 0x7, @loopback, 0xc5f}, 0x1c) (fail_nth: 2) 1m22.940039906s ago: executing program 36 (id=652): r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x9edd}, 0x100202, 0x0, 0xfffffffb, 0x6, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x13, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r1}, &(0x7f0000000180), &(0x7f00000001c0)=r0}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r2, 0x0, 0x7}, 0x18) setns(0xffffffffffffffff, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) r3 = socket(0xa, 0x5, 0x0) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r3, 0x84, 0x7b, &(0x7f00000002c0)={0x0, 0x4}, 0x8) sendto$inet6(r3, &(0x7f00000000c0)='H', 0x34000, 0x44004, &(0x7f0000000040)={0xa, 0x4e24, 0x7, @loopback, 0xc5f}, 0x1c) (fail_nth: 2) 1m20.68061657s ago: executing program 0 (id=687): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000002c40)={0x7, 0x13, &(0x7f00000007c0)=@ringbuf={{}, {{}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4}}, {{0x6, 0x0, 0x6, 0x9, 0x0, 0x1, 0xe7030000}, {0x16, 0x0, 0x0, 0x6}}, [@ringbuf_query], {{0x4, 0x1, 0x2, 0x3}, {0x5, 0x0, 0xb, 0x3}, {0x85, 0x0, 0x0, 0x76}}}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2d, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a5df850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000086"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x90) r2 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00', r2}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x300000e, 0x20c44fb6edc09a38, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x15) bpf$MAP_CREATE(0x0, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r4, 0x0, r5, 0x0, 0x8000f28, 0x0) write(r3, 0x0, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x1000002, 0x4012831, 0xffffffffffffffff, 0x0) r6 = syz_open_procfs(0x0, &(0x7f0000000580)='smaps_rollup\x00') mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) lseek(r6, 0x2004, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000000)={'bridge0\x00', &(0x7f0000000080)=@ethtool_cmd={0x7, 0x800, 0x7, 0xff, 0x1, 0xfe, 0x0, 0x0, 0x1, 0x7, 0x1, 0x43, 0x4, 0x1, 0xa, 0x0, [0x103, 0x7]}}) 1m20.054275333s ago: executing program 0 (id=693): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x8) futex(&(0x7f000000cffc), 0x0, 0x0, 0x0, 0x0, 0x0) futex(&(0x7f000000cffc), 0x0, 0x0, 0x0, 0x0, 0x0) futex(&(0x7f000000cffc)=0x1, 0x1, 0x800001, 0x0, 0x0, 0x0) mlock2(&(0x7f0000ff5000/0x9000)=nil, 0x9000, 0x0) mremap(&(0x7f0000ff5000/0x2000)=nil, 0x2000, 0x5000000, 0x3, &(0x7f0000ffd000/0x1000)=nil) munlock(&(0x7f0000ffc000/0x1000)=nil, 0x1000) mincore(&(0x7f0000ff5000/0x4000)=nil, 0x4000, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000200)={{r0}, &(0x7f0000000140), &(0x7f0000000040)='%pI4 \x00'}, 0x2a) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0xc2f00, 0x4d, '\x00', 0x0, @fallback=0x20, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000980)='mm_page_free\x00', r2}, 0x18) setrlimit(0x9, &(0x7f0000000080)={0x8606, 0xffff}) io_setup(0x8f0, &(0x7f0000002400)) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) creat(&(0x7f0000000540)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000640), 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESOCT=r3, @ANYBLOB=',wfdno=', @ANYRESHEX=r4]) r5 = socket(0x10, 0x3, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xb, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020207025000000002dba513d7b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000008fd8850000000400000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x28, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r6}, 0x10) r7 = syz_open_procfs(0x0, &(0x7f00000001c0)='pagemap\x00') pread64(r7, &(0x7f0000000200)=""/102400, 0x19000, 0x1000000000) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000180)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)=@newqdisc={0x78, 0x24, 0xf0b, 0x70bd26, 0x25dfdc01, {0x0, 0x0, 0x0, r8, {0x0, 0xc}, {0xffff, 0xa}, {0xd, 0xc}}, [@qdisc_kind_options=@q_red={{0x8}, {0x18, 0x2, [@TCA_RED_PARMS={0x14, 0x1, {0x8, 0x3, 0x9, 0x56, 0x20, 0x6}}]}}, @qdisc_kind_options=@q_hhf={{0x8}, {0x2c, 0x2, [@TCA_HHF_BACKLOG_LIMIT={0x8, 0x1, 0x4}, @TCA_HHF_HH_FLOWS_LIMIT={0x8, 0x3, 0x9}, @TCA_HHF_EVICT_TIMEOUT={0x8, 0x6, 0xfffffff5}, @TCA_HHF_HH_FLOWS_LIMIT={0x8, 0x3, 0x3}, @TCA_HHF_RESET_TIMEOUT={0x8, 0x4, 0x2}]}}]}, 0x78}, 0x1, 0x0, 0x0, 0x44044}, 0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r3, 0xc0c89425, &(0x7f0000019200)={"d647fd9c631138f41a76c1dcc688aead", 0x0, 0x0, {0x4, 0x7fff}, {0x9, 0x7}, 0x3, [0x8, 0x4, 0x3a3, 0xfffffffffffff6ad, 0x1, 0xcb, 0x9, 0xc, 0x1, 0x6, 0x96, 0x2, 0x3, 0x1, 0x9, 0x2abf]}) ioctl$BTRFS_IOC_WAIT_SYNC(r2, 0x40089416, &(0x7f0000000100)=r9) 1m18.755656281s ago: executing program 0 (id=710): syz_emit_ethernet(0x46, &(0x7f0000000000)=ANY=[@ANYBLOB="ffffffffffffffffffffffff86dd6060626000102c00fe8000000000000000000000000000bbfe8000000000000000000000000000aa880003"], 0x0) 1m18.728831301s ago: executing program 0 (id=711): bpf$TOKEN_CREATE(0x24, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x11, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b70300000000000085000000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0xc, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r3, 0x0, 0x9}, 0x18) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17) syz_mount_image$vfat(&(0x7f00000007c0), &(0x7f0000000800)='./file1\x00', 0x80, &(0x7f0000000100)={[{@shortname_winnt}, {@fat=@flush}, {@shortname_lower}, {@shortname_win95}, {@fat=@check_strict}]}, 0x11, 0x320, &(0x7f0000000c00)="$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") r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000440)='cpuacct.usage_percpu\x00', 0x275a, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) mount$bind(&(0x7f0000000080)='./file0/../file0\x00', &(0x7f0000000040)='./file0/../file0\x00', 0x0, 0x3930c3, 0x0) r5 = socket(0x400000000010, 0x3, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r4, 0xc0189372, &(0x7f00000001c0)={{0x1, 0x1, 0x18, r5, {0x899}}, './file0/../file0\x00'}) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0) r6 = open_tree(0xffffffffffffff9c, &(0x7f0000000300)='\x00', 0x89901) move_mount(r6, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) umount2(&(0x7f0000000280)='./file0/file0\x00', 0x0) ftruncate(r4, 0x80) 1m17.856568916s ago: executing program 0 (id=716): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000b00)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000181100", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008"], 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000007c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40e00, 0x8, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.usage_sys\x00', 0x275a, 0x0) fcntl$lock(r2, 0x24, &(0x7f0000000080)={0x300, 0x0, 0x2007, 0x1fd}) 1m17.440762388s ago: executing program 0 (id=724): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000d00)={0x11, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="180100000100a7d9000000000020b200850000007b00000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000340)='kfree\x00', r0, 0x0, 0x2}, 0x18) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x20, 0x3, &(0x7f0000000340)=ANY=[@ANYBLOB], &(0x7f0000000200)='GPL\x00', 0x1, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @netfilter=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={r1, 0x0, 0x22, 0x0, &(0x7f0000000380)="f6f4e9a1d78ad62ceef1884386dd78bb3fb7dbfc8180ca8395ccfda2e499b3dcf581", 0x0, 0xa1b, 0x0, 0x2f, 0x0, &(0x7f0000000700)="010a", 0x0}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000016c0)={0x11, 0x4, &(0x7f00000003c0)=ANY=[@ANYBLOB="18010000008000000000000000000004850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xc, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffd}, 0x94) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000100)='kfree\x00', r2}, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000780)=ANY=[@ANYBLOB="74000000090601020000000000000000030000000900020073797a310000000005000100070000004c0007801800018014000240fe8000000000000000000000000000aa1800148014000240fc000000000000000000000000000000060004404e1f0000050007008400000006000540"], 0x74}, 0x1, 0x0, 0x0, 0x10040003}, 0x0) 1m17.440661858s ago: executing program 37 (id=724): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000d00)={0x11, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="180100000100a7d9000000000020b200850000007b00000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000340)='kfree\x00', r0, 0x0, 0x2}, 0x18) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x20, 0x3, &(0x7f0000000340)=ANY=[@ANYBLOB], &(0x7f0000000200)='GPL\x00', 0x1, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @netfilter=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={r1, 0x0, 0x22, 0x0, &(0x7f0000000380)="f6f4e9a1d78ad62ceef1884386dd78bb3fb7dbfc8180ca8395ccfda2e499b3dcf581", 0x0, 0xa1b, 0x0, 0x2f, 0x0, &(0x7f0000000700)="010a", 0x0}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000016c0)={0x11, 0x4, &(0x7f00000003c0)=ANY=[@ANYBLOB="18010000008000000000000000000004850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xc, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffd}, 0x94) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000100)='kfree\x00', r2}, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000780)=ANY=[@ANYBLOB="74000000090601020000000000000000030000000900020073797a310000000005000100070000004c0007801800018014000240fe8000000000000000000000000000aa1800148014000240fc000000000000000000000000000000060004404e1f0000050007008400000006000540"], 0x74}, 0x1, 0x0, 0x0, 0x10040003}, 0x0) 3.740953189s ago: executing program 9 (id=1578): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000001800)={0x11, 0xc, &(0x7f0000000c00)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x1, 0x0, 0x7ffc0005}]}) getitimer(0x1, &(0x7f0000000080)) 3.714283499s ago: executing program 9 (id=1580): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000300)='./file0\x00', &(0x7f0000000040), 0x200080, &(0x7f0000000600)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_9p2000}]}}) 3.095149502s ago: executing program 9 (id=1585): prctl$PR_SET_NAME(0xf, &(0x7f0000000500)='w\xde\xa3\x05\xa3\x91\x00\x00\x00\x00\x00\x00\x8f\xc0\x9b\x86\xef\\\xc0\x89\av\x9f\xaek\xbd\x87W\x1d\x1b(\x8e\xf8\\2\x98\xf7P\x1b8\xcf\xf5\xdc0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f00000004c0)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1e0000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) r3 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00', r3}, 0x10) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) 2.180106488s ago: executing program 2 (id=1598): bpf$TOKEN_CREATE(0x24, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x11, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b70300000000000085000000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0xc, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r3, 0x0, 0x9}, 0x18) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17) syz_mount_image$vfat(&(0x7f00000007c0), &(0x7f0000000800)='./file1\x00', 0x80, &(0x7f0000000100)={[{@shortname_winnt}, {@fat=@flush}, {@shortname_lower}, {@shortname_win95}, {@fat=@check_strict}]}, 0x11, 0x320, &(0x7f0000000c00)="$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") r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000440)='cpuacct.usage_percpu\x00', 0x275a, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) mount$bind(&(0x7f0000000080)='./file0/../file0\x00', &(0x7f0000000040)='./file0/../file0\x00', 0x0, 0x3930c3, 0x0) r5 = socket(0x400000000010, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=@getchain={0x24, 0x11, 0x1, 0x70bd2a, 0x2000001, {0x0, 0x0, 0x0, 0x0, {0x7, 0xa}, {0xd, 0xffe0}, {0x8, 0x9}}}, 0x24}, 0x1, 0x0, 0x0, 0x4000000}, 0x20048054) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r4, 0xc0189372, &(0x7f00000001c0)={{0x1, 0x1, 0x18, r5, {0x899}}, './file0/../file0\x00'}) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0) r6 = open_tree(0xffffffffffffff9c, &(0x7f0000000300)='\x00', 0x89901) move_mount(r6, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) umount2(&(0x7f0000000280)='./file0/file0\x00', 0x0) ftruncate(r4, 0x80) 2.074585438s ago: executing program 6 (id=1599): r0 = gettid() r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TCSBRKP(r1, 0x5425, 0x0) r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f00000000c0)=0xe) ioctl$TIOCGPGRP(r1, 0x5437, 0x0) timer_create(0x2, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) r3 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10820, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x4, @perf_bp={&(0x7f00000003c0), 0x9}, 0x10020a, 0x0, 0xfffffffd, 0x6, 0xffffffff, 0x0, 0xfffe, 0x0, 0x0, 0x0, 0x2}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x340, 0x0, 0x111, 0x4b4, 0x130, 0xd4feffff, 0x270, 0x20a, 0x278, 0x270, 0x278, 0x3, 0x0, {[{{@ipv6={@private2, @remote, [], [0x0, 0x0, 0x0, 0xffffff00], 'dvmrp0\x00', 'team_slave_0\x00', {}, {}, 0x6}, 0x0, 0x108, 0x130, 0x0, {}, [@common=@inet=@tcp={{0x30}, {[0x4e20, 0x4e23], [0x4e20, 0x4e22], 0x3, 0x8, 0x80, 0x7}}, @common=@inet=@tcp={{0x30}}]}, @common=@inet=@TCPMSS={0x28}}, {{@uncond, 0x0, 0xf8, 0x140, 0x0, {}, [@common=@ipv6header={{0x28}}, @common=@ipv6header={{0x28}, {0x4, 0x11, 0x1}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x8ba4, 0x0, 0x80000001, '\x00', {0x10000}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3a0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x6, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000006111040000000000731a0eff00000000950000f7ff000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x23}, 0x22) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x13, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0xd, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r4}, &(0x7f0000000180), &(0x7f00000001c0)=r3}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000}, 0x94) 1.76442896s ago: executing program 6 (id=1600): bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000000c0)={0xffffffffffffffff, 0x58, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000c40)={0x11, 0xc, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b703000000000000850000007200000095"], &(0x7f0000000000)='syzkaller\x00', 0x100, 0x0, 0x0, 0x41100, 0x0, '\x00', r0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r1}, 0x4) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000ed07449e000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x45, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) r2 = syz_io_uring_setup(0x5c6, &(0x7f0000000140)={0x0, 0x1, 0x0, 0x4}, &(0x7f0000000300)=0x0, &(0x7f0000000580)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffff8, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f00000004c0)=@IORING_OP_TIMEOUT={0xb, 0x18, 0x0, 0x0, 0x4, &(0x7f0000000280)={0x0, 0x989680}, 0x1, 0x40, 0x1}) io_uring_enter(r2, 0x6e2, 0x3900, 0x1, 0x0, 0xe00) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x26e1, 0x0) pipe(&(0x7f0000000400)={0xffffffffffffffff}) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) splice(r5, 0x0, r6, 0x0, 0x88000cc, 0x0) 1.548473501s ago: executing program 7 (id=1602): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0xe5, 0x0, 0x0, 0x0, 0xb, 0x0, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={&(0x7f0000000700), 0xd}, 0x100b28, 0x6, 0x4, 0x1, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000340)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x10, 0x7ffc1ffb}]}) renameat2(0xffffffffffffff9c, 0x0, 0xffffffffffffff9c, 0x0, 0x5) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_clone3(&(0x7f00000003c0)={0x122125000, &(0x7f00000000c0), 0x0, 0x0, {0x22}, 0x0, 0x0, 0x0, 0x0}, 0x58) timer_create(0x0, &(0x7f0000000200)={0x0, 0x21, 0x2, @tid=0xffffffffffffffff}, &(0x7f0000000300)) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000500000002"], 0x50) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xc, &(0x7f0000000340)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r0}, 0x18) r1 = socket$phonet_pipe(0x23, 0x5, 0x2) connect$phonet_pipe(r1, &(0x7f0000000040)={0x23, 0x0, 0x0, 0x1}, 0x10) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) writev(r3, &(0x7f0000000400)=[{&(0x7f0000000100)='|', 0x1}], 0x1) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f00000008c0)={{{@in=@local, @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@private1}, 0x0, @in6=@private2}}, &(0x7f00000002c0)=0xe8) quotactl$Q_SETINFO(0xffffffff80000600, &(0x7f0000000080)=@filename='./file0\x00', r5, &(0x7f0000000380)={0xdb1, 0x7, 0x1, 0x2}) splice(r2, 0x0, r4, 0x0, 0xc, 0x0) seccomp$SECCOMP_SET_MODE_FILTER(0x1, 0x1, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) 1.438065332s ago: executing program 3 (id=1604): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000340)=0x14) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)=ANY=[@ANYBLOB="440000001000030425bd7000000000000000", @ANYRES32=0x0, @ANYBLOB="00040000000000001c0012800e000100697036677265746170000000080002800400120008000a00b8ed138181df840caf8b5d57b7017ad39516e12ec5e9817defc3ce044fba97f48aeb13d20399f59e13ac8bdd65c12c01aec0bff53db068baf3d6144f71d2989513e4f739a2e3e6ce22927e7417496bd813e317", @ANYRES32=r2, @ANYBLOB], 0x44}}, 0x8000) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f0000000400)={'wg0\x00'}) r4 = socket(0x400000000010, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffb, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0x3}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000007c0)=@newtfilter={0x48, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r6, {0x0, 0x3}, {}, {0x7}}, [@filter_kind_options=@f_matchall={{0xd}, {0x14, 0x2, [@TCA_MATCHALL_CLASSID={0x8, 0x1, {0x1, 0x5}}, @TCA_MATCHALL_FLAGS={0x8, 0x3, 0x2}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f0000000640), &(0x7f0000000680)=0x4) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000280), &(0x7f00000002c0)=0x10) 1.410300562s ago: executing program 3 (id=1605): syz_read_part_table(0x5df, &(0x7f0000000000)="$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") r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000340)='kmem_cache_free\x00', r0, 0x0, 0xf7}, 0x18) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000002c40)={0x15, 0x17, &(0x7f00000007c0)=@ringbuf={{0x18, 0x7}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [@printk={@p, {}, {0x5}, {0x7, 0x0, 0xa}, {}, {}, {0x72, 0x9}}], {{}, {0x5}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000680)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_reuseport, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x7, 0x8604, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0x8, 0x6}, 0x0, 0x10000, 0x0, 0x6, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0xf5, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYBLOB="14000000100001000000000000b890c1a000000a80000000160a01030000000000000000020000000900020073797a30000000000900010073797a30000000005400038008000240000000000800014000000000400003801400010076657468315f746f5f6272696467650014000100776732000000000000000000000000001400010076657468305f746f5f7465616d00000014000000110001"], 0xa8}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000880)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000180a0500000000000000000002000000300003802c00038014000100776732000000000000000000000000001400010076657468315f746f5f627269646765000900020073797a30000000000900010073797a30"], 0x84}, 0x1, 0x0, 0x0, 0x24040089}, 0x20008000) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000700000018"], 0x0, 0xc1, 0x0, 0x0, 0x41000, 0xe, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x7, 0x441e, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, @perf_bp={0x0, 0x4}, 0x0, 0x10000, 0x8, 0x1, 0x8, 0x2020005, 0xf, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) sendmsg$IPSET_CMD_DESTROY(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="1c0000000306010200000000000000000a9d0001050001"], 0x1c}, 0x1, 0x0, 0x0, 0x4004810}, 0x840) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00'}, 0x10) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a44000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40000000010800034000000004480000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a31000000001c000380180000800800034000000002"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) socket(0x10, 0x3, 0x9) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000340)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000002040)=ANY=[@ANYBLOB="1e0000000000000005000000ff"], 0x48) r6 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/drop_entry\x00', 0x2, 0x0) write$cgroup_int(r6, &(0x7f00000001c0)=0x1000000002, 0x12) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0x200000000000002f, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000010c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2b, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) io_setup(0x1, &(0x7f00000002c0)) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f00000004c0)={{0x1, 0x1, 0x18, r7, {0x2}}, './file0\x00'}) 1.233912493s ago: executing program 7 (id=1606): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000340)=0x14) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)=ANY=[@ANYBLOB="440000001000030425bd70000000000000000000", @ANYRES32=0x0, @ANYBLOB="00040000000000001c0012800e000100697036677265746170000000080002800400120008000a00b8ed138181df840caf8b5d57b7017ad39516e12ec5e9817defc3ce044fba97f48aeb13d20399f59e13ac8bdd65c12c01aec0bff53db068baf3d6144f71d2989513e4f739a2e3e6ce22927e7417496bd813e317", @ANYRES32=r2, @ANYBLOB], 0x44}}, 0x8000) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f0000000400)={'wg0\x00'}) r4 = socket(0x400000000010, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route_sched(r4, 0x0, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000007c0)=@newtfilter={0x48, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r6, {0x0, 0x3}, {}, {0x7}}, [@filter_kind_options=@f_matchall={{0xd}, {0x14, 0x2, [@TCA_MATCHALL_CLASSID={0x8, 0x1, {0x1, 0x5}}, @TCA_MATCHALL_FLAGS={0x8, 0x3, 0x2}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f0000000640), &(0x7f0000000680)=0x4) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000280), &(0x7f00000002c0)=0x10) 1.166381683s ago: executing program 7 (id=1607): prctl$PR_SET_NAME(0xf, &(0x7f0000000500)='w\xde\xa3\x05\xa3\x91\x00\x00\x00\x00\x00\x00\x8f\xc0\x9b\x86\xef\\\xc0\x89\av\x9f\xaek\xbd\x87W\x1d\x1b(\x8e\xf8\\2\x98\xf7P\x1b8\xcf\xf5\xdc0x0}) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(0xffffffffffffffff, 0x40182103, &(0x7f0000000240)={r5, 0x2, r4, 0x202, 0x80000}) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r6}, 0x18) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(0xffffffffffffffff, 0x40182103, &(0x7f00000001c0)={r5, 0x1, r6, 0x200, 0x80000}) unshare(0x2c060000) unshare(0x2c020400) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x100000b, 0x2013, 0xffffffffffffffff, 0x0) 1.068337434s ago: executing program 7 (id=1610): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x3ff}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000580)='kmem_cache_free\x00', r3}, 0x18) r4 = creat(&(0x7f0000000100)='./file0\x00', 0xd931d3864d39dcca) close(r4) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) stat(&(0x7f0000000b80)='./file1\x00', &(0x7f0000001100)) syz_mount_image$vfat(&(0x7f0000000ec0), &(0x7f0000000180)='./file2\x00', 0x420c, &(0x7f0000003240)=ANY=[], 0x6, 0x36e, &(0x7f00000007c0)="$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") sched_setscheduler(0x0, 0x1, 0x0) sched_setscheduler(0x0, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) newfstatat(0xffffffffffffff9c, &(0x7f00000021c0)='./file1\x00', &(0x7f0000002200), 0x1000) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000b40)=[{{&(0x7f00000005c0)=@abs={0x0, 0x0, 0x4e23}, 0x6e, &(0x7f00000006c0)=[{&(0x7f0000000640)="148827517794770f0ed621665f2a9084dba3e2fd228e8a6131622152b65a1c2740faebcb574e3dd25d2aa2f5a36e0353ee2a490e771e370146d1e5e118bcf0afb0ff2f4635d64bce33e61d01e18dcb23bb8669d9da8f", 0x56}, {&(0x7f0000000c00)="a13252542ff2434a947f7001ede430f984a1681d1b4fb2e55b4924d20cbdf1689b4cb7c152c4acb98edb40aace1f132e9690cb197c8867e77f69c12e745162486f286cbeaf49bdac151c5a197f77753aa06274ef6547d76ab33181e4098bdd49dfa15ef92e29749802f700307b7ee1e55a4f841e002038905854c9ac5fbef51abe947a69b1c0", 0x86}, {&(0x7f0000000cc0)="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", 0xfa}, {&(0x7f0000000f00)="a8d91b1649cd68e183c00b0635e7b7a182fa9279a6ab04083087e34b8037fd1825f101ee94ffe8bb44828a2c69efe32a929596bbbd4b12a2cc6339b329c3ae8fad078a4400eb9dec36556cdd3bd130e3a3c554a0441a3cdb2b25d33c8171cb5c0c7df8542d3ce679a9104637fbb650c3f73b503b55e70c8e48fae1e922c9ccc68e0a83c3b89b696550acdb5c54014349dca000e949166674f1be6f08c9f0ff69b92a9475fb85e12f0610be9977f6fef8287d13ff8d8f10ca47bc33e2202cf13fec64", 0xc2}, {&(0x7f0000001000)="ad0030d7c14ceb8812a2da002a6650ad2e52b05445ef1a3556b24323617425484d36f60d5adc59a48a569f6f88196a5be43390f5de5678f971f43572d13b962ced86c086cddd294e1c48b5a92743dc44be1ecb29f3e877c5e431754d9716ec9225237943d1e9573ae67ed583d82282d39e8bc6042423e825971858c2948d96eb39caf48726b3bdd129e4e620055b53f160a99206f4eae747ec91dc9d9dcb9e68fb40f6f1d9e46b3b3f7d93a59301ead6944d396841c3d9c18ab80921acbd7267deb35618c882c55df5171fe4ee60680a472aa44ba2185cef8138d6ff7f587c9b3875be27abd79cd576eea1", 0xeb}], 0x5, &(0x7f0000000380)=[@rights={{0x2c, 0x1, 0x1, [r1, r4, 0xffffffffffffffff, r0, r2, r4, 0xffffffffffffffff]}}], 0x30, 0x4008001}}], 0x1, 0xc4) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f00000003c0)={0x0}) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(0xffffffffffffffff, 0x40182103, &(0x7f0000000240)={r5, 0x2, r4, 0x202, 0x80000}) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r6}, 0x18) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(0xffffffffffffffff, 0x40182103, &(0x7f00000001c0)={r5, 0x1, r6, 0x200, 0x80000}) unshare(0x2c060000) unshare(0x2c020400) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) r7 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file2\x00', 0x105142, 0x2c) mmap$IORING_OFF_SQ_RING(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x100000b, 0x2013, r7, 0x0) 1.047241274s ago: executing program 2 (id=1611): syz_read_part_table(0x5df, &(0x7f0000000000)="$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") r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32, @ANYBLOB], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000340)='kmem_cache_free\x00', r0, 0x0, 0xf7}, 0x18) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000002c40)={0x15, 0x17, &(0x7f00000007c0)=@ringbuf={{0x18, 0x7}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [@printk={@p, {}, {0x5}, {0x7, 0x0, 0xa}, {}, {}, {0x72, 0x9}}], {{}, {0x5}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000680)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_reuseport, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x7, 0x8604, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0x8, 0x6}, 0x0, 0x10000, 0x0, 0x6, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0xf5, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYBLOB="14000000100001000000000000b890c1a000000a80000000160a01030000000000000000020000000900020073797a30000000000900010073797a30000000005400038008000240000000000800014000000000400003801400010076657468315f746f5f6272696467650014000100776732000000000000000000000000001400010076657468305f746f5f7465616d00000014000000110001"], 0xa8}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000880)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000180a0500000000000000000002000000300003802c00038014000100776732000000000000000000000000001400010076657468315f746f5f627269646765000900020073797a30000000000900010073797a30"], 0x84}, 0x1, 0x0, 0x0, 0x24040089}, 0x20008000) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000700000018"], 0x0, 0xc1, 0x0, 0x0, 0x41000, 0xe, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x7, 0x441e, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, @perf_bp={0x0, 0x4}, 0x0, 0x10000, 0x8, 0x1, 0x8, 0x2020005, 0xf, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) sendmsg$IPSET_CMD_DESTROY(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="1c0000000306010200000000000000000a9d0001050001"], 0x1c}, 0x1, 0x0, 0x0, 0x4004810}, 0x840) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00'}, 0x10) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a44000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40000000010800034000000004480000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a31000000001c000380180000800800034000000002"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) socket(0x10, 0x3, 0x9) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000340)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000002040)=ANY=[@ANYBLOB="1e0000000000000005000000ff"], 0x48) r6 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/drop_entry\x00', 0x2, 0x0) write$cgroup_int(r6, &(0x7f00000001c0)=0x1000000002, 0x12) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0x200000000000002f, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000010c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2b, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) io_setup(0x1, &(0x7f00000002c0)) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f00000004c0)={{0x1, 0x1, 0x18, r7, {0x2}}, './file0\x00'}) 1.020123404s ago: executing program 3 (id=1612): bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x7, 0x441e, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x4}, 0x0, 0x10000, 0x8, 0x1, 0x8, 0x2020005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000680)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="140000001000010400000000000000000100000a74000000060a0b04000000000000000002000008400004803c000180080001006c6f670030000280060004400001000008000340fffffffa0a0002407d5def2e21000000080003400000000806000140000100000900010073797a30000000000900020073797a320000000008000b400000000314000000110001"], 0x9c}, 0x1, 0x0, 0x0, 0x20000010}, 0x0) close(r0) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000400)='kfree\x00', r1, 0x0, 0xfffffffffffffffe}, 0x18) socket$nl_route(0x10, 0x3, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000840)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008"], 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r3, 0x0, 0x7fff}, 0x18) r4 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}, 0x100002, 0x0, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES32=r5], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="1802"], 0x0}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) setrlimit(0x9, &(0x7f0000000080)={0x8606, 0xffff}) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r5}, &(0x7f0000000180), &(0x7f00000001c0)=r4}, 0x20) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000000)={'hsr0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000180)=@getchain={0x2c, 0x11, 0x839, 0x70bd25, 0x0, {0x0, 0x0, 0x0, r8, {0x3, 0x6}, {0x7}, {0x3}}, [{0x8, 0xb, 0x8}]}, 0x2c}}, 0x0) 854.958815ms ago: executing program 6 (id=1613): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e00000004000000040000000c"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000880)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000700000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x16, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="0500000000000000791090000000000063000000000000009500000000000000"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0x29bc, &(0x7f0000001180)=""/195, 0x0, 0x5, '\x00', 0x0, @fallback=0x2}, 0x48) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x21081e, &(0x7f0000000080)={[{@i_version}, {@nogrpid}, {@bh}]}, 0x1, 0x523, &(0x7f0000000c00)="$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") openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x441, 0x105) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143042, 0x0) fsetxattr$security_selinux(r2, &(0x7f00000000c0), &(0x7f0000000140)='system_u:object_r:pam_var_run_t:s0\x00', 0x23, 0x0) 777.473785ms ago: executing program 3 (id=1614): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000001e00007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) mlock(&(0x7f0000656000/0x3000)=nil, 0x3000) 740.174746ms ago: executing program 2 (id=1615): bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x7, 0x441e, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x4}, 0x0, 0x10000, 0x8, 0x1, 0x8, 0x2020005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000680)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="140000001000010400000000000000000100000a74000000060a0b04000000000000000002000008400004803c000180080001006c6f670030000280060004400001000008000340fffffffa0a0002407d5def2e21000000080003400000000806000140000100000900010073797a30000000000900020073797a320000000008000b400000000314000000110001"], 0x9c}, 0x1, 0x0, 0x0, 0x20000010}, 0x0) close(r0) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000400)='kfree\x00', r1, 0x0, 0xfffffffffffffffe}, 0x18) socket$nl_route(0x10, 0x3, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000840)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008"], 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r3, 0x0, 0x7fff}, 0x18) r4 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}, 0x100002, 0x0, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES32=r5], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="1802"], 0x0}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) setrlimit(0x9, &(0x7f0000000080)={0x8606, 0xffff}) io_setup(0x8f0, &(0x7f0000002400)) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r5}, &(0x7f0000000180), &(0x7f00000001c0)=r4}, 0x20) r6 = syz_open_dev$evdev(&(0x7f0000000040), 0xdaa, 0x40) ioctl$EVIOCSCLOCKID(r6, 0x400445a0, &(0x7f0000000280)=0x4) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'hsr0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000180)=@getchain={0x2c, 0x11, 0x839, 0x70bd25, 0x0, {0x0, 0x0, 0x0, r8, {0x3, 0x6}, {0x7}, {0x3}}, [{0x8, 0xb, 0x8}]}, 0x2c}}, 0x0) 715.774376ms ago: executing program 3 (id=1616): bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000000c0)={0xffffffffffffffff, 0x58, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000c40)={0x11, 0xc, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b703000000000000850000007200000095"], 0x0, 0x100, 0x0, 0x0, 0x41100, 0x0, '\x00', r0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000a00)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r1}, 0x4) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000ed07449e000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x45, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) r2 = syz_io_uring_setup(0x5c6, &(0x7f0000000140)={0x0, 0x1, 0x0, 0x4}, &(0x7f0000000300)=0x0, &(0x7f0000000580)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffff8, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f00000004c0)=@IORING_OP_TIMEOUT={0xb, 0x18, 0x0, 0x0, 0x4, &(0x7f0000000280)={0x0, 0x989680}, 0x1, 0x40, 0x1}) io_uring_enter(r2, 0x6e2, 0x3900, 0x1, 0x0, 0xe00) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x26e1, 0x0) pipe(&(0x7f0000000400)={0xffffffffffffffff}) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) splice(r5, 0x0, r6, 0x0, 0x88000cc, 0x0) 636.200237ms ago: executing program 6 (id=1617): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000340)=0x14) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)=ANY=[@ANYBLOB="440000001000030425bd70000000000000000000", @ANYRES32=0x0, @ANYBLOB="00040000000000001c0012800e000100697036677265746170000000080002800400120008000a00b8ed138181df840caf8b5d57b7017ad39516e12ec5e9817defc3ce044fba97f48aeb13d20399f59e13ac8bdd65c12c01aec0bff53db068baf3d6144f71d2989513e4f739a2e3e6ce22927e7417496bd813e317", @ANYRES32=r2, @ANYBLOB], 0x44}}, 0x8000) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f0000000400)={'wg0\x00'}) r4 = socket(0x400000000010, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route_sched(r4, 0x0, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000007c0)=@newtfilter={0x48, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r6, {0x0, 0x3}, {}, {0x7}}, [@filter_kind_options=@f_matchall={{0xd}, {0x14, 0x2, [@TCA_MATCHALL_CLASSID={0x8, 0x1, {0x1, 0x5}}, @TCA_MATCHALL_FLAGS={0x8, 0x3, 0x2}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f0000000640), &(0x7f0000000680)=0x4) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000280), &(0x7f00000002c0)=0x10) 624.185697ms ago: executing program 2 (id=1618): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x7, 0x8604, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x2}, 0x0, 0x10000, 0x0, 0x6, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) syz_open_dev$hidraw(0x0, 0x9, 0x4b442) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x20000000ec071, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r1, 0x29, 0x2a, 0x0, 0x0) setsockopt$inet6_MCAST_MSFILTER(r1, 0x29, 0x30, 0x0, 0x110) bind$inet6(r1, 0x0, 0x0) syz_emit_ethernet(0x3e, &(0x7f0000000280)={@link_local, @empty, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, '\x00', 0x8, 0x11, 0x0, @local, @mcast2, {[], {0x2, 0xe22, 0x8}}}}}}, 0x0) syz_mount_image$ext4(&(0x7f0000000400)='ext4\x00', &(0x7f0000000440)='./file0\x00', 0x0, &(0x7f0000000480), 0x1, 0x3ee, &(0x7f00000004c0)="$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") r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) ioctl$FS_IOC_GETFSMAP(r2, 0xc0c0583b, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000900)={&(0x7f0000004340)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x7}}, [@NFT_MSG_NEWSET={0x14, 0x9, 0xa, 0x201, 0x0, 0x0, {0x0, 0x0, 0x9}}, @NFT_MSG_DELSET={0x110, 0xb, 0xa, 0x807, 0x0, 0x0, {0x9, 0x0, 0x3}, [@NFTA_SET_DESC={0x4}, @NFTA_SET_EXPRESSIONS={0xb8, 0x12, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, @cmp={{0x8}, @void}}, {0xc, 0x1, 0x0, 0x1, @dup_ipv6={{0x8}, @void}}, {0x20, 0x1, 0x0, 0x1, @nat={{0x8}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_NAT_TYPE={0x8}, @NFTA_NAT_TYPE={0x8}]}}}, {0xc, 0x1, 0x0, 0x1, @cmp={{0x8}, @void}}, {0x54, 0x1, 0x0, 0x1, @xfrm={{0x9}, @val={0x44, 0x2, 0x0, 0x1, [@NFTA_XFRM_DREG={0x8, 0x1, 0x1, 0x0, 0x9}, @NFTA_XFRM_DIR={0x5, 0x3, 0x1}, @NFTA_XFRM_SPNUM={0x8, 0x4, 0x1, 0x0, 0x3}, @NFTA_XFRM_DIR={0x5}, @NFTA_XFRM_SPNUM={0x8, 0x4, 0x1, 0x0, 0x1}, @NFTA_XFRM_KEY={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_XFRM_SPNUM={0x8, 0x4, 0x1, 0x0, 0x2}, @NFTA_XFRM_KEY={0x8, 0x2, 0x1, 0x0, 0x6}]}}}, {0xc, 0x1, 0x0, 0x1, @rt={{0x7}, @void}}, {0x10, 0x1, 0x0, 0x1, @lookup={{0xb}, @void}}]}, @NFTA_SET_POLICY={0x8, 0x8, 0x1, 0x0, 0x1}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x88}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0x2}, @NFTA_SET_TIMEOUT={0xc, 0xb, 0x1, 0x0, 0x9}, @NFTA_SET_DATA_TYPE={0x8}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x3c}]}, @NFT_MSG_NEWSETELEM={0x20, 0xc, 0xa, 0x5, 0x0, 0x0, {0x7, 0x0, 0x5}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz0\x00'}]}, @NFT_MSG_DELSETELEM={0x1324, 0xe, 0xa, 0x201, 0x0, 0x0, {0x0, 0x0, 0x2}, [@NFTA_SET_ELEM_LIST_ELEMENTS={0x1310, 0x3, 0x0, 0x1, [{0x104, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz0\x00'}, @NFTA_SET_ELEM_USERDATA={0x4}, @NFTA_SET_ELEM_KEY_END={0xd8, 0xa, 0x0, 0x1, [@NFTA_DATA_VALUE={0xb4, 0x1, "f49f44f81841ab7476dd2a781aac2da44b326c9e8fcc2c9dea860cf869c425bdd2706ce5a91708591e977f68cb029385ec3aba2bf6b46d5d0d1d55943312155b204b30d7afcd27fc143d96b4fc4228dc21d31a8a66d84432e29900b64f1946533920a5c1e7e5c2cb74301c9a5d22c5d436a9e28a8bee106d1c045cc09864018804dfcf8c0008d6eb1db32a4c56f112f893972f1622fd827274a4a90575ac843f60e54412d86481cf2981eed1fa2e3bc6"}, @NFTA_DATA_VERDICT={0x4}, @NFTA_DATA_VERDICT={0xc, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}]}, @NFTA_DATA_VALUE={0xf, 0x1, "6806d20d9a3fe7250d62e9"}]}, @NFTA_SET_ELEM_EXPR={0x10, 0x7, 0x0, 0x1, @reject={{0xb}, @void}}, @NFTA_SET_ELEM_DATA={0x4}, @NFTA_SET_ELEM_KEY_END={0x4}]}, {0x10ac, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0x80000000}, @NFTA_SET_ELEM_EXPR={0x10, 0x7, 0x0, 0x1, @target={{0xb}, @void}}, @NFTA_SET_ELEM_KEY_END={0xf30, 0xa, 0x0, 0x1, [@NFTA_DATA_VALUE={0xee4, 0x1, "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"}, @NFTA_DATA_VALUE={0x47, 0x1, "90a586d7165d2290965cfd16366395a9fd9d7b36cf419b5580af724a0402b64f0e81c43010cb7143b01ecfd55e23a8b8cf06b2df5fd55315ec3bc149d4e0d4dbb8a97f"}]}, @NFTA_SET_ELEM_EXPRESSIONS={0xcc, 0xb, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @connlimit={{0xe}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_CONNLIMIT_COUNT={0x8, 0x1, 0x1, 0x0, 0x1}]}}}, {0x50, 0x1, 0x0, 0x1, @counter={{0xc}, @val={0x40, 0x2, 0x0, 0x1, [@NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x2dc}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x7}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x101}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x6}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x9}]}}}, {0x10, 0x1, 0x0, 0x1, @match={{0xa}, @void}}, {0x10, 0x1, 0x0, 0x1, @log={{0x8}, @val={0x4}}}, {0x10, 0x1, 0x0, 0x1, @redir={{0xa}, @void}}, {0xc, 0x1, 0x0, 0x1, @log={{0x8}, @void}}, {0x1c, 0x1, 0x0, 0x1, @limit={{0xa}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_LIMIT_TYPE={0x8, 0x4, 0x1, 0x0, 0x1}]}}}]}, @NFTA_SET_ELEM_USERDATA={0x19, 0x6, 0x1, 0x0, "1c842f9b8b096fbc3d38cb91ec5c98ed690e956e41"}, @NFTA_SET_ELEM_KEY={0x4}, @NFTA_SET_ELEM_USERDATA={0x6d, 0x6, 0x1, 0x0, "af03fc5ce109609705425e94e3768e2114a42aa043380c4c9022c4f173260a11d96b0ee615e121ab3b8e4520d2137c5708569f187760b1be74d578722db693ac0b1cc1c8a457389428aafdcc9ffb2097dc4725416df002faac81d70a12cca543096e041be5d434da63"}]}, {0x15c, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_EXPR={0xc, 0x7, 0x0, 0x1, @dup_ipv6={{0x8}, @void}}, @NFTA_SET_ELEM_KEY_END={0xc4, 0xa, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x18, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}]}, @NFTA_DATA_VALUE={0xa7, 0x1, "69d2b114ca3c020abae2c9da77651a7a43376da133e22f579442e8ea7bda734e12a4b92a8bb33c3688485e2a200ada3287a50bebeaf488dc50315e0500a427830d0f2206c3547ebd571f767f151d4be5b165070d81d5576113731d850da72ca8fa170aa5e49750925ff57cc3b7c73bf2fc1faf6a1dd2796254ce27a11a9f6dacd817c36946359d26221a17d1fe7d4833d027cc61dedc639401025e05349ea08ecbbabe"}]}, @NFTA_SET_ELEM_KEY_END={0x88, 0xa, 0x0, 0x1, [@NFTA_DATA_VALUE={0x4}, @NFTA_DATA_VALUE={0xd, 0x1, "f7c0834dc9beb66f4d"}, @NFTA_DATA_VALUE={0x69, 0x1, "e448b046bebbed95e52f06c772c016998de2deba5e385f6e00da7dd6ea1561e6d6f730f402146ecc4b63c2e356d9d7558807281256d025ac532a6ab718849ed43570656f94e996c2c6b3bd2c47e452b2bfc1a6356a3c6c5abbe63a021ae6216cfa402fb887"}, @NFTA_DATA_VALUE={0x4}]}]}]}]}, @NFT_MSG_NEWSET={0xa0, 0x9, 0xa, 0x201, 0x0, 0x0, {0x7, 0x0, 0xa}, [@NFTA_SET_HANDLE={0xc, 0x10, 0x1, 0x0, 0x5}, @NFTA_SET_KEY_TYPE={0x8, 0x4, 0x1, 0x0, 0x1}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x37}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x17}, @NFTA_SET_TIMEOUT={0xc, 0xb, 0x1, 0x0, 0x831}, @NFTA_SET_EXPR={0x50, 0x11, 0x0, 0x1, @dup={{0x8}, @val={0x44, 0x2, 0x0, 0x1, [@NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0xd}, @NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0x18}, @NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0xa}, @NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0x11}, @NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0x17}, @NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0x8}, @NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0x5}]}}}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_DELTABLE={0x14, 0x2, 0xa, 0x0, 0x0, 0x0, {0x2, 0x0, 0x4}}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x1544}, 0x1, 0x0, 0x0, 0xc000}, 0xc8010) bpf$PROG_LOAD(0x5, &(0x7f0000000ac0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) sendto$inet(r3, 0x0, 0x34, 0x22048800, &(0x7f0000000200)={0x2, 0x4e23, @empty}, 0x10) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) r5 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@newqdisc={0x48, 0x24, 0xf0b, 0x0, 0x1000000, {0x60, 0x0, 0x0, r6, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x18, 0x2, [@TCA_CAKE_BASE_RATE64={0xc, 0x2, 0xfff}, @TCA_CAKE_ACK_FILTER={0x8, 0x10, 0x1}]}}]}, 0x48}}, 0x0) syz_emit_ethernet(0x86, &(0x7f00000010c0)={@broadcast, @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x78, 0x0, 0x0, 0x0, 0x1, 0x0, @private=0xa010102, @local}, @redirect={0x3, 0x4, 0x0, @broadcast=0x1000000, {0x17, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11, 0x0, @private, @empty, {[@timestamp_addr={0x44, 0xc, 0x0, 0x1, 0x0, [{@remote, 0x4e210000}]}, @timestamp_addr={0x44, 0x3c, 0x0, 0x1, 0x0, [{@local}, {}, {@dev}, {@private}, {@empty}, {@initdev={0xac, 0x1e, 0x0, 0x0}}, {@dev}]}]}}}}}}}, 0x0) sendto$inet(r3, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba78600a34f65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03859bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b037511bf746bec66ba", 0xd000, 0x11, 0x0, 0x27) 515.551957ms ago: executing program 6 (id=1619): syz_read_part_table(0x5df, &(0x7f0000000000)="$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") r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000340)='kmem_cache_free\x00', r0, 0x0, 0xf7}, 0x18) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000002c40)={0x15, 0x17, &(0x7f00000007c0)=@ringbuf={{0x18, 0x7}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [@printk={@p, {}, {0x5}, {0x7, 0x0, 0xa}, {}, {}, {0x72, 0x9}}], {{}, {0x5}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000680)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_reuseport, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x7, 0x8604, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0x8, 0x6}, 0x0, 0x10000, 0x0, 0x6, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0xf5, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYBLOB="14000000100001000000000000b890c1a000000a80000000160a01030000000000000000020000000900020073797a30000000000900010073797a30000000005400038008000240000000000800014000000000400003801400010076657468315f746f5f6272696467650014000100776732000000000000000000000000001400010076657468305f746f5f7465616d00000014000000110001"], 0xa8}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000880)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000180a0500000000000000000002000000300003802c00038014000100776732000000000000000000000000001400010076657468315f746f5f627269646765000900020073797a30000000000900010073797a30"], 0x84}, 0x1, 0x0, 0x0, 0x24040089}, 0x20008000) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000700000018"], 0x0, 0xc1, 0x0, 0x0, 0x41000, 0xe, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x7, 0x441e, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, @perf_bp={0x0, 0x4}, 0x0, 0x10000, 0x8, 0x1, 0x8, 0x2020005, 0xf, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) sendmsg$IPSET_CMD_DESTROY(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="1c0000000306010200000000000000000a9d0001050001"], 0x1c}, 0x1, 0x0, 0x0, 0x4004810}, 0x840) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00'}, 0x10) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a44000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40000000010800034000000004480000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a31000000001c000380180000800800034000000002"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) socket(0x10, 0x3, 0x9) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000340)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000002040)=ANY=[@ANYBLOB="1e0000000000000005000000ff"], 0x48) r6 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/drop_entry\x00', 0x2, 0x0) write$cgroup_int(r6, &(0x7f00000001c0)=0x1000000002, 0x12) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0x200000000000002f, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000010c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2b, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) io_setup(0x1, &(0x7f00000002c0)) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f00000004c0)={{0x1, 0x1, 0x18, r7, {0x2}}, './file0\x00'}) 511.302297ms ago: executing program 2 (id=1620): bpf$TOKEN_CREATE(0x24, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x11, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b70300000000000085000000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0xc, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r3, 0x0, 0x9}, 0x18) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17) syz_mount_image$vfat(&(0x7f00000007c0), &(0x7f0000000800)='./file1\x00', 0x80, &(0x7f0000000100)={[{@shortname_winnt}, {@fat=@flush}, {@shortname_lower}, {@shortname_win95}, {@fat=@check_strict}]}, 0x11, 0x320, &(0x7f0000000c00)="$eJzs3U9rHGUcB/Bf0vyRSLo5iKAgPuhFL0MS34CLtCAGlNhI9SBMzUSXne6GnaWyVbQ3r76O4tGbIL6BXLx785aLxxyKK5sx/8oUpNBOTT8f2H1+O898medhd5bnMjyHN3+83d+rsr18HPPvppiPiPmjiLXjqjZXv83Vn5bivHvxdufmH699/OlnH3S3tq5tp3S9e+OdzZTS1dd//frbn974bfziJz9f/WU5DtY+P/xr88+Dlw9eOfz7xle9KvWqNBiOU55uDYfj/FZZpN1e1c9S+qgs8qpIvUFVjC7075XD/f1Jyge7qyv7o6KqUj6YpH4xSeNhGo8mKf8y7w1SlmVpdSU4b7nh2M797e2828JgeIpGo24+1/gL2LnfyoAAgFb95/X/7Phxbf1/eVj/Pw9m6/+lf+/fi6z/AQAAAAAAAAAAAADg/+BoOu1Mp9POSfvwqyGy2MIweUIe4/vnEjn34N4LEeUPd3bu7NRt3d/di16UUcR6dOJBxPRUXV9/f+vaejq2Fqu3v6/zs/bKxfxGdGKtOb9R59PF/GKsnM9vRideas5vNuaX4q03Z/mjk/M78fsXMYwydmOWPct/t5HSex9uPZRfPj4PAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgOdDlk417t+fZY/qr/On+/OvRyceNO/Pv964P/9CvLrQ7twBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA4EQ1udvPy7IYKS5R8c2VNq6++EzMXXFWnNzljxFfaPd/CQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAANpwtul32yMBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACgTdXkbj8vy2L0BItHXXuubu49xekCAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA88/4JAAD//xwKK8c=") r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000440)='cpuacct.usage_percpu\x00', 0x275a, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) mount$bind(&(0x7f0000000080)='./file0/../file0\x00', &(0x7f0000000040)='./file0/../file0\x00', 0x0, 0x3930c3, 0x0) r5 = socket(0x400000000010, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=@getchain={0x24, 0x11, 0x1, 0x70bd2a, 0x2000001, {0x0, 0x0, 0x0, 0x0, {0x7, 0xa}, {0xd, 0xffe0}, {0x8, 0x9}}}, 0x24}, 0x1, 0x0, 0x0, 0x4000000}, 0x20048054) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r4, 0xc0189372, &(0x7f00000001c0)={{0x1, 0x1, 0x18, r5, {0x899}}, './file0/../file0\x00'}) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0) r6 = open_tree(0xffffffffffffff9c, &(0x7f0000000300)='\x00', 0x89901) move_mount(r6, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) umount2(&(0x7f0000000280)='./file0/file0\x00', 0x0) ftruncate(r4, 0x80) 216.676779ms ago: executing program 6 (id=1621): syz_mount_image$vfat(&(0x7f0000000200), &(0x7f0000000080)='./bus\x00', 0x2, &(0x7f0000000100)=ANY=[@ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32], 0xff, 0x2f2, &(0x7f0000000980)="$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") creat(0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./bus\x00', 0x0, &(0x7f0000000140)=ANY=[@ANYRES8=0x0], 0x1, 0x30e, &(0x7f0000000f00)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x40, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1002, 0x32) write(r1, &(0x7f00000001c0)="49bda8f11851b8436bebb2", 0xb) sendfile(r1, r0, 0x0, 0x3ffff) sendfile(r1, r0, 0x0, 0x7ffffffffffffffd) r2 = openat(0xffffffffffffff9c, &(0x7f0000000240)='.\x00', 0x0, 0x0) fdatasync(r2) unlink(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') 187.473669ms ago: executing program 7 (id=1622): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000802000021"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000000001850000001b000000b70000000000070095"], &(0x7f0000000780)='GPL\x00', 0x9, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0, r1}, 0x18) r2 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r2, &(0x7f0000000340)=@nameseq={0x1e, 0x1, 0x3, {0x43}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f0000000100)={0x43, 0x4, 0x3, 0x3}, 0x10) r3 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r3, 0x10f, 0x87, &(0x7f0000000100)={0x43, 0x0, 0x3, 0x3}, 0x10) 163.058129ms ago: executing program 7 (id=1623): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000009b8977a30cbabaff20207025002000002dba513d7b1af8ff00000000bfa100000000000407010000f8ffffffb7020000080000008833000000008fd8850000000400000095"], &(0x7f0000001780)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0xb, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xc, 0x0, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000200)='kfree\x00', r0}, 0x18) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@struct]}}, 0x0, 0x26}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0x3, &(0x7f0000000040)=@framed, &(0x7f0000000080)='GPL\x00', 0x5, 0x1f6, &(0x7f00000002c0)=""/168, 0x0, 0x0, '\x00', 0x0, @sock_ops, r1, 0x8, 0x0, 0x0, 0x18, &(0x7f0000000200), 0x1}, 0x6d) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="1400000010000700000e0000000000000000000a20000000000a03000000000000000000010000000900010073797a30000000003c000000090a010400000000000000000100000008000a40000000000900020073797a32000000000900010073797a30000000000800054000000002600000000c0a01080000000000000000010000000900020073797a32000000003400038030000080080003400000000224000b80200001800e000100636f6e6e6c696d69740000000c00028008000140000000000900010073797a30"], 0xe4}, 0x1, 0x0, 0x0, 0x24040095}, 0x0) sendmsg$IPSET_CMD_FLUSH(r2, &(0x7f0000001600)={&(0x7f00000014c0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000001540)={&(0x7f0000001500)={0x38, 0x4, 0x6, 0x401, 0x0, 0x0, {0xf, 0x0, 0x3}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}]}, 0x38}, 0x1, 0x0, 0x0, 0x10}, 0x40) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000001000)=@base={0xb, 0x5, 0x4, 0xa932, 0x9, 0xffffffffffffffff, 0x800008}, 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x11, 0xc, &(0x7f0000000c40)=ANY=[@ANYBLOB="1800000009000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000f9ffffff7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f00000003c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='sys_enter\x00', r4}, 0x10) tgkill(0x0, 0x0, 0x5) clock_gettime(0x5, &(0x7f0000000180)) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x1}]}) perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x9d, 0x1, 0x0, 0x0, 0x0, 0x5, 0x40200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, @perf_config_ext={0x1, 0xd5e}, 0x0, 0x0, 0xfffffffc, 0x3, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f00000003c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='GPL\x00'}, 0x48) sendmsg$tipc(r6, &(0x7f0000000540)={&(0x7f0000000340)=@id={0x1e, 0x3, 0x3, {0x4e23, 0x4}}, 0x10, 0x0, 0x0, &(0x7f0000000500), 0x0, 0x4000000}, 0x2000c041) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0200000004000000080000000c"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x11, 0xd, &(0x7f0000000300)=ANY=[@ANYBLOB="18010000000000000000000000080021850000006d00000018110000", @ANYRES32=r7, @ANYBLOB], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r8 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x20) preadv(r8, &(0x7f0000001b00)=[{&(0x7f00000009c0)=""/239, 0xef}], 0x1, 0x2, 0x0) socket$rds(0x15, 0x5, 0x0) close_range(r5, 0xffffffffffffffff, 0x100000000000000) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000740)={&(0x7f0000001000)=ANY=[@ANYBLOB="9feb0100180000000000000028000000280000000900000004000000000000040100000006000000020000c204000000010000000001000006000000000000000061002e2e302e2e00"], 0x0, 0x49}, 0x28) 95.19601ms ago: executing program 9 (id=1624): bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x7, 0x441e, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x4}, 0x0, 0x10000, 0x8, 0x1, 0x8, 0x2020005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000680)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="140000001000010400000000000000000100000a74000000060a0b04000000000000000002000008400004803c000180080001006c6f670030000280060004400001000008000340fffffffa0a0002407d5def2e21000000080003400000000806000140000100000900010073797a30000000000900020073797a320000000008000b400000000314000000110001"], 0x9c}, 0x1, 0x0, 0x0, 0x20000010}, 0x0) close(r0) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000400)='kfree\x00', r1, 0x0, 0xfffffffffffffffe}, 0x18) socket$nl_route(0x10, 0x3, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000840)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008"], 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r3, 0x0, 0x7fff}, 0x18) r4 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}, 0x100002, 0x0, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES32=r5], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="1802"], 0x0}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) setrlimit(0x9, &(0x7f0000000080)={0x8606, 0xffff}) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r5}, &(0x7f0000000180), &(0x7f00000001c0)=r4}, 0x20) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000000)={'hsr0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000180)=@getchain={0x2c, 0x11, 0x839, 0x70bd25, 0x0, {0x0, 0x0, 0x0, r8, {0x3, 0x6}, {0x7}, {0x3}}, [{0x8, 0xb, 0x8}]}, 0x2c}}, 0x0) 0s ago: executing program 9 (id=1625): r0 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_DELETE(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x2c, r0, 0x10, 0x70bd27, 0x25dfdbfc, {}, [@L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x2}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0x4}, @L2TP_ATTR_L2SPEC_TYPE={0x5, 0x5, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x240048d5}, 0x40) r1 = accept4$inet6(0xffffffffffffffff, 0x0, &(0x7f0000000140), 0x40000) r2 = syz_genetlink_get_family_id$tipc(&(0x7f00000001c0), r1) sendmsg$TIPC_CMD_SET_LINK_WINDOW(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0xa200001}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x68, r2, 0x400, 0x70bd26, 0x25dfdbff, {{}, {}, {0x4c, 0x18, {0xfffffffb, @link='syz1\x00'}}}, ["", "", "", "", "", ""]}, 0x68}, 0x1, 0x0, 0x0, 0x20000000}, 0x880) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000340), 0xffffffffffffffff) sendmsg$NL80211_CMD_REGISTER_FRAME(r3, &(0x7f00000004c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000480)={&(0x7f0000000380)={0xc8, r4, 0x400, 0x70bd2c, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_FRAME_TYPE={0x6, 0x65, 0xf589}, @NL80211_ATTR_FRAME_TYPE={0x6, 0x65, 0xfffe}, @NL80211_ATTR_FRAME_TYPE={0x6, 0x65, 0x3}, @NL80211_ATTR_FRAME_MATCH={0x9a, 0x5b, "8fde15733ad6ced502dfe0d352563394d3a58b0c458cafc6089fb0fac1489b064f8375bc3ca1bd4d6bedc52cc6343a1324cca8bb3cfdd4ab9c0970be3ff4a1bb16fe77921c30f664fd09e204b7d8451321107b89d77efe21210feb5ef159e33d0a3493fc1b1bdb246db6e3c40d4ed8c499e491f74620b681657e16a40365dac53dde001da9da0182ba01d082ef39ad77be4686d1e41d"}]}, 0xc8}, 0x1, 0x0, 0x0, 0x48040}, 0x5) sendmsg$NL80211_CMD_GET_SCAN(r3, &(0x7f00000005c0)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000580)={&(0x7f0000000540)={0x20, r4, 0x8, 0x70bd25, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0xc4e5, 0x2e}}}}, ["", ""]}, 0x20}, 0x1, 0x0, 0x0, 0xc004}, 0x40c0) sendmsg$NL80211_CMD_SET_MAC_ACL(r3, &(0x7f0000000700)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000006c0)={&(0x7f0000000640)={0x60, r4, 0x400, 0x70bd2c, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0xfffffffd, 0x15}}}}, [@NL80211_ATTR_MAC_ADDRS={0x40, 0xa6, 0x0, 0x1, [{0xa}, {0xa}, {0xa, 0x6, @device_b}, {0xa}, {0xa, 0x6, @broadcast}]}]}, 0x60}, 0x1, 0x0, 0x0, 0x4000891}, 0x4000081) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000740)=0x0) r6 = syz_clone(0x10800000, &(0x7f0000000780)="9768bd0d17e3ccce8c152513e823054d5589323f993875e3bfa9f421c8ba2ca2b86f96409b0213424496d7e42e73668ad44f0adc6bcb1295ea85b1b467ffbfe8c5ae95c7e698e5243824943fa4dc50d703fbc85f0ea5ad6a1391bc90c2aa4ae29083b3b3a678d7b4d1bc71b41c4124472c9eec0bc2ed3fe8710116fd6a31c01f6cf08fc0b1bb9ed0ace7a80296a8c97ad1", 0x91, &(0x7f0000000840), &(0x7f0000000880), &(0x7f00000008c0)="4c48ab0f18c01acc3132b698dd39ac6b421ee3351ec1c9b27dd62627f9f113c7") kcmp(r5, r6, 0x3, r1, r1) sendmsg$TIPC_CMD_GET_BEARER_NAMES(r3, &(0x7f00000009c0)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000980)={&(0x7f0000000940)={0x1c, r2, 0x2, 0x70bd2a, 0x25dfdbfd, {}, ["", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0x40) r7 = socket$nl_sock_diag(0x10, 0x3, 0x4) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000a40)={'veth1_to_bridge\x00', 0x0}) sendmsg$TCPDIAG_GETSOCK(r7, &(0x7f0000000bc0)={&(0x7f0000000a00)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000b80)={&(0x7f0000000a80)={0xd4, 0x12, 0x200, 0x70bd2d, 0x25dfdbfd, {0x6, 0xf9, 0x0, 0x4, {0x4e24, 0x4e24, [0x4, 0xfffffffd, 0x2, 0x5d], [0x80, 0x2, 0x6, 0x80000001], r8, [0xa, 0x28b]}, 0x5a64, 0x8a7}, [@INET_DIAG_REQ_BYTECODE={0x87, 0x1, "a046cddd9405259ca5b74e92109e8544bb52365f43fd37c5134e983a5d61d57f1ccc7fd235d0ed1475f07105c231d7422dfcfd8a6070d407df1bb654e2eb7717b9f0efd6b25ccf2b57c0f585b8955eafcc0a342ffc57a397cbf4bf3dbc50592548eded56783f489068ee95b3ade7635dd247adaa93a2b94536cfe516040505ef6e1189"}]}, 0xd4}}, 0x24040090) mount$tmpfs(0x0, &(0x7f0000000c00)='./file0\x00', &(0x7f0000000c40), 0xd447a791e074d7dc, &(0x7f0000000c80)={[{@inode64}, {@quota}, {@huge_advise}, {@huge_always}, {@huge_within_size}, {@huge_within_size}], [{@mask={'mask', 0x3d, '^MAY_APPEND'}}, {@uid_gt={'uid>', 0xee01}}, {@hash}, {@euid_eq={'euid', 0x3d, 0xee01}}, {@measure}, {@obj_role={'obj_role', 0x3d, 'nl80211\x00'}}, {@defcontext={'defcontext', 0x3d, 'unconfined_u'}}]}) sendmmsg(r1, &(0x7f0000002700)=[{{&(0x7f0000000d80)=@pptp={0x18, 0x2, {0x0, @local}}, 0x80, &(0x7f0000000f40)=[{&(0x7f0000000e00)="15bc28ef9b329677e5a6e3c0a22278733a8ac429d5545db782f9d52a6cc943a35954fedd6eb5bd6933c974be563104de58eb1800a52c03748168de9968e54110be4d6d41ef0247c92fbc1709b1418c87f972c52095d882a26cacd983c81d6a883fd318f33a8b6d5c0c9aa3dc6655ecef038a7c4d0906863fabced219d03ebb949686a3356bf8fff265823428bfed00a140fb673acf1034a65d", 0x99}, {&(0x7f0000000ec0)="427db97a3608bcda3217852336ec9aa9e22751a81dd5fc903db9d873b313ade77c4856c7be8506e641deefaba69ed14ab127a41d1a590d163dea2f004f2e0c12c4d0a805339357a2934ee9103dba181af878b36a7daea2491559bd9cee9664afd19b7eb75339e0898a0de7d772b9e496397f4804f8e20ff37f75948ca0", 0x7d}], 0x2, &(0x7f0000000f80)=[{0xd0, 0x118, 0x5, "c0c7075f33bfabf9fbd218408a9e24f07c38f5b414892ed2f9daa1577ad26e81cf38249908c086399cef92007f8c46ab572b02a57ba9fe71c870d34b9348c1dca65f3672d276297f6bfd99dd595cae8dc2cc9f0ad168f0b5ed264c6560fb69d58659757bbce68fc0b0c056c85ee66368f58a53d6573b08dba354832b737ff4bfff0a58b95f3bd503723e32cb666ca73c4cb41f8e8f3175d6e78e656e2f22d92aa62fecf25b3e4f6bde0974a6e964b9898b9a3f48581781800cbb22205efc"}, {0xa8, 0x10e, 0x3, "4cb931a66c5515f6c431a5756e896780743768c7545897cc9ea0a880d7766acac1316977afd243458cf00698953cf693baebba8f24467eb843194a83385ccc0cf8e1c9bbd3c0c1b97f105fcaa2f87d7c910acc58385629f024f71c80f447624ce48a96fe3b2ec400f3b312b0017fa66ed3b2abbbef1bbfdc223dd2e5661ecc77e403fb9775689d1f9428590c9c3f3f6c22c55197bbc812"}, {0x28, 0x106, 0x9, "24ccd1d06f0ec3094de8aa3125466adf097c94629d"}, {0x50, 0x11, 0xd3b7, "8cb1114bbfa1f71498584fc26bf68661c5eb19e1bb3928606a52fdbe0c2c7c0bff749018dc555cb97cf11c7371170481214cb78a5b2d0cb9f5d2c9ea4571c048"}, {0x110, 0x6, 0x5, "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"}], 0x300}}, {{&(0x7f0000001280)=@can={0x1d, r8}, 0x80, &(0x7f0000002540)=[{&(0x7f0000001300)="b94f3889ad71932699478fff3c8731bdb8a02c440f94b7bf9cca0726a0d4177a3ccd307ae8f063c76f55d2f5a3c32ab1a6e6945b769a2594782d43d2e176725dd3dc6e3239014c1be5684fd50dc6391a4e87359365f69a90a3126daf7348cb0bc79ddffe01343dcebadb2c5bb8012c27d36db3466e5e2d2218109435d4c0fad5a66d4766298549c4ca450b923e335fd0dc87c16c9ff10043de1e6534d8bafcd57aabb91fa349ba09311b6c1f5fa80f2c1b7ea81931e0e1555f48ffcd5ec22f2e79262fa57ac8e8d3ca8a8ebd4933bbd924b0774c2c48c5503fb998", 0xdb}, {&(0x7f0000001400)="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", 0x1000}, {&(0x7f0000002400)="9be9791793880b3fcd061adcb675863f3493b3eb3e7dbce52ba105077b7fe5cc7ae620b1c7855b5d0d103ab99a174e2fb7e44ab074ae3b5406cb76dc99343edbe9f340d9d01431faca498a2844b4c34253edf6398be9a68572dd50713fd82949ac570b9918f45972806edaba10e1af479955f7e022cc648c95faffda6b2f55a879461791c92757458244600fa69fe459552edea0487b79ef228a54d109", 0x9d}, {&(0x7f00000024c0)="34e7d0cc8b88bac3faf503ce6d533e0f8a4721212ca265c6ef0b5f59287c0066837611cfbf5c9e217d284a13", 0x2c}, {&(0x7f0000002500)="083c54a297db8b05e236a055d3b86fa6fbc1ff6ddc25b765383cae4be9e8e073b9ae10779fcaf33db2", 0x29}], 0x5, &(0x7f00000025c0)=[{0x58, 0x119, 0x100, "46645972f00d871b482d15587266aabc4a29b33f347c1215ed9b6813e5161026e88405942a7de42e1904b690e62fe15f7dc8fdcb0bff2b5d504472ae0c012ad10d5943d899"}, {0x68, 0x11, 0x40, "acaf2893c408a40dce864fc75bc8cdbc0b4dfa4d1d2ffc80ac3c8945146eb703f68cc652bfaf83934a22de07391ee761801e48ec9efd3794aaa5185e3bab3f3ded21ab398380352004db798cd9916bef3bcb399cbccc67cd"}, {0x50, 0x113, 0x0, "3cffc12474cee2b35f706a535b97a46e96d94ffb8625ed194265e1f9f3a966234fd960be40890b3a6e39db3a4251097593eb7f87d999ffa0fc14c4ff5f"}], 0x110}}], 0x2, 0x24000041) sendmsg$NL80211_CMD_STOP_P2P_DEVICE(r3, &(0x7f0000002840)={&(0x7f0000002780)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000002800)={&(0x7f00000027c0)={0x20, r4, 0x100, 0x70bd28, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0xf, 0x23}}}}, ["", "", "", "", "", "", "", "", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x24000000}, 0x0) getsockopt$IP_VS_SO_GET_TIMEOUT(r1, 0x0, 0x486, &(0x7f0000002880), &(0x7f00000028c0)=0xc) r9 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000002ac0)={0x1b, 0x0, 0x0, 0x9, 0x0, 0x1, 0x8, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x3}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000002bc0)={0x16, 0x10, &(0x7f0000002900)=@framed={{0x18, 0x0, 0x0, 0x0, 0xe0, 0x0, 0x0, 0x0, 0x5}, [@printk={@llx, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x1e}}, @btf_id={0x18, 0xa, 0x3, 0x0, 0x1}, @func={0x85, 0x0, 0x1, 0x0, 0x6}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x3}, @exit]}, &(0x7f0000002980)='syzkaller\x00', 0x5, 0x7f, &(0x7f00000029c0)=""/127, 0x61980, 0x4, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x8, &(0x7f0000002a40)={0x5, 0x2}, 0x8, 0x10, &(0x7f0000002a80)={0x2, 0x1, 0xfffffffb, 0xf5}, 0x10, 0x0, 0xffffffffffffffff, 0x3, &(0x7f0000002b40)=[r9], &(0x7f0000002b80)=[{0x0, 0x5, 0x5, 0x1}, {0x1, 0x3, 0xb, 0x9}, {0x4, 0x4, 0x8}], 0x10, 0x4}, 0x94) r10 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_vcan(r10, 0x8933, &(0x7f0000002cc0)={'vcan0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000002d00)={'batadv_slave_1\x00', 0x0}) sendmsg$ETHTOOL_MSG_PAUSE_GET(r10, &(0x7f0000002f00)={&(0x7f0000002c80)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000002ec0)={&(0x7f0000002d40)={0x150, 0x0, 0x300, 0x70bd27, 0x25dfdbfb, {}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0x48, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team_slave_1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syzkaller0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_batadv\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}]}, @HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pimreg1\x00'}]}, @HEADER={0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r11}]}, @HEADER={0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6gretap0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @HEADER={0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_team\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1\x00'}]}, @HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_bond\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r12}]}]}, 0x150}, 0x1, 0x0, 0x0, 0x4000000}, 0x24004000) r13 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000002f80)={'wpan4\x00', 0x0}) sendmsg$NL802154_CMD_DEL_SEC_LEVEL(r13, &(0x7f00000031c0)={&(0x7f0000002f40)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000003180)={&(0x7f0000003080)={0xe0, 0x0, 0x101, 0x70bd2c, 0x25dfdbfc, {}, [@NL802154_ATTR_SEC_LEVEL={0xc, 0x2d, 0x0, 0x1, [@NL802154_SECLEVEL_ATTR_FRAME={0x8}]}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r14}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_SEC_LEVEL={0x2c, 0x2d, 0x0, 0x1, [@NL802154_SECLEVEL_ATTR_FRAME={0x8}, @NL802154_SECLEVEL_ATTR_FRAME={0x8, 0x2, 0x2}, @NL802154_SECLEVEL_ATTR_LEVELS={0x5, 0x1, 0x9}, @NL802154_SECLEVEL_ATTR_DEV_OVERRIDE={0x5}, @NL802154_SECLEVEL_ATTR_FRAME={0x8, 0x2, 0x1}]}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_SEC_LEVEL={0x54, 0x2d, 0x0, 0x1, [@NL802154_SECLEVEL_ATTR_FRAME={0x8, 0x2, 0x3}, @NL802154_SECLEVEL_ATTR_LEVELS={0x5, 0x1, 0xad}, @NL802154_SECLEVEL_ATTR_LEVELS={0x5}, @NL802154_SECLEVEL_ATTR_LEVELS={0x5, 0x1, 0x4}, @NL802154_SECLEVEL_ATTR_DEV_OVERRIDE={0x5, 0x4, 0x1}, @NL802154_SECLEVEL_ATTR_CMD_FRAME={0x8, 0x3, 0x4}, @NL802154_SECLEVEL_ATTR_DEV_OVERRIDE={0x5, 0x4, 0x1}, @NL802154_SECLEVEL_ATTR_FRAME={0x8, 0x2, 0x2}, @NL802154_SECLEVEL_ATTR_LEVELS={0x5, 0x1, 0x4}, @NL802154_SECLEVEL_ATTR_CMD_FRAME={0x8, 0x3, 0x2}]}]}, 0xe0}, 0x1, 0x0, 0x0, 0x4000}, 0x804) kernel console output (not intermixed with test programs): aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 119.566934][ T7007] loop6: detected capacity change from 0 to 128 [ 119.574209][ T3914] EXT4-fs (loop7): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 119.637158][ T7012] loop7: detected capacity change from 0 to 512 [ 119.644083][ T7012] EXT4-fs: dax option not supported [ 119.714724][ T7018] xt_TCPMSS: Only works on TCP SYN packets [ 119.896285][ T7029] loop2: detected capacity change from 0 to 2048 [ 119.961651][ T7029] Alternate GPT is invalid, using primary GPT. [ 119.968117][ T7029] loop2: p1 p2 p3 [ 119.993945][ T7029] __nla_validate_parse: 5 callbacks suppressed [ 119.993959][ T7029] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1123'. [ 120.174497][ T7038] loop2: detected capacity change from 0 to 128 [ 120.471960][ T7041] loop6: detected capacity change from 0 to 128 [ 120.480785][ T7041] EXT4-fs (loop6): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 120.493134][ T7041] ext4 filesystem being mounted at /169/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 120.538148][ T3873] EXT4-fs (loop6): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 120.572299][ T7045] loop6: detected capacity change from 0 to 512 [ 120.593874][ T7045] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 120.630631][ T7045] ext4 filesystem being mounted at /170/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 120.718963][ T7051] EXT4-fs error (device loop6): ext4_do_update_inode:5632: inode #2: comm syz.6.1129: corrupted inode contents [ 120.752910][ T7050] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=56 sclass=netlink_route_socket pid=7050 comm=syz.6.1129 [ 120.765469][ T7050] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=60 sclass=netlink_route_socket pid=7050 comm=syz.6.1129 [ 120.770586][ T7051] EXT4-fs error (device loop6): ext4_dirty_inode:6517: inode #2: comm syz.6.1129: mark_inode_dirty error [ 120.778052][ T7050] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=64 sclass=netlink_route_socket pid=7050 comm=syz.6.1129 [ 120.826805][ T7050] netlink: 128 bytes leftover after parsing attributes in process `syz.6.1129'. [ 120.905086][ T7065] loop9: detected capacity change from 0 to 2048 [ 120.918304][ T7070] FAULT_INJECTION: forcing a failure. [ 120.918304][ T7070] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 120.931015][ T7051] EXT4-fs error (device loop6): ext4_do_update_inode:5632: inode #2: comm syz.6.1129: corrupted inode contents [ 120.931433][ T7070] CPU: 1 UID: 0 PID: 7070 Comm: syz.7.1136 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 120.931466][ T7070] Tainted: [W]=WARN [ 120.931473][ T7070] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 120.931488][ T7070] Call Trace: [ 120.931567][ T7070] [ 120.931575][ T7070] __dump_stack+0x1d/0x30 [ 120.931605][ T7070] dump_stack_lvl+0xe8/0x140 [ 120.931626][ T7070] dump_stack+0x15/0x1b [ 120.931645][ T7070] should_fail_ex+0x265/0x280 [ 120.931666][ T7070] should_fail+0xb/0x20 [ 120.931682][ T7070] should_fail_usercopy+0x1a/0x20 [ 120.931726][ T7070] strncpy_from_user+0x25/0x230 [ 120.931755][ T7070] ? bpf_trace_run2+0x124/0x1c0 [ 120.931788][ T7070] __se_sys_request_key+0x57/0x290 [ 120.931829][ T7070] __x64_sys_request_key+0x55/0x70 [ 120.931861][ T7070] x64_sys_call+0x1d98/0x3000 [ 120.931885][ T7070] do_syscall_64+0xd2/0x200 [ 120.931906][ T7070] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 120.932002][ T7070] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 120.932038][ T7070] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 120.932059][ T7070] RIP: 0033:0x7f3bb1ddefc9 [ 120.932080][ T7070] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 120.932099][ T7070] RSP: 002b:00007f3bb0847038 EFLAGS: 00000246 ORIG_RAX: 00000000000000f9 [ 120.932187][ T7070] RAX: ffffffffffffffda RBX: 00007f3bb2035fa0 RCX: 00007f3bb1ddefc9 [ 120.932199][ T7070] RDX: 00002000000003c0 RSI: 0000200000000380 RDI: 00002000000000c0 [ 120.932211][ T7070] RBP: 00007f3bb0847090 R08: 0000000000000000 R09: 0000000000000000 [ 120.932222][ T7070] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 120.932233][ T7070] R13: 00007f3bb2036038 R14: 00007f3bb2035fa0 R15: 00007ffeba3f9398 [ 120.932254][ T7070] [ 121.125599][ T3632] Bluetooth: hci0: command 0x1003 tx timeout [ 121.131621][ T44] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 121.170546][ T7051] EXT4-fs error (device loop6): __ext4_ext_dirty:206: inode #2: comm syz.6.1129: mark_inode_dirty error [ 121.190086][ T7065] Alternate GPT is invalid, using primary GPT. [ 121.196415][ T7065] loop9: p1 p2 p3 [ 121.213616][ T7065] netlink: 12 bytes leftover after parsing attributes in process `syz.9.1135'. [ 121.227279][ T7073] loop3: detected capacity change from 0 to 1024 [ 121.351918][ T7073] EXT4-fs (loop3): couldn't mount as ext3 due to feature incompatibilities [ 121.369337][ T7075] loop7: detected capacity change from 0 to 128 [ 121.381722][ T7079] netlink: 64 bytes leftover after parsing attributes in process `syz.2.1137'. [ 121.401146][ T7079] usb usb1: usbfs: interface 0 claimed by hub while 'syz.2.1137' sets config #0 [ 121.410693][ T7079] usb usb1: usbfs: interface 0 claimed by hub while 'syz.2.1137' sets config #1 [ 121.421716][ T7075] EXT4-fs (loop7): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 121.440697][ T7075] ext4 filesystem being mounted at /244/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 121.468204][ T3914] EXT4-fs (loop7): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 121.610219][ T7098] loop3: detected capacity change from 0 to 128 [ 121.638819][ T7101] loop2: detected capacity change from 0 to 512 [ 121.656963][ T7101] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a842c098, mo2=0002] [ 121.670495][ T7101] System zones: 1-2, 4-12, 8-8 [ 121.681619][ T7101] EXT4-fs error (device loop2): ext4_free_branches:1023: inode #11: comm syz.2.1148: invalid indirect mapped block 256 (level 2) [ 121.701484][ T7101] EXT4-fs (loop2): 2 truncates cleaned up [ 121.708122][ T7101] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 121.840887][ T5753] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 122.021368][ T7116] loop2: detected capacity change from 0 to 2048 [ 122.061096][ T7116] Alternate GPT is invalid, using primary GPT. [ 122.067367][ T7116] loop2: p1 p2 p3 [ 122.221810][ T7121] loop9: detected capacity change from 0 to 128 [ 122.235499][ T7116] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1150'. [ 122.381514][ T7121] EXT4-fs (loop9): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 122.393977][ T7121] ext4 filesystem being mounted at /92/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 122.437800][ T5527] EXT4-fs (loop9): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 122.657763][ T7131] bridge_slave_0: left allmulticast mode [ 122.663473][ T7131] bridge_slave_0: left promiscuous mode [ 122.669126][ T7131] bridge0: port 1(bridge_slave_0) entered disabled state [ 122.714419][ T7134] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1157'. [ 122.752292][ T7131] bridge_slave_1: left allmulticast mode [ 122.757977][ T7131] bridge_slave_1: left promiscuous mode [ 122.763674][ T7131] bridge0: port 2(bridge_slave_1) entered disabled state [ 122.788026][ T7131] bond0: (slave bond_slave_0): Releasing backup interface [ 122.798244][ T7131] bond0: (slave bond_slave_1): Releasing backup interface [ 122.811936][ T7131] team0: Port device team_slave_0 removed [ 122.818695][ T7131] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 122.826136][ T7131] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 122.854266][ T7131] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 122.861739][ T7131] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 122.875970][ T7131] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 122.893324][ T7134] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1157'. [ 122.937853][ T7143] netlink: 'syz.2.1160': attribute type 10 has an invalid length. [ 122.945759][ T7143] netlink: 168 bytes leftover after parsing attributes in process `syz.2.1160'. [ 122.966866][ T7145] netlink: 64 bytes leftover after parsing attributes in process `syz.9.1161'. [ 122.986865][ T7143] team0: Port device syz_tun added [ 123.029091][ T7143] hub 6-0:1.0: USB hub found [ 123.033970][ T7143] hub 6-0:1.0: 8 ports detected [ 123.556255][ T7163] loop9: detected capacity change from 0 to 128 [ 123.698607][ T7164] loop3: detected capacity change from 0 to 512 [ 123.719944][ T7164] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1165'. [ 123.988637][ T7168] loop2: detected capacity change from 0 to 2048 [ 124.035069][ T29] kauditd_printk_skb: 283 callbacks suppressed [ 124.035084][ T29] audit: type=1326 audit(1762004127.679:10051): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7165 comm="syz.9.1168" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f826712efc9 code=0x7ffc0000 [ 124.064900][ T29] audit: type=1326 audit(1762004127.679:10052): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7165 comm="syz.9.1168" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f826712efc9 code=0x7ffc0000 [ 124.089067][ T7166] loop9: detected capacity change from 0 to 1024 [ 124.109921][ T7168] Alternate GPT is invalid, using primary GPT. [ 124.109958][ T7166] EXT4-fs (loop9): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 124.116260][ T7168] loop2: p1 p2 p3 [ 124.149783][ T29] audit: type=1326 audit(1762004127.679:10053): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7165 comm="syz.9.1168" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f826712efc9 code=0x7ffc0000 [ 124.173400][ T29] audit: type=1326 audit(1762004127.679:10054): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7165 comm="syz.9.1168" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f826712efc9 code=0x7ffc0000 [ 124.197022][ T29] audit: type=1326 audit(1762004127.679:10055): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7165 comm="syz.9.1168" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f826712efc9 code=0x7ffc0000 [ 124.221125][ T29] audit: type=1326 audit(1762004127.679:10056): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7165 comm="syz.9.1168" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f826712efc9 code=0x7ffc0000 [ 124.244654][ T29] audit: type=1326 audit(1762004127.679:10057): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7165 comm="syz.9.1168" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f826712efc9 code=0x7ffc0000 [ 124.268292][ T29] audit: type=1326 audit(1762004127.679:10058): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7165 comm="syz.9.1168" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f826712efc9 code=0x7ffc0000 [ 124.292094][ T29] audit: type=1326 audit(1762004127.679:10059): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7165 comm="syz.9.1168" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f826712efc9 code=0x7ffc0000 [ 124.315579][ T29] audit: type=1326 audit(1762004127.679:10060): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7165 comm="syz.9.1168" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f826712efc9 code=0x7ffc0000 [ 124.376316][ T7166] EXT4-fs (loop9): revision level too high, forcing read-only mode [ 124.437034][ T7166] EXT4-fs (loop9): orphan cleanup on readonly fs [ 124.451879][ T7166] EXT4-fs error (device loop9): __ext4_get_inode_loc:4832: comm syz.9.1168: Invalid inode table block 0 in block_group 0 [ 124.472502][ T7166] EXT4-fs error (device loop9) in ext4_reserve_inode_write:6313: Corrupt filesystem [ 124.549528][ T7166] EXT4-fs error (device loop9): ext4_quota_write:7334: inode #3: comm syz.9.1168: mark_inode_dirty error [ 124.605077][ T7184] FAULT_INJECTION: forcing a failure. [ 124.605077][ T7184] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 124.618229][ T7184] CPU: 1 UID: 0 PID: 7184 Comm: syz.7.1174 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 124.618328][ T7184] Tainted: [W]=WARN [ 124.618335][ T7184] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 124.618347][ T7184] Call Trace: [ 124.618352][ T7184] [ 124.618359][ T7184] __dump_stack+0x1d/0x30 [ 124.618380][ T7184] dump_stack_lvl+0xe8/0x140 [ 124.618399][ T7184] dump_stack+0x15/0x1b [ 124.618466][ T7184] should_fail_ex+0x265/0x280 [ 124.618566][ T7184] should_fail+0xb/0x20 [ 124.618584][ T7184] should_fail_usercopy+0x1a/0x20 [ 124.618652][ T7184] _copy_to_user+0x20/0xa0 [ 124.618679][ T7184] simple_read_from_buffer+0xb5/0x130 [ 124.618702][ T7184] proc_fail_nth_read+0x10e/0x150 [ 124.618731][ T7184] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 124.618815][ T7184] vfs_read+0x1a8/0x770 [ 124.618839][ T7184] ? __rcu_read_unlock+0x4f/0x70 [ 124.618863][ T7184] ? __fget_files+0x184/0x1c0 [ 124.618965][ T7184] ksys_read+0xda/0x1a0 [ 124.618991][ T7184] __x64_sys_read+0x40/0x50 [ 124.619036][ T7184] x64_sys_call+0x27c0/0x3000 [ 124.619062][ T7184] do_syscall_64+0xd2/0x200 [ 124.619085][ T7184] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 124.619164][ T7184] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 124.619197][ T7184] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 124.619216][ T7184] RIP: 0033:0x7f3bb1ddd9dc [ 124.619229][ T7184] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 124.619279][ T7184] RSP: 002b:00007f3bb0847030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 124.619302][ T7184] RAX: ffffffffffffffda RBX: 00007f3bb2035fa0 RCX: 00007f3bb1ddd9dc [ 124.619316][ T7184] RDX: 000000000000000f RSI: 00007f3bb08470a0 RDI: 0000000000000007 [ 124.619330][ T7184] RBP: 00007f3bb0847090 R08: 0000000000000000 R09: 0000000000000000 [ 124.619344][ T7184] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 124.619359][ T7184] R13: 00007f3bb2036038 R14: 00007f3bb2035fa0 R15: 00007ffeba3f9398 [ 124.619379][ T7184] [ 124.834596][ T7175] xt_TCPMSS: Only works on TCP SYN packets [ 124.860701][ T7166] EXT4-fs error (device loop9): ext4_acquire_dquot:6945: comm syz.9.1168: Failed to acquire dquot type 0 [ 124.872339][ T7166] EXT4-fs error (device loop9): __ext4_get_inode_loc:4832: comm syz.9.1168: Invalid inode table block 0 in block_group 0 [ 124.887913][ T7166] EXT4-fs error (device loop9) in ext4_reserve_inode_write:6313: Corrupt filesystem [ 124.933442][ T7194] loop3: detected capacity change from 0 to 128 [ 124.940226][ T7166] EXT4-fs error (device loop9): ext4_ext_truncate:4475: inode #15: comm syz.9.1168: mark_inode_dirty error [ 124.954838][ T7166] EXT4-fs error (device loop9): __ext4_get_inode_loc:4832: comm syz.9.1168: Invalid inode table block 0 in block_group 0 [ 124.974886][ T7166] EXT4-fs error (device loop9) in ext4_reserve_inode_write:6313: Corrupt filesystem [ 124.988795][ T7166] EXT4-fs error (device loop9) in ext4_orphan_del:301: Corrupt filesystem [ 125.003418][ T3873] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 125.024865][ T7166] EXT4-fs error (device loop9): __ext4_get_inode_loc:4832: comm syz.9.1168: Invalid inode table block 0 in block_group 0 [ 125.037705][ T7166] EXT4-fs error (device loop9) in ext4_reserve_inode_write:6313: Corrupt filesystem [ 125.047386][ T7166] EXT4-fs error (device loop9): ext4_truncate:4637: inode #15: comm syz.9.1168: mark_inode_dirty error [ 125.058772][ T7166] EXT4-fs error (device loop9) in ext4_process_orphan:343: Corrupt filesystem [ 125.068116][ T7166] EXT4-fs (loop9): 1 truncate cleaned up [ 125.081890][ T7201] loop7: detected capacity change from 0 to 2048 [ 125.106116][ T7205] FAULT_INJECTION: forcing a failure. [ 125.106116][ T7205] name failslab, interval 1, probability 0, space 0, times 0 [ 125.110425][ T7166] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 125.118956][ T7205] CPU: 1 UID: 0 PID: 7205 Comm: syz.2.1184 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 125.119096][ T7205] Tainted: [W]=WARN [ 125.119103][ T7205] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 125.119115][ T7205] Call Trace: [ 125.119122][ T7205] [ 125.119130][ T7205] __dump_stack+0x1d/0x30 [ 125.119213][ T7205] dump_stack_lvl+0xe8/0x140 [ 125.119233][ T7205] dump_stack+0x15/0x1b [ 125.119251][ T7205] should_fail_ex+0x265/0x280 [ 125.119328][ T7205] ? __request_region+0x55/0x420 [ 125.119361][ T7205] should_failslab+0x8c/0xb0 [ 125.119391][ T7205] __kmalloc_cache_noprof+0x4c/0x4a0 [ 125.119431][ T7205] __request_region+0x55/0x420 [ 125.119463][ T7205] ? __list_add_valid_or_report+0x38/0xe0 [ 125.119491][ T7205] ? _raw_spin_unlock_irqrestore+0x2b/0x60 [ 125.119586][ T7205] ? __put_partials+0xf0/0x150 [ 125.119610][ T7205] serial8250_request_std_resource+0x11d/0x260 [ 125.119758][ T7205] serial8250_config_port+0x38/0x2b70 [ 125.119867][ T7205] ? free_resource+0x11b/0x270 [ 125.119899][ T7205] ? __release_region+0x1e1/0x240 [ 125.119935][ T7205] univ8250_config_port+0x299/0x370 [ 125.119971][ T7205] uart_ioctl+0xb87/0xe80 [ 125.119999][ T7205] ? do_vfs_ioctl+0x866/0xe10 [ 125.120022][ T7205] ? tty_jobctrl_ioctl+0x29e/0x810 [ 125.120057][ T7205] tty_ioctl+0x7d8/0xb80 [ 125.120104][ T7205] ? __pfx_tty_ioctl+0x10/0x10 [ 125.120126][ T7205] __se_sys_ioctl+0xce/0x140 [ 125.120203][ T7205] __x64_sys_ioctl+0x43/0x50 [ 125.120223][ T7205] x64_sys_call+0x1816/0x3000 [ 125.120247][ T7205] do_syscall_64+0xd2/0x200 [ 125.120266][ T7205] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 125.120337][ T7205] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 125.120370][ T7205] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 125.120392][ T7205] RIP: 0033:0x7f688481efc9 [ 125.120475][ T7205] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 125.120541][ T7205] RSP: 002b:00007f688327f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 125.120561][ T7205] RAX: ffffffffffffffda RBX: 00007f6884a75fa0 RCX: 00007f688481efc9 [ 125.120574][ T7205] RDX: 0000000000000000 RSI: 0000000000005453 RDI: 0000000000000004 [ 125.120587][ T7205] RBP: 00007f688327f090 R08: 0000000000000000 R09: 0000000000000000 [ 125.120600][ T7205] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 125.120618][ T7205] R13: 00007f6884a76038 R14: 00007f6884a75fa0 R15: 00007ffe129e8da8 [ 125.120636][ T7205] [ 125.143217][ T7201] Alternate GPT is invalid, using primary GPT. [ 125.303494][ T7215] __nla_validate_parse: 2 callbacks suppressed [ 125.303508][ T7215] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1185'. [ 125.307024][ T7201] loop7: p1 p2 p3 [ 125.501893][ T7218] loop3: detected capacity change from 0 to 512 [ 125.569957][ T7201] netlink: 12 bytes leftover after parsing attributes in process `syz.7.1182'. [ 125.641173][ T7221] netlink: 'syz.2.1186': attribute type 10 has an invalid length. [ 125.672086][ T7223] FAULT_INJECTION: forcing a failure. [ 125.672086][ T7223] name failslab, interval 1, probability 0, space 0, times 0 [ 125.684835][ T7223] CPU: 1 UID: 0 PID: 7223 Comm: syz.6.1187 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 125.684879][ T7223] Tainted: [W]=WARN [ 125.684885][ T7223] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 125.684897][ T7223] Call Trace: [ 125.684925][ T7223] [ 125.684932][ T7223] __dump_stack+0x1d/0x30 [ 125.684952][ T7223] dump_stack_lvl+0xe8/0x140 [ 125.684974][ T7223] dump_stack+0x15/0x1b [ 125.685053][ T7223] should_fail_ex+0x265/0x280 [ 125.685075][ T7223] should_failslab+0x8c/0xb0 [ 125.685155][ T7223] __kvmalloc_node_noprof+0x12e/0x670 [ 125.685192][ T7223] ? bpf_test_run_xdp_live+0xed/0x11c0 [ 125.685227][ T7223] ? __cond_resched+0x4e/0x90 [ 125.685260][ T7223] bpf_test_run_xdp_live+0xed/0x11c0 [ 125.685298][ T7223] ? 0xffffffffa0201800 [ 125.685341][ T7223] ? synchronize_rcu+0x45/0x320 [ 125.685359][ T7223] ? 0xffffffffa0201800 [ 125.685370][ T7223] ? 0xffffffffa0201800 [ 125.685382][ T7223] ? bpf_dispatcher_change_prog+0x6ec/0x7f0 [ 125.685410][ T7223] ? 0xffffffffa0201800 [ 125.685433][ T7223] ? __pfx_xdp_test_run_init_page+0x10/0x10 [ 125.685478][ T7223] bpf_prog_test_run_xdp+0x525/0x970 [ 125.685516][ T7223] ? __rcu_read_unlock+0x4f/0x70 [ 125.685546][ T7223] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 125.685620][ T7223] bpf_prog_test_run+0x22a/0x390 [ 125.685730][ T7223] __sys_bpf+0x4c0/0x7c0 [ 125.685757][ T7223] __x64_sys_bpf+0x41/0x50 [ 125.685790][ T7223] x64_sys_call+0x2aee/0x3000 [ 125.685816][ T7223] do_syscall_64+0xd2/0x200 [ 125.685875][ T7223] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 125.685963][ T7223] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 125.686007][ T7223] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 125.686045][ T7223] RIP: 0033:0x7fc2eddeefc9 [ 125.686061][ T7223] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 125.686081][ T7223] RSP: 002b:00007fc2ec84f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 125.686103][ T7223] RAX: ffffffffffffffda RBX: 00007fc2ee045fa0 RCX: 00007fc2eddeefc9 [ 125.686154][ T7223] RDX: 0000000000000048 RSI: 0000200000000240 RDI: 000000000000000a [ 125.686166][ T7223] RBP: 00007fc2ec84f090 R08: 0000000000000000 R09: 0000000000000000 [ 125.686179][ T7223] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 125.686193][ T7223] R13: 00007fc2ee046038 R14: 00007fc2ee045fa0 R15: 00007fffbbd74b18 [ 125.686214][ T7223] [ 125.686746][ T7221] FAULT_INJECTION: forcing a failure. [ 125.686746][ T7221] name failslab, interval 1, probability 0, space 0, times 0 [ 125.740935][ T7224] netlink: 'syz.2.1186': attribute type 10 has an invalid length. [ 125.745938][ T7221] CPU: 1 UID: 0 PID: 7221 Comm: syz.2.1186 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 125.746012][ T7221] Tainted: [W]=WARN [ 125.746019][ T7221] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 125.746032][ T7221] Call Trace: [ 125.746040][ T7221] [ 125.746048][ T7221] __dump_stack+0x1d/0x30 [ 125.746106][ T7221] dump_stack_lvl+0xe8/0x140 [ 125.746167][ T7221] dump_stack+0x15/0x1b [ 125.746185][ T7221] should_fail_ex+0x265/0x280 [ 125.746206][ T7221] should_failslab+0x8c/0xb0 [ 125.746249][ T7221] kmem_cache_alloc_node_noprof+0x57/0x4a0 [ 125.746281][ T7221] ? __alloc_skb+0x101/0x320 [ 125.746312][ T7221] __alloc_skb+0x101/0x320 [ 125.746390][ T7221] ? _raw_spin_unlock_bh+0x36/0x40 [ 125.746418][ T7221] inet_ifmcaddr_notify+0x64/0x120 [ 125.746446][ T7221] __ip_mc_dec_group+0x1ac/0x3d0 [ 125.746563][ T7221] ip_mc_down+0x13d/0x1c0 [ 125.746671][ T7221] inetdev_event+0x1b3/0xc10 [ 125.746690][ T7221] ? __rcu_read_unlock+0x4f/0x70 [ 125.746717][ T7221] ? ib_netdevice_event+0x281/0x5f0 [ 125.746764][ T7221] ? __pfx_arp_netdev_event+0x10/0x10 [ 125.746791][ T7221] ? __pfx_inetdev_event+0x10/0x10 [ 125.746810][ T7221] raw_notifier_call_chain+0x6f/0x1b0 [ 125.746863][ T7221] ? call_netdevice_notifiers_info+0x9c/0x100 [ 125.746890][ T7221] call_netdevice_notifiers_info+0xae/0x100 [ 125.746918][ T7221] __dev_notify_flags+0xff/0x1a0 [ 125.746950][ T7221] netif_change_flags+0xac/0xd0 [ 125.746980][ T7221] do_setlink+0x9d2/0x2810 [ 125.747010][ T7221] ? _raw_spin_unlock+0x26/0x50 [ 125.747074][ T7221] ? finish_task_switch+0xad/0x2b0 [ 125.747099][ T7221] ? __schedule+0x6b9/0xb30 [ 125.747128][ T7221] rtnl_newlink+0xe75/0x12d0 [ 125.747218][ T7221] ? vfree+0x295/0x3a0 [ 125.747247][ T7221] ? xas_load+0x413/0x430 [ 125.747279][ T7221] ? xas_load+0x413/0x430 [ 125.747330][ T7221] ? __rcu_read_unlock+0x4f/0x70 [ 125.747399][ T7221] ? __rcu_read_unlock+0x4f/0x70 [ 125.747426][ T7221] ? avc_has_perm_noaudit+0x1b1/0x200 [ 125.747449][ T7221] ? cred_has_capability+0x210/0x280 [ 125.747483][ T7221] ? selinux_capable+0x31/0x40 [ 125.747537][ T7221] ? security_capable+0x83/0x90 [ 125.747571][ T7221] ? ns_capable+0x7d/0xb0 [ 125.747595][ T7221] ? __pfx_rtnl_newlink+0x10/0x10 [ 125.747700][ T7221] rtnetlink_rcv_msg+0x5fe/0x6d0 [ 125.747727][ T7221] netlink_rcv_skb+0x123/0x220 [ 125.747760][ T7221] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 125.747790][ T7221] rtnetlink_rcv+0x1c/0x30 [ 125.747811][ T7221] netlink_unicast+0x5c0/0x690 [ 125.747861][ T7221] netlink_sendmsg+0x58b/0x6b0 [ 125.747883][ T7221] ? __pfx_netlink_sendmsg+0x10/0x10 [ 125.747926][ T7221] __sock_sendmsg+0x145/0x180 [ 125.747948][ T7221] ____sys_sendmsg+0x31e/0x4e0 [ 125.747995][ T7221] ___sys_sendmsg+0x17b/0x1d0 [ 125.748075][ T7221] __x64_sys_sendmsg+0xd4/0x160 [ 125.748098][ T7221] x64_sys_call+0x191e/0x3000 [ 125.748195][ T7221] do_syscall_64+0xd2/0x200 [ 125.748215][ T7221] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 125.748243][ T7221] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 125.748276][ T7221] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 125.748298][ T7221] RIP: 0033:0x7f688481efc9 [ 125.748393][ T7221] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 125.748417][ T7221] RSP: 002b:00007f688327f038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 125.748496][ T7221] RAX: ffffffffffffffda RBX: 00007f6884a75fa0 RCX: 00007f688481efc9 [ 125.748510][ T7221] RDX: 0000000000000040 RSI: 0000200000000600 RDI: 0000000000000006 [ 125.748523][ T7221] RBP: 00007f688327f090 R08: 0000000000000000 R09: 0000000000000000 [ 125.748535][ T7221] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 125.748548][ T7221] R13: 00007f6884a76038 R14: 00007f6884a75fa0 R15: 00007ffe129e8da8 [ 125.748567][ T7221] [ 125.803867][ T7221] team0: Port device dummy0 added [ 125.917127][ T7228] loop7: detected capacity change from 0 to 512 [ 125.937552][ T7224] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 126.002316][ T7228] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 126.013924][ T7231] loop6: detected capacity change from 0 to 512 [ 126.019303][ T5527] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 126.028340][ T7228] EXT4-fs error (device loop7): ext4_free_branches:1023: inode #16: comm syz.7.1189: invalid indirect mapped block 4294967295 (level 0) [ 126.031946][ T7224] team0: Failed to send options change via netlink (err -105) [ 126.036633][ T7228] EXT4-fs error (device loop7): ext4_free_branches:1023: inode #16: comm syz.7.1189: invalid indirect mapped block 4294967295 (level 1) [ 126.040834][ T7224] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 126.046685][ T7228] EXT4-fs (loop7): 1 orphan inode deleted [ 126.052455][ T7224] team0: Port device dummy0 removed [ 126.056911][ T7228] EXT4-fs (loop7): 1 truncate cleaned up [ 126.064422][ T7224] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 126.068516][ T7231] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 126.074149][ T7228] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 126.108220][ T7231] ext4 filesystem being mounted at /173/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 126.243386][ T7240] loop2: detected capacity change from 0 to 128 [ 126.491573][ T7246] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=56 sclass=netlink_route_socket pid=7246 comm=syz.6.1191 [ 126.504095][ T7246] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=60 sclass=netlink_route_socket pid=7246 comm=syz.6.1191 [ 126.516628][ T7246] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=64 sclass=netlink_route_socket pid=7246 comm=syz.6.1191 [ 126.530041][ T7251] loop9: detected capacity change from 0 to 128 [ 126.541027][ T7251] EXT4-fs (loop9): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 126.576251][ T7251] ext4 filesystem being mounted at /104/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 126.619078][ T7255] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1196'. [ 126.628014][ T7255] netlink: 348 bytes leftover after parsing attributes in process `syz.2.1196'. [ 126.637064][ T7255] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1196'. [ 126.645976][ T7255] netlink: 348 bytes leftover after parsing attributes in process `syz.2.1196'. [ 126.666802][ T7246] netlink: 128 bytes leftover after parsing attributes in process `syz.6.1191'. [ 126.677311][ T5527] EXT4-fs (loop9): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 126.705034][ T7246] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 126.751066][ T3914] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 126.760511][ T7255] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1196'. [ 126.809389][ T7261] loop7: detected capacity change from 0 to 2048 [ 126.907875][ T7255] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1196'. [ 126.916879][ T7255] netlink: 348 bytes leftover after parsing attributes in process `syz.2.1196'. [ 126.926833][ T7261] Alternate GPT is invalid, using primary GPT. [ 126.933206][ T7261] loop7: p1 p2 p3 [ 128.402173][ T7298] siw: device registration error -23 [ 128.413252][ T7298] loop9: detected capacity change from 0 to 512 [ 128.421019][ T7299] loop3: detected capacity change from 0 to 128 [ 128.439201][ T7299] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 128.457769][ T7298] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a842c098, mo2=0002] [ 128.466777][ T7303] loop7: detected capacity change from 0 to 128 [ 128.475928][ T7298] System zones: 1-2, 4-12, 8-8 [ 128.488184][ T7299] ext4 filesystem being mounted at /261/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 128.540286][ T7298] EXT4-fs error (device loop9): ext4_free_branches:1023: inode #11: comm syz.9.1208: invalid indirect mapped block 256 (level 2) [ 128.584551][ T7298] EXT4-fs (loop9): 2 truncates cleaned up [ 128.602939][ T7298] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 128.625898][ T3322] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 128.686286][ T5527] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 128.717386][ T7308] netlink: 'syz.7.1211': attribute type 4 has an invalid length. [ 128.742110][ T7308] netlink: 'syz.7.1211': attribute type 4 has an invalid length. [ 129.183473][ T7314] usb usb1: usbfs: interface 0 claimed by hub while 'syz.2.1214' sets config #0 [ 129.213457][ T7314] usb usb1: usbfs: interface 0 claimed by hub while 'syz.2.1214' sets config #1 [ 129.258165][ T7323] loop2: detected capacity change from 0 to 128 [ 129.268518][ T7323] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 129.281009][ T7323] ext4 filesystem being mounted at /65/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 129.367929][ T5753] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 129.485005][ T7334] loop7: detected capacity change from 0 to 128 [ 129.980089][ T3873] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 129.995004][ T7341] loop9: detected capacity change from 0 to 128 [ 130.011112][ T7341] EXT4-fs (loop9): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 130.050906][ T7341] ext4 filesystem being mounted at /109/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 130.096867][ T5527] EXT4-fs (loop9): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 130.146718][ T7354] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=7354 comm=syz.6.1227 [ 130.167846][ T29] kauditd_printk_skb: 197 callbacks suppressed [ 130.167862][ T29] audit: type=1326 audit(1762004133.809:10254): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7355 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f826712efc9 code=0x7ffc0000 [ 130.211474][ T29] audit: type=1326 audit(1762004133.839:10255): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7355 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=316 compat=0 ip=0x7f826712efc9 code=0x7ffc0000 [ 130.234616][ T29] audit: type=1326 audit(1762004133.839:10256): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7355 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f826712efc9 code=0x7ffc0000 [ 130.257681][ T29] audit: type=1326 audit(1762004133.839:10257): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7355 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f826712efc9 code=0x7ffc0000 [ 130.281448][ T29] audit: type=1326 audit(1762004133.849:10258): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7357 comm="syz.6.1229" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc2eddeefc9 code=0x7ffc0000 [ 130.304990][ T29] audit: type=1326 audit(1762004133.849:10259): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7357 comm="syz.6.1229" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc2eddeefc9 code=0x7ffc0000 [ 130.328548][ T29] audit: type=1326 audit(1762004133.849:10260): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7357 comm="syz.6.1229" exe="/root/syz-executor" sig=0 arch=c000003e syscall=316 compat=0 ip=0x7fc2eddeefc9 code=0x7ffc0000 [ 130.352091][ T29] audit: type=1326 audit(1762004133.849:10261): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7357 comm="syz.6.1229" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc2eddeefc9 code=0x7ffc0000 [ 130.375569][ T29] audit: type=1326 audit(1762004133.849:10262): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7357 comm="syz.6.1229" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc2eddeefc9 code=0x7ffc0000 [ 130.399051][ T29] audit: type=1326 audit(1762004133.849:10263): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7357 comm="syz.6.1229" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc2eddeefc9 code=0x7ffc0000 [ 130.453061][ T7371] loop6: detected capacity change from 0 to 128 [ 130.462908][ T7373] loop2: detected capacity change from 0 to 512 [ 130.471124][ T7371] EXT4-fs (loop6): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 130.483865][ T7371] ext4 filesystem being mounted at /178/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 130.527747][ T7373] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 130.528514][ T3873] EXT4-fs (loop6): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 130.541094][ T7373] ext4 filesystem being mounted at /69/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 130.731935][ T7385] EXT4-fs error (device loop2): ext4_do_update_inode:5632: inode #2: comm syz.2.1234: corrupted inode contents [ 130.732375][ T7385] EXT4-fs error (device loop2): ext4_dirty_inode:6517: inode #2: comm syz.2.1234: mark_inode_dirty error [ 130.732546][ T7385] EXT4-fs error (device loop2): ext4_do_update_inode:5632: inode #2: comm syz.2.1234: corrupted inode contents [ 130.732895][ T7385] EXT4-fs error (device loop2): __ext4_ext_dirty:206: inode #2: comm syz.2.1234: mark_inode_dirty error [ 130.793485][ T7384] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=56 sclass=netlink_route_socket pid=7384 comm=syz.2.1234 [ 130.805972][ T7384] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=60 sclass=netlink_route_socket pid=7384 comm=syz.2.1234 [ 130.818427][ T7384] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=64 sclass=netlink_route_socket pid=7384 comm=syz.2.1234 [ 130.833294][ T7384] __nla_validate_parse: 12 callbacks suppressed [ 130.833309][ T7384] netlink: 128 bytes leftover after parsing attributes in process `syz.2.1234'. [ 130.864559][ T7384] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 130.880068][ T4293] lo speed is unknown, defaulting to 1000 [ 131.350734][ T3632] Bluetooth: hci0: command 0x1003 tx timeout [ 131.356843][ T44] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 131.392535][ T7413] loop3: detected capacity change from 0 to 128 [ 131.493584][ T7414] netlink: 'syz.3.1246': attribute type 10 has an invalid length. [ 131.551568][ T7418] netlink: 'syz.3.1246': attribute type 13 has an invalid length. [ 131.559428][ T7418] netlink: 24859 bytes leftover after parsing attributes in process `syz.3.1246'. [ 131.619566][ T7414] ipvlan0: entered allmulticast mode [ 131.625008][ T7414] veth0_vlan: entered allmulticast mode [ 131.717020][ T7414] team0: Device ipvlan0 failed to register rx_handler [ 131.865775][ T7423] loop7: detected capacity change from 0 to 512 [ 131.998198][ T7423] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1248'. [ 132.337578][ T5196] kworker/u8:48: attempt to access beyond end of device [ 132.337578][ T5196] loop3: rw=1, sector=145, nr_sectors = 16 limit=128 [ 132.358569][ T5196] kworker/u8:48: attempt to access beyond end of device [ 132.358569][ T5196] loop3: rw=1, sector=169, nr_sectors = 8 limit=128 [ 132.386940][ T5196] kworker/u8:48: attempt to access beyond end of device [ 132.386940][ T5196] loop3: rw=1, sector=185, nr_sectors = 8 limit=128 [ 132.414912][ T5196] kworker/u8:48: attempt to access beyond end of device [ 132.414912][ T5196] loop3: rw=1, sector=201, nr_sectors = 8 limit=128 [ 132.454453][ T5196] kworker/u8:48: attempt to access beyond end of device [ 132.454453][ T5196] loop3: rw=1, sector=217, nr_sectors = 8 limit=128 [ 132.470083][ T5196] kworker/u8:48: attempt to access beyond end of device [ 132.470083][ T5196] loop3: rw=1, sector=233, nr_sectors = 8 limit=128 [ 132.484781][ T5196] kworker/u8:48: attempt to access beyond end of device [ 132.484781][ T5196] loop3: rw=1, sector=249, nr_sectors = 8 limit=128 [ 132.498892][ T5196] kworker/u8:48: attempt to access beyond end of device [ 132.498892][ T5196] loop3: rw=1, sector=265, nr_sectors = 8 limit=128 [ 132.515580][ T5196] kworker/u8:48: attempt to access beyond end of device [ 132.515580][ T5196] loop3: rw=1, sector=281, nr_sectors = 8 limit=128 [ 132.529729][ T5196] kworker/u8:48: attempt to access beyond end of device [ 132.529729][ T5196] loop3: rw=1, sector=297, nr_sectors = 8 limit=128 [ 132.725585][ T5201] Bluetooth: hci0: Frame reassembly failed (-84) [ 133.483097][ T7450] FAULT_INJECTION: forcing a failure. [ 133.483097][ T7450] name failslab, interval 1, probability 0, space 0, times 0 [ 133.495816][ T7450] CPU: 0 UID: 0 PID: 7450 Comm: syz.9.1259 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 133.495851][ T7450] Tainted: [W]=WARN [ 133.495858][ T7450] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 133.495871][ T7450] Call Trace: [ 133.495878][ T7450] [ 133.495886][ T7450] __dump_stack+0x1d/0x30 [ 133.495911][ T7450] dump_stack_lvl+0xe8/0x140 [ 133.495929][ T7450] dump_stack+0x15/0x1b [ 133.495945][ T7450] should_fail_ex+0x265/0x280 [ 133.495968][ T7450] should_failslab+0x8c/0xb0 [ 133.496007][ T7450] kmem_cache_alloc_node_noprof+0x57/0x4a0 [ 133.496040][ T7450] ? __alloc_skb+0x101/0x320 [ 133.496070][ T7450] __alloc_skb+0x101/0x320 [ 133.496115][ T7450] send_monitor_note+0x9f/0x3c0 [ 133.496155][ T7450] hci_sock_bind+0x4d3/0x990 [ 133.496308][ T7450] __sys_bind+0x1d1/0x2a0 [ 133.496338][ T7450] __x64_sys_bind+0x3f/0x50 [ 133.496413][ T7450] x64_sys_call+0x2b72/0x3000 [ 133.496441][ T7450] do_syscall_64+0xd2/0x200 [ 133.496465][ T7450] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 133.496524][ T7450] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 133.496559][ T7450] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 133.496703][ T7450] RIP: 0033:0x7f826712efc9 [ 133.496718][ T7450] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 133.496734][ T7450] RSP: 002b:00007f8265b8f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000031 [ 133.496803][ T7450] RAX: ffffffffffffffda RBX: 00007f8267385fa0 RCX: 00007f826712efc9 [ 133.496853][ T7450] RDX: 0000000000000006 RSI: 0000200000000140 RDI: 0000000000000004 [ 133.496867][ T7450] RBP: 00007f8265b8f090 R08: 0000000000000000 R09: 0000000000000000 [ 133.496881][ T7450] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 133.496895][ T7450] R13: 00007f8267386038 R14: 00007f8267385fa0 R15: 00007fffc7f47ee8 [ 133.496915][ T7450] [ 133.717154][ T7456] FAULT_INJECTION: forcing a failure. [ 133.717154][ T7456] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 133.730550][ T7456] CPU: 1 UID: 0 PID: 7456 Comm: syz.6.1262 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 133.730638][ T7456] Tainted: [W]=WARN [ 133.730644][ T7456] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 133.730656][ T7456] Call Trace: [ 133.730662][ T7456] [ 133.730670][ T7456] __dump_stack+0x1d/0x30 [ 133.730691][ T7456] dump_stack_lvl+0xe8/0x140 [ 133.730789][ T7456] dump_stack+0x15/0x1b [ 133.730809][ T7456] should_fail_ex+0x265/0x280 [ 133.730831][ T7456] should_fail_alloc_page+0xf2/0x100 [ 133.730870][ T7456] __alloc_frozen_pages_noprof+0xff/0x360 [ 133.730914][ T7456] alloc_pages_mpol+0xb3/0x260 [ 133.730939][ T7456] alloc_pages_noprof+0x90/0x130 [ 133.730961][ T7456] pte_alloc_one+0x1e/0xd0 [ 133.731012][ T7456] __pte_alloc+0x32/0x290 [ 133.731043][ T7456] handle_mm_fault+0x1c18/0x2be0 [ 133.731152][ T7456] ? vma_start_read+0x141/0x1f0 [ 133.731187][ T7456] do_user_addr_fault+0x630/0x1080 [ 133.731208][ T7456] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 133.731273][ T7456] exc_page_fault+0x62/0xa0 [ 133.731300][ T7456] asm_exc_page_fault+0x26/0x30 [ 133.731317][ T7456] RIP: 0033:0x7fc2edcb0ca6 [ 133.731331][ T7456] Code: f0 72 6e 48 63 cd 48 01 c1 49 39 4f 08 72 4c 8d 4d ff 85 ed 74 33 66 0f 1f 44 00 00 48 39 f0 72 1b 4d 8b 07 49 89 c1 49 29 f1 <47> 0f b6 0c 08 45 84 c9 74 08 45 88 0c 00 49 8b 47 10 48 83 c0 01 [ 133.731348][ T7456] RSP: 002b:00007fc2ec84e4a0 EFLAGS: 00010246 [ 133.731440][ T7456] RAX: 0000000000000001 RBX: 00007fc2ec84e540 RCX: 0000000000000101 [ 133.731455][ T7456] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 00007fc2ec84e5e0 [ 133.731468][ T7456] RBP: 0000000000000102 R08: 00007fc2e442f000 R09: 0000000000000000 [ 133.731481][ T7456] R10: 0000000000000000 R11: 00007fc2ec84e550 R12: 0000000000000001 [ 133.731495][ T7456] R13: 00007fc2ede8dc40 R14: 0000000000000000 R15: 00007fc2ec84e5e0 [ 133.731513][ T7456] [ 133.731573][ T7456] Huh VM_FAULT_OOM leaked out to the #PF handler. Retrying PF [ 133.734303][ T7458] loop9: detected capacity change from 0 to 512 [ 133.786814][ T7456] loop6: detected capacity change from 0 to 512 [ 133.802148][ T7458] EXT4-fs (loop9): encrypted files will use data=ordered instead of data journaling mode [ 133.825475][ T7456] EXT4-fs (loop6): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 133.832345][ T5753] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 133.841542][ T7456] EXT4-fs (loop6): revision level too high, forcing read-only mode [ 133.865674][ T7458] EXT4-fs error (device loop9): ext4_orphan_get:1418: comm syz.9.1263: bad orphan inode 131083 [ 133.871071][ T7456] EXT4-fs (loop6): failed to initialize system zone (-117) [ 133.879961][ T7458] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 133.906523][ T7456] EXT4-fs (loop6): mount failed [ 133.919422][ T7458] EXT4-fs error (device loop9): ext4_find_dest_de:2052: inode #2: block 13: comm syz.9.1263: bad entry in directory: rec_len is smaller than minimal - offset=24, inode=11, rec_len=8, size=1024 fake=0 [ 134.037939][ T5527] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 134.083455][ T7473] xt_TCPMSS: Only works on TCP SYN packets [ 134.098540][ T7475] loop6: detected capacity change from 0 to 1024 [ 134.105567][ T7475] EXT4-fs (loop6): couldn't mount as ext3 due to feature incompatibilities [ 134.261451][ T7480] netlink: 4 bytes leftover after parsing attributes in process `syz.9.1267'. [ 134.305884][ T7485] lo speed is unknown, defaulting to 1000 [ 134.344808][ T7485] FAULT_INJECTION: forcing a failure. [ 134.344808][ T7485] name failslab, interval 1, probability 0, space 0, times 0 [ 134.357491][ T7485] CPU: 0 UID: 0 PID: 7485 Comm: syz.9.1271 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 134.357521][ T7485] Tainted: [W]=WARN [ 134.357528][ T7485] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 134.357542][ T7485] Call Trace: [ 134.357607][ T7485] [ 134.357616][ T7485] __dump_stack+0x1d/0x30 [ 134.357640][ T7485] dump_stack_lvl+0xe8/0x140 [ 134.357677][ T7485] dump_stack+0x15/0x1b [ 134.357694][ T7485] should_fail_ex+0x265/0x280 [ 134.357712][ T7485] should_failslab+0x8c/0xb0 [ 134.357745][ T7485] __kmalloc_noprof+0xa5/0x570 [ 134.357834][ T7485] ? alloc_trace_uprobe+0x2f/0x1e0 [ 134.357865][ T7485] alloc_trace_uprobe+0x2f/0x1e0 [ 134.357924][ T7485] ? create_local_trace_uprobe+0x91/0x2c0 [ 134.357956][ T7485] create_local_trace_uprobe+0xb5/0x2c0 [ 134.357983][ T7485] perf_uprobe_init+0xc0/0x150 [ 134.358075][ T7485] perf_uprobe_event_init+0xc4/0x140 [ 134.358100][ T7485] perf_try_init_event+0xd9/0x540 [ 134.358123][ T7485] ? perf_event_alloc+0xb1c/0x1740 [ 134.358149][ T7485] perf_event_alloc+0xb27/0x1740 [ 134.358182][ T7485] __se_sys_perf_event_open+0x4a5/0x11c0 [ 134.358261][ T7485] __x64_sys_perf_event_open+0x67/0x80 [ 134.358291][ T7485] x64_sys_call+0x7bd/0x3000 [ 134.358317][ T7485] do_syscall_64+0xd2/0x200 [ 134.358388][ T7485] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 134.358417][ T7485] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 134.358489][ T7485] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 134.358511][ T7485] RIP: 0033:0x7f826712efc9 [ 134.358528][ T7485] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 134.358549][ T7485] RSP: 002b:00007f8265b8f038 EFLAGS: 00000246 ORIG_RAX: 000000000000012a [ 134.358570][ T7485] RAX: ffffffffffffffda RBX: 00007f8267385fa0 RCX: 00007f826712efc9 [ 134.358585][ T7485] RDX: 0000000000000000 RSI: ffffffffffffffff RDI: 0000200000000a40 [ 134.358600][ T7485] RBP: 00007f8265b8f090 R08: 0000000000000001 R09: 0000000000000000 [ 134.358675][ T7485] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000001 [ 134.358687][ T7485] R13: 00007f8267386038 R14: 00007f8267385fa0 R15: 00007fffc7f47ee8 [ 134.358706][ T7485] [ 134.358714][ T7485] trace_uprobe: Failed to allocate trace_uprobe.(-12) [ 134.469758][ T7483] loop6: detected capacity change from 0 to 1024 [ 134.602953][ T7491] loop3: detected capacity change from 0 to 512 [ 134.611104][ T7490] netlink: 96 bytes leftover after parsing attributes in process `syz.2.1273'. [ 134.613661][ T7483] EXT4-fs (loop6): couldn't mount as ext3 due to feature incompatibilities [ 134.648120][ T7491] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 134.665707][ T7491] ext4 filesystem being mounted at /269/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 134.718343][ T7502] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1276'. [ 134.735314][ T7502] loop2: detected capacity change from 0 to 1024 [ 134.742872][ T7502] EXT4-fs (loop2): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 134.754115][ T7502] EXT4-fs (loop2): revision level too high, forcing read-only mode [ 134.762224][ T7502] EXT4-fs (loop2): orphan cleanup on readonly fs [ 134.769210][ T7502] EXT4-fs error (device loop2): __ext4_get_inode_loc:4832: comm syz.2.1276: Invalid inode table block 0 in block_group 0 [ 134.782270][ T7502] EXT4-fs error (device loop2) in ext4_reserve_inode_write:6313: Corrupt filesystem [ 134.790456][ T3632] Bluetooth: hci0: command 0x1003 tx timeout [ 134.797789][ T44] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 134.797858][ T7502] EXT4-fs error (device loop2): ext4_quota_write:7334: inode #3: comm syz.2.1276: mark_inode_dirty error [ 134.829053][ T3322] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 134.840468][ T7502] EXT4-fs error (device loop2): ext4_acquire_dquot:6945: comm syz.2.1276: Failed to acquire dquot type 0 [ 134.852005][ T7502] EXT4-fs error (device loop2): __ext4_get_inode_loc:4832: comm syz.2.1276: Invalid inode table block 0 in block_group 0 [ 134.865331][ T7502] EXT4-fs error (device loop2) in ext4_reserve_inode_write:6313: Corrupt filesystem [ 134.874991][ T7502] EXT4-fs error (device loop2): ext4_ext_truncate:4475: inode #15: comm syz.2.1276: mark_inode_dirty error [ 134.901224][ T7502] EXT4-fs error (device loop2): __ext4_get_inode_loc:4832: comm syz.2.1276: Invalid inode table block 0 in block_group 0 [ 134.916973][ T7502] EXT4-fs error (device loop2) in ext4_reserve_inode_write:6313: Corrupt filesystem [ 134.927507][ T7502] EXT4-fs error (device loop2) in ext4_orphan_del:301: Corrupt filesystem [ 134.936305][ T7502] EXT4-fs error (device loop2): __ext4_get_inode_loc:4832: comm syz.2.1276: Invalid inode table block 0 in block_group 0 [ 134.950238][ T7502] EXT4-fs error (device loop2) in ext4_reserve_inode_write:6313: Corrupt filesystem [ 134.959848][ T7502] EXT4-fs error (device loop2): ext4_truncate:4637: inode #15: comm syz.2.1276: mark_inode_dirty error [ 134.971097][ T7516] loop6: detected capacity change from 0 to 512 [ 134.971274][ T7502] EXT4-fs error (device loop2) in ext4_process_orphan:343: Corrupt filesystem [ 134.979149][ T7516] EXT4-fs error (device loop6): ext4_validate_block_bitmap:432: comm syz.6.1279: bg 0: block 5: invalid block bitmap [ 134.986935][ T7502] EXT4-fs (loop2): 1 truncate cleaned up [ 134.998787][ T7516] EXT4-fs error (device loop6) in ext4_mb_clear_bb:6667: Corrupt filesystem [ 135.004767][ T7502] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 135.014731][ T7516] EXT4-fs error (device loop6): ext4_free_branches:1023: inode #11: comm syz.6.1279: invalid indirect mapped block 3 (level 2) [ 135.025869][ T7531] xt_TCPMSS: Only works on TCP SYN packets [ 135.039472][ T7516] EXT4-fs (loop6): 2 truncates cleaned up [ 135.051932][ T7516] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 135.091797][ T3873] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 135.132261][ T5753] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 135.169329][ T7536] loop6: detected capacity change from 0 to 128 [ 135.177698][ T7536] EXT4-fs (loop6): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 135.190030][ T7536] ext4 filesystem being mounted at /199/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 135.224986][ T29] kauditd_printk_skb: 239 callbacks suppressed [ 135.225000][ T29] audit: type=1326 audit(1762004651.869:10501): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7538 comm="syz.2.1284" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f688481efc9 code=0x7ffc0000 [ 135.261354][ T3873] EXT4-fs (loop6): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 135.306167][ T29] audit: type=1326 audit(1762004651.889:10502): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7538 comm="syz.2.1284" exe="/root/syz-executor" sig=0 arch=c000003e syscall=36 compat=0 ip=0x7f688481efc9 code=0x7ffc0000 [ 135.329658][ T29] audit: type=1326 audit(1762004651.889:10503): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7538 comm="syz.2.1284" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f688481efc9 code=0x7ffc0000 [ 135.454528][ T7555] lo speed is unknown, defaulting to 1000 [ 135.463005][ T7556] xt_TCPMSS: Only works on TCP SYN packets [ 135.802417][ T7567] loop9: detected capacity change from 0 to 512 [ 135.819267][ T7567] netlink: 4 bytes leftover after parsing attributes in process `syz.9.1293'. [ 135.914139][ T7569] loop6: detected capacity change from 0 to 128 [ 135.952115][ T7569] EXT4-fs (loop6): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 135.965380][ T7569] ext4 filesystem being mounted at /204/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 136.032939][ T3873] EXT4-fs (loop6): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 136.083688][ T7581] loop3: detected capacity change from 0 to 513 [ 136.099757][ T7581] loop3: detected capacity change from 0 to 513 [ 136.129050][ T7581] loop3: detected capacity change from 0 to 513 [ 136.149521][ T7581] loop3: detected capacity change from 0 to 513 [ 136.169849][ T7581] loop3: detected capacity change from 0 to 513 [ 136.189083][ T7581] loop3: detected capacity change from 0 to 513 [ 136.208676][ T7581] loop3: detected capacity change from 0 to 513 [ 136.227906][ T7581] loop3: detected capacity change from 0 to 513 [ 136.246425][ T7581] loop3: detected capacity change from 0 to 513 [ 136.258387][ T7587] loop6: detected capacity change from 0 to 512 [ 136.265655][ T7581] loop3: detected capacity change from 0 to 513 [ 136.266566][ T7587] EXT4-fs error (device loop6): ext4_validate_block_bitmap:432: comm syz.6.1299: bg 0: block 5: invalid block bitmap [ 136.284633][ T7587] EXT4-fs error (device loop6) in ext4_mb_clear_bb:6667: Corrupt filesystem [ 136.286376][ T7581] loop3: detected capacity change from 0 to 513 [ 136.293622][ T7587] EXT4-fs error (device loop6): ext4_free_branches:1023: inode #11: comm syz.6.1299: invalid indirect mapped block 3 (level 2) [ 136.311546][ T7581] loop3: detected capacity change from 0 to 513 [ 136.313334][ T7587] EXT4-fs (loop6): 2 truncates cleaned up [ 136.330836][ T7587] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 136.343670][ T7581] loop3: detected capacity change from 0 to 513 [ 136.360559][ T7581] loop3: detected capacity change from 0 to 513 [ 136.376243][ T7581] loop3: detected capacity change from 0 to 513 [ 136.392231][ T7581] loop3: detected capacity change from 0 to 513 [ 136.407399][ T7581] loop3: detected capacity change from 0 to 513 [ 136.422840][ T7581] loop3: detected capacity change from 0 to 513 [ 136.438384][ T7581] loop3: detected capacity change from 0 to 513 [ 136.460214][ T7581] loop3: detected capacity change from 0 to 513 [ 136.479152][ T7581] loop3: detected capacity change from 0 to 513 [ 136.498862][ T7581] loop3: detected capacity change from 0 to 513 [ 136.522427][ T7581] loop3: detected capacity change from 0 to 513 [ 136.523128][ T29] audit: type=1326 audit(1762004653.169:10504): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7613 comm="syz.9.1303" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f826712efc9 code=0x0 [ 136.563817][ T7581] loop3: detected capacity change from 0 to 513 [ 136.578150][ T29] audit: type=1326 audit(1762004653.219:10505): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7616 comm="syz.7.1304" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3bb1ddefc9 code=0x7ffc0000 [ 136.602424][ T29] audit: type=1326 audit(1762004653.219:10506): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7616 comm="syz.7.1304" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3bb1ddefc9 code=0x7ffc0000 [ 136.602828][ T7581] loop3: detected capacity change from 0 to 513 [ 136.626418][ T29] audit: type=1326 audit(1762004653.219:10507): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7616 comm="syz.7.1304" exe="/root/syz-executor" sig=0 arch=c000003e syscall=316 compat=0 ip=0x7f3bb1ddefc9 code=0x7ffc0000 [ 136.626445][ T29] audit: type=1326 audit(1762004653.219:10508): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7616 comm="syz.7.1304" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3bb1ddefc9 code=0x7ffc0000 [ 136.626470][ T29] audit: type=1326 audit(1762004653.219:10509): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7616 comm="syz.7.1304" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3bb1ddefc9 code=0x7ffc0000 [ 136.657633][ T7581] loop3: detected capacity change from 0 to 513 [ 136.679720][ T29] audit: type=1326 audit(1762004653.219:10510): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7616 comm="syz.7.1304" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f3bb1ddefc9 code=0x7ffc0000 [ 136.715105][ T7581] loop3: detected capacity change from 0 to 513 [ 136.752578][ T7581] loop3: detected capacity change from 0 to 513 [ 136.770836][ T7581] loop3: detected capacity change from 0 to 513 [ 136.792741][ T7581] loop3: detected capacity change from 0 to 513 [ 136.813943][ T7581] loop3: detected capacity change from 0 to 513 [ 136.832974][ T7581] loop3: detected capacity change from 0 to 513 [ 136.851803][ T7581] loop3: detected capacity change from 0 to 513 [ 136.873364][ T7579] loop3: detected capacity change from 0 to 512 [ 136.895485][ T3873] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 136.901999][ T7579] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 136.917040][ T7579] ext4 filesystem being mounted at /274/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 137.117062][ T7638] loop6: detected capacity change from 0 to 2048 [ 137.124482][ T3322] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 137.171445][ T7638] Alternate GPT is invalid, using primary GPT. [ 137.177753][ T7638] loop6: p1 p2 p3 [ 137.258183][ T7638] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1306'. [ 137.287763][ T42] Bluetooth: hci1: Frame reassembly failed (-84) [ 137.360218][ T7645] loop6: detected capacity change from 0 to 128 [ 137.368098][ T7645] EXT4-fs (loop6): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 137.381404][ T7645] ext4 filesystem being mounted at /207/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 137.420404][ T44] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 137.446783][ T3873] EXT4-fs (loop6): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 137.635361][ T7660] xt_TCPMSS: Only works on TCP SYN packets [ 137.650942][ T7662] loop7: detected capacity change from 0 to 128 [ 137.681392][ T7650] wireguard0: entered promiscuous mode [ 137.686903][ T7650] wireguard0: entered allmulticast mode [ 137.773395][ T7669] FAULT_INJECTION: forcing a failure. [ 137.773395][ T7669] name failslab, interval 1, probability 0, space 0, times 0 [ 137.786055][ T7669] CPU: 0 UID: 0 PID: 7669 Comm: syz.2.1317 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 137.786181][ T7669] Tainted: [W]=WARN [ 137.786188][ T7669] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 137.786200][ T7669] Call Trace: [ 137.786209][ T7669] [ 137.786217][ T7669] __dump_stack+0x1d/0x30 [ 137.786239][ T7669] dump_stack_lvl+0xe8/0x140 [ 137.786260][ T7669] dump_stack+0x15/0x1b [ 137.786280][ T7669] should_fail_ex+0x265/0x280 [ 137.786377][ T7669] should_failslab+0x8c/0xb0 [ 137.786412][ T7669] kmem_cache_alloc_node_noprof+0x57/0x4a0 [ 137.786466][ T7669] ? __alloc_skb+0x101/0x320 [ 137.786499][ T7669] __alloc_skb+0x101/0x320 [ 137.786636][ T7669] netlink_alloc_large_skb+0xbf/0xf0 [ 137.786675][ T7669] netlink_sendmsg+0x3cf/0x6b0 [ 137.786697][ T7669] ? __pfx_netlink_sendmsg+0x10/0x10 [ 137.786718][ T7669] __sock_sendmsg+0x145/0x180 [ 137.786818][ T7669] ____sys_sendmsg+0x31e/0x4e0 [ 137.786891][ T7669] ___sys_sendmsg+0x17b/0x1d0 [ 137.786937][ T7669] __x64_sys_sendmsg+0xd4/0x160 [ 137.786961][ T7669] x64_sys_call+0x191e/0x3000 [ 137.786983][ T7669] do_syscall_64+0xd2/0x200 [ 137.787075][ T7669] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 137.787106][ T7669] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 137.787141][ T7669] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 137.787210][ T7669] RIP: 0033:0x7f688481efc9 [ 137.787237][ T7669] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 137.787258][ T7669] RSP: 002b:00007f688327f038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 137.787331][ T7669] RAX: ffffffffffffffda RBX: 00007f6884a75fa0 RCX: 00007f688481efc9 [ 137.787345][ T7669] RDX: 0000000000000004 RSI: 0000200000000300 RDI: 0000000000000003 [ 137.787359][ T7669] RBP: 00007f688327f090 R08: 0000000000000000 R09: 0000000000000000 [ 137.787373][ T7669] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 137.787395][ T7669] R13: 00007f6884a76038 R14: 00007f6884a75fa0 R15: 00007ffe129e8da8 [ 137.787416][ T7669] [ 138.018490][ T7666] xt_TCPMSS: Only works on TCP SYN packets [ 138.213179][ T7678] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1320'. [ 138.230559][ T7678] hsr_slave_0: left promiscuous mode [ 138.236597][ T7678] hsr_slave_1: left promiscuous mode [ 138.503693][ T7693] loop2: detected capacity change from 0 to 164 [ 138.510274][ T7693] iso9660: Unknown parameter 'unhYde' [ 138.615763][ T7696] loop2: detected capacity change from 0 to 512 [ 138.623109][ T7696] EXT4-fs: Ignoring removed orlov option [ 138.629379][ T7696] EXT4-fs: Mount option(s) incompatible with ext3 [ 138.662451][ T7696] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1328'. [ 138.707884][ T7696] lo speed is unknown, defaulting to 1000 [ 138.904929][ T7709] loop7: detected capacity change from 0 to 2048 [ 138.941100][ T7710] xt_TCPMSS: Only works on TCP SYN packets [ 138.950964][ T7709] Alternate GPT is invalid, using primary GPT. [ 138.957299][ T7709] loop7: p1 p2 p3 [ 138.973993][ T7709] netlink: 12 bytes leftover after parsing attributes in process `syz.7.1332'. [ 139.068322][ T7714] FAULT_INJECTION: forcing a failure. [ 139.068322][ T7714] name failslab, interval 1, probability 0, space 0, times 0 [ 139.081008][ T7714] CPU: 1 UID: 0 PID: 7714 Comm: syz.6.1333 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 139.081043][ T7714] Tainted: [W]=WARN [ 139.081050][ T7714] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 139.081062][ T7714] Call Trace: [ 139.081070][ T7714] [ 139.081148][ T7714] __dump_stack+0x1d/0x30 [ 139.081172][ T7714] dump_stack_lvl+0xe8/0x140 [ 139.081270][ T7714] dump_stack+0x15/0x1b [ 139.081289][ T7714] should_fail_ex+0x265/0x280 [ 139.081327][ T7714] should_failslab+0x8c/0xb0 [ 139.081358][ T7714] kmem_cache_alloc_noprof+0x50/0x480 [ 139.081444][ T7714] ? skb_clone+0x151/0x1f0 [ 139.081462][ T7714] skb_clone+0x151/0x1f0 [ 139.081478][ T7714] __netlink_deliver_tap+0x2c9/0x500 [ 139.081516][ T7714] netlink_unicast+0x66b/0x690 [ 139.081629][ T7714] netlink_sendmsg+0x58b/0x6b0 [ 139.081648][ T7714] ? __pfx_netlink_sendmsg+0x10/0x10 [ 139.081667][ T7714] __sock_sendmsg+0x145/0x180 [ 139.081719][ T7714] ____sys_sendmsg+0x31e/0x4e0 [ 139.081751][ T7714] ___sys_sendmsg+0x17b/0x1d0 [ 139.081809][ T7714] __x64_sys_sendmsg+0xd4/0x160 [ 139.081833][ T7714] x64_sys_call+0x191e/0x3000 [ 139.081927][ T7714] do_syscall_64+0xd2/0x200 [ 139.081947][ T7714] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 139.081973][ T7714] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 139.082001][ T7714] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 139.082067][ T7714] RIP: 0033:0x7fc2eddeefc9 [ 139.082084][ T7714] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 139.082101][ T7714] RSP: 002b:00007fc2ec84f038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 139.082118][ T7714] RAX: ffffffffffffffda RBX: 00007fc2ee045fa0 RCX: 00007fc2eddeefc9 [ 139.082130][ T7714] RDX: 00000000000000d0 RSI: 00002000000001c0 RDI: 0000000000000006 [ 139.082141][ T7714] RBP: 00007fc2ec84f090 R08: 0000000000000000 R09: 0000000000000000 [ 139.082154][ T7714] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 139.082217][ T7714] R13: 00007fc2ee046038 R14: 00007fc2ee045fa0 R15: 00007fffbbd74b18 [ 139.082237][ T7714] [ 139.340391][ T3492] Bluetooth: hci1: command 0x1003 tx timeout [ 139.346470][ T3632] Bluetooth: hci1: Opcode 0x1003 failed: -110 [ 139.376977][ T7724] loop3: detected capacity change from 0 to 1024 [ 139.390057][ T7724] EXT4-fs: Ignoring removed orlov option [ 139.402485][ T7727] loop6: detected capacity change from 0 to 128 [ 139.422202][ T7724] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 139.456940][ T7733] netlink: 65039 bytes leftover after parsing attributes in process `syz.6.1342'. [ 139.468007][ T7731] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 139.531689][ T7735] loop7: detected capacity change from 0 to 512 [ 139.546883][ T7735] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 139.566027][ T7735] ext4 filesystem being mounted at /281/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 139.588820][ T3322] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 139.617300][ T3914] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 139.692132][ T7760] netlink: 12 bytes leftover after parsing attributes in process `syz.7.1352'. [ 139.710409][ T7760] hsr_slave_0: left promiscuous mode [ 139.720687][ T7760] hsr_slave_1: left promiscuous mode [ 139.920215][ T5203] Bluetooth: hci0: Frame reassembly failed (-84) [ 139.953036][ T7771] lo speed is unknown, defaulting to 1000 [ 140.338623][ T29] kauditd_printk_skb: 181 callbacks suppressed [ 140.338637][ T29] audit: type=1326 audit(1762004656.979:10692): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7761 comm="syz.6.1353" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc2eddeefc9 code=0x7ffc0000 [ 140.379972][ T7765] process 'syz.6.1353' launched './file0' with NULL argv: empty string added [ 140.394218][ T29] audit: type=1326 audit(1762004657.019:10693): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7761 comm="syz.6.1353" exe="/root/syz-executor" sig=0 arch=c000003e syscall=152 compat=0 ip=0x7fc2eddeefc9 code=0x7ffc0000 [ 140.417810][ T29] audit: type=1326 audit(1762004657.019:10694): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7761 comm="syz.6.1353" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc2eddeefc9 code=0x7ffc0000 [ 140.441400][ T29] audit: type=1326 audit(1762004657.019:10695): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7761 comm="syz.6.1353" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc2eddeefc9 code=0x7ffc0000 [ 140.465047][ T29] audit: type=1326 audit(1762004657.019:10696): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7761 comm="syz.6.1353" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc2eddeefc9 code=0x7ffc0000 [ 140.488572][ T29] audit: type=1326 audit(1762004657.019:10697): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7761 comm="syz.6.1353" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc2eddeefc9 code=0x7ffc0000 [ 140.512332][ T29] audit: type=1326 audit(1762004657.019:10698): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7761 comm="syz.6.1353" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc2eddeefc9 code=0x7ffc0000 [ 140.535926][ T29] audit: type=1326 audit(1762004657.019:10699): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7761 comm="syz.6.1353" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc2eddeefc9 code=0x7ffc0000 [ 140.559516][ T29] audit: type=1326 audit(1762004657.019:10700): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7761 comm="syz.6.1353" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc2eddeefc9 code=0x7ffc0000 [ 140.583073][ T29] audit: type=1326 audit(1762004657.019:10701): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7761 comm="syz.6.1353" exe="/root/syz-executor" sig=0 arch=c000003e syscall=85 compat=0 ip=0x7fc2eddeefc9 code=0x7ffc0000 [ 140.692173][ T7782] loop2: detected capacity change from 0 to 512 [ 140.699049][ T7782] EXT4-fs: Ignoring removed i_version option [ 140.705243][ T7782] EXT4-fs: Ignoring removed bh option [ 140.742809][ T7782] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 140.840607][ T7782] ext4 filesystem being mounted at /88/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 140.886601][ T7782] SELinux: Context system_u:object_r:pam_var_run_t:s0 is not valid (left unmapped). [ 141.007081][ T5753] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 141.018621][ T7798] SELinux: failed to load policy [ 141.176140][ T7814] loop7: detected capacity change from 0 to 512 [ 141.441409][ T7816] loop3: detected capacity change from 0 to 512 [ 141.868146][ T7876] loop7: detected capacity change from 0 to 2048 [ 141.934044][ T7876] Alternate GPT is invalid, using primary GPT. [ 141.940458][ T7876] loop7: p1 p2 p3 [ 141.954599][ T7876] netlink: 12 bytes leftover after parsing attributes in process `syz.7.1367'. [ 141.980525][ T3632] Bluetooth: hci0: command 0x1003 tx timeout [ 141.986603][ T3492] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 142.011872][ T7911] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1374'. [ 142.303628][ T7927] xt_TCPMSS: Only works on TCP SYN packets [ 142.538118][ T7929] loop3: detected capacity change from 0 to 512 [ 142.705386][ T7936] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1380'. [ 142.757550][ T7940] netlink: 36 bytes leftover after parsing attributes in process `syz.6.1384'. [ 142.778244][ T5191] Bluetooth: hci0: Frame reassembly failed (-84) [ 143.491743][ T7969] netlink: 56 bytes leftover after parsing attributes in process `syz.3.1394'. [ 143.684648][ T7977] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1397'. [ 143.829975][ T7983] loop3: detected capacity change from 0 to 512 [ 143.859340][ T7985] FAULT_INJECTION: forcing a failure. [ 143.859340][ T7985] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 143.872558][ T7985] CPU: 1 UID: 0 PID: 7985 Comm: syz.6.1401 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 143.872666][ T7985] Tainted: [W]=WARN [ 143.872672][ T7985] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 143.872700][ T7985] Call Trace: [ 143.872705][ T7985] [ 143.872713][ T7985] __dump_stack+0x1d/0x30 [ 143.872734][ T7985] dump_stack_lvl+0xe8/0x140 [ 143.872753][ T7985] dump_stack+0x15/0x1b [ 143.872769][ T7985] should_fail_ex+0x265/0x280 [ 143.872788][ T7985] should_fail+0xb/0x20 [ 143.872805][ T7985] should_fail_usercopy+0x1a/0x20 [ 143.872835][ T7985] _copy_from_user+0x1c/0xb0 [ 143.872861][ T7985] kstrtouint_from_user+0x69/0xf0 [ 143.872943][ T7985] ? 0xffffffff81000000 [ 143.872954][ T7985] ? selinux_file_permission+0x1e4/0x320 [ 143.872985][ T7985] proc_fail_nth_write+0x50/0x160 [ 143.873028][ T7985] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 143.873092][ T7985] vfs_write+0x269/0x960 [ 143.873124][ T7985] ? __rcu_read_unlock+0x4f/0x70 [ 143.873180][ T7985] ? __fget_files+0x184/0x1c0 [ 143.873210][ T7985] ksys_write+0xda/0x1a0 [ 143.873234][ T7985] __x64_sys_write+0x40/0x50 [ 143.873262][ T7985] x64_sys_call+0x2802/0x3000 [ 143.873310][ T7985] do_syscall_64+0xd2/0x200 [ 143.873328][ T7985] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 143.873355][ T7985] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 143.873422][ T7985] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 143.873441][ T7985] RIP: 0033:0x7fc2eddeda7f [ 143.873453][ T7985] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48 [ 143.873496][ T7985] RSP: 002b:00007fc2ec84f030 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 143.873517][ T7985] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007fc2eddeda7f [ 143.873532][ T7985] RDX: 0000000000000001 RSI: 00007fc2ec84f0a0 RDI: 0000000000000004 [ 143.873544][ T7985] RBP: 00007fc2ec84f090 R08: 0000000000000000 R09: 0000000000000000 [ 143.873555][ T7985] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000001 [ 143.873566][ T7985] R13: 00007fc2ee046038 R14: 00007fc2ee045fa0 R15: 00007fffbbd74b18 [ 143.873583][ T7985] [ 144.093371][ T7983] EXT4-fs: Ignoring removed i_version option [ 144.099378][ T7983] EXT4-fs: Ignoring removed bh option [ 144.192447][ T7983] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 144.208108][ T7983] ext4 filesystem being mounted at /298/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 144.306414][ T3322] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 144.325112][ T7999] netlink: 64 bytes leftover after parsing attributes in process `syz.6.1406'. [ 144.374558][ T7999] usb usb1: usbfs: interface 0 claimed by hub while 'syz.6.1406' sets config #0 [ 144.409306][ T7999] usb usb1: usbfs: interface 0 claimed by hub while 'syz.6.1406' sets config #1 [ 144.445011][ T8007] loop3: detected capacity change from 0 to 1024 [ 144.474697][ T8007] EXT4-fs (loop3): couldn't mount as ext3 due to feature incompatibilities [ 144.491720][ T8010] netlink: 36 bytes leftover after parsing attributes in process `syz.6.1411'. [ 144.517809][ T8005] netdevsim netdevsim2: loading /lib/firmware/. failed with error -22 [ 144.526035][ T8005] netdevsim netdevsim2: Direct firmware load for . failed with error -22 [ 144.766047][ T8033] tipc: Started in network mode [ 144.771100][ T8033] tipc: Node identity ac14140f, cluster identity 4711 [ 144.778217][ T8033] tipc: New replicast peer: 255.255.255.255 [ 144.780370][ T3632] Bluetooth: hci0: command 0x1003 tx timeout [ 144.784366][ T8033] tipc: Enabled bearer , priority 10 [ 144.796244][ T3492] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 144.817536][ T8033] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1419'. [ 144.910836][ T8044] netlink: 36 bytes leftover after parsing attributes in process `syz.9.1423'. [ 144.977388][ T8046] loop3: detected capacity change from 0 to 1024 [ 145.012824][ T8046] EXT4-fs (loop3): couldn't mount as ext3 due to feature incompatibilities [ 145.020836][ T8052] loop9: detected capacity change from 0 to 512 [ 145.032426][ T8052] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 145.045124][ T8052] ext4 filesystem being mounted at /140/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 145.106464][ T5199] Bluetooth: hci0: Frame reassembly failed (-84) [ 145.135674][ T8061] FAULT_INJECTION: forcing a failure. [ 145.135674][ T8061] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 145.148905][ T8061] CPU: 0 UID: 0 PID: 8061 Comm: syz.3.1431 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 145.148936][ T8061] Tainted: [W]=WARN [ 145.148943][ T8061] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 145.148957][ T8061] Call Trace: [ 145.148965][ T8061] [ 145.148973][ T8061] __dump_stack+0x1d/0x30 [ 145.148999][ T8061] dump_stack_lvl+0xe8/0x140 [ 145.149059][ T8061] dump_stack+0x15/0x1b [ 145.149078][ T8061] should_fail_ex+0x265/0x280 [ 145.149098][ T8061] should_fail+0xb/0x20 [ 145.149112][ T8061] should_fail_usercopy+0x1a/0x20 [ 145.149178][ T8061] _copy_from_user+0x1c/0xb0 [ 145.149206][ T8061] __copy_msghdr+0x244/0x300 [ 145.149314][ T8061] ___sys_sendmsg+0x109/0x1d0 [ 145.149358][ T8061] __x64_sys_sendmsg+0xd4/0x160 [ 145.149383][ T8061] x64_sys_call+0x191e/0x3000 [ 145.149472][ T8061] do_syscall_64+0xd2/0x200 [ 145.149492][ T8061] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 145.149523][ T8061] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 145.149557][ T8061] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 145.149636][ T8061] RIP: 0033:0x7fd2c607efc9 [ 145.149651][ T8061] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 145.149686][ T8061] RSP: 002b:00007fd2c4ae7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 145.149708][ T8061] RAX: ffffffffffffffda RBX: 00007fd2c62d5fa0 RCX: 00007fd2c607efc9 [ 145.149722][ T8061] RDX: 0000000004008030 RSI: 0000200000000400 RDI: 0000000000000003 [ 145.149736][ T8061] RBP: 00007fd2c4ae7090 R08: 0000000000000000 R09: 0000000000000000 [ 145.149771][ T8061] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 145.149785][ T8061] R13: 00007fd2c62d6038 R14: 00007fd2c62d5fa0 R15: 00007ffead87a818 [ 145.149846][ T8061] [ 145.335758][ T5527] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 145.357423][ T29] kauditd_printk_skb: 152 callbacks suppressed [ 145.357438][ T29] audit: type=1326 audit(1762004661.999:10854): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8066 comm="syz.9.1432" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f826712efc9 code=0x7ffc0000 [ 145.416090][ T29] audit: type=1326 audit(1762004661.999:10855): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8066 comm="syz.9.1432" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f826712efc9 code=0x7ffc0000 [ 145.439645][ T29] audit: type=1326 audit(1762004661.999:10856): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8066 comm="syz.9.1432" exe="/root/syz-executor" sig=0 arch=c000003e syscall=316 compat=0 ip=0x7f826712efc9 code=0x7ffc0000 [ 145.463479][ T29] audit: type=1326 audit(1762004661.999:10857): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8066 comm="syz.9.1432" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f826712efc9 code=0x7ffc0000 [ 145.487011][ T29] audit: type=1326 audit(1762004661.999:10858): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8066 comm="syz.9.1432" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f826712efc9 code=0x7ffc0000 [ 145.510601][ T29] audit: type=1326 audit(1762004661.999:10859): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8066 comm="syz.9.1432" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f826712efc9 code=0x7ffc0000 [ 145.534101][ T29] audit: type=1326 audit(1762004661.999:10860): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8066 comm="syz.9.1432" exe="/root/syz-executor" sig=0 arch=c000003e syscall=435 compat=0 ip=0x7f826712efc9 code=0x7ffc0000 [ 145.557607][ T29] audit: type=1326 audit(1762004661.999:10861): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8068 comm="syz.9.1432" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f8267161885 code=0x7ffc0000 [ 145.581188][ T29] audit: type=1400 audit(1762004662.009:10862): avc: denied { create } for pid=8069 comm="syz.3.1433" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 145.600658][ T29] audit: type=1400 audit(1762004662.009:10863): avc: denied { write } for pid=8069 comm="syz.3.1433" name="virtual_nci" dev="devtmpfs" ino=132 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 145.751018][ T8070] llcp: llcp_sock_recvmsg: Recv datagram failed state 3 -6 0 [ 146.113202][ T8085] loop9: detected capacity change from 0 to 512 [ 146.148652][ T8089] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1436'. [ 146.166116][ T3508] tipc: Node number set to 2886997007 [ 146.189966][ T8084] loop6: detected capacity change from 0 to 512 [ 146.280312][ T8095] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1439'. [ 146.298808][ T8095] loop3: detected capacity change from 0 to 1024 [ 146.306385][ T8095] EXT4-fs (loop3): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 146.317257][ T8095] EXT4-fs (loop3): revision level too high, forcing read-only mode [ 146.325421][ T8095] EXT4-fs (loop3): orphan cleanup on readonly fs [ 146.332417][ T8095] EXT4-fs error (device loop3): __ext4_get_inode_loc:4832: comm syz.3.1439: Invalid inode table block 0 in block_group 0 [ 146.345479][ T8095] EXT4-fs error (device loop3) in ext4_reserve_inode_write:6313: Corrupt filesystem [ 146.356853][ T8095] EXT4-fs error (device loop3): ext4_quota_write:7334: inode #3: comm syz.3.1439: mark_inode_dirty error [ 146.368292][ T8095] EXT4-fs error (device loop3): ext4_acquire_dquot:6945: comm syz.3.1439: Failed to acquire dquot type 0 [ 146.379778][ T8095] EXT4-fs error (device loop3): __ext4_get_inode_loc:4832: comm syz.3.1439: Invalid inode table block 0 in block_group 0 [ 146.392907][ T8095] EXT4-fs error (device loop3) in ext4_reserve_inode_write:6313: Corrupt filesystem [ 146.402497][ T8095] EXT4-fs error (device loop3): ext4_ext_truncate:4475: inode #15: comm syz.3.1439: mark_inode_dirty error [ 146.414184][ T8095] EXT4-fs error (device loop3): __ext4_get_inode_loc:4832: comm syz.3.1439: Invalid inode table block 0 in block_group 0 [ 146.427105][ T8095] EXT4-fs error (device loop3) in ext4_reserve_inode_write:6313: Corrupt filesystem [ 146.436644][ T8095] EXT4-fs error (device loop3) in ext4_orphan_del:301: Corrupt filesystem [ 146.445607][ T8095] EXT4-fs error (device loop3): __ext4_get_inode_loc:4832: comm syz.3.1439: Invalid inode table block 0 in block_group 0 [ 146.458520][ T8095] EXT4-fs error (device loop3) in ext4_reserve_inode_write:6313: Corrupt filesystem [ 146.469992][ T8095] EXT4-fs error (device loop3): ext4_truncate:4637: inode #15: comm syz.3.1439: mark_inode_dirty error [ 146.481510][ T8095] EXT4-fs error (device loop3) in ext4_process_orphan:343: Corrupt filesystem [ 146.499702][ T8095] EXT4-fs (loop3): 1 truncate cleaned up [ 146.512366][ T8095] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 146.621159][ T8116] loop6: detected capacity change from 0 to 512 [ 146.641903][ T8116] EXT4-fs error (device loop6): ext4_validate_block_bitmap:441: comm syz.6.1445: bg 0: block 248: padding at end of block bitmap is not set [ 146.656837][ T8116] EXT4-fs error (device loop6): ext4_acquire_dquot:6945: comm syz.6.1445: Failed to acquire dquot type 1 [ 146.668531][ T8116] EXT4-fs (loop6): 1 truncate cleaned up [ 146.674686][ T8116] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 146.687734][ T3322] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 146.699305][ T8116] ext4 filesystem being mounted at /242/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 146.726435][ T8124] loop3: detected capacity change from 0 to 512 [ 146.741266][ T8124] EXT4-fs: Ignoring removed i_version option [ 146.747283][ T8124] EXT4-fs: Ignoring removed bh option [ 146.753302][ T3873] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 146.762452][ T5205] EXT4-fs error (device loop6): ext4_release_dquot:6981: comm kworker/u8:57: Failed to release dquot type 1 [ 146.787832][ T8124] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 146.805067][ T8126] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=8126 comm=syz.6.1447 [ 146.831287][ T8124] ext4 filesystem being mounted at /311/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 146.888174][ T3322] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 147.002100][ T8137] hsr_slave_0: left promiscuous mode [ 147.007908][ T8137] hsr_slave_1: left promiscuous mode [ 147.099621][ T8141] loop6: detected capacity change from 0 to 512 [ 147.236951][ T3632] Bluetooth: hci0: command 0x1003 tx timeout [ 147.260464][ T3492] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 147.611028][ T8145] loop7: detected capacity change from 0 to 512 [ 147.677399][ T8156] loop2: detected capacity change from 0 to 512 [ 147.688539][ T8157] loop9: detected capacity change from 0 to 512 [ 147.723958][ T8156] loop2: detected capacity change from 0 to 4096 [ 147.731864][ T8157] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 147.792167][ T8156] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 147.810109][ T8157] ext4 filesystem being mounted at /145/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 147.869484][ T8170] loop3: detected capacity change from 0 to 512 [ 147.947681][ T5753] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 147.963373][ T8170] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 147.963432][ T8170] ext4 filesystem being mounted at /315/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 148.021327][ T8176] loop2: detected capacity change from 0 to 1024 [ 148.030378][ T8176] EXT4-fs (loop2): couldn't mount as ext3 due to feature incompatibilities [ 148.096844][ T8180] EXT4-fs error (device loop3): ext4_do_update_inode:5632: inode #2: comm syz.3.1463: corrupted inode contents [ 148.098318][ T8180] EXT4-fs error (device loop3): ext4_dirty_inode:6517: inode #2: comm syz.3.1463: mark_inode_dirty error [ 148.102806][ T8180] EXT4-fs error (device loop3): ext4_do_update_inode:5632: inode #2: comm syz.3.1463: corrupted inode contents [ 148.104415][ T8185] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=56 sclass=netlink_route_socket pid=8185 comm=syz.3.1463 [ 148.104443][ T8185] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=60 sclass=netlink_route_socket pid=8185 comm=syz.3.1463 [ 148.104464][ T8185] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=64 sclass=netlink_route_socket pid=8185 comm=syz.3.1463 [ 148.104540][ T8185] __nla_validate_parse: 3 callbacks suppressed [ 148.104552][ T8185] netlink: 128 bytes leftover after parsing attributes in process `syz.3.1463'. [ 148.115224][ T8185] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 148.127264][ T8180] EXT4-fs error (device loop3): __ext4_ext_dirty:206: inode #2: comm syz.3.1463: mark_inode_dirty error [ 148.158767][ T8177] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=56 sclass=netlink_route_socket pid=8177 comm=syz.9.1457 [ 148.158800][ T8177] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=60 sclass=netlink_route_socket pid=8177 comm=syz.9.1457 [ 148.158924][ T8177] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=64 sclass=netlink_route_socket pid=8177 comm=syz.9.1457 [ 148.158989][ T8177] netlink: 128 bytes leftover after parsing attributes in process `syz.9.1457'. [ 148.274293][ T8177] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 149.720053][ T8195] loop2: detected capacity change from 0 to 128 [ 149.727960][ T8195] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 149.770412][ T8195] ext4 filesystem being mounted at /113/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 149.929245][ T5753] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 150.411644][ T29] kauditd_printk_skb: 121 callbacks suppressed [ 150.411659][ T29] audit: type=1400 audit(1762004667.059:10980): avc: denied { execute } for pid=8213 comm="syz.2.1474" dev="tmpfs" ino=1238 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 150.454049][ T8214] bond1: entered promiscuous mode [ 150.459117][ T8214] bond1: entered allmulticast mode [ 150.472216][ T8214] 8021q: adding VLAN 0 to HW filter on device bond1 [ 150.478892][ T29] audit: type=1400 audit(1762004667.089:10981): avc: denied { execute_no_trans } for pid=8213 comm="syz.2.1474" path=2F6D656D66643A5B0BDB58AE5B1AA9FDFAADD16D64C8854858A9250C1A65E0202864656C6574656429 dev="tmpfs" ino=1238 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 150.508626][ T29] audit: type=1400 audit(1762004667.089:10982): avc: denied { name_bind } for pid=8213 comm="syz.2.1474" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=1 [ 150.835915][ T8219] loop2: detected capacity change from 0 to 512 [ 150.853148][ T8219] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1475'. [ 151.457040][ T8222] loop7: detected capacity change from 0 to 1024 [ 151.494154][ T8222] EXT4-fs (loop7): couldn't mount as ext3 due to feature incompatibilities [ 151.620027][ T8224] loop2: detected capacity change from 0 to 512 [ 151.646493][ T8224] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 151.690488][ T8224] ext4 filesystem being mounted at /120/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 151.723178][ T8231] loop7: detected capacity change from 0 to 128 [ 151.841257][ T5753] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 151.895596][ T8235] loop2: detected capacity change from 0 to 512 [ 151.940823][ T8235] EXT4-fs: Ignoring removed bh option [ 151.952772][ T8235] EXT4-fs error (device loop2): ext4_xattr_inode_iget:441: inode #11: comm syz.2.1481: missing EA_INODE flag [ 152.024027][ T8235] EXT4-fs error (device loop2): ext4_xattr_inode_iget:446: comm syz.2.1481: error while reading EA inode 11 err=-117 [ 152.051342][ T8235] EXT4-fs (loop2): 1 orphan inode deleted [ 152.079281][ T8235] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 152.198368][ T29] audit: type=1326 audit(1762004668.839:10983): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8239 comm="syz.6.1483" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc2eddeefc9 code=0x7ffc0000 [ 152.222036][ T29] audit: type=1326 audit(1762004668.839:10984): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8239 comm="syz.6.1483" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc2eddeefc9 code=0x7ffc0000 [ 152.245702][ T29] audit: type=1326 audit(1762004668.839:10985): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8239 comm="syz.6.1483" exe="/root/syz-executor" sig=0 arch=c000003e syscall=36 compat=0 ip=0x7fc2eddeefc9 code=0x7ffc0000 [ 152.269101][ T29] audit: type=1326 audit(1762004668.839:10986): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8239 comm="syz.6.1483" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc2eddeefc9 code=0x7ffc0000 [ 152.301449][ T29] audit: type=1326 audit(1762004668.889:10987): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8241 comm="syz.6.1484" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc2eddeefc9 code=0x7ffc0000 [ 152.325082][ T29] audit: type=1326 audit(1762004668.889:10988): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8241 comm="syz.6.1484" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc2eddeefc9 code=0x7ffc0000 [ 152.348754][ T29] audit: type=1326 audit(1762004668.889:10989): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8241 comm="syz.6.1484" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc2eddeefc9 code=0x7ffc0000 [ 152.513100][ T5527] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 152.845521][ T8259] loop6: detected capacity change from 0 to 512 [ 152.861362][ T8259] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1487'. [ 153.017839][ T8264] loop9: detected capacity change from 0 to 512 [ 153.078925][ T8264] EXT4-fs: Ignoring removed i_version option [ 153.085047][ T8264] EXT4-fs: Ignoring removed bh option [ 153.153225][ T5753] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 153.153465][ T8264] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 153.176140][ T8264] ext4 filesystem being mounted at /148/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 153.241461][ T5527] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 153.291513][ T3322] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 153.306299][ T8273] loop9: detected capacity change from 0 to 1024 [ 153.313148][ T8273] EXT4-fs: Ignoring removed bh option [ 153.322080][ T8273] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 153.337003][ T8273] netlink: 8 bytes leftover after parsing attributes in process `syz.9.1493'. [ 153.356858][ T8273] netlink: 660 bytes leftover after parsing attributes in process `syz.9.1493'. [ 153.452826][ T8273] infiniband syû: set active [ 153.457593][ T8273] infiniband syû: added bond_slave_0 [ 153.476806][ T8273] RDS/IB: syû: added [ 153.480808][ T8273] smc: adding ib device syû with port count 1 [ 153.487443][ T8273] smc: ib device syû port 1 has no pnetid [ 153.573770][ T8284] loop6: detected capacity change from 0 to 512 [ 153.592310][ T8284] ext4 filesystem being mounted at /254/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 153.688809][ T8287] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=56 sclass=netlink_route_socket pid=8287 comm=syz.6.1495 [ 153.701343][ T8287] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=60 sclass=netlink_route_socket pid=8287 comm=syz.6.1495 [ 153.713817][ T8287] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=64 sclass=netlink_route_socket pid=8287 comm=syz.6.1495 [ 153.758390][ T8288] EXT4-fs error (device loop6): ext4_do_update_inode:5632: inode #2: comm syz.6.1495: corrupted inode contents [ 153.811323][ T8288] EXT4-fs error (device loop6): ext4_dirty_inode:6517: inode #2: comm syz.6.1495: mark_inode_dirty error [ 153.836973][ T8289] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 153.848254][ T8288] EXT4-fs error (device loop6): ext4_do_update_inode:5632: inode #2: comm syz.6.1495: corrupted inode contents [ 153.865146][ T8287] netlink: 128 bytes leftover after parsing attributes in process `syz.6.1495'. [ 153.875469][ T8288] EXT4-fs error (device loop6): __ext4_ext_dirty:206: inode #2: comm syz.6.1495: mark_inode_dirty error [ 153.985912][ T8294] netlink: 12 bytes leftover after parsing attributes in process `syz.9.1497'. [ 154.116858][ T8302] loop7: detected capacity change from 0 to 512 [ 154.126485][ T8300] netlink: 4 bytes leftover after parsing attributes in process `syz.9.1499'. [ 154.145181][ T8302] ext4 filesystem being mounted at /307/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 154.193564][ T8300] loop9: detected capacity change from 0 to 1024 [ 154.218320][ T8300] EXT4-fs (loop9): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 154.245860][ T8300] EXT4-fs (loop9): revision level too high, forcing read-only mode [ 154.261873][ T8309] loop3: detected capacity change from 0 to 1024 [ 154.270537][ T8300] EXT4-fs (loop9): orphan cleanup on readonly fs [ 154.302173][ T8300] EXT4-fs error (device loop9): __ext4_get_inode_loc:4832: comm syz.9.1499: Invalid inode table block 0 in block_group 0 [ 154.317978][ T8309] EXT4-fs: dax option not supported [ 154.334662][ T8309] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1503'. [ 154.350941][ T8300] EXT4-fs error (device loop9) in ext4_reserve_inode_write:6313: Corrupt filesystem [ 154.350999][ T8309] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1503'. [ 154.369789][ T8300] EXT4-fs error (device loop9): ext4_quota_write:7334: inode #3: comm syz.9.1499: mark_inode_dirty error [ 154.393197][ T8309] netlink: 660 bytes leftover after parsing attributes in process `syz.3.1503'. [ 154.422114][ T8309] rdma_rxe: rxe_newlink: failed to add bond_slave_0 [ 154.486491][ T8300] EXT4-fs error (device loop9): ext4_acquire_dquot:6945: comm syz.9.1499: Failed to acquire dquot type 0 [ 154.520512][ T8300] EXT4-fs error (device loop9): __ext4_get_inode_loc:4832: comm syz.9.1499: Invalid inode table block 0 in block_group 0 [ 154.574128][ T8300] EXT4-fs error (device loop9) in ext4_reserve_inode_write:6313: Corrupt filesystem [ 154.632170][ T8317] loop7: detected capacity change from 0 to 512 [ 154.664883][ T8317] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1505'. [ 154.690404][ T8319] loop3: detected capacity change from 0 to 128 [ 154.739464][ T8319] FAT-fs (loop3): error, invalid access to FAT (entry 0x00000100) [ 154.747370][ T8319] FAT-fs (loop3): Filesystem has been set read-only [ 154.763734][ T8300] EXT4-fs error (device loop9): ext4_ext_truncate:4475: inode #15: comm syz.9.1499: mark_inode_dirty error [ 154.833680][ T8300] EXT4-fs error (device loop9): __ext4_get_inode_loc:4832: comm syz.9.1499: Invalid inode table block 0 in block_group 0 [ 154.857926][ T8319] bio_check_eod: 101 callbacks suppressed [ 154.857946][ T8319] syz.3.1506: attempt to access beyond end of device [ 154.857946][ T8319] loop3: rw=524288, sector=2065, nr_sectors = 8 limit=128 [ 154.883950][ T8319] FAT-fs (loop3): error, invalid access to FAT (entry 0x00000100) [ 154.891856][ T8319] FAT-fs (loop3): error, invalid access to FAT (entry 0x00000100) [ 154.899751][ T8300] EXT4-fs error (device loop9) in ext4_reserve_inode_write:6313: Corrupt filesystem [ 154.909314][ T8319] syz.3.1506: attempt to access beyond end of device [ 154.909314][ T8319] loop3: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 154.915599][ T8300] EXT4-fs error (device loop9) in ext4_orphan_del:301: Corrupt filesystem [ 154.922724][ T8319] syz.3.1506: attempt to access beyond end of device [ 154.922724][ T8319] loop3: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 154.944510][ T8319] syz.3.1506: attempt to access beyond end of device [ 154.944510][ T8319] loop3: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 154.944554][ T8319] syz.3.1506: attempt to access beyond end of device [ 154.944554][ T8319] loop3: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 154.971082][ T8319] syz.3.1506: attempt to access beyond end of device [ 154.971082][ T8319] loop3: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 154.982166][ T8300] EXT4-fs error (device loop9): __ext4_get_inode_loc:4832: comm syz.9.1499: Invalid inode table block 0 in block_group 0 [ 154.984369][ T8319] syz.3.1506: attempt to access beyond end of device [ 154.984369][ T8319] loop3: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 155.010135][ T8319] syz.3.1506: attempt to access beyond end of device [ 155.010135][ T8319] loop3: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 155.020536][ T8300] EXT4-fs error (device loop9) in ext4_reserve_inode_write:6313: Corrupt filesystem [ 155.023653][ T8319] syz.3.1506: attempt to access beyond end of device [ 155.023653][ T8319] loop3: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 155.045988][ T8319] syz.3.1506: attempt to access beyond end of device [ 155.045988][ T8319] loop3: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 155.058772][ T8300] EXT4-fs error (device loop9): ext4_truncate:4637: inode #15: comm syz.9.1499: mark_inode_dirty error [ 155.094049][ T8300] EXT4-fs error (device loop9) in ext4_process_orphan:343: Corrupt filesystem [ 155.135381][ T8300] EXT4-fs (loop9): 1 truncate cleaned up [ 155.452312][ T29] kauditd_printk_skb: 118 callbacks suppressed [ 155.452328][ T29] audit: type=1326 audit(1762004672.099:11106): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8299 comm="syz.9.1499" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f826712efc9 code=0x7ffc0000 [ 155.482189][ T29] audit: type=1326 audit(1762004672.099:11107): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8299 comm="syz.9.1499" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f826712efc9 code=0x7ffc0000 [ 155.579141][ T8328] loop9: detected capacity change from 0 to 128 [ 155.613810][ T8328] ext4 filesystem being mounted at /152/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 155.815058][ T29] audit: type=1400 audit(1762004672.459:11108): avc: denied { read } for pid=8344 comm="syz.3.1516" name="ptp0" dev="devtmpfs" ino=245 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 155.821111][ T8348] loop9: detected capacity change from 0 to 512 [ 155.852319][ T8345] netlink: 'syz.3.1516': attribute type 4 has an invalid length. [ 155.875246][ T8348] EXT4-fs: Ignoring removed i_version option [ 155.881327][ T8348] EXT4-fs: Ignoring removed bh option [ 155.890397][ T29] audit: type=1400 audit(1762004672.459:11109): avc: denied { open } for pid=8344 comm="syz.3.1516" path="/dev/ptp0" dev="devtmpfs" ino=245 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 155.914065][ T29] audit: type=1400 audit(1762004672.489:11110): avc: denied { ioctl } for pid=8344 comm="syz.3.1516" path="/dev/ptp0" dev="devtmpfs" ino=245 ioctlcmd=0x3d0e scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 155.973477][ T8348] ext4 filesystem being mounted at /154/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 156.000400][ T29] audit: type=1326 audit(1762004672.639:11111): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8350 comm="syz.3.1518" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd2c607efc9 code=0x7ffc0000 [ 156.023915][ T29] audit: type=1326 audit(1762004672.639:11112): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8350 comm="syz.3.1518" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd2c607efc9 code=0x7ffc0000 [ 156.139544][ T29] audit: type=1326 audit(1762004672.689:11113): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8350 comm="syz.3.1518" exe="/root/syz-executor" sig=0 arch=c000003e syscall=222 compat=0 ip=0x7fd2c607efc9 code=0x7ffc0000 [ 156.163135][ T29] audit: type=1326 audit(1762004672.689:11114): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8350 comm="syz.3.1518" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd2c607efc9 code=0x7ffc0000 [ 156.186823][ T29] audit: type=1326 audit(1762004672.689:11115): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8350 comm="syz.3.1518" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd2c607efc9 code=0x7ffc0000 [ 156.404415][ T8380] loop9: detected capacity change from 0 to 512 [ 156.412473][ T8380] EXT4-fs: Ignoring removed i_version option [ 156.418646][ T8380] EXT4-fs: Ignoring removed bh option [ 156.485173][ T8382] loop3: detected capacity change from 0 to 1024 [ 156.501650][ T8380] ext4 filesystem being mounted at /158/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 156.566846][ T8382] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1529'. [ 156.622311][ T8389] loop9: detected capacity change from 0 to 512 [ 156.645470][ T8382] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=8382 comm=syz.3.1529 [ 156.677913][ T8389] ext4 filesystem being mounted at /159/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 156.749416][ T3322] EXT4-fs unmount: 14 callbacks suppressed [ 156.749435][ T3322] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 156.829948][ T5527] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 156.863309][ T8394] netlink: 'syz.9.1532': attribute type 4 has an invalid length. [ 156.875484][ T8394] .`: renamed from bond0 (while UP) [ 157.027706][ T8401] veth0: entered promiscuous mode [ 157.158187][ T8407] loop2: detected capacity change from 0 to 256 [ 157.417730][ T8420] loop2: detected capacity change from 0 to 8192 [ 157.470292][ T8428] loop3: detected capacity change from 0 to 512 [ 158.327444][ T8436] usb usb1: usbfs: interface 0 claimed by hub while 'syz.2.1547' sets config #0 [ 158.434572][ T8437] loop3: detected capacity change from 0 to 512 [ 158.449749][ T8437] __nla_validate_parse: 3 callbacks suppressed [ 158.449766][ T8437] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1546'. [ 158.469235][ T8436] usb usb1: usbfs: interface 0 claimed by hub while 'syz.2.1547' sets config #1 [ 158.727107][ T8440] netlink: 64 bytes leftover after parsing attributes in process `syz.2.1548'. [ 158.751388][ T3873] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 158.771201][ T8440] usb usb1: usbfs: interface 0 claimed by hub while 'syz.2.1548' sets config #0 [ 158.780598][ T8440] usb usb1: usbfs: interface 0 claimed by hub while 'syz.2.1548' sets config #1 [ 158.976155][ T8450] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1552'. [ 159.100417][ T8450] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1552'. [ 159.803609][ T8468] netlink: 64 bytes leftover after parsing attributes in process `syz.9.1558'. [ 159.901406][ T8472] syzkaller0: entered promiscuous mode [ 159.906915][ T8472] syzkaller0: entered allmulticast mode [ 159.966320][ T8473] usb usb1: usbfs: interface 0 claimed by hub while 'syz.9.1558' sets config #0 [ 160.107606][ T8476] usb usb1: usbfs: interface 0 claimed by hub while 'syz.9.1558' sets config #1 [ 160.145860][ T8475] loop2: detected capacity change from 0 to 4096 [ 160.210298][ T8475] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 160.791755][ T5753] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 160.886144][ T8486] loop2: detected capacity change from 0 to 2048 [ 160.914331][ T8488] netlink: 32 bytes leftover after parsing attributes in process `syz.9.1565'. [ 160.968424][ T8492] loop9: detected capacity change from 0 to 512 [ 160.985656][ T8486] Alternate GPT is invalid, using primary GPT. [ 160.991965][ T8486] loop2: p1 p2 p3 [ 160.999691][ T29] kauditd_printk_skb: 395 callbacks suppressed [ 160.999702][ T29] audit: type=1326 audit(1762004677.639:11511): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8489 comm="syz.6.1566" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc2eddeefc9 code=0x7ffc0000 [ 161.029504][ T29] audit: type=1326 audit(1762004677.639:11512): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8489 comm="syz.6.1566" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc2eddeefc9 code=0x7ffc0000 [ 161.053023][ T29] audit: type=1326 audit(1762004677.639:11513): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8489 comm="syz.6.1566" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc2eddeefc9 code=0x7ffc0000 [ 161.076735][ T29] audit: type=1326 audit(1762004677.639:11514): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8489 comm="syz.6.1566" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc2eddeefc9 code=0x7ffc0000 [ 161.100425][ T29] audit: type=1326 audit(1762004677.639:11515): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8489 comm="syz.6.1566" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc2eddeefc9 code=0x7ffc0000 [ 161.123956][ T29] audit: type=1326 audit(1762004677.639:11516): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8489 comm="syz.6.1566" exe="/root/syz-executor" sig=0 arch=c000003e syscall=201 compat=0 ip=0x7fc2eddeefc9 code=0x7ffc0000 [ 161.147432][ T29] audit: type=1326 audit(1762004677.639:11517): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8489 comm="syz.6.1566" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc2eddeefc9 code=0x7ffc0000 [ 161.170968][ T29] audit: type=1326 audit(1762004677.639:11518): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8489 comm="syz.6.1566" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7fc2eddeefc9 code=0x7ffc0000 [ 161.194443][ T29] audit: type=1326 audit(1762004677.639:11519): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8489 comm="syz.6.1566" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc2eddeefc9 code=0x7ffc0000 [ 161.217926][ T29] audit: type=1326 audit(1762004677.639:11520): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8489 comm="syz.6.1566" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7fc2eddeefc9 code=0x7ffc0000 [ 161.361604][ T8492] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 161.361878][ T8486] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1563'. [ 161.383902][ T8492] ext4 filesystem being mounted at /169/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 161.538283][ T8505] netlink: 12 bytes leftover after parsing attributes in process `syz.9.1567'. [ 161.547323][ T8505] netlink: 8 bytes leftover after parsing attributes in process `syz.9.1567'. [ 161.551269][ T8508] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=8508 comm=syz.6.1571 [ 161.593184][ T8514] loop6: detected capacity change from 0 to 2048 [ 161.611635][ T8512] lo speed is unknown, defaulting to 1000 [ 161.654818][ T8514] Alternate GPT is invalid, using primary GPT. [ 161.661189][ T8514] loop6: p1 p2 p3 [ 161.753319][ T8514] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1572'. [ 161.771169][ T8520] IPVS: set_ctl: invalid protocol: 115 255.255.255.255:20000 [ 161.984768][ T8519] lo speed is unknown, defaulting to 1000 [ 162.145887][ T8525] loop2: detected capacity change from 0 to 128 [ 162.178832][ T5527] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 162.429905][ T5204] netdevsim netdevsim6 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 162.438903][ T5204] netdevsim netdevsim6 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 162.451771][ T5204] netdevsim netdevsim6 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 162.462999][ T5190] netdevsim netdevsim6 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 162.538468][ T8500] Set syz1 is full, maxelem 65536 reached [ 162.602334][ T8547] loop2: detected capacity change from 0 to 512 [ 162.711711][ T8550] loop3: detected capacity change from 0 to 512 [ 162.724179][ T8552] FAULT_INJECTION: forcing a failure. [ 162.724179][ T8552] name failslab, interval 1, probability 0, space 0, times 0 [ 162.736928][ T8552] CPU: 0 UID: 0 PID: 8552 Comm: syz.7.1584 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 162.737015][ T8552] Tainted: [W]=WARN [ 162.737021][ T8552] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 162.737032][ T8552] Call Trace: [ 162.737038][ T8552] [ 162.737045][ T8552] __dump_stack+0x1d/0x30 [ 162.737069][ T8552] dump_stack_lvl+0xe8/0x140 [ 162.737088][ T8552] dump_stack+0x15/0x1b [ 162.737104][ T8552] should_fail_ex+0x265/0x280 [ 162.737153][ T8552] should_failslab+0x8c/0xb0 [ 162.737247][ T8552] __kvmalloc_node_noprof+0x12e/0x670 [ 162.737277][ T8552] ? bpf_test_run_xdp_live+0x119/0x11c0 [ 162.737417][ T8552] bpf_test_run_xdp_live+0x119/0x11c0 [ 162.737449][ T8552] ? __pfx_autoremove_wake_function+0x10/0x10 [ 162.737470][ T8552] ? 0xffffffffa0201800 [ 162.737483][ T8552] ? synchronize_rcu+0x45/0x320 [ 162.737522][ T8552] ? 0xffffffffa0201800 [ 162.737537][ T8552] ? 0xffffffffa0201800 [ 162.737551][ T8552] ? bpf_dispatcher_change_prog+0x6ec/0x7f0 [ 162.737592][ T8552] ? 0xffffffffa0201800 [ 162.737615][ T8552] ? __pfx_xdp_test_run_init_page+0x10/0x10 [ 162.737637][ T8552] bpf_prog_test_run_xdp+0x525/0x970 [ 162.737702][ T8552] ? __rcu_read_unlock+0x4f/0x70 [ 162.737733][ T8552] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 162.737765][ T8552] bpf_prog_test_run+0x22a/0x390 [ 162.737824][ T8552] __sys_bpf+0x4c0/0x7c0 [ 162.737856][ T8552] __x64_sys_bpf+0x41/0x50 [ 162.737885][ T8552] x64_sys_call+0x2aee/0x3000 [ 162.737907][ T8552] do_syscall_64+0xd2/0x200 [ 162.737953][ T8552] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 162.737979][ T8552] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 162.738042][ T8552] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 162.738065][ T8552] RIP: 0033:0x7f3bb1ddefc9 [ 162.738081][ T8552] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 162.738101][ T8552] RSP: 002b:00007f3bb0847038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 162.738118][ T8552] RAX: ffffffffffffffda RBX: 00007f3bb2035fa0 RCX: 00007f3bb1ddefc9 [ 162.738171][ T8552] RDX: 0000000000000048 RSI: 0000200000000600 RDI: 000000000000000a [ 162.738186][ T8552] RBP: 00007f3bb0847090 R08: 0000000000000000 R09: 0000000000000000 [ 162.738229][ T8552] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 162.738241][ T8552] R13: 00007f3bb2036038 R14: 00007f3bb2035fa0 R15: 00007ffeba3f9398 [ 162.738258][ T8552] [ 162.989207][ T8550] EXT4-fs (loop3): orphan cleanup on readonly fs [ 162.996367][ T8550] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.1583: bg 0: block 248: padding at end of block bitmap is not set [ 163.045118][ T8550] EXT4-fs error (device loop3): ext4_acquire_dquot:6945: comm syz.3.1583: Failed to acquire dquot type 1 [ 163.060056][ T8550] EXT4-fs (loop3): 1 truncate cleaned up [ 163.117537][ T8550] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 163.136437][ T8550] EXT4-fs (loop3): warning: mounting fs with errors, running e2fsck is recommended [ 163.150971][ T8550] EXT4-fs (loop3): re-mounted 00000000-0000-0000-0000-000000000000 r/w. [ 163.159413][ T8550] ext4 filesystem being remounted at /338/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 163.353491][ T8570] loop6: detected capacity change from 0 to 512 [ 163.366270][ T8570] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 163.370827][ T8572] netlink: 'syz.2.1590': attribute type 22 has an invalid length. [ 163.378710][ T8570] ext4 filesystem being mounted at /264/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 163.424000][ T5199] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 163.440420][ T8572] netlink: 'syz.2.1590': attribute type 22 has an invalid length. [ 163.453917][ T5199] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 163.462948][ T5199] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 163.471795][ T5199] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 163.510991][ T8561] loop7: detected capacity change from 0 to 8192 [ 163.568421][ T3873] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 163.588977][ T3322] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 163.600083][ T8576] loop2: detected capacity change from 0 to 764 [ 163.667167][ T8583] __nla_validate_parse: 7 callbacks suppressed [ 163.667183][ T8583] netlink: 28 bytes leftover after parsing attributes in process `syz.7.1587'. [ 163.682360][ T8583] netlink: 108 bytes leftover after parsing attributes in process `syz.7.1587'. [ 163.699249][ T8583] netlink: 28 bytes leftover after parsing attributes in process `syz.7.1587'. [ 163.709873][ T8583] netlink: 108 bytes leftover after parsing attributes in process `syz.7.1587'. [ 163.719118][ T8583] netlink: 84 bytes leftover after parsing attributes in process `syz.7.1587'. [ 163.728228][ T10] IPVS: starting estimator thread 0... [ 163.820461][ T8587] IPVS: using max 2640 ests per chain, 132000 per kthread [ 163.955910][ T8597] loop6: detected capacity change from 0 to 128 [ 164.194111][ T8604] loop2: detected capacity change from 0 to 512 [ 164.207731][ T8604] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1598'. [ 164.674686][ T8617] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1604'. [ 164.711074][ T8620] loop3: detected capacity change from 0 to 2048 [ 164.741106][ T8620] Alternate GPT is invalid, using primary GPT. [ 164.747489][ T8620] loop3: p1 p2 p3 [ 164.876754][ T8620] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1605'. [ 164.983420][ T8627] loop2: detected capacity change from 0 to 128 [ 164.995046][ T8629] loop7: detected capacity change from 0 to 128 [ 165.003558][ T8631] loop3: detected capacity change from 0 to 128 [ 165.022821][ T8629] FAT-fs (loop7): error, invalid access to FAT (entry 0x00000100) [ 165.030779][ T8629] FAT-fs (loop7): Filesystem has been set read-only [ 165.038826][ T8629] bio_check_eod: 17201 callbacks suppressed [ 165.038841][ T8629] syz.7.1610: attempt to access beyond end of device [ 165.038841][ T8629] loop7: rw=524288, sector=2065, nr_sectors = 8 limit=128 [ 165.060291][ T8633] loop2: detected capacity change from 0 to 2048 [ 165.069806][ T8629] FAT-fs (loop7): error, invalid access to FAT (entry 0x00000100) [ 165.077731][ T8629] FAT-fs (loop7): error, invalid access to FAT (entry 0x00000100) [ 165.086453][ T8629] syz.7.1610: attempt to access beyond end of device [ 165.086453][ T8629] loop7: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 165.099938][ T8629] syz.7.1610: attempt to access beyond end of device [ 165.099938][ T8629] loop7: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 165.101313][ T8633] Alternate GPT is invalid, using primary GPT. [ 165.119461][ T8633] loop2: p1 p2 p3 [ 165.121533][ T8629] syz.7.1610: attempt to access beyond end of device [ 165.121533][ T8629] loop7: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 165.137387][ T8629] syz.7.1610: attempt to access beyond end of device [ 165.137387][ T8629] loop7: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 165.151665][ T8629] syz.7.1610: attempt to access beyond end of device [ 165.151665][ T8629] loop7: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 165.165515][ T8629] syz.7.1610: attempt to access beyond end of device [ 165.165515][ T8629] loop7: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 165.179635][ T8629] syz.7.1610: attempt to access beyond end of device [ 165.179635][ T8629] loop7: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 165.193972][ T8629] syz.7.1610: attempt to access beyond end of device [ 165.193972][ T8629] loop7: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 165.207865][ T8629] syz.7.1610: attempt to access beyond end of device [ 165.207865][ T8629] loop7: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 165.259886][ T8638] loop6: detected capacity change from 0 to 512 [ 165.268871][ T8633] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1611'. [ 165.269947][ T8635] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1612'. [ 165.287721][ T8638] EXT4-fs: Ignoring removed i_version option [ 165.293803][ T8638] EXT4-fs: Ignoring removed bh option [ 165.329065][ T8638] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 165.376242][ T8638] ext4 filesystem being mounted at /270/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 165.470486][ T3873] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 165.512609][ T8651] loop2: detected capacity change from 0 to 512 [ 165.522910][ T8651] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 165.535156][ T8651] ext4 filesystem being mounted at /147/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 165.597607][ T5753] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 165.626105][ T8656] loop6: detected capacity change from 0 to 2048 [ 165.809442][ T8659] loop2: detected capacity change from 0 to 512 [ 165.816908][ T8656] Alternate GPT is invalid, using primary GPT. [ 165.823228][ T8656] loop6: p1 p2 p3 [ 165.906942][ T8661] loop6: detected capacity change from 0 to 128 [ 166.022947][ T8669] hsr_slave_0: left promiscuous mode [ 166.029612][ T8669] hsr_slave_1: left promiscuous mode [ 166.129383][ T8666] ================================================================== [ 166.137507][ T8666] BUG: KCSAN: data-race in __mark_inode_dirty / __mark_inode_dirty [ 166.145421][ T8666] [ 166.147762][ T8666] write to 0xffff88811a0b1028 of 4 bytes by task 8661 on cpu 1: [ 166.155388][ T8666] __mark_inode_dirty+0x248/0x750 [ 166.160425][ T8666] mark_buffer_dirty+0x133/0x210 [ 166.165369][ T8666] block_write_end+0x12d/0x210 [ 166.170151][ T8666] generic_write_end+0x56/0x150 [ 166.175012][ T8666] fat_write_end+0x4f/0x160 [ 166.179529][ T8666] generic_perform_write+0x312/0x490 [ 166.184821][ T8666] __generic_file_write_iter+0x9e/0x120 [ 166.190368][ T8666] generic_file_write_iter+0x8d/0x2f0 [ 166.195748][ T8666] iter_file_splice_write+0x666/0xa60 [ 166.201132][ T8666] direct_splice_actor+0x156/0x2a0 [ 166.206250][ T8666] splice_direct_to_actor+0x312/0x680 [ 166.211628][ T8666] do_splice_direct+0xda/0x150 [ 166.216406][ T8666] do_sendfile+0x380/0x650 [ 166.220844][ T8666] __x64_sys_sendfile64+0x105/0x150 [ 166.226052][ T8666] x64_sys_call+0x2bb4/0x3000 [ 166.230737][ T8666] do_syscall_64+0xd2/0x200 [ 166.235289][ T8666] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 166.241280][ T8666] [ 166.243604][ T8666] read to 0xffff88811a0b1028 of 4 bytes by task 8666 on cpu 0: [ 166.251231][ T8666] __mark_inode_dirty+0x191/0x750 [ 166.256280][ T8666] fat_update_time+0x1ec/0x200 [ 166.261072][ T8666] touch_atime+0x148/0x340 [ 166.265509][ T8666] filemap_splice_read+0x6ba/0x740 [ 166.270641][ T8666] splice_direct_to_actor+0x26f/0x680 [ 166.276024][ T8666] do_splice_direct+0xda/0x150 [ 166.280789][ T8666] do_sendfile+0x380/0x650 [ 166.285210][ T8666] __x64_sys_sendfile64+0x105/0x150 [ 166.290418][ T8666] x64_sys_call+0x2bb4/0x3000 [ 166.295092][ T8666] do_syscall_64+0xd2/0x200 [ 166.299595][ T8666] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 166.305496][ T8666] [ 166.307811][ T8666] value changed: 0x00000010 -> 0x00000070 [ 166.313514][ T8666] [ 166.315820][ T8666] Reported by Kernel Concurrency Sanitizer on: [ 166.321959][ T8666] CPU: 0 UID: 0 PID: 8666 Comm: syz.6.1621 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 166.333241][ T8666] Tainted: [W]=WARN [ 166.337026][ T8666] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 166.347072][ T8666] ================================================================== [ 166.518016][ T8661] ================================================================== [ 166.526124][ T8661] BUG: KCSAN: data-race in file_write_and_wait_range / xas_set_mark [ 166.534118][ T8661] [ 166.536440][ T8661] write to 0xffff88811a0b1114 of 4 bytes by task 8666 on cpu 1: [ 166.544065][ T8661] xas_set_mark+0x12b/0x140 [ 166.548570][ T8661] tag_pages_for_writeback+0xc2/0x290 [ 166.553952][ T8661] writeback_iter+0x340/0x820 [ 166.558635][ T8661] mpage_writepages+0x87/0x1250 [ 166.563494][ T8661] fat_writepages+0x24/0x30 [ 166.568001][ T8661] do_writepages+0x1c6/0x310 [ 166.572592][ T8661] file_write_and_wait_range+0x156/0x2c0 [ 166.578232][ T8661] __generic_file_fsync+0x46/0x140 [ 166.583440][ T8661] fat_file_fsync+0x49/0x100 [ 166.588042][ T8661] vfs_fsync_range+0x10d/0x130 [ 166.592914][ T8661] generic_file_write_iter+0x1b8/0x2f0 [ 166.598386][ T8661] iter_file_splice_write+0x666/0xa60 [ 166.603762][ T8661] direct_splice_actor+0x156/0x2a0 [ 166.608874][ T8661] splice_direct_to_actor+0x312/0x680 [ 166.614262][ T8661] do_splice_direct+0xda/0x150 [ 166.619027][ T8661] do_sendfile+0x380/0x650 [ 166.623460][ T8661] __x64_sys_sendfile64+0x105/0x150 [ 166.628668][ T8661] x64_sys_call+0x2bb4/0x3000 [ 166.633354][ T8661] do_syscall_64+0xd2/0x200 [ 166.637861][ T8661] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 166.643762][ T8661] [ 166.646077][ T8661] read to 0xffff88811a0b1114 of 4 bytes by task 8661 on cpu 0: [ 166.653623][ T8661] file_write_and_wait_range+0x10e/0x2c0 [ 166.659279][ T8661] __generic_file_fsync+0x46/0x140 [ 166.664408][ T8661] fat_file_fsync+0x49/0x100 [ 166.669004][ T8661] vfs_fsync_range+0x10d/0x130 [ 166.673777][ T8661] generic_file_write_iter+0x1b8/0x2f0 [ 166.679234][ T8661] iter_file_splice_write+0x666/0xa60 [ 166.684603][ T8661] direct_splice_actor+0x156/0x2a0 [ 166.689710][ T8661] splice_direct_to_actor+0x312/0x680 [ 166.695075][ T8661] do_splice_direct+0xda/0x150 [ 166.699847][ T8661] do_sendfile+0x380/0x650 [ 166.704268][ T8661] __x64_sys_sendfile64+0x105/0x150 [ 166.709467][ T8661] x64_sys_call+0x2bb4/0x3000 [ 166.714140][ T8661] do_syscall_64+0xd2/0x200 [ 166.718645][ T8661] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 166.724537][ T8661] [ 166.726856][ T8661] value changed: 0x02000021 -> 0x04000021 [ 166.732556][ T8661] [ 166.734866][ T8661] Reported by Kernel Concurrency Sanitizer on: [ 166.741003][ T8661] CPU: 0 UID: 0 PID: 8661 Comm: syz.6.1621 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 166.752298][ T8661] Tainted: [W]=WARN [ 166.756085][ T8661] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 166.766126][ T8661] ==================================================================