last executing test programs: 6m13.694827954s ago: executing program 2 (id=2594): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x5, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000004002000000000000000018090000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x39, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='sys_enter\x00', r0}, 0x10) request_key(0x0, &(0x7f0000000180)={'syz', 0x2}, 0x0, 0xfffffffffffffffe) 6m13.669146004s ago: executing program 2 (id=2595): bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={0x0, &(0x7f0000000380)=""/218, 0xae, 0xda, 0x1, 0x9, 0x0, @void, @value}, 0x28) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000340)={0x1}, 0x8) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x53) timer_create(0x1, 0x0, 0x0) mount(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000300)='proc\x00', 0x0, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000060000000000000000850000000f000000c5000000a0ef010095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000200)='kmem_cache_free\x00', r0}, 0x18) r1 = mq_open(&(0x7f0000000380)='eth0\x00#\x13\xaeu\xe0\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t/\x8dv\xb8\x93\xc3C\xae\x9dc\xd1T\xdd\x14\xd3A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\v\x01\xbe\xeb\bLTrw\x88\x9e0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\x01\x00\x00\x00a%\xdcQ\xb3CuT\xcc7\x8avs\xb2\a\xfe\xb3j*\xad\x18I\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xb3\x1bo:\xe8\vq7S\xe4H\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1J\xec\x926\xb5a0\xa0B\xae|\x00\x17\xc0\xa3\xd5\xf9\xaa\x98/\xa4v\xe4)I\xf3+[e\x95\x89\x99\xca\x8e\xc5\xd3\\T\xf0\x1a|5\xfff\xff\x99\xa4\xbb\x9e#oR\xa4\xf1\xba\x04c\xb3-\xf7R\xb85\xb5\xdb\xe9?\xfa/\xdf\xb4R\xbfx=\v_j\x8e\xb0\'\xf4\xe5\xff!\xe1\xbf\x82e\xb1\x9b\x8d\xf3L\t\xd21\x9cbwV\xc8\xcc\xe4\x96M_w\xbc\xdf9\b\r\xf6\x95\xae\xb5,\x92\x8c\xc0DQm\x80\xd1w\xa2\x1a\x12Z\xe5\xf4H\xf7D\n\x96J\x93\xfb\xf0$\x9f\xf7\xa2\xae$O\xa3\xb6\xf5\x98\xd3\v\x00\x86\xa5\x8b\x81\x04\xaf\x03s\xe5\x86>\x0e\xa6\xe6\x1aV\x17\x8b\xed\xa7\'\xd0\r_\xe8,XVR\x13\xe5%\xb9\x88\xb8W@D\'\x17A\xc8\x80\x02J\xd4V\x00wH(\xc5v\f\xc9\xb6\xdf..$\xe6P(_\xf1\'\xc1:\xa3\xcb\xd9\xd1\xc7\x13\x99Md\x1dc\xf1\'j\x03!\x13\xd1\xb8\xbf\xe6\xb2M\b/\rp\xa5\x00\x00\x00\x00', 0x40, 0x9, 0x0) fcntl$setlease(r1, 0x400, 0x0) mq_unlink(&(0x7f0000000340)='eth0\x00') mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x101091, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000008da4b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) pivot_root(&(0x7f00000001c0)='./file0\x00', &(0x7f00000000c0)='./file0\x00') dup(0xffffffffffffffff) r2 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x3000003, 0x13, 0xffffffffffffffff, 0x0) r3 = perf_event_open(&(0x7f0000000140)={0x3, 0x80, 0x3d, 0x1, 0x0, 0x0, 0x0, 0x8, 0x152, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, @perf_bp={0x0, 0xe}, 0x10, 0xffffffff, 0x6, 0x7, 0x5, 0x0, 0xfff9, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, r2, 0x3) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000540)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r4) perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x3d, 0x1, 0x0, 0x0, 0x0, 0x5, 0x62000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}, 0x100000, 0x0, 0x0, 0x6, 0x3, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r5, 0x8933, &(0x7f0000000140)={'batadv0\x00', 0x0}) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=@newtfilter={0x24, 0x11, 0x1, 0x691522eb, 0x0, {0x0, 0x0, 0x74, r6, {0x10, 0x4}, {}, {0x5}}}, 0x24}, 0x1, 0xf0ffffffffffff}, 0x0) 6m13.480323787s ago: executing program 2 (id=2601): r0 = syz_open_dev$rtc(&(0x7f0000001480), 0x0, 0x20081) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x10) unshare(0x22020400) r2 = syz_clone(0x2c9a4080, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc) ioctl$RTC_RD_TIME(r0, 0x40187014, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="05000000040000"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @void, @value}, 0x94) r6 = syz_open_procfs(0x0, &(0x7f0000000000)='task\x00') getdents(r6, 0x0, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xc, &(0x7f0000002a00)=ANY=[@ANYRES64=r2, @ANYRESDEC=r5, @ANYBLOB="654eaef7bf43bdb40db14d4f8fb0c5168cafbaf24385b676f0fa1bb15198c4c1aaa4e4d4165989ea83b97044ae2000783e2b13995e2ff636b867f63d9a0840e8e40b23b53cd17ce09e2e50856b726cce4cf7b3ae23c9a3ab68c4249a156e8f1fbc252803b1893d69bca05b567312b747e5c4da220acf318af66c2bfb1095fb34536425534ffced9d26104e07b86e18686e1b572bd8f30b34ee92171954580b3130eee7af7984e819", @ANYRES64=r4], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x8, r6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001240)={&(0x7f0000000200)='kfree\x00', r7, 0x0, 0xfffffffffffffffd}, 0x18) r8 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000500)='status\x00') setgroups(0x1, &(0x7f0000000080)=[0x0]) lseek(r8, 0xa, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)={0x20, 0x3e, 0x107, 0xfffffffc, 0x25dfdbfe, {0x1, 0x7c}, [@nested={0xc, 0x3, 0x0, 0x1, [@typed={0x8, 0x34, 0x0, 0x0, @u32=0x80}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x488c0}, 0xc000) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b70300000000010a850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r10 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000ac0)={&(0x7f0000000b00)='kmem_cache_free\x00', r9, 0x0, 0x1034}, 0x18) r11 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r11, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="58000000020605000000000000000000000000000900020073797a3100000000050005000a000000050001000600000013000300686173683a6e65742c696661636500000c000780080012400500000005"], 0x58}, 0x1, 0x0, 0x0, 0x1}, 0x800) r12 = perf_event_open$cgroup(&(0x7f0000002b80)={0x3, 0x80, 0xad, 0xf, 0x1, 0x0, 0x0, 0x0, 0x64847, 0x4, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1d, 0x2, @perf_bp={&(0x7f0000001000), 0x7}, 0x2200, 0x5, 0x5, 0x9, 0x1, 0x1, 0xd, 0x0, 0x1, 0x0, 0x5}, 0xffffffffffffffff, 0xf, 0xffffffffffffffff, 0x1) perf_event_open(&(0x7f0000002b00)={0x3, 0x80, 0x0, 0x10, 0x1, 0x5, 0x0, 0x6, 0x0, 0x3, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x8, 0x2, @perf_config_ext={0x2, 0xcc}, 0x1, 0x7fff, 0xa4c3, 0x9, 0x0, 0xf8, 0xff, 0x0, 0x3, 0x0, 0x1}, r2, 0xffffffffffffffff, r12, 0x1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000fc0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$IPT_SO_SET_REPLACE(r10, 0x0, 0x40, &(0x7f00000025c0)=@nat={'nat\x00', 0x1b, 0x5, 0x3d0, 0x238, 0x190, 0xffffffff, 0xd8, 0x238, 0x338, 0x338, 0xffffffff, 0x338, 0x338, 0x5, &(0x7f0000001080), {[{{@uncond, 0x0, 0x90, 0xd8, 0x0, {}, [@common=@socket0={{0x20}}]}, @unspec=@DNAT1={0x48, 'DNAT\x00', 0x1, {0x3, @ipv6=@mcast1, @ipv6=@ipv4={'\x00', '\xff\xff', @multicast1}, @icmp_id=0x65, @icmp_id=0x66}}}, {{@uncond, 0x0, 0x70, 0xb8}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@mcast1, 'ip6erspan0\x00', {0x3}}}}, {{@uncond, 0x0, 0x70, 0xa8}, @SNAT0={0x38, 'SNAT\x00', 0x0, {0x1, {0x1, @loopback, @multicast2, @gre_key=0x1, @port=0x4e22}}}}, {{@ip={@local, @multicast2, 0xff, 0x0, 'veth1_to_team\x00', 'dvmrp0\x00', {}, {}, 0x32, 0x1, 0x10}, 0x0, 0xc8, 0x100, 0x0, {}, [@common=@icmp={{0x28}, {0x3, "d835", 0x1}}, @common=@ah={{0x30}, {[0x8, 0x100], 0x1}}]}, @NETMAP={0x38, 'NETMAP\x00', 0x0, {0x1, {0x0, @remote, @rand_addr=0x64010102, @icmp_id=0x66, @port=0x4e20}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x430) sendmsg$inet(r13, &(0x7f0000001580)={0x0, 0x0, &(0x7f0000001400)=[{&(0x7f0000000080)="3bfdd75fa5717852d59a9367444a2130e72cd4dabc8854532cca0c32a5b9f844a4610c7525650ce3d3b76b15026d93e6dee896115e9364066aa3d14e33ef732b4681335c576902153114bdb9c74b538a71115fb1d1a63d1b04129661b29aab89d0be999a6b7c9bea755adedbf305a79f70b71d3d4c98577b49db4963ce89b0def5e840f459659cb6f86d56b069a5de11d601d348ff88ca6e5e2cfe40176880b33e9e8dbc32ba2e6a99b1b50276dc4f06166000d7069a3cc76f", 0xb9}, {&(0x7f0000000180)="892950e2405ee8629d9384a91c16d1706a3e61f305119f95cac0f1927f4c205b971eb41147cb1f86883d6910e68ac3996551800b3ec64b77f8444b18345a2c8b178eeeba0cde7319a5a46bfe7f5770e019efd9d52069edcced33a758c4e657f3a792dc193a1911b4e82ea800ad7afe03c851a8", 0x73}, {&(0x7f0000000200)="a68cde0d56b170df7710b54f17d9a39c4f98f3547190", 0x20000216}, {&(0x7f0000000240)="45e04400f2b383517a08c397dd0a76e67ecfc8e74573c24dedd3a48fb62418c1412fdcd15e888cb0f5d02e77bfecefda6b064c0bb2b66a9a522e63873dde02330510255eec7dfa1af708cdab59fb71eca786a359a2c3b0cbad35144ec5b069c53f90e43339845dc7fd140c55b0149ab38eb27c140f374bcc2c95b0b121d1a9302f3a01b888243b3fc0d46f0de0", 0x8d}, {&(0x7f0000000300)="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", 0xcb3}], 0x5, &(0x7f0000001480)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @private, @multicast1}}}], 0x20}, 0x0) recvmsg$unix(r14, &(0x7f0000001140)={0x0, 0x0, &(0x7f0000001040)=[{&(0x7f00000015c0)=""/4096, 0x7ffff000}], 0x1, 0x0, 0x2}, 0x40000100) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) 6m12.657731298s ago: executing program 2 (id=2608): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000600)=@framed, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r0}, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000300)='./file0\x00', 0x0, 0x3337019, 0x0) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x2000000000000) 6m12.59471639s ago: executing program 2 (id=2610): r0 = socket(0x10, 0x803, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'team_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000013c0)=@newtfilter={0x430, 0x2c, 0xd2b, 0x70bd29, 0x35dfdbfb, {0x0, 0x0, 0x0, r2, {0x6}, {}, {0x7, 0xfff3}}, [@filter_kind_options=@f_u32={{0x8}, {0x404, 0x2, [@TCA_U32_SEL={0x14, 0x5, {0x10, 0x1, 0x6, 0x10da, 0xa760, 0x0, 0x10, 0x100}}, @TCA_U32_FLAGS={0x8, 0xb, 0x2}, @TCA_U32_SEL={0x3e4, 0x5, {0x0, 0x9, 0x4, 0x9e, 0x8, 0x0, 0x4, 0x5, [{0x5, 0x0, 0x10001, 0x8000}, {0x15, 0x0, 0x2, 0x9}, {0xe, 0x6, 0x8000, 0x5}, {0x6, 0xfffffff8, 0x2, 0xffff}, {0x6, 0xfffff801, 0x1000, 0x6}, {0x0, 0x20000000, 0x8, 0x1a15}, {0x3, 0xa, 0x8, 0x5}, {0x9, 0x8, 0xb, 0x4}, {0x1000, 0x3, 0x1ff, 0x7}, {0x3ff, 0xdd, 0xaa4e, 0x1}, {0x4, 0xfffffffd, 0x9b6a, 0xfff}, {0x7, 0x5, 0x3b, 0x5}, {0xc9, 0x1, 0x7, 0x4}, {0xd02, 0xb, 0x7a5, 0x1000}, {0x9, 0xc, 0x2, 0x400}, {0xcf, 0x9384, 0x800, 0x4}, {0xac8, 0x27, 0x5, 0x6}, {0x6, 0x7, 0x7, 0x7}, {0x9c9, 0x9, 0x3, 0x7}, {0x1, 0x3, 0xfffffff7, 0x7ff}, {0x81, 0x3, 0x1, 0xdaf9}, {0x3, 0x4, 0x5, 0x8}, {0x8, 0x3f6, 0x5, 0x2}, {0xffffffff, 0x8, 0x5, 0x2}, {0x3, 0x6, 0x8, 0x7}, {0x7ff, 0xfff, 0x5, 0x2}, {0x17600, 0x8, 0x2, 0x3b1}, {0x7, 0x4, 0x3, 0xd6}, {0x3, 0x10000, 0x8000, 0x8}, {0x26e0, 0x5, 0x7, 0x723d}, {0x9, 0x7, 0x9, 0x7f}, {0x745, 0x3, 0xe9, 0x4a}, {0x9, 0x9, 0x5, 0x7}, {0x9, 0xd, 0x3, 0x2}, {0x4ea, 0x1000, 0x2, 0x1bb}, {0xc, 0x5, 0x8, 0x80}, {0x5e, 0xc046, 0x1, 0xfffff255}, {0x3, 0x7, 0x3, 0x7d}, {0x6, 0x2, 0x7, 0x8}, {0x8, 0x8a5, 0x51, 0x9}, {0xa0000000, 0x4, 0x52fc8399, 0x9dc}, {0xfffffff4, 0xff, 0xffffffff, 0x101}, {0x2f875030, 0x3, 0x7, 0x2}, {0xa, 0x7a, 0x65b, 0x3}, {0xdb9f, 0x639, 0x4}, {0x6, 0x7094089f, 0x43f, 0xff}, {0x9, 0x60, 0x80, 0x9}, {0x8, 0x495, 0x4cc, 0x70000000}, {0x100, 0x2199, 0x0, 0x4}, {0x7, 0x1, 0xfcf, 0x4}, {0x9, 0x3, 0x0, 0x1}, {0xffffffff, 0xfffffffc, 0x2, 0xb}, {0x2, 0x3ac383bb, 0x5, 0x5}, {0xcc, 0x4, 0x4, 0x5000}, {0x6, 0x3, 0x2, 0x71b}, {0x2, 0x100, 0x3, 0x8}, {0x8, 0xff, 0x6, 0x3}, {0x7, 0x3, 0x6, 0x9}, {0x200, 0xfffffe8c, 0x40, 0xfffffff9}, {0x7, 0x3, 0x4, 0x4}, {0x2, 0x2, 0xd, 0x9}]}}]}}]}, 0x430}}, 0x24040084) 6m12.369466583s ago: executing program 2 (id=2615): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="0500000004000000990000000b"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r0, @ANYBLOB], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) unshare(0x2a020400) r2 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_FILTER(r2, 0x65, 0x1, &(0x7f0000000140)=[{{0x0, 0x0, 0x1}, {0x0, 0x0, 0x1, 0x1}}, {{0x0, 0x0, 0x0, 0x1}, {0x0, 0x0, 0x1, 0x1}}], 0x10) setsockopt$CAN_RAW_FILTER(r2, 0x65, 0x1, &(0x7f0000000100)=[{{0x0, 0x0, 0x1}, {0x0, 0x0, 0x1, 0x1}}], 0x8) 6m12.337244073s ago: executing program 32 (id=2615): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="0500000004000000990000000b"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r0, @ANYBLOB], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) unshare(0x2a020400) r2 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_FILTER(r2, 0x65, 0x1, &(0x7f0000000140)=[{{0x0, 0x0, 0x1}, {0x0, 0x0, 0x1, 0x1}}, {{0x0, 0x0, 0x0, 0x1}, {0x0, 0x0, 0x1, 0x1}}], 0x10) setsockopt$CAN_RAW_FILTER(r2, 0x65, 0x1, &(0x7f0000000100)=[{{0x0, 0x0, 0x1}, {0x0, 0x0, 0x1, 0x1}}], 0x8) 3.4524818s ago: executing program 0 (id=8863): r0 = syz_open_dev$rtc(&(0x7f0000001480), 0x0, 0x20081) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x10) unshare(0x22020400) r2 = syz_clone(0x2c9a4080, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc) ioctl$RTC_RD_TIME(r0, 0x40187014, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="05000000040000"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @void, @value}, 0x94) r6 = syz_open_procfs(0x0, &(0x7f0000000000)='task\x00') getdents(r6, 0x0, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xc, &(0x7f0000002a00)=ANY=[@ANYRES64=r2, @ANYRESDEC=r5, @ANYBLOB, @ANYRES64=r4], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x8, r6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001240)={&(0x7f0000000200)='kfree\x00', r7, 0x0, 0xfffffffffffffffd}, 0x18) r8 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000500)='status\x00') setgroups(0x1, &(0x7f0000000080)=[0x0]) lseek(r8, 0xa, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)={0x20, 0x3e, 0x107, 0xfffffffc, 0x25dfdbfe, {0x1, 0x7c}, [@nested={0xc, 0x3, 0x0, 0x1, [@typed={0x8, 0x34, 0x0, 0x0, @u32=0x80}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x488c0}, 0xc000) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b70300000000010a8500000004000000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r10 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000ac0)={&(0x7f0000000b00)='kmem_cache_free\x00', r9, 0x0, 0x1034}, 0x18) r11 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r11, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="58000000020605000000000000000000000000000900020073797a3100000000050005000a000000050001000600000013000300686173683a6e65742c696661636500000c0007800800124005000000050004"], 0x58}, 0x1, 0x0, 0x0, 0x1}, 0x800) r12 = perf_event_open$cgroup(&(0x7f0000002b80)={0x3, 0x80, 0xad, 0xf, 0x1, 0x0, 0x0, 0x0, 0x64847, 0x4, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1d, 0x2, @perf_bp={&(0x7f0000001000), 0x7}, 0x2200, 0x5, 0x5, 0x9, 0x1, 0x1, 0xd, 0x0, 0x1, 0x0, 0x5}, 0xffffffffffffffff, 0xf, 0xffffffffffffffff, 0x1) perf_event_open(&(0x7f0000002b00)={0x3, 0x80, 0x0, 0x10, 0x1, 0x5, 0x0, 0x6, 0x0, 0x3, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x8, 0x2, @perf_config_ext={0x2, 0xcc}, 0x1, 0x7fff, 0xa4c3, 0x9, 0x0, 0xf8, 0xff, 0x0, 0x3, 0x0, 0x1}, r2, 0xffffffffffffffff, r12, 0x1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000fc0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$IPT_SO_SET_REPLACE(r10, 0x0, 0x40, &(0x7f00000025c0)=@nat={'nat\x00', 0x1b, 0x5, 0x3d0, 0x238, 0x190, 0xffffffff, 0xd8, 0x238, 0x338, 0x338, 0xffffffff, 0x338, 0x338, 0x5, &(0x7f0000001080), {[{{@uncond, 0x0, 0x90, 0xd8, 0x0, {}, [@common=@socket0={{0x20}}]}, @unspec=@DNAT1={0x48, 'DNAT\x00', 0x1, {0x3, @ipv6=@mcast1, @ipv6=@ipv4={'\x00', '\xff\xff', @multicast1}, @icmp_id=0x65, @icmp_id=0x66}}}, {{@uncond, 0x0, 0x70, 0xb8}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@mcast1, 'ip6erspan0\x00', {0x3}}}}, {{@uncond, 0x0, 0x70, 0xa8}, @SNAT0={0x38, 'SNAT\x00', 0x0, {0x1, {0x1, @loopback, @multicast2, @gre_key=0x1, @port=0x4e22}}}}, {{@ip={@local, @multicast2, 0xff, 0x0, 'veth1_to_team\x00', 'dvmrp0\x00', {}, {}, 0x32, 0x1, 0x10}, 0x0, 0xc8, 0x100, 0x0, {}, [@common=@icmp={{0x28}, {0x3, "d835", 0x1}}, @common=@ah={{0x30}, {[0x8, 0x100], 0x1}}]}, @NETMAP={0x38, 'NETMAP\x00', 0x0, {0x1, {0x0, @remote, @rand_addr=0x64010102, @icmp_id=0x66, @port=0x4e20}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x430) sendmsg$inet(r13, &(0x7f0000001580)={0x0, 0x0, &(0x7f0000001400)=[{&(0x7f0000000080)="3bfdd75fa5717852d59a9367444a2130e72cd4dabc8854532cca0c32a5b9f844a4610c7525650ce3d3b76b15026d93e6dee896115e9364066aa3d14e33ef732b4681335c576902153114bdb9c74b538a71115fb1d1a63d1b04129661b29aab89d0be999a6b7c9bea755adedbf305a79f70b71d3d4c98577b49db4963ce89b0def5e840f459659cb6f86d56b069a5de11d601d348ff88ca6e5e2cfe40176880b33e9e8dbc32ba2e6a99b1b50276dc4f06166000d7069a3cc76f", 0xb9}, {&(0x7f0000000180)="892950e2405ee8629d9384a91c16d1706a3e61f305119f95cac0f1927f4c205b971eb41147cb1f86883d6910e68ac3996551800b3ec64b77f8444b18345a2c8b178eeeba0cde7319a5a46bfe7f5770e019efd9d52069edcced33a758c4e657f3a792dc193a1911b4e82ea800ad7afe03c851a8", 0x73}, {&(0x7f0000000200)="a68cde0d56b170df7710b54f17d9a39c4f98f3547190", 0x20000216}, {&(0x7f0000000240)="45e04400f2b383517a08c397dd0a76e67ecfc8e74573c24dedd3a48fb62418c1412fdcd15e888cb0f5d02e77bfecefda6b064c0bb2b66a9a522e63873dde02330510255eec7dfa1af708cdab59fb71eca786a359a2c3b0cbad35144ec5b069c53f90e43339845dc7fd140c55b0149ab38eb27c140f374bcc2c95b0b121d1a9302f3a01b888243b3fc0d46f0de0", 0x8d}, {&(0x7f0000000300)="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", 0xcb3}], 0x5, &(0x7f0000001480)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @private, @multicast1}}}], 0x20}, 0x0) recvmsg$unix(r14, &(0x7f0000001140)={0x0, 0x0, &(0x7f0000001040)=[{&(0x7f00000015c0)=""/4096, 0x7ffff000}], 0x1, 0x0, 0x2}, 0x40000100) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) 2.180979429s ago: executing program 4 (id=8876): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000f80)=ANY=[@ANYBLOB], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000060000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000480)='kfree\x00', r1, 0x0, 0x6}, 0x18) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000000), 0x208e24b) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000440)={&(0x7f0000000400)='afs_call_state\x00', r2, 0x0, 0x5}, 0x18) futex(&(0x7f000000cffc)=0x1, 0x86, 0x2, 0x0, 0x0, 0xfffffffc) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) 2.130363909s ago: executing program 0 (id=8878): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x5452, &(0x7f0000000400)='lo\x00\x96o\xd6Q\xb4Y\xa9\xc87,%\x81\xfe\x00\xd2\xd1|\x00\x00\x00\x00\x00\x00\xe3\xd8Yk\xdf\x85\xaac{\x8c\x8ffp`-\xcd\xd9\xd5\xf4\xe68\xe6O\xc2\xf1V0\x8b\t\xed\x13q2\xdd\xcc\xeeR\xf2/\xba\fE>k\a\xe7>t7\x8e(\xf0\x87d\xaf\x93\xfa`\xa6,o\x81.\x1cR\xa5\t\x00\x00\x00\x00\x00\x00\x00|pT\x15\xbc\f*d\xcb\xc2\xcd\x8f\x98\xdf\x00\x00\x1cM\x9c\xa5\xe0\xa8\x00\x00\x00\x80V\xf6\x80\x86\x1b\x05\xe6\"\x1d\f\xaey\x06\xd9$H!w\xa6m\xd8\x7f\xc6\x837\x83/\x9a\xdf\x01\xf2\x9e\xbb\xca\x04\x00\x05\xeb\xb8{7[\xf9\xe9\x15\xdc0]\x89\x9b~\x04\xb4\xa5\xad\v.\xd0*%`\xb0\x03\x00\x00\x00\x00\x00\x00\x00\xab\xf4\xa7\x83r\xa4\x80|\x03C\x9c\x00\xac\xba\xcb\xa4h\x86w_Eu\xbfy%,\xe5\n\xc1\xb3\xa4g\xa3P\x0f\x11\x93\xc7\xf3\xcf\x17\xf5\x86%\x7f\xec\xb2\xc5E\x00\xb2e\xa8\xf1<\xb2\xc82\xbf=o\x00\x00\x00\x00E\x00\xc6X\x92\x0e[\x19\xaa?\x06\xe5\x9d\xd1\x87\x922A\x95\x8e\xbc\xc80x0}) bind$can_raw(r3, &(0x7f0000000000)={0x1d, r4}, 0x10) bind$can_raw(r3, &(0x7f0000000080), 0x10) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000340)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="0100000000000000000005000000180001801400020073797a5f74756e000000080000000000180003801400038010"], 0x44}}, 0x0) 1.212938553s ago: executing program 0 (id=8894): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x6, 0x5, 0x1000, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x16, 0x0, 0x30000, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000440)={r2, 0x0, 0x0}, 0x20) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet6_IPV6_DSTOPTS(r3, 0x29, 0x3b, &(0x7f0000000000)=ANY=[], 0x8) sendmsg$BATADV_CMD_GET_MESH(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, 0x0}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f00000001c0)=ANY=[@ANYRES32, @ANYRES32=r4, @ANYRES64=r4, @ANYRESHEX=r4], 0x20) r5 = socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r5, 0x29, 0x2a, &(0x7f0000fca000)={0x100000001, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88) setsockopt$inet6_MCAST_MSFILTER(r5, 0x29, 0x30, &(0x7f0000000240)=ANY=[@ANYBLOB="01000000000000000a0000000000ff00ff010000000000000000000000000001000001000000000000000000e0ff00000000000000bd0000000000000000000000e4ec010000000040000000000000000000000000000000000000013da51fd47aa2e2f70000000000000000000000000000000000000000000000000000000000000067ff0000000000000005"], 0x310) setsockopt$inet6_MCAST_MSFILTER(r5, 0x29, 0x30, &(0x7f0000000640)=ANY=[@ANYBLOB="01000000000000000a00000000000000ff010000000000000000000000000001"], 0x110) sendmmsg$inet6(r3, &(0x7f0000000a00)=[{{&(0x7f0000000240)={0xa, 0x4e20, 0xc52, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x4}, 0x1c, &(0x7f0000000200)=[{&(0x7f00000004c0)='\x00', 0x1}], 0x1}}], 0x1, 0x4000881) listen(r3, 0x2000fff) r6 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$SO_ATTACH_FILTER(r6, 0x1, 0x1a, &(0x7f00000000c0)={0x2, &(0x7f0000000040)=[{0x40, 0x5d, 0x2, 0x8}, {0x6, 0x0, 0x6, 0x1}]}, 0x10) bind$bt_hci(r6, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000802000021"], 0x50) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f0000000380)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000340)={&(0x7f0000000c00)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x7}}, [@NFT_MSG_NEWFLOWTABLE={0x434, 0x16, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x7}, [@NFTA_FLOWTABLE_FLAGS={0x8, 0x7, 0x1, 0x0, 0x2}, @NFTA_FLOWTABLE_HOOK={0x184, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_DEVS={0x54, 0x3, 0x0, 0x1, [{0x14, 0x1, 'syzkaller1\x00'}, {0x14, 0x1, 'vlan0\x00'}, {0x14, 0x1, 'caif0\x00'}, {0x14, 0x1, 'vlan1\x00'}]}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x6}, @NFTA_FLOWTABLE_HOOK_DEVS={0x7c, 0x3, 0x0, 0x1, [{0x14, 0x1, 'lo\x00'}, {0x14, 0x1, 'macvtap0\x00'}, {0x14, 0x1, 'veth0_vlan\x00'}, {0x14, 0x1, 'netpci0\x00'}, {0x14, 0x1, 'macsec0\x00'}, {0x14, 0x1, 'erspan0\x00'}]}, @NFTA_FLOWTABLE_HOOK_DEVS={0x90, 0x3, 0x0, 0x1, [{0x14, 0x1, 'bond_slave_1\x00'}, {0x14, 0x1, 'team0\x00'}, {0x14, 0x1, 'bond_slave_1\x00'}, {0x14, 0x1, 'macvtap0\x00'}, {0x14, 0x1, 'pimreg\x00'}, {0x14, 0x1, 'virt_wifi0\x00'}, {0x14, 0x1, 'gre0\x00'}]}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x3ff}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0xfffffff9}]}, @NFTA_FLOWTABLE_FLAGS={0x8, 0x7, 0x1, 0x0, 0x1}, @NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x1}, @NFTA_FLOWTABLE_HOOK={0x268, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_DEVS={0x40, 0x3, 0x0, 0x1, [{0x14, 0x1, 'nicvf0\x00'}, {0x14, 0x1, 'bridge0\x00'}, {0x14, 0x1, 'veth1_to_team\x00'}]}, @NFTA_FLOWTABLE_HOOK_DEVS={0xb8, 0x3, 0x0, 0x1, [{0x14, 0x1, 'veth0_virt_wifi\x00'}, {0x14, 0x1, 'dummy0\x00'}, {0x14, 0x1, 'veth0_virt_wifi\x00'}, {0x14, 0x1, 'pimreg0\x00'}, {0x14, 0x1, 'veth0_to_hsr\x00'}, {0x14, 0x1, 'veth1_to_batadv\x00'}, {0x14, 0x1, 'dvmrp1\x00'}, {0x14, 0x1, 'ip6gretap0\x00'}, {0x14, 0x1, 'bridge0\x00'}]}, @NFTA_FLOWTABLE_HOOK_DEVS={0x68, 0x3, 0x0, 0x1, [{0x14, 0x1, 'ipvlan1\x00'}, {0x14, 0x1, 'dvmrp0\x00'}, {0x14, 0x1, 'gretap0\x00'}, {0x14, 0x1, 'pimreg1\x00'}, {0x14, 0x1, 'ip_vti0\x00'}]}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_DEVS={0x90, 0x3, 0x0, 0x1, [{0x14}, {0x14, 0x1, 'ip6gre0\x00'}, {0x14, 0x1, 'wg1\x00'}, {0x14, 0x1, 'ip6_vti0\x00'}, {0x14, 0x1, 'geneve0\x00'}, {0x14, 0x1, 'wg0\x00'}, {0x14, 0x1, 'veth1_to_bond\x00'}]}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_FLOWTABLE_HOOK_DEVS={0x54, 0x3, 0x0, 0x1, [{0x14, 0x1, 'pim6reg0\x00'}, {0x14, 0x1, 'veth1_to_hsr\x00'}, {0x14, 0x1, 'veth1_to_bridge\x00'}, {0x14, 0x1, 'geneve1\x00'}]}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}]}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz2\x00'}]}, @NFT_MSG_NEWTABLE={0x40, 0x0, 0xa, 0x201, 0x0, 0x0, {0x7, 0x0, 0x4}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x4}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x2}]}, @NFT_MSG_NEWSETELEM={0x15c0, 0xc, 0xa, 0x101, 0x0, 0x0, {0x3, 0x0, 0x2}, [@NFTA_SET_ELEM_LIST_ELEMENTS={0x15a0, 0x3, 0x0, 0x1, [{0x104, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_USERDATA={0x4f, 0x6, 0x1, 0x0, "08077a68560e0be99050bcff481bd6cf6a97a71badaafcd6f42c8460b8cdef8f97dbd217d35ae7941abb308caf314765f31edfcaf813b6424754a2f6688a8e4754a8015a9990c22322765d"}, @NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0x10}, @NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0x821}, @NFTA_SET_ELEM_USERDATA={0x8d, 0x6, 0x1, 0x0, "7304bfe092594c2a2d35808cd6be83ebe9f22235d140aa18ae2b60ef482c2214252610dadc90e769c397b956cd4740cf647ef6f8907186afcd515b2af78eff954e9048f78c3fc0a2f35a3293f1cfb6f009afb45e45225607d19f930bbbea4dea429908e092758daa60513482bd72c3b461f5ea33deb2b2384e5a0579cac931db59e6e13afc6cfc4f7a"}]}, {0x28c, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_DATA={0x5c, 0x2, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x58, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}]}]}, @NFTA_SET_ELEM_KEY_END={0x22c, 0xa, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x58, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}]}, @NFTA_DATA_VERDICT={0x28, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}]}, @NFTA_DATA_VALUE={0x6a, 0x1, "d923067acf4cbf5ad27afd38d7284924d159a1094d7071168fdd5e49065614ac97b964c46568512352395bf50d6e8593fcb87152923e6b1ad1b92a80f2bd000312dad0391c7127cbdb83258d0f1dcd6f9ca416d0fef705d5f0bda43e704631506a1c7f7cf75c"}, @NFTA_DATA_VALUE={0xe8, 0x1, "74cab4f16e678c76be66f0e9a9a1224ebc52db2137e7b6ffac09f29eb8edf112f03b8c34711a1e452e697c6d0ed9a28d720de2ff9dbddb0351e74f05a26f51f28d6ec6739b335a1c7451f9893d7a2573b128d7556b8f91217dd1e9b2f77eb18ae9d4f1470e1f772fdb9befb0468c1fb4ffde10e436ef21d6edb53d4fedac6303fabaefedf6056b1124720eaee80172bd38d56df267d92cc4017299013f08d38ca52fde70c0254e34b050d896185666e62af95d1b657b724f35ad60b943b1f2846f1630f13c7f23275c1fbf1e6a9308bf740366160583673ea4ed6862a9d14f78103bb48c"}, @NFTA_DATA_VALUE={0x52, 0x1, "04189b91732f3cc37b1391f2ace7709203c0c03ea8e7d87927c4c5f7c6e0cd2bde9f98f120add95efe93a421a0dbd1c3e0bbb2da7d7c349e8cd78e34363174174c8cdf5461e3c6bb30336853211e"}]}]}, {0x494, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz2\x00'}, @NFTA_SET_ELEM_EXPR={0x14, 0x7, 0x0, 0x1, @byteorder={{0xe}, @void}}, @NFTA_SET_ELEM_USERDATA={0x9c, 0x6, 0x1, 0x0, "07e837561fdbe4a3872c03d845d81f56d391d2901e2cc5f797fd33e3f9702476a941a24fea7df021ad6d2b11bff125315689bf0585328fd5f379299ee65aaccc7b16d4b7bc8958b3007385cdf7d825b647c04b39e8d1def13ca5e95cf087775cdc0bee625b33c583d3ecb9ef463e323d3dd80b873dcdae59fe2af3d0424bfb1b750d1d16835752f5ac7e8f076e77b53bf990fc4012c271bf"}, @NFTA_SET_ELEM_KEY_END={0x168, 0xa, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x20, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}]}, @NFTA_DATA_VERDICT={0x60, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}]}, @NFTA_DATA_VALUE={0xe4, 0x1, "f84229a1f6624e3bbffcd7cb5fc62f8b7e103fb6322432a5fe17b552e025aeb1298c0a622e8f6cc8ce9af47619a68f6174d6241d44baecc4d14177211e75a01131e1fc0adbd8c8f05c88f9a288317342b8995bc8c62eecf77c67b753f7ccbc34ef7be8c462e3d0efde681420f27b28f933a1d1a913ed17ead6ad5d1f8d83bc0617f5148bcb1a70f6e09b3cb6ad93913c49e54f16ef555f61b4ff7efd9ce8eac12efa7ff444b4a14dc8df8231a7b99aeb4390a2f7c56edd613fa151184b083cbac4e1b35c318275f77db354181f829e8782c4556baaeec2e5722e2202a0a7b47e"}]}, @NFTA_SET_ELEM_KEY={0x214, 0x1, 0x0, 0x1, [@NFTA_DATA_VERDICT={0xc, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}]}, @NFTA_DATA_VERDICT={0x44, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}]}, @NFTA_DATA_VERDICT={0x28, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}]}, @NFTA_DATA_VERDICT={0xc, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}]}, @NFTA_DATA_VALUE={0x35, 0x1, "8df590e0049a6ba9b280ae2bc377c5223c8cfd44827ad936623a788f70a815ff50e768ce05518377f9cc7a0d28d78bbbd8"}, @NFTA_DATA_VERDICT={0x30, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}]}, @NFTA_DATA_VALUE={0x51, 0x1, "a91cc2b14af483cb5a4c7c722ebf7a3256497f471682ce8ba41cc913efbc7ebe765bab04adf6f75156773d8d85a033d335f1e593cf3eb6d3b3962b5122d0271701ab8f296115e5f893e222ec3a"}, @NFTA_DATA_VERDICT={0x34, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}]}, @NFTA_DATA_VERDICT={0x48, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}]}, @NFTA_DATA_VALUE={0x54, 0x1, "e1bc7f0f015d3fbba3994ed7746c5a8c7a83edc74143f0c8a8d9b5eb3b841369f09dbaa8d02db7a07e5228c5bf3bc1ddb8df36b1ed8250a01b103b32ac74798a9cfd8f39a314ce0a5a4a49e26f36b526"}]}, @NFTA_SET_ELEM_EXPRESSIONS={0x58, 0xb, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @masq={{0x9}, @void}}, {0xc, 0x1, 0x0, 0x1, @nat={{0x8}, @void}}, {0xc, 0x1, 0x0, 0x1, @fib={{0x8}, @void}}, {0x2c, 0x1, 0x0, 0x1, @masq={{0x9}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_MASQ_REG_PROTO_MAX={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_MASQ_REG_PROTO_MAX={0x8}, @NFTA_MASQ_REG_PROTO_MAX={0x8, 0x3, 0x1, 0x0, 0xf}]}}}]}]}, {0xd78, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz0\x00'}, @NFTA_SET_ELEM_EXPRESSIONS={0x774, 0xb, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, @flow_offload={{0x11}, @val={0x4}}}, {0x44, 0x1, 0x0, 0x1, @tunnel={{0xb}, @val={0x34, 0x2, 0x0, 0x1, [@NFTA_TUNNEL_KEY={0x8}, @NFTA_TUNNEL_DREG={0x8, 0x2, 0x1, 0x0, 0x13}, @NFTA_TUNNEL_KEY={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_TUNNEL_DREG={0x8, 0x2, 0x1, 0x0, 0x12}, @NFTA_TUNNEL_DREG={0x8, 0x2, 0x1, 0x0, 0xa}, @NFTA_TUNNEL_MODE={0x8, 0x3, 0x1, 0x0, 0x2}]}}}, {0x2c, 0x1, 0x0, 0x1, @numgen={{0xb}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_NG_MODULUS={0x8, 0x2, 0x1, 0x0, 0x6}, @NFTA_NG_TYPE={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_NG_OFFSET={0x8, 0x4, 0x1, 0x0, 0x4}]}}}, {0x34, 0x1, 0x0, 0x1, @payload={{0xc}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_PAYLOAD_BASE={0x8, 0x2, 0x1, 0x0, 0x4}, @NFTA_PAYLOAD_BASE={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_PAYLOAD_SREG={0x8, 0x5, 0x1, 0x0, 0x3}, @NFTA_PAYLOAD_BASE={0x8, 0x2, 0x1, 0x0, 0x1}]}}}, {0x6a0, 0x1, 0x0, 0x1, @immediate={{0xe}, @val={0x68c, 0x2, 0x0, 0x1, [@NFTA_IMMEDIATE_DATA={0x3b0, 0x2, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x3c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}]}, @NFTA_DATA_VALUE={0xf5, 0x1, "0f76fe5486b6eb9cdfe8f932bdc04be375a8e00dfcdbf2c492635c527d067183dbdd62c8f65495903533f7e45b0eb6d383a2395447ac333d284e0f6456b4e8ca5836ab0b22242f9d2c57859785494ae278c6ceac2b7818bafd9f4454c2061fb906da210d9c66af0ad4f0bc498587708a4e41579fabb5707e6d592d37dee642c0502c1bcc74cbd52c4be8b6bfdc7dc635887018223779a1edb28925dd9a773c5bf6367d0fe0ab060c283e1bb61f59366774ad36dc8b56c254875438889f2e5e299887c2ef6da2019d1cfdd7b0652919adcfce3b7976a33be2326821f1b58a21e12a6935a4a34e19aae34cd031c8cf240ce0"}, @NFTA_DATA_VALUE={0xdd, 0x1, "1f318c61a148de599e1f09fe667d96a7206d2a872c628b7e7b8148191323911136e6c25730e8e363ee5dc05f4a8ca7c48ea4cdbc68e91711e4a4948b923aa312acab773ea426f285c913c80ccb47b9995ab53995fff9a6a2a58a8c0f283af8ddaf799f022f0c09e33238a15477b0a1615f549dd257427987af9f5ca1b628f945998271354730ce67f5fb8f9947532a6763e3cd01eb2856e8002fcec99fc83ec23bcc4f9ec153eb43f6d8e479c012da7495a1ddea16175bea345a18980677199830f60eb0e2d5b50ddb8de43fcd0cbec9013215ce885f6e104b"}, @NFTA_DATA_VERDICT={0x50, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0x8000000000000000}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}]}, @NFTA_DATA_VALUE={0x23, 0x1, "05e1be73e5bb5dd626235182229c583dd830779d23ee07acd94e12fe3f45e5"}, @NFTA_DATA_VERDICT={0x44, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CODE={0x8}]}, @NFTA_DATA_VALUE={0xde, 0x1, "ebc3f8dbef9252e6240b9dcdbbbca790a4382b957135e632ac1d3615f10f7c25346c26236d21b257366a46405c1de584eb837c3d365a5f4dac6fa12e6078c13d2f7ad6daf0f956905f61b15fe5ff921898f8957b9072f72a99fab1f09109c1d81feb6a7f0b33fb11e9d469d3a187d98888ac92aac04045fd98031ccfeacace3ab96fee05bf69bad971897e00ab0cf016f6a4e54fa709055dd3e0f726496f17621733d408ba72f4824bf1c0641e464d785d5cc727de65b0b4461e9f83fae7d95e749aff7858bcbb9985225ff21afb349d0427ef5c7c80efa3baa3"}]}, @NFTA_IMMEDIATE_DATA={0x26c, 0x2, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x4}, @NFTA_DATA_VALUE={0x6c, 0x1, "6f97a1f618955e3b1d6b35f20b1e7b83dbafb5b3a4002b9a8de11cc947f22bfe42b6accc460214e4a1a7548f9581f22defd0055d101e41469a8ae90f073d7425a4e5b54db1334e2db2c0a6de56fa8704d13b3bebb72cd715ebdf20035c4b750357a25d2f4160066d"}, @NFTA_DATA_VALUE={0x1c, 0x1, "e34aa4a737c978522b736d2b1d6e5c0d41f5e4e54ba9a1c7"}, @NFTA_DATA_VERDICT={0x2c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}]}, @NFTA_DATA_VALUE={0xc8, 0x1, "9ae50c7aa26d6f0b8483ce20f30988d2677bca6a12ae56c78a16c9e8153c6fb6b71e9a08ca43a348b495b334535f8471ed70e28e4433a64bdc3c6c5b81c71bfed8fe9da7b77b3647719c9140e89d457a00c35928088d201e98cf3d555c44a2b531a647c718943c8365e8f6b947f04a64605eb98aada9a85883851f168aecded3a396f4d235aedce13a795e3ec76254714a1948ac1d0b6170e5ab8e4e9aff589b27210772b771483e0cb72e8c2033e7506da6bcd371cf981f5f7d7b911436b4eb862497d9"}, @NFTA_DATA_VERDICT={0x5c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}]}, @NFTA_DATA_VERDICT={0x50, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0x6}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}]}, @NFTA_DATA_VERDICT={0x3c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}]}]}, @NFTA_IMMEDIATE_DATA={0x64, 0x2, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x60, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}]}]}, @NFTA_IMMEDIATE_DREG={0x8, 0x1, 0x1, 0x0, 0xb}]}}}, {0x10, 0x1, 0x0, 0x1, @meta={{0x9}, @void}}]}, @NFTA_SET_ELEM_DATA={0x340, 0x2, 0x0, 0x1, [@NFTA_DATA_VALUE={0xc9, 0x1, "6d3b2d0346adff9af533b733d9b9532939868cc2b41ed38a89544c1707d9f55efce136a4cf18d8a23c911f7896322f6bbd889eedb99447b2109e8ed2b8d9a62effc019bbef6c25d9e6729cd40a57fa7fc4565fa3ec234affd13d686a3d1b24a062d7de7c73e51dbb1fb96cef089fdf29c56d1295706809665386db92c6d0356c52313312e2a30fc8e5a809191fca7eb8cc562431b6da044921100612fc1d598a23e4661e8eec64035bfe3ac8d56e810fb3308ceec0dc3d50d6d07796ef3a2ab916c42402fa"}, @NFTA_DATA_VALUE={0x90, 0x1, "fab29241459282b9e5fd7320e32a79cdae4eba9e6d62c7e16c4c3886ae048010f0a1ea3d81b42d2022a650d7a23e5f6b874929b266b789a7adfc0b3aa464c7324f9cb5fa98715b7851bf82ab360ed56a51e8d1cb952f3282ad0fb394cd569561071d6e7af5713df95347519c30af0fbe0b46d864398dba6cc513fdb4d2723280e29f07b30585f3396ab376fa"}, @NFTA_DATA_VERDICT={0x44, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4f8}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}]}, @NFTA_DATA_VALUE={0xc9, 0x1, "04fe40c681e7fc13d45ac4667396a2a5375c62b1659e842246b3fef5e53f82e0d75ac047b0a15eb38e9809cd5f7f440c1e005c85354bd8cbc1f50d8c040f1f73a3956137d41f3563620566a54c10e96a869cc9a61c25a3c08fe1a53165cbeb3e21a501eb7e164bcab2f601f10c07ee7d74c297b2a657b0feeb19c0ed95434712f3db1fb2e0b905d36784b2464f9e31b9ca9c2fd2d82319beb81c0acab2cc2141b3f78017b311ef15ecc5a9d51349cb62085d21d7af1b2a78f592dc10d27645c61aa3ec3bc5"}, @NFTA_DATA_VALUE={0x92, 0x1, "09c4c75008516371866cb7ee3db9b45446298e1b834c6a8b9b6f248d65bd5b176d31e1e7d0f64a156bedb7e0d8627c54f5eaa051c75e7d85b75942d0aed3aced59ee59bb05d8996fa8cfe83a83ee6621959ce0e9d4d9493e06c02d832d2c5fd3c9749e0bd80409119b4cf9c26ebaa1952726eaa229733d8e48e939a7d6058acb7b0e14c34f0091563d7525f605da"}, @NFTA_DATA_VERDICT={0x3c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}]}]}, @NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0xfffffffffffffff8}, @NFTA_SET_ELEM_KEY={0x11c, 0x1, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x3c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}]}, @NFTA_DATA_VERDICT={0x40, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}]}, @NFTA_DATA_VERDICT={0x18, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}]}, @NFTA_DATA_VERDICT={0x60, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}]}, @NFTA_DATA_VALUE={0x21, 0x1, "261d68c0ba4a8a9b09934e568fbfe65a6ba5931aece21fdb572a1eb660"}]}, @NFTA_SET_ELEM_KEY={0x180, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x63, 0x1, "21bbf035190eb4d3bc812ebb828f26edc07c68132c1c7b5dd99bea458fd2d9db5edf20cbf8ddca5326463af6059fb620a8a5e94e9254fee23dc96606281b6fc6063ecfd013866745e6deae2f80ca6f65df5e87d6c2368b56ee8aaa2ae38396"}, @NFTA_DATA_VERDICT={0x4}, @NFTA_DATA_VERDICT={0x14, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}]}, @NFTA_DATA_VERDICT={0x58, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}]}, @NFTA_DATA_VALUE={0x75, 0x1, "f3c8558eddfdf9c645044f7ec3e726a8f19976d47d9a8b2c5fd1c37b86c4c053604663211390ae64ee652c995c8f89a155cfadc9ea1e8166c42ffb975bd34d34013cbe35eb4686cdd04da168894e8a389446165c87460bf1e04fab4ef0420942f42233ac5b5a179842e0f6cc1a35f0eaf6"}, @NFTA_DATA_VALUE={0x2d, 0x1, "cbbd4192ba344be78295594fd8f9c8531b4c33f35334f565539ed535f1cb06560bde109527464308e6"}]}, @NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0x8001}]}]}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSETELEM={0x28, 0xc, 0xa, 0x401, 0x0, 0x0, {0x0, 0x0, 0xa}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_SET_ID={0x8, 0x4, 0x1, 0x0, 0x2}]}, @NFT_MSG_NEWSET={0xbc, 0x9, 0xa, 0x101, 0x0, 0x0, {0x1, 0x0, 0x7}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_EXPRESSIONS={0x84, 0x12, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @redir={{0xa}, @void}}, {0x1c, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_LEN={0x8, 0x4, 0x1, 0x0, 0x4f}]}}}, {0x54, 0x1, 0x0, 0x1, @tunnel={{0xb}, @val={0x44, 0x2, 0x0, 0x1, [@NFTA_TUNNEL_KEY={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_TUNNEL_DREG={0x8, 0x2, 0x1, 0x0, 0x14}, @NFTA_TUNNEL_DREG={0x8}, @NFTA_TUNNEL_DREG={0x8}, @NFTA_TUNNEL_DREG={0x8, 0x2, 0x1, 0x0, 0x17}, @NFTA_TUNNEL_DREG={0x8, 0x2, 0x1, 0x0, 0x8}, @NFTA_TUNNEL_DREG={0x8, 0x2, 0x1, 0x0, 0x17}, @NFTA_TUNNEL_MODE={0x8}]}}}]}, @NFTA_SET_TIMEOUT={0xc, 0xb, 0x1, 0x0, 0x9}, @NFTA_SET_HANDLE={0xc, 0x10, 0x1, 0x0, 0x1}]}, @NFT_MSG_NEWSET={0x58, 0x9, 0xa, 0x101, 0x0, 0x0, {0xa}, [@NFTA_SET_HANDLE={0xc, 0x10, 0x1, 0x0, 0x1}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x40}, @NFTA_SET_TIMEOUT={0xc, 0xb, 0x1, 0x0, 0xaf2}, @NFTA_SET_KEY_TYPE={0x8, 0x4, 0x1, 0x0, 0x4}, @NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0xf}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x111}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0x1b98}, 0x1, 0x0, 0x0, 0x40000}, 0x5) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=@framed={{}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r7}, {}, {0x85, 0x0, 0x0, 0x1b}}]}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r9}, 0x18) accept(r3, 0xfffffffffffffffd, &(0x7f0000000180)) 1.193946723s ago: executing program 5 (id=8895): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="09000000070000000080000001"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{r0, 0xffffffffffffffff}, &(0x7f00000002c0), &(0x7f0000000280)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0xd, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000020d0039000000000000b4a518110000", @ANYRES32=r1], 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) perf_event_open(&(0x7f00000000c0)={0x4, 0x80, 0x3, 0xff, 0x5e, 0x8, 0x0, 0x3, 0x8b008, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x1, @perf_bp={0x0, 0x8}, 0x1a, 0x81, 0x800, 0x6, 0x8, 0x4002}, 0x0, 0x0, 0xffffffffffffffff, 0x1) r3 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$UHID_CREATE(r3, &(0x7f0000002a00)={0x0, {'syz0\x00', 'syz0\x00', 'syz1\x00', &(0x7f00000000c0)=""/43, 0x2b}}, 0x120) r4 = socket(0x10, 0x80002, 0x0) getpeername$packet(r4, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f00000002c0)=0xffffffffffffff04) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020207025000000002dba513d7b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000008fd8850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x28, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r5}, 0x10) write$UHID_DESTROY(r3, &(0x7f0000000080), 0x4) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='mm_page_alloc\x00', r2}, 0x10) openat$thread_pidfd(0xffffffffffffff9c, &(0x7f0000000200), 0x80000, 0x0) r6 = socket(0x21, 0x2, 0x2) sendmsg$kcm(r6, &(0x7f0000000800)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=[{0x10}, {0x18, 0x110, 0xa, 'm'}], 0x28}, 0x0) add_key$fscrypt_v1(&(0x7f0000000040), &(0x7f0000000080)={'fscrypt:', @desc2}, &(0x7f00000000c0)={0x0, "f1a1173fb9462d3589e67197f90be6e423ceb0ab4912f9f6a31854ec98e950cfed21fcad7ff0fbcb566a0982f8938caa52dd8d39af14c31ed56ad59300"}, 0x52ba, 0xffffffffffffffff) 975.044906ms ago: executing program 3 (id=8896): bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x38, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r0, 0x0, 0xffffffffffffffff}, 0x13) r1 = socket(0x1e, 0x4, 0x0) r2 = socket(0x1e, 0x2, 0x0) setsockopt$packet_tx_ring(r2, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x0, 0x2}, 0x10) sendmmsg(r1, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x3514}], 0x1}}], 0x400000000000181, 0x9200000000000000) r3 = dup3(r2, r1, 0x0) recvmmsg(r3, &(0x7f0000008840)=[{{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000040)=""/8, 0x8}], 0x1}, 0xffffffff}], 0x1, 0x40000001, 0x0) 948.474126ms ago: executing program 5 (id=8897): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000786c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002d00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) setsockopt$ARPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x60, &(0x7f0000000b80)={'filter\x00', 0x7, 0x4, 0x400, 0x0, 0x318, 0x0, 0x318, 0x318, 0x318, 0x4, &(0x7f0000000340), {[{{@uncond, 0xc0, 0x100}, @unspec=@ERROR={0x40, 'ERROR\x00', 0x0, "ff85bb82d17643dd4e95809980253d495cac18089b19106c31ea7cb0cc3f"}}, {{@arp={@multicast1, @multicast1, 0xffffffff, 0xff, 0x8, 0x2, {@empty, {[0xff, 0xff, 0xff, 0xff, 0xff, 0xff]}}, {@empty, {[0xff, 0x0, 0x0, 0x0, 0x0, 0xff]}}, 0xffff, 0xc1cb, 0xfffd, 0x40, 0x8, 0x8, 'syz_tun\x00', 'wg0\x00', {0xff}, {}, 0x0, 0x200}, 0xc0, 0x108}, @unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x5, 'syz1\x00', {0x4}}}}, {{@arp={@dev={0xac, 0x14, 0x14, 0x14}, @loopback, 0x0, 0xff, 0x0, 0x8, {@empty, {[0x0, 0x0, 0xff]}}, {@empty, {[0xff, 0x0, 0x0, 0xff, 0x0, 0xff]}}, 0x1000, 0x4, 0x100, 0x0, 0x3, 0xff41, 'vxcan1\x00', 'erspan0\x00', {}, {0xff}}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @mac=@remote, @remote, @loopback, 0x4}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x450) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x1e, 0x0, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x2000000000000022, &(0x7f0000000100)=0x1, 0x4) connect$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) openat$sndseq(0xffffffffffffff9c, 0x0, 0x82) r1 = io_uring_setup(0x3eae, &(0x7f0000000380)={0x0, 0x6d33, 0x1, 0x20, 0x2ef}) io_uring_register$IORING_REGISTER_BUFFERS(r1, 0x0, 0x0, 0x0) (fail_nth: 5) openat$selinux_policy(0xffffffffffffff9c, 0x0, 0x0, 0x0) 886.747967ms ago: executing program 3 (id=8898): perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x0, 0x400}, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18010000200180000000000000000000850000007b00000095"], &(0x7f00000001c0)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) ioperm(0x8, 0x9, 0x5a) r2 = syz_io_uring_setup(0x5c2, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x8003}, &(0x7f0000000240)=0x0, &(0x7f0000000200)=0x0) socket$pppl2tp(0x18, 0x1, 0x1) inotify_init1(0x800) syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) r5 = openat$binfmt_format(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/fs/binfmt_misc/syz0\x00', 0x2, 0x0) r6 = fcntl$dupfd(r5, 0x406, r1) setsockopt$inet_mtu(r6, 0x111, 0xa, &(0x7f0000000000)=0x3, 0x4) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffff8, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f00000004c0)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x38, 0x3, r2, 0x0, 0x0, 0x0, 0x1, 0x1, {0x2}}) io_uring_enter(r2, 0x6e2, 0x600, 0x1, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r7, 0x81f8943c, &(0x7f0000000640)) r8 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r8, 0x0, 0x2a, &(0x7f0000000180)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) setsockopt$inet_MCAST_MSFILTER(r8, 0x0, 0x30, &(0x7f0000000980)=ANY=[@ANYBLOB="020000000000000002000000e0000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000300000002000000ac1414bb00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000002000000ac1414bb00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002"], 0x210) setsockopt$inet_group_source_req(r8, 0x0, 0x2b, &(0x7f0000000040)={0x2, {{0x2, 0x0, @multicast2}}, {{0x2, 0x0, @multicast2}}}, 0x108) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x5, r9}, 0x38) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r9, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000600)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) 620.084882ms ago: executing program 5 (id=8899): r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'geneve1\x00', 0x0}) sendto$packet(r0, &(0x7f00000002c0)="1441c05465f0006fc8afa8e40800", 0xe, 0x4000000, &(0x7f00000000c0)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @multicast}, 0x12) 596.621802ms ago: executing program 5 (id=8901): r0 = socket$kcm(0x10, 0x2, 0x0) fcntl$dupfd(r0, 0x406, r0) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6004, 0x1) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r2, &(0x7f00000002c0)=ANY=[@ANYBLOB="1500000065ffff018000000800395032303030"], 0x15) r3 = dup(r2) write$P9_RLERRORu(r3, &(0x7f00000000c0)=ANY=[@ANYBLOB="5300000007000046009d40"], 0x53) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000180), 0x800000, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r3}, 0x2c, {[], [], 0x6b}}) r4 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r4, 0x107, 0xf, &(0x7f0000000000)=0x9, 0x4) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000300)={'ip6_vti0\x00', 0x0}) sendto$packet(r4, &(0x7f0000000180)="10030600e0ff020002004788aa96a13bb100001100007fca1a00", 0x1000a, 0x0, &(0x7f0000000140)={0x11, 0x0, r6}, 0x14) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@bloom_filter={0x1e, 0x2, 0x66c1, 0x4d, 0x882c, r3, 0x200, '\x00', r6, 0xffffffffffffffff, 0x0, 0x3, 0x4, 0x9, @value=r3, @void, @void, @value}, 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r7}, 0x0, &(0x7f00000002c0)}, 0x20) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='task_newtask\x00', r8}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000100)='netfs_rreq\x00', r8, 0x0, 0xff}, 0x18) syz_clone(0x400, 0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$kcm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000010008108040f80ecdb4cb92e0a480e000f000000e8bd6efb250314000e000300240248ff050005001200", 0x2e}], 0x1}, 0x0) 549.442943ms ago: executing program 1 (id=8903): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r0}, 0x4) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000000)='kmem_cache_free\x00'}, 0x10) r1 = socket(0x2, 0x80805, 0x0) sendmmsg$inet_sctp(r1, 0x0, 0x0, 0x0) sendmmsg$inet_sctp(r1, &(0x7f00000032c0)=[{&(0x7f00000000c0)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000240)=[{0x0, 0x300}, {&(0x7f0000000300)="359cb6", 0x3}], 0x2, &(0x7f0000000180)=ANY=[@ANYBLOB="30000000000000008400000001000000000000000c0000000b0000000000000000000000000000000000000003f0b571be4b285837898cc65dba", @ANYRES32=0x0], 0x30}], 0x1, 0x0) 525.787623ms ago: executing program 1 (id=8904): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x5452, &(0x7f0000000400)='lo\x00\x96o\xd6Q\xb4Y\xa9\xc87,%\x81\xfe\x00\xd2\xd1|\x00\x00\x00\x00\x00\x00\xe3\xd8Yk\xdf\x85\xaac{\x8c\x8ffp`-\xcd\xd9\xd5\xf4\xe68\xe6O\xc2\xf1V0\x8b\t\xed\x13q2\xdd\xcc\xeeR\xf2/\xba\fE>k\a\xe7>t7\x8e(\xf0\x87d\xaf\x93\xfa`\xa6,o\x81.\x1cR\xa5\t\x00\x00\x00\x00\x00\x00\x00|pT\x15\xbc\f*d\xcb\xc2\xcd\x8f\x98\xdf\x00\x00\x1cM\x9c\xa5\xe0\xa8\x00\x00\x00\x80V\xf6\x80\x86\x1b\x05\xe6\"\x1d\f\xaey\x06\xd9$H!w\xa6m\xd8\x7f\xc6\x837\x83/\x9a\xdf\x01\xf2\x9e\xbb\xca\x04\x00\x05\xeb\xb8{7[\xf9\xe9\x15\xdc0]\x89\x9b~\x04\xb4\xa5\xad\v.\xd0*%`\xb0\x03\x00\x00\x00\x00\x00\x00\x00\xab\xf4\xa7\x83r\xa4\x80|\x03C\x9c\x00\xac\xba\xcb\xa4h\x86w_Eu\xbfy%,\xe5\n\xc1\xb3\xa4g\xa3P\x0f\x11\x93\xc7\xf3\xcf\x17\xf5\x86%\x7f\xec\xb2\xc5E\x00\xb2e\xa8\xf1<\xb2\xc82\xbf=o\x00\x00\x00\x00E\x00\xc6X\x92\x0e[\x19\xaa?\x06\xe5\x9d\xd1\x87\x922A\x95\x8e\xbc\xc80xffffffffffffffff}, &(0x7f0000000580), &(0x7f00000005c0)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xd, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003000000650000000800000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000007000000080000000800000005"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xc, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70800000000ebff7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000540)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x42, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r3, 0x0, 0x20}, 0x18) pipe2(&(0x7f0000000c40), 0x4800) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x24}, 0x1, 0x0, 0x0, 0x4005}, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x68, 0x0, 0x0, 0x81, 0x0, 0xffffff, 0x10000, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x1, @perf_bp={&(0x7f0000000280), 0x12}, 0x103200, 0x1, 0x840000, 0x5, 0x5, 0x1, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffff7fffffffff, 0xffffffffffffffff, 0x8) rename(0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kmem_cache_free\x00', 0xffffffffffffffff, 0x0, 0x9}, 0x18) lsm_list_modules(&(0x7f0000000000)=[0x0, 0x0], &(0x7f0000000100)=0x10, 0x0) 400.965844ms ago: executing program 4 (id=8907): mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup/syz1\x00', 0x200002, 0x0) write$cgroup_type(0xffffffffffffffff, 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f00000002c0)='cgroup.threads\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000c40), 0x12) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = openat$cgroup_procs(r2, &(0x7f0000000840)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r3, &(0x7f0000000380), 0x12) chown(&(0x7f0000000280)='./file0\x00', 0xee01, 0xffffffffffffffff) r4 = creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) write$sndseq(r4, &(0x7f00000002c0)=[{0x0, 0xa, 0x2, 0x0, @tick, {0x4, 0x4}, {0xa6, 0x6}, @time=@tick=0x3}, {0x3, 0x85, 0x4, 0x95, @time={0x7, 0x8}, {0x8, 0xb}, {0x0, 0x3}, @ext={0xa9, &(0x7f0000000080)="3a230375f591c0d0d62d90513bea033fc1b0500865881d6e9490fdf29e32edbbf640a169a56cd3b7557a703aeacb6a76dd4b393c3661cfe04eeac93ee37fc16cd77e9265c6eb39ddea672de6ca42c1617ce3811ebe6f8df59ece1db05903615d53ac116ae6f8b856da951ce99ea38ed88dc85d1e54ed867c196e56eee2e8c165190f092ccb4298ee58c18766e231cb2ab34c0bb666eb82eccb376f7699514c7e3e9f3534e97b5de45b"}}, {0x9, 0x0, 0x7, 0x8, @tick=0x7, {0x9, 0x1}, {0xf9}, @quote={{0xb, 0xf9}, 0x1, &(0x7f0000000140)={0x84, 0x0, 0xb, 0xcf, @tick=0x8, {0x11}, {0x5, 0x8}, @queue={0x3, {0x3, 0x5}}}}}, {0x4, 0x7, 0x2, 0x57, @tick=0xfffffffd, {0x8, 0x8}, {0x3, 0x2}, @note={0x7, 0xb, 0x8, 0x7, 0x101}}, {0x2, 0x0, 0x3, 0x8, @time={0x6, 0x7}, {0xbb, 0x6}, {0x4, 0x5}, @time=@tick=0x3}, {0xe0, 0x3, 0x6, 0x1, @tick=0x4, {0x0, 0xc}, {0x1, 0x3}, @addr={0x7f, 0x99}}, {0x8, 0x7, 0x6, 0x1, @tick=0x6, {0x81, 0x8}, {0x4, 0x81}, @connect={{0x3, 0x6}, {0x0, 0x7}}}, {0x2, 0x2e, 0xe, 0xc, @tick=0xbf0, {0x3, 0x9}, {0x2, 0x6}, @time=@time={0xfffffffb, 0x2}}, {0x3b, 0x6, 0x1, 0x1, @time={0x1, 0xfffffff8}, {0x0, 0x5}, {0x0, 0xf}, @addr={0xd, 0x4}}, {0xf, 0x2, 0x6, 0x2, @time={0x5, 0x8}, {0x7, 0x5}, {0x1}, @ext={0x2b, &(0x7f0000000180)="6687edb1d27dfbb5c40bf20dd3a4478e4ef7fc32a60d19a9c29f61c4506e4db3d00349fdc23abaf9c063fb"}}], 0x118) write$binfmt_elf32(r4, &(0x7f0000000000)=ANY=[@ANYBLOB="7f454c4604070003070000000000000002000300030000000903000038000000fcffffff0e000000000020000100050000010000000000000300000008000000f30000007f00000004000000040020000c00000000040000"], 0x58) close(r4) execve(&(0x7f0000000400)='./file0\x00', 0x0, 0x0) 388.504345ms ago: executing program 3 (id=8908): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x11, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18010000010000000000000000030000850000007b00000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff, @void, @value}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000009c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18060000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000003000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000400)='kfree\x00', r0, 0x0, 0x9}, 0x18) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='net/netfilter\x00') getdents(r2, &(0x7f0000001f80)=""/172, 0xac) getdents64(r2, 0xffffffffffffffff, 0x43) getpeername$tipc(r2, &(0x7f0000000240), &(0x7f0000000340)=0x10) sendto$inet6(r1, 0x0, 0x0, 0x20004041, 0x0, 0x0) connect$inet6(r1, &(0x7f0000000280)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x19}, 0x7}, 0x1c) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$mptcp(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000001c0)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="0900000000000000000002000000140001800500020001"], 0x28}}, 0x0) sendmmsg$inet(0xffffffffffffffff, &(0x7f00000017c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @empty, @multicast1}}}], 0x20}}], 0x1, 0x0) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000780)=@allocspi={0x108, 0x16, 0x1, 0x0, 0x0, {{{@in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa0, 0x0, 0xc, 0x0, 0xffffffffffffffff}, {@in6=@local, 0x20000, 0x32}, @in6=@remote, {0x800, 0x0, 0x800000000, 0x0, 0x8, 0x0, 0x0, 0xf}, {0xffffffffffffffff, 0x3, 0xa}, {0x0, 0x21}, 0x70bd28, 0x0, 0xa}, 0x0, 0xfffffffe}, [@tfcpad={0x8, 0x28, 0x7fff}, @proto={0x5, 0x19, 0x33}]}, 0x108}}, 0x0) r6 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r6, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0xc) r7 = socket$netlink(0x10, 0x3, 0x0) writev(r7, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) setsockopt$inet_msfilter(r6, 0x0, 0x29, &(0x7f0000000140)=ANY=[@ANYBLOB="0a010102ac1e010101000000080000000a010101e000000248b3332359372effffffff7f000001ac1414aa7f0000017f"], 0x30) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000005c00)={&(0x7f0000000740)=@newtaction={0x18c, 0x30, 0x9, 0xf00, 0x0, {}, [{0x178, 0x1, [@m_bpf={0x88, 0x10, 0x0, 0x0, {{0x8}, {0x60, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_OPS_LEN={0x6, 0x3, 0x7}, @TCA_ACT_BPF_OPS={0x3c, 0x4, [{}, {}, {0x3}, {}, {0x0, 0x0, 0xfe}, {}, {0x6}]}, @TCA_ACT_BPF_PARMS={0x18}]}, {0x4}, {0xc}, {0xc}}}, @m_bpf={0xec, 0x2, 0x0, 0x0, {{0x8}, {0x3c, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_OPS_LEN={0x6, 0x3, 0x3}, @TCA_ACT_BPF_FD={0x8}, @TCA_ACT_BPF_FD={0x8}, @TCA_ACT_BPF_PARMS={0x18, 0x2, {0xc4, 0x81, 0x5, 0x9, 0x5}}, @TCA_ACT_BPF_FD={0x8, 0x5, r0}]}, {0x8b, 0x6, "34cd612c7a0ab41aeee4f2749c717405930291dd10c14ec41a0491357d7c632f458556e624bdab00958fafb08c18760601b0943a67d82a91d915c3984342a367d3b2e58cea49cb7452d570292ec56138e6a1ba36da3d664c8523216a7b39db943810932dbdc81b60f442a6febd49c70976736c5a483baea68dd16a08fa7222f24f93b11f380ddb"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x5}}}}]}]}, 0x18c}}, 0x0) writev(r7, &(0x7f0000000300)=[{&(0x7f00000001c0)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000d00000000000006040000000000f93132", 0x39}], 0x1) r8 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r8, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0x40) setsockopt$inet_msfilter(r8, 0x0, 0x29, &(0x7f0000000000)=ANY=[@ANYBLOB="e00000027fa80a0101"], 0x57) setsockopt$inet_mreqsrc(r6, 0x0, 0x24, &(0x7f0000000440)={@multicast2, @loopback, @empty}, 0xc) setsockopt$inet_MCAST_JOIN_GROUP(r6, 0x0, 0x2a, &(0x7f00000008c0)={0x1, {{0x2, 0x0, @multicast2}}}, 0x88) 361.665845ms ago: executing program 4 (id=8909): r0 = syz_open_dev$usbfs(&(0x7f0000000240), 0x75, 0x109301) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f00000001c0)=@urb_type_control={0x2, {0x7}, 0x400, 0x102, &(0x7f0000000000)={0x40, 0x6, 0x5, 0x9, 0xfffa}, 0x8, 0x5, 0x6fe, 0x0, 0x8, 0x4000000, &(0x7f0000000080)="3f1b496464de84c3210f05a4a51d4db6b1ccfc7cd0cacf1663533b8230a2874e3cb11f2a96d9445691ea7e73da4b52b74067cb4e130345699fb1b7f25353d9be83114b53205e982febd6a248289065c390eca7e8f2"}) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000001000000b703000000000000850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$IP6T_SO_GET_REVISION_TARGET(r2, 0x29, 0x45, &(0x7f00000006c0)={'TPROXY\x00'}, &(0x7f0000000700)=0x1e) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r4 = openat$cgroup_ro(r3, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) preadv(r4, &(0x7f00000001c0)=[{&(0x7f0000000d40)=""/53, 0x35}], 0x1, 0x0, 0x8bd7) r5 = ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0x1) ioctl$LOOP_CTL_REMOVE(r4, 0x4c81, r5) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) syz_io_uring_setup(0x516d, &(0x7f0000000200)={0x0, 0x705d, 0x10100, 0x0, 0x19f}, 0x0, 0x0) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x15) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000200)='kmem_cache_free\x00', r1}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r6 = openat$procfs(0xffffffffffffff9c, &(0x7f00000004c0)='/proc/asound/seq/clients\x00', 0x0, 0x0) setrlimit(0x2, &(0x7f00000000c0)={0x0, 0x4}) syz_mount_image$ext4(&(0x7f00000001c0)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0xc901, &(0x7f0000000200)={[{@mb_optimize_scan}, {@data_err_abort}, {@user_xattr}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x4000000}}]}, 0x2, 0x500, &(0x7f0000000500)="$eJzs3c9vG1kdAPDvTOyStlmSBQ6wEsuKXZQWiJ1s2N0A0rJIiD2tBCz3EhIniuLEUexsm6iCRPwBSAgBEidOXJD4A5CgZ04IqQLuCBAIQQsHDlAj2+O0Tu38UJ1Mm3w+0su8+eXv9zny87yZkSeAC+uliHgrIh40m83rETGeLU+zErud0tru/r3bC62SRLP57j+SSLJl3ddKsunVbLfRiPja2xHfTB6PW9/eWZ2vViub2Xy5sbZRrm/vTK2szS9Xlivrs7Mzr8+9Mffa3PRQ2tnK6c0v/eUH3/3pl9/85adv/vHG3659q5XWWLb+0XYMU6fpxfZ70VWIiM3TCJaDkaw9xbwTAQDgWFrH+B+IiI9HxPXPj8dIXMo7JQAAAGDIml8Yi/8mEU0AAADg3Erb98AmaSm7F2As0rRU6twv+6G4klZr9canlmpb64ude2UnopgurVQr09m9whNRTFrzM+36w/lXD8zPRsTzEfH98cvt+dJCrbqY98kPAAAAuCCuHhj//3u8M/4HAAAAzpmJvBMAAAAATp3xPwAAAJx/xv8AAABwrn3lnXdapdl9/vXie9tbq7X3phYr9dXS2tZCaaG2uVFartWW27/Zt3bU61VrtY3PxPrWrXKjUm+U69s7N9ZqW+uNGys9j8AGAAAAztDzH7vzhyQidj93uV1aLuWdFHAm3j7Jxn8+vTyAszeSdwJAbgp5JwDkpniiradOLQ8gP8nDatpv/cCbd35zOvkAAADDN/mRwdf/+54b2B8d7PYdJwDPjp4P8SfzywM4e67/w8V1xPX/x47xf32KuQBnq+gIAC685Ij1T379v9k8UUIAAMDQjbVLkpayk31jkaalUsRz7ccCFJOllWplOiLeHxG/Hy++rzU/094zOXLMAAAAAAAAAAAAAAAAAAAAAAAAAAB0NJtJNAEAAIBzLSL9a5I9/2ty/JWxg+cHLiX/GW9PI+Lmj9/94a35RmNzprX8n/vLGz/Klr+axxkMAAAA4KDuOL07jgcAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAYbp/7/ZCt5xl3L9/MSIm+sUvxGh7OhrFiLjyryQKj+yXRMTIEOLv7vW8bER04yettGIiy6Jf/GHY3Uv34/a2/7D4l6O119Uh5QAX1Z1W//NWv/4njZfa0/6f/0JWntTg/i/d7/9GBvQ/zx0zxgt3f14eGH8v4oVCv/jJfvxkQPyXXzle/G98fWdn0LrmTyIm+37/JD2xyo21jXJ9e2dqZW1+ubJcWZ8dnXl97o251+amy0sr1Ur2t2+M7330Fw8Oa/+VnvhJoRt14oj2H7P58b+7t+59sFMt9ot/7eX+//8PD4ifZt99n8jqrfWT3fpup/6oF3/22xcPa//igPf/qP//tWO2//pXv/On/muG8QkCAE6qvr2zOl+tVjaf2UohjrFx8alIVeUpq3w77zR+99lm21PxbvRWerqJX+3l1kMBAADD8vCgP+9MAAAAAAAAAAAAAAAAAAAA4OI6i58TOxhzN5+mAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAc6v8BAAD//4h01I8=") r7 = inotify_init1(0x800) dup3(r7, r6, 0x0) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.avg_queue_size\x00', 0x275a, 0x0) write$binfmt_script(r8, &(0x7f0000000000), 0x208e24b) sendmsg$IPSET_CMD_SAVE(r8, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)=ANY=[@ANYBLOB="2400005c23469758f700000005f62f9c1980ca0007000000"], 0x24}, 0x1, 0x0, 0x0, 0x80}, 0x4000000) 360.219655ms ago: executing program 0 (id=8910): bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x10) r1 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r1, &(0x7f0000000340)=@name={0x1e, 0x2, 0x1, {{0x0, 0x4}, 0x3}}, 0x10) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='task_newtask\x00', r3}, 0x10) r4 = socket$inet(0x2, 0x4000000000000001, 0x0) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f00000009c0)='./file1\x00', 0x3000000, &(0x7f0000000000), 0x1, 0x530, &(0x7f00000003c0)="$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") r5 = open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x0, 0x4002011, r5, 0x5f9cf000) fallocate(r5, 0x0, 0x0, 0x1000f4) getsockopt$sock_buf(r4, 0x1, 0x24, &(0x7f0000002340)=""/4107, &(0x7f0000000340)=0x100b) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='task_newtask\x00', r6}, 0x10) syz_clone(0x400, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x3c, 0x1, 0x0, 0x0, 0x0, 0x8, 0xdd18b, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000, 0x0, @perf_config_ext={0x4, 0x100000003}, 0x3323, 0x4, 0x3, 0x0, 0x9, 0x800001, 0xfff7, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0xa00008, &(0x7f0000000340)={[{@noacl}]}, 0xfc, 0x7bb, &(0x7f00000007c0)="$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") r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x1, 0x5, 0x29fd, 0x84, 0x105, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000300)={0xffffffffffffffff, 0x0, &(0x7f00000000c0), &(0x7f0000000240), 0x800, r7}, 0x38) bpf$MAP_LOOKUP_BATCH(0x19, &(0x7f0000000100)={0x0, &(0x7f0000000040)=""/129, &(0x7f0000000680), &(0x7f0000000000), 0x6c, r7}, 0x38) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000100)={0x43, 0x0, 0x3, 0x3}, 0x10) sendmsg$tipc(r1, &(0x7f00000005c0)={&(0x7f0000000000), 0x10, &(0x7f0000000480)=[{&(0x7f0000000180)="f7", 0x101d0}], 0x1}, 0x0) 226.636037ms ago: executing program 4 (id=8911): syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file1\x00', 0x8, &(0x7f0000000080)={[{@sb={'sb', 0x3d, 0x1}}, {@nodioread_nolock}]}, 0x4, 0x523, &(0x7f00000018c0)="$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") openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000440)='blkio.bfq.avg_queue_size\x00', 0x275a, 0x0) r0 = open(&(0x7f00000001c0)='./file1\x00', 0x14927e, 0x20) fallocate(r0, 0x0, 0x0, 0x1001f0) copy_file_range(r0, 0x0, r0, &(0x7f0000000840)=0xc615, 0x1000, 0x0) 199.250998ms ago: executing program 5 (id=8912): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000006000000050000000010"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000260018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa20000000000000702000002ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000a80)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB, @ANYRES32=r1, @ANYBLOB="0000000004000000b705000008000000850000006a00000095"], &(0x7f0000000000)='GPL\x00', 0xffffffff, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f00000000c0)='kfree\x00', r2, 0x0, 0xfffffffffffffffd}, 0x18) syz_mount_image$iso9660(&(0x7f0000000340), &(0x7f0000000280)='./file0\x00', 0xd494e, &(0x7f00000000c0)=ANY=[@ANYRES32=0x0], 0x0, 0x700, &(0x7f0000000a40)="$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") socket$nl_generic(0x10, 0x3, 0x10) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x40, 0x1, 0x0, 0x0, 0x0, 0x5, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000, 0x82662519484ec96c, @perf_config_ext={0xf60, 0xffffffff}, 0x100, 0x5dd8, 0x3a65, 0x9, 0x0, 0x8, 0x8, 0x0, 0x0, 0x0, 0x5}, 0x0, 0x10, 0xffffffffffffffff, 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000002ec0)=ANY=[@ANYBLOB="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"], &(0x7f0000000400)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x7, @void, @value}, 0x94) prctl$PR_SET_IO_FLUSHER(0x39, 0x1) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="58000000020605000000000000000000000000000900020073797a3100000000050005000a000000050001000600000013000300686173683a6e65742c696661636500000c0007800800124005000000050004"], 0x58}, 0x1, 0x0, 0x0, 0x1}, 0x800) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup/syz1\x00', 0x200002, 0x0) r6 = openat$cgroup_type(r5, &(0x7f0000000300), 0x2, 0x0) write$cgroup_type(r6, &(0x7f0000000280), 0x9) r7 = openat$cgroup_procs(r5, &(0x7f00000002c0)='cgroup.threads\x00', 0x2, 0x0) write$cgroup_pid(r7, &(0x7f0000000c40), 0x12) r8 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) socket$nl_route(0x10, 0x3, 0x0) r9 = openat$cgroup_ro(r8, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) write$cgroup_int(r9, &(0x7f0000000200)=0x1, 0x12) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r10 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r11 = openat$cgroup_procs(r10, &(0x7f0000000840)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r11, &(0x7f0000000380), 0x12) write$binfmt_script(r4, &(0x7f0000000000), 0x208e24b) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x4, &(0x7f0000006680)) 195.841108ms ago: executing program 1 (id=8913): mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0xa, 0x31, 0xffffffffffffffff, 0xf2de1000) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x34120, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800"/15, @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r1}, 0x10) r2 = syz_open_procfs(0x0, &(0x7f00000001c0)='pagemap\x00') pread64(r2, &(0x7f0000001240)=""/102400, 0x19000, 0x1000000000) 136.842848ms ago: executing program 0 (id=8914): r0 = syz_open_dev$rtc(&(0x7f0000001480), 0x0, 0x20081) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x10) unshare(0x22020400) r2 = syz_clone(0x2c9a4080, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc) ioctl$RTC_RD_TIME(r0, 0x40187014, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="05000000040000"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @void, @value}, 0x94) r6 = syz_open_procfs(0x0, &(0x7f0000000000)='task\x00') getdents(r6, 0x0, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xc, &(0x7f0000002a00)=ANY=[@ANYRES64=r2, @ANYRESDEC=r5, @ANYBLOB="654eaef7bf43bdb40db14d4f8fb0c5168cafbaf24385b676f0fa1bb15198c4c1aaa4e4d4165989ea83b97044ae2000783e2b13995e2ff636b867f63d9a0840e8e40b23b53cd17ce09e2e50856b726cce4cf7b3ae23c9a3ab68c4249a156e8f1fbc252803b1893d69bca05b567312b747e5c4da220acf318af66c2bfb1095fb34536425534ffced9d26104e07b86e18686e1b572bd8f30b34ee92171954580b3130eee7af7984e819", @ANYRES64=r4], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x8, r6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001240)={&(0x7f0000000200)='kfree\x00', r7, 0x0, 0xfffffffffffffffd}, 0x18) r8 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000500)='status\x00') setgroups(0x1, &(0x7f0000000080)=[0x0]) lseek(r8, 0xa, 0x0) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b70300000000010a8500000004000000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r10 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000ac0)={&(0x7f0000000b00)='kmem_cache_free\x00', r9, 0x0, 0x1034}, 0x18) r11 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r11, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="58000000020605000000000000000000000000000900020073797a3100000000050005000a000000050001000600000013000300686173683a6e65742c696661636500000c0007800800124005000000050004"], 0x58}, 0x1, 0x0, 0x0, 0x1}, 0x800) r12 = perf_event_open$cgroup(&(0x7f0000002b80)={0x3, 0x80, 0xad, 0xf, 0x1, 0x0, 0x0, 0x0, 0x64847, 0x4, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1d, 0x2, @perf_bp={&(0x7f0000001000), 0x7}, 0x2200, 0x5, 0x5, 0x9, 0x1, 0x1, 0xd, 0x0, 0x1, 0x0, 0x5}, 0xffffffffffffffff, 0xf, 0xffffffffffffffff, 0x1) perf_event_open(&(0x7f0000002b00)={0x3, 0x80, 0x0, 0x10, 0x1, 0x5, 0x0, 0x6, 0x0, 0x3, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x8, 0x2, @perf_config_ext={0x2, 0xcc}, 0x1, 0x7fff, 0xa4c3, 0x9, 0x0, 0xf8, 0xff, 0x0, 0x3, 0x0, 0x1}, r2, 0xffffffffffffffff, r12, 0x1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000fc0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$IPT_SO_SET_REPLACE(r10, 0x0, 0x40, &(0x7f00000025c0)=@nat={'nat\x00', 0x1b, 0x5, 0x3d0, 0x238, 0x190, 0xffffffff, 0xd8, 0x238, 0x338, 0x338, 0xffffffff, 0x338, 0x338, 0x5, &(0x7f0000001080), {[{{@uncond, 0x0, 0x90, 0xd8, 0x0, {}, [@common=@socket0={{0x20}}]}, @unspec=@DNAT1={0x48, 'DNAT\x00', 0x1, {0x3, @ipv6=@mcast1, @ipv6=@ipv4={'\x00', '\xff\xff', @multicast1}, @icmp_id=0x65, @icmp_id=0x66}}}, {{@uncond, 0x0, 0x70, 0xb8}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@mcast1, 'ip6erspan0\x00', {0x3}}}}, {{@uncond, 0x0, 0x70, 0xa8}, @SNAT0={0x38, 'SNAT\x00', 0x0, {0x1, {0x1, @loopback, @multicast2, @gre_key=0x1, @port=0x4e22}}}}, {{@ip={@local, @multicast2, 0xff, 0x0, 'veth1_to_team\x00', 'dvmrp0\x00', {}, {}, 0x32, 0x1, 0x10}, 0x0, 0xc8, 0x100, 0x0, {}, [@common=@icmp={{0x28}, {0x3, "d835", 0x1}}, @common=@ah={{0x30}, {[0x8, 0x100], 0x1}}]}, @NETMAP={0x38, 'NETMAP\x00', 0x0, {0x1, {0x0, @remote, @rand_addr=0x64010102, @icmp_id=0x66, @port=0x4e20}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x430) sendmsg$inet(r13, &(0x7f0000001580)={0x0, 0x0, &(0x7f0000001400)=[{&(0x7f0000000080)="3bfdd75fa5717852d59a9367444a2130e72cd4dabc8854532cca0c32a5b9f844a4610c7525650ce3d3b76b15026d93e6dee896115e9364066aa3d14e33ef732b4681335c576902153114bdb9c74b538a71115fb1d1a63d1b04129661b29aab89d0be999a6b7c9bea755adedbf305a79f70b71d3d4c98577b49db4963ce89b0def5e840f459659cb6f86d56b069a5de11d601d348ff88ca6e5e2cfe40176880b33e9e8dbc32ba2e6a99b1b50276dc4f06166000d7069a3cc76f", 0xb9}, {&(0x7f0000000180)="892950e2405ee8629d9384a91c16d1706a3e61f305119f95cac0f1927f4c205b971eb41147cb1f86883d6910e68ac3996551800b3ec64b77f8444b18345a2c8b178eeeba0cde7319a5a46bfe7f5770e019efd9d52069edcced33a758c4e657f3a792dc193a1911b4e82ea800ad7afe03c851a8", 0x73}, {&(0x7f0000000200)="a68cde0d56b170df7710b54f17d9a39c4f98f3547190", 0x20000216}, {&(0x7f0000000240)="45e04400f2b383517a08c397dd0a76e67ecfc8e74573c24dedd3a48fb62418c1412fdcd15e888cb0f5d02e77bfecefda6b064c0bb2b66a9a522e63873dde02330510255eec7dfa1af708cdab59fb71eca786a359a2c3b0cbad35144ec5b069c53f90e43339845dc7fd140c55b0149ab38eb27c140f374bcc2c95b0b121d1a9302f3a01b888243b3fc0d46f0de0", 0x8d}, {&(0x7f0000000300)="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", 0xcb3}], 0x5, &(0x7f0000001480)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @private, @multicast1}}}], 0x20}, 0x0) recvmsg$unix(r14, &(0x7f0000001140)={0x0, 0x0, &(0x7f0000001040)=[{&(0x7f00000015c0)=""/4096, 0x7ffff000}], 0x1, 0x0, 0x2}, 0x40000100) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) 74.203839ms ago: executing program 4 (id=8915): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x5452, &(0x7f0000000400)='lo\x00\x96o\xd6Q\xb4Y\xa9\xc87,%\x81\xfe\x00\xd2\xd1|\x00\x00\x00\x00\x00\x00\xe3\xd8Yk\xdf\x85\xaac{\x8c\x8ffp`-\xcd\xd9\xd5\xf4\xe68\xe6O\xc2\xf1V0\x8b\t\xed\x13q2\xdd\xcc\xeeR\xf2/\xba\fE>k\a\xe7>t7\x8e(\xf0\x87d\xaf\x93\xfa`\xa6,o\x81.\x1cR\xa5\t\x00\x00\x00\x00\x00\x00\x00|pT\x15\xbc\f*d\xcb\xc2\xcd\x8f\x98\xdf\x00\x00\x1cM\x9c\xa5\xe0\xa8\x00\x00\x00\x80V\xf6\x80\x86\x1b\x05\xe6\"\x1d\f\xaey\x06\xd9$H!w\xa6m\xd8\x7f\xc6\x837\x83/\x9a\xdf\x01\xf2\x9e\xbb\xca\x04\x00\x05\xeb\xb8{7[\xf9\xe9\x15\xdc0]\x89\x9b~\x04\xb4\xa5\xad\v.\xd0*%`\xb0\x03\x00\x00\x00\x00\x00\x00\x00\xab\xf4\xa7\x83r\xa4\x80|\x03C\x9c\x00\xac\xba\xcb\xa4h\x86w_Eu\xbfy%,\xe5\n\xc1\xb3\xa4g\xa3P\x0f\x11\x93\xc7\xf3\xcf\x17\xf5\x86%\x7f\xec\xb2\xc5E\x00\xb2e\xa8\xf1<\xb2\xc82\xbf=o\x00\x00\x00\x00E\x00\xc6X\x92\x0e[\x19\xaa?\x06\xe5\x9d\xd1\x87\x922A\x95\x8e\xbc\xc8 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 562.246849][T26160] RSP: 002b:00007fc3ebc57038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 562.246868][T26160] RAX: ffffffffffffffda RBX: 00007fc3ed815fa0 RCX: 00007fc3ed5ee929 [ 562.246880][T26160] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000000006a040000 [ 562.246892][T26160] RBP: 00007fc3ebc57090 R08: 0000000000000000 R09: 0000000000000000 [ 562.246905][T26160] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 562.246971][T26160] R13: 0000000000000000 R14: 00007fc3ed815fa0 R15: 00007ffd12b318b8 [ 562.247009][T26160] [ 562.525494][T26164] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8440'. [ 562.534552][T26166] netlink: 8 bytes leftover after parsing attributes in process `syz.5.8438'. [ 562.547425][T26164] netlink: 36 bytes leftover after parsing attributes in process `syz.1.8440'. [ 562.592050][ T36] IPVS: starting estimator thread 0... [ 562.656343][T26180] netlink: 8 bytes leftover after parsing attributes in process `syz.4.8445'. [ 562.665338][T26180] netlink: 4 bytes leftover after parsing attributes in process `syz.4.8445'. [ 562.705929][T26173] IPVS: using max 2448 ests per chain, 122400 per kthread [ 562.736197][T26180] wireguard0: entered promiscuous mode [ 562.741764][T26180] wireguard0: entered allmulticast mode [ 563.204902][T26176] 9pnet: Could not find request transport: r [ 563.618299][T26280] FAULT_INJECTION: forcing a failure. [ 563.618299][T26280] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 563.631555][T26280] CPU: 0 UID: 0 PID: 26280 Comm: syz.3.8461 Not tainted 6.15.0-syzkaller-13473-gc0c9379f235d #0 PREEMPT(voluntary) [ 563.631591][T26280] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 563.631607][T26280] Call Trace: [ 563.631616][T26280] [ 563.631708][T26280] __dump_stack+0x1d/0x30 [ 563.631733][T26280] dump_stack_lvl+0xe8/0x140 [ 563.631803][T26280] dump_stack+0x15/0x1b [ 563.631826][T26280] should_fail_ex+0x265/0x280 [ 563.631849][T26280] should_fail+0xb/0x20 [ 563.631865][T26280] should_fail_usercopy+0x1a/0x20 [ 563.631945][T26280] _copy_to_user+0x20/0xa0 [ 563.632037][T26280] simple_read_from_buffer+0xb5/0x130 [ 563.632082][T26280] proc_fail_nth_read+0x100/0x140 [ 563.632111][T26280] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 563.632195][T26280] vfs_read+0x19d/0x6f0 [ 563.632214][T26280] ? __rcu_read_unlock+0x4f/0x70 [ 563.632242][T26280] ? __fget_files+0x184/0x1c0 [ 563.632375][T26280] ? _raw_spin_unlock+0x26/0x50 [ 563.632408][T26280] ksys_read+0xda/0x1a0 [ 563.632429][T26280] __x64_sys_read+0x40/0x50 [ 563.632450][T26280] x64_sys_call+0x2d77/0x2fb0 [ 563.632540][T26280] do_syscall_64+0xd2/0x200 [ 563.632621][T26280] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 563.632716][T26280] ? clear_bhb_loop+0x40/0x90 [ 563.632737][T26280] ? clear_bhb_loop+0x40/0x90 [ 563.632760][T26280] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 563.632786][T26280] RIP: 0033:0x7f0d80b3d33c [ 563.632804][T26280] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 563.632910][T26280] RSP: 002b:00007f0d7f1a7030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 563.632932][T26280] RAX: ffffffffffffffda RBX: 00007f0d80d65fa0 RCX: 00007f0d80b3d33c [ 563.632946][T26280] RDX: 000000000000000f RSI: 00007f0d7f1a70a0 RDI: 0000000000000003 [ 563.632961][T26280] RBP: 00007f0d7f1a7090 R08: 0000000000000000 R09: 0000000000000000 [ 563.632975][T26280] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000001 [ 563.632990][T26280] R13: 0000000000000000 R14: 00007f0d80d65fa0 R15: 00007ffc322e98f8 [ 563.633051][T26280] [ 563.971878][T26292] sd 0:0:1:0: device reset [ 563.989130][T26296] netlink: 209852 bytes leftover after parsing attributes in process `syz.5.8468'. [ 564.048171][T26299] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.8469'. [ 564.070027][T26296] net_ratelimit: 181 callbacks suppressed [ 564.070046][T26296] netlink: zone id is out of range [ 564.092984][T26301] FAULT_INJECTION: forcing a failure. [ 564.092984][T26301] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 564.106100][T26301] CPU: 1 UID: 0 PID: 26301 Comm: syz.5.8468 Not tainted 6.15.0-syzkaller-13473-gc0c9379f235d #0 PREEMPT(voluntary) [ 564.106182][T26301] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 564.106197][T26301] Call Trace: [ 564.106205][T26301] [ 564.106214][T26301] __dump_stack+0x1d/0x30 [ 564.106236][T26301] dump_stack_lvl+0xe8/0x140 [ 564.106317][T26301] dump_stack+0x15/0x1b [ 564.106337][T26301] should_fail_ex+0x265/0x280 [ 564.106362][T26301] should_fail+0xb/0x20 [ 564.106425][T26301] should_fail_usercopy+0x1a/0x20 [ 564.106449][T26301] _copy_to_user+0x20/0xa0 [ 564.106472][T26301] simple_read_from_buffer+0xb5/0x130 [ 564.106567][T26301] proc_fail_nth_read+0x100/0x140 [ 564.106590][T26301] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 564.106670][T26301] vfs_read+0x19d/0x6f0 [ 564.106693][T26301] ? __rcu_read_unlock+0x4f/0x70 [ 564.106718][T26301] ? __fget_files+0x184/0x1c0 [ 564.106746][T26301] ksys_read+0xda/0x1a0 [ 564.106792][T26301] __x64_sys_read+0x40/0x50 [ 564.106817][T26301] x64_sys_call+0x2d77/0x2fb0 [ 564.106843][T26301] do_syscall_64+0xd2/0x200 [ 564.106869][T26301] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 564.106902][T26301] ? clear_bhb_loop+0x40/0x90 [ 564.106935][T26301] ? clear_bhb_loop+0x40/0x90 [ 564.106956][T26301] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 564.106979][T26301] RIP: 0033:0x7fc3ed5ed33c [ 564.106997][T26301] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 564.107083][T26301] RSP: 002b:00007fc3ebc36030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 564.107102][T26301] RAX: ffffffffffffffda RBX: 00007fc3ed816080 RCX: 00007fc3ed5ed33c [ 564.107116][T26301] RDX: 000000000000000f RSI: 00007fc3ebc360a0 RDI: 0000000000000007 [ 564.107141][T26301] RBP: 00007fc3ebc36090 R08: 0000000000000000 R09: 0000000000000000 [ 564.107152][T26301] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 564.107163][T26301] R13: 0000000000000000 R14: 00007fc3ed816080 R15: 00007ffd12b318b8 [ 564.107180][T26301] [ 564.107208][T26296] netlink: zone id is out of range [ 564.107237][T26299] netlink: zone id is out of range [ 564.190225][T26296] netlink: del zone limit has 8 unknown bytes [ 564.202238][T26299] netlink: zone id is out of range [ 564.343436][T26299] netlink: del zone limit has 8 unknown bytes [ 564.380298][T26303] loop0: detected capacity change from 0 to 1024 [ 564.435601][T26303] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 564.456538][T26303] EXT4-fs (loop0): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 564.483628][T26308] netlink: 'syz.4.8471': attribute type 1 has an invalid length. [ 564.528892][T26303] EXT4-fs error (device loop0): ext4_map_blocks:816: inode #3: block 1: comm syz.0.8470: lblock 1 mapped to illegal pblock 1 (length 1) [ 564.578975][T26319] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 564.588084][T26319] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 564.596486][T26319] netlink: 9 bytes leftover after parsing attributes in process `syz.4.8475'. [ 564.608716][T26303] __quota_error: 328 callbacks suppressed [ 564.608755][T26303] Quota error (device loop0): write_blk: dquota write failed [ 564.623688][T26303] Quota error (device loop0): qtree_write_dquot: Error -117 occurred while creating quota [ 564.647069][T26318] 9pnet: Could not find request transport: 0xffffffffffffffff [ 564.654884][ T29] audit: type=1326 audit(1749289214.400:36097): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26311 comm="syz.5.8474" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc3ed5ee929 code=0x7ffc0000 [ 564.678602][ T29] audit: type=1326 audit(1749289214.400:36098): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26311 comm="syz.5.8474" exe="/root/syz-executor" sig=0 arch=c000003e syscall=283 compat=0 ip=0x7fc3ed5ee929 code=0x7ffc0000 [ 564.702260][ T29] audit: type=1326 audit(1749289214.400:36099): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26311 comm="syz.5.8474" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc3ed5ee929 code=0x7ffc0000 [ 564.703945][T26303] EXT4-fs error (device loop0): ext4_acquire_dquot:6933: comm syz.0.8470: Failed to acquire dquot type 0 [ 564.725986][ T29] audit: type=1400 audit(1749289214.450:36100): avc: denied { nlmsg_read } for pid=26312 comm="syz.4.8475" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 564.726054][ T29] audit: type=1400 audit(1749289214.460:36101): avc: denied { ioctl } for pid=26312 comm="syz.4.8475" path="socket:[84670]" dev="sockfs" ino=84670 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 564.805002][T26303] EXT4-fs error (device loop0): ext4_free_blocks:6587: comm syz.0.8470: Freeing blocks not in datazone - block = 0, count = 4096 [ 564.824539][T26303] EXT4-fs error (device loop0): ext4_read_inode_bitmap:139: comm syz.0.8470: Invalid inode bitmap blk 0 in block_group 0 [ 564.846913][T26324] loop1: detected capacity change from 0 to 512 [ 564.853790][T26253] EXT4-fs error (device loop0): ext4_map_blocks:780: inode #3: block 1: comm kworker/u8:66: lblock 1 mapped to illegal pblock 1 (length 1) [ 564.869638][T26253] Quota error (device loop0): remove_tree: Can't read quota data block 1 [ 564.878154][T26253] EXT4-fs error (device loop0): ext4_release_dquot:6969: comm kworker/u8:66: Failed to release dquot type 0 [ 564.891922][T26303] EXT4-fs error (device loop0) in ext4_free_inode:361: Corrupt filesystem [ 564.904586][T26303] EXT4-fs (loop0): 1 orphan inode deleted [ 564.917764][T26324] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 564.931755][T26324] ext4 filesystem being mounted at /506/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 564.944375][T26285] syz.3.8464 invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=1000 [ 564.955428][T26285] CPU: 1 UID: 0 PID: 26285 Comm: syz.3.8464 Not tainted 6.15.0-syzkaller-13473-gc0c9379f235d #0 PREEMPT(voluntary) [ 564.955462][T26285] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 564.955479][T26285] Call Trace: [ 564.955487][T26285] [ 564.955496][T26285] __dump_stack+0x1d/0x30 [ 564.955584][T26285] dump_stack_lvl+0xe8/0x140 [ 564.955610][T26285] dump_stack+0x15/0x1b [ 564.955631][T26285] dump_header+0x81/0x220 [ 564.955672][T26285] oom_kill_process+0x334/0x3f0 [ 564.955733][T26285] out_of_memory+0x979/0xb80 [ 564.955776][T26285] try_charge_memcg+0x5e6/0x9e0 [ 564.955814][T26285] charge_memcg+0x51/0xc0 [ 564.955893][T26285] mem_cgroup_swapin_charge_folio+0xcc/0x150 [ 564.955918][T26285] __read_swap_cache_async+0x1df/0x350 [ 564.955963][T26285] swap_cluster_readahead+0x376/0x3e0 [ 564.956081][T26285] swapin_readahead+0xde/0x6f0 [ 564.956119][T26285] ? __filemap_get_folio+0x49f/0x650 [ 564.956235][T26285] ? __rcu_read_unlock+0x34/0x70 [ 564.956266][T26285] ? swap_cache_get_folio+0x77/0x200 [ 564.956306][T26285] do_swap_page+0x301/0x2430 [ 564.956352][T26285] ? css_rstat_updated+0xcd/0x5b0 [ 564.956395][T26285] ? __pfx_default_wake_function+0x10/0x10 [ 564.956429][T26285] handle_mm_fault+0x9a5/0x2be0 [ 564.956460][T26285] ? mas_walk+0xf2/0x120 [ 564.956514][T26285] do_user_addr_fault+0x636/0x1090 [ 564.956558][T26285] exc_page_fault+0x62/0xa0 [ 564.956649][T26285] asm_exc_page_fault+0x26/0x30 [ 564.956675][T26285] RIP: 0033:0x7f0d809fd9fc [ 564.956695][T26285] Code: 23 83 c0 01 44 39 d0 75 dc 48 89 f0 25 ff 1f 00 00 49 89 34 c1 41 88 3c 00 31 c0 c3 66 90 41 38 3c 10 74 0b 41 88 3c 10 31 c0 <49> 89 34 d1 c3 b8 01 00 00 00 c3 66 0f 1f 84 00 00 00 00 00 48 83 [ 564.956718][T26285] RSP: 002b:00007ffc322e9978 EFLAGS: 00010246 [ 564.956736][T26285] RAX: 0000000000000000 RBX: 00007f0d81895720 RCX: ffffffff819585c3 [ 564.956777][T26285] RDX: 00000000000005c3 RSI: ffffffff819585c3 RDI: 0000000000000013 [ 564.956793][T26285] RBP: ffffffff819585c3 R08: 00007f0d80d50000 R09: 00007f0d80d52000 [ 564.956809][T26285] R10: 00000000819585c7 R11: 0000000000000013 R12: 0000000000000013 [ 564.956824][T26285] R13: 0000000000000002 R14: ffffffff8195812f R15: 0000000000000002 [ 564.956841][T26285] ? fdget+0x9f/0x110 [ 564.956936][T26285] ? set_close_on_exec+0xb3/0x110 [ 564.956972][T26285] ? set_close_on_exec+0xb3/0x110 [ 564.957002][T26285] ? set_close_on_exec+0xb3/0x110 [ 564.957095][T26285] [ 564.982626][T26324] EXT4-fs error (device loop1): ext4_empty_dir:3075: inode #12: comm syz.1.8478: invalid size [ 565.199568][T26285] memory: usage 307200kB, limit 307200kB, failcnt 9146 [ 565.206637][T26285] memory+swap: usage 307408kB, limit 9007199254740988kB, failcnt 0 [ 565.213057][ T29] audit: type=1326 audit(1749289214.830:36102): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26323 comm="syz.1.8478" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f37aedde929 code=0x7ffc0000 [ 565.214538][T26285] kmem: usage 307196kB, limit 9007199254740988kB, failcnt 0 [ 565.238175][ T29] audit: type=1326 audit(1749289214.830:36103): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26323 comm="syz.1.8478" exe="/root/syz-executor" sig=0 arch=c000003e syscall=37 compat=0 ip=0x7f37aedde929 code=0x7ffc0000 [ 565.245386][T26285] Memory cgroup stats for /syz3: [ 565.272168][T19329] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 565.273800][T26303] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 565.290876][T26285] cache 0 [ 565.302602][T26328] netlink: 100 bytes leftover after parsing attributes in process `syz.5.8479'. [ 565.303026][T26285] rss 0 [ 565.315010][T26285] shmem 0 [ 565.318060][T26285] mapped_file 0 [ 565.321518][T26285] dirty 0 [ 565.324458][T26285] writeback 0 [ 565.327782][T26285] workingset_refault_anon 1921 [ 565.332561][T26285] workingset_refault_file 14545 [ 565.337460][T26285] swap 212992 [ 565.340804][T26285] swapcached 4096 [ 565.344473][T26285] nr_memmap_boot_pages 713883 [ 565.346876][T26303] EXT4-fs error (device loop0): ext4_map_blocks:780: inode #3: block 1: comm syz.0.8470: lblock 1 mapped to illegal pblock 1 (length 1) [ 565.349285][T26285] pgpgin 713882 [ 565.349316][T26285] pglazyfree 839565 [ 565.349326][T26285] pgfault 1269 [ 565.349334][T26285] a_other 0 [ 565.349340][T26285] inactive_anon 4096 [ 565.349346][T26285] active_anon 0 [ 565.349355][T26285] inactive_file 0 [ 565.349364][T26285] active_file 0 [ 565.349373][T26285] hierarchical_memory_limit 314572800 [ 565.349384][T26285] hierarchical_memsw_limit 9223372036854771712 [ 565.349396][T26285] total_cache 0 [ 565.381877][T26303] EXT4-fs error (device loop0): ext4_acquire_dquot:6933: comm syz.0.8470: Failed to acquire dquot type 0 [ 565.384521][T26285] total_rss 0 [ 565.384532][T26285] total_shmem 0 [ 565.384541][T26285] total_mapped_file 0 [ 565.384550][T26285] total_dirty 0 [ 565.384559][T26285] total_writeback 0 [ 565.384647][T26285] total_workingset_refault_anon 1921 [ 565.441533][T26285] total_workingset_refault_file 14545 [ 565.446968][T26285] total_swap 212992 [ 565.450790][T26285] total_swapcached 4096 [ 565.454947][T26285] total_nr_memmap_boot_pages 713884 [ 565.460242][T26285] total_pgpgin 713883 [ 565.464272][T26285] total_pglazyfree 839567 [ 565.468612][T26285] total_pgfault 1269 [ 565.472504][T26285] total_a_other 0 [ 565.476170][T26285] total_inactive_anon 4096 [ 565.480586][T26285] total_active_anon 0 [ 565.484560][T26285] total_inactive_file 0 [ 565.488742][T26285] total_active_file 0 [ 565.492719][T26285] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz3,task_memcg=/syz3,task=syz.3.8464,pid=26285,uid=0 [ 565.507498][T26285] Memory cgroup out of memory: Killed process 26285 (syz.3.8464) total-vm:93884kB, anon-rss:936kB, file-rss:22440kB, shmem-rss:0kB, UID:0 pgtables:132kB oom_score_adj:1000 [ 565.570546][T26340] netlink: 16 bytes leftover after parsing attributes in process `syz.4.8483'. [ 565.580855][T19118] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 565.601913][T26234] EXT4-fs error (device loop0): ext4_map_blocks:780: inode #3: block 1: comm kworker/u8:51: lblock 1 mapped to illegal pblock 1 (length 1) [ 565.636458][T26234] EXT4-fs error (device loop0): ext4_release_dquot:6969: comm kworker/u8:51: Failed to release dquot type 0 [ 565.903446][T26376] SELinux: Context system_u:object_r:tmp_t:s0 is not valid (left unmapped). [ 565.913520][T26367] loop1: detected capacity change from 0 to 1024 [ 565.920857][ T1722] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 565.930355][T26376] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 565.941590][T26367] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 565.954222][T26367] EXT4-fs (loop1): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 565.980782][T26367] EXT4-fs error (device loop1): ext4_map_blocks:816: inode #3: block 1: comm syz.1.8494: lblock 1 mapped to illegal pblock 1 (length 1) [ 566.002626][T26367] EXT4-fs error (device loop1): ext4_acquire_dquot:6933: comm syz.1.8494: Failed to acquire dquot type 0 [ 566.020507][T26367] EXT4-fs error (device loop1): ext4_free_blocks:6587: comm syz.1.8494: Freeing blocks not in datazone - block = 0, count = 4096 [ 566.046656][T26367] EXT4-fs error (device loop1): ext4_read_inode_bitmap:139: comm syz.1.8494: Invalid inode bitmap blk 0 in block_group 0 [ 566.061686][T26384] FAULT_INJECTION: forcing a failure. [ 566.061686][T26384] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 566.074853][T26384] CPU: 0 UID: 0 PID: 26384 Comm: syz.3.8501 Not tainted 6.15.0-syzkaller-13473-gc0c9379f235d #0 PREEMPT(voluntary) [ 566.074898][T26384] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 566.074911][T26384] Call Trace: [ 566.074917][T26384] [ 566.074925][T26384] __dump_stack+0x1d/0x30 [ 566.074946][T26384] dump_stack_lvl+0xe8/0x140 [ 566.074965][T26384] dump_stack+0x15/0x1b [ 566.074996][T26384] should_fail_ex+0x265/0x280 [ 566.075016][T26384] should_fail+0xb/0x20 [ 566.075032][T26384] should_fail_usercopy+0x1a/0x20 [ 566.075054][T26384] _copy_to_user+0x20/0xa0 [ 566.075091][T26384] simple_read_from_buffer+0xb5/0x130 [ 566.075127][T26384] proc_fail_nth_read+0x100/0x140 [ 566.075150][T26384] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 566.075181][T26384] vfs_read+0x19d/0x6f0 [ 566.075199][T26384] ? __fget_files+0x184/0x1c0 [ 566.075221][T26384] ? __rcu_read_unlock+0x4f/0x70 [ 566.075244][T26384] ? __fget_files+0x184/0x1c0 [ 566.075325][T26384] ksys_read+0xda/0x1a0 [ 566.075353][T26384] __x64_sys_read+0x40/0x50 [ 566.075373][T26384] x64_sys_call+0x2d77/0x2fb0 [ 566.075394][T26384] do_syscall_64+0xd2/0x200 [ 566.075467][T26384] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 566.075495][T26384] ? clear_bhb_loop+0x40/0x90 [ 566.075516][T26384] ? clear_bhb_loop+0x40/0x90 [ 566.075538][T26384] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 566.075561][T26384] RIP: 0033:0x7f0d80b3d33c [ 566.075577][T26384] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 566.075595][T26384] RSP: 002b:00007f0d7f186030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 566.075660][T26384] RAX: ffffffffffffffda RBX: 00007f0d80d66080 RCX: 00007f0d80b3d33c [ 566.075673][T26384] RDX: 000000000000000f RSI: 00007f0d7f1860a0 RDI: 000000000000000a [ 566.075713][T26384] RBP: 00007f0d7f186090 R08: 0000000000000000 R09: 0000000000000000 [ 566.075725][T26384] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 566.075743][T26384] R13: 0000000000000001 R14: 00007f0d80d66080 R15: 00007ffc322e98f8 [ 566.075772][T26384] [ 566.284883][T26219] EXT4-fs error (device loop1): ext4_map_blocks:780: inode #3: block 1: comm kworker/u8:36: lblock 1 mapped to illegal pblock 1 (length 1) [ 566.303419][T26367] EXT4-fs error (device loop1) in ext4_free_inode:361: Corrupt filesystem [ 566.315666][T26219] EXT4-fs error (device loop1): ext4_release_dquot:6969: comm kworker/u8:36: Failed to release dquot type 0 [ 566.330146][T26367] EXT4-fs (loop1): 1 orphan inode deleted [ 566.346237][T26367] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 566.363782][T26367] EXT4-fs error (device loop1): ext4_map_blocks:780: inode #3: block 1: comm syz.1.8494: lblock 1 mapped to illegal pblock 1 (length 1) [ 566.384244][T26367] EXT4-fs error (device loop1): ext4_acquire_dquot:6933: comm syz.1.8494: Failed to acquire dquot type 0 [ 566.428946][T19329] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 566.456568][T26219] EXT4-fs error (device loop1): ext4_map_blocks:780: inode #3: block 1: comm kworker/u8:36: lblock 1 mapped to illegal pblock 1 (length 1) [ 566.499603][T26219] EXT4-fs error (device loop1): ext4_release_dquot:6969: comm kworker/u8:36: Failed to release dquot type 0 [ 566.620751][T26411] loop0: detected capacity change from 0 to 512 [ 566.657460][T26409] loop1: detected capacity change from 0 to 512 [ 566.704827][T26407] FAULT_INJECTION: forcing a failure. [ 566.704827][T26407] name failslab, interval 1, probability 0, space 0, times 0 [ 566.717577][T26407] CPU: 0 UID: 0 PID: 26407 Comm: syz.4.8511 Not tainted 6.15.0-syzkaller-13473-gc0c9379f235d #0 PREEMPT(voluntary) [ 566.717635][T26407] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 566.717650][T26407] Call Trace: [ 566.717658][T26407] [ 566.717666][T26407] __dump_stack+0x1d/0x30 [ 566.717772][T26407] dump_stack_lvl+0xe8/0x140 [ 566.717790][T26407] dump_stack+0x15/0x1b [ 566.717806][T26407] should_fail_ex+0x265/0x280 [ 566.717826][T26407] should_failslab+0x8c/0xb0 [ 566.717850][T26407] kmem_cache_alloc_noprof+0x50/0x310 [ 566.717947][T26407] ? audit_log_start+0x365/0x6c0 [ 566.717980][T26407] audit_log_start+0x365/0x6c0 [ 566.718014][T26407] audit_seccomp+0x48/0x100 [ 566.718101][T26407] ? __seccomp_filter+0x68c/0x10d0 [ 566.718124][T26407] __seccomp_filter+0x69d/0x10d0 [ 566.718148][T26407] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 566.718204][T26407] ? vfs_write+0x75e/0x8e0 [ 566.718229][T26407] __secure_computing+0x82/0x150 [ 566.718253][T26407] syscall_trace_enter+0xcf/0x1e0 [ 566.718278][T26407] do_syscall_64+0xac/0x200 [ 566.718299][T26407] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 566.718348][T26407] ? clear_bhb_loop+0x40/0x90 [ 566.718369][T26407] ? clear_bhb_loop+0x40/0x90 [ 566.718404][T26407] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 566.718426][T26407] RIP: 0033:0x7f556f70e929 [ 566.718442][T26407] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 566.718506][T26407] RSP: 002b:00007f556dd77038 EFLAGS: 00000246 ORIG_RAX: 0000000000000107 [ 566.718524][T26407] RAX: ffffffffffffffda RBX: 00007f556f935fa0 RCX: 00007f556f70e929 [ 566.718555][T26407] RDX: 0000000000000200 RSI: 0000200000000080 RDI: 0000000000000005 [ 566.718577][T26407] RBP: 00007f556dd77090 R08: 0000000000000000 R09: 0000000000000000 [ 566.718589][T26407] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 566.718600][T26407] R13: 0000000000000000 R14: 00007f556f935fa0 R15: 00007fff9abbc878 [ 566.718619][T26407] [ 566.936619][T26409] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 566.958624][T26411] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 566.974372][T26409] ext4 filesystem being mounted at /511/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 566.990403][T26411] ext4 filesystem being mounted at /513/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 567.007273][T26409] EXT4-fs error (device loop1): ext4_do_update_inode:5568: inode #19: comm syz.1.8512: corrupted inode contents [ 567.026074][T26409] EXT4-fs error (device loop1): ext4_dirty_inode:6459: inode #19: comm syz.1.8512: mark_inode_dirty error [ 567.049073][T26409] EXT4-fs error (device loop1): ext4_do_update_inode:5568: inode #19: comm syz.1.8512: corrupted inode contents [ 567.063148][T19118] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 567.081807][T26409] EXT4-fs error (device loop1): ext4_xattr_delete_inode:2991: inode #19: comm syz.1.8512: mark_inode_dirty error [ 567.104143][T26409] EXT4-fs error (device loop1): ext4_xattr_delete_inode:2994: inode #19: comm syz.1.8512: mark inode dirty (error -117) [ 567.124146][T26409] EXT4-fs warning (device loop1): ext4_evict_inode:274: xattr delete (err -117) [ 567.244301][T19329] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 567.270369][T26432] loop0: detected capacity change from 0 to 512 [ 567.286537][T26432] EXT4-fs: Ignoring removed mblk_io_submit option [ 567.295938][T26432] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 567.317397][T26432] EXT4-fs (loop0): 1 truncate cleaned up [ 567.331718][T26432] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 567.354548][T26394] syz.3.8505 invoked oom-killer: gfp_mask=0x402dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_ZERO|__GFP_NOWARN), order=0, oom_score_adj=1000 [ 567.368839][T26394] CPU: 0 UID: 0 PID: 26394 Comm: syz.3.8505 Not tainted 6.15.0-syzkaller-13473-gc0c9379f235d #0 PREEMPT(voluntary) [ 567.368957][T26394] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 567.368974][T26394] Call Trace: [ 567.368984][T26394] [ 567.368994][T26394] __dump_stack+0x1d/0x30 [ 567.369020][T26394] dump_stack_lvl+0xe8/0x140 [ 567.369043][T26394] dump_stack+0x15/0x1b [ 567.369116][T26394] dump_header+0x81/0x220 [ 567.369155][T26394] oom_kill_process+0x334/0x3f0 [ 567.369193][T26394] out_of_memory+0x979/0xb80 [ 567.369241][T26394] try_charge_memcg+0x5e6/0x9e0 [ 567.369311][T26394] obj_cgroup_charge_pages+0xa6/0x150 [ 567.369415][T26394] __memcg_kmem_charge_page+0x9f/0x170 [ 567.369532][T26394] __alloc_frozen_pages_noprof+0x188/0x360 [ 567.369621][T26394] alloc_pages_mpol+0xb3/0x250 [ 567.369688][T26394] alloc_pages_noprof+0x90/0x130 [ 567.369787][T26394] __vmalloc_node_range_noprof+0x6f2/0xe00 [ 567.369845][T26394] __kvmalloc_node_noprof+0x30f/0x4e0 [ 567.369905][T26394] ? ip_set_alloc+0x1f/0x30 [ 567.369944][T26394] ? ip_set_alloc+0x1f/0x30 [ 567.369981][T26394] ? __kmalloc_cache_noprof+0x189/0x320 [ 567.370070][T26394] ip_set_alloc+0x1f/0x30 [ 567.370110][T26394] hash_netiface_create+0x282/0x740 [ 567.370155][T26394] ? __pfx_hash_netiface_create+0x10/0x10 [ 567.370242][T26394] ip_set_create+0x3c9/0x960 [ 567.370282][T26394] ? __nla_parse+0x40/0x60 [ 567.370310][T26394] nfnetlink_rcv_msg+0x4c3/0x590 [ 567.370453][T26394] ? selinux_capable+0x1f9/0x270 [ 567.370478][T26394] netlink_rcv_skb+0x123/0x220 [ 567.370504][T26394] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 567.370548][T26394] nfnetlink_rcv+0x16b/0x1690 [ 567.370671][T26394] ? __kfree_skb+0x109/0x150 [ 567.370756][T26394] ? nlmon_xmit+0x4f/0x60 [ 567.370785][T26394] ? consume_skb+0x49/0x150 [ 567.370803][T26394] ? nlmon_xmit+0x4f/0x60 [ 567.370827][T26394] ? dev_hard_start_xmit+0x3b0/0x3e0 [ 567.370869][T26394] ? __dev_queue_xmit+0x11c0/0x1fb0 [ 567.370895][T26394] ? __dev_queue_xmit+0x182/0x1fb0 [ 567.370922][T26394] ? xas_load+0x413/0x430 [ 567.371003][T26394] ? ref_tracker_free+0x37d/0x3e0 [ 567.371048][T26394] ? __netlink_deliver_tap+0x4dc/0x500 [ 567.371130][T26394] netlink_unicast+0x5a1/0x670 [ 567.371180][T26394] netlink_sendmsg+0x58b/0x6b0 [ 567.371210][T26394] ? __pfx_netlink_sendmsg+0x10/0x10 [ 567.371237][T26394] __sock_sendmsg+0x145/0x180 [ 567.371305][T26394] ____sys_sendmsg+0x31e/0x4e0 [ 567.371417][T26394] ___sys_sendmsg+0x17b/0x1d0 [ 567.371441][T26394] ? _raw_spin_unlock_irqrestore+0x2b/0x60 [ 567.371545][T26394] __x64_sys_sendmsg+0xd4/0x160 [ 567.371581][T26394] x64_sys_call+0x2999/0x2fb0 [ 567.371608][T26394] do_syscall_64+0xd2/0x200 [ 567.371634][T26394] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 567.371725][T26394] ? clear_bhb_loop+0x40/0x90 [ 567.371790][T26394] ? clear_bhb_loop+0x40/0x90 [ 567.371840][T26394] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 567.371863][T26394] RIP: 0033:0x7f0d80b3e929 [ 567.371878][T26394] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 567.371903][T26394] RSP: 002b:00007f0d7f1a7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 567.371923][T26394] RAX: ffffffffffffffda RBX: 00007f0d80d65fa0 RCX: 00007f0d80b3e929 [ 567.371935][T26394] RDX: 0000000000000800 RSI: 0000200000000040 RDI: 000000000000000a [ 567.371952][T26394] RBP: 00007f0d80bc0b39 R08: 0000000000000000 R09: 0000000000000000 [ 567.371968][T26394] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 567.371985][T26394] R13: 0000000000000000 R14: 00007f0d80d65fa0 R15: 00007ffc322e98f8 [ 567.372010][T26394] [ 567.372019][T26394] memory: usage 307176kB, limit 307200kB, failcnt 9373 [ 567.583272][T26440] vlan0: entered allmulticast mode [ 567.587613][T26394] memory+swap: usage 307356kB, limit 9007199254740988kB, failcnt 0 [ 567.587638][T26394] kmem: usage 307128kB, limit 9007199254740988kB, failcnt 0 [ 567.587653][T26394] Memory cgroup stats for /syz3: [ 567.761087][T26394] cache 0 [ 567.769094][T26394] rss 4096 [ 567.772288][T26394] shmem 0 [ 567.775260][T26394] mapped_file 0 [ 567.778815][T26394] dirty 0 [ 567.781757][T26394] writeback 32768 [ 567.785476][T26394] workingset_refault_anon 2016 [ 567.790341][T26394] workingset_refault_file 14708 [ 567.795201][T26394] swap 184320 [ 567.798618][T26394] swapcached 40960 [ 567.802346][T26394] nr_memmap_boot_pages 714410 [ 567.807100][T26394] pgpgin 714400 [ 567.810557][T26394] pglazyfree 840618 [ 567.814409][T26394] pgfault 1334 [ 567.817996][T26394] a_other 4096 [ 567.821412][T26394] inactive_anon 32768 [ 567.825405][T26394] active_anon 0 [ 567.828918][T26394] inactive_file 0 [ 567.832587][T26394] active_file 0 [ 567.836110][T26394] hierarchical_memory_limit 314572800 [ 567.841577][T26394] hierarchical_memsw_limit 9223372036854771712 [ 567.847792][T26394] total_cache 0 [ 567.851262][T26394] total_rss 4096 [ 567.854816][T26394] total_shmem 0 [ 567.858317][T26394] total_mapped_file 0 [ 567.862380][T26394] total_dirty 0 [ 567.865883][T26394] total_writeback 32768 [ 567.870056][T26394] total_workingset_refault_anon 2016 [ 567.875519][T26394] total_workingset_refault_file 14708 [ 567.881027][T26394] total_swap 184320 [ 567.884855][T26394] total_swapcached 40960 [ 567.889234][T26394] total_nr_memmap_boot_pages 714411 [ 567.894496][T26394] total_pgpgin 714401 [ 567.898661][T26394] total_pglazyfree 840620 [ 567.903001][T26394] total_pgfault 1334 [ 567.907049][T26394] total_a_other 4096 [ 567.911007][T26394] total_inactive_anon 32768 [ 567.915647][T26394] total_active_anon 0 [ 567.919706][T26394] total_inactive_file 0 [ 567.924005][T26394] total_active_file 0 [ 567.928032][T26394] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz3,task_memcg=/syz3,task=syz.3.8505,pid=26392,uid=0 [ 567.942883][T26394] Memory cgroup out of memory: Killed process 26392 (syz.3.8505) total-vm:93884kB, anon-rss:1068kB, file-rss:22440kB, shmem-rss:0kB, UID:0 pgtables:132kB oom_score_adj:1000 [ 568.007560][T19118] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 568.203477][T26456] SELinux: policydb magic number 0x0 does not match expected magic number 0xf97cff8c [ 568.207628][T26449] rdma_op ffff88811f00b980 conn xmit_rdma 0000000000000000 [ 568.254120][T26456] SELinux: failed to load policy [ 568.264339][T26453] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 568.277335][T26453] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 568.322188][T26453] __nla_validate_parse: 9 callbacks suppressed [ 568.322246][T26453] netlink: 28 bytes leftover after parsing attributes in process `syz.4.8526'. [ 568.337490][T26453] netlink: 28 bytes leftover after parsing attributes in process `syz.4.8526'. [ 568.509635][T26467] loop0: detected capacity change from 0 to 512 [ 568.656852][T26467] EXT4-fs: Ignoring removed mblk_io_submit option [ 568.670856][T26467] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 568.785932][T26467] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e016c018, mo2=0002] [ 568.801726][T26467] System zones: 1-12 [ 568.820481][T26467] EXT4-fs (loop0): 1 truncate cleaned up [ 568.879707][T26467] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 569.164976][T26480] netlink: 4 bytes leftover after parsing attributes in process `syz.0.8532'. [ 569.216294][T26480] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8532'. [ 569.301847][T26489] tipc: Started in network mode [ 569.306841][T26489] tipc: Node identity ac14140f, cluster identity 4711 [ 569.327458][T26489] tipc: New replicast peer: 0.0.255.255 [ 569.333107][T26489] tipc: Enabled bearer , priority 10 [ 569.352670][T26491] program syz.4.8538 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 569.383017][T19118] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 569.533519][T26499] loop0: detected capacity change from 0 to 512 [ 569.551272][T26499] journal_path: Non-blockdev passed as './bus' [ 569.557556][T26499] EXT4-fs: error: could not find journal device path [ 569.631086][T26511] vlan2: entered allmulticast mode [ 569.646274][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 569.672350][ T29] kauditd_printk_skb: 475 callbacks suppressed [ 569.672406][ T29] audit: type=1326 audit(1749289219.520:36568): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26516 comm="syz.5.8548" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc3ed5ee929 code=0x7ffc0000 [ 569.774935][ T29] audit: type=1326 audit(1749289219.550:36569): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26516 comm="syz.5.8548" exe="/root/syz-executor" sig=0 arch=c000003e syscall=148 compat=0 ip=0x7fc3ed5ee929 code=0x7ffc0000 [ 569.798627][ T29] audit: type=1326 audit(1749289219.550:36570): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26516 comm="syz.5.8548" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc3ed5ee929 code=0x7ffc0000 [ 569.822707][ T29] audit: type=1326 audit(1749289219.550:36571): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26516 comm="syz.5.8548" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7fc3ed5ee929 code=0x7ffc0000 [ 569.846156][ T29] audit: type=1326 audit(1749289219.550:36572): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26516 comm="syz.5.8548" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc3ed5ee929 code=0x7ffc0000 [ 569.869826][ T29] audit: type=1326 audit(1749289219.550:36573): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26516 comm="syz.5.8548" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7fc3ed5ee929 code=0x7ffc0000 [ 569.893319][ T29] audit: type=1326 audit(1749289219.550:36574): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26516 comm="syz.5.8548" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc3ed5ee929 code=0x7ffc0000 [ 569.917036][ T29] audit: type=1326 audit(1749289219.550:36575): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26516 comm="syz.5.8548" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fc3ed5ee929 code=0x7ffc0000 [ 569.940527][ T29] audit: type=1326 audit(1749289219.550:36576): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26516 comm="syz.5.8548" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc3ed5ee929 code=0x7ffc0000 [ 569.964292][ T29] audit: type=1326 audit(1749289219.550:36577): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26516 comm="syz.5.8548" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fc3ed5ee929 code=0x7ffc0000 [ 570.120064][T26522] netlink: 4 bytes leftover after parsing attributes in process `syz.5.8550'. [ 570.144881][T26522] netlink: 8 bytes leftover after parsing attributes in process `syz.5.8550'. [ 570.184681][T26533] netlink: 24 bytes leftover after parsing attributes in process `syz.4.8554'. [ 570.274231][T26539] loop1: detected capacity change from 0 to 2048 [ 570.282509][T26539] EXT4-fs: Ignoring removed nomblk_io_submit option [ 570.332212][T26539] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 570.411371][T26539] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8558'. [ 570.455894][ T3396] tipc: Node number set to 2886997007 [ 570.470639][T26551] netlink: 4 bytes leftover after parsing attributes in process `syz.4.8562'. [ 570.719872][T26539] EXT4-fs error (device loop1): ext4_validate_block_bitmap:432: comm syz.1.8558: bg 0: block 2: invalid block bitmap [ 570.755108][T26539] EXT4-fs (loop1): Remounting filesystem read-only [ 570.769921][T26560] netlink: 100 bytes leftover after parsing attributes in process `syz.4.8564'. [ 570.814140][T26539] EXT4-fs warning (device loop1): ext4_xattr_inode_lookup_create:1597: inode #18: comm syz.1.8558: cleanup dec ref error -117 [ 570.910874][T19329] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 570.938234][T26564] loop0: detected capacity change from 0 to 512 [ 571.037065][T26564] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 571.051198][T26569] loop1: detected capacity change from 0 to 512 [ 571.058608][T26564] EXT4-fs error (device loop0): ext4_get_branch:178: inode #11: block 4294967295: comm syz.0.8566: invalid block [ 571.071320][T26564] EXT4-fs error (device loop0): ext4_free_branches:1023: inode #11: comm syz.0.8566: invalid indirect mapped block 4294967295 (level 1) [ 571.071494][T26569] EXT4-fs error (device loop1): ext4_iget_extra_inode:5035: inode #15: comm syz.1.8567: corrupted in-inode xattr: invalid ea_ino [ 571.126394][T26564] EXT4-fs error (device loop0): ext4_free_branches:1023: inode #11: comm syz.0.8566: invalid indirect mapped block 4294967295 (level 1) [ 571.151798][T26569] EXT4-fs error (device loop1): ext4_orphan_get:1398: comm syz.1.8567: couldn't read orphan inode 15 (err -117) [ 571.171794][T26564] EXT4-fs (loop0): 2 truncates cleaned up [ 571.180680][T26569] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 571.192117][T26564] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 571.215223][T26564] xt_addrtype: ipv6 PROHIBIT (THROW, NAT ..) matching not supported [ 571.224434][T26569] FAULT_INJECTION: forcing a failure. [ 571.224434][T26569] name failslab, interval 1, probability 0, space 0, times 0 [ 571.237250][T26569] CPU: 1 UID: 0 PID: 26569 Comm: syz.1.8567 Not tainted 6.15.0-syzkaller-13473-gc0c9379f235d #0 PREEMPT(voluntary) [ 571.237282][T26569] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 571.237297][T26569] Call Trace: [ 571.237305][T26569] [ 571.237312][T26569] __dump_stack+0x1d/0x30 [ 571.237342][T26569] dump_stack_lvl+0xe8/0x140 [ 571.237365][T26569] dump_stack+0x15/0x1b [ 571.237384][T26569] should_fail_ex+0x265/0x280 [ 571.237408][T26569] should_failslab+0x8c/0xb0 [ 571.237436][T26569] kmem_cache_alloc_lru_noprof+0x55/0x310 [ 571.237482][T26569] ? __d_alloc+0x3d/0x350 [ 571.237512][T26569] __d_alloc+0x3d/0x350 [ 571.237563][T26569] d_alloc_parallel+0x53/0xc40 [ 571.237590][T26569] ? __rcu_read_unlock+0x4f/0x70 [ 571.237610][T26569] ? __d_lookup+0x316/0x340 [ 571.237667][T26569] ? try_to_unlazy+0x25e/0x3a0 [ 571.237698][T26569] path_openat+0x6b5/0x2170 [ 571.237742][T26569] do_filp_open+0x109/0x230 [ 571.237806][T26569] do_sys_openat2+0xa6/0x110 [ 571.237837][T26569] __x64_sys_openat+0xf2/0x120 [ 571.237870][T26569] x64_sys_call+0x1af/0x2fb0 [ 571.237974][T26569] do_syscall_64+0xd2/0x200 [ 571.237998][T26569] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 571.238027][T26569] ? clear_bhb_loop+0x40/0x90 [ 571.238048][T26569] ? clear_bhb_loop+0x40/0x90 [ 571.238069][T26569] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 571.238138][T26569] RIP: 0033:0x7f37aedde929 [ 571.238155][T26569] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 571.238342][T26569] RSP: 002b:00007f37ad447038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 571.238370][T26569] RAX: ffffffffffffffda RBX: 00007f37af005fa0 RCX: 00007f37aedde929 [ 571.238387][T26569] RDX: 000000000000275a RSI: 00002000000001c0 RDI: ffffffffffffff9c [ 571.238404][T26569] RBP: 00007f37ad447090 R08: 0000000000000000 R09: 0000000000000000 [ 571.238420][T26569] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 571.238481][T26569] R13: 0000000000000000 R14: 00007f37af005fa0 R15: 00007ffd16dc5c48 [ 571.238504][T26569] [ 571.453935][T26564] EXT4-fs (loop0): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 571.492134][T19329] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 571.509817][T26581] program syz.5.8571 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 571.562827][T26564] SELinux: failed to load policy [ 571.585703][T19118] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 571.701791][T26591] netlink: 'syz.0.8575': attribute type 4 has an invalid length. [ 571.737096][T26591] netlink: 'syz.0.8575': attribute type 4 has an invalid length. [ 573.200213][T26660] rdma_op ffff88819608e580 conn xmit_rdma 0000000000000000 [ 573.433025][T26675] rdma_op ffff88819608e980 conn xmit_rdma 0000000000000000 [ 573.795194][T26694] loop0: detected capacity change from 0 to 512 [ 573.809059][T26694] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 573.832507][T26694] EXT4-fs (loop0): ext4_check_descriptors: Inode table for group 0 not in group (block 0)! [ 573.842704][T26694] EXT4-fs (loop0): group descriptors corrupted! [ 573.862197][T26696] __nla_validate_parse: 7 callbacks suppressed [ 573.862211][T26696] netlink: 24 bytes leftover after parsing attributes in process `syz.3.8613'. [ 573.999684][T26694] netlink: 80 bytes leftover after parsing attributes in process `syz.0.8611'. [ 574.274043][T26715] FAULT_INJECTION: forcing a failure. [ 574.274043][T26715] name failslab, interval 1, probability 0, space 0, times 0 [ 574.286827][T26715] CPU: 0 UID: 0 PID: 26715 Comm: syz.5.8618 Not tainted 6.15.0-syzkaller-13473-gc0c9379f235d #0 PREEMPT(voluntary) [ 574.286866][T26715] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 574.286878][T26715] Call Trace: [ 574.286885][T26715] [ 574.286894][T26715] __dump_stack+0x1d/0x30 [ 574.286917][T26715] dump_stack_lvl+0xe8/0x140 [ 574.286941][T26715] dump_stack+0x15/0x1b [ 574.286962][T26715] should_fail_ex+0x265/0x280 [ 574.287002][T26715] should_failslab+0x8c/0xb0 [ 574.287096][T26715] kmem_cache_alloc_noprof+0x50/0x310 [ 574.287135][T26715] ? security_inode_alloc+0x37/0x100 [ 574.287190][T26715] security_inode_alloc+0x37/0x100 [ 574.287230][T26715] inode_init_always_gfp+0x4b7/0x500 [ 574.287257][T26715] ? __pfx_sock_alloc_inode+0x10/0x10 [ 574.287357][T26715] alloc_inode+0x58/0x170 [ 574.287392][T26715] do_accept+0xa0/0x3a0 [ 574.287427][T26715] ? trace_reschedule_exit+0xd/0xc0 [ 574.287461][T26715] __sys_accept4+0xbf/0x140 [ 574.287511][T26715] __x64_sys_accept+0x42/0x50 [ 574.287550][T26715] x64_sys_call+0x2f50/0x2fb0 [ 574.287572][T26715] do_syscall_64+0xd2/0x200 [ 574.287596][T26715] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 574.287623][T26715] ? clear_bhb_loop+0x40/0x90 [ 574.287680][T26715] ? clear_bhb_loop+0x40/0x90 [ 574.287707][T26715] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 574.287734][T26715] RIP: 0033:0x7fc3ed5ee929 [ 574.287750][T26715] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 574.287774][T26715] RSP: 002b:00007fc3ebc36038 EFLAGS: 00000246 ORIG_RAX: 000000000000002b [ 574.287834][T26715] RAX: ffffffffffffffda RBX: 00007fc3ed816080 RCX: 00007fc3ed5ee929 [ 574.287849][T26715] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000003 [ 574.287861][T26715] RBP: 00007fc3ebc36090 R08: 0000000000000000 R09: 0000000000000000 [ 574.287872][T26715] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 574.287883][T26715] R13: 0000000000000001 R14: 00007fc3ed816080 R15: 00007ffd12b318b8 [ 574.287906][T26715] [ 574.544519][T26717] FAULT_INJECTION: forcing a failure. [ 574.544519][T26717] name failslab, interval 1, probability 0, space 0, times 0 [ 574.557294][T26717] CPU: 1 UID: 0 PID: 26717 Comm: syz.0.8619 Not tainted 6.15.0-syzkaller-13473-gc0c9379f235d #0 PREEMPT(voluntary) [ 574.557328][T26717] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 574.557344][T26717] Call Trace: [ 574.557352][T26717] [ 574.557361][T26717] __dump_stack+0x1d/0x30 [ 574.557415][T26717] dump_stack_lvl+0xe8/0x140 [ 574.557440][T26717] dump_stack+0x15/0x1b [ 574.557462][T26717] should_fail_ex+0x265/0x280 [ 574.557488][T26717] should_failslab+0x8c/0xb0 [ 574.557575][T26717] kmem_cache_alloc_noprof+0x50/0x310 [ 574.557615][T26717] ? getname_flags+0x80/0x3b0 [ 574.557669][T26717] getname_flags+0x80/0x3b0 [ 574.557708][T26717] user_path_at+0x28/0x130 [ 574.557746][T26717] __se_sys_mount_setattr+0x136/0x240 [ 574.557783][T26717] __x64_sys_mount_setattr+0x67/0x80 [ 574.557833][T26717] x64_sys_call+0xda0/0x2fb0 [ 574.557860][T26717] do_syscall_64+0xd2/0x200 [ 574.557937][T26717] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 574.557972][T26717] ? clear_bhb_loop+0x40/0x90 [ 574.558048][T26717] ? clear_bhb_loop+0x40/0x90 [ 574.558076][T26717] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 574.558103][T26717] RIP: 0033:0x7fd8747ae929 [ 574.558122][T26717] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 574.558224][T26717] RSP: 002b:00007fd872e17038 EFLAGS: 00000246 ORIG_RAX: 00000000000001ba [ 574.558249][T26717] RAX: ffffffffffffffda RBX: 00007fd8749d5fa0 RCX: 00007fd8747ae929 [ 574.558266][T26717] RDX: 0000000000008000 RSI: 0000200000000180 RDI: ffffffffffffff9c [ 574.558282][T26717] RBP: 00007fd872e17090 R08: 0000000000000020 R09: 0000000000000000 [ 574.558297][T26717] R10: 0000200000001dc0 R11: 0000000000000246 R12: 0000000000000001 [ 574.558313][T26717] R13: 0000000000000001 R14: 00007fd8749d5fa0 R15: 00007fff10617a88 [ 574.558337][T26717] [ 574.781215][T26702] audit_log_lost: 187 callbacks suppressed [ 574.781233][T26702] audit: audit_lost=12 audit_rate_limit=0 audit_backlog_limit=64 [ 574.794885][T26702] audit: out of memory in audit_log_start [ 574.930501][T26732] netlink: 24 bytes leftover after parsing attributes in process `syz.1.8625'. [ 575.034565][ T29] audit: type=1400 audit(1749289224.880:36765): avc: denied { connect } for pid=26744 comm="syz.4.8631" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 575.065467][T26745] netlink: 'syz.4.8631': attribute type 13 has an invalid length. [ 575.073444][T26745] netlink: 8 bytes leftover after parsing attributes in process `syz.4.8631'. [ 575.489292][T26758] netlink: 172 bytes leftover after parsing attributes in process `syz.5.8635'. [ 575.519764][T26758] netlink: 172 bytes leftover after parsing attributes in process `syz.5.8635'. [ 575.541492][T26759] netlink: 256 bytes leftover after parsing attributes in process `syz.5.8635'. [ 575.568425][T26725] syz.0.8621 invoked oom-killer: gfp_mask=0x402dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_ZERO|__GFP_NOWARN), order=0, oom_score_adj=1000 [ 575.582614][T26725] CPU: 0 UID: 0 PID: 26725 Comm: syz.0.8621 Not tainted 6.15.0-syzkaller-13473-gc0c9379f235d #0 PREEMPT(voluntary) [ 575.582683][T26725] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 575.582696][T26725] Call Trace: [ 575.582703][T26725] [ 575.582710][T26725] __dump_stack+0x1d/0x30 [ 575.582744][T26725] dump_stack_lvl+0xe8/0x140 [ 575.582764][T26725] dump_stack+0x15/0x1b [ 575.582781][T26725] dump_header+0x81/0x220 [ 575.582817][T26725] oom_kill_process+0x334/0x3f0 [ 575.582870][T26725] out_of_memory+0x979/0xb80 [ 575.582904][T26725] try_charge_memcg+0x5e6/0x9e0 [ 575.582935][T26725] obj_cgroup_charge_pages+0xa6/0x150 [ 575.582991][T26725] __memcg_kmem_charge_page+0x9f/0x170 [ 575.583024][T26725] __alloc_frozen_pages_noprof+0x188/0x360 [ 575.583064][T26725] alloc_pages_mpol+0xb3/0x250 [ 575.583174][T26725] alloc_pages_noprof+0x90/0x130 [ 575.583207][T26725] __vmalloc_node_range_noprof+0x6f2/0xe00 [ 575.583253][T26725] __kvmalloc_node_noprof+0x30f/0x4e0 [ 575.583335][T26725] ? ip_set_alloc+0x1f/0x30 [ 575.583368][T26725] ? ip_set_alloc+0x1f/0x30 [ 575.583409][T26725] ? __kmalloc_cache_noprof+0x189/0x320 [ 575.583440][T26725] ip_set_alloc+0x1f/0x30 [ 575.583549][T26725] hash_netiface_create+0x282/0x740 [ 575.583588][T26725] ? __pfx_hash_netiface_create+0x10/0x10 [ 575.583684][T26725] ip_set_create+0x3c9/0x960 [ 575.583756][T26725] ? __nla_parse+0x40/0x60 [ 575.583780][T26725] nfnetlink_rcv_msg+0x4c3/0x590 [ 575.583809][T26725] ? should_fail_ex+0x30/0x280 [ 575.583851][T26725] ? selinux_capable+0x1f9/0x270 [ 575.583917][T26725] netlink_rcv_skb+0x123/0x220 [ 575.583937][T26725] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 575.584009][T26725] nfnetlink_rcv+0x16b/0x1690 [ 575.584130][T26725] ? __kfree_skb+0x109/0x150 [ 575.584149][T26725] ? nlmon_xmit+0x4f/0x60 [ 575.584175][T26725] ? consume_skb+0x49/0x150 [ 575.584193][T26725] ? nlmon_xmit+0x4f/0x60 [ 575.584219][T26725] ? dev_hard_start_xmit+0x3b0/0x3e0 [ 575.584265][T26725] ? __dev_queue_xmit+0x11c0/0x1fb0 [ 575.584287][T26725] ? __dev_queue_xmit+0x182/0x1fb0 [ 575.584311][T26725] ? ref_tracker_free+0x37d/0x3e0 [ 575.584431][T26725] ? __netlink_deliver_tap+0x4dc/0x500 [ 575.584531][T26725] netlink_unicast+0x5a1/0x670 [ 575.584569][T26725] netlink_sendmsg+0x58b/0x6b0 [ 575.584598][T26725] ? __pfx_netlink_sendmsg+0x10/0x10 [ 575.584622][T26725] __sock_sendmsg+0x145/0x180 [ 575.584716][T26725] ____sys_sendmsg+0x31e/0x4e0 [ 575.584743][T26725] ___sys_sendmsg+0x17b/0x1d0 [ 575.584782][T26725] __x64_sys_sendmsg+0xd4/0x160 [ 575.584883][T26725] x64_sys_call+0x2999/0x2fb0 [ 575.584905][T26725] do_syscall_64+0xd2/0x200 [ 575.584958][T26725] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 575.584985][T26725] ? clear_bhb_loop+0x40/0x90 [ 575.585076][T26725] ? clear_bhb_loop+0x40/0x90 [ 575.585098][T26725] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 575.585179][T26725] RIP: 0033:0x7fd8747ae929 [ 575.585194][T26725] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 575.585213][T26725] RSP: 002b:00007fd872df6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 575.585232][T26725] RAX: ffffffffffffffda RBX: 00007fd8749d6080 RCX: 00007fd8747ae929 [ 575.585245][T26725] RDX: 0000000000000800 RSI: 0000200000000040 RDI: 0000000000000008 [ 575.585258][T26725] RBP: 00007fd874830b39 R08: 0000000000000000 R09: 0000000000000000 [ 575.585270][T26725] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 575.585284][T26725] R13: 0000000000000000 R14: 00007fd8749d6080 R15: 00007fff10617a88 [ 575.585303][T26725] [ 575.585312][T26725] memory: usage 307200kB, limit 307200kB, failcnt 10056 [ 575.943119][T26725] memory+swap: usage 307408kB, limit 9007199254740988kB, failcnt 0 [ 575.951043][T26725] kmem: usage 307176kB, limit 9007199254740988kB, failcnt 0 [ 575.958401][T26725] Memory cgroup stats for /syz0: [ 575.959014][T26763] netlink: 100 bytes leftover after parsing attributes in process `syz.5.8636'. [ 575.959093][T26725] cache 0 [ 575.976002][T26725] rss 0 [ 575.978801][T26725] shmem 0 [ 575.981776][T26725] mapped_file 0 [ 575.985253][T26725] dirty 0 [ 575.988232][T26725] writeback 0 [ 575.991582][T26725] workingset_refault_anon 1825 [ 575.996378][T26725] workingset_refault_file 4360 [ 576.001144][T26725] swap 212992 [ 576.004437][T26725] swapcached 8192 [ 576.008101][T26725] nr_memmap_boot_pages 634835 [ 576.012795][T26725] pgpgin 634829 [ 576.016295][T26725] pglazyfree 827019 [ 576.020112][T26725] pgfault 1186 [ 576.023578][T26725] a_other 8192 [ 576.026985][T26725] inactive_anon 0 [ 576.030635][T26725] active_anon 16384 [ 576.034476][T26725] inactive_file 0 [ 576.038204][T26725] active_file 0 [ 576.041711][T26725] hierarchical_memory_limit 314572800 [ 576.047146][T26725] hierarchical_memsw_limit 9223372036854771712 [ 576.053342][T26725] total_cache 0 [ 576.056840][T26725] total_rss 0 [ 576.060132][T26725] total_shmem 0 [ 576.063674][T26725] total_mapped_file 0 [ 576.067712][T26725] total_dirty 0 [ 576.071181][T26725] total_writeback 0 [ 576.075066][T26725] total_workingset_refault_anon 1825 [ 576.080385][T26725] total_workingset_refault_file 4360 [ 576.085687][T26725] total_swap 212992 [ 576.089527][T26725] total_swapcached 8192 [ 576.093677][T26725] total_nr_memmap_boot_pages 634835 [ 576.095900][ T29] audit: type=1326 audit(1749289225.900:36766): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26769 comm="syz.4.8639" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f556f70e929 code=0x7ffc0000 [ 576.098932][T26725] total_pgpgin 634829 [ 576.122538][ T29] audit: type=1326 audit(1749289225.900:36767): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26769 comm="syz.4.8639" exe="/root/syz-executor" sig=0 arch=c000003e syscall=148 compat=0 ip=0x7f556f70e929 code=0x7ffc0000 [ 576.126493][T26725] total_pglazyfree 827026 [ 576.150018][ T29] audit: type=1326 audit(1749289225.900:36768): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26769 comm="syz.4.8639" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f556f70e929 code=0x7ffc0000 [ 576.154327][T26725] total_pgfault 1186 [ 576.154339][T26725] total_a_other 8192 [ 576.177905][ T29] audit: type=1326 audit(1749289225.900:36769): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26769 comm="syz.4.8639" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f556f70e929 code=0x7ffc0000 [ 576.181753][T26725] total_inactive_anon 0 [ 576.185707][ T29] audit: type=1326 audit(1749289225.900:36770): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26769 comm="syz.4.8639" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f556f70e929 code=0x7ffc0000 [ 576.185736][ T29] audit: type=1326 audit(1749289225.900:36771): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26769 comm="syz.4.8639" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f556f70e929 code=0x7ffc0000 [ 576.185761][ T29] audit: type=1326 audit(1749289225.900:36772): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26769 comm="syz.4.8639" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f556f70e929 code=0x7ffc0000 [ 576.209190][T26725] total_active_anon 16384 [ 576.209203][T26725] total_inactive_file 0 [ 576.292730][T26725] total_active_file 0 [ 576.296956][T26725] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz0,task_memcg=/syz0,task=syz.0.8621,pid=26720,uid=0 [ 576.311794][T26725] Memory cgroup out of memory: Killed process 26720 (syz.0.8621) total-vm:93884kB, anon-rss:936kB, file-rss:22376kB, shmem-rss:0kB, UID:0 pgtables:124kB oom_score_adj:1000 [ 576.686789][T26788] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8643'. [ 576.695868][T26788] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8643'. [ 576.729693][T26786] netlink: 'syz.3.8643': attribute type 4 has an invalid length. [ 576.761066][T26786] netlink: 'syz.3.8643': attribute type 4 has an invalid length. [ 576.938003][T26800] FAULT_INJECTION: forcing a failure. [ 576.938003][T26800] name failslab, interval 1, probability 0, space 0, times 0 [ 576.950724][T26800] CPU: 1 UID: 0 PID: 26800 Comm: syz.3.8648 Not tainted 6.15.0-syzkaller-13473-gc0c9379f235d #0 PREEMPT(voluntary) [ 576.950824][T26800] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 576.950836][T26800] Call Trace: [ 576.950843][T26800] [ 576.950888][T26800] __dump_stack+0x1d/0x30 [ 576.950914][T26800] dump_stack_lvl+0xe8/0x140 [ 576.950973][T26800] dump_stack+0x15/0x1b [ 576.950992][T26800] should_fail_ex+0x265/0x280 [ 576.951079][T26800] should_failslab+0x8c/0xb0 [ 576.951107][T26800] __kmalloc_noprof+0xa5/0x3e0 [ 576.951134][T26800] ? genl_family_rcv_msg_attrs_parse+0x75/0x190 [ 576.951247][T26800] genl_family_rcv_msg_attrs_parse+0x75/0x190 [ 576.951289][T26800] genl_family_rcv_msg_doit+0x48/0x1b0 [ 576.951327][T26800] ? security_capable+0x83/0x90 [ 576.951363][T26800] ? ns_capable+0x7d/0xb0 [ 576.951502][T26800] genl_rcv_msg+0x422/0x460 [ 576.951537][T26800] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 576.951577][T26800] netlink_rcv_skb+0x123/0x220 [ 576.951599][T26800] ? __pfx_genl_rcv_msg+0x10/0x10 [ 576.951646][T26800] genl_rcv+0x28/0x40 [ 576.951713][T26800] netlink_unicast+0x5a1/0x670 [ 576.951760][T26800] netlink_sendmsg+0x58b/0x6b0 [ 576.951783][T26800] ? __pfx_netlink_sendmsg+0x10/0x10 [ 576.951805][T26800] __sock_sendmsg+0x145/0x180 [ 576.951887][T26800] ____sys_sendmsg+0x31e/0x4e0 [ 576.951978][T26800] ___sys_sendmsg+0x17b/0x1d0 [ 576.952015][T26800] __x64_sys_sendmsg+0xd4/0x160 [ 576.952105][T26800] x64_sys_call+0x2999/0x2fb0 [ 576.952132][T26800] do_syscall_64+0xd2/0x200 [ 576.952159][T26800] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 576.952192][T26800] ? clear_bhb_loop+0x40/0x90 [ 576.952229][T26800] ? clear_bhb_loop+0x40/0x90 [ 576.952251][T26800] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 576.952312][T26800] RIP: 0033:0x7f0d80b3e929 [ 576.952337][T26800] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 576.952360][T26800] RSP: 002b:00007f0d7f1a7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 576.952383][T26800] RAX: ffffffffffffffda RBX: 00007f0d80d65fa0 RCX: 00007f0d80b3e929 [ 576.952435][T26800] RDX: 0000000000000040 RSI: 00002000000001c0 RDI: 0000000000000006 [ 576.952451][T26800] RBP: 00007f0d7f1a7090 R08: 0000000000000000 R09: 0000000000000000 [ 576.952466][T26800] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 576.952480][T26800] R13: 0000000000000000 R14: 00007f0d80d65fa0 R15: 00007ffc322e98f8 [ 576.952504][T26800] [ 577.006447][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 577.818206][T26818] chnl_net:caif_netlink_parms(): no params data found [ 577.896762][T26818] bridge0: port 1(bridge_slave_0) entered blocking state [ 577.903898][T26818] bridge0: port 1(bridge_slave_0) entered disabled state [ 577.917827][T26818] bridge_slave_0: entered allmulticast mode [ 577.924387][T26818] bridge_slave_0: entered promiscuous mode [ 577.931127][T26818] bridge0: port 2(bridge_slave_1) entered blocking state [ 577.938244][T26818] bridge0: port 2(bridge_slave_1) entered disabled state [ 577.945467][T26818] bridge_slave_1: entered allmulticast mode [ 577.952085][T26818] bridge_slave_1: entered promiscuous mode [ 578.048401][T26818] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 578.059272][T26818] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 578.433108][T26818] team0: Port device team_slave_0 added [ 578.505546][T26818] team0: Port device team_slave_1 added [ 578.538126][T26878] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 578.550816][T26818] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 578.557989][T26818] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 578.584077][T26818] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 578.595923][T26818] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 578.602969][T26818] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 578.629184][T26818] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 578.684783][T26818] hsr_slave_0: entered promiscuous mode [ 578.695949][T26818] hsr_slave_1: entered promiscuous mode [ 578.702365][T26818] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 578.724338][T26818] Cannot create hsr debugfs directory [ 578.816185][T26897] loop1: detected capacity change from 0 to 512 [ 578.848360][T26897] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 578.863166][T26897] ext4 filesystem being mounted at /535/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 578.914473][T26818] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 579.017957][T19329] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 579.029127][T26818] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 579.109781][T26818] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 579.111328][T26915] sd 0:0:1:0: device reset [ 579.178847][T26818] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 579.242422][T26925] __nla_validate_parse: 3 callbacks suppressed [ 579.242473][T26925] netlink: 60 bytes leftover after parsing attributes in process `syz.4.8691'. [ 579.268739][T26923] netlink: 24 bytes leftover after parsing attributes in process `syz.1.8692'. [ 579.281608][T26818] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 579.312215][T26818] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 579.334324][T26818] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 579.345128][T26818] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 579.512102][T26946] netlink: 4 bytes leftover after parsing attributes in process `syz.1.8698'. [ 579.551117][T26818] 8021q: adding VLAN 0 to HW filter on device bond0 [ 579.578077][T26818] 8021q: adding VLAN 0 to HW filter on device team0 [ 579.580443][T26954] FAULT_INJECTION: forcing a failure. [ 579.580443][T26954] name failslab, interval 1, probability 0, space 0, times 0 [ 579.590647][T26951] netlink: 'syz.4.8700': attribute type 4 has an invalid length. [ 579.597504][T26954] CPU: 0 UID: 0 PID: 26954 Comm: syz.5.8701 Not tainted 6.15.0-syzkaller-13473-gc0c9379f235d #0 PREEMPT(voluntary) [ 579.597593][T26954] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 579.597609][T26954] Call Trace: [ 579.597616][T26954] [ 579.597625][T26954] __dump_stack+0x1d/0x30 [ 579.597650][T26954] dump_stack_lvl+0xe8/0x140 [ 579.597674][T26954] dump_stack+0x15/0x1b [ 579.597695][T26954] should_fail_ex+0x265/0x280 [ 579.597792][T26954] ? nfnetlink_rcv+0x53d/0x1690 [ 579.597825][T26954] should_failslab+0x8c/0xb0 [ 579.597854][T26954] __kmalloc_cache_noprof+0x4c/0x320 [ 579.597889][T26954] ? mutex_lock+0xd/0x30 [ 579.597939][T26954] nfnetlink_rcv+0x53d/0x1690 [ 579.597975][T26954] ? __kfree_skb+0x109/0x150 [ 579.598052][T26954] ? dev_hard_start_xmit+0x3b0/0x3e0 [ 579.598080][T26954] ? __dev_queue_xmit+0x11c0/0x1fb0 [ 579.598164][T26954] ? __dev_queue_xmit+0x182/0x1fb0 [ 579.598192][T26954] ? __account_obj_stock+0x211/0x350 [ 579.598243][T26954] ? ref_tracker_free+0x37d/0x3e0 [ 579.598305][T26954] netlink_unicast+0x5a1/0x670 [ 579.598407][T26954] netlink_sendmsg+0x58b/0x6b0 [ 579.598440][T26954] ? __pfx_netlink_sendmsg+0x10/0x10 [ 579.598471][T26954] __sock_sendmsg+0x145/0x180 [ 579.598545][T26954] ____sys_sendmsg+0x31e/0x4e0 [ 579.598597][T26954] ___sys_sendmsg+0x17b/0x1d0 [ 579.598644][T26954] __x64_sys_sendmsg+0xd4/0x160 [ 579.598679][T26954] x64_sys_call+0x2999/0x2fb0 [ 579.598707][T26954] do_syscall_64+0xd2/0x200 [ 579.598743][T26954] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 579.598779][T26954] ? clear_bhb_loop+0x40/0x90 [ 579.598808][T26954] ? clear_bhb_loop+0x40/0x90 [ 579.598883][T26954] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 579.598958][T26954] RIP: 0033:0x7fc3ed5ee929 [ 579.598978][T26954] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 579.599001][T26954] RSP: 002b:00007fc3ebc57038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 579.599026][T26954] RAX: ffffffffffffffda RBX: 00007fc3ed815fa0 RCX: 00007fc3ed5ee929 [ 579.599042][T26954] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000003 [ 579.599058][T26954] RBP: 00007fc3ebc57090 R08: 0000000000000000 R09: 0000000000000000 [ 579.599150][T26954] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 579.599166][T26954] R13: 0000000000000000 R14: 00007fc3ed815fa0 R15: 00007ffd12b318b8 [ 579.599190][T26954] [ 579.653913][T26818] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 579.658619][T26951] netlink: 17 bytes leftover after parsing attributes in process `syz.4.8700'. [ 579.663473][T26956] loop1: detected capacity change from 0 to 512 [ 579.668601][T26818] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 579.670738][T26196] bridge0: port 1(bridge_slave_0) entered blocking state [ 579.814676][T26956] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 579.821954][T26196] bridge0: port 1(bridge_slave_0) entered forwarding state [ 579.855275][T26956] EXT4-fs (loop1): 1 truncate cleaned up [ 579.872059][T26196] bridge0: port 2(bridge_slave_1) entered blocking state [ 579.901614][T26956] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 579.902032][T26196] bridge0: port 2(bridge_slave_1) entered forwarding state [ 579.951945][ T29] kauditd_printk_skb: 474 callbacks suppressed [ 579.951961][ T29] audit: type=1326 audit(1749289229.800:37247): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26950 comm="syz.4.8700" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f556f70e929 code=0x7ffc0000 [ 579.962254][T26969] FAULT_INJECTION: forcing a failure. [ 579.962254][T26969] name failslab, interval 1, probability 0, space 0, times 0 [ 579.982870][ T29] audit: type=1326 audit(1749289229.800:37248): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26950 comm="syz.4.8700" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f556f70e929 code=0x7ffc0000 [ 579.994586][T26969] CPU: 0 UID: 0 PID: 26969 Comm: syz.5.8704 Not tainted 6.15.0-syzkaller-13473-gc0c9379f235d #0 PREEMPT(voluntary) [ 579.994667][T26969] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 579.994682][T26969] Call Trace: [ 579.994690][T26969] [ 579.994700][T26969] __dump_stack+0x1d/0x30 [ 579.994766][T26969] dump_stack_lvl+0xe8/0x140 [ 579.994793][T26969] dump_stack+0x15/0x1b [ 579.994816][T26969] should_fail_ex+0x265/0x280 [ 579.994843][T26969] should_failslab+0x8c/0xb0 [ 579.994874][T26969] kmem_cache_alloc_lru_noprof+0x55/0x310 [ 579.994924][T26969] ? __d_alloc+0x3d/0x350 [ 579.994964][T26969] __d_alloc+0x3d/0x350 [ 579.995000][T26969] d_alloc_parallel+0x53/0xc40 [ 579.995110][T26969] ? __rcu_read_unlock+0x4f/0x70 [ 579.995139][T26969] ? __d_lookup+0x316/0x340 [ 579.995184][T26969] ? try_to_unlazy+0x25e/0x3a0 [ 579.995223][T26969] path_openat+0x6b5/0x2170 [ 579.995300][T26969] do_filp_open+0x109/0x230 [ 579.995421][T26969] do_sys_openat2+0xa6/0x110 [ 579.995461][T26969] __x64_sys_creat+0x65/0x90 [ 579.995502][T26969] x64_sys_call+0x114d/0x2fb0 [ 579.995573][T26969] do_syscall_64+0xd2/0x200 [ 579.995633][T26969] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 579.995706][T26969] ? clear_bhb_loop+0x40/0x90 [ 579.995734][T26969] ? clear_bhb_loop+0x40/0x90 [ 579.995762][T26969] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 579.995823][T26969] RIP: 0033:0x7fc3ed5ee929 [ 579.995844][T26969] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 579.995866][T26969] RSP: 002b:00007fc3ebc57038 EFLAGS: 00000246 ORIG_RAX: 0000000000000055 [ 579.995943][T26969] RAX: ffffffffffffffda RBX: 00007fc3ed815fa0 RCX: 00007fc3ed5ee929 [ 579.995959][T26969] RDX: 0000000000000000 RSI: 0000000000000052 RDI: 0000200000000e00 [ 579.995974][T26969] RBP: 00007fc3ebc57090 R08: 0000000000000000 R09: 0000000000000000 [ 579.995990][T26969] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 579.996005][T26969] R13: 0000000000000000 R14: 00007fc3ed815fa0 R15: 00007ffd12b318b8 [ 579.996030][T26969] [ 580.103460][T26818] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 580.162751][T26977] netlink: 24 bytes leftover after parsing attributes in process `syz.5.8705'. [ 580.235026][ T29] audit: type=1326 audit(1749289230.060:37249): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26978 comm="syz.4.8706" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f556f70e929 code=0x7ffc0000 [ 580.272471][ T29] audit: type=1326 audit(1749289230.070:37250): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26978 comm="syz.4.8706" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f556f70e929 code=0x7ffc0000 [ 580.296165][ T29] audit: type=1326 audit(1749289230.070:37251): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26978 comm="syz.4.8706" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f556f70e929 code=0x7ffc0000 [ 580.305727][T26980] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 580.319855][ T29] audit: type=1326 audit(1749289230.070:37252): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26978 comm="syz.4.8706" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7f556f70e929 code=0x7ffc0000 [ 580.320015][T26253] bridge_slave_1: left allmulticast mode [ 580.320310][T26253] bridge_slave_1: left promiscuous mode [ 580.320699][T26253] bridge0: port 2(bridge_slave_1) entered disabled state [ 580.374344][T26980] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 580.383893][T26253] bridge_slave_0: left promiscuous mode [ 580.383979][ T29] audit: type=1326 audit(1749289230.230:37253): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26978 comm="syz.4.8706" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f556f70e929 code=0x7ffc0000 [ 580.389745][T26253] bridge0: port 1(bridge_slave_0) entered disabled state [ 580.413219][ T29] audit: type=1326 audit(1749289230.230:37254): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26978 comm="syz.4.8706" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f556f70e929 code=0x7ffc0000 [ 580.424492][T19329] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 580.450487][ T29] audit: type=1326 audit(1749289230.300:37255): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26978 comm="syz.4.8706" exe="/root/syz-executor" sig=0 arch=c000003e syscall=224 compat=0 ip=0x7f556f70e929 code=0x7ffc0000 [ 580.485598][ T29] audit: type=1326 audit(1749289230.330:37256): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26978 comm="syz.4.8706" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f556f70e929 code=0x7ffc0000 [ 580.523215][T26984] loop1: detected capacity change from 0 to 512 [ 580.532158][T26984] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 580.544186][T26984] EXT4-fs (loop1): 1 truncate cleaned up [ 580.551449][T26984] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 580.578855][T19329] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 580.605518][T26253] bond0 (unregistering): (slave 77): Releasing backup interface [ 580.614967][T26253] : left promiscuous mode [ 580.630410][T26253] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 580.646768][T26253] bond_slave_1: left promiscuous mode [ 580.661433][T26253] bond0 (unregistering): Released all slaves [ 580.714547][T26993] netlink: 4 bytes leftover after parsing attributes in process `syz.5.8711'. [ 580.780858][T26253] hsr_slave_0: left promiscuous mode [ 580.791390][T26253] hsr_slave_1: left promiscuous mode [ 580.827644][T26253] batman_adv: batadv0: Removing interface: team0 [ 580.854035][T26253] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 580.861591][T26253] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 580.894502][T26253] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 580.902069][T26253] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 580.931277][T26253] veth1_macvtap: left promiscuous mode [ 580.951047][T26253] veth0_macvtap: left promiscuous mode [ 580.956935][T26253] veth1_vlan: left promiscuous mode [ 580.964342][T26253] veth0_vlan: left promiscuous mode [ 581.213320][T26253] team0 (unregistering): Port device team_slave_1 removed [ 581.240593][T26253] team0 (unregistering): Port device team_slave_0 removed [ 581.251355][T27024] RDS: rds_bind could not find a transport for fc02::1, load rds_tcp or rds_rdma? [ 581.376578][T26818] veth0_vlan: entered promiscuous mode [ 581.390632][T26818] veth1_vlan: entered promiscuous mode [ 581.444917][T26818] veth0_macvtap: entered promiscuous mode [ 581.455566][T27028] netlink: 4 bytes leftover after parsing attributes in process `syz.4.8722'. [ 581.458913][T26818] veth1_macvtap: entered promiscuous mode [ 581.470861][T26818] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 581.472349][T26818] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 581.473310][T26818] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 581.473347][T26818] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 581.473437][T26818] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 581.473502][T26818] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 581.581355][T27035] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 581.581571][T27035] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 581.669380][T26253] IPVS: stop unused estimator thread 0... [ 581.740181][T27043] sd 0:0:1:0: device reset [ 582.316514][T27051] x_tables: ip6_tables: rpfilter match: used from hooks FORWARD, but only valid from PREROUTING [ 582.456098][T26253] netdevsim netdevsim0 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 582.466046][T26253] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 582.593042][T26253] netdevsim netdevsim0 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 582.602922][T26253] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 582.659074][T26253] netdevsim netdevsim0 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 582.668879][T26253] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 582.759049][T26253] netdevsim netdevsim0 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 582.769096][T26253] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 583.008161][T26253] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 583.018461][T26253] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 583.029366][T26253] bond0 (unregistering): Released all slaves [ 583.060065][T26253] tipc: Disabling bearer [ 583.065392][T26253] tipc: Left network mode [ 583.121831][T26253] hsr_slave_0: left promiscuous mode [ 583.146488][T26253] hsr_slave_1: left promiscuous mode [ 583.152232][T26253] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 583.159932][T26253] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 583.172455][T26253] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 583.179954][T26253] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 583.210109][T26253] veth1_macvtap: left promiscuous mode [ 583.215685][T26253] veth0_macvtap: left promiscuous mode [ 583.230795][T26253] veth1_vlan: left promiscuous mode [ 583.236310][T26253] veth0_vlan: left promiscuous mode [ 583.324752][T26253] team0 (unregistering): Port device team_slave_1 removed [ 583.335879][T26253] team0 (unregistering): Port device team_slave_0 removed [ 583.399064][T27094] netlink: 24 bytes leftover after parsing attributes in process `syz.1.8743'. [ 583.444761][T27066] chnl_net:caif_netlink_parms(): no params data found [ 583.468713][T27102] rdma_op ffff88816544c980 conn xmit_rdma 0000000000000000 [ 583.535479][T27066] bridge0: port 1(bridge_slave_0) entered blocking state [ 583.542666][T27066] bridge0: port 1(bridge_slave_0) entered disabled state [ 583.556239][T27066] bridge_slave_0: entered allmulticast mode [ 583.563305][T27066] bridge_slave_0: entered promiscuous mode [ 583.576991][T27066] bridge0: port 2(bridge_slave_1) entered blocking state [ 583.584179][T27066] bridge0: port 2(bridge_slave_1) entered disabled state [ 583.593107][T27066] bridge_slave_1: entered allmulticast mode [ 583.599823][T27066] bridge_slave_1: entered promiscuous mode [ 583.623094][T27066] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 583.637161][T27066] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 583.667872][T27066] team0: Port device team_slave_0 added [ 583.674597][T27066] team0: Port device team_slave_1 added [ 583.677847][T27117] netlink: 4 bytes leftover after parsing attributes in process `syz.5.8750'. [ 583.703913][T27066] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 583.710998][T27066] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 583.737102][T27066] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 583.769582][T27066] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 583.776649][T27066] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 583.803066][T27066] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 583.880466][T27066] hsr_slave_0: entered promiscuous mode [ 583.890992][T27066] hsr_slave_1: entered promiscuous mode [ 583.907434][T27066] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 583.915099][T27066] Cannot create hsr debugfs directory [ 583.921936][T26253] IPVS: stop unused estimator thread 0... [ 584.014306][T26253] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 584.291407][T26253] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 584.359361][T26253] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 584.403135][T27127] chnl_net:caif_netlink_parms(): no params data found [ 584.439868][T27160] netlink: 8 bytes leftover after parsing attributes in process `syz.5.8761'. [ 584.448869][T27160] netlink: 8 bytes leftover after parsing attributes in process `syz.5.8761'. [ 584.470037][T26253] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 584.501249][T27066] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 584.510894][T27159] netlink: 'syz.5.8761': attribute type 4 has an invalid length. [ 584.532066][T27066] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 584.546888][T26253] bridge_slave_1: left allmulticast mode [ 584.552621][T26253] bridge_slave_1: left promiscuous mode [ 584.558513][T26253] bridge0: port 2(bridge_slave_1) entered disabled state [ 584.607906][T26253] bridge_slave_0: left allmulticast mode [ 584.613596][T26253] bridge_slave_0: left promiscuous mode [ 584.619304][T26253] bridge0: port 1(bridge_slave_0) entered disabled state [ 584.629949][T27164] netlink: 'syz.5.8761': attribute type 4 has an invalid length. [ 584.748931][T26253] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 584.761790][T26253] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 584.776968][T26253] bond0 (unregistering): Released all slaves [ 584.811960][T27066] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 584.822420][T27066] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 584.864222][T27127] bridge0: port 1(bridge_slave_0) entered blocking state [ 584.871516][T27127] bridge0: port 1(bridge_slave_0) entered disabled state [ 584.899283][T27127] bridge_slave_0: entered allmulticast mode [ 584.915998][T27127] bridge_slave_0: entered promiscuous mode [ 584.948850][T26253] hsr_slave_0: left promiscuous mode [ 584.968010][T26253] hsr_slave_1: left promiscuous mode [ 584.973850][T26253] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 584.981456][T26253] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 585.012684][T26253] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 585.020204][T26253] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 585.043441][T27177] loop1: detected capacity change from 0 to 2048 [ 585.051973][T26253] veth1_macvtap: left promiscuous mode [ 585.057662][T26253] veth0_macvtap: left promiscuous mode [ 585.063653][T26253] veth1_vlan: left promiscuous mode [ 585.070639][T26253] veth0_vlan: left promiscuous mode [ 585.106126][T27177] EXT4-fs (loop1): failed to initialize system zone (-117) [ 585.113422][T27177] EXT4-fs (loop1): mount failed [ 585.120673][T27183] netlink: 'syz.4.8763': attribute type 4 has an invalid length. [ 585.190201][T27185] netlink: 4 bytes leftover after parsing attributes in process `syz.5.8765'. [ 585.200682][T26253] team0 (unregistering): Port device team_slave_1 removed [ 585.211946][T26253] team0 (unregistering): Port device team_slave_0 removed [ 585.227247][T27177] x_tables: ip6_tables: rpfilter match: used from hooks FORWARD, but only valid from PREROUTING [ 585.240657][T27177] loop1: detected capacity change from 0 to 164 [ 585.251900][T27177] bio_check_eod: 104 callbacks suppressed [ 585.251919][T27177] syz.1.8762: attempt to access beyond end of device [ 585.251919][T27177] loop1: rw=524288, sector=263328, nr_sectors = 4 limit=164 [ 585.271959][T27177] syz.1.8762: attempt to access beyond end of device [ 585.271959][T27177] loop1: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 585.272566][T27127] bridge0: port 2(bridge_slave_1) entered blocking state [ 585.292593][T27127] bridge0: port 2(bridge_slave_1) entered disabled state [ 585.300821][T27127] bridge_slave_1: entered allmulticast mode [ 585.308629][T27127] bridge_slave_1: entered promiscuous mode [ 585.353433][T27127] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 585.375032][T27127] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 585.400164][T27066] 8021q: adding VLAN 0 to HW filter on device bond0 [ 585.419094][T27190] vhci_hcd: invalid port number 96 [ 585.424249][T27190] vhci_hcd: default hub control req: 0000 vfffc i0060 l0 [ 585.433627][T27127] team0: Port device team_slave_0 added [ 585.440594][T27127] team0: Port device team_slave_1 added [ 585.506208][T27127] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 585.513279][T27127] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 585.539334][T27127] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 585.587388][T27066] 8021q: adding VLAN 0 to HW filter on device team0 [ 585.612730][T27127] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 585.619882][T27127] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 585.646079][T27127] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 585.685121][T26248] bridge0: port 1(bridge_slave_0) entered blocking state [ 585.692253][T26248] bridge0: port 1(bridge_slave_0) entered forwarding state [ 585.772659][T26248] bridge0: port 2(bridge_slave_1) entered blocking state [ 585.779794][T26248] bridge0: port 2(bridge_slave_1) entered forwarding state [ 585.803395][T27066] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 585.813837][T27066] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 585.999430][T27127] hsr_slave_0: entered promiscuous mode [ 586.017067][T27127] hsr_slave_1: entered promiscuous mode [ 586.042576][T27127] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 586.095868][T27127] Cannot create hsr debugfs directory [ 586.202278][T27066] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 586.371662][T27066] veth0_vlan: entered promiscuous mode [ 586.380580][T27066] veth1_vlan: entered promiscuous mode [ 586.401200][T27066] veth0_macvtap: entered promiscuous mode [ 586.412190][T27066] veth1_macvtap: entered promiscuous mode [ 586.424645][T27066] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 586.438277][T27066] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 586.454302][T27066] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 586.463272][T27066] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 586.472164][T27066] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 586.480963][T27066] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 586.524234][T27127] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 586.550951][T27127] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 586.580054][T27127] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 586.589636][T27127] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 586.626914][ T29] kauditd_printk_skb: 229 callbacks suppressed [ 586.626927][ T29] audit: type=1326 audit(1749289236.480:37486): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27237 comm="syz.0.8733" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f133dd8e929 code=0x7ffc0000 [ 586.674747][ T29] audit: type=1326 audit(1749289236.510:37487): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27237 comm="syz.0.8733" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f133dd8e929 code=0x7ffc0000 [ 586.698587][ T29] audit: type=1326 audit(1749289236.510:37488): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27237 comm="syz.0.8733" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f133dd8e929 code=0x7ffc0000 [ 586.722248][ T29] audit: type=1326 audit(1749289236.510:37489): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27237 comm="syz.0.8733" exe="/root/syz-executor" sig=0 arch=c000003e syscall=461 compat=0 ip=0x7f133dd8e929 code=0x7ffc0000 [ 586.745896][ T29] audit: type=1326 audit(1749289236.510:37490): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27237 comm="syz.0.8733" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f133dd8e929 code=0x7ffc0000 [ 586.845615][T27246] loop0: detected capacity change from 0 to 512 [ 586.973579][T27246] EXT4-fs (loop0): 1 orphan inode deleted [ 586.983975][T27246] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 587.006107][T26248] Quota error (device loop0): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 587.016018][T26248] EXT4-fs error (device loop0): ext4_release_dquot:6969: comm kworker/u8:65: Failed to release dquot type 1 [ 587.057391][T27246] ext4 filesystem being mounted at /1/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 587.194703][T27127] 8021q: adding VLAN 0 to HW filter on device bond0 [ 587.202425][T27260] netlink: 4 bytes leftover after parsing attributes in process `syz.5.8778'. [ 587.206384][T27127] 8021q: adding VLAN 0 to HW filter on device team0 [ 587.223049][T26244] bridge0: port 1(bridge_slave_0) entered blocking state [ 587.230158][T26244] bridge0: port 1(bridge_slave_0) entered forwarding state [ 587.267475][T26244] bridge0: port 2(bridge_slave_1) entered blocking state [ 587.274598][T26244] bridge0: port 2(bridge_slave_1) entered forwarding state [ 587.285625][T27066] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 587.367218][T27127] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 587.473567][ T29] audit: type=1326 audit(1749289237.320:37491): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27277 comm="syz.4.8784" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f556f7058e7 code=0x7ffc0000 [ 587.505799][ T29] audit: type=1326 audit(1749289237.320:37492): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27277 comm="syz.4.8784" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f556f6aab19 code=0x7ffc0000 [ 587.529472][ T29] audit: type=1326 audit(1749289237.320:37493): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27277 comm="syz.4.8784" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f556f7058e7 code=0x7ffc0000 [ 587.553058][ T29] audit: type=1326 audit(1749289237.320:37494): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27277 comm="syz.4.8784" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f556f6aab19 code=0x7ffc0000 [ 587.596385][T26248] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 587.601753][T27281] loop1: detected capacity change from 0 to 512 [ 587.638728][T26248] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 587.649363][T27284] rdma_op ffff888123fcc580 conn xmit_rdma 0000000000000000 [ 587.662669][T26248] bond0 (unregistering): Released all slaves [ 587.687917][T27281] EXT4-fs warning (device loop1): ext4_enable_quotas:7168: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 587.705715][T27281] EXT4-fs (loop1): mount failed [ 587.705813][T27270] loop0: detected capacity change from 0 to 1024 [ 587.801793][T27270] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 587.834553][T26248] hsr_slave_0: left promiscuous mode [ 587.840705][T26248] hsr_slave_1: left promiscuous mode [ 587.904350][ T51] smc: removing ib device syz! [ 587.980448][T27127] veth0_vlan: entered promiscuous mode [ 588.002158][T27127] veth1_vlan: entered promiscuous mode [ 588.034752][T27127] veth0_macvtap: entered promiscuous mode [ 588.044105][T27127] veth1_macvtap: entered promiscuous mode [ 588.071957][T27127] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 588.090329][T27127] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 588.113783][T27127] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 588.122688][T27127] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 588.131506][T27127] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 588.140358][T27127] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 588.202633][T27066] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 588.561517][T27316] netlink: 16 bytes leftover after parsing attributes in process `syz.3.8791'. [ 588.600498][T27320] netlink: 4 bytes leftover after parsing attributes in process `syz.5.8793'. [ 589.085934][T27338] netlink: 24 bytes leftover after parsing attributes in process `syz.1.8800'. [ 589.164407][T27345] sd 0:0:1:0: device reset [ 589.235581][T27354] netlink: 24 bytes leftover after parsing attributes in process `syz.4.8806'. [ 589.253570][T26223] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 589.339475][T26223] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 589.395192][T26223] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 589.469451][T26223] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 589.600726][T27341] chnl_net:caif_netlink_parms(): no params data found [ 589.635347][T26223] batadv1: left allmulticast mode [ 589.640493][T26223] batadv1: left promiscuous mode [ 589.645570][T26223] bridge0: port 3(batadv1) entered disabled state [ 589.697279][T26223] bridge_slave_1: left allmulticast mode [ 589.702984][T26223] bridge_slave_1: left promiscuous mode [ 589.708869][T26223] bridge0: port 2(bridge_slave_1) entered disabled state [ 589.759247][T26223] bridge_slave_0: left allmulticast mode [ 589.764946][T26223] bridge_slave_0: left promiscuous mode [ 589.770744][T26223] bridge0: port 1(bridge_slave_0) entered disabled state [ 590.010271][T26223] bond0 (unregistering): (slave 77): Releasing backup interface [ 590.025524][T26223] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 590.046198][T26223] bond0 (unregistering): Released all slaves [ 590.066614][T27385] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 590.113358][T26223] hsr_slave_0: left promiscuous mode [ 590.123836][T26223] hsr_slave_1: left promiscuous mode [ 590.142125][T26223] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 590.149638][T26223] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 590.186715][T26223] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 590.194169][T26223] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 590.226050][T26223] veth1_macvtap: left promiscuous mode [ 590.238165][T26223] veth0_macvtap: left promiscuous mode [ 590.268857][T26223] veth1_vlan: left promiscuous mode [ 590.285892][T26223] veth0_vlan: left promiscuous mode [ 590.404389][T26223] team0 (unregistering): Port device team_slave_1 removed [ 590.414481][T26223] team0 (unregistering): Port device team_slave_0 removed [ 590.510966][T27341] bridge0: port 1(bridge_slave_0) entered blocking state [ 590.518128][T27341] bridge0: port 1(bridge_slave_0) entered disabled state [ 590.546951][T27341] bridge_slave_0: entered allmulticast mode [ 590.557213][T27341] bridge_slave_0: entered promiscuous mode [ 590.574238][T27341] bridge0: port 2(bridge_slave_1) entered blocking state [ 590.581458][T27341] bridge0: port 2(bridge_slave_1) entered disabled state [ 590.610794][T27341] bridge_slave_1: entered allmulticast mode [ 590.627365][T27341] bridge_slave_1: entered promiscuous mode [ 590.658746][T27341] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 590.680853][T27341] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 590.724118][T27341] team0: Port device team_slave_0 added [ 590.731921][T27341] team0: Port device team_slave_1 added [ 590.775323][T27341] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 590.782386][T27341] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 590.808416][T27341] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 590.866619][T27341] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 590.873620][T27341] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 590.889932][T27409] x_tables: ip6_tables: TCPMSS target: only valid for protocol 6 [ 590.899710][T27341] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 591.059060][T27341] hsr_slave_0: entered promiscuous mode [ 591.065314][T27341] hsr_slave_1: entered promiscuous mode [ 591.075283][T27341] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 591.093818][T27341] Cannot create hsr debugfs directory [ 591.458789][T27414] netlink: 'syz.0.8826': attribute type 4 has an invalid length. [ 591.483613][T27414] netlink: 'syz.0.8826': attribute type 4 has an invalid length. [ 591.522235][T27414] FAULT_INJECTION: forcing a failure. [ 591.522235][T27414] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 591.535344][T27414] CPU: 0 UID: 0 PID: 27414 Comm: syz.0.8826 Not tainted 6.15.0-syzkaller-13473-gc0c9379f235d #0 PREEMPT(voluntary) [ 591.535446][T27414] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 591.535481][T27414] Call Trace: [ 591.535487][T27414] [ 591.535495][T27414] __dump_stack+0x1d/0x30 [ 591.535517][T27414] dump_stack_lvl+0xe8/0x140 [ 591.535541][T27414] dump_stack+0x15/0x1b [ 591.535560][T27414] should_fail_ex+0x265/0x280 [ 591.535584][T27414] should_fail+0xb/0x20 [ 591.535656][T27414] should_fail_usercopy+0x1a/0x20 [ 591.535701][T27414] _copy_to_user+0x20/0xa0 [ 591.535731][T27414] simple_read_from_buffer+0xb5/0x130 [ 591.535781][T27414] proc_fail_nth_read+0x100/0x140 [ 591.535803][T27414] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 591.535832][T27414] vfs_read+0x19d/0x6f0 [ 591.535868][T27414] ? __rcu_read_unlock+0x4f/0x70 [ 591.535891][T27414] ? __fget_files+0x184/0x1c0 [ 591.535945][T27414] ksys_read+0xda/0x1a0 [ 591.535969][T27414] __x64_sys_read+0x40/0x50 [ 591.535989][T27414] x64_sys_call+0x2d77/0x2fb0 [ 591.536036][T27414] do_syscall_64+0xd2/0x200 [ 591.536084][T27414] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 591.536135][T27414] ? clear_bhb_loop+0x40/0x90 [ 591.536226][T27414] ? clear_bhb_loop+0x40/0x90 [ 591.536248][T27414] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 591.536289][T27414] RIP: 0033:0x7f133dd8d33c [ 591.536305][T27414] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 591.536323][T27414] RSP: 002b:00007f133c3f7030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 591.536342][T27414] RAX: ffffffffffffffda RBX: 00007f133dfb5fa0 RCX: 00007f133dd8d33c [ 591.536421][T27414] RDX: 000000000000000f RSI: 00007f133c3f70a0 RDI: 0000000000000007 [ 591.536433][T27414] RBP: 00007f133c3f7090 R08: 0000000000000000 R09: 0000000000000000 [ 591.536445][T27414] R10: 00002000000008c0 R11: 0000000000000246 R12: 0000000000000001 [ 591.536457][T27414] R13: 0000000000000000 R14: 00007f133dfb5fa0 R15: 00007fff18dddc58 [ 591.536476][T27414] [ 591.753470][T27341] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 591.879084][T27341] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 591.898197][T27341] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 591.925243][T27341] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 591.935796][ T29] kauditd_printk_skb: 226 callbacks suppressed [ 591.942049][ T29] audit: type=1326 audit(1749289241.790:37720): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27408 comm="syz.4.8825" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f556f70e929 code=0x7ffc0000 [ 591.965801][ T29] audit: type=1326 audit(1749289241.790:37721): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27408 comm="syz.4.8825" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f556f70e929 code=0x7ffc0000 [ 592.075918][ T29] audit: type=1326 audit(1749289241.910:37722): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27408 comm="syz.4.8825" exe="/root/syz-executor" sig=0 arch=c000003e syscall=186 compat=0 ip=0x7f556f70e929 code=0x7ffc0000 [ 592.099762][ T29] audit: type=1326 audit(1749289241.910:37723): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27408 comm="syz.4.8825" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f556f70e929 code=0x7ffc0000 [ 592.123479][ T29] audit: type=1326 audit(1749289241.910:37724): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27408 comm="syz.4.8825" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f556f70e929 code=0x7ffc0000 [ 592.147141][ T29] audit: type=1326 audit(1749289241.910:37725): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27408 comm="syz.4.8825" exe="/root/syz-executor" sig=0 arch=c000003e syscall=222 compat=0 ip=0x7f556f70e929 code=0x7ffc0000 [ 592.170951][ T29] audit: type=1326 audit(1749289241.910:37726): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27408 comm="syz.4.8825" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f556f70e929 code=0x7ffc0000 [ 592.194755][ T29] audit: type=1326 audit(1749289241.910:37727): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27408 comm="syz.4.8825" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f556f70e929 code=0x7ffc0000 [ 592.213568][T27341] 8021q: adding VLAN 0 to HW filter on device bond0 [ 592.218534][ T29] audit: type=1326 audit(1749289241.910:37728): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27408 comm="syz.4.8825" exe="/root/syz-executor" sig=0 arch=c000003e syscall=311 compat=0 ip=0x7f556f70e929 code=0x7ffc0000 [ 592.248912][ T29] audit: type=1326 audit(1749289241.910:37729): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27408 comm="syz.4.8825" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f556f70e929 code=0x7ffc0000 [ 592.266242][T27341] 8021q: adding VLAN 0 to HW filter on device team0 [ 592.303763][ T51] bridge0: port 1(bridge_slave_0) entered blocking state [ 592.310957][ T51] bridge0: port 1(bridge_slave_0) entered forwarding state [ 592.343262][ T51] bridge0: port 2(bridge_slave_1) entered blocking state [ 592.350409][ T51] bridge0: port 2(bridge_slave_1) entered forwarding state [ 592.401582][T27341] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 592.412106][T27341] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 592.532972][ T31] dvmrp1 (unregistering): left allmulticast mode [ 592.567991][ T31] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 592.579081][ T31] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 592.588745][ T31] bond0 (unregistering): Released all slaves [ 592.641803][ T31] hsr_slave_0: left promiscuous mode [ 592.659726][ T31] hsr_slave_1: left promiscuous mode [ 592.680361][ T31] veth1_macvtap: left promiscuous mode [ 592.685930][ T31] veth0_macvtap: left promiscuous mode [ 592.691441][ T31] veth1_vlan: left promiscuous mode [ 592.697868][ T31] veth0_vlan: left promiscuous mode [ 592.954257][T27448] loop1: detected capacity change from 0 to 128 [ 592.963282][T27341] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 592.971057][T27448] FAT-fs (loop1): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 592.994155][T27444] 9pnet: Could not find request transport: r [ 593.012051][T27448] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 593.032123][T27453] rdma_op ffff8881281cbd80 conn xmit_rdma 0000000000000000 [ 593.132469][T27461] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=27461 comm=syz.3.8838 [ 593.157082][T27463] netlink: 4 bytes leftover after parsing attributes in process `syz.1.8839'. [ 593.270864][T27341] veth0_vlan: entered promiscuous mode [ 593.281606][T27341] veth1_vlan: entered promiscuous mode [ 593.318385][T27341] veth0_macvtap: entered promiscuous mode [ 593.328963][T27341] veth1_macvtap: entered promiscuous mode [ 593.341718][T27341] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 593.354304][T27341] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 593.382656][T27341] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 593.391477][T27341] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 593.400265][T27341] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 593.409163][T27341] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 593.448748][T27489] rdma_op ffff8881281c9980 conn xmit_rdma 0000000000000000 [ 593.681833][T27497] SELinux: security_context_str_to_sid (-Xܘ7.H\ %u@) failed with errno=-22 [ 593.780930][T27501] tmpfs: Bad value for 'mpol' [ 593.927685][T27504] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8849'. [ 593.936704][T27504] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8849'. [ 593.998526][T27503] netlink: 'syz.0.8849': attribute type 4 has an invalid length. [ 594.330071][T27500] 9pnet: Could not find request transport: r [ 595.121501][T27527] netlink: 32 bytes leftover after parsing attributes in process `syz.4.8856'. [ 595.313790][T27530] block device autoloading is deprecated and will be removed. [ 595.361384][T27535] rdma_op ffff8881281c9980 conn xmit_rdma 0000000000000000 [ 595.458548][T27542] batman_adv: batadv0: Adding interface: dummy0 [ 595.464842][T27542] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 595.496806][T27543] netlink: 8 bytes leftover after parsing attributes in process `syz.5.8861'. [ 595.505730][T27543] netlink: 8 bytes leftover after parsing attributes in process `syz.5.8861'. [ 595.512267][T27542] batman_adv: batadv0: Interface activated: dummy0 [ 595.584964][T27543] netlink: 'syz.5.8861': attribute type 4 has an invalid length. [ 595.593603][T27544] batadv0: mtu less than device minimum [ 595.599752][T27544] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 595.610650][T27544] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 595.621655][T27544] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 595.632421][T27544] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 595.643242][T27544] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 595.654097][T27544] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 595.665031][T27544] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 595.675792][T27544] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 595.686607][T27544] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 595.927939][T27553] 9pnet: Could not find request transport: r [ 596.362445][T27579] batadv_slave_0: entered promiscuous mode [ 596.369611][T27579] netlink: 4 bytes leftover after parsing attributes in process `syz.4.8874'. [ 596.378819][T27579] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 596.425208][T27578] FAULT_INJECTION: forcing a failure. [ 596.425208][T27578] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 596.438478][T27578] CPU: 0 UID: 0 PID: 27578 Comm: syz.3.8873 Not tainted 6.15.0-syzkaller-13473-gc0c9379f235d #0 PREEMPT(voluntary) [ 596.438520][T27578] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 596.438539][T27578] Call Trace: [ 596.438547][T27578] [ 596.438559][T27578] __dump_stack+0x1d/0x30 [ 596.438586][T27578] dump_stack_lvl+0xe8/0x140 [ 596.438623][T27578] dump_stack+0x15/0x1b [ 596.438645][T27578] should_fail_ex+0x265/0x280 [ 596.438672][T27578] should_fail+0xb/0x20 [ 596.438767][T27578] should_fail_usercopy+0x1a/0x20 [ 596.438793][T27578] copy_fpstate_to_sigframe+0x628/0x7d0 [ 596.438844][T27578] ? copy_fpstate_to_sigframe+0xe6/0x7d0 [ 596.438887][T27578] ? x86_task_fpu+0x36/0x60 [ 596.438946][T27578] get_sigframe+0x34d/0x490 [ 596.438989][T27578] ? get_signal+0xdc8/0xf70 [ 596.439039][T27578] x64_setup_rt_frame+0xa8/0x580 [ 596.439067][T27578] arch_do_signal_or_restart+0x27c/0x480 [ 596.439115][T27578] exit_to_user_mode_loop+0x7a/0x100 [ 596.439183][T27578] do_syscall_64+0x1d6/0x200 [ 596.439225][T27578] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 596.439330][T27578] ? clear_bhb_loop+0x40/0x90 [ 596.439366][T27578] ? clear_bhb_loop+0x40/0x90 [ 596.439393][T27578] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 596.439418][T27578] RIP: 0033:0x7fe59d33e927 [ 596.439437][T27578] Code: ff ff ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 <0f> 05 48 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 [ 596.439464][T27578] RSP: 002b:00007fe59b9a7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000013 [ 596.439488][T27578] RAX: 0000000000000013 RBX: 00007fe59d565fa0 RCX: 00007fe59d33e929 [ 596.439543][T27578] RDX: 0000000000000001 RSI: 0000200000001b00 RDI: 0000000000000003 [ 596.439559][T27578] RBP: 00007fe59b9a7090 R08: 0000000000000000 R09: 0000000000000000 [ 596.439574][T27578] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 596.439616][T27578] R13: 0000000000000000 R14: 00007fe59d565fa0 R15: 00007ffdb15c4b18 [ 596.439641][T27578] [ 596.445216][T27579] batadv_slave_0 (unregistering): left promiscuous mode [ 596.665398][T27579] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 597.269170][ T29] kauditd_printk_skb: 156 callbacks suppressed [ 597.269187][ T29] audit: type=1326 audit(1749289247.120:37886): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27607 comm="syz.1.8886" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f37aedde929 code=0x7ffc0000 [ 597.299762][ T29] audit: type=1326 audit(1749289247.120:37887): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27607 comm="syz.1.8886" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f37aedde929 code=0x7ffc0000 [ 597.323570][ T29] audit: type=1326 audit(1749289247.120:37888): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27607 comm="syz.1.8886" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f37aedde929 code=0x7ffc0000 [ 597.347218][ T29] audit: type=1326 audit(1749289247.120:37889): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27607 comm="syz.1.8886" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f37aedde929 code=0x7ffc0000 [ 597.370986][ T29] audit: type=1326 audit(1749289247.120:37890): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27607 comm="syz.1.8886" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f37aedde929 code=0x7ffc0000 [ 597.394623][ T29] audit: type=1326 audit(1749289247.120:37891): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27607 comm="syz.1.8886" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f37aedde929 code=0x7ffc0000 [ 597.418297][ T29] audit: type=1326 audit(1749289247.120:37892): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27607 comm="syz.1.8886" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f37aedde929 code=0x7ffc0000 [ 597.442006][ T29] audit: type=1326 audit(1749289247.120:37893): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27607 comm="syz.1.8886" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f37aedde929 code=0x7ffc0000 [ 597.465621][ T29] audit: type=1326 audit(1749289247.120:37894): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27607 comm="syz.1.8886" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f37aedde929 code=0x7ffc0000 [ 597.489622][ T29] audit: type=1326 audit(1749289247.120:37895): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27607 comm="syz.1.8886" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f37aedde929 code=0x7ffc0000 [ 597.560959][T27609] netlink: 24 bytes leftover after parsing attributes in process `syz.3.8885'. [ 597.587173][ T3403] IPVS: starting estimator thread 0... [ 597.677349][T27613] IPVS: using max 2400 ests per chain, 120000 per kthread [ 597.789806][ T2961] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 597.797411][ T2961] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 597.804947][ T2961] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 597.812391][ T2961] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 597.819868][ T2961] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 597.827428][ T2961] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 597.834849][ T2961] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 597.842294][ T2961] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 597.849750][ T2961] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 597.857328][ T2961] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 597.864782][ T2961] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 597.872246][ T2961] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 597.879666][ T2961] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 597.887109][ T2961] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 597.894723][ T2961] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 597.902175][ T2961] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 597.909725][ T2961] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 597.917213][ T2961] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 597.924795][ T2961] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 597.932305][ T2961] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 597.939738][ T2961] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 597.947179][ T2961] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 597.954571][ T2961] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 597.962052][ T2961] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 597.969554][ T2961] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 597.976971][ T2961] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 597.984442][ T2961] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 597.991849][ T2961] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 598.000571][ T2961] hid-generic 0000:0000:0000.000A: hidraw0: HID v0.00 Device [syz0] on syz0 [ 598.033567][T27642] FAULT_INJECTION: forcing a failure. [ 598.033567][T27642] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 598.046703][T27642] CPU: 1 UID: 0 PID: 27642 Comm: syz.5.8897 Not tainted 6.15.0-syzkaller-13473-gc0c9379f235d #0 PREEMPT(voluntary) [ 598.046799][T27642] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 598.046812][T27642] Call Trace: [ 598.046819][T27642] [ 598.046826][T27642] __dump_stack+0x1d/0x30 [ 598.046847][T27642] dump_stack_lvl+0xe8/0x140 [ 598.046867][T27642] dump_stack+0x15/0x1b [ 598.046916][T27642] should_fail_ex+0x265/0x280 [ 598.046937][T27642] should_fail+0xb/0x20 [ 598.046954][T27642] should_fail_usercopy+0x1a/0x20 [ 598.047005][T27642] strncpy_from_user+0x25/0x230 [ 598.047037][T27642] strncpy_from_user_nofault+0x68/0xf0 [ 598.047089][T27642] bpf_probe_read_compat_str+0xb4/0x130 [ 598.047125][T27642] bpf_prog_65271ff8f24cc488+0x40/0x6c [ 598.047143][T27642] bpf_trace_run2+0x107/0x1c0 [ 598.047168][T27642] ? selinux_release_secctx+0x45/0x80 [ 598.047229][T27642] ? selinux_release_secctx+0x45/0x80 [ 598.047344][T27642] __traceiter_kfree+0x2b/0x50 [ 598.047364][T27642] ? selinux_release_secctx+0x45/0x80 [ 598.047447][T27642] kfree+0x27b/0x320 [ 598.047477][T27642] ? security_sid_to_context+0x27/0x40 [ 598.047555][T27642] selinux_release_secctx+0x45/0x80 [ 598.047595][T27642] security_release_secctx+0x42/0x60 [ 598.047632][T27642] audit_log_task_context+0xb3/0x190 [ 598.047746][T27642] audit_log_task+0xf4/0x250 [ 598.047775][T27642] audit_seccomp+0x61/0x100 [ 598.047812][T27642] ? __seccomp_filter+0x68c/0x10d0 [ 598.047834][T27642] __seccomp_filter+0x69d/0x10d0 [ 598.047857][T27642] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 598.047884][T27642] ? vfs_write+0x75e/0x8e0 [ 598.047916][T27642] ? __rcu_read_unlock+0x4f/0x70 [ 598.047944][T27642] ? __fget_files+0x184/0x1c0 [ 598.047999][T27642] __secure_computing+0x82/0x150 [ 598.048021][T27642] syscall_trace_enter+0xcf/0x1e0 [ 598.048052][T27642] do_syscall_64+0xac/0x200 [ 598.048074][T27642] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 598.048124][T27642] ? clear_bhb_loop+0x40/0x90 [ 598.048168][T27642] ? clear_bhb_loop+0x40/0x90 [ 598.048189][T27642] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 598.048208][T27642] RIP: 0033:0x7f1df76ae929 [ 598.048308][T27642] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 598.048326][T27642] RSP: 002b:00007f1df5d17038 EFLAGS: 00000246 ORIG_RAX: 00000000000001ab [ 598.048408][T27642] RAX: ffffffffffffffda RBX: 00007f1df78d5fa0 RCX: 00007f1df76ae929 [ 598.048424][T27642] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000006 [ 598.048452][T27642] RBP: 00007f1df5d17090 R08: 0000000000000000 R09: 0000000000000000 [ 598.048466][T27642] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 598.048481][T27642] R13: 0000000000000000 R14: 00007f1df78d5fa0 R15: 00007fffb78c7128 [ 598.048504][T27642] [ 598.391241][T27650] 9pnet: p9_errstr2errno: server reported unknown error @ [ 598.466916][T27656] $H: renamed from bond0 (while UP) [ 598.474576][T27656] $H: entered promiscuous mode [ 598.479726][T27656] bond_slave_0: entered promiscuous mode [ 598.485667][T27656] bond_slave_1: entered promiscuous mode [ 598.620359][T27673] mmap: syz.4.8909 (27673): VmData 167489536 exceed data ulimit 0. Update limits or use boot option ignore_rlimit_data. [ 598.640706][T27675] tipc: Can't bind to reserved service type 0 [ 598.662186][T27675] loop0: detected capacity change from 0 to 512 [ 598.716808][T27675] EXT4-fs (loop0): 1 orphan inode deleted [ 598.723364][T27680] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8908'. [ 598.732408][T27680] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8908'. [ 598.750235][T26248] EXT4-fs error (device loop0): ext4_release_dquot:6969: comm kworker/u8:65: Failed to release dquot type 1 [ 598.751709][T27675] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 598.779206][T27675] ext4 filesystem being mounted at /21/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 598.787550][T27671] netlink: 'syz.3.8908': attribute type 4 has an invalid length. [ 598.839613][T27066] EXT4-fs error (device loop0): ext4_readdir:264: inode #11: block 4: comm syz-executor: path /21/file1/lost+found: bad entry in directory: inode out of bounds - offset=0, inode=7947, rec_len=12, size=4096 fake=1 [ 598.890876][T27671] netlink: 'syz.3.8908': attribute type 4 has an invalid length. [ 598.974053][T27066] EXT4-fs error (device loop0): ext4_empty_dir:3084: inode #11: block 4: comm syz-executor: bad entry in directory: inode out of bounds - offset=0, inode=7947, rec_len=12, size=4096 fake=1 [ 598.994350][T27066] EXT4-fs warning (device loop0): ext4_empty_dir:3086: inode #11: comm syz-executor: directory missing '.' [ 599.008856][T27066] EXT4-fs error (device loop0): ext4_readdir:264: inode #11: block 4: comm syz-executor: path /21/file1/lost+found: bad entry in directory: inode out of bounds - offset=0, inode=7947, rec_len=12, size=4096 fake=1 [ 599.032240][T27066] EXT4-fs error (device loop0): ext4_empty_dir:3084: inode #11: block 4: comm syz-executor: bad entry in directory: inode out of bounds - offset=0, inode=7947, rec_len=12, size=4096 fake=1 [ 599.052153][T27066] EXT4-fs warning (device loop0): ext4_empty_dir:3086: inode #11: comm syz-executor: directory missing '.' [ 599.063926][T27066] EXT4-fs error (device loop0): ext4_readdir:264: inode #11: block 4: comm syz-executor: path /21/file1/lost+found: bad entry in directory: inode out of bounds - offset=0, inode=7947, rec_len=12, size=4096 fake=1 [ 599.086851][T27066] EXT4-fs error (device loop0): ext4_empty_dir:3084: inode #11: block 4: comm syz-executor: bad entry in directory: inode out of bounds - offset=0, inode=7947, rec_len=12, size=4096 fake=1 [ 599.106799][T27066] EXT4-fs warning (device loop0): ext4_empty_dir:3086: inode #11: comm syz-executor: directory missing '.' [ 599.119471][T27066] EXT4-fs error (device loop0): ext4_readdir:264: inode #11: block 4: comm syz-executor: path /21/file1/lost+found: bad entry in directory: inode out of bounds - offset=0, inode=7947, rec_len=12, size=4096 fake=1 [ 599.142958][T27066] EXT4-fs error (device loop0): ext4_empty_dir:3084: inode #11: block 4: comm syz-executor: bad entry in directory: inode out of bounds - offset=0, inode=7947, rec_len=12, size=4096 fake=1 [ 599.163291][T27066] EXT4-fs warning (device loop0): ext4_empty_dir:3086: inode #11: comm syz-executor: directory missing '.' [ 599.177156][T27066] EXT4-fs error (device loop0): ext4_readdir:264: inode #11: block 4: comm syz-executor: path /21/file1/lost+found: bad entry in directory: inode out of bounds - offset=0, inode=7947, rec_len=12, size=4096 fake=1 [ 599.200694][T27066] EXT4-fs warning (device loop0): ext4_empty_dir:3086: inode #11: comm syz-executor: directory missing '.' [ 599.212234][T27684] ================================================================== [ 599.220359][T27684] BUG: KCSAN: data-race in mem_cgroup_flush_stats_ratelimited / tick_do_update_jiffies64 [ 599.230205][T27684] [ 599.232541][T27684] read-write to 0xffffffff868099c0 of 8 bytes by interrupt on cpu 0: [ 599.240618][T27684] tick_do_update_jiffies64+0x113/0x1c0 [ 599.246192][T27684] tick_nohz_handler+0x7f/0x2d0 [ 599.251074][T27684] __hrtimer_run_queues+0x20c/0x5a0 [ 599.256289][T27684] hrtimer_interrupt+0x21a/0x460 [ 599.261243][T27684] __sysvec_apic_timer_interrupt+0x5c/0x1d0 [ 599.267170][T27684] sysvec_apic_timer_interrupt+0x6f/0x80 [ 599.272937][T27684] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 599.278941][T27684] console_flush_all+0x55b/0x730 [ 599.283899][T27684] console_unlock+0xa1/0x330 [ 599.287177][T27700] SELinux: Context is not valid (left unmapped). [ 599.288499][T27684] vprintk_emit+0x388/0x650 [ 599.298407][T27066] EXT4-fs warning (device loop0): ext4_empty_dir:3086: inode #11: comm syz-executor: directory missing '.' [ 599.299574][T27684] vprintk_default+0x26/0x30 [ 599.315550][T27684] vprintk+0x1d/0x30 [ 599.319461][T27684] _printk+0x79/0xa0 [ 599.323371][T27684] __ext4_warning_inode+0x17b/0x190 [ 599.328584][T27684] ext4_empty_dir+0x258/0x610 [ 599.333278][T27684] ext4_rmdir+0x1df/0x640 [ 599.337616][T27684] vfs_rmdir+0x276/0x330 [ 599.341859][T27684] do_rmdir+0x19c/0x4b0 [ 599.346019][T27684] __x64_sys_unlinkat+0x86/0xb0 [ 599.350873][T27684] x64_sys_call+0x2438/0x2fb0 [ 599.355557][T27684] do_syscall_64+0xd2/0x200 [ 599.360069][T27684] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 599.365970][T27684] [ 599.368297][T27684] read to 0xffffffff868099c0 of 8 bytes by task 27684 on cpu 1: [ 599.375932][T27684] mem_cgroup_flush_stats_ratelimited+0x29/0x70 [ 599.382191][T27684] count_shadow_nodes+0x6a/0x230 [ 599.387138][T27684] do_shrink_slab+0x60/0x680 [ 599.391740][T27684] shrink_slab+0x448/0x760 [ 599.396172][T27684] shrink_node+0x6c3/0x2120 [ 599.400687][T27684] do_try_to_free_pages+0x3f6/0xcd0 [ 599.405894][T27684] try_to_free_mem_cgroup_pages+0x1ab/0x410 [ 599.411835][T27684] try_charge_memcg+0x358/0x9e0 [ 599.416693][T27684] obj_cgroup_charge_pages+0xa6/0x150 [ 599.422081][T27684] __memcg_kmem_charge_page+0x9f/0x170 [ 599.427561][T27684] __alloc_frozen_pages_noprof+0x188/0x360 [ 599.433390][T27684] alloc_pages_mpol+0xb3/0x250 [ 599.438173][T27684] alloc_pages_noprof+0x90/0x130 [ 599.443125][T27684] __vmalloc_node_range_noprof+0x6f2/0xe00 [ 599.448948][T27684] __kvmalloc_node_noprof+0x30f/0x4e0 [ 599.454337][T27684] ip_set_alloc+0x1f/0x30 [ 599.458686][T27684] hash_netiface_create+0x282/0x740 [ 599.463902][T27684] ip_set_create+0x3c9/0x960 [ 599.468498][T27684] nfnetlink_rcv_msg+0x4c3/0x590 [ 599.473453][T27684] netlink_rcv_skb+0x123/0x220 [ 599.478223][T27684] nfnetlink_rcv+0x16b/0x1690 [ 599.482916][T27684] netlink_unicast+0x5a1/0x670 [ 599.487698][T27684] netlink_sendmsg+0x58b/0x6b0 [ 599.492471][T27684] __sock_sendmsg+0x145/0x180 [ 599.497162][T27684] ____sys_sendmsg+0x31e/0x4e0 [ 599.501931][T27684] ___sys_sendmsg+0x17b/0x1d0 [ 599.506618][T27684] __x64_sys_sendmsg+0xd4/0x160 [ 599.511475][T27684] x64_sys_call+0x2999/0x2fb0 [ 599.516162][T27684] do_syscall_64+0xd2/0x200 [ 599.520672][T27684] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 599.526571][T27684] [ 599.528892][T27684] value changed: 0x00000001000074ab -> 0x00000001000074ac [ 599.536001][T27684] [ 599.538349][T27684] Reported by Kernel Concurrency Sanitizer on: [ 599.544500][T27684] CPU: 1 UID: 0 PID: 27684 Comm: syz.5.8912 Not tainted 6.15.0-syzkaller-13473-gc0c9379f235d #0 PREEMPT(voluntary) [ 599.556677][T27684] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 599.566740][T27684] ================================================================== [ 599.597272][T27066] EXT4-fs warning (device loop0): ext4_empty_dir:3086: inode #11: comm syz-executor: directory missing '.' [ 599.609203][T27066] EXT4-fs warning (device loop0): ext4_empty_dir:3086: inode #11: comm syz-executor: directory missing '.' [ 599.625580][T27066] EXT4-fs warning (device loop0): ext4_empty_dir:3086: inode #11: comm syz-executor: directory missing '.' [ 599.643071][T27066] EXT4-fs warning (device loop0): ext4_empty_dir:3086: inode #11: comm syz-executor: directory missing '.' [ 599.887984][T27066] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 599.898020][T26243] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 599.938696][T26243] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 599.998519][T26243] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 600.070241][T26243] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 600.140421][T26243] bridge_slave_1: left allmulticast mode [ 600.146153][T26243] bridge_slave_1: left promiscuous mode [ 600.151850][T26243] bridge0: port 2(bridge_slave_1) entered disabled state [ 600.161905][T26243] bridge_slave_0: left allmulticast mode [ 600.167680][T26243] bridge_slave_0: left promiscuous mode [ 600.173322][T26243] bridge0: port 1(bridge_slave_0) entered disabled state [ 600.268510][T26243] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 600.285390][T26243] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 600.295160][T26243] bond0 (unregistering): Released all slaves [ 600.360008][T26243] hsr_slave_0: left promiscuous mode [ 600.366142][T26243] hsr_slave_1: left promiscuous mode [ 600.371803][T26243] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 600.379286][T26243] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 600.389391][T26243] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 600.396812][T26243] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 600.407487][T26243] veth1_macvtap: left promiscuous mode [ 600.413056][T26243] veth0_macvtap: left promiscuous mode [ 600.418636][T26243] veth1_vlan: left promiscuous mode [ 600.423949][T26243] veth0_vlan: left promiscuous mode [ 600.498523][T26243] team0 (unregistering): Port device team_slave_1 removed [ 600.508473][T26243] team0 (unregistering): Port device team_slave_0 removed