last executing test programs: 5m59.715798922s ago: executing program 3 (id=705): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020702500000000002020207b0af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007200000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) timerfd_create(0x7, 0x0) syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x0) syz_open_dev$usbfs(&(0x7f0000000040), 0x20000007d, 0x0) r0 = io_uring_setup(0xf08, &(0x7f000000c480)={0x0, 0xeba1, 0x400, 0x20001, 0x3}) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000540)=[{0x0}], 0x1) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x88002, 0x0) pwritev(r1, &(0x7f0000000080)=[{0x0}, {&(0x7f0000000140)="de", 0x1}, {&(0x7f0000000040)="b8bd3323daa37cb0b9d7b693f07bc683254b9063ae0acd070c596e4ee50d", 0x1e}], 0x3, 0x80000, 0x0) getsockopt$inet_mreqn(r1, 0x0, 0x20, &(0x7f0000000300)={@initdev, @local}, &(0x7f0000000180)=0xc) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000200)={0x4}, 0x8) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000009c0000000b"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0x14, &(0x7f0000000540)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b740000000f66c148cdb2466e7ff5c99f100000000007b8af8ff00000000000007020000f8ffffff1ba2000008000000b70400002cd3251785000000c300000095e2a0f0eb6d1c4e2a4c812d"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, @void, @value}, 0x94) r3 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r3, &(0x7f0000000080)=@name={0x1e, 0x2, 0x3, {{0x0, 0x3}, 0x4}}, 0x10) bind$tipc(r3, &(0x7f0000000100)=@name={0x1e, 0x2, 0x9d3354bba4295a8d, {{0x41}}}, 0x10) r4 = syz_open_procfs(0x0, &(0x7f00000001c0)='fdinfo/3\x00') lseek(r4, 0x14, 0x1) 5m59.702882652s ago: executing program 3 (id=707): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb703000008000000b703000000000020850000007200000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) (async) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb703000008000000b703000000000020850000007200000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) (async) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000640)='fib6_table_lookup\x00', r1}, 0x10) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000080)={{}, 0x0, &(0x7f0000000040)='%ps \x00'}, 0x20) r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000380), 0x40) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_POOL(r2, 0xc058534b, &(0x7f0000000480)={0x401, 0x599, 0x4, 0x9, 0x8, 0x6}) bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYRES16=r0, @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007bff00000000bfa200000000000007020000f8ffffffb703000408000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x20, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x20, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r4}, 0x10) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r4}, 0x10) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={r4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x83, 0x0, 0x0, 0x0, &(0x7f0000000000), 0x0, 0x0, 0x0, 0x2}, 0x50) syz_io_uring_setup(0x17ae, &(0x7f0000000400)={0x0, 0x22ee, 0x4002}, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000005"], 0x48) (async) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x40, 0x1, 0x0, 0x0, 0x0, 0x5, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x3, 0x800000000003}, 0x1100, 0x5dd8, 0x0, 0x5, 0x0, 0x8, 0xfffb, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r6 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000200), 0x800) close(r6) (async) close(r6) ioctl$F2FS_IOC_SEC_TRIM_FILE(r0, 0x4018f514, &(0x7f0000000280)={0xdc, 0x3000000, 0x3}) perf_event_open(&(0x7f0000000500)={0x0, 0x80, 0x0, 0x0, 0x0, 0x4, 0x0, 0x40f9, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x53}, 0x808, 0xffffffffffffffff, 0x0, 0x0, 0x7fff, 0x0, 0x7ff, 0x0, 0x7, 0x0, 0x2}, 0x0, 0x80000, 0xffffffffffffffff, 0xf) unlink(&(0x7f00000000c0)='\x00') r7 = socket$inet6_sctp(0xa, 0x801, 0x84) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r7, 0x84, 0x7b, &(0x7f0000000180)={0x0, 0x2}, 0x8) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000fbff000000004000001d8500000007000000440000002a00000095"], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) (async) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000fbff000000004000001d8500000007000000440000002a00000095"], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000340)='scmi_rx_done\x00', r8, 0x0, 0x1000000000}, 0x2) sendto$inet6(r7, &(0x7f0000000080)="be", 0x1, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x4}, 0x1c) (async) sendto$inet6(r7, &(0x7f0000000080)="be", 0x1, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x4}, 0x1c) shutdown(r7, 0x1) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000580)={&(0x7f0000000040)='fib6_table_lookup\x00', r9}, 0x10) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000580)={&(0x7f0000000040)='fib6_table_lookup\x00', r9}, 0x10) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)) (async) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)) 5m59.425295827s ago: executing program 3 (id=711): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x20, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYRES8=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = openat$incfs(0xffffffffffffffff, &(0x7f0000000000)='.pending_reads\x00', 0x422100, 0x0) io_uring_register$IORING_UNREGISTER_RING_FDS(r1, 0x15, &(0x7f0000000d80)=[{0x9, 0x1, 0x0, &(0x7f0000000ac0)=[{&(0x7f0000000540)=""/234, 0xea}, {&(0x7f00000014c0)=""/4096, 0x1000}, {&(0x7f0000000640)=""/198, 0xc6}, {&(0x7f0000000040)=""/42, 0x2a}, {&(0x7f0000000740)=""/218, 0xda}, {&(0x7f0000000840)=""/225, 0xe1}, {&(0x7f00000024c0)=""/4096, 0x1000}, {&(0x7f0000000180)=""/81, 0x51}, {&(0x7f0000000a00)=""/142, 0x8e}], &(0x7f0000000080)=[0x2, 0x8, 0x4, 0xfff, 0x80000000, 0x200, 0x2]}, {0x2, 0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000b80)=""/195, 0xc3}, {&(0x7f0000000c80)=""/252, 0xfc}], &(0x7f0000000940)=[0x7fffffffffffffff, 0x100000001, 0x16, 0x7f, 0x7, 0x7, 0x8, 0x4, 0x80]}], 0x2) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2}, 0x10) r3 = socket(0x2a, 0x2, 0x0) sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x24}}, 0x0) getsockname$packet(r3, &(0x7f0000000dc0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x24, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}}, 0x24}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000003c0)=@newtfilter={0x88, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0xc, 0x11}, {}, {0x1c, 0x9}}, [@filter_kind_options=@f_flower={{0xb}, {0x58, 0x2, [@TCA_FLOWER_ACT={0x54, 0x3, [@m_connmark={0x50, 0x1, 0x0, 0x0, {{0xd}, {0x20, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0xfffffff8, 0xfff, 0x4, 0x8, 0xb}, 0x3}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x3, 0x3}}}}]}]}}]}, 0x88}}, 0x24000000) socket$netlink(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$kcm(0x11, 0x20000000000000a, 0x300) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r6}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000040)={{r5}, &(0x7f0000000000), &(0x7f00000005c0)=r6}, 0x20) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000001c0), r8) sendmsg$IEEE802154_ADD_IFACE(r7, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="01000000ecffffffffff2000000005002000000000000c001f0070687930"], 0x28}}, 0x0) 5m59.371881398s ago: executing program 3 (id=714): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r0}, 0x4) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000800000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000000)='kmem_cache_free\x00', r1}, 0x10) r2 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r2, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x41}}, 0x10) listen(r2, 0x0) r3 = socket$tipc(0x1e, 0x5, 0x0) sendmsg$tipc(r3, &(0x7f0000002300)={&(0x7f0000000040)=@name={0x1e, 0x2, 0x1, {{0x0, 0x200000}, 0x4}}, 0x10, 0x0}, 0x0) sendmsg$tipc(r3, &(0x7f00000002c0)={&(0x7f0000000080)=@nameseq={0x1e, 0x2, 0x0, {0x41}}, 0x10, 0x0}, 0x0) accept4(r2, 0x0, 0x0, 0x400000006000000) 5m59.302891748s ago: executing program 3 (id=716): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000990000000d"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) syz_usb_connect(0x0, 0x0, 0x0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x4, &(0x7f0000000180)=@lang_id={0x4, 0x3, 0x403}}]}) io_uring_setup(0x3dfc, &(0x7f00000002c0)={0x0, 0xb7ca, 0x10, 0xffffffff, 0x5f}) perf_event_open(&(0x7f0000000040)={0x6, 0x80, 0x0, 0x0, 0x0, 0x40, 0x0, 0x1, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x40, 0x2, 0x7, 0x1, 0x2000000, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x3) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000180)=0x70) ioctl$TIOCSTI(r2, 0x5412, &(0x7f00000000c0)=0x7e) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000001900)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) dup(r3) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) move_mount(0xffffffffffffffff, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, 0x0, 0x0) mount$bind(0x0, 0x0, 0x0, 0x891018, 0x0) mount$bind(0x0, &(0x7f0000000140)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000240)='./file1/file3\x00', 0x0, 0x101091, 0x0) mount$bind(&(0x7f0000000300)='./file0/file0\x00', &(0x7f0000000280)='./file0/file0\x00', 0x0, 0x80700a, 0x0) r4 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) r5 = getpid() r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[], 0x48) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r7}, 0x10) syz_mount_image$vfat(&(0x7f0000000200), &(0x7f0000000080)='./file0\x00', 0xa08886, &(0x7f0000000040)=ANY=[@ANYRES32=0x0], 0x1, 0x2a8, &(0x7f0000000500)="$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") r8 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x81000) renameat2(r8, &(0x7f0000000140)='./file1\x00', r8, &(0x7f0000000240)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x1) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./file1/file3\x00', 0x0) renameat2(r4, &(0x7f0000001100)='./file1/file3\x00', 0xffffffffffffff9c, &(0x7f00000010c0)='./file0\x00', 0x3) syz_pidfd_open(r5, 0x0) 5m58.740405787s ago: executing program 3 (id=729): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) timerfd_settime(0xffffffffffffffff, 0x3, 0x0, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x26e1, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) splice(r0, 0x0, r2, 0x0, 0x88000cc, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000201000085"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r4}, 0x10) fcntl$setpipe(r1, 0x407, 0x100004) write$eventfd(r1, &(0x7f0000000240), 0xffffff14) 5m43.722063461s ago: executing program 32 (id=729): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) timerfd_settime(0xffffffffffffffff, 0x3, 0x0, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x26e1, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) splice(r0, 0x0, r2, 0x0, 0x88000cc, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000201000085"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r4}, 0x10) fcntl$setpipe(r1, 0x407, 0x100004) write$eventfd(r1, &(0x7f0000000240), 0xffffff14) 5m18.542589331s ago: executing program 5 (id=1471): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={0x0, 0xffffffffffffffff, 0x0, 0x1}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) fsync(0xffffffffffffffff) (fail_nth: 6) 5m18.464253903s ago: executing program 5 (id=1472): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f00000003c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000000)={'wpan0\x00', 0x0}) r3 = add_key(&(0x7f0000000300)='dns_resolver\x00', &(0x7f0000000180)={'syz', 0x2}, &(0x7f0000000200)="75a1d7030000", 0x6, 0xfffffffffffffffe) keyctl$read(0xb, r3, &(0x7f0000000240)=""/112, 0x349b7f55) sendmsg$NL802154_CMD_NEW_SEC_DEVKEY(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000000c0)={0x44, r1, 0x1, 0xfffffffd, 0x0, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r2}, @NL802154_ATTR_SEC_DEVKEY={0x28, 0x2f, 0x0, 0x1, [@NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc}, @NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8}, @NL802154_DEVKEY_ATTR_ID={0x10, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_IMPLICIT={0x4}, @NL802154_KEY_ID_ATTR_MODE={0x8}]}]}]}, 0x44}}, 0x0) 5m18.463849893s ago: executing program 5 (id=1473): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x20, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000700), &(0x7f00000000c0), 0xff, r0}, 0x38) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000700)='signal_generate\x00', r1}, 0x10) r2 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) fcntl$notify(r2, 0x402, 0x5) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000600)='blkio.bfq.avg_queue_size\x00', 0x275a, 0x0) 5m18.408161373s ago: executing program 5 (id=1474): r0 = syz_open_dev$tty1(0xc, 0x4, 0x2) ioctl$KDGETKEYCODE(r0, 0x4b4c, &(0x7f0000000040)={0xfffffc7c, 0x100}) ioctl$TIOCMGET(r0, 0x5415, &(0x7f0000000200)) socket$inet_smc(0x2b, 0x1, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000180)='./file1\x00', 0x3a107c4, &(0x7f00000003c0)={[{@noauto_da_alloc}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}, {@stripe={'stripe', 0x3d, 0x8}}, {@resuid}, {@stripe={'stripe', 0x3d, 0x4}}, {@data_err_ignore}, {@user_xattr}, {@min_batch_time={'min_batch_time', 0x3d, 0xa9f}}, {@nodiscard}, {@jqfmt_vfsold}, {@nobarrier}]}, 0xfd, 0x451, &(0x7f0000000d00)="$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") socket$inet_smc(0x2b, 0x1, 0x0) r1 = socket$rxrpc(0x21, 0x2, 0x2) bind$rxrpc(r1, &(0x7f0000000000)=@in4={0x21, 0x804, 0x2, 0x7, {0x2, 0x0, @empty}}, 0x24) setuid(0xee00) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mkdir(&(0x7f0000000000)='./control\x00', 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000009c0000000b"], 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r3}, 0x18) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='sysfs\x00', 0x0, 0x0) mount$bind(&(0x7f0000000480)='./file0\x00', &(0x7f00000004c0)='./control\x00', 0x0, 0x2000, 0x0) r4 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r5 = syz_pidfd_open(r4, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_POLICY(r5, 0xff04, 0x0) socket$inet6_sctp(0xa, 0x801, 0x84) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000ddffffff850000002d00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) prlimit64(0x0, 0x7, &(0x7f0000000140)={0x8, 0x8b}, 0x0) fspick(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0) 5m18.249026355s ago: executing program 5 (id=1475): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc9ffb}]}) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000100)=@generic={&(0x7f00000000c0)='./file0\x00', 0x0, 0x10}, 0x18) r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r0, &(0x7f00000000c0), 0x10) r1 = socket$packet(0x11, 0x2, 0x300) r2 = syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x0) syz_usb_disconnect(r2) syz_usb_connect(0x0, 0x36, &(0x7f0000000040)=ANY=[], 0x0) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000030000000000000000000400b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r3, @ANYBLOB="0000000000000000b705000008000000850000006900000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000003180)={&(0x7f0000000080)='kfree\x00', r4, 0x0, 0x4}, 0x18) ioctl$EVIOCGBITSW(r2, 0x40095505, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f00000001c0)={0x5, &(0x7f0000000080)=[{0x7ff, 0x73, 0x7, 0x4}, {0x5, 0x46, 0x1}, {0x8, 0x5, 0x9, 0x10001}, {0xf, 0xb, 0xb, 0x5f}, {0x9, 0x10, 0x40, 0x4000000}]}) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$can_bcm(r0, &(0x7f0000000280)={&(0x7f0000000040)={0x1d, r5}, 0x10, &(0x7f0000000180)={&(0x7f0000001280)=ANY=[], 0x48}}, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000ae00000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff, @void, @value}, 0x94) perf_event_open(&(0x7f0000000800)={0x2, 0x80, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8a01, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000002c0), 0xb}, 0x0, 0x5, 0x0, 0x0, 0x2}, 0x0, 0xfffffe0000000003, 0xffffffffffffffff, 0x1) r7 = syz_open_procfs(0x0, &(0x7f00000004c0)='fdinfo\x00') fchdir(r7) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r6, 0x0, 0x7}, 0x18) r8 = socket(0x2, 0x80805, 0x0) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x39) socket$inet6(0xa, 0x1, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r9, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r10}, 0x10) syz_mount_image$ext4(&(0x7f0000000600)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x4042, &(0x7f00000000c0), 0x7, 0x4c6, &(0x7f0000000b00)="$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") mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) sendmmsg$inet(r8, &(0x7f0000000880)=[{{&(0x7f0000000080)={0x2, 0x0, @rand_addr=0xac1414bb}, 0x10, &(0x7f0000000100)=[{&(0x7f00000000c0)='Q', 0x1}], 0x1}, 0x20000000}, {{&(0x7f0000000180)={0x2, 0x0, @remote}, 0x10, &(0x7f0000000380)=[{&(0x7f0000000300)="b90010000088fde0c5ed781fab9ab2c3340698af88543c7cde9dce04e05b07c8551acc54ed058318da88aed8a78775bcc149fdfa8a097ad97bdf86b815ffecb36369a0213cb64c6e0be10ad676", 0x4d}], 0x1}}], 0x2, 0x0) 5m18.120185798s ago: executing program 5 (id=1476): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socket$igmp(0x2, 0x3, 0x2) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000008c0)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f000000850000000500000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x10) syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000640)='./bus\x00', 0x1200840, &(0x7f0000000880)=ANY=[@ANYRESHEX=r0], 0x3, 0x377, &(0x7f00000002c0)="$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") syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x2010008, &(0x7f00000001c0), 0xff, 0x532, &(0x7f0000000b80)="$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") prctl$PR_SET_SECCOMP(0x16, 0x0, &(0x7f00000007c0)={0x1, &(0x7f0000000780)=[{0x200000000006, 0x0, 0x0, 0x3}]}) openat$ppp(0xffffffffffffff9c, 0x0, 0x404181, 0x0) mkdir(0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000180)={{r1, 0xffffffffffffffff}, &(0x7f00000001c0), &(0x7f0000000380)='%-5lx \x00'}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000040)={r2}, 0x4) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x1f, 0x18, &(0x7f0000000080)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x2000, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback=0x1e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000000)={r3}, 0xc) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='hugetlb.1GB.rsvd.usage_in_bytes\x00', 0x275a, 0x0) ftruncate(r4, 0xc17a) fadvise64(r4, 0x0, 0x0, 0x4) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000010000000800000008"], 0x50) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r6}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000002540)={{r5}, &(0x7f00000024c0), &(0x7f0000002500)}, 0x20) prctl$PR_SET_SECCOMP(0x16, 0x0, &(0x7f0000000000)={0x0, &(0x7f0000000780)}) r8 = fsopen(&(0x7f0000000680)='squashfs\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r8, 0x6, 0x0, 0x0, 0x0) fsmount(r8, 0x0, 0x0) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="020000000400000008000000060000000010", @ANYRES32=r7, @ANYRES32=r7, @ANYBLOB="ae6a6c29c03825439f", @ANYRESOCT=0x0], 0x48) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000700000018110000", @ANYRES32=r9, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000080)='kfree\x00', r10, 0x0, 0x2}, 0x18) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) 5m18.119954398s ago: executing program 33 (id=1476): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socket$igmp(0x2, 0x3, 0x2) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000008c0)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f000000850000000500000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x10) syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000640)='./bus\x00', 0x1200840, &(0x7f0000000880)=ANY=[@ANYRESHEX=r0], 0x3, 0x377, &(0x7f00000002c0)="$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") syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x2010008, &(0x7f00000001c0), 0xff, 0x532, &(0x7f0000000b80)="$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") prctl$PR_SET_SECCOMP(0x16, 0x0, &(0x7f00000007c0)={0x1, &(0x7f0000000780)=[{0x200000000006, 0x0, 0x0, 0x3}]}) openat$ppp(0xffffffffffffff9c, 0x0, 0x404181, 0x0) mkdir(0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000180)={{r1, 0xffffffffffffffff}, &(0x7f00000001c0), &(0x7f0000000380)='%-5lx \x00'}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000040)={r2}, 0x4) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x1f, 0x18, &(0x7f0000000080)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x2000, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback=0x1e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000000)={r3}, 0xc) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='hugetlb.1GB.rsvd.usage_in_bytes\x00', 0x275a, 0x0) ftruncate(r4, 0xc17a) fadvise64(r4, 0x0, 0x0, 0x4) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000010000000800000008"], 0x50) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r6}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000002540)={{r5}, &(0x7f00000024c0), &(0x7f0000002500)}, 0x20) prctl$PR_SET_SECCOMP(0x16, 0x0, &(0x7f0000000000)={0x0, &(0x7f0000000780)}) r8 = fsopen(&(0x7f0000000680)='squashfs\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r8, 0x6, 0x0, 0x0, 0x0) fsmount(r8, 0x0, 0x0) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="020000000400000008000000060000000010", @ANYRES32=r7, @ANYRES32=r7, @ANYBLOB="ae6a6c29c03825439f", @ANYRESOCT=0x0], 0x48) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000700000018110000", @ANYRES32=r9, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000080)='kfree\x00', r10, 0x0, 0x2}, 0x18) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) 4m56.188405644s ago: executing program 0 (id=1913): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000540)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000002000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r1}, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000380), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000680)=ANY=[@ANYBLOB="c8010000", @ANYRES16=r3, @ANYBLOB="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"], 0x1c8}}, 0x0) 4m56.169834955s ago: executing program 0 (id=1915): openat$selinux_load(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x3f, 0x1, 0x0, 0x0, 0x0, 0x40008, 0x10090, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd, 0x0, @perf_config_ext={0xffffff7fffffff81, 0x4}, 0x4c58, 0x0, 0xfffffffe, 0x1, 0x8, 0xffffffff, 0x3ff, 0x0, 0x0, 0x0, 0x6}, 0xffffffffffffffff, 0xfffffffffffffffd, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="06000000040000006c0f00000a"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000b2e900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f00000004c0)=ANY=[@ANYBLOB="9feb010028000000000000000c0000000c000000020000d4210000000000000280e54128ea3802b9664ed090a40c6065f867f26c4c57b487b8728594eef3ab9cdaf8622409d839b5ffdb6b51d2ac3a6cea8669b79b3d4415cb26fe527123ddc5aeeb75ca452d6f"], 0x0, 0x26, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x20) r2 = openat$selinux_policy(0xffffff9c, &(0x7f0000001040), 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x12, r2, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="06000000040000006c0f00000a"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x61, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='vm_unmapped_area\x00', r4}, 0x10) setsockopt$sock_int(r3, 0x1, 0x3c, &(0x7f0000000040)=0x1, 0xfff0) socket$nl_netfilter(0x10, 0x3, 0xc) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_SETPARAMS(r5, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000380)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16, @ANYBLOB="11d026bd700001dcdf252500000005002900000000000a0001007770616e3000000005002b"], 0x30}, 0x1, 0x0, 0x0, 0xc8d0}, 0x4) r6 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000180), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000ec0)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_DEL_SEC_KEY(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010000000000000000001800000008000300", @ANYRES32=r7, @ANYBLOB="38003080340001800800010000000000280003"], 0x54}}, 0x0) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$nl802154(&(0x7f00000003c0), 0xffffffffffffffff) r10 = gettid() ioctl$sock_SIOCGIFINDEX_802154(r8, 0x8933, &(0x7f0000000600)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="010028bd7000ffdbdf251400000008000300", @ANYRES32=r11, @ANYBLOB="08001c00", @ANYRES32=r10], 0x24}, 0x1, 0x0, 0x0, 0x20000040}, 0x4000000) sendmsg$NL802154_CMD_DEL_SEC_DEV(r5, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="1c00000019fe6aa7d7cdfa64f07662496761bf745a493985b4c2efb71347c74b871dbcaf29025574ec52d09644304e91e79189509125492b34384f0656689dec5e2c436ee762f1390878845444dbeed578d4278177fdcda2994effa5ce221d33a45995dc6ab65ff4", @ANYRES16=r6, @ANYBLOB="020025bd7000ffdbdf251b00000008000300", @ANYRES32=r11, @ANYBLOB], 0x1c}, 0x1, 0x0, 0x0, 0x20000004}, 0x40000) 4m55.809605681s ago: executing program 0 (id=1918): socket$packet(0x11, 0x2, 0x300) r0 = socket$nl_route(0x10, 0x3, 0x0) (async, rerun: 32) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) (rerun: 32) vmsplice(r2, &(0x7f00000000c0)=[{&(0x7f0000000180)='w', 0x1}], 0x1, 0x1) (async) r3 = socket(0x28, 0x5, 0x0) (async) r4 = socket(0x28, 0x5, 0x0) bind$vsock_stream(r4, &(0x7f0000000040)={0x28, 0x0, 0x0, @local}, 0x10) (async) listen(r4, 0x4) connect$vsock_stream(r3, &(0x7f0000000080)={0x28, 0x0, 0x0, @local}, 0x10) r5 = accept4$unix(r4, 0x0, 0x0, 0x800) recvfrom$unix(r5, 0x0, 0x0, 0x0, 0x0, 0x0) (async) splice(r1, 0x0, r2, 0x0, 0x10500, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r6, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={0x0, 0x18}}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) (async, rerun: 32) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.swap.events\x00', 0x275a, 0x0) (rerun: 32) fcntl$lock(r8, 0x26, &(0x7f0000000280)={0x0, 0x0, 0x7f}) (async) fcntl$lock(r8, 0x25, &(0x7f00000000c0)={0x2, 0x0, 0x0, 0x4}) (async) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0xffffffffffffff6e, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="5000000010008105e9c51c000000000000000000", @ANYRES32=r7, @ANYBLOB="01000000000000002800128009000100766c616e000000001800028006000100000000000c0002000c0000000d00000008000500", @ANYRES64=r0], 0x50}, 0x1, 0x0, 0x0, 0x80}, 0x0) (async) socket$packet(0x11, 0x2, 0x300) (async) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="540000001000010400000000000000ffff000000", @ANYRES32=0x0, @ANYBLOB="0380000000000000240012800c0001006d6163766c616e00140002800800010008000000200002000100000008000500", @ANYRES32=r7, @ANYBLOB='\b\x00\n\x00', @ANYRES32], 0x54}}, 0x0) 4m55.688568043s ago: executing program 0 (id=1920): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000740)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="1804000000000000000000000000000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b100000095"], 0x0, 0x1, 0x0, 0x0, 0x40f00, 0x18, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2, @void, @value}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r0, 0x0, 0xffffffffffffffff}, 0x13) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000a40)={&(0x7f0000000980)='sys_enter\x00', r2}, 0x10) r3 = socket(0x10, 0x803, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0) r4 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r4, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) r5 = openat$autofs(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r5, 0xc0189374, &(0x7f0000000240)={{0x1, 0x1, 0x1018, 0xffffffffffffffff, {0x29}}, './file0\x00'}) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r7 = socket(0x400000000010, 0x3, 0x0) r8 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) mount$9p_rdma(&(0x7f0000000200), &(0x7f0000000280)='./file0\x00', &(0x7f00000002c0), 0x2, &(0x7f0000000380)={'trans=rdma,', {'port', 0x3d, 0x4e20}, 0x2c, {[], [{@obj_role={'obj_role', 0x3d, '\xba\'%*})-'}}, {@dont_appraise}, {@dont_measure}]}}) sendmsg$nl_route_sched(r7, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r9, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xffe0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x1}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newtfilter={0x30, 0x2c, 0xd2b, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, r9, {0xf, 0xfff0}, {}, {0x7, 0xfff3}}, [@filter_kind_options=@f_u32={{0x8}, {0x4}}]}, 0x30}}, 0x24040084) alarm(0x1) r10 = syz_init_net_socket$llc(0x1a, 0x801, 0x0) bind$llc(r10, &(0x7f0000000000)={0x1a, 0x301, 0x0, 0x10, 0x81, 0x7f}, 0x10) connect$llc(r10, &(0x7f0000000340)={0x1a, 0x30b, 0x0, 0x0, 0x4, 0xfd, @random="48bd00"}, 0x10) 4m55.563765535s ago: executing program 0 (id=1924): bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0a000000020000000110"], 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x2, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000500)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0xa802, 0x0) close(r1) socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', @broadcast}) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@gettclass={0x24, 0x2a, 0x129, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0xb, 0xd}, {}, {0x8, 0xfff1}}}, 0x24}}, 0x40004) recvmmsg(r4, &(0x7f0000005140), 0x0, 0x0, 0x0) 4m55.132314362s ago: executing program 0 (id=1932): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000009c0000000b"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000280)='kmem_cache_free\x00', r1, 0x0, 0x200000000000006}, 0x18) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000005c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x28, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_DELTABLE={0x14, 0x2, 0xa, 0x10b}], {0x14, 0x11, 0x1, 0x0, 0x1000000}}, 0xb0}}, 0x0) 4m55.132141732s ago: executing program 34 (id=1932): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000009c0000000b"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000280)='kmem_cache_free\x00', r1, 0x0, 0x200000000000006}, 0x18) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000005c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x28, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_DELTABLE={0x14, 0x2, 0xa, 0x10b}], {0x14, 0x11, 0x1, 0x0, 0x1000000}}, 0xb0}}, 0x0) 2.361503411s ago: executing program 7 (id=6452): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000001200)={0x1, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x10000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000080)='kfree\x00', r1, 0x0, 0x6}, 0x18) r2 = syz_open_procfs$pagemap(0x0, &(0x7f0000000600)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r3, &(0x7f00000018c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001780)=ANY=[@ANYBLOB="14000000000000000100000001000000", @ANYRES32=r3], 0x18}, 0x0) close_range(r2, 0xffffffffffffffff, 0x0) 2.315881162s ago: executing program 7 (id=6454): r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x41, 0x1, 0x0, 0x0, 0x0, 0x5, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x6}, 0x1100, 0x5dd8, 0x0, 0x3, 0x1000, 0x8, 0xfffb, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000d80)={0x11, 0xf, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) mount$tmpfs(0x0, &(0x7f0000000540)='./cgroup\x00', &(0x7f0000000580), 0x0, &(0x7f0000000000)={[{@mpol={'mpol', 0x3d, {'prefer', '=relative', @val={0x3a, [0x30]}}}}]}) r3 = socket$kcm(0x2, 0x922000000001, 0x106) setsockopt$sock_attach_bpf(r3, 0x1, 0xc, &(0x7f00000002c0), 0x4) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r2}, 0x10) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000240)={'gretap0\x00', &(0x7f00000000c0)={'syztnl0\x00', 0x0, 0x8000, 0x700, 0xffff0000, 0x7ff, {{0x3f, 0x4, 0x2, 0x27, 0xfc, 0x68, 0x0, 0x6, 0x4, 0x0, @remote, @dev={0xac, 0x14, 0x14, 0x42}, {[@cipso={0x86, 0x23, 0x3, [{0x0, 0x9, "bc54e4ece85f9f"}, {0x5, 0x4, "a757"}, {0x1, 0x4, "c86b"}, {0x2, 0xa, "bb60cb79d1ac1234"}, {0x6, 0x2}]}, @timestamp_prespec={0x44, 0x2c, 0xa, 0x3, 0x1, [{@initdev={0xac, 0x1e, 0x1, 0x0}, 0x6}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x397d}, {@local, 0x917}, {@local, 0xad09}, {@multicast1, 0x9}]}, @ra={0x94, 0x4, 0x1}, @rr={0x7, 0x1b, 0xaf, [@empty, @local, @empty, @multicast2, @multicast1, @broadcast]}, @timestamp_addr={0x44, 0x54, 0xe6, 0x1, 0x7, [{@private=0xa010102, 0x1}, {@loopback, 0xfffffffc}, {@multicast1, 0x50000}, {@remote, 0x6}, {@rand_addr=0x64010100, 0x1}, {@multicast2, 0x6b8a8720}, {@multicast2, 0x70000}, {@remote, 0x6}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x4}, {@loopback, 0xe}]}, @timestamp_addr={0x44, 0x24, 0xdf, 0x1, 0x1, [{@empty, 0x2}, {@private=0xa010101, 0x2}, {@loopback, 0xfffffc00}, {@multicast1, 0x9}]}]}}}}}) bpf$BPF_PROG_QUERY(0x10, &(0x7f00000003c0)={@fallback=r0, 0x0, 0x1, 0x100, &(0x7f0000000280)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x8, 0x0, &(0x7f00000002c0)=[0x0], &(0x7f0000000340)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000380)=[0x0], 0x0}, 0x40) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000400)={r2, r4, 0x25, 0x2, @val=@netkit={@void, @value, @void, @void, r5}}, 0x1c) r6 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r6, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) setsockopt$inet_tcp_TCP_CONGESTION(r6, 0x6, 0xd, &(0x7f0000000000)='yeah\x00', 0x5) connect$inet(r6, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR(r6, 0x6, 0x13, &(0x7f00000001c0), 0x4) link(&(0x7f0000000200)='./file1\x00', &(0x7f0000000300)='./bus\x00') 2.266293722s ago: executing program 7 (id=6457): bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = socket(0xa, 0x3, 0x3a) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000001200)={0x1, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r3}, &(0x7f0000000180), &(0x7f00000001c0)=r2}, 0x20) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) r5 = syz_clone(0x2100, 0x0, 0x0, 0x0, 0x0, 0x0) r6 = syz_pidfd_open(r5, 0x0) process_madvise(r6, 0x0, 0x0, 0x15, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) mprotect(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000100)={'team0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="200000001100010100"/20, @ANYRES32=r7], 0x20}, 0x1, 0x0, 0x0, 0x80d5}, 0x0) setsockopt$MRT6_DEL_MIF(r0, 0x29, 0xcb, &(0x7f0000000540)={0x0, 0x0, 0x0, r7}, 0xc) 2.121954895s ago: executing program 2 (id=6461): syz_mount_image$vfat(&(0x7f0000000280), &(0x7f0000000000)='./file0\x00', 0x1018000, &(0x7f00000003c0)=ANY=[@ANYRES8=0x0, @ANYRES16, @ANYRES16, @ANYRESOCT, @ANYRES32, @ANYRESDEC], 0x1, 0x2f2, &(0x7f0000000b00)="$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") bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000001811", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000020000008500000082"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r1}, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00', r2}, 0x10) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuacct.usage_percpu_sys\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000040), 0x208e24b) prlimit64(0x0, 0x1, 0x0, &(0x7f0000000340)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0) fdatasync(r3) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) mlock2(&(0x7f0000004000/0x4000)=nil, 0x40ef, 0x0) 1.931746778s ago: executing program 1 (id=6462): bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000001811", @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8936, &(0x7f0000000000)={@dev, 0x40}) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) r0 = inotify_init() inotify_add_watch(r0, &(0x7f00000000c0)='./file0\x00', 0x4000001) lsetxattr$trusted_overlay_redirect(&(0x7f0000000100)='./file0/bus\x00', &(0x7f0000000140), &(0x7f0000000180)='./file0/bus\x00', 0xc, 0x0) 1.896386229s ago: executing program 1 (id=6463): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), r0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000140)={0x1, 0x58, &(0x7f00000000c0)}, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f00000006c0)={'team0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000004c00)=@newtfilter={0x24, 0x11, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x74, r2, {}, {}, {0x8, 0x5}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x8881}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r3 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r3, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x8000}, 0x4) syz_emit_ethernet(0x6a, &(0x7f0000000cc0)=ANY=[@ANYBLOB="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"], 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000700)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x6, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r4, 0x5, 0xb68, 0x6, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000300)='kmem_cache_free\x00'}, 0x10) r5 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000040)={'wg1\x00', 0x0}) setsockopt$packet_int(r5, 0x107, 0x14, &(0x7f0000000000)=0xf3e, 0x4) sendto$packet(r5, &(0x7f0000000240)='V', 0x1, 0x0, &(0x7f0000000080)={0x11, 0x0, r6, 0x1, 0x0, 0x6, @dev}, 0x14) 1.706614712s ago: executing program 1 (id=6468): r0 = memfd_create(&(0x7f0000000000)='/dev/loop#\x00\xee\b\xce\xde\xe9\x8d\xd3\xd4\xe2\xfd\x7f\xf5R%\xe0]l\xa1s\b\xa5\xd2\xd59\xc8\xda\b\xd6\xb2\x15\xf6F\xb8\xb4{r.\xd2\xea\x16\x82\xe8=\xa3\x88sN\x83N`\xf9\xec\xe1\xbb\x050x0}) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000002c0)={'bridge_slave_0\x00', 0x0}) r4 = socket(0x10, 0x80002, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(0xffffffffffffffff, 0xc0a85320, &(0x7f00000001c0)={{0x2, 0x8}, 'port0\x00', 0x0, 0x40040, 0xffff7c07, 0xfffc0000, 0x9, 0x200, 0x0, 0x0, 0x4, 0x7f}) ioctl$sock_SIOCINQ(r1, 0x541b, &(0x7f0000000280)) sendmsg$nl_route(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="4400001e1100a7cc4a372eaf541d00200700000034ea4ccaec99c8b0408bff2de9fc3bd6c83aba4ceabad554f79825e23c8aa7db632a55ddcd18cdaeaa7e01ebf8791297cfc387fff2d548d201c88e8007daa59b6f85d8b8839890ffa53641d1315cc1d1be4e7934deddd2d1e45fb339aa8e14d75912034fb5806247a3e6805ea1594d2a020141a08feee4b908dff0f93ec0f08e876cda020511ae58a6cb93c97a5e7960396b9a03dacc31a189c5338be80597f2c1aef57016e7e0486661cc9dfc5d27f3836d13f34a3a379f7b7bc9ec8346e080ec48831382a4cab16dbd0b0cea670fa8376ea43f01bdefd1d3776c89abd51e0a74f69b65892b87d1955c6e29d7f34f121d6cb7d0a022e33f5aa6a9a9ba5c5e950c8d27d67e51a0b60626fada4fa3c3d1e1994168561f83057d885c531e05daed5dafc82d92bc6bb12154c1d2d070109ee9c0a5b22485f436f1118aa24ca53342230e1d18d358e2ebddc5b7ed9eeaca", @ANYRES32=r3, @ANYBLOB="291e223d7cc2b6a826bbb47731008a511dd0673dcc12d0728011acf2cfd041ee3ac9e54e69375994a3869130eaebbeb7c297dde4fd5a75c66308be55abf1", @ANYRES16=r4, @ANYRES32=r4], 0x44}, 0x1, 0x0, 0x0, 0x24004008}, 0x8c5) 1.638290223s ago: executing program 1 (id=6470): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETA(r0, 0x560a, &(0x7f0000001040)={0x0, 0x1, 0x4, 0x20, 0x0, "0000e5ff0100"}) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='hugetlb.1GB.usage_in_bytes\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f00000004c0), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000a, 0x28011, r1, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) getsockopt$inet_sctp_SCTP_STATUS(r1, 0x84, 0xe, &(0x7f0000000980)={0x0, 0x6, 0x0, 0xd, 0x0, 0x7, 0x3, 0x101, {0x0, @in={{0x2, 0x4e24, @empty}}, 0x2, 0x9, 0x0, 0x7, 0xe}}, &(0x7f0000000100)=0xb0) setsockopt$inet_sctp6_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000140)=@assoc_value={r3, 0x3}, 0x8) r4 = socket$pppoe(0x18, 0x1, 0x0) r5 = syz_open_dev$mouse(0x0, 0x40, 0x105200) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000d40)={0x3, 0xc, &(0x7f0000000180)=ANY=[@ANYRES8=0x0, @ANYRESDEC=r1, @ANYRESDEC=r0, @ANYRES32, @ANYRES16=r2, @ANYRESDEC=r5, @ANYRESDEC=r1], 0x0, 0xffffffff, 0x0, 0x0, 0x41100, 0xf, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00'}, 0x10) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000002940)="d8000000100081044e81f782db44b904021d083910000000000000a1180015000600142603600e120900210000000401a80016000400144006000000036010fab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9701", 0xd8}], 0x1}, 0x0) write$selinux_user(0xffffffffffffffff, &(0x7f0000000040)=ANY=[@ANYBLOB='system_u:object_r:auth_cache_t root'], 0x27) sendmmsg(r4, &(0x7f0000003c00)=[{{&(0x7f0000000100)=@generic={0x2a, "ac8eaf031d302a61c76362c988b3a802faee576e1732357191b57e96d0d13669450080000000000000c4e599f3a272526ed736a9ab315e53f2d513107b66ab0e5e9561de083c0d6a7a9a57897b814fb6472ba036eb0fd08442713daf3ddbf4feae14cff8d8cc16de589fa4de22d8bf4ab9e4c0a95bfebdd385ca7356c892"}, 0x80, &(0x7f0000001280)=[{&(0x7f0000002600)="416d72c00697a9976528c352fe7adc03ba64726ccd4afe2f6a0787ee3882cfa5c69c9ac0acaa3a1c55947c3e38e6f940c6b182fa2ccb5c9a77d1c0a00c2b90ee7afb6d746043c6ddc32fbb140fdc854b2db44739e3d619b8f53bca6777a6a181f3f07a9d27a5", 0x66}, {&(0x7f0000000200)="e220987d2ed7ae10f9ebe7095767398240614ff0a8c448fc5a8f64ba2711af52e4421ef00c7e338c69a450acd0155018e46c2dfb30682bd243ac28f73e1e10ce1c1d04c732d9998d09b27254d09f0ace424d233735a325970f429893fb5025c563461e93dd6cb4fb44fece59ef9f12", 0x6f}, {&(0x7f0000000280)="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", 0xf20}, {&(0x7f0000000000)="093fc4ff3f390f24d0f88a34d08026775b793926c41a606517c05db3290385c52f2236e6cd9caa61d4778efaabde8e174cb5803bdc8d32e884b2ae04", 0x3c}], 0x4, &(0x7f00000012c0)=ANY=[@ANYBLOB="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"], 0x10f8}}, {{&(0x7f00000023c0)=@generic={0x22, "edcb36e341d756ce6cbb0d5434f6615d1d652f188fadd4b915c308b4e098cb5cd8e51b109431e07fd7ce5ac58536b02246b7c13b7beecd8dda93bd1e0650f24d6de2e3e9861866f1b2977dcf54f6787893418734dc8842f027fa8d70a71425382d0bee9777f662a899f4d7c2389fbfbbe06a1f048169a23b798374f72768"}, 0x80, &(0x7f00000025c0)=[{&(0x7f0000002440)="1e1ecdd0edd2dc917b67fa16dba0559d2ea6bbf9fb6a6d78ff7f5ebf0595e1fa1abcd3aa1641df1f54c7fb9a0ac100d376f47833f3c97d5553c91fbe75ff6c437524c398c6efd89d511af65398e298844d062b1d1152aa7381665fb8a14b3a8bff127299eed8faa2ddcedf7e0ca05a90d7d299315ad0ce57d00b0949a882ba12f794fdfa7fe729dd8c11e83eb640962e7f94b20e7cb17d520be41a882defd26209a50d8a226c15b1f205a2f70735268eb74e1392b59f7a0d", 0xb8}, {&(0x7f0000002500)="7d4aa3333fa3023b0663a60332faf840aa4b846f5beb4e1af0645bacbc2be0e8538adedf623d3414a4ff6d976556ab8f186fd2c61fe96581544bb5a364cff0e13f8190854cc766222dee52aab9c827a2a03f9820cd9a5951b0feae32bad4a5a45167c50ae2ceb22bd53c2076eb0747ff864e9da9e995eacbf0979dea28946b818429ba7a54e87968", 0x88}], 0x2, &(0x7f00000001c0)}}, {{&(0x7f0000002800)=@in6={0xa, 0x4e20, 0x84, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0xffff6c9a}, 0x80, &(0x7f0000002900)=[{&(0x7f0000002880)="7c7d67576ea4249d0f5157e3f81fa8fbc40b8973d3fbf38a949c03922334dc0a7b7975a6e1e0982a2df0449d4272accceae1a1e5f8800af697d570cba1190dd816cbf2e73e3629ce70f1b4111276f286a8bbb0d6cd21ada9760b1ac86fd8c86c58ff855905f7c995ea136808714fe35ccc757e", 0x73}], 0x1, &(0x7f00000045c0)=ANY=[], 0x408}}, {{0x0, 0x0, &(0x7f0000001200)=[{&(0x7f0000002c80)="aa5ac8fe2d25fef0de461f9872fe05c4994c022e4aedd9a348ec0430e775da31e72b654087e12ee526653c0b20ee4a3eb47837f39cacd1631c6915434641a813631dd9", 0x43}, {&(0x7f0000002680)="ddf4ff56a8b736093bed5238046968ac6fda7582cbf3927d8b68b135f07643578ee63c5a0d7dee64f7e92d98766caedc470c309699dadc677ff9acda60f0e503b8289aa905603ded03536a8226de3828456f1858168f73fa8001c857d85c6227eb08789afd393c224605ccb4e7f8763234a17003ef0781e74f51d232c7f19baf58cc124149388a578bc51c1144062a8896b6f252ab95dd1eca7e58ab2993eeeb9889f39c8d00000000000000", 0xac}, {&(0x7f0000002dc0)="358c9e2c33e392d527c9a0aea1f012ab025d5635a1b97ecb3f9fe0c62c277f03ce594ad2bc3b14a8b0ca337d6c659ceeb621adbcaf41fbeb6ce25910997e347a7fdfa4a3f38b53ffd7f579bc35aaf9196ae410d385f65b2184e37759d7af57f3b0afd25e1b91814a8c394e8a60c61584db462a6949ba7feefa491c84b0a7931098ae4b15510c69838022c84bcd6c914688a6196938202da153833da733f6cdd102733b778c4c84f9775db6ac60e6b308f10b03dd875b786792f873f7db246204bccede9ed36aff8e66697ed706472513e388a690a8a91671831108b7585cff8be68b5f416bd4a21e3871b67049f3555643", 0xf1}, {&(0x7f0000002ec0)="0b5c7a438962b0f49259ff6901e40f32630d7bb56f26fe6f270dca702aec69c1ffe0ce5bd4dbf8060b2ff3b2718d401f67dbf049be4d9e37012fbfbfa73f704b87943677eccb9e8eeaa3c97f3c72ec3f6d7a06877e01d54fe8e328fdaef3a78b17d7d765248f4946386cd96a4e4689e0aa74b0d0971745c552a9419a9e0a77d08b408f7128d358e7fd5fccd91d274859b336932336e64e4d6c2581c4f7c4148c9d323b4fa9e55ed36cbbb6cffb01de0d06e4f291bebc", 0xb6}, {&(0x7f00000011c0)="ae", 0x1}], 0x5, &(0x7f0000002fc0)=ANY=[@ANYBLOB="4000000000000000020100000100000078f9cd066ee36a22a05a2a106c4533ca52dc14c3678959b0cab5f2be54e12bf9e6cbc077fbc56b3f0f00000000000000c00000000000000097a822aa70000000e394c0dbf837c1ec50276f8ccbb8e27617ae35f7a8c0c51b07ef33a2e95ce279402d092438ac4954d03cded36238311570cbd8caff88f27f4584a35532baa06547d58469af7c07594881e7d341bcee3fcd2dde1e4a24c8c294fe951e15d35c669f11729d63431fd45d8a4c1fdb6fc8a47b2b9a283fef7078de72edd1ac10f3e8dc340ba0e9403c5b51c44c994d82fbcae3f89aaf00"/256], 0x100}}, {{&(0x7f00000030c0)=@ax25={{0x3, @bcast}, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @null, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}, 0x80, &(0x7f0000003200)=[{&(0x7f0000003140)="0bd56304610677753616713044674f90077e686c3c7cb6b247586634f9eefde685935a27c521c49cf899740e1d694879010710614bae7a08930c446856b1c7b55ae537336c2643a6dec1ded96292de6b7239789cab6803296f8ed7fe613de8b4c4a2a263679b34e1cfd95564c99096cf10f78fd695195eedabe12a7fd15d3859e36f7c0b4ea29981d490235c877e66d0e4e5c0065dbf9eb98bf5b2a2d15d9c3dab9ede9d1631c92fded2b0a32431c3780dc78122", 0xb4}], 0x1, &(0x7f0000003d80)=ANY=[], 0x178}}, {{&(0x7f00000033c0)=@vsock={0x28, 0x0, 0x0, @my=0x1}, 0x80, 0x0}}], 0x6, 0x20000014) syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f0000000480)='./file1\x00', 0x8004, &(0x7f0000000080)={[{@discard}, {@bh}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}]}, 0x1, 0x7b9, &(0x7f00000007c0)="$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") r6 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) pwrite64(r6, &(0x7f00000000c0)='a', 0x200000c1, 0x9000) r7 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x107842, 0x42) syz_mount_image$ext4(&(0x7f0000000740)='ext4\x00', &(0x7f0000000780)='./file0\x00', 0x0, &(0x7f00000007c0), 0x1, 0x71e, &(0x7f0000000800)="$eJzs3U1rXNUbAPDn3mb+yb+NJoKKLyAVxYqlkya2lK6sC9FNMVBwm4bkJsTc9MbMTG1CF+nKrYii4Ea/gxtXims/gF9BQbTURV1F7mQmfZtJpppkIPP7wZ15zr03ec6ZCeeBnGFOAAPrZPmQRjwfEdNJxFjrfBIRlWY0FHFp+747t2/OlUcSW1tX/kia95TtuO9nSiciYjMinouInyoRp9NH89bWN5Zn8zxba7Un6iurE7X1jTNLK7OL2WJ27eK5c1PnLpy/eHH/xvrG+x88Wz3/zuj30wszpyZ//S6JSzHaunb/OPbT9mtSKV/CB7x7EMn6KOl3B/hXhiLiWOv5mRiLY80IADjKtoYjtgCAAZOo/wAwYNr/B2iv7R3UOlg3v78dESOd8g+11sxGmuuQx+8kD6xMJBExfpgd5UjavBURV8dPPvr3lzyyZvu4zu5HBzlQP5bzz6VO80+6M/9Eh/lnpP3Zif+o+/x3L/+xLvPfdI853nuxUXTNfyvihaFO+ZOd/EmX/Fd7zP/D3fm/u13b+jbitY71J3kgV/fPh0wsLOXZ2e3HzjlONm5+uNv4j3fJv7nH+Fd7HP/oZy//vLlL/tdf2f3975S/rImf9pj/k8pbX3S7Vuaf7zL+vd7/b3rMf+GljzZ6vBUAAAAAAAAAAAAAAAAAAAAAAAAAAACOhDQiRiNJqztxmlar23t4Px3H07yo1U8vFI1r89HcK3s8Kmn7q5bHtttJ2Z5sfR9/uz31UPvNiHgqIj4f/n+zXZ0r8vl+Dx4AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAWk48tP//X8Pb+/8DAEfcSL87AAAcOvUfAAaP+g8Ag0f9B4DBo/4DwOBR/wFg8Kj/AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAByy6cuXy2Przu2bc2V7/vp6Y7m4fmY+qy1XVxpz1blibbW6WBSLeVadK1b2+n15UaxOTUXjxkQ9q9UnausbMytF41p9ZmlldjGbySqHMioAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAeDyjzSNJqxGRNuM0rVYjnoiI8agkC0t5djYinoyIX4Yrw2V7st+dBgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIB9VlvfWJ7N82xNIBAIdoJ+z0wAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABw+O5t+t3vngAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABAP6W/JRFRHqfGXh19+Or/krvDzeeI+PjrK1/emK3X1ybL83/unK9/1To/1Y/+AwB7adfpdh0HAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgE5q6xvLs3merR1g0O8xAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACwf/4JAAD//68fzsc=") lseek(r7, 0x5, 0x3) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) 1.536124874s ago: executing program 4 (id=6472): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000ae00000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r0, 0x0, 0x7}, 0x18) r1 = syz_open_dev$usbfs(&(0x7f0000000080), 0x70, 0x101301) ioctl$USBDEVFS_IOCTL(r1, 0xc0105512, &(0x7f0000000200)) ioctl$USBDEVFS_IOCTL(r1, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x0, 0x25c, &(0x7f0000000440)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002064070000000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000006000000850000000700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r2 = socket$inet6(0x10, 0x3, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r4 = bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x13, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000080)='syzkaller\x00', 0xffffffff, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r5 = socket$inet6(0xa, 0x2, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000001000000b703000000000000850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000001180)='kmem_cache_free\x00', r6, 0x0, 0xfffffffffffffffc}, 0x18) socket$inet6_udplite(0xa, 0x2, 0x88) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000b40)={0x11, 0x8, &(0x7f00000026c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xffffffffffffff7e, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f00000003c0)='mm_page_alloc\x00', r7}, 0x10) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000480)=@base={0x5, 0x6, 0x8, 0xad, 0x0, 0xffffffffffffffff, 0x4000000, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r9 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0d00000002000000040000000240000005000000", @ANYRES32=r8, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="040000000000010800"/28], 0x50) bind$inet6(r5, 0x0, 0x0) r10 = syz_open_dev$loop(&(0x7f0000000000), 0xc, 0x129900) ioctl$LOOP_SET_BLOCK_SIZE(r10, 0x4c09, 0x6) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r11, 0x8923, &(0x7f0000000000)={'vlan0\x00', @local}) r12 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000340)=0xffffffffffffffff, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000740)={0x18, 0x33, &(0x7f0000000500)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x5f, 0x0, 0x0, 0x0, 0x6}, {{0x18, 0x1, 0x1, 0x0, r9}}, {}, [@generic={0x8, 0xe, 0xd, 0xc, 0x5}, @ldst={0x3, 0x4, 0x0, 0x6, 0xf, 0x80, 0x4}, @exit, @map_idx_val={0x18, 0xb, 0x6, 0x0, 0x6, 0x0, 0x0, 0x0, 0x5}, @tail_call={{0x18, 0x2, 0x1, 0x0, r8}}, @map_idx_val={0x18, 0x7, 0x6, 0x0, 0x2, 0x0, 0x0, 0x0, 0x2}, @tail_call={{0x18, 0x2, 0x1, 0x0, r8}}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x5}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r4}}, @jmp={0x5, 0x0, 0xd, 0x0, 0x8, 0x50, 0x1}, @tail_call={{0x18, 0x2, 0x1, 0x0, r8}}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000280)='syzkaller\x00', 0x5, 0x5b, &(0x7f00000002c0)=""/91, 0x41000, 0x42, '\x00', 0x0, 0x0, r12, 0x8, 0x0, 0x0, 0x10, &(0x7f00000006c0)={0x4, 0xd, 0x5, 0x9}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000700)=[r4, r4, r9, r8, r4, r7], 0x0, 0x10, 0x8, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000380)='neigh_update\x00', r3}, 0x10) sendto$inet6(r2, &(0x7f00000000c0)="900000001c001f4d154a817393278bff0a80a578020000000104740014000100ac1414bb0542d6401051a2d708f37ac8da1a297e0099c5ac0000c5b068d0bf46d323456536016466fcb78dcaaf6c3efed495a46215be0000760700c0c80cefd28581d158ba86c9d2896c6d3bca2d0000000b0015009e49a6560641263da4de1df32c1739d7fbee9aa241731ae9e0b390", 0x90, 0x0, 0x0, 0x0) 1.339801837s ago: executing program 4 (id=6474): bpf$MAP_CREATE(0x0, &(0x7f0000002040)=ANY=[], 0x48) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8936, &(0x7f0000000000)={@dev, 0x40}) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) r0 = inotify_init() inotify_add_watch(r0, &(0x7f00000000c0)='./file0\x00', 0x4000001) lsetxattr$trusted_overlay_redirect(&(0x7f0000000100)='./file0/bus\x00', &(0x7f0000000140), &(0x7f0000000180)='./file0/bus\x00', 0xc, 0x0) 1.289184668s ago: executing program 4 (id=6475): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000001200)={0x1, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x10000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000080)='kfree\x00', r1, 0x0, 0x6}, 0x18) r2 = syz_open_procfs$pagemap(0x0, &(0x7f0000000600)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r3, &(0x7f00000018c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001780)=ANY=[@ANYBLOB="14000000000000000100000001000000", @ANYRES32=r3], 0x18}, 0x0) close_range(r2, 0xffffffffffffffff, 0x0) 1.232431689s ago: executing program 4 (id=6476): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = accept4$tipc(0xffffffffffffffff, &(0x7f0000000340), &(0x7f0000000200)=0x10, 0x80000) socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYBLOB="0000000000000000b704000008000000850000007800"], 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = mq_open(&(0x7f0000001140)='eth0\x00#\x13\xaeu\xe0\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t/\x8dv\xd3\xa7\xd8J\xfd\x94#KT\xdd\x14\xd3\xe1\xbe_$A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\x88N\xb8\xde\xeb)\xcd\xc56m\n\v\x01\xbe\xeb\xbb\x91\x11z\xc2|d\x1b\x04\xd2\xf9yx\xb2\x1b\bLTrw\x88|0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\xcf\xbf\xf5\x80a%\xdcQ\xb3CuT\xcc\x02\xea\x91\xe8\xd8\x01YZy\xe6!\x89\x9c\xd1\xa6\x167\x8avs\xb2\a\xfe\xb3j*\xad\x18I\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xb3\x1bo:\xe8\vq7S\xe4H\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1[\x84\x10aF\x9b\xda\xeb\xc4*\x02q\xb2\x92\x00\x8cv\xac AN\xb9\xaa\xe0\x9d\x97Te\x81\x98L\xfe\x97+u\xd3^\xb1\xf0\xe0\x1f\xbd\a\xbb\xe5\x18\x9ds\x12ha\x00\xeb\x84\x99\xc6\x0f\xf1\xd5LD\xa87\xa0DQ\x8a2\x16!8,\xbc%$\xf1\xf2\xd6\x9cy\xecK\xda\xc5\xdc\xfa\xdd\xf6\b\xc6\xb4\x14\x16\x9c\x7f\x92\x85\xb0\xa2%:\xf0\xf4\x150\x0f\xb4\xa6d\xb4\xe4L\x19W\xd5\x90\xf7l\x1b\xfe\xde\vh\x97=m\x82.\xac\vh\xfe\x84Q}\x838/\x83\xebP\xbe\xd6+:\xceE\\\x95\xd4\xac\x92\x87\xd7\x98\x97\xe3\xec\xad\xd5\xac\x80C\x84R\x88r^g\xbaQ(\x9a>\xe2\xba\xa8=\x17\f04\x8f\x1f\xf2\x88*@v\xe7\xd1\xee\xb3\xc2\x8dT\xda\x81g\xd9\x1a:hzW6s)x\x06\xae\x11\xf2\x1e\xcd\v\xe5L\x19\x96s\xbc\x9e\xf4\x10$\r\xa4\xd8\xa2\xa2\xfcM\xc5R3~$\xc0\xa5n\x9a W\xb1e\xcc<$\xdf\x15\f]\x15\xf5#G\xce\xaf\x88U\xfa\x80\xf24\xf6\xb5\xef\xe2z\xcf\x9eN\x92\xac\x81{\xe6\xbd\xd7\x16\xe6F\xe2\x9e\x91%\x94\v\xb9\xdc\xd6\x87\x8f\xcd\xc1\xb05\x81\x81\xf8\xe9X\xe8Kt9@\xf4\xe1\xa6=\xc9\xe1:p4\nP[f\x1d\xfd\xfa\x839\x8d\x0e\xd1\xf9\xa0\xd2^E\xe5\xedo.\xaa\xf2\xb4\xcdn\x14\f\xcd\x83_yk\xda\xc5\x89\xf0Z\xea\x1d\xbd\xc00\v\xa3\xb3\xbe\xe6\x8b\x18/\xa8\xaaY\xf2\x89\x0f\x9enOOr\x00\xb2\x01\x1f:Z\xb8\xee;\xe3;\x8aPV\xce\xee\xf8[\x16\n\xe6:z\xb8\x1dvk\a{\xc1\x14\xd9+\xdb\t\x11\x90y\xe8\\\xe6\xfc\xca\xb4\xcbC\xd6\xd0\xbeC\xce\xc0L\xdb\xcd\xb3\x907c\xb4\xa6\xce\xdb[\xce\x122N\xa3\xc7Q<\x1a\xa5\xb3)\xc5\x98\x84\x8a\x82\x19\xb0\t\xac\x10\\\x8c\xbe\xcb\raIYe[\xa8\xc4\xac\x0e\xbb\x0f\b^\xdag\xe2\xa9\"\xf5h\'\xcf\xd9\x1b\xef\xe3\xe7y\x82\x1e\xca\x7f\x02 \xcf\x9e\xe0\xd9TM\xb9\n\xa9\xad3\x91\xa5\xe6!\xcd\xa2\xa4\x14\x12\xf9\xbf\xa8b\xcec:\xd7\'\f\f\x957\xc9}\r\xa6\xaa\x0f\xca\x96\xeb', 0x42, 0x0, 0x0) mq_timedsend(r1, 0x0, 0x27, 0xfa, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f00000002c0)={0xa, &(0x7f0000000240)=[{0x2, 0x37, 0xf8, 0x4}, {0x5, 0x45, 0xb, 0x4}, {0xffff, 0x0, 0xfe, 0x2}, {0x5, 0x7, 0x7f, 0x3}, {0x2, 0x9, 0xf8, 0x3}, {0x1, 0x6, 0x4, 0x5}, {0x2, 0xf7, 0xf, 0x3}, {0x0, 0x5, 0x6, 0x5}, {0x8, 0x2, 0x64, 0xfc6c}, {0x1, 0x4, 0x2, 0x8}]}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) creat(0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x4) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000300)='configfs\x00', 0x0, 0x0) chroot(&(0x7f0000000000)='./file0/../file0\x00') mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x101091, 0x0) pivot_root(&(0x7f00000001c0)='./file0\x00', &(0x7f00000000c0)='./file0\x00') r2 = socket(0x8000000010, 0x2, 0x0) write(r2, &(0x7f00000002c0)="fc0000001c000704ab5b2509b868030002ab087a0100000001481093210001c0f0030584050060100000000000039815fa2c53c28648000000b9d95662537a00bc000c00f0ff7f0000b400600033d44000040560916a0033f436313012dafd5a32e273fc83ab82d710f74cec184406f90d435ef8b29d3ef3d92c94170e5bba2e177312e081bea05d3a021e8ca062914a46ccfc510bb73c9455cdc8363ae4f5df77bc4cfd6239ec2a0f0d1bcae5fa0f5f9dcdd51af51af8502943283f4bb102b2b8f5566791cf190201ded815b2ccd243f395ed94e0ad91bd6433802e0784f2013cd1890058a10000c880ac801fe4af000049f0d4796f0000090548de", 0xfc) r3 = socket$inet_tcp(0x2, 0x1, 0x0) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) sendto$inet(r4, &(0x7f0000000040)='\f\x00', 0xffeb, 0x0, &(0x7f0000000340), 0x10) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000001800)={0x11, 0xc, &(0x7f0000000600)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000fa540000850000008200000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000300)='kmem_cache_free\x00', r6}, 0x18) ioctl$sock_inet_SIOCSARP(r3, 0x8953, &(0x7f0000000180)={{0x2, 0x0, @empty}, {}, 0x0, {0x2, 0x0, @multicast1=0xe000cc02}}) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000001340)=ANY=[@ANYBLOB="02000000040000000400000004"], 0x50) ioctl$F2FS_IOC_RESIZE_FS(r7, 0x4008f510, &(0x7f0000000080)=0x7) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xe, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="1801000000bae3000000000000000000850000007b00000018110000", @ANYRES32=r7, @ANYRES16=r7], &(0x7f00000001c0)='syzkaller\x00', 0x9, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000640)='kfree\x00', r8}, 0x10) 1.22288811s ago: executing program 2 (id=6477): bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYBLOB="0000000000000000b70200001400001cb7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x18) r1 = socket$rds(0x15, 0x5, 0x0) bind$rds(r1, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r1, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000200)=[@rdma_args={0x48, 0x114, 0x1, {{}, {0x0, 0x2c}, &(0x7f00000006c0)=[{&(0x7f0000000100)=""/44, 0x2c}], 0x1}}, @rdma_args={0x48, 0x114, 0x1, {{}, {0x0}, &(0x7f00000004c0)=[{&(0x7f0000000080)=""/28, 0x1c}], 0x1}}], 0x90}, 0x0) 1.138243721s ago: executing program 2 (id=6478): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b7"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='mm_page_alloc\x00', r1}, 0x10) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r2) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x2d, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) ioctl$TUNSETOFFLOAD(r3, 0xc004743e, 0x110e22fff6) ioctl$TUNGETVNETLE(r2, 0x40047451, &(0x7f0000000180)) 1.077129572s ago: executing program 1 (id=6479): r0 = socket$inet6_sctp(0xa, 0x801, 0x84) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f00000000c0)={0x0, 0x1}, 0x8) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) r2 = gettid() r3 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x88040, 0x0) fcntl$setlease(r3, 0x400, 0x0) clock_gettime(0x0, &(0x7f0000000280)={0x0, 0x0}) mq_timedsend(r3, &(0x7f0000000300)="09cee41de6d7e4f19b11063867d0ab017b7b968ebc62cbe3b4accfc97ac5097bccf38c34a6b34fd80c5a78076cf374dee1e4851c7bd54fb85db6e264cbd3f5e2fe2df401df76fe9c5222d01a7072f4ed0e0f7b500cdbc6c3456cbbfa3a38f68de7cdef10895a72fd0e2e74e8c5c0086ccced0b8a570912e6a459a609bb35d21a8c5d8942f78a938d7a19edc098c096202aa90bbf1621aea385fb4a6ad37e233663c569a6e7f81696853d4a0caf99", 0xae, 0x6d5f, &(0x7f00000003c0)={r4, r5+10000000}) prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYRES8=r2], 0x50) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000001480)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYRESOCT=r3], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kfree\x00', r7}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) r8 = socket$kcm(0x2, 0x5, 0x84) ioctl$FS_IOC_SETVERSION(r6, 0x40087602, 0x0) sendmsg$inet(r8, &(0x7f0000002980)={&(0x7f0000000140)={0x2, 0x4e20, @dev}, 0x10, &(0x7f0000001400)=[{&(0x7f0000001540)='_', 0x1}], 0x1}, 0x4000040) setsockopt$sock_attach_bpf(r8, 0x84, 0x1e, &(0x7f0000000000), 0x10) r9 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFADDR(r9, 0x8916, &(0x7f0000000080)={'batadv_slave_1\x00', {0x2, 0x0, @remote}}) ioctl$sock_inet_SIOCSIFADDR(r9, 0x891c, &(0x7f0000000540)={'batadv_slave_1\x00', {0x2, 0x0, @private=0xfffffffe}}) tkill(r2, 0x13) r10 = dup(r1) write$UHID_INPUT(r10, &(0x7f0000000440)={0x8, {"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", 0x1000}}, 0xffffffffffffff77) sendto$inet6(r0, &(0x7f0000001e40)="067e0e4e3816", 0x6, 0x20044061, &(0x7f00000001c0)={0xa, 0x4e27, 0xffffffd9, @private2, 0x4}, 0x1c) r11 = socket$inet6_sctp(0xa, 0x801, 0x84) sendto$inet6(r11, &(0x7f0000000040)="aa", 0x1, 0x0, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x3}, 0x3}, 0x1c) shutdown(r11, 0x1) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r11, 0x84, 0x17, &(0x7f0000000400)=ANY=[@ANYRES32=0x0, @ANYBLOB="2a000300a788c1"], 0xb) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}, 0x1c) 1.075443812s ago: executing program 4 (id=6480): syz_mount_image$ext4(&(0x7f0000000440)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0xa00008, &(0x7f0000000040), 0x1, 0x7ba, &(0x7f00000007c0)="$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") r0 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000003000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xa4ebbe25218875b3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x11, 0x70, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], 0x0, 0xfff, 0x0, 0x0, 0x40f00, 0x4, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000940)={0x11, 0xc, &(0x7f0000000300)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000040)='kmem_cache_free\x00', r2, 0x0, 0x2}, 0x18) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x104) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./file1/file3\x00', 0x0) renameat2(0xffffffffffffff9c, &(0x7f0000001100)='./file1/file3\x00', 0xffffffffffffff9c, &(0x7f00000010c0)='./file0\x00', 0x0) fspick(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x88882, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c5902, 0x0) ioctl$PPPIOCSPASS(r4, 0x40107447, &(0x7f00000001c0)={0xa, &(0x7f0000000300)=[{0x6, 0x81, 0xe, 0x4}, {0x1, 0x8, 0x7f, 0x5}, {0x6, 0x9, 0x40, 0x80}, {0x7, 0x5, 0xff, 0x39018f0a}, {0x1, 0x0, 0xd}, {0x3, 0xc, 0x2e, 0x5}, {0x7, 0x0, 0x5f, 0x40}, {0x6, 0x7, 0x40, 0x6}, {0xea, 0xe, 0x33, 0x5}, {0x6, 0x8, 0x9, 0xe19d}]}) write$RDMA_USER_CM_CMD_DESTROY_ID(r4, &(0x7f0000003280)={0x1, 0x10, 0xfa00, {0x0}}, 0x18) sendfile(r4, r3, 0x0, 0x7ffff000) write$P9_RREADDIR(r4, &(0x7f0000000080)={0x2a, 0x29, 0x1, {0x1, [{{0x40, 0x2, 0x3}, 0xffffffffffffff92, 0x4, 0x7, './file0'}]}}, 0x2a) 991.909193ms ago: executing program 2 (id=6481): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000580)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x4}}, [@NFT_MSG_DELOBJ={0x44, 0x14, 0xa, 0x801, 0x0, 0x0, {0x5, 0x0, 0x3}, [@NFTA_OBJ_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_OBJ_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_OBJ_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_OBJ_NAME={0x9, 0x2, 'syz0\x00'}]}, @NFT_MSG_NEWSETELEM={0xd38, 0xc, 0xa, 0x801, 0x0, 0x0, {0x7, 0x0, 0x2}, [@NFTA_SET_ELEM_LIST_ELEMENTS={0x3d4, 0x3, 0x0, 0x1, [{0x3d0, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_DATA={0x4}, @NFTA_SET_ELEM_KEY={0x1ac, 0x1, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x20, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}]}, @NFTA_DATA_VERDICT={0x10, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}]}, @NFTA_DATA_VERDICT={0x28, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}]}, @NFTA_DATA_VALUE={0xec, 0x1, "3f698fa09bfb2c60fdff49679084b5af297c1efd9841fcbba98be16f1f468da552947ce4c24ed51de5351a2b6393297a7bdb752aaa035726f6d88c10331e1c1c2d09a76d9a1bf280119b890aec5c6258e3d0da63b380713cf6ae108c367d470f1b22848b7bc3c3019e3bc944b9cc2c4d9e2ff471b480ee17dfe15280eeaa4a4b9f9129d44bec435a76205c0ed956de9725e50ee1b5c33bfce24a022864aca82ac6707ae56d11ff3a2828a3dad277d406836fe6cde07f5eb3ff5fc449946676939bdde9e97f9f4256a2258550ef1aa08f8c5f21de37ae35ed0fcf9625ad05d4a841f14bf433a7c9e3"}, @NFTA_DATA_VALUE={0x4}, @NFTA_DATA_VERDICT={0x18, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}]}, @NFTA_DATA_VERDICT={0x48, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}]}]}, @NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0x6}, @NFTA_SET_ELEM_USERDATA={0xa9, 0x6, 0x1, 0x0, "139e3797678ff322cfcefd21d65fd04743fae2902e769bde9eeb91d2fa50565e797114b5ae146b63fb9d5acc2117ab5ff35d6142a500e72cb875f3570bdc96a3f71f330f8d73160394f6ded71e209c1298974a511d5562d8465499dd9ebf3249d60cf62ddcb100b022ccfe25cc24102b63ed9143ce4e13b3ac9af0c4e81d87df502bf64e0f892e3db4eb9c94b8bfbc5c1ed89605af8d44b94a11e454f4b367b08120d8d0fd"}, @NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz2\x00'}, @NFTA_SET_ELEM_KEY={0x158, 0x1, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x2c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}]}, @NFTA_DATA_VERDICT={0x14, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CODE={0x8}]}, @NFTA_DATA_VALUE={0x21, 0x1, "42cf94d4fd27bf34cdf141027a71099b4b3c42a20adcb2a37805f8ae1b"}, @NFTA_DATA_VALUE={0x10, 0x1, "5f5c5c3c899dfcdda027072a"}, @NFTA_DATA_VALUE={0x6e, 0x1, "3df054fcf2235faf2c0fdcdb5a941db46a6f9dec1ec3a93293d7ba38188290e74c7b3e886dd93cb7cfabea84df6bcbe31c10b5c0144c3cb6fa0d31f615077a61290cf875f17a1a2b8008e34a834a47ee2af6b091e52719b1672dc374246b3aee11dedd57b18cc1374003"}, @NFTA_DATA_VALUE={0x1a, 0x1, "690b312a9bcb8777e3d41b800f61bcf1c698123bb6fe"}, @NFTA_DATA_VERDICT={0x2c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}]}, @NFTA_DATA_VERDICT={0x28, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}]}]}]}]}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x5fc, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0x1}]}, {0x1a0, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz2\x00'}, @NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz0\x00'}, @NFTA_SET_ELEM_EXPRESSIONS={0x18, 0xb, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, @connlimit={{0xe}, @void}}]}, @NFTA_SET_ELEM_USERDATA={0xb9, 0x6, 0x1, 0x0, "0c55463171676a069bd35df904838905f313be2fcc7abbecaea9d52b1710ebc1f6cd2453f7acb4cbaa1cddfff336ddda317050f25881a991c65fa7cedb56459844896f21a59bd62d1dcb2860cef18d519a70d13bb9f331c21f6cbc09941c85aead0c03515dab58fa8de669115fe680dd8dd930a985081cd177698a5c8d2392ef8965ee204ed9c3fa4a937a959ca9a716014caa1e3acdc6893caaec6062f3d789e4bce9eeed1c35c01c753dd13915af5c5cbe2942c9"}, @NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0x3}, @NFTA_SET_ELEM_USERDATA={0x84, 0x6, 0x1, 0x0, "67ab84875e6c353eaf74c8b188f498455421aff3156ed345b7395b982175a34dc434e2d075a127253141fe7e1b391dc56104534664c28762a6cbdffc9c97eda6a3b8f242dcbc7faeb48b10ea324022387373e2dc0f361e993ba68e66b8968cc3277a9535c83863cf38776d47fd806a203198d3bbf6996b0dccf0a11bca856c42"}, @NFTA_SET_ELEM_USERDATA={0x1d, 0x6, 0x1, 0x0, "0162f90aaf07e2758ee54fcd6905d70441e35fd8d9cdd9f93e"}]}, {0xe4, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_USERDATA={0xd3, 0x6, 0x1, 0x0, "a1be62cc179e9a625208bedc7e19d948a9ea854e2124a0339dda5ab40ea6d511bde53af6d448688b2b280e079f01d697b9f4dea35baafb05068cd04bb1db330a409516e684b97593199438f54c33f60675f46ef9e04145b61b05b32d9a4a5e75a7f82869ed8bb0f667df270ab819a265e8f8b99c223d8e4ba633dbe0023323973731e36d7173fb221a595c3ea81ccee06088856cb99f956bd34fa80c51f9d37940bb2026c82c4160c02e67a3a530f15930ff03c902bd07413d3366e1c061d06b83cf7b02bc58efa9dc3298f28abc9b"}, @NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0x7}]}, {0x34, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0x5}, @NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz1\x00'}, @NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz2\x00'}, @NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0x7}]}, {0x40, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_EXPR={0x28, 0x7, 0x0, 0x1, @fib={{0x8}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_FIB_DREG={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_FIB_FLAGS={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_FIB_FLAGS={0x8, 0x3, 0x1, 0x0, 0x10}]}}}, @NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0x4}, @NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x3}]}, {0x2d4, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_USERDATA={0x92, 0x6, 0x1, 0x0, "dae0cd61e2b74d9968432f11702000fd495533b3d3944e25187fe85d162d85900fbbbedc4dff0de749b8c74fab41fb5abda761c1b96634a2d7d6f004178850203c42f50bac7bf31ad15b8da8bb3e8f962e77bdcc2a3d1eb2c7355b2957170da3fe3b6f84b38e52fcc48d74b0c8bf2d63a55319f9a2e12597491d246dfa57ab07ab98fabc688cf872c8c6f13abf1f"}, @NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0x1}, @NFTA_SET_ELEM_KEY_END={0xd4, 0xa, 0x0, 0x1, [@NFTA_DATA_VALUE={0xd0, 0x1, "45ed3288ea91b2ac17c4d221814ee18d8c922d787d24109f572786875ad82c65a05bfb0caf53d31e6279502f404f05ab920d126e7f1aa81f76d903e85c970e5ca5dbf38ac156127eff867d8e5fd3a2d19e37828a89709b7638bbe341eb3d889b81fb9253366968f60b23042d53fadc2b2e63e34f41cd03a11a1ab106dd916479dfdd7c622e7b5cbd199d473c1f1cfaf087399fb691cf9a333903bc9120537ad34f03fabe7ef97aae45d8fe82d2f50aa4589cd11776004b4292da9f8ad020c1507785e2616dc4421fab189208"}]}, @NFTA_SET_ELEM_DATA={0x154, 0x2, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x18, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}]}, @NFTA_DATA_VALUE={0x9e, 0x1, "c1b987ac6f132e328b0adfbb91f49a7066e33bc21355187bbd02dbf2ad1ba2e4ba30d9049af93d74513e2c5c63d16ecc3d8dff62e10e0ff430385e6ad7550fa3202a448e9b1560cb811c5ddc1bd6a2996435a81fea2b38438498cf0ac32e01938304d58fc31a742c87faa441d1d6e9aa7c4fd82d10a3b551622a97b0f687a0c44ca2d89140a7c5fd520357c09b35558213e9befd3653856e656c"}, @NFTA_DATA_VERDICT={0x50, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}]}, @NFTA_DATA_VALUE={0x48, 0x1, "c4977a66913fcaeddaf6fb25e7e439940073b19eeaab1403a3df7e80aee6173d7298a98bc4f7644e6fcd00ea680ce8b441c171e47d52e4afa935bfa71cea3954abef8b03"}]}, @NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x3}]}, {0x1c, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz0\x00'}, @NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz0\x00'}]}]}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x324, 0x3, 0x0, 0x1, [{0x320, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_USERDATA={0xf, 0x6, 0x1, 0x0, "10e435f47dedae7c9ed127"}, @NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz1\x00'}, @NFTA_SET_ELEM_KEY={0x54, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x4f, 0x1, "d4fcb1bda64821f95eb3aa94b998ced2432a0d03e1e59381d3ebaa59813a4c87b93a0d679f43af53296f886c61f4fc7420a3bead22b52ff43b53743e755f9d6bd68b6a38517d6cb61210f5"}]}, @NFTA_SET_ELEM_USERDATA={0xc0, 0x6, 0x1, 0x0, "49e1d083be6c7bfad2b38c00fb6001ba219eca23099070ff722e8c01b6966181c7048c9087cbc01a1d3d5192940519bdfb17fd625e78fa5c2bf03cf56a9f966850002087440036ab9fc254cc9192a5cec969910aa384e93b9652e6b46a9d48b87c411ebc2793ddbca9df55e00a6cc8d48773905978d13aa7523d6075eabfc5b7254b7156d6a70fdf1835f89eed3a38f8856795dd9a11a5c60636a8a6f6cdf5ba04b19f8b6c470762492b3b7b01b3351e92617fdd457e11d039fff390"}, @NFTA_SET_ELEM_DATA={0x1e4, 0x2, 0x0, 0x1, [@NFTA_DATA_VALUE={0x5a, 0x1, "3bce813752fc047a6314393c256a2b50ddaed85a15bd505d48fe27dbcccba9f86a405f560b714c4d4db3626273175a8bec49fbdf3aac3f4467cc12fe4fcf700dd3ab2b0a1f4bb1378abf9bc029ae4d6033202fee7ea3"}, @NFTA_DATA_VERDICT={0x1c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}]}, @NFTA_DATA_VALUE={0xf5, 0x1, "89af05a49fd08a268a54fab91454837dbf009cb7cf8699e12368d2d3661c8a43a71fe4dc7a805ae9611afbdc13a5563719e10e781651aa53077ff417ddd72b530ed927b751e5c5d50a00aeb62906941971413eb4f79459f669826b8d1ca72f9c5584b6fcdf1bb22533a9517efc9b773e4d3c7c392bcedaf73d2b2d5471912de4d13452378c77263d4242ed8b8685e8e453718176504bb5282b5d421ee3cf27128fdb01d155d3e2af8359c58e863c2cdb8d2d5fbd4c04870f1e745c5193a9f1f30147acdfdaa786803cf525725a1f482e24b86864c4d8f18fdb448ea18154aa81390b8ca26a3a065ccd0ec0df42856de8bb"}, @NFTA_DATA_VERDICT={0x10, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}]}, @NFTA_DATA_VALUE={0x25, 0x1, "0571fd513e0d8968e87b9c7ef898cd017f64a3db674a16b0d28fb503f525073b2b"}, @NFTA_DATA_VERDICT={0x14, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}]}, @NFTA_DATA_VERDICT={0x24, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}]}]}]}]}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz2\x00'}]}, @NFT_MSG_DELSETELEM={0x1254, 0xe, 0xa, 0x101, 0x0, 0x0, {0x3, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_ELEMENTS={0x228, 0x3, 0x0, 0x1, [{0x20, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_EXPR={0x1c, 0x7, 0x0, 0x1, @range={{0xa}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_RANGE_OP={0x8, 0x2, 0x1, 0x0, 0x1}]}}}]}, {0x204, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY_END={0x100, 0xa, 0x0, 0x1, [@NFTA_DATA_VALUE={0xb0, 0x1, "a180c8d88b7b89a6504f809238dcb848d535c20778400311d1aa7ae4f429ce3880597d18d99b16e4d4bb42e3255d9f6af2399fb7c0dd6cf2f07dcac6eb7ffb5fe7e4e7b8278a63a4cb369bac0e2e6553fce33f58eb30b971ca981b9c7ae3749e6a015137fd7e51f134fa79eb4e68a6a1adaa6ec3271881a1706d50deb143863a5c5b6a152d1515f31c833fa7b451e22b38be76da521b8366a7a5d4711be6c31a46d743cb4831207e320d2493"}, @NFTA_DATA_VERDICT={0x4c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}]}]}, @NFTA_SET_ELEM_KEY={0xe8, 0x1, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x28, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}]}, @NFTA_DATA_VALUE={0x81, 0x1, "6de4bc4b4adbf9be7eba4616a65599347d8c5e09116e47b5b6f3c52f11eea489337c91c7fec5a41c89e324b3fcc6c4149c0d661486385a467631b91fd1085d5ace07c98c432981d9d29908f9cf8c1c2c9ce7dda15a07da9e83187d9df066a19192e2119892b3cb8486788ff8e8c4943c8f1619e90704907f47bb5cfd0a"}, @NFTA_DATA_VERDICT={0x38, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}]}]}, @NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0x3}, @NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz2\x00'}]}]}, @NFTA_SET_ELEM_LIST_ELEMENTS={0xfec, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz1\x00'}]}, {0x138, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY_END={0xcc, 0xa, 0x0, 0x1, [@NFTA_DATA_VALUE={0xc8, 0x1, "ad914cf80f2fc0ff6e5f6eb3abfef2aab1562991c436237d5d0ceaecf5b4903292c874c1a884e30c20d8490020ee5da66515c963b494d5628e02588a7af7d4e77f98a9c92f2421a8e443fad7d92384926476afb6ed2e802eae5a4fa8d4f37af0094a54df238a00e8fb523a6e8240ce6d72cadd7b27ff2bc3ce0373bbdb85d23e95880f1d2ef2202588ebeecf18e517cd3e6c02a7e0e199799513379078e51eba4fd75fe257ab03ae6301d17b6c03a6537b90fa6938b64c477a45f83ba4ac0dd2a1e2a85d"}]}, @NFTA_SET_ELEM_EXPR={0x14, 0x7, 0x0, 0x1, @connlimit={{0xe}, @void}}, @NFTA_SET_ELEM_USERDATA={0x52, 0x6, 0x1, 0x0, "112b01fb674b48dec81cab4a73ce2c2ab11b00a85350653f877eccdfd966eaf31a09385ff9bbf83264904fae78149792215501268ebf5c0942e18bdc95806112508693b87a0e4fb60d1c75e55675"}]}, {0x138, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_EXPRESSIONS={0xc4, 0xb, 0x0, 0x1, [{0x4c, 0x1, 0x0, 0x1, @flow_offload={{0x11}, @val={0x34, 0x2, 0x0, 0x1, [@NFTA_FLOW_TABLE_NAME={0x9, 0x1, 'syz1\x00'}, @NFTA_FLOW_TABLE_NAME={0x9, 0x1, 'syz2\x00'}, @NFTA_FLOW_TABLE_NAME={0x9, 0x1, 'syz2\x00'}, @NFTA_FLOW_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}}}, {0x18, 0x1, 0x0, 0x1, @flow_offload={{0x11}, @void}}, {0x10, 0x1, 0x0, 0x1, @dynset={{0xb}, @void}}, {0x14, 0x1, 0x0, 0x1, @byteorder={{0xe}, @void}}, {0x1c, 0x1, 0x0, 0x1, @tproxy={{0xb}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_TPROXY_REG_ADDR={0x8}]}}}, {0x10, 0x1, 0x0, 0x1, @socket={{0xb}, @void}}, {0xc, 0x1, 0x0, 0x1, @ct={{0x7}, @void}}]}, @NFTA_SET_ELEM_USERDATA={0x64, 0x6, 0x1, 0x0, "fca415f385ced50fba29cedcbdcd34092fd53a0a6fdfbfb97c430a50544149d215674093eb73fbe983fc2d8229b60b5682ebdde3c816d7b70dd876467a95483c1f4dba171550534d6e486466a771d87d47935435610aee55c5b3471316ad0dc0"}, @NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0x4}]}, {0x4c4, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_USERDATA={0xe9, 0x6, 0x1, 0x0, "4b0188a35f3b21f09085923cab4a6b94bb4b71647f46f40eb7647b77f6e2da3447ea94f49197b941892b358b48f584ac3087d3b75eac8a7e09508fa9fe58df6449557620e031c3f6189a4b4ca64f93b782e4b11cae74a075439a4a82f50cdc11f042d61884231da32af90700189eed59978aa1821f5a6a0f0848743200d303c34091c9f170277bf48dcb294f72b3b5ddddc51f44f41fd6439873177d3aadf01f05fdcf23b4324429b6d80f08a28c70a4a77d39bd3be07c6ece1f57b404ad9a397e2974831918761c530a14a4db6e6703ab2234197f98ef71efdc8dccd8b4056b7467edb035"}, @NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0x1ff}, @NFTA_SET_ELEM_EXPRESSIONS={0x24, 0xb, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, @cmp={{0x8}, @void}}, {0x14, 0x1, 0x0, 0x1, @synproxy={{0xd}, @void}}]}, @NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz0\x00'}, @NFTA_SET_ELEM_DATA={0x398, 0x2, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x58, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}]}, @NFTA_DATA_VALUE={0x9b, 0x1, "e8e3001d283c21b5753ffc562b98d7bac9a79d40c225dc3e3c36b8535857aca81379ea85a740a8e06abecde4378be839d1e3ceaf45e41281307c2fa5ba6ba02ca9c04abc74511e586def8d079f7d952f603adf93758636e0a894b0c1f406ab6ac6d06cdaecfd5d02a8a4ee3634b9c9ac405f67c14302b42f1d6e67c97dcaf8f1433cfc6a5e72f508e1feb2722a2356a98670aa829b98cc"}, @NFTA_DATA_VERDICT={0x70, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0x3}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}]}, @NFTA_DATA_VALUE={0xba, 0x1, "3a80892c73a5213f0ebd0ca5077bab12bb84b24d261ed4a7a708c19e96a3f5b3af1fdaa0ea4730bd856221c0a52bdd7598d669c54cea0087f1dad7c85f8e810649ca412e2ccee6341132bca1021e335a1c499e58432bb7641d77ef0dcdebee92424fba27accbb3713b81cc5ce303c1456eda177b17606d072cf5f91420d0e25939fe848e7f55da9584c4b8463d33b8409356e18b282cf716a2ec11978fcc85538697879b27479ba814b99ccff5c167f12faf8829cd18"}, @NFTA_DATA_VALUE={0xcf, 0x1, "d3e343ab8afe0a67ebac84dbdc55ea23223769d9fbd03b612a4d0d31ed784c2cf4a666e855c742b52c14ef11ef420606cb6afd8f86d6c114238f36b2f839f60dc9d499df32152fe6060b6e463a48466313f4acd295d8913c779c337ee1fd6642370c45a361c4903f3d243b227ef370bea52af32350a15e5d257bed59cf69e5a958f4005985fc6f83b56213a6d91fbe7db4df949df54502394d14f0b1896b38afa9b49e961cd9e92af13f89539100c2219e0053185d2cd586e0736e3b5db33c6345c603de6dabfbcdf0575d"}, @NFTA_DATA_VALUE={0x4}, @NFTA_DATA_VERDICT={0x20, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}]}, @NFTA_DATA_VERDICT={0x20, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}]}, @NFTA_DATA_VERDICT={0xc, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}]}, @NFTA_DATA_VALUE={0x54, 0x1, "04de84539356d47e15b1c22fdd3ecc3afb7bfe7cfbe54105c5d2e639d098ce0f67fcd6a59fb440e915e10a88293e88a233369ba784556a00e6dd2f783fd0c5f1a893bfb3f3a3b86e4390722b8830b9b0"}]}]}, {0x670, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY_END={0x160, 0xa, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x1c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}]}, @NFTA_DATA_VERDICT={0x40, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}]}, @NFTA_DATA_VALUE={0xbb, 0x1, "04a39694f33bba6b015d8228ccd68f7bc199245a26abcc98b86d5d89430bd6fcc4fdef97db1c8163738a975926281e242e1470b01d817601dc17155fdaa38970620a59da74ca42b97265ff932205d0196826f94aec3c9ec9f998b3edaf613c31845bb1686b6a4e1703bc7ce983f5a7e01c0a9a687a3c63dc350b05c3a743602641ff69bbbf472eaea611cdf501e6c5d45d17e456b95888d0033d03a8137045af051a4f71414f8d8289fa8035ed57e3f772cd056a0ef354"}, @NFTA_DATA_VERDICT={0x44, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}]}]}, @NFTA_SET_ELEM_KEY={0x144, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x2d, 0x1, "cf9e7a61b72f56b498ccae66e8158d6b5033c270db92fda4767cba1c43906950559fdbe576c4958137"}, @NFTA_DATA_VERDICT={0xc, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}]}, @NFTA_DATA_VERDICT={0x30, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}]}, @NFTA_DATA_VALUE={0x43, 0x1, "974202dd1bec670426df2f0e30f31fe2e9b9fa1d556d76ac39f0681106e367a237dc5627877a2f7247a7f9ff473eaa9592bf903d5ce071d5ee0cc13ce240d2"}, @NFTA_DATA_VERDICT={0xc, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}]}, @NFTA_DATA_VALUE={0x73, 0x1, "8d1224bebe908b199219515bd40ed93225def1ced1edc21fdd666b05e01e20387c428f267510235587f1adef073b0496bbbc86062fb06a270bc1c9606db6127c62d057e6a62b025adc55d4c29214b73a12c726922c5c703473212d75eec163e0b8688c9f1224d123f0aabbbdaf6cac"}, @NFTA_DATA_VERDICT={0x10, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}]}]}, @NFTA_SET_ELEM_EXPR={0x64, 0x7, 0x0, 0x1, @limit={{0xa}, @val={0x54, 0x2, 0x0, 0x1, [@NFTA_LIMIT_UNIT={0xc, 0x2, 0x1, 0x0, 0x3}, @NFTA_LIMIT_TYPE={0x8, 0x4, 0x1, 0x0, 0x1}, @NFTA_LIMIT_BURST={0x8, 0x3, 0x1, 0x0, 0x8}, @NFTA_LIMIT_UNIT={0xc, 0x2, 0x1, 0x0, 0x9}, @NFTA_LIMIT_FLAGS={0x8}, @NFTA_LIMIT_UNIT={0xc, 0x2, 0x1, 0x0, 0x6}, @NFTA_LIMIT_FLAGS={0x8, 0x5, 0x1, 0x0, 0x1}, @NFTA_LIMIT_UNIT={0xc, 0x2, 0x1, 0x0, 0x1}]}}}, @NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_SET_ELEM_USERDATA={0x7e, 0x6, 0x1, 0x0, "25ff06368816f36b2abdfdb3545c9d3714256dff41682c09fba7b46671a7242c82cb9738eb0f3e2aa199113113031e46222a4d0ecdc7494a37910d3ae5816c6c4867478f0c07d4be649977756070425a320aaffa389c77e206443e89237527e2c0e2b5e70a1eec10d322abb77a24acd548de5296cb7ae7ad24ec"}, @NFTA_SET_ELEM_USERDATA={0x94, 0x6, 0x1, 0x0, "17fec59dbee54d3a54ae062ca8d36bf9dbe2d244c2ac83712bb74cdf099ce9436210a8dfeb3e4a5646cd3981df6ac8ad7b7c477a704549e45e3f844675b1ce1a144119f7723373257f5326dcc4a014364198d191245738dc69128caa24396074f00e46fc53d194e689db09fe743233574c38c774869449b4f78ea20d1743201e178d840a4fc120508b5652ff248afe0e"}, @NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz0\x00'}, @NFTA_SET_ELEM_KEY={0x228, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x77, 0x1, "3e87f00e42c26cb81565f964b9ba49d94a5c09d8f31fb21a8285d29a985970be99b106b268a9ef3e9d3857f9cdf07bb75b8036e02665ebc444e25bdcbc50b7e61bfc5ee435146ac5af9ba1c4d5caa3b58e783d95f18f1a30fcdddfa40f6dd7588b17db28fc73ce48bc77d499fded251c3f5c34"}, @NFTA_DATA_VALUE={0x7e, 0x1, "6b546a05192e386a9dcc6692f54ea69303691756baa6bc5e70acd676c8e2f2b264dc83a33e6df500973e9c3de02732d8d2e9f68311a737206d8cc981ee60a000af9d0fbac062b581019ea3a26b2a932f0a99a243f259f5ed39b9ed7a45eb79fcb279097d4e22935f3dd50bc9049641b0d745a8d4b4fe3d5672eb"}, @NFTA_DATA_VALUE={0x2d, 0x1, "dbc6073d1754051725bdfbf653f57db5a8843660d5239882b94bc689c38b65c71bc512eaeeef41b19d"}, @NFTA_DATA_VALUE={0x48, 0x1, "5f54a61d1c0702b9c309b990865f7936af0649688b233be283807f3c16ae7cde2f6f9f598f11ac551d2f22cce3777d96ceaa43552a4771c8e21144d5cddc9e585b9e77f1"}, @NFTA_DATA_VERDICT={0x58, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}]}, @NFTA_DATA_VALUE={0x1e, 0x1, "cb49759132085a0fe0fdbfb4c7185f567cf0858b8f1eac46ee3b"}, @NFTA_DATA_VERDICT={0x3c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}]}]}, @NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0x2}]}, {0x234, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0x4}, @NFTA_SET_ELEM_KEY_END={0x224, 0xa, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x1c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}]}, @NFTA_DATA_VALUE={0x24, 0x1, "461590ae3b560091a0ba8a47c6e092a85d5e399e97f97ac96b873685ebdc0d3e"}, @NFTA_DATA_VALUE={0x100, 0x1, "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"}, @NFTA_DATA_VALUE={0xb4, 0x1, "2940aacf08a428d4c7281bb5f7adc2daf9eb00b5d259d5538f5477c55674834b55174dffa5136035e70a4c5db8de995278fa0d311e4b92fb7e985d3153beb2cb4bd3c9ec68d58fbe65550e615feba5808865e30c12d08bb081208f300d8124d301b96707159d74cea93c3f18e40b90976a9f1180bc26762c2e39981c8e07b60e846eefb5b2717b6a433a098a175b212858063b637d79b8edc59478474e68152911bbe9cac0779a2cdaff8d8a574a6e29"}, @NFTA_DATA_VERDICT={0x2c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}]}]}]}]}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_SET_ID={0x8}, @NFTA_SET_ELEM_LIST_SET_ID={0x8, 0x4, 0x1, 0x0, 0x3}, @NFTA_SET_ELEM_LIST_SET_ID={0x8, 0x4, 0x1, 0x0, 0x3}, @NFTA_SET_ELEM_LIST_SET_ID={0x8, 0x4, 0x1, 0x0, 0x2}]}, @NFT_MSG_DELTABLE={0x118, 0x2, 0xa, 0x201, 0x0, 0x0, {0x0, 0x0, 0x8}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}, @NFTA_TABLE_USERDATA={0xe4, 0x6, "a74a77b887b3b86f390d0241d311b0f4ef5ab736f42acd881d538158b4c87613f54db685a15d27faa291fd869f30febac3a40217af0d3bba331e479a72afbbff1ea1d0461767cef86869927a8d600e815de82f00c3782a1bb99422a4f259fc0ecb4aec42b93f9a9c35faaa582dfddd9d465cf43493ab1f2332d8fd66e80c31db50a4110ce12bcb410594de81017cb1b59df0e441d17062ba1b199bdfba42af2a7db0a7b3ff19acb957df776c20450df3c9b3b1643da53fa9184cee747610cee26eb0525a75deedbe8f5c8d0c1f460fcf1aa7aef3868511c8b8f0f9619d5bb352"}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x1}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x2110}, 0x1, 0x0, 0x0, 0x480c0}, 0x0) 913.037805ms ago: executing program 2 (id=6482): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x50) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000240)={{r0, 0xffffffffffffffff}, &(0x7f0000000480), &(0x7f00000004c0)='%ps \x00'}, 0x20) r2 = inotify_init1(0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_NAME_TABLE_GET(r4, 0x0, 0x4000000) perf_event_open(&(0x7f0000000300)={0x2, 0x80, 0x49, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffff6, 0x0, @perf_bp={0x0, 0x5}, 0x45ff5eb5c5b446aa, 0x2000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) gettid() timer_create(0x1, &(0x7f0000533fa0)={0x0, 0x20, 0x800000000004, @tid=0xffffffffffffffff}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f00000004c0)={{}, {0x0, 0x3938700}}, 0x0) futex(&(0x7f000000cffc)=0x1, 0x86, 0x2, 0x0, 0x0, 0xfffffffc) syz_clone(0x800500, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kmem_cache_free\x00', r3}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f00000001c0)='bdi_dirty_ratelimit\x00', r3, 0x0, 0xffffffffffffff9e}, 0x18) inotify_add_watch(r2, &(0x7f00000000c0)='.\x00', 0xe5000067) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x16, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018000000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f66f63bb850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x10, '\x00', 0x0, @fallback=0x8, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x19dd, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x5, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @void, @value}, 0x94) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file2\x00', 0x143042, 0x0) close(r2) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000280)={r1}, 0x4) r5 = socket$kcm(0x2, 0x2, 0x73) sendmsg$inet(r5, &(0x7f0000000500)={&(0x7f0000000300)={0x2, 0x0, @empty}, 0x10, &(0x7f0000000400)=[{&(0x7f0000000340)='+', 0x34000}], 0x1}, 0x900000000000000) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x11, &(0x7f00000003c0)=ANY=[@ANYBLOB="180000000000000000000000000400008500000061000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000800000085000000a500000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r6, 0x18000000000002a0, 0xe, 0x0, &(0x7f00000002c0)="b9ff03076003008cb89e08f088a8", 0x0, 0xfe6, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002300000095"], 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000003200)=ANY=[@ANYBLOB="1e0000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b7040000000000008500000057"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x2, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kfree\x00', r8}, 0x18) 824.943736ms ago: executing program 4 (id=6483): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x50) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000240)={{r0, 0xffffffffffffffff}, &(0x7f0000000480), &(0x7f00000004c0)='%ps \x00'}, 0x20) r2 = inotify_init1(0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_NAME_TABLE_GET(r4, 0x0, 0x4000000) perf_event_open(&(0x7f0000000300)={0x2, 0x80, 0x49, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffff6, 0x0, @perf_bp={0x0, 0x5}, 0x45ff5eb5c5b446aa, 0x2000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) gettid() timer_create(0x1, &(0x7f0000533fa0)={0x0, 0x20, 0x800000000004, @tid=0xffffffffffffffff}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f00000004c0)={{}, {0x0, 0x3938700}}, 0x0) futex(&(0x7f000000cffc)=0x1, 0x86, 0x2, 0x0, 0x0, 0xfffffffc) syz_clone(0x800500, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kmem_cache_free\x00', r3}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f00000001c0)='bdi_dirty_ratelimit\x00', r3, 0x0, 0xffffffffffffff9e}, 0x18) inotify_add_watch(r2, &(0x7f00000000c0)='.\x00', 0xe5000067) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x16, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018000000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f66f63bb850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x10, '\x00', 0x0, @fallback=0x8, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x19dd, @void, @value}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x5, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @void, @value}, 0x94) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file2\x00', 0x143042, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000300)='kfree\x00', r5, 0x0, 0x5}, 0x18) close(r2) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000280)={r1}, 0x4) r6 = socket$kcm(0x2, 0x2, 0x73) sendmsg$inet(r6, &(0x7f0000000500)={&(0x7f0000000300)={0x2, 0x0, @empty}, 0x10, &(0x7f0000000400)=[{&(0x7f0000000340)='+', 0x34000}], 0x1}, 0x900000000000000) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={0xffffffffffffffff, 0x18000000000002a0, 0xe, 0x0, &(0x7f00000002c0)="b9ff03076003008cb89e08f088a8", 0x0, 0xfe6, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002300000095"], 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000003200)=ANY=[@ANYBLOB="1e0000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b7040000000000008500000057"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x2, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kfree\x00', r8}, 0x18) 434.975792ms ago: executing program 7 (id=6487): syz_mount_image$vfat(&(0x7f0000000280), &(0x7f0000000000)='./file0\x00', 0x1018000, &(0x7f00000003c0)=ANY=[@ANYRES8=0x0, @ANYRES16, @ANYRES16, @ANYRESOCT, @ANYRES32, @ANYRESDEC], 0x1, 0x2f2, &(0x7f0000000b00)="$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") bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000001811", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000020000008500000082"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r1}, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00', r2}, 0x10) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuacct.usage_percpu_sys\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000040), 0x208e24b) prlimit64(0x0, 0x1, 0x0, &(0x7f0000000340)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0) fdatasync(r3) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) mlock2(&(0x7f0000004000/0x4000)=nil, 0x40ef, 0x0) 397.022873ms ago: executing program 6 (id=6488): bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYBLOB="0000000000000000b70200001400001cb7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x18) r1 = socket$rds(0x15, 0x5, 0x0) bind$rds(r1, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r1, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000200)=[@rdma_args={0x48, 0x114, 0x1, {{}, {0x0, 0x2c}, &(0x7f00000006c0)=[{&(0x7f0000000100)=""/44, 0x2c}], 0x1}}, @rdma_args={0x48, 0x114, 0x1, {{}, {0x0}, &(0x7f00000004c0)=[{&(0x7f0000000080)=""/28, 0x1c}], 0x1}}], 0x90}, 0x0) 396.470393ms ago: executing program 6 (id=6489): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020207025000000002dba513d7b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000008f00850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x23, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x18) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0}, 0x18) (async) socket$inet_udp(0x2, 0x2, 0x0) (async) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) (async) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) (async) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) (async) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002010000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, @void, @value}, 0x94) (async) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r2}, 0x10) (async) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r3, &(0x7f00000047c0)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000040)=ANY=[@ANYBLOB="180000007a000106000000004ec0000007"], 0x18}], 0x1}, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) (async) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) r5 = socket$netlink(0x10, 0x3, 0x7) (async) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r4, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000080)={&(0x7f0000000380)={0x5c, 0x0, 0x8, 0x180, 0x0, 0x0, {0x2, 0x0, 0x5}, [@CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x21}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}, @CTA_TIMEOUT_DATA={0x24, 0x4, 0x0, 0x1, @icmp=[@CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x34c5}, @CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x1}, @CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x876}, @CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0xfffffffb}]}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x11}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x3a}]}, 0x5c}, 0x1, 0x0, 0x0, 0x810}, 0x4) (async) socket$netlink(0x10, 0x3, 0x0) (async) r6 = socket(0x27, 0x1, 0x0) sendmsg$IPVS_CMD_SET_INFO(r6, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={&(0x7f0000000a80)={0x14}, 0x14}}, 0x0) (async) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@newlink={0x54, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @ip6gretap={{0xe}, {0x18, 0x2, 0x0, 0x1, [@IFLA_GRE_LOCAL={0x14, 0x6, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}]}}}, @IFLA_MASTER={0x8, 0xa, r7}]}, 0x54}}, 0x0) 363.407603ms ago: executing program 6 (id=6490): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000ed07449e000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='kfree\x00', r0}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000005000000850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000180)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) 362.045253ms ago: executing program 6 (id=6491): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b7"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='mm_page_alloc\x00', r1}, 0x10) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r2) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x2d, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) ioctl$TUNSETOFFLOAD(r3, 0xc004743e, 0x110e22fff6) ioctl$TUNGETVNETLE(r2, 0x40047451, &(0x7f0000000180)) 226.457666ms ago: executing program 6 (id=6492): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000ed07449e000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='kfree\x00', r0}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000005000000850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000180)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) (fail_nth: 1) 224.380466ms ago: executing program 7 (id=6493): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000580)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x4}}, [@NFT_MSG_DELOBJ={0x44, 0x14, 0xa, 0x801, 0x0, 0x0, {0x5, 0x0, 0x3}, [@NFTA_OBJ_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_OBJ_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_OBJ_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_OBJ_NAME={0x9, 0x2, 'syz0\x00'}]}, @NFT_MSG_NEWSETELEM={0xd38, 0xc, 0xa, 0x801, 0x0, 0x0, {0x7, 0x0, 0x2}, [@NFTA_SET_ELEM_LIST_ELEMENTS={0x3d4, 0x3, 0x0, 0x1, [{0x3d0, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_DATA={0x4}, @NFTA_SET_ELEM_KEY={0x1ac, 0x1, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x20, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}]}, @NFTA_DATA_VERDICT={0x10, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}]}, @NFTA_DATA_VERDICT={0x28, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}]}, @NFTA_DATA_VALUE={0xec, 0x1, "3f698fa09bfb2c60fdff49679084b5af297c1efd9841fcbba98be16f1f468da552947ce4c24ed51de5351a2b6393297a7bdb752aaa035726f6d88c10331e1c1c2d09a76d9a1bf280119b890aec5c6258e3d0da63b380713cf6ae108c367d470f1b22848b7bc3c3019e3bc944b9cc2c4d9e2ff471b480ee17dfe15280eeaa4a4b9f9129d44bec435a76205c0ed956de9725e50ee1b5c33bfce24a022864aca82ac6707ae56d11ff3a2828a3dad277d406836fe6cde07f5eb3ff5fc449946676939bdde9e97f9f4256a2258550ef1aa08f8c5f21de37ae35ed0fcf9625ad05d4a841f14bf433a7c9e3"}, @NFTA_DATA_VALUE={0x4}, @NFTA_DATA_VERDICT={0x18, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}]}, @NFTA_DATA_VERDICT={0x48, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}]}]}, @NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0x6}, @NFTA_SET_ELEM_USERDATA={0xa9, 0x6, 0x1, 0x0, "139e3797678ff322cfcefd21d65fd04743fae2902e769bde9eeb91d2fa50565e797114b5ae146b63fb9d5acc2117ab5ff35d6142a500e72cb875f3570bdc96a3f71f330f8d73160394f6ded71e209c1298974a511d5562d8465499dd9ebf3249d60cf62ddcb100b022ccfe25cc24102b63ed9143ce4e13b3ac9af0c4e81d87df502bf64e0f892e3db4eb9c94b8bfbc5c1ed89605af8d44b94a11e454f4b367b08120d8d0fd"}, @NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz2\x00'}, @NFTA_SET_ELEM_KEY={0x158, 0x1, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x2c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}]}, @NFTA_DATA_VERDICT={0x14, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CODE={0x8}]}, @NFTA_DATA_VALUE={0x21, 0x1, "42cf94d4fd27bf34cdf141027a71099b4b3c42a20adcb2a37805f8ae1b"}, @NFTA_DATA_VALUE={0x10, 0x1, "5f5c5c3c899dfcdda027072a"}, @NFTA_DATA_VALUE={0x6e, 0x1, "3df054fcf2235faf2c0fdcdb5a941db46a6f9dec1ec3a93293d7ba38188290e74c7b3e886dd93cb7cfabea84df6bcbe31c10b5c0144c3cb6fa0d31f615077a61290cf875f17a1a2b8008e34a834a47ee2af6b091e52719b1672dc374246b3aee11dedd57b18cc1374003"}, @NFTA_DATA_VALUE={0x1a, 0x1, "690b312a9bcb8777e3d41b800f61bcf1c698123bb6fe"}, @NFTA_DATA_VERDICT={0x2c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}]}, @NFTA_DATA_VERDICT={0x28, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}]}]}]}]}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x5fc, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0x1}]}, {0x1a0, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz2\x00'}, @NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz0\x00'}, @NFTA_SET_ELEM_EXPRESSIONS={0x18, 0xb, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, @connlimit={{0xe}, @void}}]}, @NFTA_SET_ELEM_USERDATA={0xb9, 0x6, 0x1, 0x0, "0c55463171676a069bd35df904838905f313be2fcc7abbecaea9d52b1710ebc1f6cd2453f7acb4cbaa1cddfff336ddda317050f25881a991c65fa7cedb56459844896f21a59bd62d1dcb2860cef18d519a70d13bb9f331c21f6cbc09941c85aead0c03515dab58fa8de669115fe680dd8dd930a985081cd177698a5c8d2392ef8965ee204ed9c3fa4a937a959ca9a716014caa1e3acdc6893caaec6062f3d789e4bce9eeed1c35c01c753dd13915af5c5cbe2942c9"}, @NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0x3}, @NFTA_SET_ELEM_USERDATA={0x84, 0x6, 0x1, 0x0, "67ab84875e6c353eaf74c8b188f498455421aff3156ed345b7395b982175a34dc434e2d075a127253141fe7e1b391dc56104534664c28762a6cbdffc9c97eda6a3b8f242dcbc7faeb48b10ea324022387373e2dc0f361e993ba68e66b8968cc3277a9535c83863cf38776d47fd806a203198d3bbf6996b0dccf0a11bca856c42"}, @NFTA_SET_ELEM_USERDATA={0x1d, 0x6, 0x1, 0x0, "0162f90aaf07e2758ee54fcd6905d70441e35fd8d9cdd9f93e"}]}, {0xe4, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_USERDATA={0xd3, 0x6, 0x1, 0x0, "a1be62cc179e9a625208bedc7e19d948a9ea854e2124a0339dda5ab40ea6d511bde53af6d448688b2b280e079f01d697b9f4dea35baafb05068cd04bb1db330a409516e684b97593199438f54c33f60675f46ef9e04145b61b05b32d9a4a5e75a7f82869ed8bb0f667df270ab819a265e8f8b99c223d8e4ba633dbe0023323973731e36d7173fb221a595c3ea81ccee06088856cb99f956bd34fa80c51f9d37940bb2026c82c4160c02e67a3a530f15930ff03c902bd07413d3366e1c061d06b83cf7b02bc58efa9dc3298f28abc9b"}, @NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0x7}]}, {0x34, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0x5}, @NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz1\x00'}, @NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz2\x00'}, @NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0x7}]}, {0x40, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_EXPR={0x28, 0x7, 0x0, 0x1, @fib={{0x8}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_FIB_DREG={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_FIB_FLAGS={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_FIB_FLAGS={0x8, 0x3, 0x1, 0x0, 0x10}]}}}, @NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0x4}, @NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x3}]}, {0x2d4, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_USERDATA={0x92, 0x6, 0x1, 0x0, "dae0cd61e2b74d9968432f11702000fd495533b3d3944e25187fe85d162d85900fbbbedc4dff0de749b8c74fab41fb5abda761c1b96634a2d7d6f004178850203c42f50bac7bf31ad15b8da8bb3e8f962e77bdcc2a3d1eb2c7355b2957170da3fe3b6f84b38e52fcc48d74b0c8bf2d63a55319f9a2e12597491d246dfa57ab07ab98fabc688cf872c8c6f13abf1f"}, @NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0x1}, @NFTA_SET_ELEM_KEY_END={0xd4, 0xa, 0x0, 0x1, [@NFTA_DATA_VALUE={0xd0, 0x1, "45ed3288ea91b2ac17c4d221814ee18d8c922d787d24109f572786875ad82c65a05bfb0caf53d31e6279502f404f05ab920d126e7f1aa81f76d903e85c970e5ca5dbf38ac156127eff867d8e5fd3a2d19e37828a89709b7638bbe341eb3d889b81fb9253366968f60b23042d53fadc2b2e63e34f41cd03a11a1ab106dd916479dfdd7c622e7b5cbd199d473c1f1cfaf087399fb691cf9a333903bc9120537ad34f03fabe7ef97aae45d8fe82d2f50aa4589cd11776004b4292da9f8ad020c1507785e2616dc4421fab189208"}]}, @NFTA_SET_ELEM_DATA={0x154, 0x2, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x18, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}]}, @NFTA_DATA_VALUE={0x9e, 0x1, "c1b987ac6f132e328b0adfbb91f49a7066e33bc21355187bbd02dbf2ad1ba2e4ba30d9049af93d74513e2c5c63d16ecc3d8dff62e10e0ff430385e6ad7550fa3202a448e9b1560cb811c5ddc1bd6a2996435a81fea2b38438498cf0ac32e01938304d58fc31a742c87faa441d1d6e9aa7c4fd82d10a3b551622a97b0f687a0c44ca2d89140a7c5fd520357c09b35558213e9befd3653856e656c"}, @NFTA_DATA_VERDICT={0x50, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}]}, @NFTA_DATA_VALUE={0x48, 0x1, "c4977a66913fcaeddaf6fb25e7e439940073b19eeaab1403a3df7e80aee6173d7298a98bc4f7644e6fcd00ea680ce8b441c171e47d52e4afa935bfa71cea3954abef8b03"}]}, @NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x3}]}, {0x1c, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz0\x00'}, @NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz0\x00'}]}]}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x324, 0x3, 0x0, 0x1, [{0x320, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_USERDATA={0xf, 0x6, 0x1, 0x0, "10e435f47dedae7c9ed127"}, @NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz1\x00'}, @NFTA_SET_ELEM_KEY={0x54, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x4f, 0x1, "d4fcb1bda64821f95eb3aa94b998ced2432a0d03e1e59381d3ebaa59813a4c87b93a0d679f43af53296f886c61f4fc7420a3bead22b52ff43b53743e755f9d6bd68b6a38517d6cb61210f5"}]}, @NFTA_SET_ELEM_USERDATA={0xc0, 0x6, 0x1, 0x0, "49e1d083be6c7bfad2b38c00fb6001ba219eca23099070ff722e8c01b6966181c7048c9087cbc01a1d3d5192940519bdfb17fd625e78fa5c2bf03cf56a9f966850002087440036ab9fc254cc9192a5cec969910aa384e93b9652e6b46a9d48b87c411ebc2793ddbca9df55e00a6cc8d48773905978d13aa7523d6075eabfc5b7254b7156d6a70fdf1835f89eed3a38f8856795dd9a11a5c60636a8a6f6cdf5ba04b19f8b6c470762492b3b7b01b3351e92617fdd457e11d039fff390"}, @NFTA_SET_ELEM_DATA={0x1e4, 0x2, 0x0, 0x1, [@NFTA_DATA_VALUE={0x5a, 0x1, "3bce813752fc047a6314393c256a2b50ddaed85a15bd505d48fe27dbcccba9f86a405f560b714c4d4db3626273175a8bec49fbdf3aac3f4467cc12fe4fcf700dd3ab2b0a1f4bb1378abf9bc029ae4d6033202fee7ea3"}, @NFTA_DATA_VERDICT={0x1c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}]}, @NFTA_DATA_VALUE={0xf5, 0x1, "89af05a49fd08a268a54fab91454837dbf009cb7cf8699e12368d2d3661c8a43a71fe4dc7a805ae9611afbdc13a5563719e10e781651aa53077ff417ddd72b530ed927b751e5c5d50a00aeb62906941971413eb4f79459f669826b8d1ca72f9c5584b6fcdf1bb22533a9517efc9b773e4d3c7c392bcedaf73d2b2d5471912de4d13452378c77263d4242ed8b8685e8e453718176504bb5282b5d421ee3cf27128fdb01d155d3e2af8359c58e863c2cdb8d2d5fbd4c04870f1e745c5193a9f1f30147acdfdaa786803cf525725a1f482e24b86864c4d8f18fdb448ea18154aa81390b8ca26a3a065ccd0ec0df42856de8bb"}, @NFTA_DATA_VERDICT={0x10, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}]}, @NFTA_DATA_VALUE={0x25, 0x1, "0571fd513e0d8968e87b9c7ef898cd017f64a3db674a16b0d28fb503f525073b2b"}, @NFTA_DATA_VERDICT={0x14, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}]}, @NFTA_DATA_VERDICT={0x24, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}]}]}]}]}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz2\x00'}]}, @NFT_MSG_DELSETELEM={0x1254, 0xe, 0xa, 0x101, 0x0, 0x0, {0x3, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_ELEMENTS={0x228, 0x3, 0x0, 0x1, [{0x20, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_EXPR={0x1c, 0x7, 0x0, 0x1, @range={{0xa}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_RANGE_OP={0x8, 0x2, 0x1, 0x0, 0x1}]}}}]}, {0x204, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY_END={0x100, 0xa, 0x0, 0x1, [@NFTA_DATA_VALUE={0xb0, 0x1, "a180c8d88b7b89a6504f809238dcb848d535c20778400311d1aa7ae4f429ce3880597d18d99b16e4d4bb42e3255d9f6af2399fb7c0dd6cf2f07dcac6eb7ffb5fe7e4e7b8278a63a4cb369bac0e2e6553fce33f58eb30b971ca981b9c7ae3749e6a015137fd7e51f134fa79eb4e68a6a1adaa6ec3271881a1706d50deb143863a5c5b6a152d1515f31c833fa7b451e22b38be76da521b8366a7a5d4711be6c31a46d743cb4831207e320d2493"}, @NFTA_DATA_VERDICT={0x4c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}]}]}, @NFTA_SET_ELEM_KEY={0xe8, 0x1, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x28, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}]}, @NFTA_DATA_VALUE={0x81, 0x1, "6de4bc4b4adbf9be7eba4616a65599347d8c5e09116e47b5b6f3c52f11eea489337c91c7fec5a41c89e324b3fcc6c4149c0d661486385a467631b91fd1085d5ace07c98c432981d9d29908f9cf8c1c2c9ce7dda15a07da9e83187d9df066a19192e2119892b3cb8486788ff8e8c4943c8f1619e90704907f47bb5cfd0a"}, @NFTA_DATA_VERDICT={0x38, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}]}]}, @NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0x3}, @NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz2\x00'}]}]}, @NFTA_SET_ELEM_LIST_ELEMENTS={0xfec, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz1\x00'}]}, {0x138, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY_END={0xcc, 0xa, 0x0, 0x1, [@NFTA_DATA_VALUE={0xc8, 0x1, "ad914cf80f2fc0ff6e5f6eb3abfef2aab1562991c436237d5d0ceaecf5b4903292c874c1a884e30c20d8490020ee5da66515c963b494d5628e02588a7af7d4e77f98a9c92f2421a8e443fad7d92384926476afb6ed2e802eae5a4fa8d4f37af0094a54df238a00e8fb523a6e8240ce6d72cadd7b27ff2bc3ce0373bbdb85d23e95880f1d2ef2202588ebeecf18e517cd3e6c02a7e0e199799513379078e51eba4fd75fe257ab03ae6301d17b6c03a6537b90fa6938b64c477a45f83ba4ac0dd2a1e2a85d"}]}, @NFTA_SET_ELEM_EXPR={0x14, 0x7, 0x0, 0x1, @connlimit={{0xe}, @void}}, @NFTA_SET_ELEM_USERDATA={0x52, 0x6, 0x1, 0x0, "112b01fb674b48dec81cab4a73ce2c2ab11b00a85350653f877eccdfd966eaf31a09385ff9bbf83264904fae78149792215501268ebf5c0942e18bdc95806112508693b87a0e4fb60d1c75e55675"}]}, {0x138, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_EXPRESSIONS={0xc4, 0xb, 0x0, 0x1, [{0x4c, 0x1, 0x0, 0x1, @flow_offload={{0x11}, @val={0x34, 0x2, 0x0, 0x1, [@NFTA_FLOW_TABLE_NAME={0x9, 0x1, 'syz1\x00'}, @NFTA_FLOW_TABLE_NAME={0x9, 0x1, 'syz2\x00'}, @NFTA_FLOW_TABLE_NAME={0x9, 0x1, 'syz2\x00'}, @NFTA_FLOW_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}}}, {0x18, 0x1, 0x0, 0x1, @flow_offload={{0x11}, @void}}, {0x10, 0x1, 0x0, 0x1, @dynset={{0xb}, @void}}, {0x14, 0x1, 0x0, 0x1, @byteorder={{0xe}, @void}}, {0x1c, 0x1, 0x0, 0x1, @tproxy={{0xb}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_TPROXY_REG_ADDR={0x8}]}}}, {0x10, 0x1, 0x0, 0x1, @socket={{0xb}, @void}}, {0xc, 0x1, 0x0, 0x1, @ct={{0x7}, @void}}]}, @NFTA_SET_ELEM_USERDATA={0x64, 0x6, 0x1, 0x0, "fca415f385ced50fba29cedcbdcd34092fd53a0a6fdfbfb97c430a50544149d215674093eb73fbe983fc2d8229b60b5682ebdde3c816d7b70dd876467a95483c1f4dba171550534d6e486466a771d87d47935435610aee55c5b3471316ad0dc0"}, @NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0x4}]}, {0x4c4, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_USERDATA={0xe9, 0x6, 0x1, 0x0, "4b0188a35f3b21f09085923cab4a6b94bb4b71647f46f40eb7647b77f6e2da3447ea94f49197b941892b358b48f584ac3087d3b75eac8a7e09508fa9fe58df6449557620e031c3f6189a4b4ca64f93b782e4b11cae74a075439a4a82f50cdc11f042d61884231da32af90700189eed59978aa1821f5a6a0f0848743200d303c34091c9f170277bf48dcb294f72b3b5ddddc51f44f41fd6439873177d3aadf01f05fdcf23b4324429b6d80f08a28c70a4a77d39bd3be07c6ece1f57b404ad9a397e2974831918761c530a14a4db6e6703ab2234197f98ef71efdc8dccd8b4056b7467edb035"}, @NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0x1ff}, @NFTA_SET_ELEM_EXPRESSIONS={0x24, 0xb, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, @cmp={{0x8}, @void}}, {0x14, 0x1, 0x0, 0x1, @synproxy={{0xd}, @void}}]}, @NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz0\x00'}, @NFTA_SET_ELEM_DATA={0x398, 0x2, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x58, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}]}, @NFTA_DATA_VALUE={0x9b, 0x1, "e8e3001d283c21b5753ffc562b98d7bac9a79d40c225dc3e3c36b8535857aca81379ea85a740a8e06abecde4378be839d1e3ceaf45e41281307c2fa5ba6ba02ca9c04abc74511e586def8d079f7d952f603adf93758636e0a894b0c1f406ab6ac6d06cdaecfd5d02a8a4ee3634b9c9ac405f67c14302b42f1d6e67c97dcaf8f1433cfc6a5e72f508e1feb2722a2356a98670aa829b98cc"}, @NFTA_DATA_VERDICT={0x70, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0x3}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}]}, @NFTA_DATA_VALUE={0xba, 0x1, "3a80892c73a5213f0ebd0ca5077bab12bb84b24d261ed4a7a708c19e96a3f5b3af1fdaa0ea4730bd856221c0a52bdd7598d669c54cea0087f1dad7c85f8e810649ca412e2ccee6341132bca1021e335a1c499e58432bb7641d77ef0dcdebee92424fba27accbb3713b81cc5ce303c1456eda177b17606d072cf5f91420d0e25939fe848e7f55da9584c4b8463d33b8409356e18b282cf716a2ec11978fcc85538697879b27479ba814b99ccff5c167f12faf8829cd18"}, @NFTA_DATA_VALUE={0xcf, 0x1, "d3e343ab8afe0a67ebac84dbdc55ea23223769d9fbd03b612a4d0d31ed784c2cf4a666e855c742b52c14ef11ef420606cb6afd8f86d6c114238f36b2f839f60dc9d499df32152fe6060b6e463a48466313f4acd295d8913c779c337ee1fd6642370c45a361c4903f3d243b227ef370bea52af32350a15e5d257bed59cf69e5a958f4005985fc6f83b56213a6d91fbe7db4df949df54502394d14f0b1896b38afa9b49e961cd9e92af13f89539100c2219e0053185d2cd586e0736e3b5db33c6345c603de6dabfbcdf0575d"}, @NFTA_DATA_VALUE={0x4}, @NFTA_DATA_VERDICT={0x20, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}]}, @NFTA_DATA_VERDICT={0x20, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}]}, @NFTA_DATA_VERDICT={0xc, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}]}, @NFTA_DATA_VALUE={0x54, 0x1, "04de84539356d47e15b1c22fdd3ecc3afb7bfe7cfbe54105c5d2e639d098ce0f67fcd6a59fb440e915e10a88293e88a233369ba784556a00e6dd2f783fd0c5f1a893bfb3f3a3b86e4390722b8830b9b0"}]}]}, {0x670, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY_END={0x160, 0xa, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x1c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}]}, @NFTA_DATA_VERDICT={0x40, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}]}, @NFTA_DATA_VALUE={0xbb, 0x1, "04a39694f33bba6b015d8228ccd68f7bc199245a26abcc98b86d5d89430bd6fcc4fdef97db1c8163738a975926281e242e1470b01d817601dc17155fdaa38970620a59da74ca42b97265ff932205d0196826f94aec3c9ec9f998b3edaf613c31845bb1686b6a4e1703bc7ce983f5a7e01c0a9a687a3c63dc350b05c3a743602641ff69bbbf472eaea611cdf501e6c5d45d17e456b95888d0033d03a8137045af051a4f71414f8d8289fa8035ed57e3f772cd056a0ef354"}, @NFTA_DATA_VERDICT={0x44, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}]}]}, @NFTA_SET_ELEM_KEY={0x144, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x2d, 0x1, "cf9e7a61b72f56b498ccae66e8158d6b5033c270db92fda4767cba1c43906950559fdbe576c4958137"}, @NFTA_DATA_VERDICT={0xc, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}]}, @NFTA_DATA_VERDICT={0x30, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}]}, @NFTA_DATA_VALUE={0x43, 0x1, "974202dd1bec670426df2f0e30f31fe2e9b9fa1d556d76ac39f0681106e367a237dc5627877a2f7247a7f9ff473eaa9592bf903d5ce071d5ee0cc13ce240d2"}, @NFTA_DATA_VERDICT={0xc, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}]}, @NFTA_DATA_VALUE={0x73, 0x1, "8d1224bebe908b199219515bd40ed93225def1ced1edc21fdd666b05e01e20387c428f267510235587f1adef073b0496bbbc86062fb06a270bc1c9606db6127c62d057e6a62b025adc55d4c29214b73a12c726922c5c703473212d75eec163e0b8688c9f1224d123f0aabbbdaf6cac"}, @NFTA_DATA_VERDICT={0x10, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}]}]}, @NFTA_SET_ELEM_EXPR={0x64, 0x7, 0x0, 0x1, @limit={{0xa}, @val={0x54, 0x2, 0x0, 0x1, [@NFTA_LIMIT_UNIT={0xc, 0x2, 0x1, 0x0, 0x3}, @NFTA_LIMIT_TYPE={0x8, 0x4, 0x1, 0x0, 0x1}, @NFTA_LIMIT_BURST={0x8, 0x3, 0x1, 0x0, 0x8}, @NFTA_LIMIT_UNIT={0xc, 0x2, 0x1, 0x0, 0x9}, @NFTA_LIMIT_FLAGS={0x8}, @NFTA_LIMIT_UNIT={0xc, 0x2, 0x1, 0x0, 0x6}, @NFTA_LIMIT_FLAGS={0x8, 0x5, 0x1, 0x0, 0x1}, @NFTA_LIMIT_UNIT={0xc, 0x2, 0x1, 0x0, 0x1}]}}}, @NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_SET_ELEM_USERDATA={0x7e, 0x6, 0x1, 0x0, "25ff06368816f36b2abdfdb3545c9d3714256dff41682c09fba7b46671a7242c82cb9738eb0f3e2aa199113113031e46222a4d0ecdc7494a37910d3ae5816c6c4867478f0c07d4be649977756070425a320aaffa389c77e206443e89237527e2c0e2b5e70a1eec10d322abb77a24acd548de5296cb7ae7ad24ec"}, @NFTA_SET_ELEM_USERDATA={0x94, 0x6, 0x1, 0x0, "17fec59dbee54d3a54ae062ca8d36bf9dbe2d244c2ac83712bb74cdf099ce9436210a8dfeb3e4a5646cd3981df6ac8ad7b7c477a704549e45e3f844675b1ce1a144119f7723373257f5326dcc4a014364198d191245738dc69128caa24396074f00e46fc53d194e689db09fe743233574c38c774869449b4f78ea20d1743201e178d840a4fc120508b5652ff248afe0e"}, @NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz0\x00'}, @NFTA_SET_ELEM_KEY={0x228, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x77, 0x1, "3e87f00e42c26cb81565f964b9ba49d94a5c09d8f31fb21a8285d29a985970be99b106b268a9ef3e9d3857f9cdf07bb75b8036e02665ebc444e25bdcbc50b7e61bfc5ee435146ac5af9ba1c4d5caa3b58e783d95f18f1a30fcdddfa40f6dd7588b17db28fc73ce48bc77d499fded251c3f5c34"}, @NFTA_DATA_VALUE={0x7e, 0x1, "6b546a05192e386a9dcc6692f54ea69303691756baa6bc5e70acd676c8e2f2b264dc83a33e6df500973e9c3de02732d8d2e9f68311a737206d8cc981ee60a000af9d0fbac062b581019ea3a26b2a932f0a99a243f259f5ed39b9ed7a45eb79fcb279097d4e22935f3dd50bc9049641b0d745a8d4b4fe3d5672eb"}, @NFTA_DATA_VALUE={0x2d, 0x1, "dbc6073d1754051725bdfbf653f57db5a8843660d5239882b94bc689c38b65c71bc512eaeeef41b19d"}, @NFTA_DATA_VALUE={0x48, 0x1, "5f54a61d1c0702b9c309b990865f7936af0649688b233be283807f3c16ae7cde2f6f9f598f11ac551d2f22cce3777d96ceaa43552a4771c8e21144d5cddc9e585b9e77f1"}, @NFTA_DATA_VERDICT={0x58, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}]}, @NFTA_DATA_VALUE={0x1e, 0x1, "cb49759132085a0fe0fdbfb4c7185f567cf0858b8f1eac46ee3b"}, @NFTA_DATA_VERDICT={0x3c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}]}]}, @NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0x2}]}, {0x234, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0x4}, @NFTA_SET_ELEM_KEY_END={0x224, 0xa, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x1c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}]}, @NFTA_DATA_VALUE={0x24, 0x1, "461590ae3b560091a0ba8a47c6e092a85d5e399e97f97ac96b873685ebdc0d3e"}, @NFTA_DATA_VALUE={0x100, 0x1, "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"}, @NFTA_DATA_VALUE={0xb4, 0x1, "2940aacf08a428d4c7281bb5f7adc2daf9eb00b5d259d5538f5477c55674834b55174dffa5136035e70a4c5db8de995278fa0d311e4b92fb7e985d3153beb2cb4bd3c9ec68d58fbe65550e615feba5808865e30c12d08bb081208f300d8124d301b96707159d74cea93c3f18e40b90976a9f1180bc26762c2e39981c8e07b60e846eefb5b2717b6a433a098a175b212858063b637d79b8edc59478474e68152911bbe9cac0779a2cdaff8d8a574a6e29"}, @NFTA_DATA_VERDICT={0x2c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}]}]}]}]}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_SET_ID={0x8}, @NFTA_SET_ELEM_LIST_SET_ID={0x8, 0x4, 0x1, 0x0, 0x3}, @NFTA_SET_ELEM_LIST_SET_ID={0x8, 0x4, 0x1, 0x0, 0x3}, @NFTA_SET_ELEM_LIST_SET_ID={0x8, 0x4, 0x1, 0x0, 0x2}]}, @NFT_MSG_DELTABLE={0x118, 0x2, 0xa, 0x201, 0x0, 0x0, {0x0, 0x0, 0x8}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}, @NFTA_TABLE_USERDATA={0xe4, 0x6, "a74a77b887b3b86f390d0241d311b0f4ef5ab736f42acd881d538158b4c87613f54db685a15d27faa291fd869f30febac3a40217af0d3bba331e479a72afbbff1ea1d0461767cef86869927a8d600e815de82f00c3782a1bb99422a4f259fc0ecb4aec42b93f9a9c35faaa582dfddd9d465cf43493ab1f2332d8fd66e80c31db50a4110ce12bcb410594de81017cb1b59df0e441d17062ba1b199bdfba42af2a7db0a7b3ff19acb957df776c20450df3c9b3b1643da53fa9184cee747610cee26eb0525a75deedbe8f5c8d0c1f460fcf1aa7aef3868511c8b8f0f9619d5bb352"}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x1}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x2110}, 0x1, 0x0, 0x0, 0x480c0}, 0x0) 105.830398ms ago: executing program 1 (id=6494): mount$9p_virtio(&(0x7f0000000200), &(0x7f0000000940)='./file0\x00', &(0x7f00000001c0), 0x48800, &(0x7f0000000580)=ANY=[@ANYBLOB="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"]) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={0x0}, 0x18) bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x34) r0 = syz_open_procfs(0x0, &(0x7f00000003c0)='auxv\x00') pread64(r0, 0x0, 0x0, 0x100008) bpf$TOKEN_CREATE(0x24, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYRES32=0xffffffffffffffff, @ANYRESDEC=0x0], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{r1}, &(0x7f0000000040), &(0x7f0000000280)}, 0x20) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x1e00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) clock_nanosleep(0xfffffff2, 0xca9a3b, &(0x7f0000000000)={0x77359400}, 0xfffffffffffffffe) r4 = open(&(0x7f00009e1000)='./file0\x00', 0x60840, 0x14) fcntl$setsig(r4, 0xa, 0x13) fcntl$setlease(r4, 0x400, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000280)) timer_settime(0x0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) truncate(&(0x7f0000000040)='./file0\x00', 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$key(0xf, 0x3, 0x2) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r5 = socket$netlink(0x10, 0x3, 0x14) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0200000004080800080000000100000080000080", @ANYRESDEC=r0, @ANYRESOCT=r2, @ANYRES32=r5, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) unshare(0x8000000) r6 = semget$private(0x0, 0x1, 0x4ac0c2fc29e33682) semtimedop(r6, &(0x7f0000000100)=[{0x0, 0x1000, 0x1000}], 0x1, 0x0) unshare(0x2c040000) bpf$PROG_LOAD(0x5, 0x0, 0x0) 94.862908ms ago: executing program 6 (id=6495): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000000}, 0x20040810) bpf$PROG_LOAD(0x5, &(0x7f0000000e80)={0x1e, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000b2e900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x50, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f00000005c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000bfa200000000000007020000f8fff7ff013e101708000000000300000095000000000000a36e72792753a4218f94f94d9279f397ff7fc80d71b46dbcc04003000905f9c2c782572d67e6f32b6953d9f2942a2b636209a8185fdeadb5e93a098b4c0be41df441694ca445d37e77a441bce1f20be7ccd1033df8ab8bbdb33c72a6d69fed23c595dbb0224a99e6d493a0c9a174ee3385a6f7dd3e555f5a98852447a88a9179cd9ee7a48bf99ff2a2dc39abfdee2df7d750f5e82aa91412d96312c5eb4b733c4293e8"], 0x0, 0x1dd, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000300)='sched_switch\x00'}, 0x18) syz_mount_image$ext4(&(0x7f00000003c0)='ext4\x00', &(0x7f00000002c0)='./bus\x00', 0x404, &(0x7f0000000580)={[{@orlov}, {@min_batch_time={'min_batch_time', 0x3d, 0x4}}]}, 0x1, 0x5d8, &(0x7f0000000c00)="$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") bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) memfd_create(&(0x7f00000009c0)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf#2\x99\x1e\xa1`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\f<\x8f\xc1\x99\x89r\xe1?\xbdu\x98\xc3\xf8\xd2Q#\xc6g\xa0\x85\xd6G\x85\x11X\x8d,\x02\xd45\xb8\xca\x97\x9d\xcb\x1e\x80\xd6\xd5>N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9b5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xec\x8aog\x87BR\x9d\xad\xd4FcB\xda\x95\xc3\xdd\x9d\x8f\x1a\xce\x18\x80\"j\xe1\xba\x1e\x97uX\xccv\xd6\vcz\x92A^\xbc\xceF\\\xb0:\xaf\xc5~\xbcJ e\r\x88c\x9d\xb92\xb6i4zq\xb3c\x0f\xb2t\x93\xf2E6b\xfa\xcdJ5\xe3W]`4\xd8D\x05\v\xfc)\xca\xedQ\xd0]Ot\'\xc2tDF\xf9\xa7\xb5(\x83\xa5\x0f\x1d\x1d\x06Dg\x13>\x19\xe85#\aaT\x89=\x104\xd5\x85l\x96\x91\xea\x172P\xb3:\xadZ\xbc\xbe\x00\xf0\x14\x96\xd9M\xd7\x88QZs\xb2\xe1+$jfQodH\x05/y`~7\x16\x02\x00(v\xe6`\"6\xfcgC\xb5\xf0\x13.zj\xc5bj+@\x00\x00\x00\x00\x00\x00\x00.\xd4`=z\xd1n\x8d\x8f\xa5hS\x8e[\xb3\xa3\x87\xb9\xe2_Z\x11\xef\xc2]V\xf3\x03\x94\xb9\xe1\xa68\x8d\\\xe5\xef\xacpM\xf0\xa6\x04\x10\xb7\xc0t\x83\\\xf7\x12k\x9f\x10\xd5Z\x19\xc1\xc1\x80\\o\x97\xce=U\xdd\xaa\x1b\x05\x14\x13\xa6\xbd#\xde\x04\xe6$\xec$3\xf6\x97\xc6\xeaSL\xb7A72M\x88k@\xe5\xa3\n&\x1exQ-2p\xd62\'\xec\x0f\x13;I\x95fE_\r\xe7\t!A\x05\xe4\x8f\x9e0\xf8/T\x18\xf7\xa1\x9f\xde1\xd5\x80<\xf5\b\xa9\xec\x85\xaeW\xb3\xd8#)bn \xfb\xf2\x88\xfaR\xff\xdd\x80\x96_\xec5\xf0\x1c\a\x8a\x80\x00@=\r8u+%f:\x1e\x82\xfap\xf6\x89\xea\xba\xe3\xbbM%F\xdb\\\xd1eJJ*\xc67\xca\x03\xa3\xf7(\xbb\xecN\xd4\xe7\xf2:u\x8a\b\xd5\v\xca\xfd\\\xd6\xe3\x05\xb3\x03\xd5\xe0\xd2\xf2{\'\x8b\xdf\xa1.E\b1\xcb\xa2\xbe}\xb2\xe4y\xbb\xe6\x1f\x10c\xf5WQ\x82\x04\x01C\x83,\x90\x1a\xfa\x8e\x17\x89\xe2\xedX\x8d\rmq\t\xb5$\xb4\x9b\x92z\xd6/-\x13,\xb5%\x8eM/\x04\xa7\x7f\x1b\x85\xf1\xa4X\x17\xbb\x1cR14\xfb!\b\x10\xe8\xb2\xd41gK\xe4\xea\xe39d\bL\xe5\x1b\xbd[\x9bWD:\r&\xe9\vn^\xcc\x86\xe3\xce1>3{\xaa{\xbd0P\x9f\xa68\xf5\x82\xb8\x9aD\x9c{\xe6\xf8\xcbD\xb5aJ\xb0\x92\x89\xbc\x82\x1ch\x89\xe7\xdd]q,\xec\xc4\xa5\x93\xe5,\x0e,>/\xaf|\xf0\x01V\x7f\xc9?\xba\x16\xe4$+}5dy\xb1\xef\xf1m\xa5\x94d9\xaf\xcfq\x8b=\x026\xef\r\x91\x18\xc5\xb6\xb9fM\x8ayZ\xbcd\xa5\x8a\x88\x98\xc3\xfc`\xa6\xba\x1f\x17\v$\x88g\xb4\xad\b\xc1\xddW\xa6\xc1\xb7\xb0\xa3\x84Q\x13GoU\xe2\xb7\x03\x9c\xd5\x0f\xa8\x0ef\"\x15\x82\xe7\xbd\xf8\xca\x10f\xfe6h\xe9\xc3\xc2\xa0O:\xac~\x1a\xf7\xbeF\xbe\xe5\xf0\x81\xd6&\xc00x0}) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="200000001100010100"/20, @ANYRES32=r7], 0x20}, 0x1, 0x0, 0x0, 0x80d5}, 0x0) setsockopt$MRT6_DEL_MIF(r0, 0x29, 0xcb, &(0x7f0000000540)={0x0, 0x0, 0x0, r7}, 0xc) kernel console output (not intermixed with test programs): 00202 ORIG_RAX: 000000000000000f [ 390.069192][T21459] RAX: ffffffffffffffda RBX: 00007f0378b95fa0 RCX: 00007f037890a359 [ 390.069205][T21459] RDX: 00007f0376fd6a80 RSI: 00007f0376fd6bb0 RDI: 0000000000000021 [ 390.069217][T21459] RBP: 00007f0376fd7090 R08: 0000000000000000 R09: 0000000000000000 [ 390.069229][T21459] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000002 [ 390.069241][T21459] R13: 0000000000000000 R14: 00007f0378b95fa0 R15: 00007ffe513381b8 [ 390.069260][T21459] [ 390.284615][T17687] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 390.325272][T21477] netlink: zone id is out of range [ 390.330502][T21477] netlink: zone id is out of range [ 390.335661][T21477] netlink: zone id is out of range [ 390.340805][T21477] netlink: zone id is out of range [ 390.346039][T21477] netlink: zone id is out of range [ 390.351206][T21477] netlink: zone id is out of range [ 390.356447][T21477] netlink: zone id is out of range [ 390.361619][T21477] netlink: zone id is out of range [ 390.366818][T21477] netlink: zone id is out of range [ 390.371949][T21477] netlink: zone id is out of range [ 390.446440][T21500] netlink: 12 bytes leftover after parsing attributes in process `syz.7.5807'. [ 390.610919][T21516] loop2: detected capacity change from 0 to 128 [ 390.679509][T21520] bio_check_eod: 104 callbacks suppressed [ 390.679526][T21520] syz.2.5815: attempt to access beyond end of device [ 390.679526][T21520] loop2: rw=2049, sector=153, nr_sectors = 8 limit=128 [ 390.733058][T21520] syz.2.5815: attempt to access beyond end of device [ 390.733058][T21520] loop2: rw=2049, sector=169, nr_sectors = 8 limit=128 [ 390.761700][T21520] syz.2.5815: attempt to access beyond end of device [ 390.761700][T21520] loop2: rw=2049, sector=185, nr_sectors = 8 limit=128 [ 390.803201][T21520] syz.2.5815: attempt to access beyond end of device [ 390.803201][T21520] loop2: rw=2049, sector=201, nr_sectors = 8 limit=128 [ 390.831218][T21520] syz.2.5815: attempt to access beyond end of device [ 390.831218][T21520] loop2: rw=2049, sector=217, nr_sectors = 8 limit=128 [ 390.886667][T21532] loop4: detected capacity change from 0 to 512 [ 390.894009][T21532] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 390.905669][T21520] syz.2.5815: attempt to access beyond end of device [ 390.905669][T21520] loop2: rw=2049, sector=233, nr_sectors = 8 limit=128 [ 390.929468][T21532] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 390.943343][T21520] syz.2.5815: attempt to access beyond end of device [ 390.943343][T21520] loop2: rw=2049, sector=249, nr_sectors = 8 limit=128 [ 390.954920][T21543] FAULT_INJECTION: forcing a failure. [ 390.954920][T21543] name failslab, interval 1, probability 0, space 0, times 0 [ 390.957070][T21532] ext4 filesystem being mounted at /22/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 390.969489][T21543] CPU: 1 UID: 0 PID: 21543 Comm: syz.1.5818 Not tainted 6.15.0-rc3-syzkaller-00019-gbc3372351d0c #0 PREEMPT(voluntary) [ 390.969525][T21543] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 390.969606][T21543] Call Trace: [ 390.969615][T21543] [ 390.969625][T21543] dump_stack_lvl+0xf6/0x150 [ 390.969703][T21543] dump_stack+0x15/0x1a [ 390.969724][T21543] should_fail_ex+0x261/0x270 [ 390.969800][T21543] should_failslab+0x8f/0xb0 [ 390.969828][T21543] __kmalloc_node_track_caller_noprof+0xaa/0x410 [ 390.969944][T21543] ? cond_bools_copy+0x30/0x80 [ 390.970003][T21543] kmemdup_noprof+0x2b/0x70 [ 390.970048][T21543] cond_bools_copy+0x30/0x80 [ 390.970080][T21543] hashtab_duplicate+0x132/0x370 [ 390.970122][T21543] ? __pfx_cond_bools_copy+0x10/0x10 [ 390.970155][T21543] ? __pfx_cond_bools_destroy+0x10/0x10 [ 390.970194][T21543] cond_policydb_dup+0xd9/0x500 [ 390.970231][T21543] security_set_bools+0xa8/0x350 [ 390.970262][T21543] sel_commit_bools_write+0x1ed/0x270 [ 390.970298][T21543] vfs_writev+0x3f3/0x880 [ 390.970394][T21543] ? get_pid_task+0x94/0xd0 [ 390.970417][T21543] ? __pfx_sel_commit_bools_write+0x10/0x10 [ 390.970476][T21543] ? mutex_lock+0xd/0x40 [ 390.970607][T21543] do_writev+0xf7/0x230 [ 390.970658][T21543] __x64_sys_writev+0x45/0x50 [ 390.970694][T21543] x64_sys_call+0x1d68/0x2e10 [ 390.970723][T21543] do_syscall_64+0xc9/0x1a0 [ 390.970755][T21543] ? clear_bhb_loop+0x25/0x80 [ 390.970782][T21543] ? clear_bhb_loop+0x25/0x80 [ 390.970809][T21543] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 390.970844][T21543] RIP: 0033:0x7f42622ee169 [ 390.970868][T21543] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 390.970892][T21543] RSP: 002b:00007f4260957038 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 390.970916][T21543] RAX: ffffffffffffffda RBX: 00007f4262515fa0 RCX: 00007f42622ee169 [ 390.970932][T21543] RDX: 0000000000000001 RSI: 0000200000000080 RDI: 0000000000000003 [ 390.970970][T21543] RBP: 00007f4260957090 R08: 0000000000000000 R09: 0000000000000000 [ 390.970986][T21543] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 390.971002][T21543] R13: 0000000000000000 R14: 00007f4262515fa0 R15: 00007ffdd06ebda8 [ 390.971062][T21543] [ 391.023067][T21520] syz.2.5815: attempt to access beyond end of device [ 391.023067][T21520] loop2: rw=2049, sector=265, nr_sectors = 8 limit=128 [ 391.221621][T21520] syz.2.5815: attempt to access beyond end of device [ 391.221621][T21520] loop2: rw=2049, sector=281, nr_sectors = 8 limit=128 [ 391.235287][T21520] syz.2.5815: attempt to access beyond end of device [ 391.235287][T21520] loop2: rw=2049, sector=297, nr_sectors = 8 limit=128 [ 391.275022][T21130] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 391.326080][T21548] hub 9-0:1.0: USB hub found [ 391.330836][T21548] hub 9-0:1.0: 8 ports detected [ 391.383207][ T29] kauditd_printk_skb: 92 callbacks suppressed [ 391.383221][ T29] audit: type=1400 audit(1745408361.135:13979): avc: denied { ioctl } for pid=21552 comm="syz.2.5822" path="/dev/sg0" dev="devtmpfs" ino=135 ioctlcmd=0x2285 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 391.383255][ T29] audit: type=1400 audit(1745408361.175:13980): avc: denied { prog_load } for pid=21556 comm="syz.2.5823" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 391.383282][ T29] audit: type=1400 audit(1745408361.175:13981): avc: denied { bpf } for pid=21556 comm="syz.2.5823" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 391.383371][ T29] audit: type=1400 audit(1745408361.175:13982): avc: denied { perfmon } for pid=21556 comm="syz.2.5823" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 391.383394][ T29] audit: type=1400 audit(1745408361.175:13983): avc: denied { prog_run } for pid=21556 comm="syz.2.5823" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 391.383415][ T29] audit: type=1400 audit(1745408361.175:13984): avc: denied { recv } for pid=19082 comm="syz-executor" saddr=10.128.0.163 src=30030 daddr=10.128.1.134 dest=41062 netif=eth0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 391.392149][ T29] audit: type=1400 audit(1745408361.185:13985): avc: denied { map_create } for pid=21558 comm="syz.7.5824" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 391.392184][ T29] audit: type=1400 audit(1745408361.185:13986): avc: denied { map_read map_write } for pid=21558 comm="syz.7.5824" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 391.398319][ T29] audit: type=1400 audit(1745408361.195:13987): avc: denied { write } for pid=21556 comm="syz.2.5823" name="fd" dev="proc" ino=67301 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1 [ 391.398756][ T29] audit: type=1400 audit(1745408361.195:13988): avc: denied { write } for pid=21556 comm="syz.2.5823" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 391.514658][T21569] loop6: detected capacity change from 0 to 256 [ 391.538128][T21571] syzkaller0: entered allmulticast mode [ 391.539598][T21569] FAT-fs (loop6): Directory bread(block 64) failed [ 391.539682][T21569] FAT-fs (loop6): Directory bread(block 65) failed [ 391.539708][T21569] FAT-fs (loop6): Directory bread(block 66) failed [ 391.539731][T21569] FAT-fs (loop6): Directory bread(block 67) failed [ 391.539759][T21569] FAT-fs (loop6): Directory bread(block 68) failed [ 391.539781][T21569] FAT-fs (loop6): Directory bread(block 69) failed [ 391.539822][T21569] FAT-fs (loop6): Directory bread(block 70) failed [ 391.539844][T21569] FAT-fs (loop6): Directory bread(block 71) failed [ 391.539871][T21569] FAT-fs (loop6): Directory bread(block 72) failed [ 391.539951][T21569] FAT-fs (loop6): Directory bread(block 73) failed [ 391.640673][T21572] syzkaller0: left allmulticast mode [ 392.060629][T21580] netlink: 'syz.7.5831': attribute type 33 has an invalid length. [ 392.068556][T21580] netlink: 152 bytes leftover after parsing attributes in process `syz.7.5831'. [ 392.091264][T21598] loop6: detected capacity change from 0 to 256 [ 392.101599][T21599] loop4: detected capacity change from 0 to 512 [ 392.132116][T21599] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 392.164682][T21599] ext4 filesystem being mounted at /24/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 392.226800][T21611] loop6: detected capacity change from 0 to 128 [ 393.015976][T21130] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 393.104699][T21639] loop6: detected capacity change from 0 to 128 [ 393.157260][T21647] FAULT_INJECTION: forcing a failure. [ 393.157260][T21647] name failslab, interval 1, probability 0, space 0, times 0 [ 393.170064][T21647] CPU: 1 UID: 0 PID: 21647 Comm: syz.1.5849 Not tainted 6.15.0-rc3-syzkaller-00019-gbc3372351d0c #0 PREEMPT(voluntary) [ 393.170160][T21647] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 393.170172][T21647] Call Trace: [ 393.170178][T21647] [ 393.170186][T21647] dump_stack_lvl+0xf6/0x150 [ 393.170214][T21647] dump_stack+0x15/0x1a [ 393.170235][T21647] should_fail_ex+0x261/0x270 [ 393.170272][T21647] should_failslab+0x8f/0xb0 [ 393.170297][T21647] __kmalloc_cache_node_noprof+0x58/0x340 [ 393.170342][T21647] ? __get_vm_area_node+0xfb/0x1c0 [ 393.170381][T21647] __get_vm_area_node+0xfb/0x1c0 [ 393.170416][T21647] __vmalloc_node_range_noprof+0x285/0xe80 [ 393.170504][T21647] ? bpf_prog_alloc_no_stats+0x49/0x390 [ 393.170536][T21647] ? avc_has_perm_noaudit+0x1cc/0x210 [ 393.170568][T21647] ? selinux_capable+0x1f9/0x260 [ 393.170641][T21647] ? bpf_prog_alloc_no_stats+0x49/0x390 [ 393.170671][T21647] __vmalloc_noprof+0x5e/0x70 [ 393.170691][T21647] ? bpf_prog_alloc_no_stats+0x49/0x390 [ 393.170731][T21647] bpf_prog_alloc_no_stats+0x49/0x390 [ 393.170777][T21647] ? bpf_prog_alloc+0x28/0x150 [ 393.170807][T21647] bpf_prog_alloc+0x3a/0x150 [ 393.170859][T21647] bpf_prog_load+0x532/0x10e0 [ 393.170904][T21647] __sys_bpf+0x533/0x800 [ 393.170941][T21647] __x64_sys_bpf+0x43/0x50 [ 393.170969][T21647] x64_sys_call+0x23da/0x2e10 [ 393.171069][T21647] do_syscall_64+0xc9/0x1a0 [ 393.171099][T21647] ? clear_bhb_loop+0x25/0x80 [ 393.171140][T21647] ? clear_bhb_loop+0x25/0x80 [ 393.171160][T21647] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 393.171180][T21647] RIP: 0033:0x7f42622ee169 [ 393.171198][T21647] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 393.171220][T21647] RSP: 002b:00007f4260957038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 393.171264][T21647] RAX: ffffffffffffffda RBX: 00007f4262515fa0 RCX: 00007f42622ee169 [ 393.171276][T21647] RDX: 0000000000000094 RSI: 0000200000000240 RDI: 0000000000000005 [ 393.171287][T21647] RBP: 00007f4260957090 R08: 0000000000000000 R09: 0000000000000000 [ 393.171298][T21647] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 393.171309][T21647] R13: 0000000000000000 R14: 00007f4262515fa0 R15: 00007ffdd06ebda8 [ 393.171327][T21647] [ 393.171347][T21647] syz.1.5849: vmalloc error: size 4096, vm_struct allocation failed, mode:0x500dc0(GFP_USER|__GFP_ZERO|__GFP_ACCOUNT), nodemask=(null),cpuset=/,mems_allowed=0 [ 393.417158][T21647] CPU: 1 UID: 0 PID: 21647 Comm: syz.1.5849 Not tainted 6.15.0-rc3-syzkaller-00019-gbc3372351d0c #0 PREEMPT(voluntary) [ 393.417188][T21647] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 393.417201][T21647] Call Trace: [ 393.417208][T21647] [ 393.417216][T21647] dump_stack_lvl+0xf6/0x150 [ 393.417254][T21647] dump_stack+0x15/0x1a [ 393.417275][T21647] warn_alloc+0x145/0x1b0 [ 393.417365][T21647] __vmalloc_node_range_noprof+0x2aa/0xe80 [ 393.417404][T21647] ? avc_has_perm_noaudit+0x1cc/0x210 [ 393.417468][T21647] ? selinux_capable+0x1f9/0x260 [ 393.417503][T21647] ? bpf_prog_alloc_no_stats+0x49/0x390 [ 393.417537][T21647] __vmalloc_noprof+0x5e/0x70 [ 393.417696][T21647] ? bpf_prog_alloc_no_stats+0x49/0x390 [ 393.417727][T21647] bpf_prog_alloc_no_stats+0x49/0x390 [ 393.417755][T21647] ? bpf_prog_alloc+0x28/0x150 [ 393.417789][T21647] bpf_prog_alloc+0x3a/0x150 [ 393.417860][T21647] bpf_prog_load+0x532/0x10e0 [ 393.417945][T21647] __sys_bpf+0x533/0x800 [ 393.417981][T21647] __x64_sys_bpf+0x43/0x50 [ 393.418013][T21647] x64_sys_call+0x23da/0x2e10 [ 393.418040][T21647] do_syscall_64+0xc9/0x1a0 [ 393.418071][T21647] ? clear_bhb_loop+0x25/0x80 [ 393.418091][T21647] ? clear_bhb_loop+0x25/0x80 [ 393.418120][T21647] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 393.418141][T21647] RIP: 0033:0x7f42622ee169 [ 393.418237][T21647] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 393.418257][T21647] RSP: 002b:00007f4260957038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 393.418285][T21647] RAX: ffffffffffffffda RBX: 00007f4262515fa0 RCX: 00007f42622ee169 [ 393.418301][T21647] RDX: 0000000000000094 RSI: 0000200000000240 RDI: 0000000000000005 [ 393.418314][T21647] RBP: 00007f4260957090 R08: 0000000000000000 R09: 0000000000000000 [ 393.418325][T21647] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 393.418336][T21647] R13: 0000000000000000 R14: 00007f4262515fa0 R15: 00007ffdd06ebda8 [ 393.418354][T21647] [ 393.418361][T21647] Mem-Info: [ 393.542091][T21657] x_tables: ip6_tables: icmp6 match: only valid for protocol 58 [ 393.545667][T21647] active_anon:3546 inactive_anon:8 isolated_anon:0 [ 393.545667][T21647] active_file:20289 inactive_file:2421 isolated_file:0 [ 393.545667][T21647] unevictable:0 dirty:240 writeback:0 [ 393.545667][T21647] slab_reclaimable:3149 slab_unreclaimable:33421 [ 393.545667][T21647] mapped:28684 shmem:362 pagetables:928 [ 393.545667][T21647] sec_pagetables:0 bounce:0 [ 393.545667][T21647] kernel_misc_reclaimable:0 [ 393.545667][T21647] free:1843051 free_pcp:9651 free_cma:0 [ 393.599238][T21657] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 393.602143][T21647] Node 0 active_anon:14184kB inactive_anon:32kB active_file:81156kB inactive_file:9684kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:114736kB dirty:960kB writeback:0kB shmem:1448kB writeback_tmp:0kB kernel_stack:2992kB pagetables:3712kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 393.623112][T21657] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 393.624273][T21647] Node 0 DMA free:15360kB boost:0kB min:20kB low:32kB high:44kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 393.749463][T21647] lowmem_reserve[]: 0 2882 7860 7860 [ 393.754899][T21647] Node 0 DMA32 free:2945392kB boost:0kB min:4132kB low:7060kB high:9988kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:3129332kB managed:2951308kB mlocked:0kB bounce:0kB free_pcp:5916kB local_pcp:2388kB free_cma:0kB [ 393.783829][T21647] lowmem_reserve[]: 0 0 4978 4978 [ 393.788996][T21647] Node 0 Normal free:4411452kB boost:0kB min:7188kB low:12284kB high:17380kB reserved_highatomic:0KB active_anon:14184kB inactive_anon:32kB active_file:81156kB inactive_file:9684kB unevictable:0kB writepending:960kB present:5242880kB managed:5098244kB mlocked:0kB bounce:0kB free_pcp:32516kB local_pcp:10388kB free_cma:0kB [ 393.819318][T21647] lowmem_reserve[]: 0 0 0 0 [ 393.823879][T21647] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 393.836781][T21647] Node 0 DMA32: 4*4kB (M) 2*8kB (M) 3*16kB (M) 5*32kB (M) 4*64kB (M) 3*128kB (M) 2*256kB (M) 4*512kB (M) 3*1024kB (M) 3*2048kB (M) 716*4096kB (M) = 2945392kB [ 393.853017][T21647] Node 0 Normal: 772*4kB (UME) 1068*8kB (UME) 1511*16kB (UME) 1532*32kB (UME) 826*64kB (UME) 479*128kB (UME) 381*256kB (UM) 339*512kB (UM) 351*1024kB (UME) 99*2048kB (UME) 825*4096kB (UM) = 4411488kB [ 393.872902][T21647] Node 0 hugepages_total=4 hugepages_free=4 hugepages_surp=0 hugepages_size=2048kB [ 393.882405][T21647] 23078 total pagecache pages [ 393.887153][T21647] 17 pages in swap cache [ 393.891589][T21647] Free swap = 124600kB [ 393.896087][T21647] Total swap = 124996kB [ 393.900251][T21647] 2097051 pages RAM [ 393.904184][T21647] 0 pages HighMem/MovableOnly [ 393.908864][T21647] 80823 pages reserved [ 393.926472][T21666] netlink: 4 bytes leftover after parsing attributes in process `syz.7.5855'. [ 393.974536][T21671] FAULT_INJECTION: forcing a failure. [ 393.974536][T21671] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 393.979261][T21672] loop4: detected capacity change from 0 to 1024 [ 393.987766][T21671] CPU: 0 UID: 0 PID: 21671 Comm: syz.6.5857 Not tainted 6.15.0-rc3-syzkaller-00019-gbc3372351d0c #0 PREEMPT(voluntary) [ 393.987799][T21671] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 393.987812][T21671] Call Trace: [ 393.987818][T21671] [ 393.987826][T21671] dump_stack_lvl+0xf6/0x150 [ 393.987853][T21671] dump_stack+0x15/0x1a [ 393.987944][T21671] should_fail_ex+0x261/0x270 [ 393.987975][T21671] should_fail+0xb/0x10 [ 393.988060][T21671] should_fail_usercopy+0x1a/0x20 [ 393.988109][T21671] _copy_from_user+0x1c/0xa0 [ 393.988146][T21671] dev_ethtool+0xd2/0x1570 [ 393.988176][T21671] ? full_name_hash+0x93/0xe0 [ 393.988209][T21671] ? strcmp+0x21/0x50 [ 393.988294][T21671] ? __rcu_read_unlock+0x4e/0x70 [ 393.988322][T21671] dev_ioctl+0x3b3/0xa20 [ 393.988408][T21671] sock_do_ioctl+0x121/0x220 [ 393.988449][T21671] sock_ioctl+0x436/0x630 [ 393.988484][T21671] ? __pfx_sock_ioctl+0x10/0x10 [ 393.988519][T21671] __se_sys_ioctl+0xc9/0x140 [ 393.988582][T21671] __x64_sys_ioctl+0x43/0x50 [ 393.988620][T21671] x64_sys_call+0x168d/0x2e10 [ 393.988654][T21671] do_syscall_64+0xc9/0x1a0 [ 393.988715][T21671] ? clear_bhb_loop+0x25/0x80 [ 393.988742][T21671] ? clear_bhb_loop+0x25/0x80 [ 393.988769][T21671] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 393.988796][T21671] RIP: 0033:0x7f0066bee169 [ 393.988815][T21671] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 393.988842][T21671] RSP: 002b:00007f0065257038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 393.988865][T21671] RAX: ffffffffffffffda RBX: 00007f0066e15fa0 RCX: 00007f0066bee169 [ 393.988881][T21671] RDX: 0000200000000340 RSI: 0000000000008946 RDI: 0000000000000003 [ 393.988896][T21671] RBP: 00007f0065257090 R08: 0000000000000000 R09: 0000000000000000 [ 393.988911][T21671] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 393.988926][T21671] R13: 0000000000000000 R14: 00007f0066e15fa0 R15: 00007fff40b93998 [ 393.988950][T21671] [ 394.199436][T21672] EXT4-fs: Ignoring removed nobh option [ 394.205061][T21672] EXT4-fs: Ignoring removed bh option [ 394.233474][T21672] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 394.324891][T21691] FAULT_INJECTION: forcing a failure. [ 394.324891][T21691] name failslab, interval 1, probability 0, space 0, times 0 [ 394.337595][T21691] CPU: 0 UID: 0 PID: 21691 Comm: +}[@ Not tainted 6.15.0-rc3-syzkaller-00019-gbc3372351d0c #0 PREEMPT(voluntary) [ 394.337627][T21691] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 394.337641][T21691] Call Trace: [ 394.337649][T21691] [ 394.337658][T21691] dump_stack_lvl+0xf6/0x150 [ 394.337686][T21691] dump_stack+0x15/0x1a [ 394.337708][T21691] should_fail_ex+0x261/0x270 [ 394.337791][T21691] should_failslab+0x8f/0xb0 [ 394.337818][T21691] kmem_cache_alloc_noprof+0x59/0x340 [ 394.337852][T21691] ? security_inode_alloc+0x37/0x100 [ 394.337881][T21691] security_inode_alloc+0x37/0x100 [ 394.337914][T21691] inode_init_always_gfp+0x4a2/0x4f0 [ 394.337933][T21691] ? __pfx_sock_alloc_inode+0x10/0x10 [ 394.337972][T21691] alloc_inode+0x86/0x170 [ 394.337991][T21691] sock_create_lite+0x90/0x2a0 [ 394.338129][T21691] ? __wake_up+0x88/0xb0 [ 394.338167][T21691] __netlink_kernel_create+0x92/0x580 [ 394.338200][T21691] ? __netlink_kernel_create+0x55f/0x580 [ 394.338284][T21691] audit_net_init+0x9a/0x190 [ 394.338312][T21691] ? __pfx_audit_receive+0x10/0x10 [ 394.338344][T21691] ? __pfx_audit_multicast_bind+0x10/0x10 [ 394.338430][T21691] ? __pfx_audit_multicast_unbind+0x10/0x10 [ 394.338466][T21691] ops_init+0x21e/0x2d0 [ 394.338552][T21691] setup_net+0x14f/0x610 [ 394.338582][T21691] copy_net_ns+0x5a3/0x740 [ 394.338622][T21691] create_new_namespaces+0x228/0x430 [ 394.338660][T21691] unshare_nsproxy_namespaces+0xe6/0x120 [ 394.338770][T21691] ksys_unshare+0x3d3/0x700 [ 394.338799][T21691] __x64_sys_unshare+0x1f/0x30 [ 394.338855][T21691] x64_sys_call+0x2c93/0x2e10 [ 394.338917][T21691] do_syscall_64+0xc9/0x1a0 [ 394.338941][T21691] ? clear_bhb_loop+0x25/0x80 [ 394.339018][T21691] ? clear_bhb_loop+0x25/0x80 [ 394.339041][T21691] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 394.339118][T21691] RIP: 0033:0x7fac0bf4e169 [ 394.339135][T21691] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 394.339155][T21691] RSP: 002b:00007fac0a5b7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 394.339174][T21691] RAX: ffffffffffffffda RBX: 00007fac0c175fa0 RCX: 00007fac0bf4e169 [ 394.339187][T21691] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000044040200 [ 394.339265][T21691] RBP: 00007fac0a5b7090 R08: 0000000000000000 R09: 0000000000000000 [ 394.339292][T21691] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 394.339302][T21691] R13: 0000000000000000 R14: 00007fac0c175fa0 R15: 00007ffeeabaf628 [ 394.339320][T21691] [ 394.653914][T21130] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 394.692222][T21702] loop4: detected capacity change from 0 to 128 [ 394.714876][T21704] loop2: detected capacity change from 0 to 128 [ 394.797405][T21714] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:0c) already exists on: ipvlan2 [ 394.807437][T21714] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 394.820807][T21714] bridge0: port 3(vlan0) entered blocking state [ 394.827271][T21714] bridge0: port 3(vlan0) entered disabled state [ 394.835915][T21714] vlan0: entered allmulticast mode [ 394.841056][T21714] bridge0: entered allmulticast mode [ 394.850210][T21714] vlan0: left allmulticast mode [ 394.855170][T21714] bridge0: left allmulticast mode [ 394.895795][T21720] 9pnet_fd: Insufficient options for proto=fd [ 394.910923][T21720] netlink: 'syz.6.5875': attribute type 13 has an invalid length. [ 394.942697][T21720] gretap0: refused to change device tx_queue_len [ 395.127900][T21728] netlink: 'syz.2.5878': attribute type 33 has an invalid length. [ 395.135808][T21728] netlink: 152 bytes leftover after parsing attributes in process `syz.2.5878'. [ 395.147075][T21728] SELinux: syz.2.5878 (21728) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 395.246482][T21738] lo speed is unknown, defaulting to 1000 [ 395.330891][T21741] netlink: 56 bytes leftover after parsing attributes in process `syz.6.5880'. [ 395.366648][T21742] loop2: detected capacity change from 0 to 2048 [ 395.531055][T21742] EXT4-fs (loop2): failed to initialize system zone (-117) [ 395.559894][T21742] EXT4-fs (loop2): mount failed [ 395.594132][T21755] loop4: detected capacity change from 0 to 128 [ 395.772381][T21760] netlink: 'syz.7.5885': attribute type 21 has an invalid length. [ 395.790645][T21760] netlink: 'syz.7.5885': attribute type 1 has an invalid length. [ 395.798541][T21760] netlink: 144 bytes leftover after parsing attributes in process `syz.7.5885'. [ 395.901753][T10235] bio_check_eod: 30819 callbacks suppressed [ 395.901891][T10235] kworker/u8:19: attempt to access beyond end of device [ 395.901891][T10235] loop4: rw=1, sector=153, nr_sectors = 8 limit=128 [ 395.950637][T21775] netlink: 12 bytes leftover after parsing attributes in process `syz.6.5890'. [ 395.963451][T10235] kworker/u8:19: attempt to access beyond end of device [ 395.963451][T10235] loop4: rw=1, sector=169, nr_sectors = 8 limit=128 [ 395.988283][T10235] kworker/u8:19: attempt to access beyond end of device [ 395.988283][T10235] loop4: rw=1, sector=185, nr_sectors = 8 limit=128 [ 396.043201][T10235] kworker/u8:19: attempt to access beyond end of device [ 396.043201][T10235] loop4: rw=1, sector=201, nr_sectors = 8 limit=128 [ 396.057285][T21778] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 396.067367][T21778] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 396.075697][T10235] kworker/u8:19: attempt to access beyond end of device [ 396.075697][T10235] loop4: rw=1, sector=217, nr_sectors = 8 limit=128 [ 396.086967][T21783] loop2: detected capacity change from 0 to 512 [ 396.105892][T21783] EXT4-fs error (device loop2): ext4_iget_extra_inode:4693: inode #15: comm syz.2.5895: corrupted in-inode xattr: invalid ea_ino [ 396.106450][T10235] kworker/u8:19: attempt to access beyond end of device [ 396.106450][T10235] loop4: rw=1, sector=233, nr_sectors = 8 limit=128 [ 396.133761][T21783] EXT4-fs error (device loop2): ext4_orphan_get:1395: comm syz.2.5895: couldn't read orphan inode 15 (err -117) [ 396.151840][T10235] kworker/u8:19: attempt to access beyond end of device [ 396.151840][T10235] loop4: rw=1, sector=249, nr_sectors = 8 limit=128 [ 396.165520][T10235] kworker/u8:19: attempt to access beyond end of device [ 396.165520][T10235] loop4: rw=1, sector=265, nr_sectors = 8 limit=128 [ 396.175506][T21783] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 396.179135][T10235] kworker/u8:19: attempt to access beyond end of device [ 396.179135][T10235] loop4: rw=1, sector=281, nr_sectors = 8 limit=128 [ 396.203224][T21785] loop6: detected capacity change from 0 to 256 [ 396.204489][T10235] kworker/u8:19: attempt to access beyond end of device [ 396.204489][T10235] loop4: rw=1, sector=297, nr_sectors = 8 limit=128 [ 396.237627][T12276] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 396.514192][T21792] netlink: 'syz.2.5897': attribute type 33 has an invalid length. [ 396.522074][T21792] netlink: 152 bytes leftover after parsing attributes in process `syz.2.5897'. [ 396.552171][T21792] SELinux: syz.2.5897 (21792) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 396.655346][T21793] loop2: detected capacity change from 0 to 2048 [ 396.694457][ T29] kauditd_printk_skb: 160 callbacks suppressed [ 396.694473][ T29] audit: type=1400 audit(1745408366.495:14148): avc: denied { create } for pid=21797 comm="syz.6.5900" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 396.742042][T21793] EXT4-fs (loop2): failed to initialize system zone (-117) [ 396.743195][T21798] netlink: 24 bytes leftover after parsing attributes in process `syz.6.5900'. [ 396.764481][ T29] audit: type=1400 audit(1745408366.525:14149): avc: denied { bind } for pid=21797 comm="syz.6.5900" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 396.784631][ T29] audit: type=1400 audit(1745408366.525:14150): avc: denied { setopt } for pid=21797 comm="syz.6.5900" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 396.804933][ T29] audit: type=1400 audit(1745408366.535:14151): avc: denied { write } for pid=21797 comm="syz.6.5900" path="socket:[67798]" dev="sockfs" ino=67798 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 396.832960][T21798] netlink: 24 bytes leftover after parsing attributes in process `syz.6.5900'. [ 396.842114][T21793] EXT4-fs (loop2): mount failed [ 396.903977][T21801] netlink: 8 bytes leftover after parsing attributes in process `syz.6.5900'. [ 397.000602][ T29] audit: type=1400 audit(1745408366.695:14152): avc: denied { mounton } for pid=21802 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 397.022462][ T29] audit: type=1400 audit(1745408366.695:14153): avc: denied { create } for pid=21797 comm="syz.6.5900" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 397.043017][ T29] audit: type=1400 audit(1745408366.695:14154): avc: denied { write } for pid=21797 comm="syz.6.5900" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 397.054638][T21814] FAULT_INJECTION: forcing a failure. [ 397.054638][T21814] name failslab, interval 1, probability 0, space 0, times 0 [ 397.076097][T21814] CPU: 1 UID: 0 PID: 21814 Comm: syz.6.5902 Not tainted 6.15.0-rc3-syzkaller-00019-gbc3372351d0c #0 PREEMPT(voluntary) [ 397.076128][T21814] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 397.076143][T21814] Call Trace: [ 397.076150][T21814] [ 397.076159][T21814] dump_stack_lvl+0xf6/0x150 [ 397.076188][T21814] dump_stack+0x15/0x1a [ 397.076206][T21814] should_fail_ex+0x261/0x270 [ 397.076265][T21814] should_failslab+0x8f/0xb0 [ 397.076288][T21814] __kmalloc_cache_noprof+0x55/0x320 [ 397.076315][T21814] ? gen_new_estimator+0x125/0x440 [ 397.076429][T21814] gen_new_estimator+0x125/0x440 [ 397.076465][T21814] ? should_failslab+0x8f/0xb0 [ 397.076495][T21814] xt_rateest_tg_checkentry+0x290/0x620 [ 397.076534][T21814] xt_check_target+0x27e/0x4b0 [ 397.076614][T21814] ? strcmp+0x21/0x50 [ 397.076645][T21814] ? xt_find_target+0x1ce/0x200 [ 397.076727][T21814] translate_table+0xd2e/0x10b0 [ 397.076770][T21814] do_ip6t_set_ctl+0x663/0x840 [ 397.076800][T21814] ? kstrtouint+0x7b/0xc0 [ 397.076837][T21814] nf_setsockopt+0x195/0x1b0 [ 397.076865][T21814] ipv6_setsockopt+0x10f/0x130 [ 397.076936][T21814] tcp_setsockopt+0x93/0xb0 [ 397.076973][T21814] sock_common_setsockopt+0x64/0x80 [ 397.077077][T21814] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 397.077117][T21814] __sys_setsockopt+0x187/0x200 [ 397.077168][T21814] __x64_sys_setsockopt+0x66/0x80 [ 397.077255][T21814] x64_sys_call+0x2a09/0x2e10 [ 397.077285][T21814] do_syscall_64+0xc9/0x1a0 [ 397.077474][T21814] ? clear_bhb_loop+0x25/0x80 [ 397.077499][T21814] ? clear_bhb_loop+0x25/0x80 [ 397.077526][T21814] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 397.077551][T21814] RIP: 0033:0x7f0066bee169 [ 397.077570][T21814] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 397.077591][T21814] RSP: 002b:00007f0065236038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 397.077610][T21814] RAX: ffffffffffffffda RBX: 00007f0066e16080 RCX: 00007f0066bee169 [ 397.077696][T21814] RDX: 0000000000000040 RSI: 0000000000000029 RDI: 000000000000000c [ 397.077729][T21814] RBP: 00007f0065236090 R08: 0000000000000518 R09: 0000000000000000 [ 397.077744][T21814] R10: 0000200000000b40 R11: 0000000000000246 R12: 0000000000000001 [ 397.077759][T21814] R13: 0000000000000000 R14: 00007f0066e16080 R15: 00007fff40b93998 [ 397.077782][T21814] [ 397.520857][ T1670] bridge_slave_1: left allmulticast mode [ 397.526635][ T1670] bridge_slave_1: left promiscuous mode [ 397.532360][ T1670] bridge0: port 2(bridge_slave_1) entered disabled state [ 397.578399][T21824] loop2: detected capacity change from 0 to 512 [ 397.593421][ T1670] bridge_slave_0: left allmulticast mode [ 397.599119][ T1670] bridge_slave_0: left promiscuous mode [ 397.604955][ T1670] bridge0: port 1(bridge_slave_0) entered disabled state [ 397.622948][T21824] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 397.664497][T21831] loop6: detected capacity change from 0 to 128 [ 397.671906][T21824] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 397.690963][ T1670] bond1 (unregistering): (slave gretap1): Releasing active interface [ 397.713789][T21824] ext4 filesystem being mounted at /590/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 397.754388][ T1670] bridge0 (unregistering): left promiscuous mode [ 397.765911][ T29] audit: type=1400 audit(1745408367.565:14155): avc: denied { write } for pid=21823 comm="syz.2.5907" name="/" dev="loop2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 397.787954][ T29] audit: type=1400 audit(1745408367.565:14156): avc: denied { add_name } for pid=21823 comm="syz.2.5907" name="file1" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 397.808938][ T29] audit: type=1400 audit(1745408367.565:14157): avc: denied { create } for pid=21823 comm="syz.2.5907" name="file1" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 397.858651][T12276] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 397.905758][ T1670] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 397.916608][ T1670] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 397.940020][ T1670] bond0 (unregistering): Released all slaves [ 397.977842][ T1670] bond1 (unregistering): Released all slaves [ 398.070464][T21832] team0 (unregistering): Port device team_slave_0 removed [ 398.121500][T21832] team0 (unregistering): Port device team_slave_1 removed [ 398.150375][ T1670] tipc: Left network mode [ 398.169302][T21802] lo speed is unknown, defaulting to 1000 [ 398.219134][ T1670] batadv0: left promiscuous mode [ 398.232770][ T1670] hsr_slave_0: left promiscuous mode [ 398.243606][ T1670] hsr_slave_1: left promiscuous mode [ 398.249339][ T1670] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 398.265137][ T1670] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 398.278215][ T1670] batman_adv: batadv0: Removing interface: macsec0 [ 398.445218][T21802] chnl_net:caif_netlink_parms(): no params data found [ 398.531527][T21802] bridge0: port 1(bridge_slave_0) entered blocking state [ 398.538902][T21802] bridge0: port 1(bridge_slave_0) entered disabled state [ 398.548736][T21802] bridge_slave_0: entered allmulticast mode [ 398.556026][T21802] bridge_slave_0: entered promiscuous mode [ 398.563206][T21802] bridge0: port 2(bridge_slave_1) entered blocking state [ 398.570281][T21802] bridge0: port 2(bridge_slave_1) entered disabled state [ 398.577700][T21802] bridge_slave_1: entered allmulticast mode [ 398.584242][T21802] bridge_slave_1: entered promiscuous mode [ 398.622299][T21802] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 398.623614][T21802] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 398.836582][T21866] loop2: detected capacity change from 0 to 512 [ 398.845125][T21866] EXT4-fs error (device loop2): ext4_iget_extra_inode:4693: inode #15: comm syz.2.5917: corrupted in-inode xattr: invalid ea_ino [ 398.861193][T21802] team0: Port device team_slave_0 added [ 398.863307][T21866] EXT4-fs error (device loop2): ext4_orphan_get:1395: comm syz.2.5917: couldn't read orphan inode 15 (err -117) [ 398.871188][T21802] team0: Port device team_slave_1 added [ 398.888374][T21866] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 398.930341][T21802] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 398.937546][T21802] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 398.963584][T21802] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 398.976431][T12276] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 398.986921][T21802] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 398.993971][T21802] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 399.020065][T21802] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 399.042656][T21871] SELinux: Context a is not valid (left unmapped). [ 399.056407][T21873] netlink: 12 bytes leftover after parsing attributes in process `syz.7.5920'. [ 399.080334][T21873] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:0c) already exists on: ipvlan2 [ 399.090337][T21873] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 399.103513][T21873] bridge0: port 3(vlan0) entered blocking state [ 399.109879][T21873] bridge0: port 3(vlan0) entered disabled state [ 399.129273][T21873] vlan0: entered allmulticast mode [ 399.131139][T21875] 9pnet_fd: p9_fd_create_unix (21875): problem connecting socket: ./file1: -2 [ 399.134560][T21873] bridge0: entered allmulticast mode [ 399.155857][T21873] vlan0: left allmulticast mode [ 399.160757][T21873] bridge0: left allmulticast mode [ 399.179714][T21802] hsr_slave_0: entered promiscuous mode [ 399.188552][T21802] hsr_slave_1: entered promiscuous mode [ 399.196457][T21878] loop6: detected capacity change from 0 to 128 [ 399.204683][T21802] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 399.207141][T21880] 9pnet_fd: Insufficient options for proto=fd [ 399.220043][T21802] Cannot create hsr debugfs directory [ 399.365049][T21879] lo speed is unknown, defaulting to 1000 [ 399.569865][T21889] netlink: 4 bytes leftover after parsing attributes in process `syz.7.5924'. [ 399.709036][T21802] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 399.728578][T21802] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 399.758650][T21802] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 399.783710][T21802] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 399.885996][T21802] 8021q: adding VLAN 0 to HW filter on device bond0 [ 399.927396][T21802] 8021q: adding VLAN 0 to HW filter on device team0 [ 399.964413][ T4032] bridge0: port 1(bridge_slave_0) entered blocking state [ 399.971528][ T4032] bridge0: port 1(bridge_slave_0) entered forwarding state [ 400.000272][ T4032] bridge0: port 2(bridge_slave_1) entered blocking state [ 400.007451][ T4032] bridge0: port 2(bridge_slave_1) entered forwarding state [ 400.097236][T21901] xt_addrtype: ipv6 PROHIBIT (THROW, NAT ..) matching not supported [ 400.196547][T21910] x_tables: ip6_tables: icmp6 match: only valid for protocol 58 [ 400.210315][T21907] SELinux: syz.6.5931 (21907) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 400.225395][T21910] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 400.239956][T21802] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 400.247063][T21910] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 400.303634][T21899] netlink: 'syz.2.5928': attribute type 33 has an invalid length. [ 400.311513][T21899] netlink: 152 bytes leftover after parsing attributes in process `syz.2.5928'. [ 400.320995][T21899] SELinux: syz.2.5928 (21899) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 400.343672][T21899] loop2: detected capacity change from 0 to 2048 [ 400.350533][T21899] EXT4-fs: Ignoring removed bh option [ 400.373367][T21802] veth0_vlan: entered promiscuous mode [ 400.393228][T21802] veth1_vlan: entered promiscuous mode [ 400.400286][T21899] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 400.427806][T21802] veth0_macvtap: entered promiscuous mode [ 400.447254][T21802] veth1_macvtap: entered promiscuous mode [ 400.500632][T21802] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 400.511222][T21802] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 400.521091][T21802] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 400.531546][T21802] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 400.541389][T21802] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 400.552034][T21802] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 400.574397][T21802] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 400.586975][T21927] xt_addrtype: ipv6 PROHIBIT (THROW, NAT ..) matching not supported [ 400.605024][ T31] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 400.621584][T21802] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 400.632070][T21802] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 400.642011][T21802] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 400.652479][T21802] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 400.662362][T21802] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 400.662450][ T31] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 400.672794][T21802] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 400.695136][ T31] EXT4-fs (loop2): This should not happen!! Data will be lost [ 400.695136][ T31] [ 400.704882][ T31] EXT4-fs (loop2): Total free blocks count 0 [ 400.711047][ T31] EXT4-fs (loop2): Free/Dirty block details [ 400.717189][ T31] EXT4-fs (loop2): free_blocks=2415919104 [ 400.722935][ T31] EXT4-fs (loop2): dirty_blocks=2144 [ 400.728321][ T31] EXT4-fs (loop2): Block reservation details [ 400.734091][T21802] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 400.734463][ T31] EXT4-fs (loop2): i_reserved_data_blocks=134 [ 400.755238][T21802] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 400.764178][T21802] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 400.772904][T21802] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 400.781649][T21802] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 400.818427][ T31] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 18 with max blocks 2048 with error 28 [ 400.865521][T21938] loop4: detected capacity change from 0 to 128 [ 400.888706][T21938] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 400.926962][T21938] ext4 filesystem being mounted at /39/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 400.960997][T21949] loop2: detected capacity change from 0 to 128 [ 401.015913][T21950] x_tables: ip6_tables: icmp6 match: only valid for protocol 58 [ 401.047525][T21130] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 401.130051][ T31] bio_check_eod: 18633 callbacks suppressed [ 401.130068][ T31] kworker/u8:1: attempt to access beyond end of device [ 401.130068][ T31] loop2: rw=1, sector=153, nr_sectors = 8 limit=128 [ 401.157961][T21960] loop6: detected capacity change from 0 to 512 [ 401.171306][T21960] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 401.191690][T21960] EXT4-fs (loop6): 1 truncate cleaned up [ 401.205083][ T31] kworker/u8:1: attempt to access beyond end of device [ 401.205083][ T31] loop2: rw=1, sector=169, nr_sectors = 8 limit=128 [ 401.209228][T21960] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 401.255096][ T31] kworker/u8:1: attempt to access beyond end of device [ 401.255096][ T31] loop2: rw=1, sector=185, nr_sectors = 8 limit=128 [ 401.289051][ T31] kworker/u8:1: attempt to access beyond end of device [ 401.289051][ T31] loop2: rw=1, sector=201, nr_sectors = 8 limit=128 [ 401.302685][ T31] kworker/u8:1: attempt to access beyond end of device [ 401.302685][ T31] loop2: rw=1, sector=217, nr_sectors = 8 limit=128 [ 401.318120][ T31] kworker/u8:1: attempt to access beyond end of device [ 401.318120][ T31] loop2: rw=1, sector=233, nr_sectors = 8 limit=128 [ 401.331584][ T31] kworker/u8:1: attempt to access beyond end of device [ 401.331584][ T31] loop2: rw=1, sector=249, nr_sectors = 8 limit=128 [ 401.369178][ T31] kworker/u8:1: attempt to access beyond end of device [ 401.369178][ T31] loop2: rw=1, sector=265, nr_sectors = 8 limit=128 [ 401.414460][ T31] kworker/u8:1: attempt to access beyond end of device [ 401.414460][ T31] loop2: rw=1, sector=281, nr_sectors = 8 limit=128 [ 401.442042][T21982] loop4: detected capacity change from 0 to 128 [ 401.446309][ T31] kworker/u8:1: attempt to access beyond end of device [ 401.446309][ T31] loop2: rw=1, sector=297, nr_sectors = 8 limit=128 [ 401.468123][T21982] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 401.509481][T21982] ext4 filesystem being mounted at /43/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 401.631977][T21130] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 401.668875][T21991] loop4: detected capacity change from 0 to 128 [ 401.684228][T21989] x_tables: ip6_tables: icmp6 match: only valid for protocol 58 [ 401.801519][T17687] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 401.914090][ T29] kauditd_printk_skb: 113 callbacks suppressed [ 401.914107][ T29] audit: type=1400 audit(1745408371.715:14271): avc: denied { write } for pid=22000 comm="syz.6.5964" name="001" dev="devtmpfs" ino=171 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 402.063442][T22018] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 402.096758][T22018] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 402.126938][ T29] audit: type=1326 audit(1745408371.925:14272): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22028 comm="syz.4.5974" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f037896e169 code=0x7ffc0000 [ 402.136651][T22030] loop6: detected capacity change from 0 to 512 [ 402.150667][ T29] audit: type=1326 audit(1745408371.925:14273): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22028 comm="syz.4.5974" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f037896e169 code=0x7ffc0000 [ 402.162959][T22002] lo speed is unknown, defaulting to 1000 [ 402.186336][T22026] x_tables: ip6_tables: icmp6 match: only valid for protocol 58 [ 402.205639][ T29] audit: type=1326 audit(1745408372.005:14274): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22028 comm="syz.4.5974" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f037896e169 code=0x7ffc0000 [ 402.229369][ T29] audit: type=1326 audit(1745408372.005:14275): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22028 comm="syz.4.5974" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f037896e169 code=0x7ffc0000 [ 402.253092][ T29] audit: type=1326 audit(1745408372.005:14276): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22028 comm="syz.4.5974" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f037896e169 code=0x7ffc0000 [ 402.276763][ T29] audit: type=1326 audit(1745408372.005:14277): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22028 comm="syz.4.5974" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f037896e169 code=0x7ffc0000 [ 402.300337][ T29] audit: type=1326 audit(1745408372.005:14278): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22028 comm="syz.4.5974" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f037896e169 code=0x7ffc0000 [ 402.323999][ T29] audit: type=1326 audit(1745408372.005:14279): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22028 comm="syz.4.5974" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f037896e169 code=0x7ffc0000 [ 402.327060][T22030] EXT4-fs error (device loop6): ext4_iget_extra_inode:4693: inode #15: comm syz.6.5973: corrupted in-inode xattr: invalid ea_ino [ 402.374520][ T29] audit: type=1326 audit(1745408372.005:14280): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22028 comm="syz.4.5974" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7f037896e169 code=0x7ffc0000 [ 402.403959][ T4032] bridge_slave_1: left allmulticast mode [ 402.409643][ T4032] bridge_slave_1: left promiscuous mode [ 402.415420][ T4032] bridge0: port 2(bridge_slave_1) entered disabled state [ 402.422941][T22030] EXT4-fs error (device loop6): ext4_orphan_get:1395: comm syz.6.5973: couldn't read orphan inode 15 (err -117) [ 402.437309][ T4032] bridge_slave_0: left allmulticast mode [ 402.443058][ T4032] bridge_slave_0: left promiscuous mode [ 402.448779][ T4032] bridge0: port 1(bridge_slave_0) entered disabled state [ 402.456629][T22030] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 402.482870][T17687] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 402.525709][ T4032] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 402.538714][ T4032] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 402.550398][ T4032] bond0 (unregistering): Released all slaves [ 402.565542][T22002] chnl_net:caif_netlink_parms(): no params data found [ 402.575705][T22043] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 402.615448][ T4032] tipc: Disabling bearer [ 402.620449][ T4032] tipc: Left network mode [ 402.718823][T22002] bridge0: port 1(bridge_slave_0) entered blocking state [ 402.726061][T22002] bridge0: port 1(bridge_slave_0) entered disabled state [ 402.739170][T22002] bridge_slave_0: entered allmulticast mode [ 402.753635][T22002] bridge_slave_0: entered promiscuous mode [ 402.797515][ T4032] hsr_slave_0: left promiscuous mode [ 402.813054][ T4032] hsr_slave_1: left promiscuous mode [ 402.818695][T22044] 9pnet: Could not find request transport: f(e 80x0000000000000003 [ 402.922834][T22066] x_tables: ip6_tables: icmp6 match: only valid for protocol 58 [ 402.940576][ T4194] smc: removing ib device syz! [ 403.034851][T22070] 9pnet_fd: p9_fd_create_unix (22070): problem connecting socket: ./file1: -2 [ 403.073070][T22002] bridge0: port 2(bridge_slave_1) entered blocking state [ 403.080178][T22002] bridge0: port 2(bridge_slave_1) entered disabled state [ 403.130168][T22002] bridge_slave_1: entered allmulticast mode [ 403.142863][T22070] 9pnet_fd: Insufficient options for proto=fd [ 403.162451][T22002] bridge_slave_1: entered promiscuous mode [ 403.187510][ T3368] lo speed is unknown, defaulting to 1000 [ 403.193536][ T3368] infiniband syz0: ib_query_port failed (-19) [ 403.319830][T22002] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 403.357240][T22002] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 403.395766][T22002] team0: Port device team_slave_0 added [ 403.402837][T22002] team0: Port device team_slave_1 added [ 403.434776][T22002] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 403.441806][T22002] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 403.467932][T22002] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 403.506216][T22002] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 403.513289][T22002] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 403.539397][T22002] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 403.592545][T22086] loop4: detected capacity change from 0 to 1024 [ 403.609658][ T4032] IPVS: stop unused estimator thread 0... [ 403.615902][T22086] EXT4-fs: Ignoring removed orlov option [ 403.639313][T22086] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 403.673828][T22002] hsr_slave_0: entered promiscuous mode [ 403.707962][T22002] hsr_slave_1: entered promiscuous mode [ 403.741501][T22002] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 403.749325][T22002] Cannot create hsr debugfs directory [ 403.922183][T22102] x_tables: ip6_tables: icmp6 match: only valid for protocol 58 [ 404.076969][T22114] netlink: 52 bytes leftover after parsing attributes in process `syz.1.6003'. [ 404.098357][T22111] netlink: 'syz.6.6002': attribute type 4 has an invalid length. [ 404.120094][T22002] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 404.141862][T22002] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 404.162902][T22002] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 404.186751][T22120] loop6: detected capacity change from 0 to 128 [ 404.195511][T22120] EXT4-fs (loop6): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 404.196503][T22002] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 404.214738][T22120] ext4 filesystem being mounted at /291/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 404.271115][T22002] 8021q: adding VLAN 0 to HW filter on device bond0 [ 404.302619][T22002] 8021q: adding VLAN 0 to HW filter on device team0 [ 404.317477][T17687] EXT4-fs (loop6): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 404.341345][ T4201] bridge0: port 1(bridge_slave_0) entered blocking state [ 404.348477][ T4201] bridge0: port 1(bridge_slave_0) entered forwarding state [ 404.360819][ T4201] bridge0: port 2(bridge_slave_1) entered blocking state [ 404.367997][ T4201] bridge0: port 2(bridge_slave_1) entered forwarding state [ 404.395308][T22127] bond1: entered promiscuous mode [ 404.400461][T22127] bond1: entered allmulticast mode [ 404.406736][T22127] 8021q: adding VLAN 0 to HW filter on device bond1 [ 404.410117][T21130] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 404.428208][T22127] bond1 (unregistering): Released all slaves [ 404.557893][T22148] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 404.583143][T22148] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 404.604158][T22002] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 404.749552][T22002] veth0_vlan: entered promiscuous mode [ 404.780303][T22002] veth1_vlan: entered promiscuous mode [ 404.813828][T22161] netlink: 'syz.7.6017': attribute type 4 has an invalid length. [ 404.839500][T22002] veth0_macvtap: entered promiscuous mode [ 404.884202][T22002] veth1_macvtap: entered promiscuous mode [ 404.924362][T22002] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 404.934367][T22167] loop6: detected capacity change from 0 to 1024 [ 404.934852][T22002] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 404.941453][T22167] EXT4-fs: Ignoring removed orlov option [ 404.951030][T22002] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 404.967161][T22002] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 404.977091][T22002] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 404.987564][T22002] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 404.997544][T22002] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 405.008005][T22002] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 405.010268][T22167] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 405.031399][T22002] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 405.052300][T22002] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 405.062835][T22002] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 405.072907][T22002] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 405.083430][T22002] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 405.093555][T22002] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 405.104011][T22002] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 405.114018][T22002] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 405.124508][T22002] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 405.139365][T22002] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 405.163063][T22174] netlink: 52 bytes leftover after parsing attributes in process `syz.7.6023'. [ 405.174533][T17687] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 405.188937][T22002] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 405.197722][T22002] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 405.206706][T22002] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 405.215483][T22002] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 405.239463][T22181] loop6: detected capacity change from 0 to 512 [ 405.288753][T22181] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 405.336943][T22181] EXT4-fs (loop6): 1 truncate cleaned up [ 405.343285][T22181] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 405.389198][T22188] netlink: 'syz.4.6027': attribute type 33 has an invalid length. [ 405.397217][T22188] netlink: 152 bytes leftover after parsing attributes in process `syz.4.6027'. [ 405.418279][T22188] loop4: detected capacity change from 0 to 2048 [ 405.425620][T22188] EXT4-fs: Ignoring removed bh option [ 405.436983][T22197] loop2: detected capacity change from 0 to 128 [ 405.455008][T22197] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 405.492286][T22188] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 405.509298][T22197] ext4 filesystem being mounted at /2/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 405.626375][T22002] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 405.674903][T17687] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 405.738339][ T55] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 405.768863][ T55] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 405.774866][T22206] loop6: detected capacity change from 0 to 1024 [ 405.781465][ T55] EXT4-fs (loop4): This should not happen!! Data will be lost [ 405.781465][ T55] [ 405.797466][ T55] EXT4-fs (loop4): Total free blocks count 0 [ 405.798857][T22206] EXT4-fs: Ignoring removed orlov option [ 405.803548][ T55] EXT4-fs (loop4): Free/Dirty block details [ 405.803563][ T55] EXT4-fs (loop4): free_blocks=2415919104 [ 405.820838][ T55] EXT4-fs (loop4): dirty_blocks=544 [ 405.826128][ T55] EXT4-fs (loop4): Block reservation details [ 405.832127][ T55] EXT4-fs (loop4): i_reserved_data_blocks=34 [ 405.842095][ T4032] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 18 with max blocks 526 with error 28 [ 405.856910][T22206] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 405.910902][T22211] loop2: detected capacity change from 0 to 128 [ 406.253745][T17687] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 406.279719][T22232] netlink: 'syz.7.6043': attribute type 33 has an invalid length. [ 406.287772][T22232] netlink: 152 bytes leftover after parsing attributes in process `syz.7.6043'. [ 406.303485][ T4201] bio_check_eod: 214 callbacks suppressed [ 406.303499][ T4201] kworker/u8:13: attempt to access beyond end of device [ 406.303499][ T4201] loop2: rw=1, sector=153, nr_sectors = 8 limit=128 [ 406.344648][ T4201] kworker/u8:13: attempt to access beyond end of device [ 406.344648][ T4201] loop2: rw=1, sector=169, nr_sectors = 8 limit=128 [ 406.380446][ T4201] kworker/u8:13: attempt to access beyond end of device [ 406.380446][ T4201] loop2: rw=1, sector=185, nr_sectors = 8 limit=128 [ 406.399457][ T4201] kworker/u8:13: attempt to access beyond end of device [ 406.399457][ T4201] loop2: rw=1, sector=201, nr_sectors = 8 limit=128 [ 406.413040][ T4201] kworker/u8:13: attempt to access beyond end of device [ 406.413040][ T4201] loop2: rw=1, sector=217, nr_sectors = 8 limit=128 [ 406.446901][ T4201] kworker/u8:13: attempt to access beyond end of device [ 406.446901][ T4201] loop2: rw=1, sector=233, nr_sectors = 8 limit=128 [ 406.491356][ T4201] kworker/u8:13: attempt to access beyond end of device [ 406.491356][ T4201] loop2: rw=1, sector=249, nr_sectors = 8 limit=128 [ 406.515950][T22247] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 406.524666][ T4201] kworker/u8:13: attempt to access beyond end of device [ 406.524666][ T4201] loop2: rw=1, sector=265, nr_sectors = 8 limit=128 [ 406.538647][T22247] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 406.546667][ T4201] kworker/u8:13: attempt to access beyond end of device [ 406.546667][ T4201] loop2: rw=1, sector=281, nr_sectors = 8 limit=128 [ 406.562154][ T4201] kworker/u8:13: attempt to access beyond end of device [ 406.562154][ T4201] loop2: rw=1, sector=297, nr_sectors = 8 limit=128 [ 406.581053][T22249] smc: net device bond0 applied user defined pnetid SYZ2 [ 406.594483][T22249] smc: net device bond0 erased user defined pnetid SYZ2 [ 406.687752][T22269] netlink: 52 bytes leftover after parsing attributes in process `syz.2.6057'. [ 406.839472][T22290] x_tables: ip6_tables: icmp6 match: only valid for protocol 58 [ 406.876073][T22301] netlink: 80 bytes leftover after parsing attributes in process `syz.7.6065'. [ 406.998629][T22314] netlink: 20 bytes leftover after parsing attributes in process `syz.7.6070'. [ 407.271758][ T29] kauditd_printk_skb: 175 callbacks suppressed [ 407.271772][ T29] audit: type=1326 audit(1745408377.065:14454): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22332 comm="syz.4.6078" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f0378965127 code=0x7ffc0000 [ 407.301815][ T29] audit: type=1326 audit(1745408377.065:14455): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22332 comm="syz.4.6078" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f037890a359 code=0x7ffc0000 [ 407.325428][ T29] audit: type=1326 audit(1745408377.065:14456): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22332 comm="syz.4.6078" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f0378965127 code=0x7ffc0000 [ 407.349006][ T29] audit: type=1326 audit(1745408377.065:14457): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22332 comm="syz.4.6078" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f037890a359 code=0x7ffc0000 [ 407.372609][ T29] audit: type=1326 audit(1745408377.065:14458): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22332 comm="syz.4.6078" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f037896e169 code=0x7ffc0000 [ 407.396253][ T29] audit: type=1326 audit(1745408377.065:14459): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22332 comm="syz.4.6078" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f0378965127 code=0x7ffc0000 [ 407.419799][ T29] audit: type=1326 audit(1745408377.065:14460): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22332 comm="syz.4.6078" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f037890a359 code=0x7ffc0000 [ 407.443431][ T29] audit: type=1326 audit(1745408377.065:14461): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22332 comm="syz.4.6078" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f0378970087 code=0x7ffc0000 [ 407.466998][ T29] audit: type=1326 audit(1745408377.065:14462): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22332 comm="syz.4.6078" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f0378965127 code=0x7ffc0000 [ 407.490697][ T29] audit: type=1326 audit(1745408377.065:14463): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22332 comm="syz.4.6078" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f037890a359 code=0x7ffc0000 [ 407.559135][T22340] loop4: detected capacity change from 0 to 1024 [ 407.605045][T22344] loop6: detected capacity change from 0 to 512 [ 407.616306][T22340] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 407.646924][T22344] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 407.671828][T22344] EXT4-fs error (device loop6): xattr_find_entry:333: inode #15: comm syz.6.6083: corrupted xattr entries [ 407.683850][T22344] EXT4-fs (loop6): Remounting filesystem read-only [ 407.690438][T22344] EXT4-fs (loop6): 1 truncate cleaned up [ 407.697062][T22344] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 407.854734][T17687] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 407.865417][T22364] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6089'. [ 407.967174][T22372] loop6: detected capacity change from 0 to 1024 [ 407.987079][T22372] EXT4-fs: Ignoring removed oldalloc option [ 408.007152][T22372] EXT4-fs (loop6): stripe (3) is not aligned with cluster size (16), stripe is disabled [ 408.045420][T22372] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 408.102171][T17687] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 408.240846][T21130] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 408.402945][T22392] netlink: 'syz.7.6100': attribute type 10 has an invalid length. [ 408.425316][T22392] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 408.441333][T22394] net_ratelimit: 291 callbacks suppressed [ 408.441380][T22394] ip6_tunnel: non-ECT from fc00:0000:0000:0000:0000:0000:0000:0000 with DS=0x3 [ 408.460784][T22396] netlink: 12 bytes leftover after parsing attributes in process `syz.7.6102'. [ 408.519384][T22402] loop6: detected capacity change from 0 to 128 [ 408.522530][T22398] netlink: 52 bytes leftover after parsing attributes in process `syz.4.6103'. [ 408.537435][T22402] EXT4-fs (loop6): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 408.555142][T22402] ext4 filesystem being mounted at /314/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 408.657851][T22404] team0 (unregistering): Port device team_slave_0 removed [ 408.711503][T22404] team0 (unregistering): Port device team_slave_1 removed [ 408.779440][T17687] EXT4-fs (loop6): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 408.892596][T22416] netlink: 'syz.4.6109': attribute type 33 has an invalid length. [ 408.905619][T22416] SELinux: syz.4.6109 (22416) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 408.921158][T22429] SELinux: ebitmap: truncated map [ 408.927021][T22429] SELinux: failed to load policy [ 408.941431][T22416] loop4: detected capacity change from 0 to 2048 [ 408.950787][T22433] loop6: detected capacity change from 0 to 128 [ 408.958512][T22416] EXT4-fs: Ignoring removed bh option [ 408.965863][T22435] : renamed from vlan0 (while UP) [ 408.971685][T22433] EXT4-fs (loop6): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 409.009293][T22433] ext4 filesystem being mounted at /316/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 409.027783][T22416] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 409.114346][T17687] EXT4-fs (loop6): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 409.141643][T22444] FAULT_INJECTION: forcing a failure. [ 409.141643][T22444] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 409.154917][T22444] CPU: 0 UID: 0 PID: 22444 Comm: +}[@ Not tainted 6.15.0-rc3-syzkaller-00019-gbc3372351d0c #0 PREEMPT(voluntary) [ 409.154951][T22444] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 409.154967][T22444] Call Trace: [ 409.154981][T22444] [ 409.154988][T22444] dump_stack_lvl+0xf6/0x150 [ 409.155011][T22444] dump_stack+0x15/0x1a [ 409.155027][T22444] should_fail_ex+0x261/0x270 [ 409.155057][T22444] should_fail+0xb/0x10 [ 409.155082][T22444] should_fail_usercopy+0x1a/0x20 [ 409.155182][T22444] _copy_to_iter+0x24e/0xd10 [ 409.155217][T22444] ? down_read+0x173/0x4c0 [ 409.155265][T22444] copy_page_to_iter+0x171/0x2b0 [ 409.155293][T22444] process_vm_rw+0x572/0x840 [ 409.155356][T22444] ? ksys_write+0x180/0x1b0 [ 409.155438][T22444] __x64_sys_process_vm_readv+0x7a/0x90 [ 409.155490][T22444] x64_sys_call+0x26b7/0x2e10 [ 409.155518][T22444] do_syscall_64+0xc9/0x1a0 [ 409.155630][T22444] ? clear_bhb_loop+0x25/0x80 [ 409.155657][T22444] ? clear_bhb_loop+0x25/0x80 [ 409.155708][T22444] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 409.155728][T22444] RIP: 0033:0x7fba6889e169 [ 409.155743][T22444] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 409.155807][T22444] RSP: 002b:00007fba66f07038 EFLAGS: 00000246 ORIG_RAX: 0000000000000136 [ 409.155825][T22444] RAX: ffffffffffffffda RBX: 00007fba68ac5fa0 RCX: 00007fba6889e169 [ 409.155837][T22444] RDX: 0000000000000002 RSI: 0000200000008400 RDI: 0000000000000069 [ 409.155851][T22444] RBP: 00007fba66f07090 R08: 0000000000000286 R09: 0000000000000000 [ 409.155865][T22444] R10: 0000200000008640 R11: 0000000000000246 R12: 0000000000000001 [ 409.155879][T22444] R13: 0000000000000000 R14: 00007fba68ac5fa0 R15: 00007ffdd8d20768 [ 409.155901][T22444] [ 409.520088][ T31] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 409.537359][ T31] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 409.549682][ T31] EXT4-fs (loop4): This should not happen!! Data will be lost [ 409.549682][ T31] [ 409.559560][ T31] EXT4-fs (loop4): Total free blocks count 0 [ 409.565646][ T31] EXT4-fs (loop4): Free/Dirty block details [ 409.571547][ T31] EXT4-fs (loop4): free_blocks=2415919104 [ 409.577354][ T31] EXT4-fs (loop4): dirty_blocks=1728 [ 409.582665][ T31] EXT4-fs (loop4): Block reservation details [ 409.588727][ T31] EXT4-fs (loop4): i_reserved_data_blocks=108 [ 409.597808][ T31] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 18 with max blocks 1708 with error 28 [ 409.654949][T22464] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 409.687375][T22464] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 409.947491][T22476] loop6: detected capacity change from 0 to 4096 [ 409.971421][T22476] EXT4-fs: Ignoring removed oldalloc option [ 409.977561][T22476] EXT4-fs: inline encryption not supported [ 410.004777][T22476] ext4: Unknown parameter 'fsname' [ 410.083355][T22478] SELinux: Context system_u:object_r:ssh_keysign_exec_t:s0 is not valid (left unmapped). [ 410.134581][T22485] FAULT_INJECTION: forcing a failure. [ 410.134581][T22485] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 410.147691][T22485] CPU: 0 UID: 0 PID: 22485 Comm: syz.1.6136 Not tainted 6.15.0-rc3-syzkaller-00019-gbc3372351d0c #0 PREEMPT(voluntary) [ 410.147780][T22485] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 410.147795][T22485] Call Trace: [ 410.147803][T22485] [ 410.147812][T22485] dump_stack_lvl+0xf6/0x150 [ 410.147909][T22485] dump_stack+0x15/0x1a [ 410.147949][T22485] should_fail_ex+0x261/0x270 [ 410.147979][T22485] should_fail+0xb/0x10 [ 410.148005][T22485] should_fail_usercopy+0x1a/0x20 [ 410.148086][T22485] copy_page_from_iter_atomic+0x232/0xfa0 [ 410.148129][T22485] ? shmem_write_begin+0xa7/0x190 [ 410.148153][T22485] ? shmem_write_begin+0xdf/0x190 [ 410.148183][T22485] generic_perform_write+0x2d2/0x4b0 [ 410.148239][T22485] shmem_file_write_iter+0xc2/0xe0 [ 410.148271][T22485] vfs_write+0x79b/0x950 [ 410.148339][T22485] ? __pfx_shmem_file_write_iter+0x10/0x10 [ 410.148405][T22485] ksys_write+0xeb/0x1b0 [ 410.148428][T22485] __x64_sys_write+0x42/0x50 [ 410.148450][T22485] x64_sys_call+0x2a45/0x2e10 [ 410.148471][T22485] do_syscall_64+0xc9/0x1a0 [ 410.148506][T22485] ? clear_bhb_loop+0x25/0x80 [ 410.148532][T22485] ? clear_bhb_loop+0x25/0x80 [ 410.148558][T22485] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 410.148584][T22485] RIP: 0033:0x7fba6889e169 [ 410.148602][T22485] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 410.148625][T22485] RSP: 002b:00007fba66f07038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 410.148648][T22485] RAX: ffffffffffffffda RBX: 00007fba68ac5fa0 RCX: 00007fba6889e169 [ 410.148734][T22485] RDX: 0000000000032600 RSI: 0000200000000100 RDI: 0000000000000006 [ 410.148749][T22485] RBP: 00007fba66f07090 R08: 0000000000000000 R09: 0000000000000000 [ 410.148764][T22485] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 410.148778][T22485] R13: 0000000000000000 R14: 00007fba68ac5fa0 R15: 00007ffdd8d20768 [ 410.148801][T22485] [ 410.355758][T22489] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=35 sclass=netlink_route_socket pid=22489 comm=syz.7.6137 [ 410.410921][T22494] __nla_validate_parse: 2 callbacks suppressed [ 410.410941][T22494] netlink: 12 bytes leftover after parsing attributes in process `syz.6.6140'. [ 410.430998][T22494] loop6: detected capacity change from 0 to 512 [ 410.445134][T22494] EXT4-fs error (device loop6): ext4_iget_extra_inode:4693: inode #15: comm syz.6.6140: corrupted in-inode xattr: invalid ea_ino [ 410.461234][T22494] EXT4-fs error (device loop6): ext4_orphan_get:1395: comm syz.6.6140: couldn't read orphan inode 15 (err -117) [ 410.480229][T22494] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 410.502168][T22500] smc: net device bond0 applied user defined pnetid SYZ2 [ 410.518412][T17687] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 410.534863][T22500] smc: net device bond0 erased user defined pnetid SYZ2 [ 410.734683][T22523] x_tables: ip6_tables: icmp6 match: only valid for protocol 58 [ 410.759452][T22526] loop2: detected capacity change from 0 to 1024 [ 410.766395][T22526] EXT4-fs: Ignoring removed orlov option [ 410.776877][T22526] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 410.805812][T22510] loop6: detected capacity change from 0 to 2048 [ 410.817937][T22510] EXT4-fs: Ignoring removed bh option [ 410.831372][T22531] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6152'. [ 410.844784][T22531] loop4: detected capacity change from 0 to 512 [ 410.852197][T22510] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 410.871314][T22531] EXT4-fs error (device loop4): ext4_iget_extra_inode:4693: inode #15: comm syz.4.6152: corrupted in-inode xattr: invalid ea_ino [ 410.895252][T22531] EXT4-fs error (device loop4): ext4_orphan_get:1395: comm syz.4.6152: couldn't read orphan inode 15 (err -117) [ 410.918075][T22539] netlink: 'syz.1.6154': attribute type 13 has an invalid length. [ 410.935666][T22531] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 410.981720][T22002] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 411.022122][T21130] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 411.081427][T22551] loop4: detected capacity change from 0 to 128 [ 411.099163][T22551] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 411.124374][T22551] ext4 filesystem being mounted at /85/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 411.195581][ T4032] EXT4-fs error (device loop6): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 411.211718][ T4032] EXT4-fs (loop6): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 411.224571][ T4032] EXT4-fs (loop6): This should not happen!! Data will be lost [ 411.224571][ T4032] [ 411.234402][ T4032] EXT4-fs (loop6): Total free blocks count 0 [ 411.240418][ T4032] EXT4-fs (loop6): Free/Dirty block details [ 411.246381][ T4032] EXT4-fs (loop6): free_blocks=2415919104 [ 411.252135][ T4032] EXT4-fs (loop6): dirty_blocks=1872 [ 411.258127][ T4032] EXT4-fs (loop6): Block reservation details [ 411.264210][ T4032] EXT4-fs (loop6): i_reserved_data_blocks=117 [ 411.275593][ T4032] EXT4-fs (loop6): Delayed block allocation failed for inode 15 at logical offset 18 with max blocks 1850 with error 28 [ 411.342806][T21130] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 411.398011][T22563] loop4: detected capacity change from 0 to 512 [ 411.429556][T22563] EXT4-fs: dax option not supported [ 411.469816][T22563] loop4: detected capacity change from 0 to 512 [ 411.476486][T22565] x_tables: ip6_tables: icmp6 match: only valid for protocol 58 [ 411.494468][T22563] EXT4-fs: old and new quota format mixing [ 411.559906][T22579] netlink: 4 bytes leftover after parsing attributes in process `syz.7.6167'. [ 411.576281][T22580] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6162'. [ 411.624794][T22580] loop4: detected capacity change from 0 to 164 [ 411.631111][ T3533] IPVS: starting estimator thread 0... [ 411.644917][T22580] isofs_fill_super: get root inode failed [ 411.653379][T22587] netlink: 12 bytes leftover after parsing attributes in process `syz.6.6169'. [ 411.700274][T22587] loop6: detected capacity change from 0 to 512 [ 411.724394][T22585] IPVS: using max 2592 ests per chain, 129600 per kthread [ 411.740142][T22587] EXT4-fs error (device loop6): ext4_iget_extra_inode:4693: inode #15: comm syz.6.6169: corrupted in-inode xattr: invalid ea_ino [ 411.769207][T22587] EXT4-fs error (device loop6): ext4_orphan_get:1395: comm syz.6.6169: couldn't read orphan inode 15 (err -117) [ 411.812459][T22587] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 411.879384][T22587] EXT4-fs error (device loop6): htree_dirblock_to_tree:1082: inode #2: block 13: comm syz.6.6169: bad entry in directory: rec_len is smaller than minimal - offset=76, inode=0, rec_len=0, size=1024 fake=0 [ 411.969052][T22592] loop2: detected capacity change from 0 to 8192 [ 412.002257][T17687] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 412.033231][T22592] netlink: 24 bytes leftover after parsing attributes in process `syz.2.6170'. [ 412.333856][T22609] loop2: detected capacity change from 0 to 128 [ 412.346149][T22609] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 412.360404][T22607] loop6: detected capacity change from 0 to 1024 [ 412.384386][T22607] EXT4-fs: Ignoring removed orlov option [ 412.413834][T22609] ext4 filesystem being mounted at /23/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 412.426850][T22607] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 412.499332][T22611] team0 (unregistering): Port device team_slave_0 removed [ 412.545819][T22614] x_tables: ip6_tables: icmp6 match: only valid for protocol 58 [ 412.561894][T22611] team0 (unregistering): Port device team_slave_1 removed [ 412.574536][T22002] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 412.638287][T22618] loop2: detected capacity change from 0 to 512 [ 412.638637][ T29] kauditd_printk_skb: 349 callbacks suppressed [ 412.638654][ T29] audit: type=1400 audit(1745408382.435:14813): avc: denied { ioctl } for pid=22619 comm="syz.4.6178" path="/dev/rtc0" dev="devtmpfs" ino=244 ioctlcmd=0x7006 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 412.691258][T22618] EXT4-fs error (device loop2): ext4_iget_extra_inode:4693: inode #15: comm syz.2.6177: corrupted in-inode xattr: invalid ea_ino [ 412.704938][T22618] EXT4-fs error (device loop2): ext4_orphan_get:1395: comm syz.2.6177: couldn't read orphan inode 15 (err -117) [ 412.719476][T22618] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 412.913190][T22002] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 412.966296][ T29] audit: type=1326 audit(1745408382.765:14814): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22637 comm="syz.2.6185" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc65a39e169 code=0x7ffc0000 [ 412.990648][ T29] audit: type=1326 audit(1745408382.765:14815): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22637 comm="syz.2.6185" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc65a39e169 code=0x7ffc0000 [ 413.015097][ T29] audit: type=1326 audit(1745408382.765:14816): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22637 comm="syz.2.6185" exe="/root/syz-executor" sig=0 arch=c000003e syscall=194 compat=0 ip=0x7fc65a39e169 code=0x7ffc0000 [ 413.038747][ T29] audit: type=1326 audit(1745408382.765:14817): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22637 comm="syz.2.6185" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc65a39e169 code=0x7ffc0000 [ 413.063111][ T29] audit: type=1326 audit(1745408382.765:14818): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22637 comm="syz.2.6185" exe="/root/syz-executor" sig=0 arch=c000003e syscall=272 compat=0 ip=0x7fc65a39e169 code=0x7ffc0000 [ 413.086850][ T29] audit: type=1326 audit(1745408382.765:14819): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22637 comm="syz.2.6185" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc65a39e169 code=0x7ffc0000 [ 413.111664][ T29] audit: type=1326 audit(1745408382.905:14820): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22637 comm="syz.2.6185" exe="/root/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7fc65a39e169 code=0x7ffc0000 [ 413.136033][ T29] audit: type=1326 audit(1745408382.905:14821): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22637 comm="syz.2.6185" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc65a39e169 code=0x7ffc0000 [ 413.159680][ T29] audit: type=1326 audit(1745408382.905:14822): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22637 comm="syz.2.6185" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc65a39e169 code=0x7ffc0000 [ 413.242357][T17687] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 413.301862][T22655] loop6: detected capacity change from 0 to 512 [ 413.309813][T22655] EXT4-fs: dax option not supported [ 413.321115][T22655] loop6: detected capacity change from 0 to 512 [ 413.329169][T22655] EXT4-fs: old and new quota format mixing [ 413.406913][T22660] netlink: 8 bytes leftover after parsing attributes in process `syz.6.6192'. [ 413.437550][ T1036] IPVS: starting estimator thread 0... [ 413.447004][T22660] loop6: detected capacity change from 0 to 164 [ 413.467740][T22660] isofs_fill_super: get root inode failed [ 413.533158][T22662] IPVS: using max 2448 ests per chain, 122400 per kthread [ 413.614874][T22666] FAULT_INJECTION: forcing a failure. [ 413.614874][T22666] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 413.628266][T22666] CPU: 0 UID: 0 PID: 22666 Comm: wޣ Not tainted 6.15.0-rc3-syzkaller-00019-gbc3372351d0c #0 PREEMPT(voluntary) [ 413.628343][T22666] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 413.628358][T22666] Call Trace: [ 413.628420][T22666] [ 413.628428][T22666] dump_stack_lvl+0xf6/0x150 [ 413.628457][T22666] dump_stack+0x15/0x1a [ 413.628477][T22666] should_fail_ex+0x261/0x270 [ 413.628545][T22666] should_fail+0xb/0x10 [ 413.628563][T22666] should_fail_usercopy+0x1a/0x20 [ 413.628591][T22666] copy_fpstate_to_sigframe+0x65d/0x7f0 [ 413.628630][T22666] ? copy_fpstate_to_sigframe+0xed/0x7f0 [ 413.628730][T22666] ? fpu__alloc_mathframe+0x95/0xd0 [ 413.628808][T22666] get_sigframe+0x308/0x440 [ 413.628843][T22666] x64_setup_rt_frame+0xb4/0x5a0 [ 413.628885][T22666] arch_do_signal_or_restart+0x279/0x480 [ 413.628964][T22666] syscall_exit_to_user_mode+0x62/0x120 [ 413.628993][T22666] do_syscall_64+0xd6/0x1a0 [ 413.629023][T22666] ? clear_bhb_loop+0x25/0x80 [ 413.629045][T22666] ? clear_bhb_loop+0x25/0x80 [ 413.629065][T22666] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 413.629132][T22666] RIP: 0033:0x7f0066bee167 [ 413.629149][T22666] Code: ff ff ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 <0f> 05 48 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 [ 413.629166][T22666] RSP: 002b:00007f0065257038 EFLAGS: 00000246 ORIG_RAX: 00000000000001c1 [ 413.629184][T22666] RAX: 00000000000001c1 RBX: 00007f0066e15fa0 RCX: 00007f0066bee169 [ 413.629231][T22666] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000200000001080 [ 413.629245][T22666] RBP: 00007f0065257090 R08: 0000000000000001 R09: 0000000000000000 [ 413.629259][T22666] R10: 0000200000001100 R11: 0000000000000246 R12: 0000000000000002 [ 413.629272][T22666] R13: 0000000000000000 R14: 00007f0066e15fa0 R15: 00007fff40b93998 [ 413.629294][T22666] [ 413.947592][T22670] loop6: detected capacity change from 0 to 512 [ 413.971292][T22670] EXT4-fs error (device loop6): ext4_iget_extra_inode:4693: inode #15: comm syz.6.6196: corrupted in-inode xattr: invalid ea_ino [ 413.988673][T22670] EXT4-fs error (device loop6): ext4_orphan_get:1395: comm syz.6.6196: couldn't read orphan inode 15 (err -117) [ 414.005376][T22670] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 414.072888][T17687] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 414.119826][T22686] loop6: detected capacity change from 0 to 1024 [ 414.147831][T22686] EXT4-fs: Ignoring removed orlov option [ 414.194912][T22686] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 414.208631][T22694] loop2: detected capacity change from 0 to 128 [ 414.539901][ T4194] bio_check_eod: 102 callbacks suppressed [ 414.540025][ T4194] kworker/u8:11: attempt to access beyond end of device [ 414.540025][ T4194] loop2: rw=1, sector=153, nr_sectors = 8 limit=128 [ 414.591739][T22706] netlink: 24 bytes leftover after parsing attributes in process `syz.1.6209'. [ 414.605322][ T4194] kworker/u8:11: attempt to access beyond end of device [ 414.605322][ T4194] loop2: rw=1, sector=169, nr_sectors = 8 limit=128 [ 414.639473][ T4194] kworker/u8:11: attempt to access beyond end of device [ 414.639473][ T4194] loop2: rw=1, sector=185, nr_sectors = 8 limit=128 [ 414.683049][ T4194] kworker/u8:11: attempt to access beyond end of device [ 414.683049][ T4194] loop2: rw=1, sector=201, nr_sectors = 8 limit=128 [ 414.768354][ T4194] kworker/u8:11: attempt to access beyond end of device [ 414.768354][ T4194] loop2: rw=1, sector=217, nr_sectors = 8 limit=128 [ 414.789255][ T4194] kworker/u8:11: attempt to access beyond end of device [ 414.789255][ T4194] loop2: rw=1, sector=233, nr_sectors = 8 limit=128 [ 414.829571][ T4194] kworker/u8:11: attempt to access beyond end of device [ 414.829571][ T4194] loop2: rw=1, sector=249, nr_sectors = 8 limit=128 [ 414.850903][ T4194] kworker/u8:11: attempt to access beyond end of device [ 414.850903][ T4194] loop2: rw=1, sector=265, nr_sectors = 8 limit=128 [ 414.870648][ T4194] kworker/u8:11: attempt to access beyond end of device [ 414.870648][ T4194] loop2: rw=1, sector=281, nr_sectors = 8 limit=128 [ 414.875023][T22711] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 414.932035][ T4194] kworker/u8:11: attempt to access beyond end of device [ 414.932035][ T4194] loop2: rw=1, sector=297, nr_sectors = 8 limit=128 [ 414.935519][T22711] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 414.991692][T17687] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 415.044554][T22715] loop6: detected capacity change from 0 to 128 [ 415.062342][T22715] EXT4-fs (loop6): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 415.118724][T22715] ext4 filesystem being mounted at /338/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 415.262691][T17687] EXT4-fs (loop6): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 415.622928][T22750] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6226'. [ 415.796591][T22745] loop4: detected capacity change from 0 to 2048 [ 415.813859][T22745] EXT4-fs: Ignoring removed bh option [ 415.852773][T22745] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 416.215006][T22772] x_tables: ip6_tables: icmp6 match: only valid for protocol 58 [ 416.325913][ T4194] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 416.391058][ T4194] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 416.403341][ T4194] EXT4-fs (loop4): This should not happen!! Data will be lost [ 416.403341][ T4194] [ 416.413021][ T4194] EXT4-fs (loop4): Total free blocks count 0 [ 416.419103][ T4194] EXT4-fs (loop4): Free/Dirty block details [ 416.425045][ T4194] EXT4-fs (loop4): free_blocks=2415919104 [ 416.430783][ T4194] EXT4-fs (loop4): dirty_blocks=1088 [ 416.436631][ T4194] EXT4-fs (loop4): Block reservation details [ 416.442630][ T4194] EXT4-fs (loop4): i_reserved_data_blocks=68 [ 416.565447][T22779] infiniband srz1: RDMA CMA: cma_listen_on_dev, error -98 [ 416.605147][ T4194] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 18 with max blocks 1068 with error 28 [ 416.748905][T22785] loop4: detected capacity change from 0 to 128 [ 416.825555][T22785] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 416.868328][T22785] ext4 filesystem being mounted at /99/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 416.904673][T22790] bond1: entered promiscuous mode [ 416.909774][T22790] bond1: entered allmulticast mode [ 416.951019][T22790] 8021q: adding VLAN 0 to HW filter on device bond1 [ 416.960268][T21130] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 416.985250][T22790] bond1 (unregistering): Released all slaves [ 417.031862][T22796] tipc: Started in network mode [ 417.036846][T22796] tipc: Node identity d1, cluster identity 4711 [ 417.043301][T22796] tipc: Node number set to 209 [ 417.054795][T22796] tipc: Cannot configure node identity twice [ 417.193549][T22798] loop2: detected capacity change from 0 to 2048 [ 417.199192][T22815] netlink: 256 bytes leftover after parsing attributes in process `syz.4.6247'. [ 417.202588][T22798] EXT4-fs: Ignoring removed bh option [ 417.256738][T22798] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 417.447271][ T31] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 417.481895][ T31] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 417.494830][ T31] EXT4-fs (loop2): This should not happen!! Data will be lost [ 417.494830][ T31] [ 417.504527][ T31] EXT4-fs (loop2): Total free blocks count 0 [ 417.510578][ T31] EXT4-fs (loop2): Free/Dirty block details [ 417.516675][ T31] EXT4-fs (loop2): free_blocks=2415919104 [ 417.522518][ T31] EXT4-fs (loop2): dirty_blocks=784 [ 417.522531][T22830] x_tables: ip6_tables: icmp6 match: only valid for protocol 58 [ 417.528497][ T31] EXT4-fs (loop2): Block reservation details [ 417.541435][ T31] EXT4-fs (loop2): i_reserved_data_blocks=49 [ 417.579547][T22833] SELinux: failed to load policy [ 417.588584][T22833] loop6: detected capacity change from 0 to 512 [ 417.597288][ T31] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 18 with max blocks 756 with error 28 [ 417.614519][T22833] EXT4-fs error (device loop6): ext4_ext_check_inode:524: inode #4: comm syz.6.6253: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 2, max 4(4), depth 0(0) [ 417.639358][T22837] loop4: detected capacity change from 0 to 128 [ 417.649512][T22833] EXT4-fs error (device loop6): ext4_quota_enable:7129: comm syz.6.6253: Bad quota inode: 4, type: 1 [ 417.691604][T22839] loop2: detected capacity change from 0 to 256 [ 417.699416][T22833] EXT4-fs warning (device loop6): ext4_enable_quotas:7170: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 417.729264][T22833] EXT4-fs (loop6): mount failed [ 417.738468][T22839] FAT-fs (loop2): Directory bread(block 64) failed [ 417.745169][T22833] loop6: detected capacity change from 0 to 128 [ 417.762606][T22833] EXT4-fs (loop6): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 417.773028][T22839] FAT-fs (loop2): Directory bread(block 65) failed [ 417.781570][T22839] FAT-fs (loop2): Directory bread(block 66) failed [ 417.790714][T22833] ext4 filesystem being mounted at /343/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 417.803000][T22839] FAT-fs (loop2): Directory bread(block 67) failed [ 417.873268][T22839] FAT-fs (loop2): Directory bread(block 68) failed [ 417.889923][T22839] FAT-fs (loop2): Directory bread(block 69) failed [ 417.913190][T22839] FAT-fs (loop2): Directory bread(block 70) failed [ 417.919904][T22839] FAT-fs (loop2): Directory bread(block 71) failed [ 417.928535][T17687] EXT4-fs (loop6): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 417.942350][T22839] FAT-fs (loop2): Directory bread(block 72) failed [ 417.956650][T22848] loop6: detected capacity change from 0 to 128 [ 417.973011][T22839] FAT-fs (loop2): Directory bread(block 73) failed [ 418.005675][T22851] loop4: detected capacity change from 0 to 512 [ 418.038425][T22851] EXT4-fs error (device loop4): ext4_iget_extra_inode:4693: inode #15: comm syz.4.6260: corrupted in-inode xattr: invalid ea_ino [ 418.088482][T22851] EXT4-fs error (device loop4): ext4_orphan_get:1395: comm syz.4.6260: couldn't read orphan inode 15 (err -117) [ 418.124469][T22851] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 418.232552][T21130] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 418.304721][T22861] loop4: detected capacity change from 0 to 128 [ 418.341667][T22861] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 418.408956][T22861] ext4 filesystem being mounted at /107/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 418.484621][T21130] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 418.567426][T22871] loop4: detected capacity change from 0 to 256 [ 418.591831][T22871] FAT-fs (loop4): Directory bread(block 64) failed [ 418.603421][T22871] FAT-fs (loop4): Directory bread(block 65) failed [ 418.620223][T22871] FAT-fs (loop4): Directory bread(block 66) failed [ 418.636193][T22871] FAT-fs (loop4): Directory bread(block 67) failed [ 418.651486][T22871] FAT-fs (loop4): Directory bread(block 68) failed [ 418.679175][T22871] FAT-fs (loop4): Directory bread(block 69) failed [ 418.687722][T22871] FAT-fs (loop4): Directory bread(block 70) failed [ 418.695791][T22871] FAT-fs (loop4): Directory bread(block 71) failed [ 418.712120][T22871] FAT-fs (loop4): Directory bread(block 72) failed [ 418.719493][T22871] FAT-fs (loop4): Directory bread(block 73) failed [ 418.738017][T22881] loop2: detected capacity change from 0 to 1024 [ 418.745657][T22881] EXT4-fs: Ignoring removed orlov option [ 418.929674][T22890] netlink: 4 bytes leftover after parsing attributes in process `syz.6.6273'. [ 418.938673][T22890] netlink: 4 bytes leftover after parsing attributes in process `syz.6.6273'. [ 418.952152][T22892] loop4: detected capacity change from 0 to 128 [ 418.967573][T22890] netlink: 4 bytes leftover after parsing attributes in process `syz.6.6273'. [ 418.977573][T22892] ext4 filesystem being mounted at /110/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 418.989789][T22896] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 419.000396][T22896] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 419.025867][ T29] kauditd_printk_skb: 2 callbacks suppressed [ 419.025884][ T29] audit: type=1400 audit(1745408388.825:14825): avc: denied { ioctl } for pid=22889 comm="syz.6.6273" path="/dev/input/event0" dev="devtmpfs" ino=242 ioctlcmd=0x5505 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 419.059112][T22890] netlink: 4 bytes leftover after parsing attributes in process `syz.6.6273'. [ 419.068317][T22890] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 419.076013][T22890] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 419.084901][T22890] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 419.092328][T22890] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 419.343361][T22913] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 419.352007][T22913] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 419.638552][T22917] loop2: detected capacity change from 0 to 256 [ 419.664251][T22917] FAT-fs (loop2): Directory bread(block 64) failed [ 419.681939][T22917] FAT-fs (loop2): Directory bread(block 65) failed [ 419.692047][T22917] FAT-fs (loop2): Directory bread(block 66) failed [ 419.707402][T22917] FAT-fs (loop2): Directory bread(block 67) failed [ 419.728814][T22917] FAT-fs (loop2): Directory bread(block 68) failed [ 419.757376][T22917] FAT-fs (loop2): Directory bread(block 69) failed [ 419.769692][ T29] audit: type=1326 audit(1745408389.565:14826): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22920 comm="syz.6.6286" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0066bee169 code=0x7ffc0000 [ 419.773475][T22917] FAT-fs (loop2): Directory bread(block 70) failed [ 419.794073][ T29] audit: type=1326 audit(1745408389.565:14827): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22920 comm="syz.6.6286" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0066bee169 code=0x7ffc0000 [ 419.813085][T22917] FAT-fs (loop2): Directory bread(block 71) failed [ 419.839380][T22917] FAT-fs (loop2): Directory bread(block 72) failed [ 419.848156][T22921] FAULT_INJECTION: forcing a failure. [ 419.848156][T22921] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 419.861258][T22921] CPU: 1 UID: 0 PID: 22921 Comm: syz.6.6286 Not tainted 6.15.0-rc3-syzkaller-00019-gbc3372351d0c #0 PREEMPT(voluntary) [ 419.861290][T22921] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 419.861339][T22921] Call Trace: [ 419.861411][T22921] [ 419.861420][T22921] dump_stack_lvl+0xf6/0x150 [ 419.861449][T22921] dump_stack+0x15/0x1a [ 419.861469][T22921] should_fail_ex+0x261/0x270 [ 419.861498][T22921] should_fail+0xb/0x10 [ 419.861523][T22921] should_fail_usercopy+0x1a/0x20 [ 419.861631][T22921] copy_page_from_iter_atomic+0x232/0xfa0 [ 419.861670][T22921] ? shmem_write_begin+0xa7/0x190 [ 419.861697][T22921] ? shmem_write_begin+0xdf/0x190 [ 419.861727][T22921] generic_perform_write+0x2d2/0x4b0 [ 419.861815][T22921] shmem_file_write_iter+0xc2/0xe0 [ 419.861850][T22921] do_iter_readv_writev+0x40d/0x4b0 [ 419.861880][T22921] vfs_writev+0x2da/0x880 [ 419.861906][T22921] ? __seccomp_filter+0x694/0x10e0 [ 419.861997][T22921] __se_sys_pwritev2+0x103/0x1d0 [ 419.862027][T22921] __x64_sys_pwritev2+0x78/0x90 [ 419.862054][T22921] x64_sys_call+0x1c86/0x2e10 [ 419.862076][T22921] do_syscall_64+0xc9/0x1a0 [ 419.862147][T22921] ? clear_bhb_loop+0x25/0x80 [ 419.862173][T22921] ? clear_bhb_loop+0x25/0x80 [ 419.862199][T22921] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 419.862224][T22921] RIP: 0033:0x7f0066bee169 [ 419.862242][T22921] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 419.862265][T22921] RSP: 002b:00007f0065257038 EFLAGS: 00000246 ORIG_RAX: 0000000000000148 [ 419.862378][T22921] RAX: ffffffffffffffda RBX: 00007f0066e15fa0 RCX: 00007f0066bee169 [ 419.862393][T22921] RDX: 0000000000000001 RSI: 0000200000000240 RDI: 0000000000000003 [ 419.862426][T22921] RBP: 00007f0065257090 R08: 0000000000000000 R09: 0000000000000003 [ 419.862441][T22921] R10: 0000000000007800 R11: 0000000000000246 R12: 0000000000000002 [ 419.862455][T22921] R13: 0000000000000000 R14: 00007f0066e15fa0 R15: 00007fff40b93998 [ 419.862477][T22921] [ 419.893081][ T29] audit: type=1326 audit(1745408389.625:14828): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22920 comm="syz.6.6286" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f0066bee169 code=0x7ffc0000 [ 419.896702][T22917] FAT-fs (loop2): Directory bread(block 73) failed [ 419.900702][ T29] audit: type=1326 audit(1745408389.625:14829): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22920 comm="syz.6.6286" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0066bee169 code=0x7ffc0000 [ 420.124256][ T29] audit: type=1326 audit(1745408389.625:14830): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22920 comm="syz.6.6286" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0066bee169 code=0x7ffc0000 [ 420.147933][ T29] audit: type=1326 audit(1745408389.635:14831): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22920 comm="syz.6.6286" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f0066bee169 code=0x7ffc0000 [ 420.172310][ T29] audit: type=1326 audit(1745408389.635:14832): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22920 comm="syz.6.6286" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0066bee169 code=0x7ffc0000 [ 420.196730][ T29] audit: type=1326 audit(1745408389.635:14833): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22920 comm="syz.6.6286" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0066bee169 code=0x7ffc0000 [ 420.220378][ T29] audit: type=1326 audit(1745408389.645:14834): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22920 comm="syz.6.6286" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f0066bee169 code=0x7ffc0000 [ 420.322816][T22931] loop4: detected capacity change from 0 to 512 [ 420.332782][T22931] ext4: Unknown parameter 'fowner' [ 420.369836][T22931] SELinux: policydb magic number 0x0 does not match expected magic number 0xf97cff8c [ 420.385085][T22931] SELinux: failed to load policy [ 420.405589][T22931] loop4: detected capacity change from 0 to 512 [ 420.446645][T22931] EXT4-fs error (device loop4): ext4_ext_check_inode:524: inode #4: comm syz.4.6291: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 2, max 4(4), depth 0(0) [ 420.466780][T22931] EXT4-fs error (device loop4): ext4_quota_enable:7129: comm syz.4.6291: Bad quota inode: 4, type: 1 [ 420.478042][T22931] EXT4-fs warning (device loop4): ext4_enable_quotas:7170: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 420.559643][T22931] EXT4-fs (loop4): mount failed [ 420.574975][T22956] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -2 [ 420.594772][T22931] loop4: detected capacity change from 0 to 128 [ 420.627207][T22931] ext4 filesystem being mounted at /117/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 420.695107][T22956] loop6: detected capacity change from 0 to 8192 [ 421.172177][T22997] Failed to initialize the IGMP autojoin socket (err -2) [ 421.459147][T23024] Failed to initialize the IGMP autojoin socket (err -2) [ 421.581457][T23031] siw: device registration error -23 [ 422.281305][T23054] loop2: detected capacity change from 0 to 256 [ 422.295868][T23054] FAT-fs (loop2): Directory bread(block 64) failed [ 422.302730][T23054] FAT-fs (loop2): Directory bread(block 65) failed [ 422.324415][T23054] FAT-fs (loop2): Directory bread(block 66) failed [ 422.331051][T23054] FAT-fs (loop2): Directory bread(block 67) failed [ 422.362337][T23054] FAT-fs (loop2): Directory bread(block 68) failed [ 422.370594][T23054] FAT-fs (loop2): Directory bread(block 69) failed [ 422.381112][T23054] FAT-fs (loop2): Directory bread(block 70) failed [ 422.390578][T23056] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 422.395390][T23054] FAT-fs (loop2): Directory bread(block 71) failed [ 422.405677][T23056] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 422.428729][T23054] FAT-fs (loop2): Directory bread(block 72) failed [ 422.436084][T23054] FAT-fs (loop2): Directory bread(block 73) failed [ 422.730899][T23079] hub 8-0:1.0: USB hub found [ 422.748581][T23079] hub 8-0:1.0: 8 ports detected [ 422.810725][T23089] loop4: detected capacity change from 0 to 1024 [ 422.839690][T23089] EXT4-fs: Ignoring removed orlov option [ 423.502203][T23116] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6353'. [ 423.727661][T23126] Failed to initialize the IGMP autojoin socket (err -2) [ 423.779709][T23132] loop2: detected capacity change from 0 to 256 [ 423.805495][T23132] FAT-fs (loop2): Directory bread(block 64) failed [ 423.812201][T23132] FAT-fs (loop2): Directory bread(block 65) failed [ 423.827216][T23132] FAT-fs (loop2): Directory bread(block 66) failed [ 423.835262][T23132] FAT-fs (loop2): Directory bread(block 67) failed [ 423.845479][T23133] siw: device registration error -23 [ 423.865250][T23132] FAT-fs (loop2): Directory bread(block 68) failed [ 423.872075][T23132] FAT-fs (loop2): Directory bread(block 69) failed [ 423.878811][T23132] FAT-fs (loop2): Directory bread(block 70) failed [ 423.886441][T23132] FAT-fs (loop2): Directory bread(block 71) failed [ 423.894427][T23132] FAT-fs (loop2): Directory bread(block 72) failed [ 423.911163][T23132] FAT-fs (loop2): Directory bread(block 73) failed [ 424.029655][T23155] Failed to initialize the IGMP autojoin socket (err -2) [ 424.056770][T23159] loop6: detected capacity change from 0 to 1024 [ 424.063573][T23159] EXT4-fs: Ignoring removed orlov option [ 424.079687][ T29] kauditd_printk_skb: 32 callbacks suppressed [ 424.079703][ T29] audit: type=1326 audit(1745408393.875:14867): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23145 comm="" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc65a39e169 code=0x7ffc0000 [ 424.109370][ T29] audit: type=1326 audit(1745408393.875:14868): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23145 comm="" exe="/root/syz-executor" sig=0 arch=c000003e syscall=86 compat=0 ip=0x7fc65a39e169 code=0x7ffc0000 [ 424.132765][ T29] audit: type=1326 audit(1745408393.875:14869): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23145 comm="" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc65a39e169 code=0x7ffc0000 [ 424.156187][ T29] audit: type=1326 audit(1745408393.875:14870): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23145 comm="" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7fc65a39e169 code=0x7ffc0000 [ 424.178851][ T29] audit: type=1326 audit(1745408393.875:14871): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23145 comm="" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc65a39e169 code=0x7ffc0000 [ 424.201590][ T29] audit: type=1326 audit(1745408393.875:14872): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23145 comm="" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc65a39e169 code=0x7ffc0000 [ 424.306175][ T29] audit: type=1400 audit(1745408394.105:14873): avc: denied { read } for pid=23166 comm="syz.1.6367" name="sg0" dev="devtmpfs" ino=135 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 424.330609][ T29] audit: type=1400 audit(1745408394.105:14874): avc: denied { open } for pid=23166 comm="syz.1.6367" path="/dev/sg0" dev="devtmpfs" ino=135 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 424.355660][T23170] sd 0:0:1:0: device reset [ 424.366944][ T29] audit: type=1400 audit(1745408394.155:14875): avc: denied { ioctl } for pid=23166 comm="syz.1.6367" path="/dev/sg0" dev="devtmpfs" ino=135 ioctlcmd=0x2284 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 424.393273][ T29] audit: type=1400 audit(1745408394.155:14876): avc: denied { write } for pid=23166 comm="syz.1.6367" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 424.706388][T23172] loop2: detected capacity change from 0 to 2048 [ 424.721105][T23172] EXT4-fs: Ignoring removed bh option [ 425.064154][T23190] loop6: detected capacity change from 0 to 736 [ 425.103429][T23190] rock: directory entry would overflow storage [ 425.109657][T23190] rock: sig=0x5850, size=36, remaining=14 [ 425.136014][ T55] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 425.151989][ T55] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 425.164849][ T55] EXT4-fs (loop2): This should not happen!! Data will be lost [ 425.164849][ T55] [ 425.174652][ T55] EXT4-fs (loop2): Total free blocks count 0 [ 425.180644][ T55] EXT4-fs (loop2): Free/Dirty block details [ 425.186574][ T55] EXT4-fs (loop2): free_blocks=2415919104 [ 425.192373][ T55] EXT4-fs (loop2): dirty_blocks=2416 [ 425.198385][ T55] EXT4-fs (loop2): Block reservation details [ 425.204419][ T55] EXT4-fs (loop2): i_reserved_data_blocks=151 [ 425.232382][ T31] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 18 with max blocks 2048 with error 28 [ 425.245013][ T31] EXT4-fs (loop2): This should not happen!! Data will be lost [ 425.245013][ T31] [ 425.430473][T23211] loop2: detected capacity change from 0 to 128 [ 425.524805][ T4194] bio_check_eod: 13269 callbacks suppressed [ 425.524820][ T4194] kworker/u8:11: attempt to access beyond end of device [ 425.524820][ T4194] loop2: rw=1, sector=153, nr_sectors = 8 limit=128 [ 425.545927][ T4194] kworker/u8:11: attempt to access beyond end of device [ 425.545927][ T4194] loop2: rw=1, sector=169, nr_sectors = 8 limit=128 [ 425.560713][ T4194] kworker/u8:11: attempt to access beyond end of device [ 425.560713][ T4194] loop2: rw=1, sector=185, nr_sectors = 8 limit=128 [ 425.575851][ T4194] kworker/u8:11: attempt to access beyond end of device [ 425.575851][ T4194] loop2: rw=1, sector=201, nr_sectors = 8 limit=128 [ 425.589502][ T4194] kworker/u8:11: attempt to access beyond end of device [ 425.589502][ T4194] loop2: rw=1, sector=217, nr_sectors = 8 limit=128 [ 425.605127][ T4194] kworker/u8:11: attempt to access beyond end of device [ 425.605127][ T4194] loop2: rw=1, sector=233, nr_sectors = 8 limit=128 [ 425.618746][ T4194] kworker/u8:11: attempt to access beyond end of device [ 425.618746][ T4194] loop2: rw=1, sector=249, nr_sectors = 8 limit=128 [ 425.633450][ T4194] kworker/u8:11: attempt to access beyond end of device [ 425.633450][ T4194] loop2: rw=1, sector=265, nr_sectors = 8 limit=128 [ 425.648469][ T4194] kworker/u8:11: attempt to access beyond end of device [ 425.648469][ T4194] loop2: rw=1, sector=281, nr_sectors = 8 limit=128 [ 425.663314][ T4194] kworker/u8:11: attempt to access beyond end of device [ 425.663314][ T4194] loop2: rw=1, sector=297, nr_sectors = 8 limit=128 [ 425.845175][T17687] rock: directory entry would overflow storage [ 425.851382][T17687] rock: sig=0x5850, size=36, remaining=14 [ 426.595932][T23269] sg_write: data in/out 209152/1 bytes for SCSI command 0xf2-- guessing data in; [ 426.595932][T23269] program syz.1.6405 not setting count and/or reply_len properly [ 426.785252][T23289] loop4: detected capacity change from 0 to 128 [ 426.889443][T23302] loop4: detected capacity change from 0 to 256 [ 426.955234][T23302] FAT-fs (loop4): Directory bread(block 64) failed [ 426.967786][T23302] FAT-fs (loop4): Directory bread(block 65) failed [ 426.985706][T23302] FAT-fs (loop4): Directory bread(block 66) failed [ 427.003912][T23302] FAT-fs (loop4): Directory bread(block 67) failed [ 427.031101][T23302] FAT-fs (loop4): Directory bread(block 68) failed [ 427.051149][T23302] FAT-fs (loop4): Directory bread(block 69) failed [ 427.065977][T23302] FAT-fs (loop4): Directory bread(block 70) failed [ 427.098387][T23302] FAT-fs (loop4): Directory bread(block 71) failed [ 427.114765][T23302] FAT-fs (loop4): Directory bread(block 72) failed [ 427.129872][T23302] FAT-fs (loop4): Directory bread(block 73) failed [ 427.478952][T23318] loop4: detected capacity change from 0 to 128 [ 427.491151][T23318] FAT-fs (loop4): bogus number of FAT structure [ 427.497566][T23318] FAT-fs (loop4): This doesn't look like a DOS 1.x volume; DOS 2.x BPB is non-zero [ 427.506980][T23318] FAT-fs (loop4): Can't find a valid FAT filesystem [ 427.612390][T23338] loop4: detected capacity change from 0 to 4096 [ 427.666319][T23333] netlink: 72 bytes leftover after parsing attributes in process `syz.1.6430'. [ 427.779634][T23338] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 427.788424][T23338] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 428.720055][T23386] netlink: 4 bytes leftover after parsing attributes in process `syz.7.6447'. [ 428.897766][T23408] blktrace: Concurrent blktraces are not allowed on loop5 [ 429.081754][T23419] loop2: detected capacity change from 0 to 128 [ 429.316669][T23425] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6463'. [ 429.530601][T23441] Failed to initialize the IGMP autojoin socket (err -2) [ 429.716460][T23449] hub 2-0:1.0: USB hub found [ 429.723465][T23449] hub 2-0:1.0: 8 ports detected [ 429.803780][T23449] Invalid logical block size (6) [ 429.809181][T23449] : renamed from vlan0 (while UP) [ 429.820213][T23449] netlink: 96 bytes leftover after parsing attributes in process `syz.4.6472'. [ 430.004776][ T29] kauditd_printk_skb: 89 callbacks suppressed [ 430.004794][ T29] audit: type=1400 audit(1745408399.805:14966): avc: denied { mount } for pid=23458 comm="syz.4.6476" name="/" dev="configfs" ino=220 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 430.063076][T23459] netlink: 'syz.4.6476': attribute type 12 has an invalid length. [ 430.121661][ T29] audit: type=1400 audit(1745408399.845:14967): avc: denied { search } for pid=23458 comm="syz.4.6476" name="/" dev="configfs" ino=220 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 430.144825][ T29] audit: type=1400 audit(1745408399.845:14968): avc: denied { mounton } for pid=23458 comm="syz.4.6476" path="/" dev="configfs" ino=220 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 430.144858][ T29] audit: type=1400 audit(1745408399.895:14969): avc: denied { unmount } for pid=21130 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 430.144913][ T29] audit: type=1400 audit(1745408399.895:14970): avc: denied { unmount } for pid=21130 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 430.174752][T23465] loop4: detected capacity change from 0 to 2048 [ 430.223688][ T29] audit: type=1326 audit(1745408400.015:14971): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23466 comm="syz.1.6479" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fba6889e169 code=0x0 [ 430.290330][ T29] audit: type=1326 audit(1745408400.085:14972): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23464 comm="syz.4.6480" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f037896e169 code=0x7ffc0000 [ 430.314904][ T29] audit: type=1326 audit(1745408400.085:14973): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23464 comm="syz.4.6480" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f037896e169 code=0x7ffc0000 [ 430.376457][ T29] audit: type=1326 audit(1745408400.135:14974): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23464 comm="syz.4.6480" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f037896e169 code=0x7ffc0000 [ 430.400796][ T29] audit: type=1326 audit(1745408400.135:14975): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23464 comm="syz.4.6480" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f037896e169 code=0x7ffc0000 [ 430.519408][T23492] FAULT_INJECTION: forcing a failure. [ 430.519408][T23492] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 430.533587][T23492] CPU: 0 UID: 0 PID: 23492 Comm: syz.6.6486 Not tainted 6.15.0-rc3-syzkaller-00019-gbc3372351d0c #0 PREEMPT(voluntary) [ 430.533616][T23492] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 430.533632][T23492] Call Trace: [ 430.533640][T23492] [ 430.533648][T23492] dump_stack_lvl+0xf6/0x150 [ 430.533735][T23492] dump_stack+0x15/0x1a [ 430.533756][T23492] should_fail_ex+0x261/0x270 [ 430.533787][T23492] should_fail_alloc_page+0xfd/0x110 [ 430.533815][T23492] __alloc_frozen_pages_noprof+0x11d/0x360 [ 430.533848][T23492] alloc_pages_mpol+0xb6/0x260 [ 430.533906][T23492] folio_alloc_mpol_noprof+0x36/0x80 [ 430.533943][T23492] shmem_get_folio_gfp+0x3c1/0xd30 [ 430.533992][T23492] shmem_write_begin+0xa7/0x190 [ 430.534023][T23492] generic_perform_write+0x189/0x4b0 [ 430.534055][T23492] shmem_file_write_iter+0xc2/0xe0 [ 430.534136][T23492] vfs_write+0x79b/0x950 [ 430.534158][T23492] ? __pfx_shmem_file_write_iter+0x10/0x10 [ 430.534244][T23492] ksys_write+0xeb/0x1b0 [ 430.534266][T23492] __x64_sys_write+0x42/0x50 [ 430.534363][T23492] x64_sys_call+0x2a45/0x2e10 [ 430.534388][T23492] do_syscall_64+0xc9/0x1a0 [ 430.534463][T23492] ? clear_bhb_loop+0x25/0x80 [ 430.534483][T23492] ? clear_bhb_loop+0x25/0x80 [ 430.534503][T23492] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 430.534521][T23492] RIP: 0033:0x7f0066becc1f [ 430.534535][T23492] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48 [ 430.534566][T23492] RSP: 002b:00007f0065256d40 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 430.534644][T23492] RAX: ffffffffffffffda RBX: 0000000000400000 RCX: 00007f0066becc1f [ 430.534656][T23492] RDX: 0000000000400000 RSI: 00007f005ce37000 RDI: 0000000000000007 [ 430.534667][T23492] RBP: 0000000000000000 R08: 0000000000000000 R09: 000000000000105a [ 430.534680][T23492] R10: 000000000000006a R11: 0000000000000293 R12: 0000000000000007 [ 430.534699][T23492] R13: 00007f0065256dec R14: 00007f0065256df0 R15: 00007f005ce37000 [ 430.534723][T23492] [ 430.891314][T23510] FAULT_INJECTION: forcing a failure. [ 430.891314][T23510] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 430.904430][T23510] CPU: 1 UID: 0 PID: 23510 Comm: syz.6.6492 Not tainted 6.15.0-rc3-syzkaller-00019-gbc3372351d0c #0 PREEMPT(voluntary) [ 430.904462][T23510] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 430.904476][T23510] Call Trace: [ 430.904484][T23510] [ 430.904528][T23510] dump_stack_lvl+0xf6/0x150 [ 430.904556][T23510] dump_stack+0x15/0x1a [ 430.904577][T23510] should_fail_ex+0x261/0x270 [ 430.904605][T23510] should_fail+0xb/0x10 [ 430.904624][T23510] should_fail_usercopy+0x1a/0x20 [ 430.904705][T23510] _copy_from_user+0x1c/0xa0 [ 430.904741][T23510] __sys_bpf+0x16a/0x800 [ 430.904861][T23510] __x64_sys_bpf+0x43/0x50 [ 430.904891][T23510] x64_sys_call+0x23da/0x2e10 [ 430.904915][T23510] do_syscall_64+0xc9/0x1a0 [ 430.905008][T23510] ? clear_bhb_loop+0x25/0x80 [ 430.905035][T23510] ? clear_bhb_loop+0x25/0x80 [ 430.905055][T23510] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 430.905074][T23510] RIP: 0033:0x7f0066bee169 [ 430.905089][T23510] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 430.905110][T23510] RSP: 002b:00007f0065257038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 430.905132][T23510] RAX: ffffffffffffffda RBX: 00007f0066e15fa0 RCX: 00007f0066bee169 [ 430.905189][T23510] RDX: 0000000000000094 RSI: 0000200000000280 RDI: 0000000000000005 [ 430.905203][T23510] RBP: 00007f0065257090 R08: 0000000000000000 R09: 0000000000000000 [ 430.905295][T23510] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 430.905307][T23510] R13: 0000000000000000 R14: 00007f0066e15fa0 R15: 00007fff40b93998 [ 430.905330][T23510] [ 431.118207][T23516] loop6: detected capacity change from 0 to 1024 [ 431.125257][T23516] EXT4-fs: Ignoring removed orlov option [ 431.208887][T23521] ================================================================== [ 431.217115][T23521] BUG: KCSAN: data-race in generic_buffers_fsync_noflush / writeback_single_inode [ 431.226341][T23521] [ 431.228677][T23521] write to 0xffff8881099ddc58 of 4 bytes by task 23516 on cpu 0: [ 431.236395][T23521] writeback_single_inode+0x14f/0x3f0 [ 431.241794][T23521] sync_inode_metadata+0x60/0x90 [ 431.246742][T23521] generic_buffers_fsync_noflush+0xd8/0x120 [ 431.252655][T23521] ext4_sync_file+0x1c3/0x6c0 [ 431.257341][T23521] vfs_fsync_range+0x116/0x130 [ 431.262110][T23521] ext4_buffered_write_iter+0x358/0x3c0 [ 431.267664][T23521] ext4_file_write_iter+0x3b2/0xf80 [ 431.272874][T23521] iter_file_splice_write+0x5f2/0x980 [ 431.278270][T23521] direct_splice_actor+0x160/0x2c0 [ 431.283398][T23521] splice_direct_to_actor+0x305/0x680 [ 431.288788][T23521] do_splice_direct+0xd9/0x150 [ 431.293566][T23521] do_sendfile+0x40a/0x690 [ 431.297997][T23521] __x64_sys_sendfile64+0x113/0x160 [ 431.303211][T23521] x64_sys_call+0xfc3/0x2e10 [ 431.307818][T23521] do_syscall_64+0xc9/0x1a0 [ 431.312330][T23521] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 431.318230][T23521] [ 431.320555][T23521] read to 0xffff8881099ddc58 of 4 bytes by task 23521 on cpu 1: [ 431.328185][T23521] generic_buffers_fsync_noflush+0x83/0x120 [ 431.334098][T23521] ext4_sync_file+0x1c3/0x6c0 [ 431.338783][T23521] vfs_fsync_range+0x116/0x130 [ 431.343551][T23521] ext4_buffered_write_iter+0x358/0x3c0 [ 431.349104][T23521] ext4_file_write_iter+0x3b2/0xf80 [ 431.354308][T23521] iter_file_splice_write+0x5f2/0x980 [ 431.359698][T23521] direct_splice_actor+0x160/0x2c0 [ 431.364824][T23521] splice_direct_to_actor+0x305/0x680 [ 431.370213][T23521] do_splice_direct+0xd9/0x150 [ 431.374992][T23521] do_sendfile+0x40a/0x690 [ 431.379417][T23521] __x64_sys_sendfile64+0x113/0x160 [ 431.384624][T23521] x64_sys_call+0xfc3/0x2e10 [ 431.389225][T23521] do_syscall_64+0xc9/0x1a0 [ 431.393741][T23521] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 431.399642][T23521] [ 431.401962][T23521] value changed: 0x00000038 -> 0x00000002 [ 431.407703][T23521] [ 431.410024][T23521] Reported by Kernel Concurrency Sanitizer on: [ 431.416176][T23521] CPU: 1 UID: 0 PID: 23521 Comm: syz.6.6495 Not tainted 6.15.0-rc3-syzkaller-00019-gbc3372351d0c #0 PREEMPT(voluntary) [ 431.428685][T23521] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 431.438744][T23521] ==================================================================